dependabot[bot]
02ec7e33f3
chore(deps): Bump react from 19.2.4 to 19.2.5
...
Bumps [react](https://github.com/facebook/react/tree/HEAD/packages/react ) from 19.2.4 to 19.2.5.
- [Release notes](https://github.com/facebook/react/releases )
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md )
- [Commits](https://github.com/facebook/react/commits/v19.2.5/packages/react )
---
updated-dependencies:
- dependency-name: react
dependency-version: 19.2.5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-06 13:56:20 +00:00
dependabot[bot]
a588f3e08c
chore(deps-dev): Bump stylelint from 17.9.1 to 17.10.0 ( #1863 )
...
Bumps [stylelint](https://github.com/stylelint/stylelint ) from 17.9.1 to
17.10.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/stylelint/stylelint/releases ">stylelint's
releases</a>.</em></p>
<blockquote>
<h2>17.10.0</h2>
<p>It adds 3 rules and fixes 4 bugs. You can use the
<code>*-layout-mappings</code> rules to enforce logical or physical
properties, units and keywords.</p>
<ul>
<li>Added: <code>selector-no-invalid</code> rule (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9232 ">#9232</a>)
(<a href="https://github.com/jeddy3 "><code>@jeddy3</code></a>).</li>
<li>Added: <code>unit-layout-mappings</code> rule (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9229 ">#9229</a>)
(<a href="https://github.com/jeddy3 "><code>@jeddy3</code></a>).</li>
<li>Added: <code>value-keyword-layout-mappings</code> rule (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9233 ">#9233</a>)
(<a href="https://github.com/jeddy3 "><code>@jeddy3</code></a>).</li>
<li>Fixed: inconsistent error messages when module is not found (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9260 ">#9260</a>)
(<a
href="https://github.com/ybiquitous "><code>@ybiquitous</code></a>).</li>
<li>Fixed: <code>property-layout-mappings</code> false negatives for
property names in declaration values (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9222 ">#9222</a>)
(<a href="https://github.com/jeddy3 "><code>@jeddy3</code></a>).</li>
<li>Fixed: <code>property-layout-mappings</code> false positives for
<code>@page</code> properties (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9223 ">#9223</a>)
(<a href="https://github.com/jeddy3 "><code>@jeddy3</code></a>).</li>
<li>Fixed: <code>selector-pseudo-class-no-unknown</code> false positives
for nested <code>webkit-scrollbar</code> part (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9259 ">#9259</a>)
(<a href="https://github.com/rkdfx "><code>@rkdfx</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/stylelint/stylelint/blob/main/CHANGELOG.md ">stylelint's
changelog</a>.</em></p>
<blockquote>
<h2>17.10.0 - 2026-05-03</h2>
<p>It adds 3 rules and fixes 4 bugs. You can use the
<code>*-layout-mappings</code> rules to enforce logical or physical
properties, units and keywords.</p>
<ul>
<li>Added: <code>selector-no-invalid</code> rule (<a
href="https://redirect.github.com/stylelint/stylelint/pull/9232 ">#9232</a>)
(<a href="https://github.com/jeddy3 "><code>@jeddy3</code></a>).</li>
<li>Added: <code>unit-layout-mappings</code> rule (<a
href="https://redirect.github.com/stylelint/stylelint/pull/9229 ">#9229</a>)
(<a href="https://github.com/jeddy3 "><code>@jeddy3</code></a>).</li>
<li>Added: <code>value-keyword-layout-mappings</code> rule (<a
href="https://redirect.github.com/stylelint/stylelint/pull/9233 ">#9233</a>)
(<a href="https://github.com/jeddy3 "><code>@jeddy3</code></a>).</li>
<li>Fixed: inconsistent error messages when module is not found (<a
href="https://redirect.github.com/stylelint/stylelint/pull/9260 ">#9260</a>)
(<a
href="https://github.com/ybiquitous "><code>@ybiquitous</code></a>).</li>
<li>Fixed: <code>property-layout-mappings</code> false negatives for
property names in declaration values (<a
href="https://redirect.github.com/stylelint/stylelint/pull/9222 ">#9222</a>)
(<a href="https://github.com/jeddy3 "><code>@jeddy3</code></a>).</li>
<li>Fixed: <code>property-layout-mappings</code> false positives for
<code>@page</code> properties (<a
href="https://redirect.github.com/stylelint/stylelint/pull/9223 ">#9223</a>)
(<a href="https://github.com/jeddy3 "><code>@jeddy3</code></a>).</li>
<li>Fixed: <code>selector-pseudo-class-no-unknown</code> false positives
for nested <code>webkit-scrollbar</code> part (<a
href="https://redirect.github.com/stylelint/stylelint/pull/9259 ">#9259</a>)
(<a href="https://github.com/rkdfx "><code>@rkdfx</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="b04c024a2chttps://redirect.github.com/stylelint/stylelint/issues/9261 ">#9261</a>)</li>
<li><a
href="7a38078c69b25cd12aa8https://redirect.github.com/stylelint/stylelint/issues/9233 ">#9233</a>)</li>
<li><a
href="da89ffec66https://redirect.github.com/stylelint/stylelint/issues/9260 ">#9260</a>)</li>
<li><a
href="04a958d885https://redirect.github.com/stylelint/stylelint/issues/9229 ">#9229</a>)</li>
<li><a
href="53da23e4dfhttps://redirect.github.com/stylelint/stylelint/issues/9249 ">#9249</a>)</li>
<li><a
href="399395105289b3f0d1c0https://redirect.github.com/stylelint/stylelint/issues/9257 ">#9257</a>)</li>
<li><a
href="6e5e4da1e2https://redirect.github.com/stylelint/stylelint/issues/9255 ">#9255</a>)</li>
<li><a
href="1540320c65https://redirect.github.com/stylelint/stylelint/issues/9254 ">#9254</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/stylelint/stylelint/compare/17.9.1...17.10.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-06 13:54:42 +00:00
dependabot[bot]
bea46c8ff9
chore(deps): Bump @maplibre/maplibre-gl-style-spec from 24.8.3 to 24.8.4 ( #1861 )
...
Bumps
[@maplibre/maplibre-gl-style-spec](https://github.com/maplibre/maplibre-style-spec )
from 24.8.3 to 24.8.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/maplibre/maplibre-style-spec/releases ">@maplibre/maplibre-gl-style-spec's
releases</a>.</em></p>
<blockquote>
<h2>v24.8.4</h2>
<h3>✨ Features and improvements</h3>
<h3>🐞 Bug fixes</h3>
<ul>
<li>Replace rw with node:fs. Resolves <a
href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1625 ">#1625</a>
(<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/pull/1635 ">#1635</a>)
(by <a
href="https://github.com/birkskyum "><code>@birkskyum</code></a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/maplibre/maplibre-style-spec/blob/main/CHANGELOG.md ">@maplibre/maplibre-gl-style-spec's
changelog</a>.</em></p>
<blockquote>
<h2>24.8.4</h2>
<h3>✨ Features and improvements</h3>
<h3>🐞 Bug fixes</h3>
<ul>
<li>Replace rw with node:fs. Resolves <a
href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1625 ">#1625</a>
(<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/pull/1635 ">#1635</a>)
(by <a
href="https://github.com/birkskyum "><code>@birkskyum</code></a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="d8de455c07https://redirect.github.com/maplibre/maplibre-style-spec/issues/1636 ">#1636</a>)</li>
<li><a
href="f3b9cca44fhttps://redirect.github.com/maplibre/maplibre-style-spec/issues/1635 ">#1635</a>)</li>
<li><a
href="c3d8059309https://redirect.github.com/maplibre/maplibre-style-spec/issues/1634 ">#1634</a>)</li>
<li><a
href="8e7724efb4https://redirect.github.com/maplibre/maplibre-style-spec/issues/1632 ">#1632</a>)</li>
<li><a
href="15d6c4cbfahttps://redirect.github.com/maplibre/maplibre-style-spec/issues/1629 ">#1629</a>)</li>
<li><a
href="530bf91d4ehttps://redirect.github.com/maplibre/maplibre-style-spec/issues/1631 ">#1631</a>)</li>
<li><a
href="fcca06cee0https://redirect.github.com/maplibre/maplibre-style-spec/issues/1630 ">#1630</a>)</li>
<li>See full diff in <a
href="https://github.com/maplibre/maplibre-style-spec/compare/v24.8.3...v24.8.4 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-05 13:54:05 +00:00
dependabot[bot]
bf99253391
chore(deps-dev): Bump eslint from 10.2.1 to 10.3.0 ( #1855 )
...
