dependabot[bot] opened a new pull request, #75289: URL: https://github.com/apache/airflow/pull/75289
Bumps the core-ui-package-updates group with 13 updates in the /airflow-core/src/airflow/ui directory: | Package | From | To | | --- | --- | --- | | [@guanmingchiu/sqlparser-ts](https://github.com/guan404ming/sqlparser-ts) | `0.62.0` | `0.63.0` | | [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.104.2` | `5.104.3` | | [@tanstack/react-virtual](https://github.com/TanStack/virtual/tree/HEAD/packages/react-virtual) | `3.14.17` | `3.14.21` | | [i18next](https://github.com/i18next/i18next) | `26.4.4` | `26.4.7` | | [i18next-http-backend](https://github.com/i18next/i18next-http-backend) | `4.0.2` | `4.0.3` | | [mermaid](https://github.com/mermaid-js/mermaid) | `12.1.0` | `12.2.0` | | [react-i18next](https://github.com/i18next/react-i18next) | `17.0.16` | `17.0.20` | | [react-resizable-panels](https://github.com/bvaughn/react-resizable-panels) | `4.14.4` | `4.14.5` | | [@playwright/test](https://github.com/microsoft/playwright) | `1.64.0` | `1.64.1` | | [@tanstack/eslint-plugin-query](https://github.com/TanStack/query/tree/HEAD/packages/eslint-plugin-query) | `5.104.2` | `5.104.3` | | [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `5.0.4` | `5.0.5` | | [happy-dom](https://github.com/capricorn86/happy-dom) | `21.0.1` | `21.0.3` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `5.0.4` | `5.0.5` | Updates `@guanmingchiu/sqlparser-ts` from 0.62.0 to 0.63.0 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/guan404ming/sqlparser-ts/commit/3afc96c499542c18afcdb207e5ba9d7c2178918e";><code>3afc96c</code></a> ⬆️ Upgrade to sqlparser v0.63.0 (<a href="https://redirect.github.com/guan404ming/sqlparser-ts/issues/26";>#26</a>)</li> <li><a href="https://github.com/guan404ming/sqlparser-ts/commit/6d85c14c1cc3ceb5b13442fad7ef81935807ae02";><code>6d85c14</code></a> Use badgen for npm downloads badge to avoid rate limits (<a href="https://redirect.github.com/guan404ming/sqlparser-ts/issues/25";>#25</a>)</li> <li>See full diff in <a href="https://github.com/guan404ming/sqlparser-ts/compare/v0.62.0...v0.63.0";>compare view</a></li> </ul> </details> <br /> Updates `@tanstack/react-query` from 5.104.2 to 5.104.3 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/TanStack/query/releases";>@tanstack/react-query's releases</a>.</em></p> <blockquote> <h2><code>@tanstack/react-query-devtools</code><a href="https://github.com/5";><code>@5</code></a>.104.3</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies []: <ul> <li><code>@tanstack/react-query</code><a href="https://github.com/5";><code>@5</code></a>.104.3</li> <li><code>@tanstack/query-devtools</code><a href="https://github.com/5";><code>@5</code></a>.104.3</li> </ul> </li> </ul> <h2><code>@tanstack/react-query-next-experimental</code><a href="https://github.com/5";><code>@5</code></a>.104.3</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies []: <ul> <li><code>@tanstack/react-query</code><a href="https://github.com/5";><code>@5</code></a>.104.3</li> </ul> </li> </ul> <h2><code>@tanstack/react-query-persist-client</code><a href="https://github.com/5";><code>@5</code></a>.104.3</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies [<a href="https://github.com/TanStack/query/commit/ed4d849731bfe6404be9d40aec84eda54f958d7f";><code>ed4d849</code></a>]: <ul> <li><code>@tanstack/query-persist-client-core</code><a href="https://github.com/5";><code>@5</code></a>.104.3</li> <li><code>@tanstack/react-query</code><a href="https://github.com/5";><code>@5</code></a>.104.3</li> </ul> </li> </ul> <h2><code>@tanstack/react-query</code><a href="https://github.com/5";><code>@5</code></a>.104.3</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies [<a href="https://github.com/TanStack/query/commit/0f15bc925db5813be6a17527988ec7d7b3c8cfc0";><code>0f15bc9</code></a>]: <ul> <li><code>@tanstack/query-core</code><a href="https://github.com/5";><code>@5</code></a>.104.3</li> </ul> </li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md";>@tanstack/react-query's changelog</a>.</em></p> <blockquote> <h2>5.104.3</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies [<a href="https://github.com/TanStack/query/commit/0f15bc925db5813be6a17527988ec7d7b3c8cfc0";><code>0f15bc9</code></a>]: <ul> <li><code>@tanstack/query-core</code><a href="https://github.com/5";><code>@5</code></a>.104.3</li> </ul> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/TanStack/query/commit/ee47993724e5b71e65d9f38ae416367d2dd18395";><code>ee47993</code></a> ci: Version Packages (<a href="https://github.com/TanStack/query/tree/HEAD/packages/react-query/issues/11998";>#11998</a>)</li> <li><a href="https://github.com/TanStack/query/commit/0f15bc925db5813be6a17527988ec7d7b3c8cfc0";><code>0f15bc9</code></a> fix(query-core): preserve union narrowing in setQueryData updaters (<a href="https://github.com/TanStack/query/tree/HEAD/packages/react-query/issues/11935";>#11935</a>)</li> <li>See full diff in <a href="https://github.com/TanStack/query/commits/@tanstack/[email protected]/packages/react-query";>compare view</a></li> </ul> </details> <br /> Updates `@tanstack/react-virtual` from 3.14.17 to 3.14.21 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/TanStack/virtual/releases";>@tanstack/react-virtual's releases</a>.</em></p> <blockquote> <h2><code>@tanstack/react-virtual</code><a href="https://github.com/3";><code>@3</code></a>.14.21</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies [<a href="https://github.com/TanStack/virtual/commit/05bb4d3e75359442e7a650f1814bd496e382bc3d";><code>05bb4d3</code></a>]: <ul> <li><code>@tanstack/virtual-core</code><a href="https://github.com/3";><code>@3</code></a>.19.6</li> </ul> </li> </ul> <h2><code>@tanstack/react-virtual</code><a href="https://github.com/3";><code>@3</code></a>.14.20</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies [<a href="https://github.com/TanStack/virtual/commit/56b2a63d2336907659d87125b072fa11e4ac9046";><code>56b2a63</code></a>, <a href="https://github.com/TanStack/virtual/commit/d2c7911d6b749aaa47e9aab1dc10125040363bd0";><code>d2c7911</code></a>, <a href="https://github.com/TanStack/virtual/commit/9c762fe49021b602b1109e471ba38e3065cba5b5";><code>9c762fe</code></a>, <a href="https://github.com/TanStack/virtual/commit/6789f7affc32c3fe77d8ed5b3b9d7c274d158be9";><code>6789f7a</code></a>, <a href="https://github.com/TanStack/virtual/commit/77cb05eef131699bcef0f0a5877b60503e54a366";><code>77cb05e</code></a>, <a href="https://github.com/TanStack/virtual/commit/4a1a4fdae1fa86cdda6603194876399f6651630d";><code>4a1a4fd</code></a>, <a href="https://github.com/TanStack/virtual/commit/3c61b6e30723e6af24d375ea1c5221d12a2e894d";><code>3c61b6e</code></a>, <a href="https://github.com/TanStack/virtual/commit/9c762fe49021b602b1109e471ba38e3065cba5b5";><code>9c762fe</code></a>]: <ul> <li><code>@tanstack/virtual-core</code><a href="https://github.com/3";><code>@3</code></a>.19.5</li> </ul> </li> </ul> <h2><code>@tanstack/react-virtual</code><a href="https://github.com/3";><code>@3</code></a>.14.19</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies [<a href="https://github.com/TanStack/virtual/commit/269e8ed12db0b9ce55543da5b0bb1082a6296aac";><code>269e8ed</code></a>]: <ul> <li><code>@tanstack/virtual-core</code><a href="https://github.com/3";><code>@3</code></a>.19.4</li> </ul> </li> </ul> <h2><code>@tanstack/react-virtual</code><a href="https://github.com/3";><code>@3</code></a>.14.18</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies [<a href="https://github.com/TanStack/virtual/commit/f211d3a64de6cbdd85469c9b97959db65df32eb6";><code>f211d3a</code></a>]: <ul> <li><code>@tanstack/virtual-core</code><a href="https://github.com/3";><code>@3</code></a>.19.3</li> </ul> </li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/TanStack/virtual/blob/main/packages/react-virtual/CHANGELOG.md";>@tanstack/react-virtual's changelog</a>.