Justin Lin
0467bf8d3f
chore(deps): bump the npm_and_yarn group across 2 directories with 2 updates ( #223 )
...
Bumps the npm_and_yarn group with 1 update in the /app directory:
[vue-i18n](https://github.com/intlify/vue-i18n/tree/HEAD/packages/vue-i18n ).
Bumps the npm_and_yarn group with 1 update in the /packages/constants
directory: [zod](https://github.com/colinhacks/zod ).
Updates `vue-i18n` from 11.3.0 to 11.4.14
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/intlify/vue-i18n/releases ">vue-i18n's
releases</a>.</em></p>
<blockquote>
<h2>v11.4.14</h2>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<h3>🔒 Security Fixes</h3>
<ul>
<li>fix(shared): neutralize srcdoc attribute in sanitizeTranslatedHtml
by <a href="https://github.com/kazupon "><code>@kazupon</code></a> in <a
href="https://redirect.github.com/intlify/vue-i18n/pull/2679 ">intlify/vue-i18n#2679</a></li>
<li>fix(core-base): escape both list and named values with
escapeParameter by <a
href="https://github.com/kazupon "><code>@kazupon</code></a> in <a
href="https://redirect.github.com/intlify/vue-i18n/pull/2680 ">intlify/vue-i18n#2680</a></li>
<li>fix: ignore locales named after Object.prototype properties by <a
href="https://github.com/kazupon "><code>@kazupon</code></a> in <a
href="https://redirect.github.com/intlify/vue-i18n/pull/2681 ">intlify/vue-i18n#2681</a></li>
</ul>
<h3>👕 Refactoring</h3>
<ul>
<li>refactor(core-base): extract the resolved message format check by <a
href="https://github.com/kazupon "><code>@kazupon</code></a> in <a
href="https://redirect.github.com/intlify/vue-i18n/pull/2674 ">intlify/vue-i18n#2674</a></li>
<li>refactor(vue-i18n-core): remove dead branches in getCoreContext() by
<a href="https://github.com/kazupon "><code>@kazupon</code></a> in <a
href="https://redirect.github.com/intlify/vue-i18n/pull/2675 ">intlify/vue-i18n#2675</a></li>
<li>refactor(vue-i18n-core): share the fallbackContext handling in the
composer by <a
href="https://github.com/kazupon "><code>@kazupon</code></a> in <a
href="https://redirect.github.com/intlify/vue-i18n/pull/2676 ">intlify/vue-i18n#2676</a></li>
<li>refactor(vue-i18n-core): simplify flat JSON handling in
setLocaleMessage / mergeLocaleMessage by <a
href="https://github.com/kazupon "><code>@kazupon</code></a> in <a
href="https://redirect.github.com/intlify/vue-i18n/pull/2677 ">intlify/vue-i18n#2677</a></li>
<li>refactor(core-base): give the compile cache a proper type by <a
href="https://github.com/kazupon "><code>@kazupon</code></a> in <a
href="https://redirect.github.com/intlify/vue-i18n/pull/2678 ">intlify/vue-i18n#2678</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/intlify/vue-i18n/compare/v11.4.13...v11.4.14 ">https://github.com/intlify/vue-i18n/compare/v11.4.13...v11.4.14 </a></p>
<h2>v11.4.13</h2>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<h3>⚡ Improvement Features</h3>
<ul>
<li>fix(core-base): map locale unions without the UnionToTuple
round-trip by <a
href="https://github.com/kazupon "><code>@kazupon</code></a> in <a
href="https://redirect.github.com/intlify/vue-i18n/pull/2651 ">intlify/vue-i18n#2651</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/intlify/vue-i18n/compare/v11.4.12...v11.4.13 ">https://github.com/intlify/vue-i18n/compare/v11.4.12...v11.4.13 </a></p>
<h2>v11.4.12</h2>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<h3>🐛 Bug Fixes</h3>
<ul>
<li>fix(core-base): cache locale chains by fallback identity by <a
href="https://github.com/kazupon "><code>@kazupon</code></a> in <a
href="https://redirect.github.com/intlify/vue-i18n/pull/2635 ">intlify/vue-i18n#2635</a></li>
<li>fix(vue-i18n-core): sync the core context when inheritLocale is
enabled by <a
href="https://github.com/kazupon "><code>@kazupon</code></a> in <a
href="https://redirect.github.com/intlify/vue-i18n/pull/2636 ">intlify/vue-i18n#2636</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/intlify/vue-i18n/compare/v11.4.10...v11.4.12 ">https://github.com/intlify/vue-i18n/compare/v11.4.10...v11.4.12 </a></p>
<h2>v11.4.10</h2>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<h3>🐛 Bug Fixes</h3>
<ul>
<li>fix(core-base): avoid throwing on AST keys in devtools groupId by <a
href="https://github.com/kazupon "><code>@kazupon</code></a> in <a
href="https://redirect.github.com/intlify/vue-i18n/pull/2603 ">intlify/vue-i18n#2603</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/intlify/vue-i18n/compare/v11.4.9...v11.4.10 ">https://github.com/intlify/vue-i18n/compare/v11.4.9...v11.4.10 </a></p>
<h2>v11.4.9</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/intlify/vue-i18n/blob/v11.4.14/CHANGELOG.md ">vue-i18n's
changelog</a>.</em></p>
<blockquote>
<h1>v11.4.14 (2026-10-10T11:06:13.502Z)</h1>
<p>This changelog is generated by <a
href="https://github.com/intlify/vue-i18n/releases/tag/v11.4.14 ">GitHub
Releases</a></p>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<h3>🔒 Security Fixes</h3>
<ul>
<li>fix(shared): neutralize srcdoc attribute in sanitizeTranslatedHtml
by <a href="https://github.com/kazupon "><code>@kazupon</code></a> in <a
href="https://redirect.github.com/intlify/vue-i18n/pull/2679 ">intlify/vue-i18n#2679</a></li>
<li>fix(core-base): escape both list and named values with
escapeParameter by <a
href="https://github.com/kazupon "><code>@kazupon</code></a> in <a
href="https://redirect.github.com/intlify/vue-i18n/pull/2680 ">intlify/vue-i18n#2680</a></li>
<li>fix: ignore locales named after Object.prototype properties by <a
href="https://github.com/kazupon "><code>@kazupon</code></a> in <a
href="https://redirect.github.com/intlify/vue-i18n/pull/2681 ">intlify/vue-i18n#2681</a></li>
</ul>
<h3>👕 Refactoring</h3>
<ul>
<li>refactor(core-base): extract the resolved message format check by <a
href="https://github.com/kazupon "><code>@kazupon</code></a> in <a
href="https://redirect.github.com/intlify/vue-i18n/pull/2674 ">intlify/vue-i18n#2674</a></li>
<li>refactor(vue-i18n-core): remove dead branches in getCoreContext() by
<a href="https://github.com/kazupon "><code>@kazupon</code></a> in <a
href="https://redirect.github.com/intlify/vue-i18n/pull/2675 ">intlify/vue-i18n#2675</a></li>
<li>refactor(vue-i18n-core): share the fallbackContext handling in the
composer by <a
href="https://github.com/kazupon "><code>@kazupon</code></a> in <a
href="https://redirect.github.com/intlify/vue-i18n/pull/2676 ">intlify/vue-i18n#2676</a></li>
<li>refactor(vue-i18n-core): simplify flat JSON handling in
setLocaleMessage / mergeLocaleMessage by <a
href="https://github.com/kazupon "><code>@kazupon</code></a> in <a
href="https://redirect.github.com/intlify/vue-i18n/pull/2677 ">intlify/vue-i18n#2677</a></li>
<li>refactor(core-base): give the compile cache a proper type by <a
href="https://github.com/kazupon "><code>@kazupon</code></a> in <a
href="https://redirect.github.com/intlify/vue-i18n/pull/2678 ">intlify/vue-i18n#2678</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/intlify/vue-i18n/compare/v11.4.13...v11.4.14 ">https://github.com/intlify/vue-i18n/compare/v11.4.13...v11.4.14 </a></p>
<h1>v11.4.13 (2026-10-02T11:01:59.781Z)</h1>
<p>This changelog is generated by <a
href="https://github.com/intlify/vue-i18n/releases/tag/v11.4.13 ">GitHub
Releases</a></p>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<h3>⚡ Improvement Features</h3>
<ul>
<li>fix(core-base): map locale unions without the UnionToTuple
round-trip by <a
href="https://github.com/kazupon "><code>@kazupon</code></a> in <a
href="https://redirect.github.com/intlify/vue-i18n/pull/2651 ">intlify/vue-i18n#2651</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/intlify/vue-i18n/compare/v11.4.12...v11.4.13 ">https://github.com/intlify/vue-i18n/compare/v11.4.12...v11.4.13 </a></p>
<h1>v11.4.12 (2026-09-16T14:30:30.396Z)</h1>
<p>This changelog is generated by <a
href="https://github.com/intlify/vue-i18n/releases/tag/v11.4.12 ">GitHub
Releases</a></p>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<h3>🐛 Bug Fixes</h3>
<ul>
<li>fix(core-base): cache locale chains by fallback identity by <a
href="https://github.com/kazupon "><code>@kazupon</code></a> in <a
href="https://redirect.github.com/intlify/vue-i18n/pull/2635 ">intlify/vue-i18n#2635</a></li>
<li>fix(vue-i18n-core): sync the core context when inheritLocale is
enabled by <a
href="https://github.com/kazupon "><code>@kazupon</code></a> in <a
href="https://redirect.github.com/intlify/vue-i18n/pull/2636 ">intlify/vue-i18n#2636</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/intlify/vue-i18n/commit/6bb9ebdeae4955cafb53e82bc461199f6186f573 "><code>6bb9ebd</code></a>
release: v11.4.14</li>
<li><a
href="https://github.com/intlify/vue-i18n/commit/f6b3e75a16f43f4d9a7a567b1b36cd638e880831 "><code>f6b3e75</code></a>
release: v11.4.13</li>
<li><a
href="https://github.com/intlify/vue-i18n/commit/87f3745072ca15cbd2d1eb8d030aed10639b0e3e "><code>87f3745</code></a>
release: v11.4.12</li>
<li><a
href="https://github.com/intlify/vue-i18n/commit/87510e2f9344e0734bfe9fbc7e0a2c509042e159 "><code>87510e2</code></a>
release: v11.4.10</li>
<li><a
href="https://github.com/intlify/vue-i18n/commit/5128bf00a1e23fb1defb01ea80622dd6fedd1e21 "><code>5128bf0</code></a>
release: v11.4.9</li>
<li><a
href="https://github.com/intlify/vue-i18n/commit/de2393bae16676a8a7c293bb493415e3085a521a "><code>de2393b</code></a>
release: v11.4.8</li>
<li><a
href="https://github.com/intlify/vue-i18n/commit/ceb0548cb421b8aaf237fecda0394d8fd3d75da7 "><code>ceb0548</code></a>
release: v11.4.7</li>
<li><a
href="https://github.com/intlify/vue-i18n/commit/913bbfee3d0fe1b0ff321f9670ee7de5c0a5ae51 "><code>913bbfe</code></a>
release: v11.4.6</li>
<li><a
href="https://github.com/intlify/vue-i18n/commit/6b97bfd57387b440d31e76af665cea4a5cdbd8d3 "><code>6b97bfd</code></a>
release: v11.4.5</li>
<li><a
href="https://github.com/intlify/vue-i18n/commit/99fd4bcaf9e38b39857653eecf53b5038a6e8a49 "><code>99fd4bc</code></a>
release: v11.4.4</li>
<li>Additional commits viewable in <a
href="https://github.com/intlify/vue-i18n/commits/v11.4.14/packages/vue-i18n ">compare
view</a></li>
</ul>
</details>
<br />
Updates `zod` from 3.25.76 to 4.6.7
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/colinhacks/zod/releases ">zod's
releases</a>.</em></p>
<blockquote>
<h2>v4.6.7</h2>
<h2>Commits:</h2>
<ul>
<li>b500a2ee95134f81d74da7911d7378dd2853d042 4.6.7</li>
</ul>
<h2>v4.6.6</h2>
<blockquote>
<p>Six malicious commits pushed to <code>main</code> on September 21
with a compromised git credential were reverted the same day in <a
href="https://redirect.github.com/colinhacks/zod/issues/6620 ">#6620</a>
and have since been removed from the history of <code>main</code>. None
were ever published to npm. The npm provenance for 4.6.6 names 284243fb,
the pre-rewrite copy of 9c219833 with identical contents.</p>
</blockquote>
<h2>Commits:</h2>
<ul>
<li>0cd3af5e9f50ad11bbcd4407a46a21b8848ba574 docs: load the en locale
directly in Zod Mini</li>
<li>9d5e60f162997b764b40d45aa02481888db50dea docs: import locales from
zod/locales, not z.locales</li>
<li>34a626f307871ecbb0123947559328dc52ed5e3e docs: tighten the z.locales
tree-shaking note</li>
<li>74304ce5b5796b5edb9a88ceb8e170b6ea3e82df release: stage npm versions
instead of publishing them (<a
href="https://redirect.github.com/colinhacks/zod/issues/6622 ">#6622</a>)</li>
<li>b2ef983e0711ff6517d6020b021071e2e5653efa docs: add Code for Japan to
bronze sponsors</li>
<li>8fb2faf0584828a6a027d8279db36f6f52784462 docs: crop the Code for
Japan logo and list it first in bronze</li>
<li>bacad518c41610d654658172d325874bf0ee6290 docs: square the Code for
Japan logo to match the other bronze tiles</li>
<li>c42596bd1c87e941d7241d10e012c5c196adcc10 release: hold the run on
the release-approval environment until the staged versions are approved
(<a
href="https://redirect.github.com/colinhacks/zod/issues/6638 ">#6638</a>)</li>
<li>a2ba4a67986a3e6b2b131be30084a2f460d9ea67 fix(types): declare record
output and input as members, not base type arguments (<a
href="https://redirect.github.com/colinhacks/zod/issues/6645 ">#6645</a>)</li>
<li>a0ebf970f2d752e5f58527cd2942ff48be4f46bd fix(v4): check array, set
and map size bounds before parsing elements (<a
href="https://redirect.github.com/colinhacks/zod/issues/6652 ">#6652</a>)</li>
<li>529f78dd9431b07f49647fee3aa0819b3f8b66b7 4.6.6</li>
<li>9c219833c3a3764fa1f1ea9c5ecec8254a63c0b1 ci: stage at verbose so a
failed OIDC token exchange says why</li>
</ul>
<h2>v4.6.5</h2>
<h2>Commits:</h2>
<ul>
<li>d2b135cfb7a3582b9eb515756b9166bcb9521f4a docs: add the 4.6.x patch
highlights to the 4.6 post</li>
<li>f1448f7cee00df9fe1e9ad84a000aa1828cc8bc1 docs: fold the 4.6.x patch
highlights into the 4.6 post's own sections</li>
<li>de65a5cb39ed22a507fac935788f718fa88d104f docs: lead the properties
section with the check and add a Zod Mini tab (<a
href="https://redirect.github.com/colinhacks/zod/issues/6598 ">#6598</a>)</li>
<li>56222cd1532c07bcb91b67df529cab4c0a215330 feat(instanceof): key the
.properties() shape off the instance type (<a
href="https://redirect.github.com/colinhacks/zod/issues/6600 ">#6600</a>)</li>
<li>ca0229a404818290e6cdcfefcd7eb2d04bcbb543 Revert "feat: add
z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI
(<a
href="https://redirect.github.com/colinhacks/zod/issues/6595 ">#6595</a>)"</li>
<li>cc4cd4ee9c52fcaa10964e48cc144541e41a5ed9 Revert "Revert
"feat: add z.currencyCode() over a vendored ISO 4217 list,
refreshed weekly by CI (<a
href="https://redirect.github.com/colinhacks/zod/issues/6595 ">#6595</a>)""</li>
<li>0f3f5ee3ca56c7574bf849e54f79e9a6e02562ee 4.6.5</li>
<li>59bbc03e10c636b9eb3c393dfeb552819774ec21 chore: re-pin the
integration peers to the workspace zod after the 4.6.5 bump</li>
</ul>
<h2>v4.6.4</h2>
<p>A patch on top of <a
href="https://github.com/colinhacks/zod/releases/tag/v4.6.3 ">4.6.3</a>.</p>
<ul>
<li><a
href="https://github.com/colinhacks/zod/commit/d6bc1e30 "><code>d6bc1e30</code></a>
feat: add <code>z.currencyCode()</code> over a vendored ISO 4217 list,
refreshed weekly by CI (<a
href="https://redirect.github.com/colinhacks/zod/pull/6595 ">#6595</a>)</li>
<li><a
href="https://github.com/colinhacks/zod/commit/ad32d751 "><code>ad32d751</code></a>
perf: <code>z.url()</code> rejects an invalid URL with
<code>URL.canParse()</code> instead of a throwing constructor, about 50x
faster; fewer allocations on the validation path (<a
href="https://redirect.github.com/colinhacks/zod/pull/6588 ">#6588</a>)</li>
<li><a
href="https://github.com/colinhacks/zod/commit/2bb08717 "><code>2bb08717</code></a>
chore: re-pin the integration peers to the workspace zod after the 4.6.4
bump</li>
<li><a
href="https://github.com/colinhacks/zod/commit/f6e1701a "><code>f6e1701a</code></a>
chore(deps): bump next to 15.5.25 and vite to 7.3.6 (<a
href="https://redirect.github.com/colinhacks/zod/pull/6153 ">#6153</a>)</li>
</ul>
<h2>v4.6.3</h2>
<p>A patch on top of <a
href="https://github.com/colinhacks/zod/releases/tag/v4.6.2 ">4.6.2</a>.</p>
<ul>
<li><a
href="https://github.com/colinhacks/zod/commit/413cce9a "><code>413cce9a</code></a>
fix(v4): make z.properties() a check again (<a
href="https://redirect.github.com/colinhacks/zod/pull/6594 ">#6594</a>) —
removes the standalone <code>z.properties()</code> schema from 4.6.0;
<code>z.instanceof().properties()</code> and
<code>.check(...z.properties())</code> are unchanged</li>
<li><a
href="https://github.com/colinhacks/zod/commit/75d63ee1 "><code>75d63ee1</code></a>
docs: show only the <code>.properties()</code> method form in the 4.6
post</li>
<li><a
href="https://github.com/colinhacks/zod/commit/46da9572 "><code>46da9572</code></a>
docs: match the error-message examples to what the parsers emit</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/colinhacks/zod/commit/b500a2ee95134f81d74da7911d7378dd2853d042 "><code>b500a2e</code></a>
4.6.7</li>
<li><a
href="https://github.com/colinhacks/zod/commit/9c219833c3a3764fa1f1ea9c5ecec8254a63c0b1 "><code>9c21983</code></a>
ci: stage at verbose so a failed OIDC token exchange says why</li>
<li><a
href="https://github.com/colinhacks/zod/commit/529f78dd9431b07f49647fee3aa0819b3f8b66b7 "><code>529f78d</code></a>
4.6.6</li>
<li><a
href="https://github.com/colinhacks/zod/commit/a0ebf970f2d752e5f58527cd2942ff48be4f46bd "><code>a0ebf97</code></a>
fix(v4): check array, set and map size bounds before parsing elements
(<a
href="https://redirect.github.com/colinhacks/zod/issues/6652 ">#6652</a>)</li>
<li><a
href="https://github.com/colinhacks/zod/commit/a2ba4a67986a3e6b2b131be30084a2f460d9ea67 "><code>a2ba4a6</code></a>
fix(types): declare record output and input as members, not base type
argumen...</li>
<li><a
href="https://github.com/colinhacks/zod/commit/c42596bd1c87e941d7241d10e012c5c196adcc10 "><code>c42596b</code></a>
release: hold the run on the release-approval environment until the
staged ve...</li>
<li><a
href="https://github.com/colinhacks/zod/commit/bacad518c41610d654658172d325874bf0ee6290 "><code>bacad51</code></a>
docs: square the Code for Japan logo to match the other bronze
tiles</li>
<li><a
href="https://github.com/colinhacks/zod/commit/8fb2faf0584828a6a027d8279db36f6f52784462 "><code>8fb2faf</code></a>
docs: crop the Code for Japan logo and list it first in bronze</li>
<li><a
href="https://github.com/colinhacks/zod/commit/b2ef983e0711ff6517d6020b021071e2e5653efa "><code>b2ef983</code></a>
docs: add Code for Japan to bronze sponsors</li>
<li><a
href="https://github.com/colinhacks/zod/commit/74304ce5b5796b5edb9a88ceb8e170b6ea3e82df "><code>74304ce</code></a>
release: stage npm versions instead of publishing them (<a
href="https://redirect.github.com/colinhacks/zod/issues/6622 ">#6622</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/colinhacks/zod/compare/v3.25.76...v4.6.7 ">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~GitHub%20Actions ">GitHub Actions</a>, a new
releaser for zod since your current version.</p>
</details>
<br />
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/linux-odyssey/linux-odyssey/network/alerts ).