Bumps [eslint](https://github.com/eslint/eslint ) from 10.2.1 to 10.3.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/eslint/eslint/releases ">eslint's
releases</a>.</em></p>
<blockquote>
<h2>v10.3.0</h2>
<h2>Features</h2>
<ul>
<li><a
href="379571a975https://redirect.github.com/eslint/eslint/issues/20773 ">#20773</a>)
(sethamus)</li>
</ul>
<h2>Bug Fixes</h2>
<ul>
<li><a
href="b6ae5cf07bhttps://redirect.github.com/eslint/eslint/issues/20812 ">#20812</a>)
(Simon Podlipsky)</li>
<li><a
href="6fb3685bcbhttps://redirect.github.com/eslint/eslint/issues/20787 ">#20787</a>)
(Milos Djermanovic)</li>
</ul>
<h2>Documentation</h2>
<ul>
<li><a
href="32cc7ab4echttps://redirect.github.com/eslint/eslint/issues/20809 ">#20809</a>)
(Tanuj Kanti)</li>
<li><a
href="7f479376a2d32235ec19https://redirect.github.com/eslint/eslint/issues/20826 ">#20826</a>)
(Francesco Trotta)</li>
<li><a
href="3ffb14ea51https://redirect.github.com/eslint/eslint/issues/20821 ">#20821</a>)
(Pixel998)</li>
<li><a
href="22eb58a21chttps://redirect.github.com/eslint/eslint/issues/20818 ">#20818</a>)
(Josh Goldberg ✨ )</li>
<li><a
href="88bf0024cbhttps://redirect.github.com/eslint/eslint/issues/20815 ">#20815</a>)
(dependabot[bot])</li>
<li><a
href="97c8c330behttps://redirect.github.com/eslint/eslint/issues/20811 ">#20811</a>)
(renovate[bot])</li>
<li><a
href="2f58136dd4https://redirect.github.com/eslint/eslint/issues/20810 ">#20810</a>)
(renovate[bot])</li>
<li><a
href="77add7f1bchttps://redirect.github.com/eslint/eslint/issues/19643 ">#19643</a>)
(Josh Goldberg ✨ )</li>
<li><a
href="4023b55490https://redirect.github.com/eslint/eslint/issues/20797 ">#20797</a>)
(kuldeep kumar)</li>
<li><a
href="54080dad4fhttps://redirect.github.com/eslint/eslint/issues/20778 ">#20778</a>)
(kuldeep kumar)</li>
<li><a
href="f0e2bcc4bfhttps://redirect.github.com/eslint/eslint/issues/20765 ">#20765</a>)
(kuldeep kumar)</li>
<li><a
href="a7f0b94743https://redirect.github.com/eslint/eslint/issues/20782 ">#20782</a>)
(renovate[bot])</li>
<li><a
href="7bf93d9e79https://redirect.github.com/eslint/eslint/issues/20677 ">#20677</a>)
(sethamus)</li>
<li><a
href="b42dd72e76https://redirect.github.com/eslint/eslint/issues/20781 ">#20781</a>)
(dependabot[bot])</li>
<li><a
href="2b252be80fhttps://redirect.github.com/eslint/eslint/issues/20775 ">#20775</a>)
(kuldeep kumar)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="78892043a35b69b4fce4d32235ec19https://redirect.github.com/eslint/eslint/issues/20826 ">#20826</a>)</li>
<li><a
href="b6ae5cf07bhttps://redirect.github.com/eslint/eslint/issues/20812 ">#20812</a>)</li>
<li><a
href="3ffb14ea51https://redirect.github.com/eslint/eslint/issues/20821 ">#20821</a>)</li>
<li><a
href="6fb3685bcbhttps://redirect.github.com/eslint/eslint/issues/20787 ">#20787</a>)</li>
<li><a
href="22eb58a21chttps://redirect.github.com/eslint/eslint/issues/20818 ">#20818</a>)</li>
<li><a
href="88bf0024cbhttps://redirect.github.com/eslint/eslint/issues/20815 ">#20815</a>)</li>
<li><a
href="379571a975https://redirect.github.com/eslint/eslint/issues/20773 ">#20773</a>)</li>
<li><a
href="97c8c330behttps://redirect.github.com/eslint/eslint/issues/20811 ">#20811</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/eslint/eslint/compare/v10.2.1...v10.3.0 ">compare
view</a></li>
</ul>
</details>
<br />
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-04 17:56:58 +00:00
dependabot[bot]
077a2073eb
chore(deps): Bump github/codeql-action from 4.35.2 to 4.35.3 ( #1860 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action )
from 4.35.2 to 4.35.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases ">github/codeql-action's
releases</a>.</em></p>
<blockquote>
<h2>v4.35.3</h2>
<ul>
<li><em>Upcoming breaking change</em>: Add a deprecation warning for
customers using CodeQL version 2.19.3 and earlier. These versions of
CodeQL were discontinued on 9 April 2026 alongside GitHub Enterprise
Server 3.15, and will be unsupported by the next minor release of the
CodeQL Action. <a
href="https://redirect.github.com/github/codeql-action/pull/3837 ">#3837</a></li>
<li>Configurations for private registries that use Cloudsmith or GCP
OIDC are now accepted. <a
href="https://redirect.github.com/github/codeql-action/pull/3850 ">#3850</a></li>
<li>Best-effort connection tests for private registries now use
<code>GET</code> requests instead of <code>HEAD</code> for better
compatibility with various registry implementations. For NuGet feeds,
the test is now always performed against the service index. <a
href="https://redirect.github.com/github/codeql-action/pull/3853 ">#3853</a></li>
<li>Fixed a bug where two diagnostics produced within the same
millisecond could overwrite each other on disk, causing one of them to
be lost. <a
href="https://redirect.github.com/github/codeql-action/pull/3852 ">#3852</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.3 ">2.25.3</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3865 ">#3865</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md ">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases ">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>4.35.3 - 01 May 2026</h2>
<ul>
<li><em>Upcoming breaking change</em>: Add a deprecation warning for
customers using CodeQL version 2.19.3 and earlier. These versions of
CodeQL were discontinued on 9 April 2026 alongside GitHub Enterprise
Server 3.15, and will be unsupported by the next minor release of the
CodeQL Action. <a
href="https://redirect.github.com/github/codeql-action/pull/3837 ">#3837</a></li>
<li>Configurations for private registries that use Cloudsmith or GCP
OIDC are now accepted. <a
href="https://redirect.github.com/github/codeql-action/pull/3850 ">#3850</a></li>
<li>Best-effort connection tests for private registries now use
<code>GET</code> requests instead of <code>HEAD</code> for better
compatibility with various registry implementations. For NuGet feeds,
the test is now always performed against the service index. <a
href="https://redirect.github.com/github/codeql-action/pull/3853 ">#3853</a></li>
<li>Fixed a bug where two diagnostics produced within the same
millisecond could overwrite each other on disk, causing one of them to
be lost. <a
href="https://redirect.github.com/github/codeql-action/pull/3852 ">#3852</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.3 ">2.25.3</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3865 ">#3865</a></li>
</ul>
<h2>4.35.2 - 15 Apr 2026</h2>
<ul>
<li>The undocumented TRAP cache cleanup feature that could be enabled
using the <code>CODEQL_ACTION_CLEANUP_TRAP_CACHES</code> environment
variable is deprecated and will be removed in May 2026. If you are
affected by this, we recommend disabling TRAP caching by passing the
<code>trap-caching: false</code> input to the <code>init</code> Action.
<a
href="https://redirect.github.com/github/codeql-action/pull/3795 ">#3795</a></li>
<li>The Git version 2.36.0 requirement for improved incremental analysis
now only applies to repositories that contain submodules. <a
href="https://redirect.github.com/github/codeql-action/pull/3789 ">#3789</a></li>
<li>Python analysis on GHES no longer extracts the standard library,
relying instead on models of the standard library. This should result in
significantly faster extraction and analysis times, while the effect on
alerts should be minimal. <a
href="https://redirect.github.com/github/codeql-action/pull/3794 ">#3794</a></li>
<li>Fixed a bug in the validation of OIDC configurations for private
registries that was added in CodeQL Action 4.33.0 / 3.33.0. <a
href="https://redirect.github.com/github/codeql-action/pull/3807 ">#3807</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.2 ">2.25.2</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3823 ">#3823</a></li>
</ul>
<h2>4.35.1 - 27 Mar 2026</h2>
<ul>
<li>Fix incorrect minimum required Git version for <a
href="https://redirect.github.com/github/roadmap/issues/1158 ">improved
incremental analysis</a>: it should have been 2.36.0, not 2.11.0. <a
href="https://redirect.github.com/github/codeql-action/pull/3781 ">#3781</a></li>
</ul>
<h2>4.35.0 - 27 Mar 2026</h2>
<ul>
<li>Reduced the minimum Git version required for <a
href="https://redirect.github.com/github/roadmap/issues/1158 ">improved
incremental analysis</a> from 2.38.0 to 2.11.0. <a
href="https://redirect.github.com/github/codeql-action/pull/3767 ">#3767</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.1 ">2.25.1</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3773 ">#3773</a></li>
</ul>
<h2>4.34.1 - 20 Mar 2026</h2>
<ul>
<li>Downgrade default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.24.3 ">2.24.3</a>
due to issues with a small percentage of Actions and JavaScript
analyses. <a
href="https://redirect.github.com/github/codeql-action/pull/3762 ">#3762</a></li>
</ul>
<h2>4.34.0 - 20 Mar 2026</h2>
<ul>
<li>Added an experimental change which disables TRAP caching when <a
href="https://redirect.github.com/github/roadmap/issues/1158 ">improved
incremental analysis</a> is enabled, since improved incremental analysis
supersedes TRAP caching. This will improve performance and reduce
Actions cache usage. We expect to roll this change out to everyone in
March. <a
href="https://redirect.github.com/github/codeql-action/pull/3569 ">#3569</a></li>
<li>We are rolling out improved incremental analysis to C/C++ analyses
that use build mode <code>none</code>. We expect this rollout to be
complete by the end of April 2026. <a
href="https://redirect.github.com/github/codeql-action/pull/3584 ">#3584</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.0 ">2.25.0</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3585 ">#3585</a></li>
</ul>
<h2>4.33.0 - 16 Mar 2026</h2>
<ul>
<li>
<p>Upcoming change: Starting April 2026, the CodeQL Action will skip
collecting file coverage information on pull requests to improve
analysis performance. File coverage information will still be computed
on non-PR analyses. Pull request analyses will log a warning about this
upcoming change. <a
href="https://redirect.github.com/github/codeql-action/pull/3562 ">#3562</a></p>
<p>To opt out of this change:</p>
<ul>
<li><strong>Repositories owned by an organization:</strong> Create a
custom repository property with the name
<code>github-codeql-file-coverage-on-prs</code> and the type
"True/false", then set this property to <code>true</code> in
the repository's settings. For more information, see <a
href="https://docs.github.com/en/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization ">Managing
custom properties for repositories in your organization</a>.