</em></p> <blockquote> <h2>3.14.21</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies [<a href="https://github.com/TanStack/virtual/commit/05bb4d3e75359442e7a650f1814bd496e382bc3d";><code>05bb4d3</code></a>]: <ul> <li><code>@tanstack/virtual-core</code><a href="https://github.com/3";><code>@3</code></a>.19.6</li> </ul> </li> </ul> <h2>3.14.20</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies [<a href="https://github.com/TanStack/virtual/commit/56b2a63d2336907659d87125b072fa11e4ac9046";><code>56b2a63</code></a>, <a href="https://github.com/TanStack/virtual/commit/d2c7911d6b749aaa47e9aab1dc10125040363bd0";><code>d2c7911</code></a>, <a href="https://github.com/TanStack/virtual/commit/9c762fe49021b602b1109e471ba38e3065cba5b5";><code>9c762fe</code></a>, <a href="https://github.com/TanStack/virtual/commit/6789f7affc32c3fe77d8ed5b3b9d7c274d158be9";><code>6789f7a</code></a>, <a href="https://github.com/TanStack/virtual/commit/77cb05eef131699bcef0f0a5877b60503e54a366";><code>77cb05e</code></a>, <a href="https://github.com/TanStack/virtual/commit/4a1a4fdae1fa86cdda6603194876399f6651630d";><code>4a1a4fd</code></a>, <a href="https://github.com/TanStack/virtual/commit/3c61b6e30723e6af24d375ea1c5221d12a2e894d";><code>3c61b6e</code></a>, <a href="https://github.com/TanStack/virtual/commit/9c762fe49021b602b1109e471ba38e3065cba5b5";><code>9c762fe</code></a>]: <ul> <li><code>@tanstack/virtual-core</code><a href="https://github.com/3";><code>@3</code></a>.19.5</li> </ul> </li> </ul> <h2>3.14.19</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies [<a href="https://github.com/TanStack/virtual/commit/269e8ed12db0b9ce55543da5b0bb1082a6296aac";><code>269e8ed</code></a>]: <ul> <li><code>@tanstack/virtual-core</code><a href="https://github.com/3";><code>@3</code></a>.19.4</li> </ul> </li> </ul> <h2>3.14.18</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies [<a href="https://github.com/TanStack/virtual/commit/f211d3a64de6cbdd85469c9b97959db65df32eb6";><code>f211d3a</code></a>]: <ul> <li><code>@tanstack/virtual-core</code><a href="https://github.com/3";><code>@3</code></a>.19.3</li> </ul> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/TanStack/virtual/commit/28ff2cab7a970f4e0908229d65a0da8803903900";><code>28ff2ca</code></a> ci: Version Packages (<a href="https://github.com/TanStack/virtual/tree/HEAD/packages/react-virtual/issues/1333";>#1333</a>)</li> <li><a href="https://github.com/TanStack/virtual/commit/4296ac2c7d4736072f5a3e5edcfb0bc56d7778ed";><code>4296ac2</code></a> ci: Version Packages (<a href="https://github.com/TanStack/virtual/tree/HEAD/packages/react-virtual/issues/1323";>#1323</a>)</li> <li><a href="https://github.com/TanStack/virtual/commit/9c762fe49021b602b1109e471ba38e3065cba5b5";><code>9c762fe</code></a> fix(virtual-core): finish the iOS scroll-correction plan and simplify the scr...</li> <li><a href="https://github.com/TanStack/virtual/commit/4a1a4fdae1fa86cdda6603194876399f6651630d";><code>4a1a4fd</code></a> fix(virtual-core): defer iOS scroll corrections only for touch-driven scrolls...</li> <li><a href="https://github.com/TanStack/virtual/commit/4f9636e36e43fa8fcb67c14e2277b5b7a6461f37";><code>4f9636e</code></a> ci: Version Packages (<a href="https://github.com/TanStack/virtual/tree/HEAD/packages/react-virtual/issues/1322";>#1322</a>)</li> <li><a href="https://github.com/TanStack/virtual/commit/676a098bfbe168a9bcb55ce3cca984823a85cea7";><code>676a098</code></a> ci: Version Packages (<a href="https://github.com/TanStack/virtual/tree/HEAD/packages/react-virtual/issues/1317";>#1317</a>)</li> <li>See full diff in <a href="https://github.com/TanStack/virtual/commits/@tanstack/[email protected]/packages/react-virtual";>compare view</a></li> </ul> </details> <br /> Updates `i18next` from 26.4.4 to 26.4.7 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/i18next/i18next/releases";>i18next's releases</a>.</em></p> <blockquote> <h2>v26.4.7</h2> <ul> <li>perf: <code>cloneInstance()</code> no longer inherits <code>preload</code>. <code>loadResources()</code> adds every <code>preload</code> language to each load, and clones copied <code>preload</code> from the parent, so a clone's <code>init()</code> and every <code>changeLanguage()</code> walked all preloaded languages × all namespaces through <code>queueLoad()</code> / <code>hasResourceBundle()</code>, although the parent had already loaded them into the shared store. With i18next-http-middleware (one clone + <code>changeLanguage()</code> per request), 25 preloaded languages and 20 namespaces, that was most of the per-request CPU: the reproduction from the issue went from ~90 µs to ~10 µs per request, the same as with a single language. A clone now only loads what it uses itself: its <code>changeLanguage()</code> no longer waits for parent preload languages that are still loading (the parent's own <code>init()</code> still does), and <code>clone.loadNamespaces()</code> load s the new namespace for the clone's language and fallbacks instead of every preloaded language. <code>clone.loadLanguages()</code> works as before, the parent instance is unchanged, and passing <code>preload</code> to <code>cloneInstance()</code> keeps the old behavior. Thanks <a href="https://github.com/theMostCuriousHomunculus";><code>@theMostCuriousHomunculus</code></a> for the detailed report (<a href="https://redirect.github.com/i18next/i18next/issues/2451";>#2451</a>).</li> </ul> <h2>v26.4.6</h2> <ul> <li>fix: a fallback language whose formatted code is already in the hierarchy is no longer added a second time. <code>toResolveHierarchy()</code> checked the raw <code>fallbackLng</code> value against the list, but the list holds formatted codes, so any fallback written differently from its formatted form slipped through: <code>lng: 'de-CH'</code> with <code>fallbackLng: 'de-ch'</code> gave <code>languages</code> <code>['de-CH', 'de', 'de-CH']</code>, and the same happened with <code>fallbackLng: 'EN'</code> + <code>cleanCode</code>, <code>lowerCaseLng</code>, and Intl aliases (<code>iw-IL</code> → <code>he-IL</code>). Missing keys were looked up in the same language twice. Only exact duplicates are removed; the order is unchanged. Thanks <a href="https://github.com/lprnmns";><code>@lprnmns</code></a> (<a href="https://redirect.github.com/i18next/i18next/pull/2450";>#2450</a>).</li> </ul> <h2>v26.4.5</h2> <ul> <li>fix: <code>hasLoadedNamespace(ns, { lng })</code> no longer stays <code>false</code> forever when the passed in <code>lng</code> is loaded under another code, or not at all. It checked the load state of the raw <code>lng</code>, but <code>loadLanguages()</code> stores a language under its resolved code (<code>de-ch</code> → <code>de-CH</code>, <code>de-CH</code> → <code>de</code> with <code>load: 'languageOnly'</code>) and skips a <code>lng</code> outside <code>supportedLngs</code> entirely (only the fallback gets loaded), so that state never got set. react-i18next's <code>useTranslation(ns, { lng })</code> then never became ready: with <code>useSuspense</code> it kept throwing an already resolved promise and React retried forever (100% CPU, SSR never finished), without it the load effect re-rendered in a loop. It now checks the code the language is actually loaded under, and for a <code>lng</code> outside <code>supportedLngs</code> only waits for the fallback, which is al so what <code>t()</code> resolves to. Calls without <code>lng</code> and the <code>precheck</code> (react-i18next's <code>bindI18n: 'languageChanging'</code>) are unchanged (<a href="https://redirect.github.com/i18next/react-i18next/issues/1934";>react-i18next#1934</a>).