</details>
2026-11-03 20:43:29 +11:00
Justin Lin
7caadd6695
deps: update zod and vue-i18n
2026-11-03 20:42:28 +11:00
dependabot[bot]
7ab6a828ca
chore(deps): bump the npm_and_yarn group across 2 directories with 2 updates
...
Bumps the npm_and_yarn group with 1 update in the /app directory: [vue-i18n](https://github.com/intlify/vue-i18n/tree/HEAD/packages/vue-i18n ).
Bumps the npm_and_yarn group with 1 update in the /packages/constants directory: [zod](https://github.com/colinhacks/zod ).
Updates `vue-i18n` from 11.3.0 to 11.4.14
- [Release notes](https://github.com/intlify/vue-i18n/releases )
- [Changelog](https://github.com/intlify/vue-i18n/blob/v11.4.14/CHANGELOG.md )
- [Commits](https://github.com/intlify/vue-i18n/commits/v11.4.14/packages/vue-i18n )
Updates `zod` from 3.25.76 to 4.6.7
- [Release notes](https://github.com/colinhacks/zod/releases )
- [Commits](https://github.com/colinhacks/zod/compare/v3.25.76...v4.6.7 )
---
updated-dependencies:
- dependency-name: vue-i18n
dependency-version: 11.4.14
dependency-type: direct:production
dependency-group: npm_and_yarn
- dependency-name: zod
dependency-version: 4.6.7
dependency-type: direct:production
dependency-group: npm_and_yarn
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-11-03 09:39:04 +00:00
Justin Lin
acbe310a4c
chore(deps): bump the npm_and_yarn group across 2 directories with 1 update ( #221 )
...
Bumps the npm_and_yarn group with 1 update in the /server directory:
[zod](https://github.com/colinhacks/zod ).
Bumps the npm_and_yarn group with 1 update in the /services/analytics
directory: [zod](https://github.com/colinhacks/zod ).
Updates `zod` from 3.25.76 to 4.6.7
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/colinhacks/zod/releases ">zod's
releases</a>.</em></p>
<blockquote>
<h2>v4.6.7</h2>
<h2>Commits:</h2>
<ul>
<li>b500a2ee95134f81d74da7911d7378dd2853d042 4.6.7</li>
</ul>
<h2>v4.6.6</h2>
<blockquote>
<p>Six malicious commits pushed to <code>main</code> on September 21
with a compromised git credential were reverted the same day in <a
href="https://redirect.github.com/colinhacks/zod/issues/6620 ">#6620</a>
and have since been removed from the history of <code>main</code>. None
were ever published to npm. The npm provenance for 4.6.6 names 284243fb,
the pre-rewrite copy of 9c219833 with identical contents.</p>
</blockquote>
<h2>Commits:</h2>
<ul>
<li>0cd3af5e9f50ad11bbcd4407a46a21b8848ba574 docs: load the en locale
directly in Zod Mini</li>
<li>9d5e60f162997b764b40d45aa02481888db50dea docs: import locales from
zod/locales, not z.locales</li>
<li>34a626f307871ecbb0123947559328dc52ed5e3e docs: tighten the z.locales
tree-shaking note</li>
<li>74304ce5b5796b5edb9a88ceb8e170b6ea3e82df release: stage npm versions
instead of publishing them (<a
href="https://redirect.github.com/colinhacks/zod/issues/6622 ">#6622</a>)</li>
<li>b2ef983e0711ff6517d6020b021071e2e5653efa docs: add Code for Japan to
bronze sponsors</li>
<li>8fb2faf0584828a6a027d8279db36f6f52784462 docs: crop the Code for
Japan logo and list it first in bronze</li>
<li>bacad518c41610d654658172d325874bf0ee6290 docs: square the Code for
Japan logo to match the other bronze tiles</li>
<li>c42596bd1c87e941d7241d10e012c5c196adcc10 release: hold the run on
the release-approval environment until the staged versions are approved
(<a
href="https://redirect.github.com/colinhacks/zod/issues/6638 ">#6638</a>)</li>
<li>a2ba4a67986a3e6b2b131be30084a2f460d9ea67 fix(types): declare record
output and input as members, not base type arguments (<a
href="https://redirect.github.com/colinhacks/zod/issues/6645 ">#6645</a>)</li>
<li>a0ebf970f2d752e5f58527cd2942ff48be4f46bd fix(v4): check array, set
and map size bounds before parsing elements (<a
href="https://redirect.github.com/colinhacks/zod/issues/6652 ">#6652</a>)</li>
<li>529f78dd9431b07f49647fee3aa0819b3f8b66b7 4.6.6</li>
<li>9c219833c3a3764fa1f1ea9c5ecec8254a63c0b1 ci: stage at verbose so a
failed OIDC token exchange says why</li>
</ul>
<h2>v4.6.5</h2>
<h2>Commits:</h2>
<ul>
<li>d2b135cfb7a3582b9eb515756b9166bcb9521f4a docs: add the 4.6.x patch
highlights to the 4.6 post</li>
<li>f1448f7cee00df9fe1e9ad84a000aa1828cc8bc1 docs: fold the 4.6.x patch
highlights into the 4.6 post's own sections</li>
<li>de65a5cb39ed22a507fac935788f718fa88d104f docs: lead the properties
section with the check and add a Zod Mini tab (<a
href="https://redirect.github.com/colinhacks/zod/issues/6598 ">#6598</a>)</li>
<li>56222cd1532c07bcb91b67df529cab4c0a215330 feat(instanceof): key the
.properties() shape off the instance type (<a
href="https://redirect.github.com/colinhacks/zod/issues/6600 ">#6600</a>)</li>
<li>ca0229a404818290e6cdcfefcd7eb2d04bcbb543 Revert "feat: add
z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI
(<a
href="https://redirect.github.com/colinhacks/zod/issues/6595 ">#6595</a>)"</li>
<li>cc4cd4ee9c52fcaa10964e48cc144541e41a5ed9 Revert "Revert
"feat: add z.currencyCode() over a vendored ISO 4217 list,
refreshed weekly by CI (<a
href="https://redirect.github.com/colinhacks/zod/issues/6595 ">#6595</a>)""</li>
<li>0f3f5ee3ca56c7574bf849e54f79e9a6e02562ee 4.6.5</li>
<li>59bbc03e10c636b9eb3c393dfeb552819774ec21 chore: re-pin the
integration peers to the workspace zod after the 4.6.5 bump</li>
</ul>
<h2>v4.6.4</h2>
<p>A patch on top of <a
href="https://github.com/colinhacks/zod/releases/tag/v4.6.3 ">4.6.3</a>.</p>
<ul>
<li><a
href="https://github.com/colinhacks/zod/commit/d6bc1e30 "><code>d6bc1e30</code></a>
feat: add <code>z.currencyCode()</code> over a vendored ISO 4217 list,
refreshed weekly by CI (<a
href="https://redirect.github.com/colinhacks/zod/pull/6595 ">#6595</a>)</li>
<li><a
href="https://github.com/colinhacks/zod/commit/ad32d751 "><code>ad32d751</code></a>
perf: <code>z.url()</code> rejects an invalid URL with
<code>URL.canParse()</code> instead of a throwing constructor, about 50x
faster; fewer allocations on the validation path (<a
href="https://redirect.github.com/colinhacks/zod/pull/6588 ">#6588</a>)</li>
<li><a
href="https://github.com/colinhacks/zod/commit/2bb08717 "><code>2bb08717</code></a>
chore: re-pin the integration peers to the workspace zod after the 4.6.4
bump</li>
<li><a
href="https://github.com/colinhacks/zod/commit/f6e1701a "><code>f6e1701a</code></a>
chore(deps): bump next to 15.5.25 and vite to 7.3.6 (<a
href="https://redirect.github.com/colinhacks/zod/pull/6153 ">#6153</a>)</li>
</ul>
<h2>v4.6.3</h2>
<p>A patch on top of <a
href="https://github.com/colinhacks/zod/releases/tag/v4.6.2 ">4.6.2</a>.</p>
<ul>
<li><a
href="https://github.com/colinhacks/zod/commit/413cce9a "><code>413cce9a</code></a>
fix(v4): make z.properties() a check again (<a
href="https://redirect.github.com/colinhacks/zod/pull/6594 ">#6594</a>) —
removes the standalone <code>z.properties()</code> schema from 4.6.0;
<code>z.instanceof().properties()</code> and
<code>.check(...z.properties())</code> are unchanged</li>
<li><a
href="https://github.com/colinhacks/zod/commit/75d63ee1 "><code>75d63ee1</code></a>
docs: show only the <code>.properties()</code> method form in the 4.6
post</li>
<li><a
href="https://github.com/colinhacks/zod/commit/46da9572 "><code>46da9572</code></a>
docs: match the error-message examples to what the parsers emit</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/colinhacks/zod/commit/b500a2ee95134f81d74da7911d7378dd2853d042 "><code>b500a2e</code></a>
4.6.7</li>
<li><a
href="https://github.com/colinhacks/zod/commit/9c219833c3a3764fa1f1ea9c5ecec8254a63c0b1 "><code>9c21983</code></a>
ci: stage at verbose so a failed OIDC token exchange says why</li>
<li><a
href="https://github.com/colinhacks/zod/commit/529f78dd9431b07f49647fee3aa0819b3f8b66b7 "><code>529f78d</code></a>
4.6.6</li>
<li><a
href="https://github.com/colinhacks/zod/commit/a0ebf970f2d752e5f58527cd2942ff48be4f46bd "><code>a0ebf97</code></a>
fix(v4): check array, set and map size bounds before parsing elements
(<a
href="https://redirect.github.com/colinhacks/zod/issues/6652 ">#6652</a>)</li>
<li><a
href="https://github.com/colinhacks/zod/commit/a2ba4a67986a3e6b2b131be30084a2f460d9ea67 "><code>a2ba4a6</code></a>
fix(types): declare record output and input as members, not base type
argumen...</li>
<li><a
href="https://github.com/colinhacks/zod/commit/c42596bd1c87e941d7241d10e012c5c196adcc10 "><code>c42596b</code></a>
release: hold the run on the release-approval environment until the
staged ve...</li>
<li><a
href="https://github.com/colinhacks/zod/commit/bacad518c41610d654658172d325874bf0ee6290 "><code>bacad51</code></a>
docs: square the Code for Japan logo to match the other bronze
tiles</li>
<li><a
href="https://github.com/colinhacks/zod/commit/8fb2faf0584828a6a027d8279db36f6f52784462 "><code>8fb2faf</code></a>
docs: crop the Code for Japan logo and list it first in bronze</li>
<li><a
href="https://github.com/colinhacks/zod/commit/b2ef983e0711ff6517d6020b021071e2e5653efa "><code>b2ef983</code></a>
docs: add Code for Japan to bronze sponsors</li>
<li><a
href="https://github.com/colinhacks/zod/commit/74304ce5b5796b5edb9a88ceb8e170b6ea3e82df "><code>74304ce</code></a>
release: stage npm versions instead of publishing them (<a
href="https://redirect.github.com/colinhacks/zod/issues/6622 ">#6622</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/colinhacks/zod/compare/v3.25.76...v4.6.7 ">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~GitHub%20Actions ">GitHub Actions</a>, a new
releaser for zod since your current version.</p>
</details>
<br />
Updates `zod` from 3.25.76 to 4.6.7
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/colinhacks/zod/releases ">zod's
releases</a>.</em></p>
<blockquote>
<h2>v4.6.7</h2>
<h2>Commits:</h2>
<ul>
<li>b500a2ee95134f81d74da7911d7378dd2853d042 4.6.7</li>
</ul>
<h2>v4.6.6</h2>
<blockquote>
<p>Six malicious commits pushed to <code>main</code> on September 21
with a compromised git credential were reverted the same day in <a
href="https://redirect.github.com/colinhacks/zod/issues/6620 ">#6620</a>
and have since been removed from the history of <code>main</code>. None
were ever published to npm. The npm provenance for 4.6.6 names 284243fb,
the pre-rewrite copy of 9c219833 with identical contents.</p>
</blockquote>
<h2>Commits:</h2>
<ul>
<li>0cd3af5e9f50ad11bbcd4407a46a21b8848ba574 docs: load the en locale
directly in Zod Mini</li>
<li>9d5e60f162997b764b40d45aa02481888db50dea docs: import locales from
zod/locales, not z.locales</li>
<li>34a626f307871ecbb0123947559328dc52ed5e3e docs: tighten the z.locales
tree-shaking note</li>
<li>74304ce5b5796b5edb9a88ceb8e170b6ea3e82df release: stage npm versions
instead of publishing them (<a
href="https://redirect.github.com/colinhacks/zod/issues/6622 ">#6622</a>)</li>
<li>b2ef983e0711ff6517d6020b021071e2e5653efa docs: add Code for Japan to
bronze sponsors</li>
<li>8fb2faf0584828a6a027d8279db36f6f52784462 docs: crop the Code for
Japan logo and list it first in bronze</li>
<li>bacad518c41610d654658172d325874bf0ee6290 docs: square the Code for
Japan logo to match the other bronze tiles</li>
<li>c42596bd1c87e941d7241d10e012c5c196adcc10 release: hold the run on
the release-approval environment until the staged versions are approved
(<a
href="https://redirect.github.com/colinhacks/zod/issues/6638 ">#6638</a>)</li>
<li>a2ba4a67986a3e6b2b131be30084a2f460d9ea67 fix(types): declare record
output and input as members, not base type arguments (<a
href="https://redirect.github.com/colinhacks/zod/issues/6645 ">#6645</a>)</li>
<li>a0ebf970f2d752e5f58527cd2942ff48be4f46bd fix(v4): check array, set
and map size bounds before parsing elements (<a
href="https://redirect.github.com/colinhacks/zod/issues/6652 ">#6652</a>)</li>
<li>529f78dd9431b07f49647fee3aa0819b3f8b66b7 4.6.6</li>
<li>9c219833c3a3764fa1f1ea9c5ecec8254a63c0b1 ci: stage at verbose so a
failed OIDC token exchange says why</li>
</ul>
<h2>v4.6.5</h2>
<h2>Commits:</h2>
<ul>
<li>d2b135cfb7a3582b9eb515756b9166bcb9521f4a docs: add the 4.6.x patch
highlights to the 4.6 post</li>
<li>f1448f7cee00df9fe1e9ad84a000aa1828cc8bc1 docs: fold the 4.6.x patch
highlights into the 4.6 post's own sections</li>
<li>de65a5cb39ed22a507fac935788f718fa88d104f docs: lead the properties
section with the check and add a Zod Mini tab (<a
href="https://redirect.github.com/colinhacks/zod/issues/6598 ">#6598</a>)</li>
<li>56222cd1532c07bcb91b67df529cab4c0a215330 feat(instanceof): key the
.properties() shape off the instance type (<a
href="https://redirect.github.com/colinhacks/zod/issues/6600 ">#6600</a>)</li>
<li>ca0229a404818290e6cdcfefcd7eb2d04bcbb543 Revert "feat: add
z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI
(<a
href="https://redirect.github.com/colinhacks/zod/issues/6595 ">#6595</a>)"</li>
<li>cc4cd4ee9c52fcaa10964e48cc144541e41a5ed9 Revert "Revert
"feat: add z.currencyCode() over a vendored ISO 4217 list,
refreshed weekly by CI (<a
href="https://redirect.github.com/colinhacks/zod/issues/6595 ">#6595</a>)""</li>
<li>0f3f5ee3ca56c7574bf849e54f79e9a6e02562ee 4.6.5</li>
<li>59bbc03e10c636b9eb3c393dfeb552819774ec21 chore: re-pin the
integration peers to the workspace zod after the 4.6.5 bump</li>
</ul>
<h2>v4.6.4</h2>
<p>A patch on top of <a
href="https://github.com/colinhacks/zod/releases/tag/v4.6.3 ">4.6.3</a>.</p>
<ul>
<li><a
href="https://github.com/colinhacks/zod/commit/d6bc1e30 "><code>d6bc1e30</code></a>
feat: add <code>z.currencyCode()</code> over a vendored ISO 4217 list,
refreshed weekly by CI (<a
href="https://redirect.github.com/colinhacks/zod/pull/6595 ">#6595</a>)</li>
<li><a
href="https://github.com/colinhacks/zod/commit/ad32d751 "><code>ad32d751</code></a>
perf: <code>z.url()</code> rejects an invalid URL with
<code>URL.canParse()</code> instead of a throwing constructor, about 50x
faster; fewer allocations on the validation path (<a
href="https://redirect.github.com/colinhacks/zod/pull/6588 ">#6588</a>)</li>
<li><a
href="https://github.com/colinhacks/zod/commit/2bb08717 "><code>2bb08717</code></a>
chore: re-pin the integration peers to the workspace zod after the 4.6.4
bump</li>
<li><a
href="https://github.com/colinhacks/zod/commit/f6e1701a "><code>f6e1701a</code></a>
chore(deps): bump next to 15.5.25 and vite to 7.3.6 (<a
href="https://redirect.github.com/colinhacks/zod/pull/6153 ">#6153</a>)</li>
</ul>
<h2>v4.6.3</h2>
<p>A patch on top of <a
href="https://github.com/colinhacks/zod/releases/tag/v4.6.2 ">4.6.2</a>.</p>
<ul>
<li><a
href="https://github.com/colinhacks/zod/commit/413cce9a "><code>413cce9a</code></a>
fix(v4): make z.properties() a check again (<a
href="https://redirect.github.com/colinhacks/zod/pull/6594 ">#6594</a>) —
removes the standalone <code>z.properties()</code> schema from 4.6.0;
<code>z.instanceof().properties()</code> and
<code>.check(...z.properties())</code> are unchanged</li>
<li><a
href="https://github.com/colinhacks/zod/commit/75d63ee1 "><code>75d63ee1</code></a>
docs: show only the <code>.properties()</code> method form in the 4.6
post</li>
<li><a
href="https://github.com/colinhacks/zod/commit/46da9572 "><code>46da9572</code></a>
docs: match the error-message examples to what the parsers emit</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/colinhacks/zod/commit/b500a2ee95134f81d74da7911d7378dd2853d042 "><code>b500a2e</code></a>
4.6.7</li>
<li><a
href="https://github.com/colinhacks/zod/commit/9c219833c3a3764fa1f1ea9c5ecec8254a63c0b1 "><code>9c21983</code></a>
ci: stage at verbose so a failed OIDC token exchange says why</li>
<li><a
href="https://github.com/colinhacks/zod/commit/529f78dd9431b07f49647fee3aa0819b3f8b66b7 "><code>529f78d</code></a>
4.6.6</li>
<li><a
href="https://github.com/colinhacks/zod/commit/a0ebf970f2d752e5f58527cd2942ff48be4f46bd "><code>a0ebf97</code></a>
fix(v4): check array, set and map size bounds before parsing elements
(<a
href="https://redirect.github.com/colinhacks/zod/issues/6652 ">#6652</a>)</li>
<li><a
href="https://github.com/colinhacks/zod/commit/a2ba4a67986a3e6b2b131be30084a2f460d9ea67 "><code>a2ba4a6</code></a>
fix(types): declare record output and input as members, not base type
argumen...</li>
<li><a
href="https://github.com/colinhacks/zod/commit/c42596bd1c87e941d7241d10e012c5c196adcc10 "><code>c42596b</code></a>
release: hold the run on the release-approval environment until the
staged ve...</li>
<li><a
href="https://github.com/colinhacks/zod/commit/bacad518c41610d654658172d325874bf0ee6290 "><code>bacad51</code></a>
docs: square the Code for Japan logo to match the other bronze
tiles</li>
<li><a
href="https://github.com/colinhacks/zod/commit/8fb2faf0584828a6a027d8279db36f6f52784462 "><code>8fb2faf</code></a>
docs: crop the Code for Japan logo and list it first in bronze</li>
<li><a
href="https://github.com/colinhacks/zod/commit/b2ef983e0711ff6517d6020b021071e2e5653efa "><code>b2ef983</code></a>
docs: add Code for Japan to bronze sponsors</li>
<li><a
href="https://github.com/colinhacks/zod/commit/74304ce5b5796b5edb9a88ceb8e170b6ea3e82df "><code>74304ce</code></a>
release: stage npm versions instead of publishing them (<a
href="https://redirect.github.com/colinhacks/zod/issues/6622 ">#6622</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/colinhacks/zod/compare/v3.25.76...v4.6.7 ">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~GitHub%20Actions ">GitHub Actions</a>, a new
releaser for zod since your current version.</p>
</details>
<br />
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/linux-odyssey/linux-odyssey/network/alerts ).