Alternatively, if you are using an advanced setup workflow, you can set
the <code>CODEQL_ACTION_FILE_COVERAGE_ON_PRS</code> environment variable
to <code>true</code> in your workflow.</li>
<li><strong>User-owned repositories using default setup:</strong> Switch
to an advanced setup workflow and set the
<code>CODEQL_ACTION_FILE_COVERAGE_ON_PRS</code> environment variable to
<code>true</code> in your workflow.</li>
</ul>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="e46ed2cbd0https://redirect.github.com/github/codeql-action/issues/3867 ">#3867</a>
from github/update-v4.35.3-8c6e48dbe</li>
<li><a
href="b73d1d1634https://redirect.github.com/github/codeql-action/issues/3853 ">#3853</a></li>
<li><a
href="24e0bb00a9ec298daba78c6e48dbe0https://redirect.github.com/github/codeql-action/issues/3865 ">#3865</a>
from github/update-bundle/codeql-bundle-v2.25.3</li>
<li><a
href="719098349e2bb209555a7851e55dc3https://redirect.github.com/github/codeql-action/issues/3850 ">#3850</a>
from github/mbg/private-registry/cloudsmith-gcp</li>
<li><a
href="262a15f6cfa6109b1c07https://redirect.github.com/github/codeql-action/issues/3853 ">#3853</a>
from github/mbg/start-proxy/improved-checks</li>
<li>Additional commits viewable in <a
href="95e58e9a2c...e46ed2cbd0https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=4.35.2&new-version=4.35.3 )](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-04 17:50:09 +00:00
dependabot[bot]
6f9367cb44
chore(deps-dev): Bump cypress from 15.14.1 to 15.14.2 ( #1858 )
...
Bumps [cypress](https://github.com/cypress-io/cypress ) from 15.14.1 to
15.14.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/cypress-io/cypress/releases ">cypress's
releases</a>.</em></p>
<blockquote>
<h2>v15.14.2</h2>
<p>Changelog: <a
href="https://docs.cypress.io/app/references/changelog#15-14-2 ">https://docs.cypress.io/app/references/changelog#15-14-2 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="545556ee30https://redirect.github.com/cypress-io/cypress/issues/33640 ">#33640</a>)</li>
<li><a
href="ea98906633https://redirect.github.com/cypress-io/cypress/issues/33692 ">#33692</a>)</li>
<li><a
href="f1592001cfhttps://redirect.github.com/cypress-io/cypress/issues/33691 ">#33691</a>)</li>
<li><a
href="d4b0324c93https://redirect.github.com/cypress-io/cypress/issues/33689 ">#33689</a>)</li>
<li><a
href="3442523620https://redirect.github.com/cypress-io/cypress/issues/33651 ">#33651</a>)</li>
<li><a
href="3592361a79https://redirect.github.com/cypress-io/cypress/issues/33686 ">#33686</a>)</li>
<li><a
href="47bb659259https://redirect.github.com/cypress-io/cypress/issues/33690 ">#33690</a>)</li>
<li><a
href="9363b86deehttps://redirect.github.com/cypress-io/cypress/issues/33687 ">#33687</a>)</li>
<li><a
href="56472e3159https://redirect.github.com/cypress-io/cypress/issues/33685 ">#33685</a>)</li>
<li><a
href="d86bc45086https://redirect.github.com/cypress-io/cypress/issues/33683 ">#33683</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/cypress-io/cypress/compare/v15.14.1...v15.14.2 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-04 17:47:53 +00:00
dependabot[bot]
37029a20bd
chore(deps-dev): Bump postcss from 8.5.12 to 8.5.13 ( #1859 )
...
Bumps [postcss](https://github.com/postcss/postcss ) from 8.5.12 to
8.5.13.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/postcss/postcss/releases ">postcss's
releases</a>.</em></p>
<blockquote>
<h2>8.5.13</h2>
<ul>
<li>Fixed <code>postcss-scss</code> commend regression.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/postcss/postcss/blob/main/CHANGELOG.md ">postcss's
changelog</a>.</em></p>
<blockquote>
<h2>8.5.13</h2>
<ul>
<li>Fixed <code>postcss-scss</code> commend regression.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="af58cf1b7af227dbd0e9d3abd40d72dd06c3e113ae889c815fe0093e49bchttps://github.com/postcss/postcss/compare/8.5.12...8.5.13 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-04 17:47:36 +00:00
dependabot[bot]
aa2f4768bf
chore(deps): Bump @maplibre/maplibre-gl-style-spec from 24.8.1 to 24.8.3 ( #1857 )
...
Bumps
[@maplibre/maplibre-gl-style-spec](https://github.com/maplibre/maplibre-style-spec )
from 24.8.1 to 24.8.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/maplibre/maplibre-style-spec/releases ">@maplibre/maplibre-gl-style-spec's
releases</a>.</em></p>
<blockquote>
<h2>v24.8.3</h2>
<h3>🐞 Bug fixes</h3>
<ul>
<li>Restore Specification type exports dropped in v24.8.2 (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/pull/1627 ">#1627</a>)
(by <a
href="https://github.com/birkskyum "><code>@birkskyum</code></a>)</li>
</ul>
<h2>v24.8.2</h2>
<h3>✨ Features and improvements</h3>
<ul>
<li>Move from rollup->rolldown and ts6->ts7 for builds/typecheck.
(<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/pull/1132 ">#1132</a>)
(by <a href="https://github.com/birkskyum ">birkskyum</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/maplibre/maplibre-style-spec/blob/main/CHANGELOG.md ">@maplibre/maplibre-gl-style-spec's
changelog</a>.</em></p>
<blockquote>
<h2>24.8.3</h2>
<h3>🐞 Bug fixes</h3>
<ul>
<li>Restore Specification type exports dropped in v24.8.2 (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/pull/1627 ">#1627</a>)
(by <a
href="https://github.com/birkskyum "><code>@birkskyum</code></a>)</li>
</ul>
<h2>24.8.2</h2>
<h3>✨ Features and improvements</h3>
<ul>
<li>Move from rollup->rolldown and ts6->ts7 for builds/typecheck.
(<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/pull/1132 ">#1132</a>)
(by <a href="https://github.com/birkskyum ">birkskyum</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="df0b1f3224https://redirect.github.com/maplibre/maplibre-style-spec/issues/1628 ">#1628</a>)</li>
<li><a
href="b7b2d522d4https://redirect.github.com/maplibre/maplibre-style-spec/issues/1627 ">#1627</a>)</li>
<li><a
href="9fa18c355ahttps://redirect.github.com/maplibre/maplibre-style-spec/issues/1624 ">#1624</a>)</li>
<li><a
href="191266e815https://redirect.github.com/maplibre/maplibre-style-spec/issues/1132 ">#1132</a>)</li>
<li><a
href="a136301038https://redirect.github.com/maplibre/maplibre-style-spec/issues/1621 ">#1621</a>)</li>
<li><a
href="e97a674944https://redirect.github.com/maplibre/maplibre-style-spec/issues/1620 ">#1620</a>)</li>
<li><a
href="5c4572f4a3https://redirect.github.com/maplibre/maplibre-style-spec/issues/1619 ">#1619</a>)</li>
<li><a
href="b4f1f41e2bhttps://redirect.github.com/maplibre/maplibre-style-spec/issues/1618 ">#1618</a>)</li>
<li><a
href="572f303bd8https://redirect.github.com/maplibre/maplibre-style-spec/issues/1617 ">#1617</a>)</li>
<li><a
href="f4222c11a9https://redirect.github.com/maplibre/maplibre-style-spec/issues/1616 ">#1616</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/maplibre/maplibre-style-spec/compare/v24.8.1...v24.8.3 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-04 17:46:52 +00:00
dependabot[bot]
c51474ffc1
chore(deps): Bump react-i18next from 17.0.4 to 17.0.6 ( #1849 )
...
Bumps [react-i18next](https://github.com/i18next/react-i18next ) from
17.0.4 to 17.0.6.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md ">react-i18next's
changelog</a>.</em></p>
<blockquote>
<h2>17.0.6</h2>
<ul>
<li>fix: restore the v17 <code>nodesToString</code> output format
consumed by <code>i18next-cli</code>'s extractor while still rendering
<a
href="https://redirect.github.com/i18next/react-i18next/issues/1919 ">1919</a>
correctly
<ul>
<li>17.0.5 fixed <a
href="https://redirect.github.com/i18next/react-i18next/issues/1919 ">1919</a>
by changing what <code>nodesToString</code> produced, which
inadvertently changed the extracted translation strings for keep-tags
wrapping non-keep React elements</li>
<li>The fix now lives in the renderer: indexed <code><N></code>
placeholders nested inside a keep-tag are scoped to that tag's own
original React children (matching kept tags by name and positional
occurrence at each level), so the translation string format produced by
<code>nodesToString</code> is unchanged</li>
</ul>
</li>
</ul>
<h2>17.0.5</h2>
<ul>
<li>fix: <code><Trans /></code> no longer breaks child rendering
when a kept HTML node (<code>transKeepBasicHtmlNodesFor</code>) wraps a
non-keep React element <a
href="https://redirect.github.com/i18next/react-i18next/issues/1919 ">1919</a>
— superseded by 17.0.6, which keeps the same runtime fix without
changing the <code>nodesToString</code> output</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="cb20d1886bb8ad5e4afdhttps://redirect.github.com/i18next/react-i18next/issues/1919 ">#1919</a></li>
<li><a
href="75ce9850169803bb8005ec37a48d76https://github.com/i18next/react-i18next/compare/v17.0.4...v17.0.6 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-01 16:24:42 +00:00
dependabot[bot]
e29d468d23
chore(deps-dev): Bump typescript-eslint from 8.59.0 to 8.59.1 ( #1848 )
...
