This is an automated email from the ASF dual-hosted git repository.

kou pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/arrow-site.git


The following commit(s) were added to refs/heads/main by this push:
     new 46dc0770f9a Bump ajv from 8.17.1 to 8.18.0 (#761)
46dc0770f9a is described below

commit 46dc0770f9a7a6ba6021f133403ace14a9a5618d
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Sun Feb 22 21:17:50 2026 +0900

    Bump ajv from 8.17.1 to 8.18.0 (#761)
    
    Bumps [ajv](https://github.com/ajv-validator/ajv) from 8.17.1 to 8.18.0.
    <details>
    <summary>Release notes</summary>
    <p><em>Sourced from <a
    href="https://github.com/ajv-validator/ajv/releases";>ajv's
    releases</a>.</em></p>
    <blockquote>
    <h2>v8.18.0</h2>
    <h2>What's Changed</h2>
    <ul>
    <li>feat: allow tree-shaking by adding <code>&quot;sideEffects&quot;:
    false</code> to <code>package.json</code> by <a
    href="https://github.com/josdejong";><code>@​josdejong</code></a> in <a
    
href="https://redirect.github.com/ajv-validator/ajv/pull/2480";>ajv-validator/ajv#2480</a></li>
    <li>fix: <a
    href="https://redirect.github.com/ajv-validator/ajv/issues/2482";>#2482</a>
    Infinity and NaN serialise to null by <a
    href="https://github.com/jasoniangreen";><code>@​jasoniangreen</code></a>
    in <a
    
href="https://redirect.github.com/ajv-validator/ajv/pull/2487";>ajv-validator/ajv#2487</a></li>
    <li>fix: small grammatical error in managing-schemas.md by <a
    href="https://github.com/monteiro-renato";><code>@​monteiro-renato</code></a>
    in <a
    
href="https://redirect.github.com/ajv-validator/ajv/pull/2508";>ajv-validator/ajv#2508</a></li>
    <li>fix: typos in schema-language.md by <a
    href="https://github.com/monteiro-renato";><code>@​monteiro-renato</code></a>
    in <a
    
href="https://redirect.github.com/ajv-validator/ajv/pull/2507";>ajv-validator/ajv#2507</a></li>
    <li>fix(pattern): use configured RegExp engine with $data keyword to
    mitigate ReDoS attacks (CVE-2025-69873) by <a
    href="https://github.com/epoberezkin";><code>@​epoberezkin</code></a> in
    <a
    
href="https://redirect.github.com/ajv-validator/ajv/pull/2586";>ajv-validator/ajv#2586</a></li>
    </ul>
    <h2>New Contributors</h2>
    <ul>
    <li><a href="https://github.com/josdejong";><code>@​josdejong</code></a>
    made their first contribution in <a
    
href="https://redirect.github.com/ajv-validator/ajv/pull/2480";>ajv-validator/ajv#2480</a></li>
    <li><a
    href="https://github.com/monteiro-renato";><code>@​monteiro-renato</code></a>
    made their first contribution in <a
    
href="https://redirect.github.com/ajv-validator/ajv/pull/2508";>ajv-validator/ajv#2508</a></li>
    </ul>
    <p><strong>Full Changelog</strong>: <a
    
href="https://github.com/ajv-validator/ajv/compare/v8.17.1...v8.18.0";>https://github.com/ajv-validator/ajv/compare/v8.17.1...v8.18.0</a></p>
    </blockquote>
    </details>
    <details>
    <summary>Commits</summary>
    <ul>
    <li><a
    
href="https://github.com/ajv-validator/ajv/commit/142ce84b807c4fe66e619c22480a28d0e4bd50fa";><code>142ce84</code></a>
    8.18.0</li>
    <li><a
    
href="https://github.com/ajv-validator/ajv/commit/720a23fa453ffae8340e92c9b0fe886c54cfe0d5";><code>720a23f</code></a>
    fix(pattern): use configured RegExp engine with $data keyword to
    mitigate ReD...</li>
    <li><a
    
href="https://github.com/ajv-validator/ajv/commit/82735a15826a30cc51e97a1bbfb59b3d388e4b98";><code>82735a1</code></a>
    fix: typos in schema-language.md (<a
    
href="https://redirect.github.com/ajv-validator/ajv/issues/2507";>#2507</a>)</li>
    <li><a
    
href="https://github.com/ajv-validator/ajv/commit/b17ec32cd97542e90ae27231d8a8bce88b9e53b6";><code>b17ec32</code></a>
    fix: small grammatical error in managing-schemas.md (<a
    