</details>
2026-11-03 20:37:50 +11:00
Justin Lin
045941a05c
deps: upgrade zod
2026-11-03 20:36:34 +11:00
Justin Lin
676c12de77
Fix: add rate limit to session and disable guest account ( #222 )
...
- Disable guest accounts in frontend and backend
- Apply in memory rate limit to new session creation (3 times per
minute)
- Add restart: always to traefik in docker compose production file
2026-11-03 20:33:22 +11:00
Justin Lin
b510d18758
feat: add rate limit to session creation
2026-11-03 20:28:04 +11:00
Justin Lin
9ffcd9fa90
fix: disable guest login
2026-11-03 20:18:15 +11:00
Justin Lin
3106ae00d0
feat: set traefik always restart
2026-11-03 20:10:04 +11:00
dependabot[bot]
9ce161e4f3
chore(deps): bump the npm_and_yarn group across 2 directories with 1 update
...
Bumps the npm_and_yarn group with 1 update in the /server directory: [zod](https://github.com/colinhacks/zod ).
Bumps the npm_and_yarn group with 1 update in the /services/analytics directory: [zod](https://github.com/colinhacks/zod ).
Updates `zod` from 3.25.76 to 4.6.7
- [Release notes](https://github.com/colinhacks/zod/releases )
- [Commits](https://github.com/colinhacks/zod/compare/v3.25.76...v4.6.7 )
Updates `zod` from 3.25.76 to 4.6.7
- [Release notes](https://github.com/colinhacks/zod/releases )
- [Commits](https://github.com/colinhacks/zod/compare/v3.25.76...v4.6.7 )
---
updated-dependencies:
- dependency-name: zod
dependency-version: 4.6.7
dependency-type: direct:production
dependency-group: npm_and_yarn
- dependency-name: zod
dependency-version: 4.6.7
dependency-type: direct:production
dependency-group: npm_and_yarn
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-31 22:06:42 +00:00
Justin Lin
e449f9987b
Bun migration ( #218 )
2026-10-11 17:57:47 +11:00
Justin Lin
419440a14f
doc: remove NodeJS installation setup in Windows setup
2026-10-11 17:51:56 +11:00
Justin Lin
54225528b3
refactor: replace Jest with bun
2026-10-11 17:43:22 +11:00
Justin Lin
634dc8f987
refactor: use bun in Dockerfile and CI workflow
2026-10-11 17:24:12 +11:00
Justin Lin
77577d9b8d
refactor: use bun to execute server and analytics
2026-10-11 17:04:46 +11:00
Justin Lin
2feedc329c
refactor: use bun for package management
...
+ add package.json to each packages
+ update import path
2026-10-11 16:50:01 +11:00
Justin Lin
fb7dc0eb73
Fix/execute permission ( #217 )
...
* fix: add execute permission to dog script in execute/en
* fix: add execute permission for lucky
2026-10-10 14:31:48 +11:00
Justin Lin
f515228db6
deps: patch node-tar and form-data ( #216 )
2026-10-10 14:31:25 +11:00
Justin Lin
5e5cb38c70
deps: patch node-tar and form-data
2026-10-10 14:26:20 +11:00
Justin Lin
4de8bbfee0
fix: add missing translation ( #215 )
2026-10-10 09:52:28 +11:00
neilchen0812
5897e562d1
fix: add missing translation
2026-10-10 01:45:35 +10:30
Justin Lin
733e02ddd8
Issue#206 Fix missing translations and header on the ChooseUsername and CompleteModal page ( #214 )
2026-10-10 01:07:16 +11:00
neilchen0812
85dda9486e
feat: add translation for ChooseUsernamePage
2026-10-10 00:30:02 +10:30
neilchen0812
54f73504ec
fix: add header for ChooseUsernamePage
2026-10-10 00:29:25 +10:30
neilchen0812
b47e52406f
feat: add translation for CompleteModal component
2026-10-10 00:28:26 +10:30
Justin Lin
1f8d4162f8
Fix saving session finished time, display session locale ( #213 )
...
- Show session locale
- Remove command counts on session list for performance
2026-10-10 00:19:10 +11:00
Justin Lin
4c3b7434c9
chore: clean up logs
2026-10-10 00:15:26 +11:00
Justin Lin
218c4cce44
feat: show locale and user link on session detail
2026-10-10 00:15:02 +11:00
Justin Lin
3d6eaf6b64
fix: disable join commands on session list for performance
2026-10-10 00:12:30 +11:00
Justin Lin
accfbc620c
feat: add link to user from session list
2026-10-09 23:54:32 +11:00
Justin Lin
994618f71c
feat: display session locale
2026-10-09 23:51:09 +11:00
Justin Lin
b5024631f7
fix: store session finish time
2026-10-09 23:49:12 +11:00
Justin Lin
c5b91cf201
Fix Quest Map text overflow and refactor buttons in HTML ( #212 )
...
Rewrite the buttons as HTML buttons. Only use SVG for drawing lines.
2026-10-09 23:28:10 +11:00
Justin Lin
8665add560
chore(deps): bump the npm_and_yarn group across 1 directory with 4 updates ( #210 )
...
Bumps the npm_and_yarn group with 4 updates in the / directory:
[handlebars](https://github.com/handlebars-lang/handlebars.js ),
[proxy-addr](https://github.com/jshttp/proxy-addr ),
[shell-quote](https://github.com/ljharb/shell-quote ) and
[source-map-js](https://github.com/7rulnik/source-map-js ).
Updates `handlebars` from 4.7.9 to 4.7.10
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/handlebars-lang/handlebars.js/releases ">handlebars's
releases</a>.</em></p>
<blockquote>
<h2>v4.7.10</h2>
<ul>
<li>security: Sanitize the source map URL when minifying - f37c599</li>
<li>security: Iterate lazily in #each and strip whitespace in linear
time - 812c226</li>
<li>security: Escape <code><!--</code> and <code><script</code> in
precompiled output - 609d1b1 GHSA-xw65-4hp5-5hc7</li>
<li>security: Don't trust special properties on context data - ceec388
GHSA-p8wg-vrv2-v86f</li>
<li>security: Only compile partials that are template strings -
c28ee7a</li>
<li>security: Only dispatch known node types in the Compiler and Visitor
- 7d501a5</li>
<li>security: Validate AST values in the compiler instead of the parser
- 703fdcc GHSA-8r5x-fm3f-whwj</li>
<li>Clarify that --root does not restrict filesystem access -
0fcf25c</li>
<li>Bump minimist to ^1.2.8 - ea8ed82</li>
<li>Fix Ruby component publishing documentation - d069c1c</li>
<li>Fix Composer component definition - 6714e07</li>
</ul>
<p>Compatibility notes:</p>
<ul>
<li><code>{{#each}}</code> iterates iterables such as <code>Map</code>,
<code>Set</code> and generators lazily, like <code>for...of</code>,
instead of
copying them into an array first. Values added to the iterable while the
block renders are now visited too.</li>
</ul>
<p><a
href="https://github.com/handlebars-lang/handlebars.js/compare/v4.7.9...v4.7.10 ">Commits</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/handlebars-lang/handlebars.js/blob/v4.7.10/release-notes.md ">handlebars's
changelog</a>.</em></p>
<blockquote>
<h2>v4.7.10 - October 5th, 2026</h2>
<ul>
<li>security: Sanitize the source map URL when minifying - f37c599</li>
<li>security: Iterate lazily in #each and strip whitespace in linear
time - 812c226</li>
<li>security: Escape <code><!--</code> and <code><script</code> in
precompiled output - 609d1b1 GHSA-xw65-4hp5-5hc7</li>
<li>security: Don't trust special properties on context data - ceec388
GHSA-p8wg-vrv2-v86f</li>
<li>security: Only compile partials that are template strings -
c28ee7a</li>
<li>security: Only dispatch known node types in the Compiler and Visitor
- 7d501a5</li>
<li>security: Validate AST values in the compiler instead of the parser
- 703fdcc GHSA-8r5x-fm3f-whwj</li>
<li>Clarify that --root does not restrict filesystem access -
0fcf25c</li>
<li>Bump minimist to ^1.2.8 - ea8ed82</li>
<li>Fix Ruby component publishing documentation - d069c1c</li>
<li>Fix Composer component definition - 6714e07</li>
</ul>
<p>Compatibility notes:</p>
<ul>
<li><code>{{#each}}</code> iterates iterables such as <code>Map</code>,
<code>Set</code> and generators lazily, like <code>for...of</code>,
instead of
copying them into an array first. Values added to the iterable while the
block renders are now visited too.</li>
</ul>
<p><a
href="https://github.com/handlebars-lang/handlebars.js/compare/v4.7.9...v4.7.10 ">Commits</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/handlebars-lang/handlebars.js/commit/45ce15255e0f430ac6d19742b18e316b7539264e "><code>45ce152</code></a>
v4.7.10</li>
<li><a
href="https://github.com/handlebars-lang/handlebars.js/commit/e47b2365d5656ab5689ae226aef90a485a90c5d8 "><code>e47b236</code></a>
Update release notes</li>
<li><a
href="https://github.com/handlebars-lang/handlebars.js/commit/f37c599de9187715eb1e9afedcb2d80c175487a0 "><code>f37c599</code></a>
Sanitize the source map URL when minifying</li>
<li><a
href="https://github.com/handlebars-lang/handlebars.js/commit/812c2260cb8794ef4ab63a7f1d946431112560ca "><code>812c226</code></a>
Iterate lazily in #each and strip whitespace in linear time</li>
<li><a
href="https://github.com/handlebars-lang/handlebars.js/commit/609d1b11c833c9a3e00f56f2f34d22f425446725 "><code>609d1b1</code></a>
Escape <code><!--</code> and <code><script</code> in precompiled
output</li>
<li><a
href="https://github.com/handlebars-lang/handlebars.js/commit/ceec388abe1d1aac8f6369860d5f390fa71ef4fa "><code>ceec388</code></a>
Don't trust special properties on context data</li>
<li><a
href="https://github.com/handlebars-lang/handlebars.js/commit/c28ee7adb312308e0fe26f4d435a481be5e1ff98 "><code>c28ee7a</code></a>
Only compile partials that are template strings</li>
<li><a
href="https://github.com/handlebars-lang/handlebars.js/commit/7d501a5af2ac3aa9ac788a8889dbe419849e46f1 "><code>7d501a5</code></a>
Only dispatch known node types in the Compiler and Visitor</li>
<li><a
href="https://github.com/handlebars-lang/handlebars.js/commit/703fdcc5fd6cc8d1cc0c33cc19de40c467c4b8d2 "><code>703fdcc</code></a>
Validate AST values in the compiler instead of the parser</li>
<li><a
href="https://github.com/handlebars-lang/handlebars.js/commit/0fcf25c63038b43e78e17adbf029cf073e80554d "><code>0fcf25c</code></a>
Clarify that --root does not restrict filesystem access</li>
<li>Additional commits viewable in <a
href="https://github.com/handlebars-lang/handlebars.js/compare/v4.7.9...v4.7.10 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `proxy-addr` from 2.0.7 to 2.0.8
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/jshttp/proxy-addr/releases ">proxy-addr's
releases</a>.</em></p>
<blockquote>
<h2>2.0.8</h2>
<h2>Important</h2>
<ul>
<li>Fix <a
href="https://www.cve.org/CVERecord?id=CVE-2026-90711 ">CVE-2026-90711</a>
(<a
href="https://github.com/jshttp/proxy-addr/security/advisories/GHSA-jqcg-44mw-7w3h ">GHSA-jqcg-44mw-7w3h</a>)</li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>Add OSSF scorecard action by <a
href="https://github.com/carpasse "><code>@carpasse</code></a> in <a
href="https://redirect.github.com/jshttp/proxy-addr/pull/27 ">jshttp/proxy-addr#27</a></li>
<li>Fix ci pipeline and add missing Node.JS versions by <a
href="https://github.com/carpasse "><code>@carpasse</code></a> in <a
href="https://redirect.github.com/jshttp/proxy-addr/pull/26 ">jshttp/proxy-addr#26</a></li>
<li>[StepSecurity] Apply security best practices by <a
href="https://github.com/step-security-bot "><code>@step-security-bot</code></a>
in <a
href="https://redirect.github.com/jshttp/proxy-addr/pull/29 ">jshttp/proxy-addr#29</a></li>
<li>build(deps): bump coverallsapp/github-action from 1.2.5 to 2.3.6 by
<a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/jshttp/proxy-addr/pull/30 ">jshttp/proxy-addr#30</a></li>
<li>build(deps): bump github/codeql-action from 2.23.2 to 3.28.18 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/jshttp/proxy-addr/pull/31 ">jshttp/proxy-addr#31</a></li>
<li>build(deps-dev): bump eslint-plugin-import from 2.23.4 to 2.31.0 by
<a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/jshttp/proxy-addr/pull/32 ">jshttp/proxy-addr#32</a></li>
<li>build(deps): bump ossf/scorecard-action from 2.0.6 to 2.4.2 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/jshttp/proxy-addr/pull/33 ">jshttp/proxy-addr#33</a></li>
<li>build(deps): bump actions/upload-artifact from 3.1.3 to 4.6.2 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/jshttp/proxy-addr/pull/35 ">jshttp/proxy-addr#35</a></li>
<li>build(deps-dev): bump deep-equal from 1.0.1 to 1.1.2 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/jshttp/proxy-addr/pull/34 ">jshttp/proxy-addr#34</a></li>
<li>build(deps-dev): bump eslint-plugin-markdown from 2.2.0 to 2.2.1 by
<a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/jshttp/proxy-addr/pull/36 ">jshttp/proxy-addr#36</a></li>
<li>chore: add funding to package.json by <a
href="https://github.com/Phillip9587 "><code>@Phillip9587</code></a> in
<a
href="https://redirect.github.com/jshttp/proxy-addr/pull/40 ">jshttp/proxy-addr#40</a></li>
<li>build(deps): bump github/codeql-action from 3.28.18 to 3.29.5 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/jshttp/proxy-addr/pull/41 ">jshttp/proxy-addr#41</a></li>
<li>build(deps): bump github/codeql-action from 3.29.7 to 3.29.11 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/jshttp/proxy-addr/pull/43 ">jshttp/proxy-addr#43</a></li>
<li>build(deps): bump actions/checkout from 3.6.0 to 5.0.0 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/jshttp/proxy-addr/pull/42 ">jshttp/proxy-addr#42</a></li>
<li>build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/jshttp/proxy-addr/pull/47 ">jshttp/proxy-addr#47</a></li>
<li>build(deps): bump github/codeql-action from 3.29.11 to 4.31.2 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/jshttp/proxy-addr/pull/46 ">jshttp/proxy-addr#46</a></li>
<li>build(deps): bump coverallsapp/github-action from 2.3.6 to 2.3.7 by
<a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/jshttp/proxy-addr/pull/50 ">jshttp/proxy-addr#50</a></li>
<li>build(deps): bump github/codeql-action from 4.31.2 to 4.31.5 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/jshttp/proxy-addr/pull/49 ">jshttp/proxy-addr#49</a></li>
<li>build(deps): bump actions/checkout from 5.0.0 to 6.0.0 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/jshttp/proxy-addr/pull/48 ">jshttp/proxy-addr#48</a></li>
<li>build(deps): bump actions/checkout from 6.0.0 to 6.0.2 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/jshttp/proxy-addr/pull/56 ">jshttp/proxy-addr#56</a></li>
<li>build(deps): bump github/codeql-action from 4.31.5 to 4.32.0 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/jshttp/proxy-addr/pull/55 ">jshttp/proxy-addr#55</a></li>
<li>build(deps): bump github/codeql-action from 4.32.0 to 4.32.4 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/jshttp/proxy-addr/pull/57 ">jshttp/proxy-addr#57</a></li>
<li>build(deps): bump actions/upload-artifact from 5.0.0 to 7.0.0 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/jshttp/proxy-addr/pull/58 ">jshttp/proxy-addr#58</a></li>
<li>Fix "arugment" typo in README by <a
href="https://github.com/schiwekM "><code>@schiwekM</code></a> in <a
href="https://redirect.github.com/jshttp/proxy-addr/pull/61 ">jshttp/proxy-addr#61</a></li>
<li>build(deps): bump github/codeql-action from 4.32.4 to 4.36.0 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/jshttp/proxy-addr/pull/64 ">jshttp/proxy-addr#64</a></li>
<li>build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/jshttp/proxy-addr/pull/63 ">jshttp/proxy-addr#63</a></li>
<li>build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/jshttp/proxy-addr/pull/45 ">jshttp/proxy-addr#45</a></li>
<li>build(deps-dev): bump eslint-plugin-import from 2.31.0 to 2.32.0 by
<a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/jshttp/proxy-addr/pull/39 ">jshttp/proxy-addr#39</a></li>
<li>chore(ci): npm-publish via reusable workflows by <a
href="https://github.com/sheplu "><code>@sheplu</code></a> in <a
href="https://redirect.github.com/jshttp/proxy-addr/pull/54 ">jshttp/proxy-addr#54</a></li>
<li>refresh CI by <a
href="https://github.com/UlisesGascon "><code>@UlisesGascon</code></a>
in <a
href="https://redirect.github.com/jshttp/proxy-addr/pull/69 ">jshttp/proxy-addr#69</a></li>
<li>fix: typo by <a
href="https://github.com/UlisesGascon "><code>@UlisesGascon</code></a>
in <a
href="https://redirect.github.com/jshttp/proxy-addr/pull/71 ">jshttp/proxy-addr#71</a></li>
<li>Release: 2.0.8 by <a
href="https://github.com/UlisesGascon "><code>@UlisesGascon</code></a>
in <a
href="https://redirect.github.com/jshttp/proxy-addr/pull/70 ">jshttp/proxy-addr#70</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/carpasse "><code>@carpasse</code></a>
made their first contribution in <a
href="https://redirect.github.com/jshttp/proxy-addr/pull/27 ">jshttp/proxy-addr#27</a></li>
<li><a
href="https://github.com/step-security-bot "><code>@step-security-bot</code></a>
made their first contribution in <a
href="https://redirect.github.com/jshttp/proxy-addr/pull/29 ">jshttp/proxy-addr#29</a></li>
<li><a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
made their first contribution in <a
href="https://redirect.github.com/jshttp/proxy-addr/pull/30 ">jshttp/proxy-addr#30</a></li>
<li><a
href="https://github.com/Phillip9587 "><code>@Phillip9587</code></a>
made their first contribution in <a
href="https://redirect.github.com/jshttp/proxy-addr/pull/40 ">jshttp/proxy-addr#40</a></li>
<li><a href="https://github.com/schiwekM "><code>@schiwekM</code></a>
made their first contribution in <a