</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/i18next/i18next/blob/master/CHANGELOG.md";>i18next's changelog</a>.</em></p> <blockquote> <h2>26.4.7</h2> <ul> <li>perf: <code>cloneInstance()</code> no longer inherits <code>preload</code>. <code>loadResources()</code> adds every <code>preload</code> language to each load, and clones copied <code>preload</code> from the parent, so a clone's <code>init()</code> and every <code>changeLanguage()</code> walked all preloaded languages × all namespaces through <code>queueLoad()</code> / <code>hasResourceBundle()</code>, although the parent had already loaded them into the shared store. With i18next-http-middleware (one clone + <code>changeLanguage()</code> per request), 25 preloaded languages and 20 namespaces, that was most of the per-request CPU: the reproduction from the issue went from ~90 µs to ~10 µs per request, the same as with a single language. A clone now only loads what it uses itself: its <code>changeLanguage()</code> no longer waits for parent preload languages that are still loading (the parent's own <code>init()</code> still does), and <code>clone.loadNamespaces()</code> load s the new namespace for the clone's language and fallbacks instead of every preloaded language. <code>clone.loadLanguages()</code> works as before, the parent instance is unchanged, and passing <code>preload</code> to <code>cloneInstance()</code> keeps the old behavior. Thanks <a href="https://github.com/theMostCuriousHomunculus";><code>@theMostCuriousHomunculus</code></a> for the detailed report (<a href="https://redirect.github.com/i18next/i18next/issues/2451";>#2451</a>).</li> </ul> <h2>26.4.6</h2> <ul> <li>fix: a fallback language whose formatted code is already in the hierarchy is no longer added a second time. <code>toResolveHierarchy()</code> checked the raw <code>fallbackLng</code> value against the list, but the list holds formatted codes, so any fallback written differently from its formatted form slipped through: <code>lng: 'de-CH'</code> with <code>fallbackLng: 'de-ch'</code> gave <code>languages</code> <code>['de-CH', 'de', 'de-CH']</code>, and the same happened with <code>fallbackLng: 'EN'</code> + <code>cleanCode</code>, <code>lowerCaseLng</code>, and Intl aliases (<code>iw-IL</code> → <code>he-IL</code>). Missing keys were looked up in the same language twice. Only exact duplicates are removed; the order is unchanged. Thanks <a href="https://github.com/lprnmns";><code>@lprnmns</code></a> (<a href="https://redirect.github.com/i18next/i18next/pull/2450";>#2450</a>).</li> </ul> <h2>26.4.5</h2> <ul> <li>fix: <code>hasLoadedNamespace(ns, { lng })</code> no longer stays <code>false</code> forever when the passed in <code>lng</code> is loaded under another code, or not at all. It checked the load state of the raw <code>lng</code>, but <code>loadLanguages()</code> stores a language under its resolved code (<code>de-ch</code> → <code>de-CH</code>, <code>de-CH</code> → <code>de</code> with <code>load: 'languageOnly'</code>) and skips a <code>lng</code> outside <code>supportedLngs</code> entirely (only the fallback gets loaded), so that state never got set. react-i18next's <code>useTranslation(ns, { lng })</code> then never became ready: with <code>useSuspense</code> it kept throwing an already resolved promise and React retried forever (100% CPU, SSR never finished), without it the load effect re-rendered in a loop. It now checks the code the language is actually loaded under, and for a <code>lng</code> outside <code>supportedLngs</code> only waits for the fallback, which is al so what <code>t()</code> resolves to. Calls without <code>lng</code> and the <code>precheck</code> (react-i18next's <code>bindI18n: 'languageChanging'</code>) are unchanged (<a href="https://redirect.github.com/i18next/react-i18next/issues/1934";>react-i18next#1934</a>).</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/i18next/i18next/commit/5546d211a32e73642d22b57e58cc762338270afa";><code>5546d21</code></a> 26.4.7</li> <li><a href="https://github.com/i18next/i18next/commit/f27c937e5866f33700db40d0bf055694ee890cca";><code>f27c937</code></a> build</li> <li><a href="https://github.com/i18next/i18next/commit/50ecc221940e99dcb36670c93b342a896165fca4";><code>50ecc22</code></a> perf: clones no longer inherit preload, so changeLanguage on a clone doesn't ...</li> <li><a href="https://github.com/i18next/i18next/commit/bc951ab36e601d459e4afe7040c72cc7632d3b9e";><code>bc951ab</code></a> 26.4.6</li> <li><a href="https://github.com/i18next/i18next/commit/45d0aba52fba755039a8f6f6be76825f5aebaa81";><code>45d0aba</code></a> changelog + build for 26.4.6</li> <li><a href="https://github.com/i18next/i18next/commit/0458efc507c88e78b2daa4b0cab9c254cfdc77d2";><code>0458efc</code></a> fix: don't repeat a fallback language that differs only in casing (<a href="https://redirect.github.com/i18next/i18next/issues/2450";>#2450</a>)</li> <li><a href="https://github.com/i18next/i18next/commit/ce7b9cf970b2e6dcbecc6eb997d460ea1ea811ad";><code>ce7b9cf</code></a> 26.4.5</li> <li><a href="https://github.com/i18next/i18next/commit/4d4c60720e05da72e53af33fa0a8e0d69a56487a";><code>4d4c607</code></a> build</li> <li><a href="https://github.com/i18next/i18next/commit/8f8651e938e122b5e40eacf616c9fb823a189087";><code>8f8651e</code></a> fix: hasLoadedNamespace with a passed in lng checks the code it is actually l...</li> <li><a href="https://github.com/i18next/i18next/commit/15d0b9d90e0564947861b926352b06deff0a8a05";><code>15d0b9d</code></a> changelog: link GHSA-5jr9-983r-c8x4 in v26.4.4</li> <li>Additional commits viewable in <a href="https://github.com/i18next/i18next/compare/v26.4.4...v26.4.7";>compare view</a></li> </ul> </details> <br /> Updates `i18next-http-backend` from 4.0.2 to 4.0.3 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/i18next/i18next-http-backend/blob/master/CHANGELOG.md";>i18next-http-backend's changelog</a>.</em></p> <blockquote> <h3>4.0.3</h3> <p>Security release. See advisory <a href="https://github.com/i18next/i18next-http-backend/security/advisories/GHSA-9jhj-wvmw-cfx5";>GHSA-9jhj-wvmw-cfx5</a>.</p> <ul> <li>security: refuse a request URL that starts with <code>//</code> (or <code>\</code>) when the <code>loadPath</code> / <code>addPath</code> template does not. With a template that puts <code>{{ns}}</code> directly after a leading <code>/</code> (e.g. <code>/{{ns}}/{{lng}}.json</code>), an <code>ns</code> value of <code>/evil.example</code> passed the per-value checks, because a single <code>/</code> is allowed for nested namespaces, but it joined the template's own <code>/</code> into <code>//evil.example/en.json</code>, a protocol-relative URL that browsers send to another origin. The 4.0.2 <code>//</code> check looked at the value only, so it missed this. The interpolated URL is now checked as a whole. The default <code>/locales/{{lng}}/{{ns}}.json</code>, templates with an origin, and protocol-relative CDN templates such as <code>//cdn.example/{{lng}}/{{ns}}.json</code> are not affected and keep working.