href="https://redirect.github.com/ajv-validator/ajv/issues/2508";>#2508</a>)</li>
    <li><a
    
href="https://github.com/ajv-validator/ajv/commit/69568d08564303e2c32a2de61feb833b41075f96";><code>69568d0</code></a>
    fix: <a
    href="https://redirect.github.com/ajv-validator/ajv/issues/2482";>#2482</a>
    Infinity and NaN serialise to null (<a
    
href="https://redirect.github.com/ajv-validator/ajv/issues/2487";>#2487</a>)</li>
    <li><a
    
href="https://github.com/ajv-validator/ajv/commit/f06766f33ed7291f84c19f22a1286a34475fbdaf";><code>f06766f</code></a>
    feat: allow tree-shaking by adding ``&quot;sideEffects&quot;:
    false<code>to</code>package.json` ...</li>
    <li>See full diff in <a
    
href="https://github.com/ajv-validator/ajv/compare/v8.17.1...v8.18.0";>compare
    view</a></li>
    </ul>
    </details>
    <br />
    
    
    [![Dependabot compatibility
    
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=ajv&package-manager=npm_and_yarn&previous-version=8.17.1&new-version=8.18.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
    
    Dependabot will resolve any conflicts with this PR as long as you don't
    alter it yourself. You can also trigger a rebase manually by commenting
    `@dependabot rebase`.
    
    [//]: # (dependabot-automerge-start)
    [//]: # (dependabot-automerge-end)
    
    ---
    
    <details>
    <summary>Dependabot commands and options</summary>
    <br />
    
    You can trigger Dependabot actions by commenting on this PR:
    - `@dependabot rebase` will rebase this PR
    - `@dependabot recreate` will recreate this PR, overwriting any edits
    that have been made to it
    - `@dependabot show <dependency name> ignore conditions` will show all
    of the ignore conditions of the specified dependency
    - `@dependabot ignore this major version` will close this PR and stop
    Dependabot creating any more for this major version (unless you reopen
    the PR or upgrade to it yourself)
    - `@dependabot ignore this minor version` will close this PR and stop
    Dependabot creating any more for this minor version (unless you reopen
    the PR or upgrade to it yourself)
    - `@dependabot ignore this dependency` will close this PR and stop
    Dependabot creating any more for this dependency (unless you reopen the
    PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the
    [Security Alerts
    page](https://github.com/apache/arrow-site/network/alerts).
    
    </details>
    
    Signed-off-by: dependabot[bot] <[email protected]>
    Co-authored-by: dependabot[bot] 
<49699333+dependabot[bot]@users.noreply.github.com>
---
 package-lock.json | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 45b7f8ab9c0..bc795b8d652 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -300,9 +300,9 @@
       }
     },
     "node_modules/ajv": {
-      "version": "8.17.1",
-      "resolved": "https://registry.npmjs.org/ajv/-/ajv-8.17.1.tgz";,
-      "integrity": 
"sha512-B/gBuNg5SiMTrPkC+A2+cW0RszwxYmn6VYxB/inlBStS5nx6xHIt/ehKRhIMhqusl7a8LjQoZnjCs5vhwxOQ1g==",
+      "version": "8.18.0",
+      "resolved": "https://registry.npmjs.org/ajv/-/ajv-8.18.0.tgz";,
+      "integrity": 
"sha512-PlXPeEWMXMZ7sPYOHqmDyCJzcfNrUr3fGNKtezX14ykXOEIvyK81d+qydx89KY5O71FKMPaQ2vBfBFI5NHR63A==",
       "dependencies": {
         "fast-deep-equal": "^3.1.3",
         "fast-uri": "^3.0.1",
@@ -1645,9 +1645,9 @@
       "requires": {}
     },
     "ajv": {
-      "version": "8.17.1",
-      "resolved": "https://registry.npmjs.org/ajv/-/ajv-8.17.1.tgz";,
-      "integrity": 
"sha512-B/gBuNg5SiMTrPkC+A2+cW0RszwxYmn6VYxB/inlBStS5nx6xHIt/ehKRhIMhqusl7a8LjQoZnjCs5vhwxOQ1g==",
+      "version": "8.18.0",
+      "resolved": "https://registry.npmjs.org/ajv/-/ajv-8.18.0.tgz";,
+      "integrity": 
"sha512-PlXPeEWMXMZ7sPYOHqmDyCJzcfNrUr3fGNKtezX14ykXOEIvyK81d+qydx89KY5O71FKMPaQ2vBfBFI5NHR63A==",
       "requires": {
         "fast-deep-equal": "^3.1.3",
         "fast-uri": "^3.0.1",

Reply via email to