href="https://redirect.github.com/jshttp/proxy-addr/pull/61 ">jshttp/proxy-addr#61</a></li>
<li><a href="https://github.com/sheplu "><code>@sheplu</code></a> made
their first contribution in <a
href="https://redirect.github.com/jshttp/proxy-addr/pull/54 ">jshttp/proxy-addr#54</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8 ">https://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8 </a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/jshttp/proxy-addr/blob/master/HISTORY.md ">proxy-addr's
changelog</a>.</em></p>
<blockquote>
<h1>2.0.8</h1>
<ul>
<li>Fix <a
href="https://www.cve.org/CVERecord?id=CVE-2026-90711 ">CVE-2026-90711</a>
(<a
href="https://github.com/jshttp/proxy-addr/security/advisories/GHSA-jqcg-44mw-7w3h ">GHSA-jqcg-44mw-7w3h</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/jshttp/proxy-addr/commit/a11ad82545698af5c33e59f3ed0b52eab79bf610 "><code>a11ad82</code></a>
2.0.8 (<a
href="https://redirect.github.com/jshttp/proxy-addr/issues/70 ">#70</a>)</li>
<li><a
href="https://github.com/jshttp/proxy-addr/commit/780911d84d18e2c5fa008ed0c0d387631ec11965 "><code>780911d</code></a>
fix: reject IPv4 trust via mapped IPv6 subnets with a short prefix</li>
<li><a
href="https://github.com/jshttp/proxy-addr/commit/92e103e3f3ab0467c8846cacea71f27dfc81091d "><code>92e103e</code></a>
fix(ci): use publised as release trigger event (<a
href="https://redirect.github.com/jshttp/proxy-addr/issues/71 ">#71</a>)</li>
<li><a
href="https://github.com/jshttp/proxy-addr/commit/3e5ac75d275d82606d33d6ac47c0ff43c2eccee9 "><code>3e5ac75</code></a>
ci: merge coverage via artifacts, disable fail-fast, add Node.js 23-26
(<a
href="https://redirect.github.com/jshttp/proxy-addr/issues/69 ">#69</a>)</li>
<li><a
href="https://github.com/jshttp/proxy-addr/commit/4b9db8190923840eb732b752a70f3e5ff713768c "><code>4b9db81</code></a>
chore(ci): npm-publish via workflows (<a
href="https://redirect.github.com/jshttp/proxy-addr/issues/54 ">#54</a>)</li>
<li><a
href="https://github.com/jshttp/proxy-addr/commit/655e8950435ac457c586e8287da4d5993b7d0db5 "><code>655e895</code></a>
build(deps-dev): bump eslint-plugin-import from 2.31.0 to 2.32.0 (<a
href="https://redirect.github.com/jshttp/proxy-addr/issues/39 ">#39</a>)</li>
<li><a
href="https://github.com/jshttp/proxy-addr/commit/50ce4d09132a4c34f5485b52740ce879a9223b1f "><code>50ce4d0</code></a>
build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 (<a
href="https://redirect.github.com/jshttp/proxy-addr/issues/45 ">#45</a>)</li>
<li><a
href="https://github.com/jshttp/proxy-addr/commit/0fd347f5b342e7502da58a512dc998d4a59cea24 "><code>0fd347f</code></a>
build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (<a
href="https://redirect.github.com/jshttp/proxy-addr/issues/63 ">#63</a>)</li>
<li><a
href="https://github.com/jshttp/proxy-addr/commit/6a517fa25c741cc107a90019df458b34f580ce55 "><code>6a517fa</code></a>
build(deps): bump github/codeql-action from 4.32.4 to 4.36.0 (<a
href="https://redirect.github.com/jshttp/proxy-addr/issues/64 ">#64</a>)</li>
<li><a
href="https://github.com/jshttp/proxy-addr/commit/0d45e2a88e82a2faf1148956b6457e3a6c99ebcd "><code>0d45e2a</code></a>
Fix "arugment" typo in README (<a
href="https://redirect.github.com/jshttp/proxy-addr/issues/61 ">#61</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8 ">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~GitHub%20Actions ">GitHub Actions</a>, a new
releaser for proxy-addr since your current version.</p>
</details>
<br />
Updates `shell-quote` from 1.10.0 to 1.12.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md ">shell-quote's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/ljharb/shell-quote/compare/v1.11.0...v1.12.0 ">v1.12.0</a>
- 2026-10-02</h2>
<h3>Fixed</h3>
<ul>
<li>[New] <code>parse</code>: support here-documents
(<code>&lt;&lt;</code>) <a
href="https://redirect.github.com/ljharb/shell-quote/issues/31 "><code>[#31 ](https://github.com/ljharb/shell-quote/issues/31 )</code></a></li>
</ul>
<h3>Commits</h3>
<ul>
<li>[New] <code>parse</code>: support tab-stripping here-documents
(<code>&lt;&lt;-</code>) <a
href="https://github.com/ljharb/shell-quote/commit/dbfac376d4065d37539d3abdb5e76847f93797d3 "><code>dbfac37</code></a></li>
<li>[New] <code>parse</code>: support output process substitution
(<code>&gt;(</code>) <a
href="https://github.com/ljharb/shell-quote/commit/20533154bb57809c80f55318b8493aef49505f4e "><code>2053315</code></a></li>
<li>[New] <code>parse</code>: support the <code>case</code> test-next
terminator (<code>;;&</code>) <a
href="https://github.com/ljharb/shell-quote/commit/7d688b9bec1917a22cccd4d4c887128a9c66e8a0 "><code>7d688b9</code></a></li>
<li>[New] <code>parse</code>: support the <code>case</code> fall-through
terminator (<code>;&</code>) <a
href="https://github.com/ljharb/shell-quote/commit/f27010ed04bcd925795b350afb1c49e36bbd1ba3 "><code>f27010e</code></a></li>
<li>[New] <code>parse</code>: support redirecting output despite
<code>noclobber</code> (<code>&gt;|</code>) <a
href="https://github.com/ljharb/shell-quote/commit/b78d19c14da6356cc12c46b3478203247ab8a295 "><code>b78d19c</code></a></li>
<li>[New] <code>parse</code>: support opening a file for reading and
writing (<code>&lt;&gt;</code>) <a
href="https://github.com/ljharb/shell-quote/commit/21cc333eb0ce5bf094f595b7fdc01b3447ffd4b0 "><code>21cc333</code></a></li>
<li>[New] <code>parse</code>: support redirecting stdout and stderr
(<code>&&gt;</code>) <a
href="https://github.com/ljharb/shell-quote/commit/6ad6cd215f89adcc29dd601e085fa54083c2f911 "><code>6ad6cd2</code></a></li>
<li>[New] <code>parse</code>: support appending stdout and stderr
(<code>&&gt;&gt;</code>) <a
href="https://github.com/ljharb/shell-quote/commit/90cde9cfd8af30fcb65e9fd2cb2f9e181d3f103b "><code>90cde9c</code></a></li>
<li>[Dev Deps] update <code>@ljharb/eslint-config</code> <a
href="https://github.com/ljharb/shell-quote/commit/3a7b4ae3960c3ff4413932e276c5b0ecb3a2b456 "><code>3a7b4ae</code></a></li>
</ul>
<h2><a
href="https://github.com/ljharb/shell-quote/compare/v1.10.0...v1.11.0 ">v1.11.0</a>
- 2026-09-29</h2>
<h3>Fixed</h3>
<ul>
<li>[Refactor] <code>quote</code>: drop a replace that can never match
in the single-quote branch <a
href="https://redirect.github.com/ljharb/shell-quote/issues/15 "><code>[#15 ](https://github.com/ljharb/shell-quote/issues/15 )</code></a></li>
<li>[New] <code>parse</code>: support bash ANSI-C quoting
(<code>$'...'</code>) <a
href="https://redirect.github.com/ljharb/shell-quote/issues/32 "><code>[#32 ](https://github.com/ljharb/shell-quote/issues/32 )</code></a></li>
</ul>
<h3>Commits</h3>
<ul>
<li>[Fix] <code>quote</code>: reject line terminators in tokens after a
<code>comment</code> <a
href="https://github.com/ljharb/shell-quote/commit/6002b2ed90c6b83095eb272b6b0adaf3a172b0bc "><code>6002b2e</code></a></li>
<li>[Fix] <code>parse</code>: preserve text after special shell
parameters <a
href="https://github.com/ljharb/shell-quote/commit/81b08a532e898a3627f9305fa13d643ffa82a9d3 "><code>81b08a5</code></a></li>
<li>[Fix] <code>parse</code>: an escaped backslash does not escape the
character after it <a
href="https://github.com/ljharb/shell-quote/commit/d708019016ce26e1a8a05af4b296e35ef8095c9e "><code>d708019</code></a></li>
<li>[Fix] <code>quote</code>: preserve <code>!</code> in arguments that
also contain <code>'</code> <a
href="https://github.com/ljharb/shell-quote/commit/ad399279dbbbd086967d2040c1558b4888b074e6 "><code>ad39927</code></a></li>
<li>[Fix] <code>parse</code>: treat <code>$_name</code> as a variable
name, not <code>$_</code> followed by text <a
href="https://github.com/ljharb/shell-quote/commit/28f88cd422ae4046aca9556c4b74ca90b0ea7f6b "><code>28f88cd</code></a></li>
<li>[Fix] <code>quote</code>: preserve empty glob patterns <a
href="https://github.com/ljharb/shell-quote/commit/35c9b97a744211091b772f145bef0b6a5562b68e "><code>35c9b97</code></a></li>
<li>[Fix] <code>quote</code>: escape <code>~</code> in glob patterns to
prevent shell tilde-expansion <a
href="https://github.com/ljharb/shell-quote/commit/239d49cae6d231436ea4e676850037018c790c49 "><code>239d49c</code></a></li>
<li>[Dev Deps] update <code>@ljharb/eslint-config</code>,
<code>auto-changelog</code>, <code>eslint</code>, <code>evalmd</code> <a
href="https://github.com/ljharb/shell-quote/commit/b1e406ed4287a134cc649db47b9a59e21b304472 "><code>b1e406e</code></a></li>
<li>[meta] npmignore some files <a
href="https://github.com/ljharb/shell-quote/commit/ebfc3080cf5f68db5edfddfba49dc8c4ccacd2d5 "><code>ebfc308</code></a></li>
<li>[actions] add permissions <a
href="https://github.com/ljharb/shell-quote/commit/3429b0d349211786765e9e68478e029d96ad44e9 "><code>3429b0d</code></a></li>
<li>[actions] set least-privilege <code>cache-mode</code> <a
href="https://github.com/ljharb/shell-quote/commit/36f23944db50dd3f0df4da9c7cba0bb63df05f64 "><code>36f2394</code></a></li>
<li>[Dev Deps] update <code>eslint</code> <a
href="https://github.com/ljharb/shell-quote/commit/6de9a41ecfc4fe9f9546df08866c8ead039f8909 "><code>6de9a41</code></a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/ljharb/shell-quote/commit/6ecb8aa618ba6dc6c3b087fce6d7660320d2adeb "><code>6ecb8aa</code></a>
v1.12.0</li>
<li><a
href="https://github.com/ljharb/shell-quote/commit/3a7b4ae3960c3ff4413932e276c5b0ecb3a2b456 "><code>3a7b4ae</code></a>
[Dev Deps] update <code>@ljharb/eslint-config</code></li>
<li><a
href="https://github.com/ljharb/shell-quote/commit/7d688b9bec1917a22cccd4d4c887128a9c66e8a0 "><code>7d688b9</code></a>
[New] <code>parse</code>: support the <code>case</code> test-next
terminator (<code>;;&</code>)</li>
<li><a
href="https://github.com/ljharb/shell-quote/commit/f27010ed04bcd925795b350afb1c49e36bbd1ba3 "><code>f27010e</code></a>
[New] <code>parse</code>: support the <code>case</code> fall-through
terminator (<code>;&</code>)</li>
<li><a
href="https://github.com/ljharb/shell-quote/commit/90cde9cfd8af30fcb65e9fd2cb2f9e181d3f103b "><code>90cde9c</code></a>
[New] <code>parse</code>: support appending stdout and stderr
(<code>&>></code>)</li>
<li><a
href="https://github.com/ljharb/shell-quote/commit/6ad6cd215f89adcc29dd601e085fa54083c2f911 "><code>6ad6cd2</code></a>
[New] <code>parse</code>: support redirecting stdout and stderr
(<code>&></code>)</li>
<li><a
href="https://github.com/ljharb/shell-quote/commit/20533154bb57809c80f55318b8493aef49505f4e "><code>2053315</code></a>
[New] <code>parse</code>: support output process substitution
(<code>>(</code>)</li>
<li><a
href="https://github.com/ljharb/shell-quote/commit/b78d19c14da6356cc12c46b3478203247ab8a295 "><code>b78d19c</code></a>
[New] <code>parse</code>: support redirecting output despite
<code>noclobber</code> (<code>>|</code>)</li>
<li><a
href="https://github.com/ljharb/shell-quote/commit/21cc333eb0ce5bf094f595b7fdc01b3447ffd4b0 "><code>21cc333</code></a>
[New] <code>parse</code>: support opening a file for reading and writing
(<code>\<></code>)</li>
<li><a
href="https://github.com/ljharb/shell-quote/commit/dbfac376d4065d37539d3abdb5e76847f93797d3 "><code>dbfac37</code></a>
[New] <code>parse</code>: support tab-stripping here-documents
(<code><<-</code>)</li>
<li>Additional commits viewable in <a
href="https://github.com/ljharb/shell-quote/compare/v1.10.0...v1.12.0 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `source-map-js` from 1.2.1 to 1.2.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/7rulnik/source-map-js/releases ">source-map-js's
releases</a>.</em></p>
<blockquote>
<h2>v1.2.2</h2>
<ul>
<li>
<p>Fix crash when executing in browser with CSP script-src that don't
permit unsafe-eval (<a
href="https://redirect.github.com/7rulnik/source-map-js/pull/29 ">#29</a>)
<a href="https://github.com/xfournet "><code>@xfournet</code></a></p>
</li>
<li>
<p>Fix denial of service from malicious indexed source maps
(CVE-2026-93749) (<a
href="https://redirect.github.com/7rulnik/source-map-js/pull/79 ">#79</a>)</p>
<p>Reported by <a
href="https://github.com/waydeshi "><code>@waydeshi</code></a> in <a
href="https://redirect.github.com/7rulnik/source-map-js/issues/76 ">#76</a>.
A fix was also proposed by <a
href="https://github.com/aniebiet "><code>@aniebiet</code></a> in <a
href="https://redirect.github.com/7rulnik/source-map-js/pull/78 ">#78</a>.</p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/7rulnik/source-map-js/blob/main/CHANGELOG.md ">source-map-js's
changelog</a>.</em></p>
<blockquote>
<h2>1.2.2</h2>
<ul>
<li>
<p>Fix crash when executing in browser with CSP script-src that don't
permit unsafe-eval (<a
href="https://redirect.github.com/7rulnik/source-map-js/pull/29 ">#29</a>)
<a href="https://github.com/xfournet "><code>@xfournet</code></a></p>
</li>
<li>
<p>Fix denial of service from malicious indexed source maps
(CVE-2026-93749) (<a
href="https://redirect.github.com/7rulnik/source-map-js/pull/79 ">#79</a>)</p>
<p>Reported by <a
href="https://github.com/waydeshi "><code>@waydeshi</code></a> in <a
href="https://redirect.github.com/7rulnik/source-map-js/issues/76 ">#76</a>.
A fix was also proposed by <a
href="https://github.com/aniebiet "><code>@aniebiet</code></a> in <a
href="https://redirect.github.com/7rulnik/source-map-js/pull/78 ">#78</a>.</p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/7rulnik/source-map-js/commit/0a1d334fd1e55a47df97fcd60a7915d46df3b08a "><code>0a1d334</code></a>
1.2.2</li>
<li><a
href="https://github.com/7rulnik/source-map-js/commit/4c6fa26d77419bd8e48ec92844866cce7d9ae739 "><code>4c6fa26</code></a>
Update changelog</li>
<li><a
href="https://github.com/7rulnik/source-map-js/commit/cf7658058ceeaa8619d5ae0ec90be6905209d016 "><code>cf76580</code></a>
Fix denial of service from malicious indexed source maps
(CVE-2026-93749) (<a
href="https://redirect.github.com/7rulnik/source-map-js/issues/79 ">#79</a>)</li>
<li><a
href="https://github.com/7rulnik/source-map-js/commit/7899a86615c630f4fc220273ff9fe2e8e49a56df "><code>7899a86</code></a>
Fix crash when executing browser with CSP script-src that don't permit
unsafe...</li>
<li>See full diff in <a
href="https://github.com/7rulnik/source-map-js/compare/v1.2.1...v1.2.2 ">compare
view</a></li>
</ul>
</details>
<br />
2026-10-09 23:24:43 +11:00
Justin Lin
119f8c552a
refactor: replace svg rect with html button
...
Only use svg to draw lines
2026-10-09 23:23:02 +11:00
Justin Lin
22c71d367c
fix: quest map wrap text
2026-10-09 23:14:04 +11:00
dependabot[bot]
c3893a9ca3
chore(deps): bump the npm_and_yarn group across 1 directory with 4 updates
...
Bumps the npm_and_yarn group with 4 updates in the / directory: [handlebars](https://github.com/handlebars-lang/handlebars.js ), [proxy-addr](https://github.com/jshttp/proxy-addr ), [shell-quote](https://github.com/ljharb/shell-quote ) and [source-map-js](https://github.com/7rulnik/source-map-js ).
Updates `handlebars` from 4.7.9 to 4.7.10
- [Release notes](https://github.com/handlebars-lang/handlebars.js/releases )
- [Changelog](https://github.com/handlebars-lang/handlebars.js/blob/v4.7.10/release-notes.md )
- [Commits](https://github.com/handlebars-lang/handlebars.js/compare/v4.7.9...v4.7.10 )
Updates `proxy-addr` from 2.0.7 to 2.0.8
- [Release notes](https://github.com/jshttp/proxy-addr/releases )
- [Changelog](https://github.com/jshttp/proxy-addr/blob/master/HISTORY.md )
- [Commits](https://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8 )
Updates `shell-quote` from 1.10.0 to 1.12.0
- [Changelog](https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md )
- [Commits](https://github.com/ljharb/shell-quote/compare/v1.10.0...v1.12.0 )
Updates `source-map-js` from 1.2.1 to 1.2.2
- [Release notes](https://github.com/7rulnik/source-map-js/releases )
- [Changelog](https://github.com/7rulnik/source-map-js/blob/main/CHANGELOG.md )
- [Commits](https://github.com/7rulnik/source-map-js/compare/v1.2.1...v1.2.2 )
---
updated-dependencies:
- dependency-name: handlebars
dependency-version: 4.7.10
dependency-type: indirect
- dependency-name: proxy-addr
dependency-version: 2.0.8
dependency-type: indirect
- dependency-name: shell-quote
dependency-version: 1.12.0
dependency-type: indirect
- dependency-name: source-map-js
dependency-version: 1.2.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-09 12:03:41 +00:00
Justin Lin
4260e742df
Feature/multilingual quests ( #209 )
2026-10-09 22:58:05 +11:00
neilchen0812
a7039714aa
refactor: read selected locale inside session store
2026-10-09 17:12:28 +10:30
Justin Lin
174bab7494
security: switch CodeQL to advanced set up ( #211 )
2026-10-09 17:34:20 +11:00
Justin Lin
9f0804a194
security: switch CodeQL to advanced set up
2026-10-09 17:32:37 +11:00
Justin Lin
de0eb1b33b
chore(deps): bump axios from 1.18.0 to 1.20.0 in the npm_and_yarn group across 1 directory ( #208 )
...
Bumps the npm_and_yarn group with 1 update in the / directory:
[axios](https://github.com/axios/axios ).