Bumps
[typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint )
from 8.59.0 to 8.59.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/releases ">typescript-eslint's
releases</a>.</em></p>
<blockquote>
<h2>v8.59.1</h2>
<h2>8.59.1 (2026-04-27)</h2>
<h3>🩹 Fixes</h3>
<ul>
<li><strong>eslint-plugin:</strong> [no-unnecessary-type-assertion] fix
crash "TypeError: checker.getTypeArguments is not a function"
(<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12246 ">#12246</a>)</li>
<li><strong>eslint-plugin:</strong> [no-unnecessary-type-assertion]
preserve index signatures in undefined unions (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12257 ">#12257</a>)</li>
<li><strong>eslint-plugin:</strong> [no-unnecessary-type-assertion]
preserve phantom type arguments in generic inference (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12269 ">#12269</a>)</li>
<li><strong>eslint-plugin:</strong> [no-unnecessary-type-assertion]
avoid false positive in logical assignment assertions (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12278 ">#12278</a>)</li>
<li><strong>eslint-plugin:</strong> [no-unnecessary-type-arguments]
handle instantiation expressions (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12220 ">#12220</a>)</li>
<li><strong>eslint-plugin:</strong> [no-unnecessary-condition] treat
void as nullish in no-unnecessary-condition (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12241 ">#12241</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>anasm266 <a
href="https://github.com/anasm266 "><code>@anasm266</code></a></li>
<li>Anshika Jain <a
href="https://github.com/Anshikakalpana "><code>@Anshikakalpana</code></a></li>
<li>Ulrich Stark</li>
<li>yugo innami <a
href="https://github.com/nami8824 "><code>@nami8824</code></a></li>
</ul>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.59.1 ">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning ">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases ">releases</a> on our
website.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md ">typescript-eslint's
changelog</a>.</em></p>
<blockquote>
<h2>8.59.1 (2026-04-27)</h2>
<p>This was a version bump only for typescript-eslint to align it with
other projects, there were no code changes.</p>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.59.1 ">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning ">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases ">releases</a> on our
website.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="52457932e5https://github.com/typescript-eslint/typescript-eslint/commits/v8.59.1/packages/typescript-eslint ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-01 16:24:24 +00:00
dependabot[bot]
cbcc07e7b7
chore(deps): Bump cypress-io/github-action from 7.1.9 to 7.1.10 ( #1847 )
...
Bumps
[cypress-io/github-action](https://github.com/cypress-io/github-action )
from 7.1.9 to 7.1.10.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/cypress-io/github-action/releases ">cypress-io/github-action's
releases</a>.</em></p>
<blockquote>
<h2>v7.1.10</h2>
<h2><a
href="https://github.com/cypress-io/github-action/compare/v7.1.9...v7.1.10 ">7.1.10</a>
(2026-04-27)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>deps:</strong> update fast-xml-parser to 5.7.1 (<a
href="https://redirect.github.com/cypress-io/github-action/issues/1737 ">#1737</a>)
(<a
href="c495c3ddffc495c3ddffhttps://redirect.github.com/cypress-io/github-action/issues/1737 ">#1737</a>)</li>
<li><a
href="eaec29b187https://redirect.github.com/cypress-io/github-action/issues/1734 ">#1734</a>)</li>
<li><a
href="aed135c7a2https://redirect.github.com/cypress-io/github-action/issues/1735 ">#1735</a>)</li>
<li><a
href="3893be35eehttps://redirect.github.com/cypress-io/github-action/issues/1733 ">#1733</a>)</li>
<li><a
href="05265b4fe0https://redirect.github.com/cypress-io/github-action/issues/1732 ">#1732</a>)</li>
<li><a
href="59192731e8https://redirect.github.com/cypress-io/github-action/issues/1731 ">#1731</a>)</li>
<li><a
href="04e35b7616https://redirect.github.com/cypress-io/github-action/issues/1730 ">#1730</a>)</li>
<li><a
href="c8e8dca4b4https://redirect.github.com/cypress-io/github-action/issues/1721 ">#1721</a>)</li>
<li><a
href="da9ff6e247https://redirect.github.com/cypress-io/github-action/issues/1724 ">#1724</a>)</li>
<li><a
href="9230a04390https://redirect.github.com/cypress-io/github-action/issues/1723 ">#1723</a>)</li>
<li>Additional commits viewable in <a
href="783cb3f079...c495c3ddffhttps://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=cypress-io/github-action&package-manager=github_actions&previous-version=7.1.9&new-version=7.1.10 )](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-30 13:53:08 +00:00
dependabot[bot]
de9eb2db66
chore(deps-dev): Bump postcss from 8.5.11 to 8.5.12 ( #1846 )
...
[//]: # (dependabot-start)
⚠️ **Dependabot is rebasing this PR** ⚠️
Rebasing might not happen immediately, so don't worry if this takes some
time.
Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.
---
[//]: # (dependabot-end)
Bumps [postcss](https://github.com/postcss/postcss ) from 8.5.11 to
8.5.12.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/postcss/postcss/releases ">postcss's
releases</a>.</em></p>
<blockquote>
<h2>8.5.12</h2>
<ul>
<li>Fixed reading any file via user-generated CSS.</li>
<li>Added <code>opts.unsafeMap</code> to disable checks.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/postcss/postcss/blob/main/CHANGELOG.md ">postcss's
changelog</a>.</em></p>
<blockquote>
<h2>8.5.12</h2>
<ul>
<li>Fixed reading any file via user-generated CSS.</li>
<li>Added <code>opts.unsafeMap</code> to disable checks.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="9bc81c48f085c4d7dab894484cae6dc64b7488d2aaec7b78b3233fb264eahttps://github.com/postcss/postcss/compare/8.5.11...8.5.12 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-30 13:52:32 +00:00
dependabot[bot]
91ce8c3cce
chore(deps-dev): Bump stylelint from 17.9.0 to 17.9.1 ( #1845 )
...
Bumps [stylelint](https://github.com/stylelint/stylelint ) from 17.9.0 to
17.9.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/stylelint/stylelint/releases ">stylelint's
releases</a>.</em></p>
<blockquote>
<h2>17.9.1</h2>
<p>It fixes 4 bugs. We also documented the <code>messageArgs</code> each
rule provides to the <code>message</code> configuration property.</p>
<ul>
<li>Fixed: <code>ConfigurationError</code> regression for custom
syntaxes (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9245 ">#9245</a>)
(<a href="https://github.com/jeddy3 "><code>@jeddy3</code></a>).</li>
<li>Fixed: MD5 hash algorithm to SHA256 for caching (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9241 ">#9241</a>)
(<a href="https://github.com/rkdfx "><code>@rkdfx</code></a>).</li>
<li>Fixed: <code>property-no-deprecated</code> autofix for
<code>page-break-*: always</code> (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9214 ">#9214</a>)
(<a href="https://github.com/rkdfx "><code>@rkdfx</code></a>).</li>
<li>Fixed: <code>selector-no-deprecated</code> false positives for
<code>::part()</code> (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9227 ">#9227</a>)
(<a
href="https://github.com/SaekiTominaga "><code>@SaekiTominaga</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/stylelint/stylelint/blob/main/CHANGELOG.md ">stylelint's
changelog</a>.</em></p>
<blockquote>
<h2>17.9.1 - 2026-04-27</h2>
<p>It fixes 4 bugs. We also documented the <code>messageArgs</code> each
rule provides to the <code>message</code> configuration property.</p>
<ul>
<li>Fixed: <code>ConfigurationError</code> regression for custom
syntaxes (<a
href="https://redirect.github.com/stylelint/stylelint/pull/9245 ">#9245</a>)
(<a href="https://github.com/jeddy3 "><code>@jeddy3</code></a>).</li>
<li>Fixed: MD5 hash algorithm to SHA256 for caching (<a
href="https://redirect.github.com/stylelint/stylelint/pull/9241 ">#9241</a>)
(<a href="https://github.com/rkdfx "><code>@rkdfx</code></a>).</li>
<li>Fixed: <code>property-no-deprecated</code> autofix for
<code>page-break-*: always</code> (<a
href="https://redirect.github.com/stylelint/stylelint/pull/9214 ">#9214</a>)
(<a href="https://github.com/rkdfx "><code>@rkdfx</code></a>).</li>
<li>Fixed: <code>selector-no-deprecated</code> false positives for
<code>::part()</code> (<a
href="https://redirect.github.com/stylelint/stylelint/pull/9227 ">#9227</a>)
(<a
href="https://github.com/SaekiTominaga "><code>@SaekiTominaga</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="53c8817846https://redirect.github.com/stylelint/stylelint/issues/9248 ">#9248</a>)</li>
<li><a
href="fa750547b3https://redirect.github.com/stylelint/stylelint/issues/9214 ">#9214</a>)</li>
<li><a
href="02b039e9a1https://redirect.github.com/stylelint/stylelint/issues/9227 ">#9227</a>)</li>
<li><a
href="af22bece4dhttps://redirect.github.com/stylelint/stylelint/issues/9226 ">#9226</a>)</li>
<li><a
href="20f6e9de10https://redirect.github.com/stylelint/stylelint/issues/9245 ">#9245</a>)</li>
<li><a
href="21a57e89a4https://redirect.github.com/stylelint/stylelint/issues/9241 ">#9241</a>)</li>
<li>See full diff in <a
href="https://github.com/stylelint/stylelint/compare/17.9.0...17.9.1 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-30 13:52:15 +00:00
dependabot[bot]
2ab9b341df
chore(deps-dev): Bump postcss from 8.5.10 to 8.5.11 ( #1844 )
...