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/i18next/i18next-http-backend/commit/42e86393fd4b8d2fc34f2ddadfa6c3097bf87238";><code>42e8639</code></a> 4.0.3</li> <li><a href="https://github.com/i18next/i18next-http-backend/commit/042c3d4e4e9d73b2ae3aa76b22cb45d48f1e35b7";><code>042c3d4</code></a> security: reject interpolated URLs that turn into <code>//host</code> (GHSA-9jhj-wvmw-cfx5)</li> <li><a href="https://github.com/i18next/i18next-http-backend/commit/9b5f1e2f65365d958f9e6459c6e51d0ac9a028fa";><code>9b5f1e2</code></a> Bump i18next-http-backend from 1.2.6 to 4.0.2 in /example/angular (<a href="https://redirect.github.com/i18next/i18next-http-backend/issues/194";>#194</a>)</li> <li><a href="https://github.com/i18next/i18next-http-backend/commit/be8b9a4962a09b4833e630b3cdbd7a380a5b2aff";><code>be8b9a4</code></a> Bump next from 16.3.3 to 16.3.6 in /example/next (<a href="https://redirect.github.com/i18next/i18next-http-backend/issues/193";>#193</a>)</li> <li><a href="https://github.com/i18next/i18next-http-backend/commit/23e45382f49bb78b5dbef49f7c5d5a9321e5f9b9";><code>23e4538</code></a> Bump next from 16.2.11 to 16.3.3 in /example/next (<a href="https://redirect.github.com/i18next/i18next-http-backend/issues/192";>#192</a>)</li> <li><a href="https://github.com/i18next/i18next-http-backend/commit/848617fe6bf007c782b9b587818df90d0b14528e";><code>848617f</code></a> docs: "For AI assistants" paragraph in the README and addPath JSDoc</li> <li>See full diff in <a href="https://github.com/i18next/i18next-http-backend/compare/v4.0.2...v4.0.3";>compare view</a></li> </ul> </details> <br /> Updates `mermaid` from 12.1.0 to 12.2.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/mermaid-js/mermaid/releases";>mermaid's releases</a>.</em></p> <blockquote> <h2>[email protected]</h2> <h3>Minor Changes</h3> <ul> <li><a href="https://redirect.github.com/mermaid-js/mermaid/pull/8394";>#8394</a> <a href="https://github.com/mermaid-js/mermaid/commit/6ac38cb4441f67a29336cb3039c1a63e7a87d969";><code>6ac38cb</code></a> Thanks <a href="https://github.com/jackroberts236";><code>@jackroberts236</code></a>! - feat: Add opt-in mindmap coloring by hierarchy depth using <code>mindmap.colorBy: depth</code> and the existing theme palette.</li> </ul> <h3>Patch Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/mermaid-js/mermaid/pull/8409";>#8409</a> <a href="https://github.com/mermaid-js/mermaid/commit/419ee6855da1ee1170445164e8ba9850ef279568";><code>419ee68</code></a> Thanks <a href="https://github.com/ashishjain0512";><code>@ashishjain0512</code></a>! - fix: size circle and double-circle nodes from their label instead of <code>minNodeWidth</code>, and trim neo circle padding</p> </li> <li> <p><a href="https://redirect.github.com/mermaid-js/mermaid/pull/8395";>#8395</a> <a href="https://github.com/mermaid-js/mermaid/commit/2fb3ff1d9f4f74478f28096e3e38565378b9f686";><code>2fb3ff1</code></a> Thanks <a href="https://github.com/ashishjain0512";><code>@ashishjain0512</code></a>! - fix: ELK no longer straightens an edge terminal when that would put a label over another edge, or an edge through a label</p> </li> <li> <p><a href="https://redirect.github.com/mermaid-js/mermaid/pull/8394";>#8394</a> <a href="https://github.com/mermaid-js/mermaid/commit/cbf89ab1377a8e7febff2614d7cbd5f78dd3d87c";><code>cbf89ab</code></a> Thanks <a href="https://github.com/jackroberts236";><code>@jackroberts236</code></a>! - fix: Keep mindmap HTML labels readable in the neo look on themes that repaint node backgrounds</p> </li> <li> <p><a href="https://redirect.github.com/mermaid-js/mermaid/pull/8390";>#8390</a> <a href="https://github.com/mermaid-js/mermaid/commit/430ac9b4de28ec360df92df0adf998523a57ce4d";><code>430ac9b</code></a> Thanks <a href="https://github.com/ashishjain0512";><code>@ashishjain0512</code></a>! - fix: Centre mindmap node labels when <code>htmlLabels</code> is false</p> </li> <li> <p><a href="https://redirect.github.com/mermaid-js/mermaid/pull/8161";>#8161</a> <a href="https://github.com/mermaid-js/mermaid/commit/d7532edcc2d8dbb7563469884ebdfda4fe85994b";><code>d7532ed</code></a> Thanks <a href="https://github.com/filipsajdak";><code>@filipsajdak</code></a>! - fix: scope a swimlane cluster's DOM id like every other cluster, so two diagrams on one page do not collide</p> </li> <li> <p><a href="https://redirect.github.com/mermaid-js/mermaid/pull/8270";>#8270</a> <a href="https://github.com/mermaid-js/mermaid/commit/ad8d61ad3fe2a2262970e3a9059e308a99680891";><code>ad8d61a</code></a> Thanks <a href="https://github.com/filipsajdak";><code>@filipsajdak</code></a>! - fix(rendering): clip an edge for the layout engine that drew it, so a diagram pinning its own engine (bpmn, swimlanes) still renders when the configured default is another one</p> </li> <li> <p><a href="https://redirect.github.com/mermaid-js/mermaid/pull/8383";>#8383</a> <a href="https://github.com/mermaid-js/mermaid/commit/9d41c0fbf856fc71aff93e4ed55a38c9cc932a76";><code>9d41c0f</code></a> Thanks <a href="https://github.com/filipsajdak";><code>@filipsajdak</code></a>! - fix(swimlanes): split shared terminal lanes again after crossing cleanup, so an edge that detours around another lane no longer ends on the same attachment point as a neighbouring edge</p> </li> <li> <p><a href="https://redirect.github.com/mermaid-js/mermaid/pull/8384";>#8384</a> <a href="https://github.com/mermaid-js/mermaid/commit/6c67397dee4422a07646dd0b8960f1fcf64849e8";><code>6c67397</code></a> Thanks <a href="https://github.com/filipsajdak";><code>@filipsajdak</code></a>! - fix(swimlanes): move a lane's title band clear of an edge that crosses it, in LR diagrams whose lanes carry no direction of their own and when the edge runs along the band's border</p> </li> <li> <p><a href="https://redirect.github.com/mermaid-js/mermaid/pull/8366";>#8366</a> <a href="https://github.com/mermaid-js/mermaid/commit/40124c3a471040cdf92269dda43c737d7431f8f2";><code>40124c3</code></a> Thanks <a href="https://github.com/SwastikTripathi";><code>@SwastikTripathi</code></a>! - fix: swimlane nodes with no edges keep their source order inside a lane instead of being sorted by ID</p> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/mermaid-js/mermaid/commit/1fb7869866dd619168d840291c9c54b4f129758b";><code>1fb7869</code></a> Merge pull request <a href="https://redirect.github.com/mermaid-js/mermaid/issues/8432";>#8432</a> from mermaid-js/changeset-release/master</li> <li><a href="https://github.com/mermaid-js/mermaid/commit/34772ca17ed84bd5de149bacd83f75ed856b653e";><code>34772ca</code></a> Version Packages</li> <li><a href="https://github.com/mermaid-js/mermaid/commit/42292eaee1ee921cbe716761b51d57e708dba2c4";><code>42292ea</code></a> Merge pull request <a href="https://redirect.github.com/mermaid-js/mermaid/issues/8428";>#8428</a> from mermaid-js/release/12.2.0</li> <li><a href="https://github.com/mermaid-js/mermaid/commit/e6c805914ae3b65c7e7bde78a23ca98fec4a9b36";><code>e6c8059</code></a> Wrong version set previously</li> <li><a href="https://github.com/mermaid-js/mermaid/commit/6c55f565dcf2650fc7d0ad847938a6eddb8eab8d";><code>6c55f56</code></a> Set mermaid version when Coloring by depth supported in Mindmap</li> <li><a href="https://github.com/mermaid-js/mermaid/commit/5a0d8cf4067eba24e5ff12094284ee77bb8202e9";><code>5a0d8cf</code></a> Fix missing parallel uploads</li> <li><a href="https://github.com/mermaid-js/mermaid/commit/788f396725fa3fca1237b092d6c9595b0cfa6ecf";><code>788f396</code></a> Update according to discussion with core-team members</li> <li><a href="https://github.com/mermaid-js/mermaid/commit/33d0a4997b742df0d04838cce3f572e674d1cf9d";><code>33d0a49</code></a> Merge pull request <a href="https://redirect.github.com/mermaid-js/mermaid/issues/8411";>#8411</a> from mermaid-js/renovate/npm-katex-vulnerability</li> <li><a href="https://github.com/mermaid-js/mermaid/commit/6538fde92b6c30bca704e913f2f0476cc09bbd97";><code>6538fde</code></a> Update dependency katex to ^0.18.0 [SECURITY]</li> <li><a href="https://github.com/mermaid-js/mermaid/commit/ba3022d16a17cf60fc4eda5022848f938f79b6e6";><code>ba3022d</code></a> Merge pull request <a href="https://redirect.github.com/mermaid-js/mermaid/issues/8398";>#8398</a> from mermaid-js/pebr/12.1.0-tmp</li> <li>Additional commits viewable in <a href="https://github.com/mermaid-js/mermaid/compare/[email protected]@12.2.0";>compare view</a></li> </ul> </details> <br /> Updates `react-i18next` from 17.0.16 to 17.0.20 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md";>react-i18next's changelog</a>.