Updates `axios` from 1.18.0 to 1.20.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/axios/axios/releases ">axios's
releases</a>.</em></p>
<blockquote>
<h2>v1.20.0 — August 19, 2026</h2>
<p>This release hardens runtime option handling, adds RFC 9110
status-code aliases, fixes Node.js and XHR reliability issues, and
refreshes project tooling and documentation.</p>
<h2>⚠️ Breaking Changes & Deprecations</h2>
<ul>
<li>HTTP Status Naming: Added ContentTooLarge (413) and
UnprocessableContent (422), while retaining PayloadTooLarge and
UnprocessableEntity as backward-compatible deprecated aliases. (<a
href="https://redirect.github.com/axios/axios/issues/11082 ">#11082</a>)</li>
</ul>
<h2>🔒 Security Fixes</h2>
<ul>
<li>Runtime Option Handling: Hardened behavioral configuration reads
against shared and foreign prototype pollution and normalized unsafe
interceptor replacement objects. This also clarifies Fetch redirect and
custom implementation behavior, HTTP/2 DNS and proxy handling,
CIDR-based NO_PROXY matching, and malformed data URI rejection; see the
PR for documented compatibility effects. (<a
href="https://redirect.github.com/axios/axios/issues/11141 ">#11141</a>)</li>
</ul>
<h2>🐛 Bug Fixes</h2>
<ul>
<li>Interceptor Lifecycle: Prevented unbounded handler-array growth by
trimming trailing ejected interceptors without changing iteration
semantics, and kept interceptor operations safe when the public handlers
field is nullish. (<a
href="https://redirect.github.com/axios/axios/issues/11087 ">#11087</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11118 ">#11118</a>)</li>
<li>Request Error Preservation: Prevented custom Error.prepareStackTrace
implementations that return non-string values from replacing the
original request failure with an unrelated TypeError. (<a
href="https://redirect.github.com/axios/axios/issues/11109 ">#11109</a>)</li>
<li>XHR Reliability: Navigation-canceled requests now reject with
ECONNABORTED instead of resolving with status 0, while successful
downloads flush their final progress callback during the live loadend
dispatch. (<a
href="https://redirect.github.com/axios/axios/issues/11094 ">#11094</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11121 ">#11121</a>)</li>
<li>Node.js Socket Memory: Removed request-context retention from
per-socket error listeners, preventing completed response data from
being pinned for the lifetime of pooled keep-alive sockets. (<a
href="https://redirect.github.com/axios/axios/issues/11091 ">#11091</a>)</li>
<li>Core Methods and HTTP Errors: Prevented structural method-header
buckets from leaking into outgoing headers, standardized invalid DNS
lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and
corrected the timeoutErrorMessage merge strategy. (<a
href="https://redirect.github.com/axios/axios/issues/11096 ">#11096</a>)</li>
</ul>
<h2>🔧 Maintenance & Chores</h2>
<ul>
<li>Dependencies: Updated fast-uri, postcss, js-yaml, mocha,
development-tooling groups, and GitHub Actions dependencies. (<a
href="https://redirect.github.com/axios/axios/issues/11092 ">#11092</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11098 ">#11098</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11099 ">#11099</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11106 ">#11106</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11107 ">#11107</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11122 ">#11122</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11123 ">#11123</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11126 ">#11126</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11127 ">#11127</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11133 ">#11133</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11140 ">#11140</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11143 ">#11143</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11144 ">#11144</a>)</li>
<li>Documentation: Applied the v1.19.0 documentation updates, added the
missing fs import to the README stream example, introduced localized
global search, and repaired the interceptor test link. (<a
href="https://redirect.github.com/axios/axios/issues/11101 ">#11101</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11113 ">#11113</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11097 ">#11097</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11119 ">#11119</a>)</li>
<li>Sponsorship: Updated sponsorship links and data and added
ScrapingBee as a sponsor. (<a
href="https://redirect.github.com/axios/axios/issues/11124 ">#11124</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11136 ">#11136</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11137 ">#11137</a>)</li>
<li>CI and Release: Switched ESM smoke tests to locked dependencies and
synchronized package and runtime version metadata for v1.20.0. (<a
href="https://redirect.github.com/axios/axios/issues/11128 ">#11128</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11152 ">#11152</a>)</li>
</ul>
<h2>🌟 New Contributors</h2>
<p>We are thrilled to welcome our new contributors. Thank you for
helping improve axios:</p>
<ul>
<li><a href="https://github.com/yens1 "><code>@yens1</code></a> (<a
href="https://redirect.github.com/axios/axios/issues/11109 ">#11109</a>)</li>
<li><a
href="https://github.com/Sasireddy001 "><code>@Sasireddy001</code></a>
(<a
href="https://redirect.github.com/axios/axios/issues/11113 ">#11113</a>)</li>
<li><a
href="https://github.com/ari-token-security "><code>@ari-token-security</code></a>
(<a
href="https://redirect.github.com/axios/axios/issues/11094 ">#11094</a>)</li>
<li><a
href="https://github.com/timothyokooboh "><code>@timothyokooboh</code></a>
(<a
href="https://redirect.github.com/axios/axios/issues/11097 ">#11097</a>)</li>
<li><a
href="https://github.com/gi9439041-png "><code>@gi9439041-png</code></a>
(<a
href="https://redirect.github.com/axios/axios/issues/11119 ">#11119</a>)</li>
<li><a
href="https://github.com/Hashim1999164 "><code>@Hashim1999164</code></a>
(<a
href="https://redirect.github.com/axios/axios/issues/11082 ">#11082</a>)</li>
<li><a href="https://github.com/v-dev-cl "><code>@v-dev-cl</code></a>
(<a
href="https://redirect.github.com/axios/axios/issues/11091 ">#11091</a>)</li>
<li><a href="https://github.com/r0h1tb "><code>@r0h1tb</code></a> (<a
href="https://redirect.github.com/axios/axios/issues/11118 ">#11118</a>)</li>
<li><a href="https://github.com/ostapondo "><code>@ostapondo</code></a>
(<a
href="https://redirect.github.com/axios/axios/issues/11121 ">#11121</a>)</li>
</ul>
<p>Full Changelog (<a
href="https://github.com/axios/axios/compare/v1.19.0...v1.20.0 ">https://github.com/axios/axios/compare/v1.19.0...v1.20.0 </a>)</p>
<h2>v1.19.0 - July 22, 2026</h2>
<p>This release raises the form-data security floor, adds configuration
and type-system capabilities, and fixes NO_PROXY matching, interceptor
errors, progress reporting, and serialization edge cases.</p>
<h2>🔒 Security Fixes</h2>
<ul>
<li>Multipart Form Data: Raised the form-data dependency floor to
^4.0.6, preventing fresh installations from resolving versions affected
by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (<a
href="https://github.com/advisories/GHSA-hmw2-7cc7-3qxx ">https://github.com/advisories/GHSA-hmw2-7cc7-3qxx </a>).
(<a
href="https://redirect.github.com/axios/axios/issues/11028 ">#11028</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/axios/axios/blob/v1.x/CHANGELOG.md ">axios's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<h2>v1.19.0 — July 22, 2026</h2>
<p>This release raises the form-data security floor, adds configuration
and type-system capabilities, and fixes NO_PROXY matching, interceptor
errors, progress reporting, and serialization edge cases.</p>
<h2>🔒 Security Fixes</h2>
<ul>
<li>Multipart Form Data: Raised the form-data dependency floor to
^4.0.6, preventing fresh installations from resolving versions affected
by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (<a
href="https://github.com/advisories/GHSA-hmw2-7cc7-3qxx ">https://github.com/advisories/GHSA-hmw2-7cc7-3qxx </a>).
(<a
href="https://redirect.github.com/axios/axios/issues/11028 ">#11028</a>)</li>
</ul>
<h2>🚀 New Features</h2>
<ul>
<li>Configuration Extensibility: Preserved own-enumerable symbol-keyed
fields through mergeConfig and added a generic params type across public
TypeScript declarations, responses, errors,
adapters, and serializers. (<a
href="https://redirect.github.com/axios/axios/issues/11043 ">#11043</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11081 ">#11081</a>)</li>
<li>Header Parameter Parsing: Added the opt-in
AxiosHeaders.parseParameters() parser for quote-aware, RFC-style HTTP
parameter parsing while preserving legacy parsing behavior. (<a
href="https://redirect.github.com/axios/axios/issues/11051 ">#11051</a>)</li>
<li>HTTP Status Codes: Added the missing Cloudflare 520
WebServerReturnsAnUnknownError status and matching ESM/CJS declarations.
(<a
href="https://redirect.github.com/axios/axios/issues/11067 ">#11067</a>)</li>
</ul>
<h2>🐛 Bug Fixes</h2>
<ul>
<li>
<p>Form Data Conversion: Limited formDataToJSON path splitting to dot
and bracket notation, preserving literal punctuation in keys, and
removed browser-facing Buffer.from usage from toFormData to avoid
unnecessary polyfills. (<a
href="https://redirect.github.com/axios/axios/issues/11006 ">#11006</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11018 ">#11018</a>)</p>
</li>
<li>
<p>Proxy Bypass: Canonicalized IPv4 shorthand, octal, and hexadecimal
forms during NO_PROXY matching and honored * entries within comma- or
space-separated bypass lists. (<a
href="https://redirect.github.com/axios/axios/issues/11029 ">#11029</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11053 ">#11053</a>)</p>
</li>
<li>
<p>Cancellation: Propagated already-aborted input signals immediately
when composing abort signals. (<a
href="https://redirect.github.com/axios/axios/issues/11035 ">#11035</a>)</p>
</li>
<li>
<p>Header Handling: Preserved empty first values for duplicate singleton
headers and made AxiosHeaders#getSetCookie() consistently return arrays
for present values. (<a
href="https://redirect.github.com/axios/axios/issues/11036 ">#11036</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11037 ">#11037</a>)</p>
</li>
<li>
<p>URL Handling: Included normalized, safely redacted offending URLs in
malformed-protocol errors and removed repeated trailing slashes when
combining base URLs. (<a
href="https://redirect.github.com/axios/axios/issues/11008 ">#11008</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11038 ">#11038</a>)</p>
</li>
<li>
<p>Progress Events: Clamped malformed negative progress values to zero
and ensured final Node.js download progress events are delivered before
streamed responses close. (<a
href="https://redirect.github.com/axios/axios/issues/11039 ">#11039</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11040 ">#11040</a>)</p>
</li>
<li>
<p>Error and JSON Serialization: Serialized Set values as arrays in
JSON-compatible snapshots and synthesized useful AxiosError messages
from otherwise-empty AggregateError instances. (<a
href="https://redirect.github.com/axios/axios/issues/11044 ">#11044</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11059 ">#11059</a>)</p>
</li>
<li>
<p>Content-Length Enforcement: Corrected base64 data: URL size
estimation so maxContentLength is enforced consistently by the HTTP and
Fetch adapters. (<a
href="https://redirect.github.com/axios/axios/issues/11061 ">#11061</a>)</p>
</li>
<li>
<p>Synchronous Interceptors: Prevented requests from being dispatched
after synchronous request interceptors fail unless their paired
rejection handler resolves successfully. (<a
href="https://redirect.github.com/axios/axios/issues/11071 ">#11071</a>)</p>
</li>
</ul>
<h2>🔧 Maintenance & Chores</h2>
<ul>
<li>Dependencies: Updated development and test tooling, the docs
fixture's Axios version, and GitHub Actions integrations including
Checkout, Setup Node, Setup Deno, and Zizmor. (<a
href="https://redirect.github.com/axios/axios/issues/11031 ">#11031</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11055 ">#11055</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11056 ">#11056</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11058 ">#11058</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11079 ">#11079</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11080 ">#11080</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11088 ">#11088</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11089 ">#11089</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11090 ">#11090</a>)</li>
<li>Build Outputs: Limited sourcemap generation to published minified
bundles, removing broken map references from non-minified builds. (<a
href="https://redirect.github.com/axios/axios/issues/11054 ">#11054</a>)</li>
<li>Form Data Internals: Centralized FormData header handling and made
the Node.js adapter tolerate getHeaders() returning undefined under the
content-only policy. (<a
href="https://redirect.github.com/axios/axios/issues/11062 ">#11062</a>)</li>
<li>Developer Experience: Ignored common local AI-tooling directories
and fixed a constant-reassignment crash when the development sandbox
serves its root path. (<a
href="https://redirect.github.com/axios/axios/issues/11032 ">#11032</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11073 ">#11073</a>)</li>
<li>Documentation: Updated sponsor information, clarified that baseURL
is not a path-security boundary, scoped provenance claims to attested
releases, and corrected the configuration-defaults documentation. (<a
href="https://redirect.github.com/axios/axios/issues/11041 ">#11041</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11068 ">#11068</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11076 ">#11076</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11078 ">#11078</a>)</li>
<li>Publishing: Simplified v1 publishing to use the npm version bundled
with Node.js 26 and updated package metadata for the 1.19.0 release. (<a
href="https://redirect.github.com/axios/axios/issues/11083 ">#11083</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11095 ">#11095</a>)</li>
</ul>
<h2>🌟 New Contributors</h2>
<p>We are thrilled to welcome our new contributors. Thank you for
helping improve Axios:</p>
<ul>
<li><a
href="https://github.com/afonsojramos "><code>@afonsojramos</code></a>
(<a
href="https://redirect.github.com/axios/axios/issues/11028 ">#11028</a>)</li>
<li><a
href="https://github.com/MahinAnowar "><code>@MahinAnowar</code></a> (<a
href="https://redirect.github.com/axios/axios/issues/11006 ">#11006</a>)</li>
<li><a
href="https://github.com/yassertawfik4 "><code>@yassertawfik4</code></a>
(<a
href="https://redirect.github.com/axios/axios/issues/11024 ">#11024</a>)</li>
<li><a
href="https://github.com/AnandSundar "><code>@AnandSundar</code></a> (<a
href="https://redirect.github.com/axios/axios/issues/11029 ">#11029</a>)</li>
<li><a
href="https://github.com/lin-hongkuan "><code>@lin-hongkuan</code></a>
(<a
href="https://redirect.github.com/axios/axios/issues/11035 ">#11035</a>)</li>
<li><a
href="https://github.com/Wali007-lab "><code>@Wali007-lab</code></a> (<a
href="https://redirect.github.com/axios/axios/issues/11054 ">#11054</a>)</li>
<li><a href="https://github.com/magicdawn "><code>@magicdawn</code></a>
(<a
href="https://redirect.github.com/axios/axios/issues/11043 ">#11043</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/axios/axios/commit/84a9f3b9a4f3244b8c8e818f557d64c7b964fb25 "><code>84a9f3b</code></a>
chore(release): prepare release 1.20.0 (<a
href="https://redirect.github.com/axios/axios/issues/11152 ">#11152</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/e6824eec5fcf9da467a9792724396badc490c469 "><code>e6824ee</code></a>
fix: core methodList, HTTP adapter errors, and add tests (<a
href="https://redirect.github.com/axios/axios/issues/11096 ">#11096</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/d8a919fd81403d59058c0e9dbefc540407dee83f "><code>d8a919f</code></a>
fix(xhr): flush final progress during the live loadend dispatch (<a
href="https://redirect.github.com/axios/axios/issues/11121 ">#11121</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/2d2a21af8a433089474a2149781799c93acbcf3c "><code>2d2a21a</code></a>
fix(interceptors): tolerate nullish handlers in syncHandlerEntries (<a
href="https://redirect.github.com/axios/axios/issues/11118 ">#11118</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a "><code>d19040b</code></a>
fix: harden runtime option handling (<a
href="https://redirect.github.com/axios/axios/issues/11141 ">#11141</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/e0a02dd16671deabe2b809334d4c2ebede29a233 "><code>e0a02dd</code></a>
chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 in the
github-...</li>
<li><a
href="https://github.com/axios/axios/commit/d10cb3aa3cda1d78721ddf96be590478df26cd81 "><code>d10cb3a</code></a>
chore(deps-dev): bump the development_dependencies group with 4 updates
(<a
href="https://redirect.github.com/axios/axios/issues/11143 ">#11143</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/2c94646eb7cb7ab9dcb2aefdb04ab1b040c28e16 "><code>2c94646</code></a>
chore(deps): bump js-yaml and mocha in /tests/smoke/cjs (<a
href="https://redirect.github.com/axios/axios/issues/11133 ">#11133</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/76c12bce5a4fe9a45bef9a5bf2baaf599d7d382e "><code>76c12bc</code></a>
chore(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 (<a
href="https://redirect.github.com/axios/axios/issues/11140 ">#11140</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/ba98559a7f5a18e531b5762387e5957bd281af3d "><code>ba98559</code></a>
docs: add ScrapingBee sponsor (<a
href="https://redirect.github.com/axios/axios/issues/11137 ">#11137</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/axios/axios/compare/v1.18.0...v1.20.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/linux-odyssey/linux-odyssey/network/alerts ).
</details>
2026-10-09 16:50:22 +11:00
neilchen0812
5e8d3f275d
fix: remove unnecessary operator and imports
2026-10-09 01:25:38 +10:30
Tai-Lin Chen
6a097c02ed
Merge branch 'main' into feature/multilingual-quests
2026-10-08 10:11:13 +10:30
neilchen0812
9165a4ecf6
fix: add missing zod dependency to analytics
2026-10-08 10:05:25 +10:30
neilchen0812
4bb27a2cbd
feat: add English translations for quests
2026-10-08 09:38:28 +10:30
neilchen0812
66b0b7ba68
feat: support changing quest language
2026-10-08 02:46:44 +10:30
dependabot[bot]
6e780811a2
chore(deps): bump axios
...
Bumps the npm_and_yarn group with 1 update in the / directory: [axios](https://github.com/axios/axios ).
Updates `axios` from 1.18.0 to 1.20.0
- [Release notes](https://github.com/axios/axios/releases )
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md )
- [Commits](https://github.com/axios/axios/compare/v1.18.0...v1.20.0 )
---
updated-dependencies:
- dependency-name: axios
dependency-version: 1.20.0
dependency-type: direct:production
dependency-group: npm_and_yarn
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-05 22:24:50 +00:00
Justin Lin
68d1beea69
Add CodeQL analysis workflow configuration ( #207 )
...
Add language Go and GitHub Actions
2026-10-06 09:24:20 +11:00
Justin Lin
08fc200e47
Add CodeQL analysis workflow configuration
...
Add language Go and GitHub Actions
2026-10-06 09:21:57 +11:00
Justin Lin
eb9e68953b
chore(deps): bump dompurify from 3.4.13 to 3.4.16 in the npm_and_yarn group across 1 directory ( #205 )
...
Bumps the npm_and_yarn group with 1 update in the / directory:
[dompurify](https://github.com/cure53/DOMPurify ).
Updates `dompurify` from 3.4.13 to 3.4.16
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/cure53/DOMPurify/releases ">dompurify's
releases</a>.</em></p>
<blockquote>
<h2>DOMPurify 3.4.16</h2>
<ul>
<li>Fixed a problem with <code>IN_PLACE</code> node removal when working
with hooks, thanks <a
href="https://github.com/manus-pi "><code>@manus-pi</code></a></li>
<li>Fixed a problem with <code>IN_PLACE</code> sanitization and raw-text
roots, thanks <a
href="https://github.com/h-t-m "><code>@h-t-m</code></a></li>
<li>Fixed a problem with ESM default exports landing in CommonJS
declarations, thanks <a
href="https://github.com/ssi02014 "><code>@ssi02014</code></a></li>
<li>Migrated from <code>rollup</code> to <code>rolldown</code> because
performance, thanks <a
href="https://github.com/ssi02014 "><code>@ssi02014</code></a></li>
<li>Bumped several dependencies where possible</li>
</ul>
<h2>DOMPurify 3.4.15</h2>
<ul>
<li>Added better clobbering hardening when XML content is involved,
thanks <a
href="https://github.com/gnyselcuk "><code>@gnyselcuk</code></a></li>
<li>Added several smaller hardening and edge-case improvements, thanks
<a
href="https://github.com/leechristensen "><code>@leechristensen</code></a></li>
<li>Bumped several dependencies where possible</li>
</ul>
<h2>DOMPurify 3.4.14</h2>
<ul>
<li>Fixed an issue with possible bypasses when risky tags are
allow-listed, thanks <a
href="https://github.com/AlirezaRouhbakhsh "><code>@AlirezaRouhbakhsh</code></a></li>
<li>Fixed a couple of edge cases with mixed document contexts, thanks <a
href="https://github.com/fishjojo1 "><code>@fishjojo1</code></a></li>
<li>Added the SVG <code>pointer-events</code> and
<code>vector-effect</code> presentation attributes to the allow-list,
thanks <a
href="https://github.com/Jaybhade "><code>@Jaybhade</code></a></li>
<li>Conducted another refactoring run, removed dead branches and
duplicated logic, flattened attribute validation</li>
<li>Updated the documentation in several spots, README, wiki, etc.,
thanks <a
href="https://github.com/Akokonunes "><code>@Akokonunes</code></a></li>
<li>Updated several development dependencies and CI workflow
actions</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/cure53/DOMPurify/commit/b9b9d80f7e401771c2ccaef5f45def7eec8f27d7 "><code>b9b9d80</code></a>
release: 3.4.16 (<a
href="https://redirect.github.com/cure53/DOMPurify/issues/1636 ">#1636</a>)</li>
<li><a
href="https://github.com/cure53/DOMPurify/commit/1d7460c4f8a27be825c11b1c9d346d79db32c1e5 "><code>1d7460c</code></a>
release: 3.4.15 (<a
href="https://redirect.github.com/cure53/DOMPurify/issues/1609 ">#1609</a>)</li>
<li><a
href="https://github.com/cure53/DOMPurify/commit/4e6fe24173f1a85eafacd95e3c82966e29d34d49 "><code>4e6fe24</code></a>
release: 3.4.14 (<a
href="https://redirect.github.com/cure53/DOMPurify/issues/1587 ">#1587</a>)</li>
<li>See full diff in <a
href="https://github.com/cure53/DOMPurify/compare/3.4.13...3.4.16 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/linux-odyssey/linux-odyssey/network/alerts ).
</details>
2026-10-06 09:20:21 +11:00
neilchen0812
9b8d7109cf
refactor: move original quest content into each quest's zh-TW folder
2026-10-05 22:36:50 +10:30
dependabot[bot]
fae9a012aa
chore(deps): bump dompurify
...
Bumps the npm_and_yarn group with 1 update in the / directory: [dompurify](https://github.com/cure53/DOMPurify ).
Updates `dompurify` from 3.4.13 to 3.4.16
- [Release notes](https://github.com/cure53/DOMPurify/releases )
- [Commits](https://github.com/cure53/DOMPurify/compare/3.4.13...3.4.16 )
---
updated-dependencies:
- dependency-name: dompurify
dependency-version: 3.4.16
dependency-type: direct:production
dependency-group: npm_and_yarn
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-05 05:32:02 +00:00
Justin Lin
2dc3546c98
chore(deps): bump the npm_and_yarn group across 1 directory with 7 updates ( #204 )
...