Bumps [postcss](https://github.com/postcss/postcss ) from 8.5.10 to
8.5.11.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/postcss/postcss/releases ">postcss's
releases</a>.</em></p>
<blockquote>
<h2>8.5.11</h2>
<ul>
<li>Fixed nested brackets parsing performance (by <a
href="https://github.com/offset "><code>@offset</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/postcss/postcss/blob/main/CHANGELOG.md ">postcss's
changelog</a>.</em></p>
<blockquote>
<h2>8.5.11</h2>
<ul>
<li>Fixed nested brackets parsing performance (by <a
href="https://github.com/offset "><code>@offset</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="2502f750305ca190194942b5337dd77e36e153d08ec62b157bhttps://github.com/postcss/postcss/compare/8.5.10...8.5.11 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-29 13:52:39 +00:00
dependabot[bot]
5c4b3f205a
chore(deps): Bump i18next from 26.0.7 to 26.0.8 ( #1842 )
...
Bumps [i18next](https://github.com/i18next/i18next ) from 26.0.7 to
26.0.8.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next/releases ">i18next's
releases</a>.</em></p>
<blockquote>
<h2>v26.0.8</h2>
<ul>
<li>fix(types): restore the pre-v25.10.4 <code>ExistsFunction</code>
shape so plain arrow functions can again be assigned to
<code>ExistsFunction</code>-typed variables (TypeScript cannot infer
type predicates through multi-overload assignment). Direct
<code>i18next.exists(key)</code> calls still narrow <code>key</code> to
<code>SelectorKey</code> — the predicate is now declared inline on
<code>i18n.exists</code>. Custom wrappers that want the narrowing can
type themselves as <code>typeof i18next.exists</code> <a
href="https://redirect.github.com/i18next/i18next/issues/2425 ">2425</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next/blob/master/CHANGELOG.md ">i18next's
changelog</a>.</em></p>
<blockquote>
<h2>26.0.8</h2>
<ul>
<li>fix(types): restore the pre-v25.10.4 <code>ExistsFunction</code>
shape so plain arrow functions can again be assigned to
<code>ExistsFunction</code>-typed variables (TypeScript cannot infer
type predicates through multi-overload assignment). Direct
<code>i18next.exists(key)</code> calls still narrow <code>key</code> to
<code>SelectorKey</code> — the predicate is now declared inline on
<code>i18n.exists</code>. Custom wrappers that want the narrowing can
type themselves as <code>typeof i18next.exists</code> <a
href="https://redirect.github.com/i18next/i18next/issues/2425 ">2425</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="3ea438f8415176bbd7a110b48c61939fdd99a9199ee7da174d8ce5e268dee802567c9chttps://github.com/i18next/i18next/compare/v26.0.7...v26.0.8 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-28 13:51:41 +00:00
dependabot[bot]
c19dcccac4
chore(deps-dev): Bump cypress from 15.14.0 to 15.14.1 ( #1839 )
...
Bumps [cypress](https://github.com/cypress-io/cypress ) from 15.14.0 to
15.14.1.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="6e050ec537https://redirect.github.com/cypress-io/cypress/issues/33636 ">#33636</a>)</li>
<li><a
href="3bd5575388https://redirect.github.com/cypress-io/cypress/issues/33627 ">#33627</a>)</li>
<li><a
href="23a4875c4dhttps://redirect.github.com/cypress-io/cypress/issues/33610 ">#33610</a>)</li>
<li><a
href="c0b3929368af3cdf568ahttps://redirect.github.com/cypress-io/cypress/issues/33624 ">#33624</a>)</li>
<li><a
href="7a7477397ahttps://redirect.github.com/cypress-io/cypress/issues/33625 ">#33625</a>)</li>
<li><a
href="f652605d31https://redirect.github.com/cypress-io/cypress/issues/33487 ">#33487</a>)</li>
<li><a
href="593c22eab0ddc05e5562https://redirect.github.com/cypress-io/cypress/issues/33617 ">#33617</a>)</li>
<li><a
href="e5f0b32deehttps://redirect.github.com/cypress-io/cypress/issues/33603 ">#33603</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/cypress-io/cypress/compare/v15.14.0...v15.14.1 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-27 17:14:17 +00:00
dependabot[bot]
56555f1d03
chore(deps): Bump i18next from 26.0.6 to 26.0.7 ( #1841 )
...
Bumps [i18next](https://github.com/i18next/i18next ) from 26.0.6 to
26.0.7.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next/blob/master/CHANGELOG.md ">i18next's
changelog</a>.</em></p>
<blockquote>
<h2>26.0.7</h2>
<ul>
<li>fix: when a plural lookup misses, the <code>missingKey</code> debug
log now shows the actual plural-resolved key (e.g.
<code>foo.bar_many</code> for Polish <code>count: 14</code>) instead of
the base key — making it obvious which plural category was expected and
missing <a
href="https://redirect.github.com/i18next/i18next/issues/2423 ">2423</a></li>
<li>chore: drop <code>@babel/runtime</code> runtime dependency. The
build no longer generates any <code>@babel/runtime</code> imports, so
the package is unused by consumers. Rollup now uses <code>babelHelpers:
'bundled'</code> so any helpers that are ever needed in the future will
be inlined rather than imported externally <a
href="https://redirect.github.com/i18next/i18next/issues/2424 ">2424</a></li>
<li>chore: stop emitting <code>dist/esm/i18next.bundled.js</code>. It
was byte-identical to <code>dist/esm/i18next.js</code> because no
helpers were being imported <a
href="https://redirect.github.com/i18next/i18next/issues/2424 ">2424</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="ce06fba2a5ca333775378abe4e66ce073eb1068aa3dfb180d8https://github.com/i18next/i18next/compare/v26.0.6...v26.0.7 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-27 17:13:56 +00:00
dependabot[bot]
8922298b5e
chore(deps): Bump maplibre-gl from 5.23.0 to 5.24.0 ( #1840 )
...
Bumps [maplibre-gl](https://github.com/maplibre/maplibre-gl-js ) from
5.23.0 to 5.24.0.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/maplibre/maplibre-gl-js/blob/main/CHANGELOG.md ">maplibre-gl's
changelog</a>.</em></p>
<blockquote>
<h2>5.24.0</h2>
<h3>✨ Features and improvements</h3>
<ul>
<li>GPU performance optimization: Render halo and glyph in a single pass
(-40% Time Reduction) (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/7436 ">#7436</a>)
(by <a
href="https://github.com/xavierjs "><code>@xavierjs</code></a>)</li>
<li>Optimize matrix inversions and reduce GPU stalls (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/7367 ">#7367</a>)
(by <a
href="https://github.com/xavierjs "><code>@xavierjs</code></a>)</li>
<li>Add example showing how to measure map performance using built-in
events (<code>load</code>, <code>idle</code>, <code>render</code>) (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/7077 ">#7077</a>)
(by <a
href="https://github.com/CommanderStorm "><code>@CommanderStorm</code></a>)</li>
</ul>
<h3>🐞 Bug fixes</h3>
<ul>
<li>Fix <code>Popup</code> not updating its position when switching
between terrain/globe projections (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/7468 ">#7468</a>)
(by <a
href="https://github.com/CommanderStorm "><code>@CommanderStorm</code></a>)</li>
<li>Skip fog computation when fog opacity is zero (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/7476 ">#7476</a>)
(by <a
href="https://github.com/CommanderStorm "><code>@CommanderStorm</code></a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="fd31bd8596https://redirect.github.com/maplibre/maplibre-gl-js/issues/7509 ">#7509</a>)</li>
<li><a
href="859e6fa2c6https://redirect.github.com/maplibre/maplibre-gl-js/issues/7508 ">#7508</a>)</li>
<li><a
href="1401f2db49https://redirect.github.com/maplibre/maplibre-gl-js/issues/7507 ">#7507</a>)</li>
<li><a
href="57f77d34behttps://redirect.github.com/maplibre/maplibre-gl-js/issues/7506 ">#7506</a>)</li>
<li><a
href="1d3c3f4564https://redirect.github.com/maplibre/maplibre-gl-js/issues/7505 ">#7505</a>)</li>
<li><a
href="b30f01171chttps://redirect.github.com/maplibre/maplibre-gl-js/issues/7503 ">#7503</a>)</li>
<li><a
href="d1614ef5dahttps://redirect.github.com/maplibre/maplibre-gl-js/issues/7504 ">#7504</a>)</li>
<li><a
href="d44f14b4c3https://redirect.github.com/maplibre/maplibre-gl-js/issues/7502 ">#7502</a>)</li>
<li><a
href="018c3a089e38f6798244https://redirect.github.com/maplibre/maplibre-gl-js/issues/7497 ">#7497</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/maplibre/maplibre-gl-js/compare/v5.23.0...v5.24.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-27 17:13:35 +00:00
dependabot[bot]
2033c8170b
chore(deps-dev): Bump stylelint from 17.8.0 to 17.9.0 ( #1836 )
...