</em></p> <blockquote> <h2>17.0.20</h2> <ul> <li>fix: <code>useTranslation</code> no longer suspends when a missing namespace is loaded by a synchronous backend. With <code>useSuspense</code> (the default), a namespace that wasn't in the store yet always made the component throw the loading promise, even when the backend had already delivered the resources while that promise was being created. React then showed the <code>Suspense</code> fallback and rendered again right away, which appears as a fallback flash (a white flash in React Native) and costs performance. The hook now starts the load first, checks the store again and only suspends if the namespace is still missing. This helps every backend that calls back synchronously, for example <code>i18next-resources-to-backend</code> with a static resources object or a loader that returns the data directly. Async backends, and an instance that isn't initialized yet, still suspend as before. Thanks <a href="https://github.com/oblador";><code>@oblador</code></a> (<a href="https ://redirect.github.com/i18next/react-i18next/pull/1937">#1937</a>).</li> </ul> <h2>17.0.19</h2> <ul> <li>fix: <code>useTranslation</code> with an inline selector <code>keyPrefix</code> (<code>useTranslation('ns', { keyPrefix: ($) => $.role })</code>) returned a new <code>t</code> on every render, so every effect, <code>useCallback</code> and <code>useMemo</code> depending on <code>t</code> ran again each time. The cached <code>t</code> was compared against the <code>keyPrefix</code> function itself, and an inline arrow is a new function on every render. It is now compared against the key the selector resolves to (with the same options and namespace list <code>getFixedT</code> resolves it with), so <code>t</code> keeps its identity as long as the resolved prefix does, just like a string <code>keyPrefix</code>. A selector that resolves to a different key still gets a new <code>t</code>, and i18next still resolves the selector on each <code>t</code> call as before. Fixes <a href="https://redirect.github.com/i18next/react-i18next/issues/1936";>#1936</a>.</li> <li>fix: <code>useTranslation</code> kept returning the previous <code>t</code> when only the namespace (<code>useTranslation('a')</code> → <code>useTranslation('b')</code>) or only the i18n instance (another instance with the same language, via props or <code>I18nextProvider</code>) changed on a mounted component. That <code>t</code> kept resolving against the old namespace or instance until something else (the language, the ready state, a bound i18n event) produced a new one. Both are now part of the check that decides whether the cached <code>t</code> can be reused.</li> </ul> <h2>17.0.18</h2> <ul> <li>fix(Trans): with <code>shouldUnescape</code>, the default <code>unescape</code> now turns <code>&nbsp;</code> and <code>&[#160](https://github.com/i18next/react-i18next/issues/160);</code> into a no-break space (U+00A0) instead of a regular space (U+0020). The regular space dropped what the entity is for: <code>u&nbsp;nás</code> or <code>10&nbsp;km</code> could wrap across lines, and consecutive <code>&nbsp;</code>s collapsed into one space. This also matches <code>IcuTrans</code>, whose entity decoder already mapped <code>&nbsp;</code> to U+00A0. Compatibility note: only affects <code>shouldUnescape</code>; snapshots or exact <code>textContent</code> comparisons of such text now contain U+00A0 (Testing Library's default normalizer still matches it as a space). A custom <code>react.unescape</code> function can restore the old mapping for text nodes. Thanks <a href="https://github.com/lprnmns";><code>@lprnmns</code></a> (<a href="https://redirect.gith ub.com/i18next/react-i18next/pull/1935">#1935</a>).</li> </ul> <h2>17.0.17</h2> <ul> <li>perf: <code>useTranslation</code> no longer unsubscribes and resubscribes its i18n listeners on every render. The <code>subscribe</code> callback handed to <code>useSyncExternalStore</code> depended on the merged options object, which is rebuilt whenever <code>props</code> is a new object: with no options (the <code>{}</code> default), with options passed inline (<code>useTranslation('ns', { keyPrefix })</code>), and through <code>withTranslation</code> and <code><Translation></code>. A new <code>subscribe</code> makes React resubscribe, so each render of each caller ran <code>i18n.off</code> and <code>i18n.on</code> in an extra effect. It now depends only on the instance and the <code>bindI18n</code>/<code>bindI18nStore</code> event names. No updates were ever missed, because React re-checks the snapshot after resubscribing; this only removes the churn, which adds up with many mounted components that re-render often. Reported via <a href="https://redirect.github.com/i18 next/next-i18next/issues/2349">next-i18next#2349</a>.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/i18next/react-i18next/commit/66dbfbab1c5430a99a7d9badc308f59fa3931678";><code>66dbfba</code></a> 17.0.20</li> <li><a href="https://github.com/i18next/react-i18next/commit/806df1ee326534bd1656fcc88239321f70c9c65f";><code>806df1e</code></a> build, changelog for 17.0.20</li> <li><a href="https://github.com/i18next/react-i18next/commit/49ec36d359236d3f5f7298b9da355754eb1fb719";><code>49ec36d</code></a> fix(useTranslation): don't suspend synchronous backends (<a href="https://redirect.github.com/i18next/react-i18next/issues/1937";>#1937</a>)</li> <li><a href="https://github.com/i18next/react-i18next/commit/d576d09cbebb9e2fc7a52a4cd6fe80793459cdfb";><code>d576d09</code></a> 17.0.19</li> <li><a href="https://github.com/i18next/react-i18next/commit/d69464b4c4346309c530c9c5777191954f9842f0";><code>d69464b</code></a> build</li> <li><a href="https://github.com/i18next/react-i18next/commit/36e327ac48e5095d0313f8b3a39151e5ad3fc32f";><code>36e327a</code></a> fix(useTranslation): keep t stable for an inline selector keyPrefix</li> <li><a href="https://github.com/i18next/react-i18next/commit/f17e70812944aa767482799cfbbaaf4a3d6a5d72";><code>f17e708</code></a> 17.0.18</li> <li><a href="https://github.com/i18next/react-i18next/commit/b799c190f66472e9c518d5a758a42302f8f12cea";><code>b799c19</code></a> build, changelog for 17.0.18</li> <li><a href="https://github.com/i18next/react-i18next/commit/7a55f5620d0ea0be0b3ab0269a605fd343519e92";><code>7a55f56</code></a> fix: unescape and &<a href="https://redirect.github.com/i18next/react-i18next/issues/160";>#160</a>; to a no-break space (<a href="https://redirect.github.com/i18next/react-i18next/issues/1935";>#1935</a>)</li> <li><a href="https://github.com/i18next/react-i18next/commit/511e1f24ccb152bad43b592b147310614252bff0";><code>511e1f2</code></a> 17.0.17</li> <li>Additional commits viewable in <a href="https://github.com/i18next/react-i18next/compare/v17.0.16...v17.0.20";>compare view</a></li> </ul> </details> <br /> Updates `react-resizable-panels` from 4.14.4 to 4.14.5 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/bvaughn/react-resizable-panels/releases";>react-resizable-panels's releases</a>.