Bumps the npm_and_yarn group with 7 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
| [validator](https://github.com/validatorjs/validator.js ) | `13.11.0` |
`13.15.22` |
| [@trpc/server](https://github.com/trpc/trpc/tree/HEAD/packages/server )
| `11.1.1` | `11.8.0` |
| [yaml](https://github.com/eemeli/yaml ) | `2.3.4` | `2.8.3` |
| [bn.js](https://github.com/indutny/bn.js ) | `4.12.0` | `4.12.5` |
| [flatted](https://github.com/WebReflection/flatted ) | `3.3.1` |
`3.4.4` |
| [jws](https://github.com/brianloveswords/node-jws ) | `3.2.2` | `3.2.3`
|
| [rollup](https://github.com/rollup/rollup ) | `4.40.0` | `4.63.5` |
Updates `validator` from 13.11.0 to 13.15.22
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/validatorjs/validator.js/releases ">validator's
releases</a>.</em></p>
<blockquote>
<h2>13.15.22</h2>
<h3>Fixes, New Locales and Enhancements</h3>
<ul>
<li><a
href="https://redirect.github.com/validatorjs/validator.js/pull/2622 ">#2622</a>
<code>isURL</code>: fix regression with hostnames with ports <a
href="https://github.com/mbtools "><code>@mbtools</code></a></li>
<li><a
href="https://redirect.github.com/validatorjs/validator.js/pull/2616 ">#2616</a>
<code>isLength</code>: improve handling Unicode variation selectors <a
href="https://github.com/koral "><code>@koral</code></a>--</li>
<li><strong>Doc fixes and others:</strong>
<ul>
<li><a
href="https://redirect.github.com/validatorjs/validator.js/pull/2621 ">#2621</a>
<a href="https://github.com/mbtools "><code>@mbtools</code></a></li>
</ul>
</li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/mbtools "><code>@mbtools</code></a> made
their first contribution in <a
href="https://redirect.github.com/validatorjs/validator.js/pull/2622 ">validatorjs/validator.js#2622</a></li>
<li><a href="https://github.com/koral "><code>@koral</code></a>-- made
their first contribution in <a
href="https://redirect.github.com/validatorjs/validator.js/pull/2616 ">validatorjs/validator.js#2616</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/validatorjs/validator.js/compare/13.15.20...13.15.22 ">https://github.com/validatorjs/validator.js/compare/13.15.20...13.15.22 </a></p>
<h2>13.15.20</h2>
<h3>Fixes, New Locales and Enhancements</h3>
<ul>
<li><a
href="https://redirect.github.com/validatorjs/validator.js/pull/2556 ">#2556</a>
<code>isMobilePhone</code>: add <code>ar-QA</code> locale <a
href="https://github.com/WardKhaddour "><code>@WardKhaddour</code></a></li>
<li><a
href="https://redirect.github.com/validatorjs/validator.js/pull/2576 ">#2576</a>
<code>isAlpha</code>/<code>isAlphanuneric</code>: add Indic locales
(<code>ta-IN</code>, <code>te-IN</code>, <code>kn-IN</code>,
<code>ml-IN</code>, <code>gu-IN</code>, <code>pa-IN</code>,
<code>or-IN</code>) <a
href="https://github.com/avadootharajesh "><code>@avadootharajesh</code></a></li>
<li><a
href="https://redirect.github.com/validatorjs/validator.js/pull/2574 ">#2574</a>
<code>isBase64</code>: improve padding regex <a
href="https://github.com/KrayzeeKev "><code>@KrayzeeKev</code></a></li>
<li><a
href="https://redirect.github.com/validatorjs/validator.js/pull/2584 ">#2584</a>
<code>isVAT</code>: improve <code>FR</code> locale <a
href="https://github.com/iamAmer "><code>@iamAmer</code></a></li>
<li><a
href="https://redirect.github.com/validatorjs/validator.js/pull/2608 ">#2608</a>
<code>isURL</code>: improve protocol detection. Resolves CVE-2025-56200
<a href="https://github.com/theofidry "><code>@theofidry</code></a></li>
<li><strong>Doc fixes and others:</strong>
<ul>
<li><a
href="https://redirect.github.com/validatorjs/validator.js/pull/2563 ">#2563</a>
<a href="https://github.com/stoneLeaf "><code>@stoneLeaf</code></a></li>
<li><a
href="https://redirect.github.com/validatorjs/validator.js/pull/2581 ">#2581</a>
<a
href="https://github.com/camillobruni "><code>@camillobruni</code></a></li>
</ul>
</li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/stoneLeaf "><code>@stoneLeaf</code></a>
made their first contribution in <a
href="https://redirect.github.com/validatorjs/validator.js/pull/2563 ">validatorjs/validator.js#2563</a></li>
<li><a
href="https://github.com/WardKhaddour "><code>@WardKhaddour</code></a>
made their first contribution in <a
href="https://redirect.github.com/validatorjs/validator.js/pull/2556 ">validatorjs/validator.js#2556</a></li>
<li><a
href="https://github.com/avadootharajesh "><code>@avadootharajesh</code></a>
made their first contribution in <a
href="https://redirect.github.com/validatorjs/validator.js/pull/2576 ">validatorjs/validator.js#2576</a></li>
<li><a
href="https://github.com/KrayzeeKev "><code>@KrayzeeKev</code></a> made
their first contribution in <a
href="https://redirect.github.com/validatorjs/validator.js/pull/2574 ">validatorjs/validator.js#2574</a></li>
<li><a href="https://github.com/iamAmer "><code>@iamAmer</code></a> made
their first contribution in <a
href="https://redirect.github.com/validatorjs/validator.js/pull/2584 ">validatorjs/validator.js#2584</a></li>
<li><a
href="https://github.com/camillobruni "><code>@camillobruni</code></a>
made their first contribution in <a
href="https://redirect.github.com/validatorjs/validator.js/pull/2581 ">validatorjs/validator.js#2581</a></li>
<li><a href="https://github.com/theofidry "><code>@theofidry</code></a>
made their first contribution in <a
href="https://redirect.github.com/validatorjs/validator.js/pull/2608 ">validatorjs/validator.js#2608</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/validatorjs/validator.js/compare/13.15.15...13.15.20 ">https://github.com/validatorjs/validator.js/compare/13.15.15...13.15.20 </a></p>
<h2>13.15.15</h2>
<h3>Fixes, New Locales and Enhancements</h3>
<ul>
<li><code>isMobilePhone</code>
<ul>
<li><a
href="https://redirect.github.com/validatorjs/validator.js/pull/2514 ">#2514</a>
improve <code>el-CY</code> locale <a
href="https://github.com/rezk2ll "><code>@rezk2ll</code></a></li>
<li><a
href="https://redirect.github.com/validatorjs/validator.js/pull/2512 ">#2512</a>
improve <code>pt-AO</code> locale <a
href="https://github.com/renaldodev "><code>@renaldodev</code></a></li>
<li><a
href="https://redirect.github.com/validatorjs/validator.js/pull/2502 ">#2502</a>
improve <code>ar-OM</code> locale <a
href="https://github.com/tomcastro "><code>@tomcastro</code></a></li>
</ul>
</li>
<li><a
href="https://redirect.github.com/validatorjs/validator.js/pull/2089 ">#2089</a>
<code>isIP</code>: allow usage of option object <a
href="https://github.com/pixelbucket-dev "><code>@pixelbucket-dev</code></a></li>
<li><a
href="https://redirect.github.com/validatorjs/validator.js/pull/2526 ">#2526</a>
<code>isPassportNumber</code>: improve <code>CA</code> locale <a
href="https://github.com/evanbechtol "><code>@evanbechtol</code></a></li>
<li><a
href="https://redirect.github.com/validatorjs/validator.js/pull/2491 ">#2491</a>
<code>isBase64</code>: improve validation based on RFC4648 <a
href="https://github.com/aseyfpour "><code>@aseyfpour</code></a></li>
<li><a
href="https://redirect.github.com/validatorjs/validator.js/pull/2479 ">#2479</a>
<code>isPostalCode</code>: improve <code>FR</code> locale <a
href="https://github.com/Rajput-Balram "><code>@Rajput-Balram</code></a></li>
<li><a
href="https://redirect.github.com/validatorjs/validator.js/pull/2088 ">#2088</a>
<code>isBefore</code>: allow usage of option object <a
href="https://github.com/pixelbucket-dev "><code>@pixelbucket-dev</code></a></li>
<li><a
href="https://redirect.github.com/validatorjs/validator.js/pull/2346 ">#2346</a>
<code>isRgbColor</code>: allow second digit in rgba alpha value <a
href="https://github.com/controlol "><code>@controlol</code></a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/validatorjs/validator.js/blob/master/CHANGELOG.md ">validator's
changelog</a>.</em></p>
<blockquote>
<h1>13.15.22</h1>
<h3>Fixes, New Locales and Enhancements</h3>
<ul>
<li><a
href="https://redirect.github.com/validatorjs/validator.js/pull/2622 ">#2622</a>
<code>isURL</code>: fix regression with hostnames with ports <a
href="https://github.com/mbtools "><code>@mbtools</code></a></li>
<li><a
href="https://redirect.github.com/validatorjs/validator.js/pull/2616 ">#2616</a>
<code>isLength</code>: improve handling Unicode variation selectors <a
href="https://github.com/koral "><code>@koral</code></a>--</li>
<li><strong>Doc fixes and others:</strong>
<ul>
<li><a
href="https://redirect.github.com/validatorjs/validator.js/pull/2621 ">#2621</a>
<a href="https://github.com/mbtools "><code>@mbtools</code></a></li>
</ul>
</li>
</ul>
<h1>13.15.20</h1>
<h3>Fixes, New Locales and Enhancements</h3>
<ul>
<li><a
href="https://redirect.github.com/validatorjs/validator.js/pull/2556 ">#2556</a>
<code>isMobilePhone</code>: add <code>ar-QA</code> locale <a
href="https://github.com/WardKhaddour "><code>@WardKhaddour</code></a></li>
<li><a
href="https://redirect.github.com/validatorjs/validator.js/pull/2576 ">#2576</a>
<code>isAlpha</code>/<code>isAlphanuneric</code>: add Indic locales
(<code>ta-IN</code>, <code>te-IN</code>, <code>kn-IN</code>,
<code>ml-IN</code>, <code>gu-IN</code>, <code>pa-IN</code>,
<code>or-IN</code>) <a
href="https://github.com/avadootharajesh "><code>@avadootharajesh</code></a></li>
<li><a
href="https://redirect.github.com/validatorjs/validator.js/pull/2574 ">#2574</a>
<code>isBase64</code>: improve padding regex <a
href="https://github.com/KrayzeeKev "><code>@KrayzeeKev</code></a></li>
<li><a
href="https://redirect.github.com/validatorjs/validator.js/pull/2584 ">#2584</a>
<code>isVAT</code>: improve <code>FR</code> locale <a
href="https://github.com/iamAmer "><code>@iamAmer</code></a></li>
<li><a
href="https://redirect.github.com/validatorjs/validator.js/pull/2608 ">#2608</a>
<code>isURL</code>: improve protocol detection. Resolves CVE-2025-56200
<a href="https://github.com/theofidry "><code>@theofidry</code></a></li>
<li><strong>Doc fixes and others:</strong>
<ul>
<li><a
href="https://redirect.github.com/validatorjs/validator.js/pull/2563 ">#2563</a>
<a href="https://github.com/stoneLeaf "><code>@stoneLeaf</code></a></li>
<li><a
href="https://redirect.github.com/validatorjs/validator.js/pull/2581 ">#2581</a>
<a
href="https://github.com/camillobruni "><code>@camillobruni</code></a></li>
</ul>
</li>
</ul>
<h1>13.15.15</h1>
<h3>Fixes, New Locales and Enhancements</h3>
<ul>
<li><code>isMobilePhone</code>
<ul>
<li><a
href="https://redirect.github.com/validatorjs/validator.js/pull/2514 ">#2514</a>
improve <code>el-CY</code> locale <a
href="https://github.com/rezk2ll "><code>@rezk2ll</code></a></li>
<li><a
href="https://redirect.github.com/validatorjs/validator.js/pull/2512 ">#2512</a>
improve <code>pt-AO</code> locale <a
href="https://github.com/renaldodev "><code>@renaldodev</code></a></li>
<li><a
href="https://redirect.github.com/validatorjs/validator.js/pull/2502 ">#2502</a>
improve <code>ar-OM</code> locale <a
href="https://github.com/tomcastro "><code>@tomcastro</code></a></li>
</ul>
</li>
<li><a
href="https://redirect.github.com/validatorjs/validator.js/pull/2089 ">#2089</a>
<code>isIP</code>: allow usage of option object <a
href="https://github.com/pixelbucket-dev "><code>@pixelbucket-dev</code></a></li>
<li><a
href="https://redirect.github.com/validatorjs/validator.js/pull/2526 ">#2526</a>
<code>isPassportNumber</code>: improve <code>CA</code> locale <a
href="https://github.com/evanbechtol "><code>@evanbechtol</code></a></li>
<li><a
href="https://redirect.github.com/validatorjs/validator.js/pull/2491 ">#2491</a>
<code>isBase64</code>: improve validation based on RFC4648 <a
href="https://github.com/aseyfpour "><code>@aseyfpour</code></a></li>
<li><a
href="https://redirect.github.com/validatorjs/validator.js/pull/2479 ">#2479</a>
<code>isPostalCode</code>: improve <code>FR</code> locale <a
href="https://github.com/Rajput-Balram "><code>@Rajput-Balram</code></a></li>
<li><a
href="https://redirect.github.com/validatorjs/validator.js/pull/2088 ">#2088</a>
<code>isBefore</code>: allow usage of option object <a
href="https://github.com/pixelbucket-dev "><code>@pixelbucket-dev</code></a></li>
<li><a
href="https://redirect.github.com/validatorjs/validator.js/pull/2346 ">#2346</a>
<code>isRgbColor</code>: allow second digit in rgba alpha value <a
href="https://github.com/controlol "><code>@controlol</code></a></li>
<li><a
href="https://redirect.github.com/validatorjs/validator.js/pull/2453 ">#2453</a>
<code>isIP</code>: improve IPv6 regex <a
href="https://github.com/ShreySinha02 "><code>@ShreySinha02</code></a></li>
<li><a
href="https://redirect.github.com/validatorjs/validator.js/pull/2052 ">#2052</a>
<code>isPostalCode</code>: add <code>PK</code> locale <a
href="https://github.com/mateeni-dev "><code>@mateeni-dev</code></a></li>
<li><a
href="https://redirect.github.com/validatorjs/validator.js/pull/2529 ">#2529</a>
<code>isPostalCode</code>: improve <code>TW</code> locale <a
href="https://github.com/Crocsx "><code>@Crocsx</code></a></li>
<li><a
href="https://redirect.github.com/validatorjs/validator.js/pull/2550 ">#2550</a>
<code>isPassportNumber</code>: improve <code>US</code> locale <a
href="https://github.com/yitzchak-schechter "><code>@yitzchak-schechter</code></a></li>
<li><a
href="https://redirect.github.com/validatorjs/validator.js/pull/2553 ">#2553</a>
<code>isUUID</code>: add <code>loose</code> option <a
href="https://github.com/bc-m "><code>@bc-m</code></a></li>
<li><a
href="https://redirect.github.com/validatorjs/validator.js/pull/2551 ">#2551</a>
<code>isPostalCode</code>: add <code>BD</code> locale <a
href="https://github.com/tanvirrb "><code>@tanvirrb</code></a></li>
<li><a
href="https://redirect.github.com/validatorjs/validator.js/pull/2555 ">#2555</a>
<code>isLicensePlate</code>: improve <code>pt-PT</code> locale <a
href="https://github.com/castrosu "><code>@castrosu</code></a></li>
<li><strong>Doc fixes and others:</strong>
<ul>
<li><a
href="https://redirect.github.com/validatorjs/validator.js/pull/2372 ">#2372</a>
<a
href="https://github.com/EmersonRabelo "><code>@EmersonRabelo</code></a></li>
<li><a
href="https://redirect.github.com/validatorjs/validator.js/pull/2538 ">#2538</a>
<a href="https://github.com/WikiRik "><code>@WikiRik</code></a></li>
<li><a
href="https://redirect.github.com/validatorjs/validator.js/pull/2539 ">#2539</a>
<a href="https://github.com/WikiRik "><code>@WikiRik</code></a></li>
<li><a
href="https://redirect.github.com/validatorjs/validator.js/pull/2540 ">#2540</a>
<a href="https://github.com/WikiRik "><code>@WikiRik</code></a></li>
<li><a
href="https://redirect.github.com/validatorjs/validator.js/pull/2549 ">#2549</a>
<a href="https://github.com/WikiRik "><code>@WikiRik</code></a></li>
<li><a
href="https://redirect.github.com/validatorjs/validator.js/pull/2537 ">#2537</a>
<a href="https://github.com/sgress454 "><code>@sgress454</code></a></li>
</ul>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/validatorjs/validator.js/commit/f2b5c17dbe03f2ca9ad9122c597f81e86ce1a9a1 "><code>f2b5c17</code></a>
maintenance: 2511 release (<a
href="https://redirect.github.com/validatorjs/validator.js/issues/2627 ">#2627</a>)</li>
<li><a
href="https://github.com/validatorjs/validator.js/commit/d457ecaf55b0f3d8bd379d82757425d0d13dd382 "><code>d457eca</code></a>
fix(isLength): correctly handle Unicode variation selectors (<a
href="https://redirect.github.com/validatorjs/validator.js/issues/2616 ">#2616</a>)</li>
<li><a
href="https://github.com/validatorjs/validator.js/commit/f2e3633f22fd3016656789d100bc451d857e7488 "><code>f2e3633</code></a>
docs: add install instructions to contibution guide (<a
href="https://redirect.github.com/validatorjs/validator.js/issues/2621 ">#2621</a>)</li>
<li><a
href="https://github.com/validatorjs/validator.js/commit/cf401458b8733d981a3724d634c795a9d612b516 "><code>cf40145</code></a>
fix: URL validation for hostnames with ports (no protocol) (<a
href="https://redirect.github.com/validatorjs/validator.js/issues/2622 ">#2622</a>)</li>
<li><a
href="https://github.com/validatorjs/validator.js/commit/4af61243ba0ae93f29e7689040e188b5849ff1b0 "><code>4af6124</code></a>
maintenance: 2510 release (<a
href="https://redirect.github.com/validatorjs/validator.js/issues/2585 ">#2585</a>)</li>
<li><a
href="https://github.com/validatorjs/validator.js/commit/30d4fe02c16d36ed471f12da658c4b5d843781e0 "><code>30d4fe0</code></a>
13.15.20</li>
<li><a
href="https://github.com/validatorjs/validator.js/commit/cbef5088f02d36caf978f378bb845fe49bdc0809 "><code>cbef508</code></a>
fix(isURL): improve protocol detection. Resolves CVE-2025-56200 (<a
href="https://redirect.github.com/validatorjs/validator.js/issues/2608 ">#2608</a>)</li>
<li><a
href="https://github.com/validatorjs/validator.js/commit/6f436be36945e460ee624bf72a935a06daded859 "><code>6f436be</code></a>
Fix typo in validators.test.js (<a
href="https://redirect.github.com/validatorjs/validator.js/issues/2581 ">#2581</a>)</li>
<li><a
href="https://github.com/validatorjs/validator.js/commit/3c857088d58197453957a2b924dfedea328003b6 "><code>3c85708</code></a>
Fix: correct French VAT (FR) validation regex and add tests (<a
href="https://redirect.github.com/validatorjs/validator.js/issues/2584 ">#2584</a>)</li>
<li><a
href="https://github.com/validatorjs/validator.js/commit/eee525cd117d24ac905b9432f3f5a27e96aa9719 "><code>eee525c</code></a>
<a
href="https://redirect.github.com/validatorjs/validator.js/issues/2491 ">#2491</a>
<a
href="https://redirect.github.com/validatorjs/validator.js/issues/2573 ">#2573</a>
Simplify isBase64 to prevent stack overflow (<a
href="https://redirect.github.com/validatorjs/validator.js/issues/2574 ">#2574</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/validatorjs/validator.js/compare/13.11.0...13.15.22 ">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~wikirik ">wikirik</a>, a new releaser for
validator since your current version.</p>
</details>
<br />
Updates `@trpc/server` from 11.1.1 to 11.8.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/trpc/trpc/releases ">@trpc/server's
releases</a>.</em></p>