Bumps [stylelint](https://github.com/stylelint/stylelint ) from 17.8.0 to
17.9.0.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/stylelint/stylelint/blob/main/CHANGELOG.md ">stylelint's
changelog</a>.</em></p>
<blockquote>
<h2>17.9.0 - 2026-04-23</h2>
<p>It adds 3 new features. Adding the <code>referenceFiles</code>
property to your configuration object makes the
<code>no-unknown-animations</code>, <code>no-unknown-custom-media</code>
and <code>no-unknown-custom-properties</code> rules more useful.</p>
<ul>
<li>Added: experimental <code>referenceFiles</code> to configuration
object (<a
href="https://redirect.github.com/stylelint/stylelint/pull/9179 ">#9179</a>)
(<a href="https://github.com/jeddy3 "><code>@jeddy3</code></a>).</li>
<li>Added: experimental <code>abortSignal</code> option to Node.js API
for cancellation support (<a
href="https://redirect.github.com/stylelint/stylelint/pull/9213 ">#9213</a>)
(<a
href="https://github.com/adalinesimonian "><code>@adalinesimonian</code></a>).</li>
<li>Added: <code>maxWarnings</code> to configuration object (<a
href="https://redirect.github.com/stylelint/stylelint/pull/9181 ">#9181</a>)
(<a
href="https://github.com/mrginglymus "><code>@mrginglymus</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="cee404b451https://redirect.github.com/stylelint/stylelint/issues/9242 ">#9242</a>)</li>
<li><a
href="b0af5aed12https://redirect.github.com/stylelint/stylelint/issues/9240 ">#9240</a>)</li>
<li><a
href="e2c2c43d87https://redirect.github.com/stylelint/stylelint/issues/9239 ">#9239</a>)</li>
<li><a
href="68d008ec825ad7ffb8dchttps://redirect.github.com/stylelint/stylelint/issues/9237 ">#9237</a>)</li>
<li><a
href="f16ef5e19ehttps://redirect.github.com/stylelint/stylelint/issues/9235 ">#9235</a>)</li>
<li><a
href="a0b3c5ac0ahttps://redirect.github.com/stylelint/stylelint/issues/9236 ">#9236</a>)</li>
<li><a
href="fb2efecb58https://redirect.github.com/stylelint/stylelint/issues/9213 ">#9213</a>)</li>
<li><a
href="84f2c6b751https://redirect.github.com/stylelint/stylelint/issues/9218 ">#9218</a>)</li>
<li><a
href="5b45245bf1https://redirect.github.com/stylelint/stylelint/issues/9181 ">#9181</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/stylelint/stylelint/compare/17.8.0...17.9.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-27 17:12:23 +00:00
dependabot[bot]
b5081325e6
chore(deps-dev): Bump the vitest group with 2 updates ( #1833 )
...
Bumps the vitest group with 2 updates:
[@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8 )
and
[vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest ).
Updates `@vitest/coverage-v8` from 4.1.4 to 4.1.5
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitest-dev/vitest/releases "><code>@vitest/coverage-v8</code>'s
releases</a>.</em></p>
<blockquote>
<h2>v4.1.5</h2>
<h3> 🚀 Experimental Features</h3>
<ul>
<li><strong>coverage</strong>: Istanbul to support
<code>instrumenter</code> option - by <a
href="https://github.com/BartWaardenburg "><code>@BartWaardenburg</code></a>
and <a
href="https://github.com/AriPerkkio "><code>@AriPerkkio</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/10119 ">vitest-dev/vitest#10119</a>
<a href="https://github.com/vitest-dev/vitest/commit/0e0ff41c7 "><!-- raw
HTML omitted -->(0e0ff)<!-- raw HTML omitted --></a></li>
</ul>
<h3> 🐞 Bug Fixes</h3>
<ul>
<li>--project negation excludes browser instances - by <a
href="https://github.com/felamaslen "><code>@felamaslen</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/10131 ">vitest-dev/vitest#10131</a>
<a href="https://github.com/vitest-dev/vitest/commit/9423dc084 "><!-- raw
HTML omitted -->(9423d)<!-- raw HTML omitted --></a></li>
<li>Project color label on html reporter - by <a
href="https://github.com/hi-ogawa "><code>@hi-ogawa</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/10142 ">vitest-dev/vitest#10142</a>
<a href="https://github.com/vitest-dev/vitest/commit/596f73986 "><!-- raw
HTML omitted -->(596f7)<!-- raw HTML omitted --></a></li>
<li>Fix <code>vi.defineHelper</code> called as object method - by <a
href="https://github.com/hi-ogawa "><code>@hi-ogawa</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/10163 ">vitest-dev/vitest#10163</a>
<a href="https://github.com/vitest-dev/vitest/commit/122c25b5b "><!-- raw
HTML omitted -->(122c2)<!-- raw HTML omitted --></a></li>
<li>Alias <code>agent</code> reporter to <code>minimal</code> - by <a
href="https://github.com/sheremet-va "><code>@sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/10157 ">vitest-dev/vitest#10157</a>
<a href="https://github.com/vitest-dev/vitest/commit/663b99fe3 "><!-- raw
HTML omitted -->(663b9)<!-- raw HTML omitted --></a></li>
<li>Respect diff config options in soft assertions - by <a
href="https://github.com/Copilot "><code>@Copilot</code></a>,
<strong>sheremet-va</strong> and <a
href="https://github.com/sheremet-va "><code>@sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/8696 ">vitest-dev/vitest#8696</a>
<a href="https://github.com/vitest-dev/vitest/commit/9787dedad "><!-- raw
HTML omitted -->(9787d)<!-- raw HTML omitted --></a></li>
<li>Respect diff config options in soft assertions " - by <a
href="https://github.com/sheremet-va "><code>@sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/8696 ">vitest-dev/vitest#8696</a>
<a href="https://github.com/vitest-dev/vitest/commit/7dc6d54fd "><!-- raw
HTML omitted -->(7dc6d)<!-- raw HTML omitted --></a></li>
<li><strong>ast-collect</strong>: Recognize _<em>vi_import</em> prefix
in static test discovery - by <a
href="https://github.com/Yejneshwar "><code>@Yejneshwar</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/10129 ">vitest-dev/vitest#10129</a>
<a href="https://github.com/vitest-dev/vitest/commit/325463ab2 "><!-- raw
HTML omitted -->(32546)<!-- raw HTML omitted --></a></li>
<li><strong>coverage</strong>: Descriptive error message when reports
directory is removed during test run - by <a
href="https://github.com/DaveT1991 "><code>@DaveT1991</code></a> and <a
href="https://github.com/AriPerkkio "><code>@AriPerkkio</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/10117 ">vitest-dev/vitest#10117</a>
<a href="https://github.com/vitest-dev/vitest/commit/1413382e1 "><!-- raw
HTML omitted -->(14133)<!-- raw HTML omitted --></a></li>
<li><strong>snapshot</strong>: Increase default snapshot max output
length - by <a
href="https://github.com/hi-ogawa "><code>@hi-ogawa</code></a> and
<strong>Codex</strong> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/10150 ">vitest-dev/vitest#10150</a>
<a href="https://github.com/vitest-dev/vitest/commit/21e66ff63 "><!-- raw
HTML omitted -->(21e66)<!-- raw HTML omitted --></a></li>
<li><strong>ui</strong>: Fix jsx/tsx syntax highlight - by <a
href="https://github.com/hi-ogawa "><code>@hi-ogawa</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/10152 ">vitest-dev/vitest#10152</a>
<a href="https://github.com/vitest-dev/vitest/commit/f1b1f6c7b "><!-- raw
HTML omitted -->(f1b1f)<!-- raw HTML omitted --></a></li>
<li><strong>web-worker</strong>: Support MessagePort objects referenced
inside postMessage data - by <a
href="https://github.com/whitphx "><code>@whitphx</code></a> and
<strong>Claude Opus 4.6 (1M context)</strong> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/9927 ">vitest-dev/vitest#9927</a>
and <a
href="https://redirect.github.com/vitest-dev/vitest/issues/10124 ">vitest-dev/vitest#10124</a>
<a href="https://github.com/vitest-dev/vitest/commit/7ad7d39af "><!-- raw
HTML omitted -->(7ad7d)<!-- raw HTML omitted --></a></li>
<li><strong>api</strong>: Make test-specification options writable -
by <a
href="https://github.com/sheremet-va "><code>@sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/10154 ">vitest-dev/vitest#10154</a>
<a href="https://github.com/vitest-dev/vitest/commit/6abd557b7 "><!-- raw
HTML omitted -->(6abd5)<!-- raw HTML omitted --></a></li>
</ul>
<h5> <a
href="https://github.com/vitest-dev/vitest/compare/v4.1.4...v4.1.5 ">View
changes on GitHub</a></h5>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="e399846850https://github.com/vitest-dev/vitest/commits/v4.1.5/packages/coverage-v8 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `vitest` from 4.1.4 to 4.1.5
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitest-dev/vitest/releases ">vitest's
releases</a>.</em></p>
<blockquote>
<h2>v4.1.5</h2>
<h3> 🚀 Experimental Features</h3>
<ul>
<li><strong>coverage</strong>: Istanbul to support
<code>instrumenter</code> option - by <a
href="https://github.com/BartWaardenburg "><code>@BartWaardenburg</code></a>
and <a
href="https://github.com/AriPerkkio "><code>@AriPerkkio</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/10119 ">vitest-dev/vitest#10119</a>
<a href="https://github.com/vitest-dev/vitest/commit/0e0ff41c7 "><!-- raw
HTML omitted -->(0e0ff)<!-- raw HTML omitted --></a></li>
</ul>
<h3> 🐞 Bug Fixes</h3>
<ul>
<li>--project negation excludes browser instances - by <a
href="https://github.com/felamaslen "><code>@felamaslen</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/10131 ">vitest-dev/vitest#10131</a>
<a href="https://github.com/vitest-dev/vitest/commit/9423dc084 "><!-- raw
HTML omitted -->(9423d)<!-- raw HTML omitted --></a></li>
<li>Project color label on html reporter - by <a
href="https://github.com/hi-ogawa "><code>@hi-ogawa</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/10142 ">vitest-dev/vitest#10142</a>
<a href="https://github.com/vitest-dev/vitest/commit/596f73986 "><!-- raw
HTML omitted -->(596f7)<!-- raw HTML omitted --></a></li>
<li>Fix <code>vi.defineHelper</code> called as object method - by <a
href="https://github.com/hi-ogawa "><code>@hi-ogawa</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/10163 ">vitest-dev/vitest#10163</a>
<a href="https://github.com/vitest-dev/vitest/commit/122c25b5b "><!-- raw