</em></p> <blockquote> <h2>4.14.5</h2> <ul> <li><code>Group</code>, <code>Panel</code>, <code>Separator</code>, <code>Grid</code>, and <code>Cell</code> only render an explicit <code>id</code> (or <code>data-testid</code>) as <code>data-testid</code> - <a href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/766";>#766</a></li> <li>Empty string <code>id</code> prop is now treated the same as an undefined value and falls back to <code>useId</code> - <a href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/766";>#766</a></li> <li><code>Panel</code> with an <code>id</code> of <code>0</code> is now properly treated as an explicit <code>id</code> value - <a href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/766";>#766</a></li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/bvaughn/react-resizable-panels/blob/main/CHANGELOG.md";>react-resizable-panels's changelog</a>.</em></p> <blockquote> <h2>4.14.5</h2> <ul> <li><code>Group</code>, <code>Panel</code>, <code>Separator</code>, <code>Grid</code>, and <code>Cell</code> only render an explicit <code>id</code> (or <code>data-testid</code>) as <code>data-testid</code> - <a href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/766";>#766</a></li> <li>Empty string <code>id</code> prop is now treated the same as an undefined value and falls back to <code>useId</code> - <a href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/766";>#766</a></li> <li><code>Panel</code> with an <code>id</code> of <code>0</code> is now properly treated as an explicit <code>id</code> value - <a href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/766";>#766</a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/bvaughn/react-resizable-panels/commit/00766aa4b967ce3050908075ed891f4a9e96a86e";><code>00766aa</code></a> 4.14.4 -> 4.14.5</li> <li><a href="https://github.com/bvaughn/react-resizable-panels/commit/593afafa93d90582808ba7f2bb0cb83b9b78c488";><code>593afaf</code></a> Improve id and data-testid semantics (<a href="https://redirect.github.com/bvaughn/react-resizable-panels/issues/766";>#766</a>)</li> <li><a href="https://github.com/bvaughn/react-resizable-panels/commit/23453f69c307ceb6f7c2ace1bb5f75decb34c8ed";><code>23453f6</code></a> Update react-lib-tools dep</li> <li><a href="https://github.com/bvaughn/react-resizable-panels/commit/f757fb90367c7417fd5708adb9c9ec908ac8cc10";><code>f757fb9</code></a> Update react-lib-tools dep</li> <li><a href="https://github.com/bvaughn/react-resizable-panels/commit/cdaec0d674ab3c563bc42d6fd6db3415724fa604";><code>cdaec0d</code></a> Fix typos (<a href="https://redirect.github.com/bvaughn/react-resizable-panels/issues/764";>#764</a>)</li> <li><a href="https://github.com/bvaughn/react-resizable-panels/commit/213232f3156f2cfe790cce5ad970adb0039a60d4";><code>213232f</code></a> Fix TSC error in config file</li> <li><a href="https://github.com/bvaughn/react-resizable-panels/commit/74cc7f8cfdb7792843f2fcdef0e3686b817ba037";><code>74cc7f8</code></a> CI now runs the e2e tests against production builds</li> <li><a href="https://github.com/bvaughn/react-resizable-panels/commit/558e0d6f1af9a82af2004a58a426ad4043fc5119";><code>558e0d6</code></a> Run CI on main</li> <li><a href="https://github.com/bvaughn/react-resizable-panels/commit/b903cd9805e1f69d63810d5f31d88ae7a64b030b";><code>b903cd9</code></a> Speed up e2e tests</li> <li>See full diff in <a href="https://github.com/bvaughn/react-resizable-panels/compare/4.14.4...4.14.5";>compare view</a></li> </ul> </details> <br /> Updates `@playwright/test` from 1.64.0 to 1.64.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/microsoft/playwright/releases";>@playwright/test's releases</a>.</em></p> <blockquote> <h2>v1.64.1</h2> <h3>Bug Fixes</h3> <ul> <li><a href="https://redirect.github.com/microsoft/playwright/issues/43247";>#43247</a> [Bug]: _electron.launch intermittently loses a packaged app's first window since 1.64.0</li> <li><a href="https://redirect.github.com/microsoft/playwright/issues/43242";>#43242</a> [Regression]: Chromium 155+ aborts a preflighted cross-origin redirect whenever any route is registered (net::ERR_ABORTED)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/microsoft/playwright/commit/cfe490d941f992655948eee8fd4fd94e1c4234bf";><code>cfe490d</code></a> cherry-pick(<a href="https://redirect.github.com/microsoft/playwright/issues/43353";>#43353</a>): docs: release notes for v1.64 Python</li> <li><a href="https://github.com/microsoft/playwright/commit/866cbb864009f84d7e8e41c64fdbfceff43f280d";><code>866cbb8</code></a> chore: mark v1.64.1 (<a href="https://redirect.github.com/microsoft/playwright/issues/43354";>#43354</a>)</li> <li><a href="https://github.com/microsoft/playwright/commit/1b2924712024804936dbcfe9fabaa655d52325e5";><code>1b29247</code></a> cherry-pick(<a href="https://redirect.github.com/microsoft/playwright/issues/43250";>#43250</a>): fix(electron): do not drop windows that have not navigat...</li> <li><a href="https://github.com/microsoft/playwright/commit/632d976826c74b0163fd5201a05b7b4853ba3f4a";><code>632d976</code></a> cherry-pick(<a href="https://redirect.github.com/microsoft/playwright/issues/43249";>#43249</a>): fix(chromium): disable AvoidCorsURLLoaderRestartOnRedirect</li> <li><a href="https://github.com/microsoft/playwright/commit/824d0c5d1e10f21fcbe88d18a99d06194acde77c";><code>824d0c5</code></a> cherry-pick(<a href="https://redirect.github.com/microsoft/playwright/issues/43217";>#43217</a>): chore(dotnet): fix async suffix of optional-arg overload...</li> <li>See full diff in <a href="https://github.com/microsoft/playwright/compare/v1.64.0...v1.64.1";>compare view</a></li> </ul> </details> <br /> Updates `@tanstack/eslint-plugin-query` from 5.104.2 to 5.104.3 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/TanStack/query/releases";>@tanstack/eslint-plugin-query's releases</a>.</em></p> <blockquote> <h2><code>@tanstack/eslint-plugin-query</code><a href="https://github.com/5";><code>@5</code></a>.104.3</h2> <p>No changes in this release.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/TanStack/query/blob/main/packages/eslint-plugin-query/CHANGELOG.md";>@tanstack/eslint-plugin-query's changelog</a>.</em></p> <blockquote> <h2>5.104.3</h2> <p>No changes in this release.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/TanStack/query/commit/ee47993724e5b71e65d9f38ae416367d2dd18395";><code>ee47993</code></a> ci: Version Packages (<a href="https://github.com/TanStack/query/tree/HEAD/packages/eslint-plugin-query/issues/11998";>#11998</a>)</li> <li>See full diff in <a href="https://github.com/TanStack/query/commits/@tanstack/[email protected]/packages/eslint-plugin-query";>compare view</a></li> </ul> </details> <br /> Updates `@vitest/coverage-v8` from 5.0.4 to 5.0.5 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vitest-dev/vitest/releases";>@vitest/coverage-v8's releases</a>.</em></p> <blockquote> <h2>v5.0.5</h2> <h3> 🐞 Bug Fixes</h3> <ul> <li>Keep vite default <code>fs.deny</code> with api token file - by <a href="https://github.com/hi-ogawa";><code>@hi-ogawa</code></a>, <strong>Hiroshi Ogawa</strong> and <strong>Claude Opus 5.5</strong> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11578";>vitest-dev/vitest#11578</a> <a href="https://github.com/vitest-dev/vitest/commit/28dc1edfb";><!