<blockquote>
<h2>v11.8.0</h2>
<h2>What's Changed</h2>
<ul>
<li>feat(server): support streaming in API Gateway REST API by <a
href="https://github.com/anatolzak "><code>@anatolzak</code></a> in <a
href="https://redirect.github.com/trpc/trpc/pull/7039 ">trpc/trpc#7039</a></li>
<li>fixes <a
href="https://github.com/advisories/GHSA-43p4-m455-4f4j ">https://github.com/advisories/GHSA-43p4-m455-4f4j </a></li>
</ul>
<h2>v11.7.2</h2>
<h2>What's Changed</h2>
<ul>
<li>fix(server): missing sse options when using mergeRouter by <a
href="https://github.com/timcole "><code>@timcole</code></a> in <a
href="https://redirect.github.com/trpc/trpc/pull/7023 ">trpc/trpc#7023</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/KitsuneKode "><code>@KitsuneKode</code></a>
made their first contribution in <a
href="https://redirect.github.com/trpc/trpc/pull/6975 ">trpc/trpc#6975</a></li>
<li><a href="https://github.com/timcole "><code>@timcole</code></a> made
their first contribution in <a
href="https://redirect.github.com/trpc/trpc/pull/7023 ">trpc/trpc#7023</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/trpc/trpc/compare/v11.7.1...v11.7.2 ">https://github.com/trpc/trpc/compare/v11.7.1...v11.7.2 </a></p>
<h2>v11.7.1</h2>
<h2>What's Changed</h2>
<ul>
<li>fix(tanstack-react-query): keyPrefix of undefined by <a
href="https://github.com/Nick-Lucas "><code>@Nick-Lucas</code></a> in <a
href="https://redirect.github.com/trpc/trpc/pull/6990 ">trpc/trpc#6990</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/theoludwig "><code>@theoludwig</code></a> made
their first contribution in <a
href="https://redirect.github.com/trpc/trpc/pull/6906 ">trpc/trpc#6906</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/trpc/trpc/compare/v11.7.0...v11.7.1 ">https://github.com/trpc/trpc/compare/v11.7.0...v11.7.1 </a></p>
<h2>v11.7.0</h2>
<h2>What's Changed</h2>
<ul>
<li>fix(client): do not emit "connecting" when initializing
websocket subscription by <a
href="https://github.com/hmatthieu "><code>@hmatthieu</code></a> in <a
href="https://redirect.github.com/trpc/trpc/pull/6970 ">trpc/trpc#6970</a></li>
<li>fix(server): Export octet types by <a
href="https://github.com/Nick-Lucas "><code>@Nick-Lucas</code></a> in <a
href="https://redirect.github.com/trpc/trpc/pull/6981 ">trpc/trpc#6981</a></li>
<li>feat(tanstack-react-query): Add QueryKey and MutationKey Prefix
option by <a
href="https://github.com/Nick-Lucas "><code>@Nick-Lucas</code></a> in <a
href="https://redirect.github.com/trpc/trpc/pull/6976 ">trpc/trpc#6976</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/trpc/trpc/compare/v11.6.0...v11.7.0 ">https://github.com/trpc/trpc/compare/v11.6.0...v11.7.0 </a></p>
<h2>v11.6.0</h2>
<h2>What's Changed</h2>
<ul>
<li>feat: add precondition required response code by <a
href="https://github.com/y-nk "><code>@y-nk</code></a> in <a
href="https://redirect.github.com/trpc/trpc/pull/6954 ">trpc/trpc#6954</a></li>
<li>fix(client): <code>httpBatchStreamLink</code> in React Native
"stream ends with TypeError" by <a
href="https://github.com/KATT "><code>@KATT</code></a> in <a
href="https://redirect.github.com/trpc/trpc/pull/6960 ">trpc/trpc#6960</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/elrion018 "><code>@elrion018</code></a>
made their first contribution in <a
href="https://redirect.github.com/trpc/trpc/pull/6932 ">trpc/trpc#6932</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/trpc/trpc/compare/v11.5.1...v11.6.0 ">https://github.com/trpc/trpc/compare/v11.5.1...v11.6.0 </a></p>
<h2>v11.5.1</h2>
<h2>What's Changed</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/trpc/trpc/commit/a247ce28817ea682f3ffda9255678db18a8b3391 "><code>a247ce2</code></a>
v11.8.0</li>
<li><a
href="https://github.com/trpc/trpc/commit/78629d524968ef8db5a7adf68d8b95a44369d77e "><code>78629d5</code></a>
Fix bug (<a
href="https://github.com/trpc/trpc/tree/HEAD/packages/server/issues/7043 ">#7043</a>)</li>
<li><a
href="https://github.com/trpc/trpc/commit/9a17cef999278555a0e1e6322f1a2579180eecb9 "><code>9a17cef</code></a>
feat(server): support streaming in API Gateway REST API (<a
href="https://github.com/trpc/trpc/tree/HEAD/packages/server/issues/7039 ">#7039</a>)</li>
<li><a
href="https://github.com/trpc/trpc/commit/fa8d8061d033c8bd51410d126840c457215954cd "><code>fa8d806</code></a>
chore(deps): update dependency valibot to v1.2.0 [security] (<a
href="https://github.com/trpc/trpc/tree/HEAD/packages/server/issues/7026 ">#7026</a>)</li>
<li><a
href="https://github.com/trpc/trpc/commit/14e3d4a47edf007c2bdd90efcc07387d0a68549b "><code>14e3d4a</code></a>
v11.7.2</li>
<li><a
href="https://github.com/trpc/trpc/commit/ffa88b0f3e2e7215f967a223287541cf2425c65c "><code>ffa88b0</code></a>
fix: missing sse options when using mergeRouter (<a
href="https://github.com/trpc/trpc/tree/HEAD/packages/server/issues/7023 ">#7023</a>)</li>
<li><a
href="https://github.com/trpc/trpc/commit/16db2d0002bbde23388ac800f411168c48c546eb "><code>16db2d0</code></a>
chore(deps): update dependency <code>@oxc-project/runtime</code> to
v0.97.0 (<a
href="https://github.com/trpc/trpc/tree/HEAD/packages/server/issues/7004 ">#7004</a>)</li>
<li><a
href="https://github.com/trpc/trpc/commit/d6bb04dafc4f0a887ff1ab3002758ff424a8df17 "><code>d6bb04d</code></a>
v11.7.1</li>
<li><a
href="https://github.com/trpc/trpc/commit/5961a63c0161c24c0b21e47503a357d3b7c4410a "><code>5961a63</code></a>
v11.7.0</li>
<li><a
href="https://github.com/trpc/trpc/commit/4c9efbb587f6bc327c5d92dbe95c82690002aa72 "><code>4c9efbb</code></a>
Export octet types (<a
href="https://github.com/trpc/trpc/tree/HEAD/packages/server/issues/6981 ">#6981</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/trpc/trpc/commits/v11.8.0/packages/server ">compare
view</a></li>
</ul>
</details>
<br />
Updates `yaml` from 2.3.4 to 2.8.3
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/eemeli/yaml/releases ">yaml's
releases</a>.</em></p>
<blockquote>
<h2>v2.8.3</h2>
<ul>
<li>Add <code>trailingComma</code> ToString option for multiline flow
formatting (<a
href="https://redirect.github.com/eemeli/yaml/issues/670 ">#670</a>)</li>
<li>Catch stack overflow during node composition (1e84ebb)</li>
</ul>
<h2>v2.8.2</h2>
<ul>
<li>Serialize -0 as -0 (<a
href="https://redirect.github.com/eemeli/yaml/issues/638 ">#638</a>)</li>
<li>Do not double newlines for empty map values (<a
href="https://redirect.github.com/eemeli/yaml/issues/642 ">#642</a>)</li>
</ul>
<h2>v2.8.1</h2>
<ul>
<li>Preserve empty block literals (<a
href="https://redirect.github.com/eemeli/yaml/issues/634 ">#634</a>)</li>
</ul>
<h2>v2.8.0</h2>
<ul>
<li>Add node cache for faster alias resolution (<a
href="https://redirect.github.com/eemeli/yaml/issues/612 ">#612</a>)</li>
<li>Re-introduce compatibility with Node.js 14.6 (<a
href="https://redirect.github.com/eemeli/yaml/issues/614 ">#614</a>)</li>
<li>Add <code>--merge</code> option to CLI tool (<a
href="https://redirect.github.com/eemeli/yaml/issues/611 ">#611</a>)</li>
<li>Improve error for tag resolution error on null value (<a
href="https://redirect.github.com/eemeli/yaml/issues/616 ">#616</a>)</li>
<li>Allow empty string as plain scalar representation, for failsafe
schema (<a
href="https://redirect.github.com/eemeli/yaml/issues/616 ">#616</a>)</li>
<li>docs: include cli example (<a
href="https://redirect.github.com/eemeli/yaml/issues/617 ">#617</a>)</li>
</ul>
<h2>v2.7.1</h2>
<ul>
<li>Do not allow seq with single-line collection value on same line with
map key (<a
href="https://redirect.github.com/eemeli/yaml/issues/603 ">#603</a>)</li>
<li>Improve warning & avoid TypeError on bad YAML 1.1 nodes (<a
href="https://redirect.github.com/eemeli/yaml/issues/610 ">#610</a>)</li>
</ul>
<h2>v2.7.0</h2>
<p>The library is now available on JSR as <a
href="https://jsr.io/@eemeli/yaml ">@eemeli/yaml</a> and on deno.land/x
as <a href="https://deno.land/x/yaml ">yaml</a>. In addition to Node.js
and browsers, it should work in Deno, Bun, and Cloudflare Workers.</p>
<ul>
<li>Use .ts extension in all relative imports (<a
href="https://redirect.github.com/eemeli/yaml/issues/591 ">#591</a>)</li>
<li>Ignore newline after block seq indicator as space before value (<a
href="https://redirect.github.com/eemeli/yaml/issues/590 ">#590</a>)</li>
<li>Require Node.js 14.18 or later (was 14.6) (<a
href="https://redirect.github.com/eemeli/yaml/issues/598 ">#598</a>)</li>
</ul>
<h2>v2.6.1</h2>
<ul>
<li>Do not strip <code>:00</code> seconds from <code>!!timestamp</code>
values (<a
href="https://redirect.github.com/eemeli/yaml/issues/578 ">#578</a>, with
thanks to <a
href="https://github.com/qraynaud "><code>@qraynaud</code></a>)</li>
<li>Tighten regexp for JSON <code>!!bool</code> (<a
href="https://redirect.github.com/eemeli/yaml/issues/587 ">#587</a>, with
thanks to <a
href="https://github.com/vra5107 "><code>@vra5107</code></a>)</li>
<li>Default to literal block scalar if folded would overflow (<a
href="https://redirect.github.com/eemeli/yaml/issues/585 ">#585</a>)</li>
</ul>
<h2>v2.6.0</h2>
<ul>
<li>Use a proper tag for <code>!!merge <<</code> keys (<a
href="https://redirect.github.com/eemeli/yaml/issues/580 ">#580</a>)</li>
<li>Add <code>stringKeys</code> parse option (<a
href="https://redirect.github.com/eemeli/yaml/issues/581 ">#581</a>)</li>
<li>Stringify a Document as a Document (<a
href="https://redirect.github.com/eemeli/yaml/issues/576 ">#576</a>)</li>
<li>Add sponsorship by <a
href="https://manifest.build/ ">Manifest</a></li>
</ul>
<h2>v2.5.1</h2>
<ul>
<li>Include range in flow sequence pair maps (<a
href="https://redirect.github.com/eemeli/yaml/issues/573 ">#573</a>)</li>
</ul>
<h2>v2.5.0</h2>
<ul>
<li>Add <code>--indent</code> option to CLI tool (<a
href="https://redirect.github.com/eemeli/yaml/issues/559 ">#559</a>, with
thanks to <a
href="https://github.com/danielbayley "><code>@danielbayley</code></a>)</li>
<li>Require newline in all cases for props on block sequence (<a
href="https://redirect.github.com/eemeli/yaml/issues/557 ">#557</a>)</li>
<li>Always reset indentation in lexer on <code>...</code> (<a
href="https://redirect.github.com/eemeli/yaml/issues/558 ">#558</a>)</li>
<li>Ignore <code>minContentWidth</code> if greater than
<code>lineWidth</code> (<a
href="https://redirect.github.com/eemeli/yaml/issues/562 ">#562</a>)</li>
<li>Drop unused <code>Collection.maxFlowStringSingleLineLength</code>
(<a href="https://redirect.github.com/eemeli/yaml/issues/522 ">#522</a>,
<a
href="https://redirect.github.com/eemeli/yaml/issues/421 ">#421</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/eemeli/yaml/commit/ce14587484822bffb0f7d31aefedcaf2dc0d0387 "><code>ce14587</code></a>
2.8.3</li>
<li><a
href="https://github.com/eemeli/yaml/commit/1e84ebbea7ec35011a4c61bbb820a529ee4f359b "><code>1e84ebb</code></a>
fix: Catch stack overflow during node composition</li>
<li><a
href="https://github.com/eemeli/yaml/commit/6b24090280eaaab5040112bba41ccef57f39c2d5 "><code>6b24090</code></a>
ci: Include Prettier check in lint action</li>
<li><a
href="https://github.com/eemeli/yaml/commit/9424dee38c85163fad53ac27533c7c4bdaf7495d "><code>9424dee</code></a>
chore: Refresh lockfile</li>
<li><a
href="https://github.com/eemeli/yaml/commit/d1aca82bc15a4c261bdc58561d32189a5d3a45ef "><code>d1aca82</code></a>
Add trailingComma ToString option for multiline flow formatting (<a
href="https://redirect.github.com/eemeli/yaml/issues/670 ">#670</a>)</li>
<li><a
href="https://github.com/eemeli/yaml/commit/43215099f7fcdac422d778c15e70d83c691b0e41 "><code>4321509</code></a>
ci: Drop the branch filter from GitHub PR actions</li>
<li><a
href="https://github.com/eemeli/yaml/commit/47207d0fc7d4f863cd5fbdcff1378637bd93e847 "><code>47207d0</code></a>
chore: Update docs-slate</li>
<li><a
href="https://github.com/eemeli/yaml/commit/5212faeed5936d1fa291d2f28672e4a96e2c2c5d "><code>5212fae</code></a>
chore: Update docs-slate</li>
<li><a
href="https://github.com/eemeli/yaml/commit/086fa6b5bae325da18734750cddee231ce578930 "><code>086fa6b</code></a>
2.8.2</li>
<li><a
href="https://github.com/eemeli/yaml/commit/95f01e98032ddf199b42bb3ba0737303b35ef752 "><code>95f01e9</code></a>
chore: Add funding to package.json</li>
<li>Additional commits viewable in <a
href="https://github.com/eemeli/yaml/compare/v2.3.4...v2.8.3 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `bn.js` from 4.12.0 to 4.12.5
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/indutny/bn.js/commit/026da9f3a9540e0b48d9bc3c0a0bdcc2a8b19278 "><code>026da9f</code></a>
4.12.5</li>
<li><a
href="https://github.com/indutny/bn.js/commit/13b78c2c9a8e18a5c96f7b51e4d42f5da21358a7 "><code>13b78c2</code></a>
fix: correct divRound rounding for negative operands (<a
href="https://redirect.github.com/indutny/bn.js/issues/320 ">#320</a>)</li>
<li><a
href="https://github.com/indutny/bn.js/commit/9c6ef2f789473013500066b3cf9ac0c17396e701 "><code>9c6ef2f</code></a>
fix: normalize sign when imuln multiplies by zero (<a
href="https://redirect.github.com/indutny/bn.js/issues/321 ">#321</a>)</li>
<li><a
href="https://github.com/indutny/bn.js/commit/12f9f8f2577c1befb864b25a612377f9ed17588c "><code>12f9f8f</code></a>
4.12.4</li>
<li><a
href="https://github.com/indutny/bn.js/commit/6b98684d6958e10605d9566b5704384b9fbb06b6 "><code>6b98684</code></a>
fix: clear surplus words in inotn so notn(width) stays below 2 ** width
(<a
href="https://redirect.github.com/indutny/bn.js/issues/319 ">#319</a>)</li>
<li><a
href="https://github.com/indutny/bn.js/commit/39fe4389c773327ed15f29f77f8b7dbbff4beb4c "><code>39fe438</code></a>
4.12.3</li>
<li><a
href="https://github.com/indutny/bn.js/commit/67ecb35dabaf252001b649c12d69c4b57deac6f6 "><code>67ecb35</code></a>
backport(4.x): fix imaskn state (<a
href="https://redirect.github.com/indutny/bn.js/issues/317 ">#317</a>)</li>
<li><a
href="https://github.com/indutny/bn.js/commit/c4098bac2470418f8e0f6bf11fe0cb676a2b9047 "><code>c4098ba</code></a>
4.12.2</li>
<li><a
href="https://github.com/indutny/bn.js/commit/6277fd705e51edae1c404c65f03ba2e512706945 "><code>6277fd7</code></a>
backport(4.x): Fix imuln/muln with zero (backport of <a
href="https://redirect.github.com/indutny/bn.js/issues/313 ">#313</a>)
(<a
href="https://redirect.github.com/indutny/bn.js/issues/314 ">#314</a>)</li>
<li><a
href="https://github.com/indutny/bn.js/commit/ac0d4afaae91701815b9edc19789e44e7690d688 "><code>ac0d4af</code></a>
4.12.1</li>
<li>Additional commits viewable in <a
href="https://github.com/indutny/bn.js/compare/v4.12.0...v4.12.5 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `flatted` from 3.3.1 to 3.4.4
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/WebReflection/flatted/commit/e6f5ca700c4ca8104a6a83472c8219e267bd5e84 "><code>e6f5ca7</code></a>
3.4.4</li>
<li><a
href="https://github.com/WebReflection/flatted/commit/47f14fac0b1a41989f216b0cda4c50596ca339f6 "><code>47f14fa</code></a>
removed E_STRICT from PHP</li>
<li><a
href="https://github.com/WebReflection/flatted/commit/40505688464c49fe6374e7bc4cdd9bd2e9e6f330 "><code>4050568</code></a>
fixced go-lang issues in CI</li>
<li><a
href="https://github.com/WebReflection/flatted/commit/4303f4db38ba0ba8d5e2ed6e9689cefc74c46b63 "><code>4303f4d</code></a>
Merge pull request <a
href="https://redirect.github.com/WebReflection/flatted/issues/101 ">#101</a>
from mfinelli/gocriticfixes</li>
<li><a
href="https://github.com/WebReflection/flatted/commit/106735b609c15df51539a0d7c0a270182efd904c "><code>106735b</code></a>
updated package-lock.json</li>
<li><a
href="https://github.com/WebReflection/flatted/commit/670a1bdf9dcfba02111c3034294366f10696fb53 "><code>670a1bd</code></a>
3.4.3</li>
<li><a
href="https://github.com/WebReflection/flatted/commit/50a61a90ea5ca64c114f0aa040ad127e3a97feff "><code>50a61a9</code></a>
Fix <a
href="https://redirect.github.com/WebReflection/flatted/issues/104 ">#104</a>
- allow <code>null</code> as replacer value</li>
<li><a
href="https://github.com/WebReflection/flatted/commit/8aa64f460cf0c4dac9cc214c831aade28f8f2c6e "><code>8aa64f4</code></a>
solved crytical errors over dependencies</li>
<li><a
href="https://github.com/WebReflection/flatted/commit/b85577f39ff85959d02e8862cc0dde8114b43762 "><code>b85577f</code></a>
Fix go-critic errors</li>
<li><a
href="https://github.com/WebReflection/flatted/commit/bb8c63cea5befd4315519cb4458c6fc07bb9cf7b "><code>bb8c63c</code></a>
Merge pull request <a
href="https://redirect.github.com/WebReflection/flatted/issues/100 ">#100</a>
from WebReflection/WebReflection-patch-1</li>
<li>Additional commits viewable in <a
href="https://github.com/WebReflection/flatted/compare/v3.3.1...v3.4.4 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `jws` from 3.2.2 to 3.2.3
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/brianloveswords/node-jws/releases ">jws's
releases</a>.</em></p>
<blockquote>
<h2>v3.2.3</h2>
<h3>Changed</h3>
<ul>
<li>Fix advisory GHSA-869p-cjfg-cm3x: createSign and createVerify now
require
that a non empty secret is provided (via opts.secret, opts.privateKey or
opts.key)
when using HMAC algorithms.</li>
<li>Upgrading JWA version to 1.4.2, addressing a compatibility issue for
Node >= 25.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/auth0/node-jws/blob/master/CHANGELOG.md ">jws's
changelog</a>.</em></p>
<blockquote>
<h2>[3.2.3]</h2>
<h3>Changed</h3>
<ul>
<li>Fix advisory GHSA-869p-cjfg-cm3x: createSign and createVerify now
require
that a non empty secret is provided (via opts.secret, opts.privateKey or
opts.key)
when using HMAC algorithms.</li>
<li>Upgrading JWA version to 1.4.2, adressing a compatibility issue for
Node >= 25.</li>
</ul>
<h2>[3.0.0]</h2>
<h3>Changed</h3>
<ul>
<li><strong>BREAKING</strong>: <code>jwt.verify</code> now requires an
<code>algorithm</code> parameter, and
<code>jws.createVerify</code> requires an <code>algorithm</code> option.
The <code>"alg"</code> field
signature headers is ignored. This mitigates a critical security flaw
in the library which would allow an attacker to generate signatures with
arbitrary contents that would be accepted by <code>jwt.verify</code>.