HTML omitted -->(122c2)<!-- raw HTML omitted --></a></li>
<li>Alias <code>agent</code> reporter to <code>minimal</code> - by <a
href="https://github.com/sheremet-va "><code>@sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/10157 ">vitest-dev/vitest#10157</a>
<a href="https://github.com/vitest-dev/vitest/commit/663b99fe3 "><!-- raw
HTML omitted -->(663b9)<!-- raw HTML omitted --></a></li>
<li>Respect diff config options in soft assertions - by <a
href="https://github.com/Copilot "><code>@Copilot</code></a>,
<strong>sheremet-va</strong> and <a
href="https://github.com/sheremet-va "><code>@sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/8696 ">vitest-dev/vitest#8696</a>
<a href="https://github.com/vitest-dev/vitest/commit/9787dedad "><!-- raw
HTML omitted -->(9787d)<!-- raw HTML omitted --></a></li>
<li>Respect diff config options in soft assertions " - by <a
href="https://github.com/sheremet-va "><code>@sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/8696 ">vitest-dev/vitest#8696</a>
<a href="https://github.com/vitest-dev/vitest/commit/7dc6d54fd "><!-- raw
HTML omitted -->(7dc6d)<!-- raw HTML omitted --></a></li>
<li><strong>ast-collect</strong>: Recognize _<em>vi_import</em> prefix
in static test discovery - by <a
href="https://github.com/Yejneshwar "><code>@Yejneshwar</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/10129 ">vitest-dev/vitest#10129</a>
<a href="https://github.com/vitest-dev/vitest/commit/325463ab2 "><!-- raw
HTML omitted -->(32546)<!-- raw HTML omitted --></a></li>
<li><strong>coverage</strong>: Descriptive error message when reports
directory is removed during test run - by <a
href="https://github.com/DaveT1991 "><code>@DaveT1991</code></a> and <a
href="https://github.com/AriPerkkio "><code>@AriPerkkio</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/10117 ">vitest-dev/vitest#10117</a>
<a href="https://github.com/vitest-dev/vitest/commit/1413382e1 "><!-- raw
HTML omitted -->(14133)<!-- raw HTML omitted --></a></li>
<li><strong>snapshot</strong>: Increase default snapshot max output
length - by <a
href="https://github.com/hi-ogawa "><code>@hi-ogawa</code></a> and
<strong>Codex</strong> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/10150 ">vitest-dev/vitest#10150</a>
<a href="https://github.com/vitest-dev/vitest/commit/21e66ff63 "><!-- raw
HTML omitted -->(21e66)<!-- raw HTML omitted --></a></li>
<li><strong>ui</strong>: Fix jsx/tsx syntax highlight - by <a
href="https://github.com/hi-ogawa "><code>@hi-ogawa</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/10152 ">vitest-dev/vitest#10152</a>
<a href="https://github.com/vitest-dev/vitest/commit/f1b1f6c7b "><!-- raw
HTML omitted -->(f1b1f)<!-- raw HTML omitted --></a></li>
<li><strong>web-worker</strong>: Support MessagePort objects referenced
inside postMessage data - by <a
href="https://github.com/whitphx "><code>@whitphx</code></a> and
<strong>Claude Opus 4.6 (1M context)</strong> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/9927 ">vitest-dev/vitest#9927</a>
and <a
href="https://redirect.github.com/vitest-dev/vitest/issues/10124 ">vitest-dev/vitest#10124</a>
<a href="https://github.com/vitest-dev/vitest/commit/7ad7d39af "><!-- raw
HTML omitted -->(7ad7d)<!-- raw HTML omitted --></a></li>
<li><strong>api</strong>: Make test-specification options writable -
by <a
href="https://github.com/sheremet-va "><code>@sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/10154 ">vitest-dev/vitest#10154</a>
<a href="https://github.com/vitest-dev/vitest/commit/6abd557b7 "><!-- raw
HTML omitted -->(6abd5)<!-- raw HTML omitted --></a></li>
</ul>
<h5> <a
href="https://github.com/vitest-dev/vitest/compare/v4.1.4...v4.1.5 ">View
changes on GitHub</a></h5>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="e3998468507dc6d54fd9https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/8696 ">#8696</a>)"</li>
<li><a
href="9787dedadehttps://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/8696 ">#8696</a>)</li>
<li><a
href="325463ab29https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/10 ">#10</a>...</li>
<li><a
href="0e0ff41c7ehttps://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/10119 ">#10119</a>)</li>
<li><a
href="663b99fe3ehttps://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/10157 ">#10157</a>)</li>
<li><a
href="122c25b5b1https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/10163 ">#10163</a>)</li>
<li><a
href="6abd557b72https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/10154 ">#10154</a>)</li>
<li><a
href="596f73986ahttps://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/10142 ">#10142</a>)</li>
<li><a
href="9423dc0841https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/10131 ">#10131</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/vitest-dev/vitest/commits/v4.1.5/packages/vitest ">compare
view</a></li>
</ul>
</details>
<br />
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-24 13:52:30 +00:00
dependabot[bot]
36d39d675e
chore(deps-dev): Bump typescript-eslint from 8.58.2 to 8.59.0 ( #1835 )
...
Bumps
[typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint )
from 8.58.2 to 8.59.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/releases ">typescript-eslint's
releases</a>.</em></p>
<blockquote>
<h2>v8.59.0</h2>
<h2>8.59.0 (2026-04-20)</h2>
<h3>🚀 Features</h3>
<ul>
<li><strong>eslint-plugin:</strong> [no-unnecessary-type-assertion]
report more cases based on assignability (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11789 ">#11789</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Ulrich Stark</li>
</ul>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.59.0 ">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning ">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases ">releases</a> on our
website.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md ">typescript-eslint's
changelog</a>.</em></p>
<blockquote>
<h2>8.59.0 (2026-04-20)</h2>
<p>This was a version bump only for typescript-eslint to align it with
other projects, there were no code changes.</p>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.59.0 ">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning ">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases ">releases</a> on our
website.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="ea9ae4f881https://github.com/typescript-eslint/typescript-eslint/commits/v8.59.0/packages/typescript-eslint ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-24 13:52:17 +00:00
dependabot[bot]
fe8681bbac
chore(deps-dev): Bump uuid from 13.0.0 to 14.0.0 ( #1832 )
...
Bumps [uuid](https://github.com/uuidjs/uuid ) from 13.0.0 to 14.0.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/uuidjs/uuid/releases ">uuid's
releases</a>.</em></p>
<blockquote>
<h2>v14.0.0</h2>
<h2><a
href="https://github.com/uuidjs/uuid/compare/v13.0.0...v14.0.0 ">14.0.0</a>
(2026-04-19)</h2>
<h3>⚠ BREAKING CHANGES</h3>
<ul>
<li>expect <code>crypto</code> to be global everywhere (requires
node@20+) (<a
href="https://redirect.github.com/uuidjs/uuid/issues/935 ">#935</a>)</li>
<li>drop node@18 support (<a
href="https://redirect.github.com/uuidjs/uuid/issues/934 ">#934</a>)</li>
</ul>
<h3>Features</h3>
<ul>
<li>drop node@18 support (<a
href="https://redirect.github.com/uuidjs/uuid/issues/934 ">#934</a>) (<a
href="dc4ddb8727https://redirect.github.com/uuidjs/uuid/issues/935 ">#935</a>) (<a
href="f2c235f930https://redirect.github.com/uuidjs/uuid/issues/925 ">#925</a>) (<a
href="ffa31383e8https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md ">uuid's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/uuidjs/uuid/compare/v13.0.0...v14.0.0 ">14.0.0</a>
(2026-04-19)</h2>
<h3>Security</h3>
<ul>
<li>Fixes <a
href="https://github.com/uuidjs/uuid/security/advisories/GHSA-w5hq-g745-h8pq ">GHSA-w5hq-g745-h8pq</a>:
<code>v3()</code>, <code>v5()</code>, and <code>v6()</code> did not
validate that writes would remain within the bounds of a caller-supplied
buffer, allowing out-of-bounds writes when an invalid
<code>offset</code> was provided. A <code>RangeError</code> is now
thrown if <code>offset < 0</code> or <code>offset + 16 >
buf.length</code>.</li>
</ul>
<h3>⚠ BREAKING CHANGES</h3>
<ul>
<li><code>crypto</code> is now expected to be globally defined (requires
node@20+) (<a
href="https://redirect.github.com/uuidjs/uuid/issues/935 ">#935</a>)</li>
<li>drop node@18 support (<a
href="https://redirect.github.com/uuidjs/uuid/issues/934 ">#934</a>)</li>
<li>upgrade minimum supported TypeScript version to 5.4.3, in keeping
with the project's policy of supporting TypeScript versions released
within the last two years</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="7c1ea087a8https://redirect.github.com/uuidjs/uuid/issues/926 ">#926</a>)</li>
<li><a
href="3d2c5b0342f2c235f930https://redirect.github.com/uuidjs/uuid/issues/935 ">#935</a>)</li>
<li><a
href="529ef0899fhttps://redirect.github.com/uuidjs/uuid/issues/927 ">#927</a>)</li>
<li><a
href="086fd7976fhttps://redirect.github.com/uuidjs/uuid/issues/933 ">#933</a>)</li>
<li><a
href="dc4ddb8727https://redirect.github.com/uuidjs/uuid/issues/934 ">#934</a>)</li>
<li><a
href="0f1f9c9c9chttps://redirect.github.com/uuidjs/uuid/issues/932 ">#932</a>)</li>
<li><a
href="e2879e64bfhttps://redirect.github.com/uuidjs/uuid/issues/930 ">#930</a>)</li>
<li><a
href="ffa31383e8https://redirect.github.com/uuidjs/uuid/issues/925 ">#925</a>)</li>
<li><a
href="0423d49df2https://redirect.github.com/uuidjs/uuid/issues/915 ">#915</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/uuidjs/uuid/compare/v13.0.0...v14.0.0 ">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~GitHub%20Actions ">GitHub Actions</a>, a new
releaser for uuid since your current version.</p>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/maplibre/maputnik/network/alerts ).