-- raw HTML omitted -->(28dc1)<!-- raw HTML omitted --></a></li> <li>Handle quoted file names in <code>--changed</code> - by <a href="https://github.com/sheremet-va";><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11583";>vitest-dev/vitest#11583</a> <a href="https://github.com/vitest-dev/vitest/commit/14921e962";><!-- raw HTML omitted -->(14921)<!-- raw HTML omitted --></a></li> <li>Add <code>data</code> to the <code>import.meta.hot</code> stub - by <a href="https://github.com/sheremet-va";><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11590";>vitest-dev/vitest#11590</a> <a href="https://github.com/vitest-dev/vitest/commit/3a8289ac3";><!-- raw HTML omitted -->(3a828)<!-- raw HTML omitted --></a></li> <li>Set <code>skip</code> in <code>skipIf</code>, ignore <code>undefined</code> options - by <a href="https://github.com/sheremet-va";><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11591";>vitest-dev/vitest#11591</a> <a href="https://github.com/vitest-dev/vitest/commit/d523a15f2";><!-- raw HTML omitted -->(d523a)<!-- raw HTML omitted --></a></li> <li>Skip builtin loading in async leak detector - by <a href="https://github.com/sheremet-va";><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11598";>vitest-dev/vitest#11598</a> <a href="https://github.com/vitest-dev/vitest/commit/fe86a64c6";><!-- raw HTML omitted -->(fe86a)<!-- raw HTML omitted --></a></li> <li>Keep the import frame in native loader errors - by <a href="https://github.com/sheremet-va";><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11599";>vitest-dev/vitest#11599</a> <a href="https://github.com/vitest-dev/vitest/commit/9697b3894";><!-- raw HTML omitted -->(9697b)<!-- raw HTML omitted --></a></li> <li>Run hook cleanups when a later hook fails - by <a href="https://github.com/sheremet-va";><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11605";>vitest-dev/vitest#11605</a> <a href="https://github.com/vitest-dev/vitest/commit/6c5a44720";><!-- raw HTML omitted -->(6c5a4)<!-- raw HTML omitted --></a></li> <li>Release mocks of finished test files - by <a href="https://github.com/sheremet-va";><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11607";>vitest-dev/vitest#11607</a> <a href="https://github.com/vitest-dev/vitest/commit/e9c3d72f0";><!-- raw HTML omitted -->(e9c3d)<!-- raw HTML omitted --></a></li> <li>Abort all running tests on cancel - by <a href="https://github.com/sheremet-va";><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11606";>vitest-dev/vitest#11606</a> <a href="https://github.com/vitest-dev/vitest/commit/6621a72d6";><!-- raw HTML omitted -->(6621a)<!-- raw HTML omitted --></a></li> <li><strong>browser</strong>: <ul> <li>Ignore synthetic pagehide events - by <a href="https://github.com/sheremet-va";><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11582";>vitest-dev/vitest#11582</a> <a href="https://github.com/vitest-dev/vitest/commit/ca0813584";><!-- raw HTML omitted -->(ca081)<!-- raw HTML omitted --></a></li> <li>Run plugin buildStart on server creation - by <a href="https://github.com/sheremet-va";><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11593";>vitest-dev/vitest#11593</a> <a href="https://github.com/vitest-dev/vitest/commit/ea611e44c";><!-- raw HTML omitted -->(ea611)<!-- raw HTML omitted --></a></li> <li>Drop late connections of closed sessions - by <a href="https://github.com/sheremet-va";><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11600";>vitest-dev/vitest#11600</a> <a href="https://github.com/vitest-dev/vitest/commit/f161e6df2";><!-- raw HTML omitted -->(f161e)<!-- raw HTML omitted --></a></li> <li>Wait 30s for the browser to close - by <a href="https://github.com/sheremet-va";><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11601";>vitest-dev/vitest#11601</a> <a href="https://github.com/vitest-dev/vitest/commit/6498b666a";><!-- raw HTML omitted -->(6498b)<!-- raw HTML omitted --></a></li> <li>Run global setup once with instances - by <a href="https://github.com/sheremet-va";><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11596";>vitest-dev/vitest#11596</a> <a href="https://github.com/vitest-dev/vitest/commit/8dd67c262";><!-- raw HTML omitted -->(8dd67)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>reporter</strong>: <ul> <li>End reason <code>&[#39](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8/issues/39);failed&[#39](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8/issues/39);</code> on worker crash - by <a href="https://github.com/AriPerkkio";><code>@AriPerkkio</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11568";>vitest-dev/vitest#11568</a> <a href="https://github.com/vitest-dev/vitest/commit/6ae8e89ff";><!-- raw HTML omitted -->(6ae8e)<!-- raw HTML omitted --></a></li> </ul> </li> </ul> <h5> <a href="https://github.com/vitest-dev/vitest/compare/v5.0.4...v5.0.5";>View changes on GitHub</a></h5> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vitest-dev/vitest/commit/7a825db43e2beca0b219d2eadaec334cb81af0c7";><code>7a825db</code></a> chore: release v5.0.5 (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8/issues/11609";>#11609</a>)</li> <li>See full diff in <a href="https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/coverage-v8";>compare view</a></li> </ul> </details> <br /> Updates `happy-dom` from 21.0.1 to 21.0.3 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/capricorn86/happy-dom/releases";>happy-dom's releases</a>.</em></p> <blockquote> <h2>v21.0.3</h2> <h3>:construction_worker_man: Patch fixes</h3> <ul> <li>Fixes security vulnerability where authorization header was forwarded when redirecting - By <strong><a href="https://github.com/capricorn86";><code>@capricorn86</code></a></strong></li> </ul> <h2>v21.0.2</h2> <h3>:construction_worker_man: Patch fixes</h3> <ul> <li>Fixes SSRF security vulnerability by doing a target-origin bypass in the proxy server in <a href="https://github.com/capricorn86/happy-dom/wiki/Server-Renderer";>@happy-dom/server-renderer</a> - By <strong><a href="https://github.com/capricorn86";><code>@capricorn86</code></a></strong></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/capricorn86/happy-dom/commit/875ef5c647b336cc933c82426c9d780a5aab84f9";><code>875ef5c</code></a> fix: Fixes security vulnerability where authorization header was forwarded wh...</li> <li><a href="https://github.com/capricorn86/happy-dom/commit/1f3ffdf634231361de1a2acb629b4fe8ee1bd85d";><code>1f3ffdf</code></a> fix: Fixes SSRF security vulnerability by doing a target-origin bypass in the...</li> <li><a href="https://github.com/capricorn86/happy-dom/commit/f55c7e0852a3ecf33252d4955f260a5246f3f63e";><code>f55c7e0</code></a> chore: Update security documentation (<a href="https://redirect.github.com/capricorn86/happy-dom/issues/2509";>#2509</a>)</li> <li>See full diff in <a href="https://github.com/capricorn86/happy-dom/compare/v21.0.1...v21.0.3";>compare view</a></li> </ul> </details> <br /> Updates `vitest` from 5.0.4 to 5.0.5 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vitest-dev/vitest/releases";>vitest's releases</a>.</em></p> <blockquote> <h2>v5.0.5</h2> <h3> 🐞 Bug Fixes</h3> <ul> <li>Keep vite default <code>fs.deny</code> with api token file - by <a href="https://github.com/hi-ogawa";><code>@hi-ogawa</code></a>, <strong>Hiroshi Ogawa</strong> and <strong>Claude Opus 5.5</strong> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11578";>vitest-dev/vitest#11578</a> <a href="https://github.com/vitest-dev/vitest/commit/28dc1edfb";><!-- raw HTML omitted -->(28dc1)<!-- raw HTML omitted --></a></li> <li>Handle quoted file names in <code>--changed</code> - by <a href="https://github.com/sheremet-va";><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11583";>vitest-dev/vitest#11583</a> <a href="https://github.com/vitest-dev/vitest/commit/14921e962";><!-- raw HTML omitted -->(14921)<!-- raw HTML omitted --></a></li> <li>Add <code>data</code> to the <code>import.meta.hot</code> stub - by <a href="https://github.com/sheremet-va";><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11590";>vitest-dev/vitest#11590</a> <a href="https://github.com/vitest-dev/vitest/commit/3a8289ac3";><!-- raw HTML omitted -->(3a828)<!-- raw HTML omitted --></a></li> <li>Set <code>skip</code> in <code>skipIf</code>, ignore <code>undefined</code> options - by <a href="https://github.com/sheremet-va";><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11591";>vitest-dev/vitest#11591</a> <a href="https://github.com/vitest-dev/vitest/commit/d523a15f2";><!-- raw HTML omitted -->(d523a)<!-- raw HTML omitted --></a></li> <li>Skip builtin loading in async leak detector - by <a href="https://github.com/sheremet-va";><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11598";>vitest-dev/vitest#11598</a> <a href="https://github.com/vitest-dev/vitest/commit/fe86a64c6";><!-- raw HTML omitted -->(fe86a)<!-- raw HTML omitted --></a></li> <li>Keep the import frame in native loader errors - by <a href="https://github.com/sheremet-va";><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11599";>vitest-dev/vitest#11599</a> <a href="https://github.com/vitest-dev/vitest/commit/9697b3894";><!-- raw HTML omitted -->(9697b)<!-- raw HTML omitted --></a></li> <li>Run hook cleanups when a later hook fails - by <a href="https://github.com/sheremet-va";><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11605";>vitest-dev/vitest#11605</a> <a href="https://github.com/vitest-dev/vitest/commit/6c5a44720";><!-- raw HTML omitted -->(6c5a4)<!-- raw HTML omitted --></a></li> <li>Release mocks of finished test files - by <a href="https://github.com/sheremet-va";><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11607";>vitest-dev/vitest#11607</a> <a href="https://github.com/vitest-dev/vitest/commit/e9c3d72f0";><!-- raw HTML omitted -->(e9c3d)<!-- raw HTML omitted --></a></li> <li>Abort all running tests on cancel - by <a href="https://github.com/sheremet-va";><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11606";>vitest-dev/vitest#11606</a> <a href="https://github.com/vitest-dev/vitest/commit/6621a72d6";><!-- raw HTML omitted -->(6621a)<!-- raw HTML omitted --></a></li> <li><strong>browser</strong>: <ul> <li>Ignore synthetic pagehide events - by <a href="https://github.com/sheremet-va";><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11582";>vitest-dev/vitest#11582</a> <a href="https://github.com/vitest-dev/vitest/commit/ca0813584";><!-- raw HTML omitted -->(ca081)<!-- raw HTML omitted --></a></li> <li>Run plugin buildStart on server creation - by <a href="https://github.com/sheremet-va";><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11593";>vitest-dev/vitest#11593</a> <a href="https://github.com/vitest-dev/vitest/commit/ea611e44c";><!-- raw HTML omitted -->(ea611)<!-- raw HTML omitted --></a></li> <li>Drop late connections of closed sessions - by <a href="https://github.com/sheremet-va";><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11600";>vitest-dev/vitest#11600</a> <a href="https://github.com/vitest-dev/vitest/commit/f161e6df2";><!-- raw HTML omitted -->(f161e)<!-- raw HTML omitted --></a></li> <li>Wait 30s for the browser to close - by <a href="https://github.com/sheremet-va";><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11601";>vitest-dev/vitest#11601</a> <a href="https://github.com/vitest-dev/vitest/commit/6498b666a";><!-- raw HTML omitted -->(6498b)<!-- raw HTML omitted --></a></li> <li>Run global setup once with instances - by <a href="https://github.com/sheremet-va";><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11596";>vitest-dev/vitest#11596</a> <a href="https://github.com/vitest-dev/vitest/commit/8dd67c262";><!-- raw HTML omitted -->(8dd67)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>reporter</strong>: <ul> <li>End reason <code>&[#39](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/39);failed&[#39](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/39);</code> on worker crash - by <a href="https://github.com/AriPerkkio";><code>@AriPerkkio</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11568";>vitest-dev/vitest#11568</a> <a href="https://github.com/vitest-dev/vitest/commit/6ae8e89ff";><!-- raw HTML omitted -->(6ae8e)<!-- raw HTML omitted --></a></li> </ul> </li> </ul> <h5> <a href="https://github.com/vitest-dev/vitest/compare/v5.0.4...v5.0.5";>View changes on GitHub</a></h5> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vitest-dev/vitest/commit/7a825db43e2beca0b219d2eadaec334cb81af0c7";><code>7a825db</code></a> chore: release v5.0.5 (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11609";>#11609</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/6621a72d6ed371e43f80ff327f5063693bd6b1ad";><code>6621a72</code></a> fix: abort all running tests on cancel (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11606";>#11606</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/e9c3d72f0c8d6867de06a3df43ea28a05eeec444";><code>e9c3d72</code></a> fix: release mocks of finished test files (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11607";>#11607</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/8dd67c2625943d824e257b87ae57a14094e90eed";><code>8dd67c2</code></a> fix(browser): run global setup once with instances (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11596";>#11596</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/6c5a447203a29a0708fbc5de4fb91ea501bdc395";><code>6c5a447</code></a> fix: run hook cleanups when a later hook fails (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11605";>#11605</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/9697b3894f456b85db91f3824ebe833449305c04";><code>9697b38</code></a> fix: keep the import frame in native loader errors (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11599";>#11599</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/6498b666a3ae8961f6f2a8abdc89015b6fd0b3aa";><code>6498b66</code></a> fix(browser): wait 30s for the browser to close (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11601";>#11601</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/f161e6df2b3c0bc84982d374094379139e380791";><code>f161e6d</code></a> fix(browser): drop late connections of closed sessions (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11600";>#11600</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/fe86a64c6c6aa75481bffe5880b5c4e35ea67927";><code>fe86a64</code></a> fix: skip builtin loading in async leak detector (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11598";>#11598</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/6ae8e89ff0734cf476e30186a83aebe6771aa330";><code>6ae8e89</code></a> fix(reporter): end reason <code>'failed'</code> on worker crash (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11568";>#11568</a>)</li> <li>Additional commits viewable in <a href="https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/vitest";>compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