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-23 02:02:19 +00:00
dependabot[bot]
105a970eb1
chore(deps): Bump i18next from 26.0.5 to 26.0.6 ( #1831 )
...
Bumps [i18next](https://github.com/i18next/i18next ) from 26.0.5 to
26.0.6.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next/releases ">i18next's
releases</a>.</em></p>
<blockquote>
<h2>v26.0.6</h2>
<p>Security release — all issues found via an internal audit. GHSA
advisory filed after release.</p>
<ul>
<li>security: warn when a translation string combines <code>escapeValue:
false</code> with interpolated variables inside a <code>$t(key, { ...
"{{var}}" ... })</code> nesting-options block. In that narrow
combination, attacker-controlled string values containing
<code>"</code> can break out of the JSON options literal and inject
additional nesting options (e.g. redirect
<code>lng</code>/<code>ns</code>). The default <code>escapeValue:
true</code> configuration is unaffected because HTML-escaping
neutralises the quote before <code>JSON.parse</code>. See the security
docs for mitigation guidance (GHSA-TBD)</li>
<li>security: apply <code>regexEscape</code> to
<code>unescapePrefix</code> / <code>unescapeSuffix</code> on par with
the other interpolation delimiters. Prevents ReDoS
(catastrophic-backtracking) when a misconfigured delimiter contains
regex metacharacters, and fixes silent breakage of the <code>{{-
var}}</code> syntax when the delimiter contains characters like
<code>(</code>, <code>[</code>, <code>.</code></li>
<li>security: strip CR/LF/NUL and other C0/C1 control characters from
string log arguments to prevent log forging via user-controlled
translation keys, language codes, namespaces, or interpolation variable
names (CWE-117)</li>
<li>chore: ignore <code>.env*</code> and
<code>*.pem</code>/<code>*.key</code> files in
<code>.gitignore</code></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next/blob/master/CHANGELOG.md ">i18next's
changelog</a>.</em></p>
<blockquote>
<h2>26.0.6</h2>
<p>Security release — all issues found via an internal audit.</p>
<ul>
<li>security: warn when a translation string combines <code>escapeValue:
false</code> with interpolated variables inside a <code>$t(key, { ...
"{{var}}" ... })</code> nesting-options block. In that narrow
combination, attacker-controlled string values containing
<code>"</code> can break out of the JSON options literal and inject
additional nesting options (e.g. redirect
<code>lng</code>/<code>ns</code>). The default <code>escapeValue:
true</code> configuration is unaffected because HTML-escaping
neutralises the quote before <code>JSON.parse</code>. See the <a
href="https://www.i18next.com/translation-function/nesting#security-note-interpolated-values-inside-a-nesting-options-block ">security
note in the Nesting docs</a> for the full pattern and mitigations</li>
<li>security: apply <code>regexEscape</code> to
<code>unescapePrefix</code> / <code>unescapeSuffix</code> on par with
the other interpolation delimiters. Prevents ReDoS
(catastrophic-backtracking) when a misconfigured delimiter contains
regex metacharacters, and fixes silent breakage of the <code>{{-
var}}</code> syntax when the delimiter contains characters like
<code>(</code>, <code>[</code>, <code>.</code></li>
<li>security: strip CR/LF/NUL and other C0/C1 control characters from
string log arguments to prevent log forging via user-controlled
translation keys, language codes, namespaces, or interpolation variable
names (CWE-117)</li>
<li>chore: ignore <code>.env*</code> and
<code>*.pem</code>/<code>*.key</code> files in
<code>.gitignore</code></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="9d0ed9f98e8c825644370cb018c363https://github.com/i18next/i18next/compare/v26.0.5...v26.0.6 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-22 14:00:51 +00:00
dependabot[bot]
8cbff8cc38
chore(deps): Bump dependabot/fetch-metadata from 3.0.0 to 3.1.0 ( #1830 )
...
Bumps
[dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata )
from 3.0.0 to 3.1.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/dependabot/fetch-metadata/releases ">dependabot/fetch-metadata's
releases</a>.</em></p>
<blockquote>
<h2>v3.1.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Add permissions to all workflows by <a
href="https://github.com/truggeri "><code>@truggeri</code></a> in <a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/687 ">dependabot/fetch-metadata#687</a></li>
<li>build(deps-dev): bump globals from 16.0.0 to 17.4.0 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/690 ">dependabot/fetch-metadata#690</a></li>
<li>build(deps-dev): bump esbuild from 0.27.4 to 0.28.0 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/693 ">dependabot/fetch-metadata#693</a></li>
<li>build(deps-dev): bump <code>@hono/node-server</code> from 1.19.10
to 1.19.13 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/694 ">dependabot/fetch-metadata#694</a></li>
<li>build(deps-dev): bump hono from 4.12.7 to 4.12.12 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/695 ">dependabot/fetch-metadata#695</a></li>
<li>Dynamically update the tracking tag in action by <a
href="https://github.com/truggeri "><code>@truggeri</code></a> in <a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/696 ">dependabot/fetch-metadata#696</a></li>
<li>fix: handle duplicate dependency names in parseMetadataLinks by <a
href="https://github.com/devantler "><code>@devantler</code></a> in <a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/700 ">dependabot/fetch-metadata#700</a></li>
<li>fix: remove $ anchor from updateFragment regex to handle pip
directory suffixes by <a
href="https://github.com/devantler "><code>@devantler</code></a> in <a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/698 ">dependabot/fetch-metadata#698</a></li>
<li>Updates to README for permissions clarification by <a
href="https://github.com/truggeri "><code>@truggeri</code></a> in <a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/697 ">dependabot/fetch-metadata#697</a></li>
<li>fix: resolve update-type null for Python, Composer, and Terraform
PRs by <a
href="https://github.com/vitorsdcs "><code>@vitorsdcs</code></a> in <a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/704 ">dependabot/fetch-metadata#704</a></li>
<li>build(deps-dev): bump globals from 17.4.0 to 17.5.0 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/703 ">dependabot/fetch-metadata#703</a></li>
<li>build(deps): bump actions/create-github-app-token from 3.0.0 to
3.1.1 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/701 ">dependabot/fetch-metadata#701</a></li>
<li>build(deps): bump <code>@actions/github</code> from 9.0.0 to 9.1.0
in the dependencies group across 1 directory by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/702 ">dependabot/fetch-metadata#702</a></li>
<li>build(deps-dev): bump hono from 4.12.12 to 4.12.14 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/705 ">dependabot/fetch-metadata#705</a></li>
<li>v3.1.0 by <a
href="https://github.com/fetch-metadata-action-automation "><code>@fetch-metadata-action-automation</code></a>[bot]
in <a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/692 ">dependabot/fetch-metadata#692</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/devantler "><code>@devantler</code></a>
made their first contribution in <a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/700 ">dependabot/fetch-metadata#700</a></li>
<li><a href="https://github.com/vitorsdcs "><code>@vitorsdcs</code></a>
made their first contribution in <a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/704 ">dependabot/fetch-metadata#704</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/dependabot/fetch-metadata/compare/v3...v3.1.0 ">https://github.com/dependabot/fetch-metadata/compare/v3...v3.1.0 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="25dd0e34f4https://redirect.github.com/dependabot/fetch-metadata/issues/692 ">#692</a>)</li>
<li><a
href="e073f50d73https://redirect.github.com/dependabot/fetch-metadata/issues/705 ">#705</a>
from dependabot/dependabot/npm_and_yarn/hono-4.12.14</li>
<li><a
href="0670e167df7a7fe10a42https://redirect.github.com/dependabot/fetch-metadata/issues/702 ">#702</a>
from dependabot/dependabot/npm_and_yarn/dependencies-...</li>
<li><a
href="5168191cea23882e175b1072469591https://redirect.github.com/dependabot/fetch-metadata/issues/701 ">#701</a>
from dependabot/dependabot/github_actions/actions/cre...</li>
<li><a
href="43f8a0055cb4d904a509https://redirect.github.com/dependabot/fetch-metadata/issues/703 ">#703</a>
from dependabot/dependabot/npm_and_yarn/globals-17.5.0</li>
<li><a
href="c8046bb877ffa630c65f...25dd0e34f4https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=dependabot/fetch-metadata&package-manager=github_actions&previous-version=3.0.0&new-version=3.1.0 )](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-22 13:59:34 +00:00
dependabot[bot]
6f0213cb98
chore(deps): Bump @codemirror/view from 6.41.0 to 6.41.1 ( #1828 )
...
Bumps [@codemirror/view](https://github.com/codemirror/view ) from 6.41.0
to 6.41.1.
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/codemirror/view/commits ">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-22 13:59:07 +00:00