See
<a
href="https://auth0.com/blog/2015/03/31/critical-vulnerabilities-in-json-web-token-libraries/ ">https://auth0.com/blog/2015/03/31/critical-vulnerabilities-in-json-web-token-libraries/ </a>
for details.</li>
</ul>
<h2><a
href="https://github.com/brianloveswords/node-jws/compare/v1.0.1...v2.0.0 ">2.0.0</a>
- 2015-01-30</h2>
<h3>Changed</h3>
<ul>
<li>
<p><strong>BREAKING</strong>: Default payload encoding changed from
<code>binary</code> to
<code>utf8</code>. <code>utf8</code> is a is a more sensible default
than <code>binary</code> because
many payloads, as far as I can tell, will contain user-facing
strings that could be in any language. (<!-- raw HTML omitted --><a
href="https://github.com/brianloveswords/node-jws/commit/6b6de48 ">6b6de48</a><!--
raw HTML omitted -->)</p>
</li>
<li>
<p>Code reorganization, thanks <a
href="https://github.com/fearphage "><code>@fearphage</code></a>! (<!--
raw HTML omitted --><a
href="https://github.com/brianloveswords/node-jws/commit/7880050 ">7880050</a><!--
raw HTML omitted -->)</p>
</li>
</ul>
<h3>Added</h3>
<ul>
<li>Option in all relevant methods for <code>encoding</code>. For those
few users
that might be depending on a <code>binary</code> encoding of the
messages, this
is for them. (<!-- raw HTML omitted --><a
href="https://github.com/brianloveswords/node-jws/commit/6b6de48 ">6b6de48</a><!--
raw HTML omitted -->)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/auth0/node-jws/commit/4f6e73f24df42f07d632dec6431ade8eda8d11a6 "><code>4f6e73f</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/auth0/node-jws/commit/bd0fea57f35a97b6749a632b19ae5100d6d35729 "><code>bd0fea5</code></a>
version 3.2.3</li>
<li><a
href="https://github.com/auth0/node-jws/commit/7c3b4b411004c206af8901fa3f8e644127bbf8d9 "><code>7c3b4b4</code></a>
Enhance tests for HMAC streaming sign and verify</li>
<li><a
href="https://github.com/auth0/node-jws/commit/a9b8ed999de8f8fff486ac9167514577a0fae323 "><code>a9b8ed9</code></a>
Improve secretOrKey initialization in VerifyStream</li>
<li><a
href="https://github.com/auth0/node-jws/commit/6707fde62cbae465a7f11e52760fb994dbc0e0dc "><code>6707fde</code></a>
Improve secret handling in SignStream</li>
<li>See full diff in <a
href="https://github.com/brianloveswords/node-jws/compare/v3.2.2...v3.2.3 ">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~julien.wollscheid ">julien.wollscheid</a>, a
new releaser for jws since your current version.</p>
</details>
<br />
Updates `rollup` from 4.40.0 to 4.63.5
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/rollup/rollup/releases ">rollup's
releases</a>.</em></p>
<blockquote>
<h2>v4.63.5</h2>
<h2>4.63.5</h2>
<p><em>2026-09-24</em></p>
<h3>Bug Fixes</h3>
<ul>
<li>Fix an issue where watch mode would hang instead of terminating when
closing via Ctrl+C (<a
href="https://redirect.github.com/rollup/rollup/issues/6521 ">#6521</a>)</li>
<li>Avoid starting overlapping watch mode runs when plugins invalidate
files at the wrong time (<a
href="https://redirect.github.com/rollup/rollup/issues/6526 ">#6526</a>)</li>
<li>Fix many edge cases where watch mode events were not properly
emitted to listeners, especially when errors occur (<a
href="https://redirect.github.com/rollup/rollup/issues/6526 ">#6526</a>)</li>
</ul>
<h3>Pull Requests</h3>
<ul>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6520 ">#6520</a>:
Lock file maintenance (<a
href="https://github.com/renovate "><code>@renovate</code></a>[bot], <a
href="https://github.com/lukastaegert "><code>@lukastaegert</code></a>)</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6521 ">#6521</a>:
Terminate watch mode via natural process exit when possible (<a
href="https://github.com/lukastaegert "><code>@lukastaegert</code></a>)</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6523 ">#6523</a>:
Protect cc pin against renovate lock file maintenance (<a
href="https://github.com/lukastaegert "><code>@lukastaegert</code></a>)</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6525 ">#6525</a>:
docs: fix typos 'interations' and 'coresponding' (<a
href="https://github.com/haimingZZ "><code>@haimingZZ</code></a>)</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6526 ">#6526</a>:
fix(watch): prevent overlapping runs and other run lifecycle bugs (<a
href="https://github.com/lukastaegert "><code>@lukastaegert</code></a>)</li>
</ul>
<h2>v4.63.4</h2>
<h2>4.63.4</h2>
<p><em>2026-09-19</em></p>
<h3>Bug Fixes</h3>
<ul>
<li>Ensure meta information of the cached module is exposed in
<code>shouldTransformCachedModule</code> (<a
href="https://redirect.github.com/rollup/rollup/issues/6442 ">#6442</a>)</li>
<li>Do not create invalid code if import attribute values contain
special characters (<a
href="https://redirect.github.com/rollup/rollup/issues/6502 ">#6502</a>)</li>
</ul>
<h3>Pull Requests</h3>
<ul>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6429 ">#6429</a>:
ci: collect Rust coverage from JS tests in dedicated job (<a
href="https://github.com/lukastaegert "><code>@lukastaegert</code></a>)</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6442 ">#6442</a>:
fix: expose cached module meta during cache checks (<a
href="https://github.com/ychampion "><code>@ychampion</code></a>, <a
href="https://github.com/lukastaegert "><code>@lukastaegert</code></a>)</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6496 ">#6496</a>:
docs: name the parameter runHook actually takes (<a
href="https://github.com/darkdi "><code>@darkdi</code></a>, <a
href="https://github.com/lukastaegert "><code>@lukastaegert</code></a>)</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6502 ">#6502</a>:
Escape quotes and backslashes in import attribute values (<a
href="https://github.com/dylanpulver "><code>@dylanpulver</code></a>, <a
href="https://github.com/lukastaegert "><code>@lukastaegert</code></a>)</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6517 ">#6517</a>:
Improve agent instructions (<a
href="https://github.com/lukastaegert "><code>@lukastaegert</code></a>)</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6518 ">#6518</a>:
fix(deps): update minor/patch updates (<a
href="https://github.com/renovate "><code>@renovate</code></a>[bot])</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6519 ">#6519</a>:
Request Copilot code review via workflow (<a
href="https://github.com/lukastaegert "><code>@lukastaegert</code></a>)</li>
</ul>
<h2>v4.63.3</h2>
<h2>4.63.3</h2>
<p><em>2026-09-14</em></p>
<h3>Bug Fixes</h3>
<ul>
<li>Make sure that the internal shims for basename and extname in the
browser build fully match NodeJS (<a
href="https://redirect.github.com/rollup/rollup/issues/6473 ">#6473</a>)</li>
<li>Always report and recover from failures on invalidation in watch
mode (<a
href="https://redirect.github.com/rollup/rollup/issues/6506 ">#6506</a>)</li>
<li>Respect windows line terminators when tree-shaking in situations
where line-breaks need to be removed to prevent automatic semicolon
insertion (<a
href="https://redirect.github.com/rollup/rollup/issues/6514 ">#6514</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/rollup/rollup/blob/master/CHANGELOG.md ">rollup's
changelog</a>.</em></p>
<blockquote>
<h2>4.63.5</h2>
<p><em>2026-09-24</em></p>
<h3>Bug Fixes</h3>
<ul>
<li>Fix an issue where watch mode would hang instead of terminating when
closing via Ctrl+C (<a
href="https://redirect.github.com/rollup/rollup/issues/6521 ">#6521</a>)</li>
<li>Avoid starting overlapping watch mode runs when plugins invalidate
files at the wrong time (<a
href="https://redirect.github.com/rollup/rollup/issues/6526 ">#6526</a>)</li>
<li>Fix many edge cases where watch mode events were not properly
emitted to listeners, especially when errors occur (<a
href="https://redirect.github.com/rollup/rollup/issues/6526 ">#6526</a>)</li>
</ul>
<h3>Pull Requests</h3>
<ul>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6520 ">#6520</a>:
Lock file maintenance (<a
href="https://github.com/renovate "><code>@renovate</code></a>[bot], <a
href="https://github.com/lukastaegert "><code>@lukastaegert</code></a>)</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6521 ">#6521</a>:
Terminate watch mode via natural process exit when possible (<a
href="https://github.com/lukastaegert "><code>@lukastaegert</code></a>)</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6523 ">#6523</a>:
Protect cc pin against renovate lock file maintenance (<a
href="https://github.com/lukastaegert "><code>@lukastaegert</code></a>)</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6525 ">#6525</a>:
docs: fix typos 'interations' and 'coresponding' (<a
href="https://github.com/haimingZZ "><code>@haimingZZ</code></a>)</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6526 ">#6526</a>:
fix(watch): prevent overlapping runs and other run lifecycle bugs (<a
href="https://github.com/lukastaegert "><code>@lukastaegert</code></a>)</li>
</ul>
<h2>4.63.4</h2>
<p><em>2026-09-19</em></p>
<h3>Bug Fixes</h3>
<ul>
<li>Ensure meta information of the cached module is exposed in
<code>shouldTransformCachedModule</code> (<a
href="https://redirect.github.com/rollup/rollup/issues/6442 ">#6442</a>)</li>
<li>Do not create invalid code if import attribute values contain
special characters (<a
href="https://redirect.github.com/rollup/rollup/issues/6502 ">#6502</a>)</li>
</ul>
<h3>Pull Requests</h3>
<ul>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6429 ">#6429</a>:
ci: collect Rust coverage from JS tests in dedicated job (<a
href="https://github.com/lukastaegert "><code>@lukastaegert</code></a>)</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6442 ">#6442</a>:
fix: expose cached module meta during cache checks (<a
href="https://github.com/ychampion "><code>@ychampion</code></a>, <a
href="https://github.com/lukastaegert "><code>@lukastaegert</code></a>)</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6496 ">#6496</a>:
docs: name the parameter runHook actually takes (<a
href="https://github.com/darkdi "><code>@darkdi</code></a>, <a
href="https://github.com/lukastaegert "><code>@lukastaegert</code></a>)</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6502 ">#6502</a>:
Escape quotes and backslashes in import attribute values (<a
href="https://github.com/dylanpulver "><code>@dylanpulver</code></a>, <a
href="https://github.com/lukastaegert "><code>@lukastaegert</code></a>)</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6517 ">#6517</a>:
Improve agent instructions (<a
href="https://github.com/lukastaegert "><code>@lukastaegert</code></a>)</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6518 ">#6518</a>:
fix(deps): update minor/patch updates (<a
href="https://github.com/renovate "><code>@renovate</code></a>[bot])</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6519 ">#6519</a>:
Request Copilot code review via workflow (<a
href="https://github.com/lukastaegert "><code>@lukastaegert</code></a>)</li>
</ul>
<h2>4.63.3</h2>
<p><em>2026-09-14</em></p>
<h3>Bug Fixes</h3>
<ul>
<li>Make sure that the internal shims for basename and extname in the
browser build fully match NodeJS (<a
href="https://redirect.github.com/rollup/rollup/issues/6473 ">#6473</a>)</li>
<li>Always report and recover from failures on invalidation in watch
mode (<a
href="https://redirect.github.com/rollup/rollup/issues/6506 ">#6506</a>)</li>
<li>Respect windows line terminators when tree-shaking in situations
where line-breaks need to be removed to prevent automatic semicolon
insertion (<a
href="https://redirect.github.com/rollup/rollup/issues/6514 ">#6514</a>)</li>
</ul>
<h3>Pull Requests</h3>
<ul>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6473 ">#6473</a>:
fix(browser): match node's basename and extname (<a
href="https://github.com/luantaraschi "><code>@luantaraschi</code></a>,
<a
href="https://github.com/lukastaegert "><code>@lukastaegert</code></a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/rollup/rollup/commit/3722484c33c58b3ab0cbbfcca09b8f267d420329 "><code>3722484</code></a>
4.63.5</li>
<li><a
href="https://github.com/rollup/rollup/commit/9156d5b509b6b27676d34430ca9be6eb82a34f86 "><code>9156d5b</code></a>
fix(watch): prevent overlapping runs and other run lifecycle bugs (<a
href="https://redirect.github.com/rollup/rollup/issues/6526 ">#6526</a>)</li>
<li><a
href="https://github.com/rollup/rollup/commit/87fbbf6b3f8c55c81f1f07673957ebd70bc57c07 "><code>87fbbf6</code></a>
Protect cc pin against renovate lock file maintenance (<a
href="https://redirect.github.com/rollup/rollup/issues/6523 ">#6523</a>)</li>
<li><a
href="https://github.com/rollup/rollup/commit/30f0442482c0ab2b37e7e7af3bdd04e6bb292c48 "><code>30f0442</code></a>
docs: fix typos 'interations' and 'coresponding' (<a
href="https://redirect.github.com/rollup/rollup/issues/6525 ">#6525</a>)</li>
<li><a
href="https://github.com/rollup/rollup/commit/b54c4c2af5762e846109f1b1f09d5a944486498a "><code>b54c4c2</code></a>
Lock file maintenance (<a
href="https://redirect.github.com/rollup/rollup/issues/6520 ">#6520</a>)</li>
<li><a
href="https://github.com/rollup/rollup/commit/c28de6fa616ff6525802996a6b480b57d1e7b0e1 "><code>c28de6f</code></a>
Terminate watch mode via natural process exit when possible (<a
href="https://redirect.github.com/rollup/rollup/issues/6521 ">#6521</a>)</li>
<li><a
href="https://github.com/rollup/rollup/commit/ba78d5752a1e1ff4ff4af3a8bffab7691d822f7d "><code>ba78d57</code></a>
4.63.4</li>
<li><a
href="https://github.com/rollup/rollup/commit/67c3379f61a105839e26afdf519f2f65a0a2e248 "><code>67c3379</code></a>
Escape quotes and backslashes in import attribute values (<a
href="https://redirect.github.com/rollup/rollup/issues/6502 ">#6502</a>)</li>
<li><a
href="https://github.com/rollup/rollup/commit/35f6053b8b655befc57f8db79006e8cd47312699 "><code>35f6053</code></a>
fix: expose cached module meta during cache checks (<a
href="https://redirect.github.com/rollup/rollup/issues/6442 ">#6442</a>)</li>
<li><a
href="https://github.com/rollup/rollup/commit/b7ae5e20fa60caa4e4d73d32200991104c5e9616 "><code>b7ae5e2</code></a>
Request Copilot code review via workflow (<a
href="https://redirect.github.com/rollup/rollup/issues/6519 ">#6519</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/rollup/rollup/compare/v4.40.0...v4.63.5 ">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~GitHub%20Actions ">GitHub Actions</a>, a new
releaser for rollup since your current version.</p>
</details>
<details>
<summary>Install script changes</summary>
<p>This version modifies <code>prepare</code> script that runs during
installation. Review the package contents before updating.</p>
</details>
<br />
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/linux-odyssey/linux-odyssey/network/alerts ).
</details>
2026-09-26 11:24:13 +10:00
dependabot[bot]
a74a9d71f2
chore(deps): bump the npm_and_yarn group across 1 directory with 7 updates
...
Bumps the npm_and_yarn group with 7 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
| [validator](https://github.com/validatorjs/validator.js ) | `13.11.0` | `13.15.22` |
| [@trpc/server](https://github.com/trpc/trpc/tree/HEAD/packages/server ) | `11.1.1` | `11.8.0` |
| [yaml](https://github.com/eemeli/yaml ) | `2.3.4` | `2.8.3` |
| [bn.js](https://github.com/indutny/bn.js ) | `4.12.0` | `4.12.5` |
| [flatted](https://github.com/WebReflection/flatted ) | `3.3.1` | `3.4.4` |
| [jws](https://github.com/brianloveswords/node-jws ) | `3.2.2` | `3.2.3` |
| [rollup](https://github.com/rollup/rollup ) | `4.40.0` | `4.63.5` |
Updates `validator` from 13.11.0 to 13.15.22
- [Release notes](https://github.com/validatorjs/validator.js/releases )
- [Changelog](https://github.com/validatorjs/validator.js/blob/master/CHANGELOG.md )
- [Commits](https://github.com/validatorjs/validator.js/compare/13.11.0...13.15.22 )
Updates `@trpc/server` from 11.1.1 to 11.8.0
- [Release notes](https://github.com/trpc/trpc/releases )
- [Commits](https://github.com/trpc/trpc/commits/v11.8.0/packages/server )
Updates `yaml` from 2.3.4 to 2.8.3
- [Release notes](https://github.com/eemeli/yaml/releases )
- [Commits](https://github.com/eemeli/yaml/compare/v2.3.4...v2.8.3 )
Updates `bn.js` from 4.12.0 to 4.12.5
- [Release notes](https://github.com/indutny/bn.js/releases )
- [Changelog](https://github.com/indutny/bn.js/blob/master/CHANGELOG.md )
- [Commits](https://github.com/indutny/bn.js/compare/v4.12.0...v4.12.5 )
Updates `flatted` from 3.3.1 to 3.4.4
- [Commits](https://github.com/WebReflection/flatted/compare/v3.3.1...v3.4.4 )
Updates `jws` from 3.2.2 to 3.2.3
- [Release notes](https://github.com/brianloveswords/node-jws/releases )
- [Changelog](https://github.com/auth0/node-jws/blob/master/CHANGELOG.md )
- [Commits](https://github.com/brianloveswords/node-jws/compare/v3.2.2...v3.2.3 )
Updates `rollup` from 4.40.0 to 4.63.5
- [Release notes](https://github.com/rollup/rollup/releases )
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md )
- [Commits](https://github.com/rollup/rollup/compare/v4.40.0...v4.63.5 )
---
updated-dependencies:
- dependency-name: validator
dependency-version: 13.15.22
dependency-type: direct:production
dependency-group: npm_and_yarn
- dependency-name: "@trpc/server"
dependency-version: 11.8.0
dependency-type: direct:production
dependency-group: npm_and_yarn
- dependency-name: yaml
dependency-version: 2.8.3
dependency-type: direct:production
dependency-group: npm_and_yarn
- dependency-name: bn.js
dependency-version: 4.12.5
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: flatted
dependency-version: 3.4.4
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: jws
dependency-version: 3.2.3
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: rollup
dependency-version: 4.63.5
dependency-type: indirect
dependency-group: npm_and_yarn
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-26 01:19:42 +00:00
Justin Lin
34ce90323a
chore(deps): bump the npm_and_yarn group across 1 directory with 12 updates ( #203 )
...
Bumps the npm_and_yarn group with 12 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
|
[@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core )
| `7.24.0` | `7.29.6` |
| [axios](https://github.com/axios/axios ) | `1.8.2` | `1.18.0` |
| [dompurify](https://github.com/cure53/DOMPurify ) | `3.2.4` | `3.4.13`
|
| [postcss](https://github.com/postcss/postcss ) | `8.5.3` | `8.5.23` |
| [mongoose](https://github.com/Automattic/mongoose ) | `8.9.5` |
`8.24.1` |
|
[@babel/plugin-transform-modules-systemjs](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-systemjs )
| `7.23.9` | `7.29.8` |
| [browserslist](https://github.com/browserslist/browserslist ) |
`4.23.0` | `4.29.1` |
| [engine.io](https://github.com/socketio/socket.io ) | `6.5.4` | `6.5.5`
|
| [nanoid](https://github.com/ai/nanoid ) | `3.3.11` | `3.3.19` |
| [shell-quote](https://github.com/ljharb/shell-quote ) | `1.8.1` |
`1.10.0` |
| [socket.io-parser](https://github.com/socketio/socket.io ) | `4.2.4` |
`4.2.7` |
| [tmp](https://github.com/raszi/node-tmp ) | `0.2.1` | `0.2.7` |
Updates `@babel/core` from 7.24.0 to 7.29.6
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/babel/babel/releases ">@babel/core's
releases</a>.</em></p>
<blockquote>
<h2>v7.29.6 (2026-05-25)</h2>
<h4>🐛 Bug Fix</h4>
<ul>
<li><code>babel-generator</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/18014 ">#18014</a>
Catchup source map position in preserveFormat (<a
href="https://github.com/nicolo-ribaudo "><code>@nicolo-ribaudo</code></a>)</li>
</ul>
</li>
<li><code>babel-core</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/18001 ">#18001</a>
[7.x packport]Improve input source map handling (<a
href="https://github.com/JLHwung "><code>@JLHwung</code></a>)</li>
</ul>
</li>
<li><code>babel-core</code>, <code>babel-generator</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/17998 ">#17998</a>
Preserve original identifier names from input sourcemaps (<a
href="https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17992 ">#17992</a>)
(<a href="https://github.com/Andarist "><code>@Andarist</code></a>)</li>
</ul>
</li>
</ul>
<h4>Committers: 3</h4>
<ul>
<li>Huáng Jùnliàng (<a
href="https://github.com/JLHwung "><code>@JLHwung</code></a>)</li>
<li>Mateusz Burzyński (<a
href="https://github.com/Andarist "><code>@Andarist</code></a>)</li>
<li>Nicolò Ribaudo (<a
href="https://github.com/nicolo-ribaudo "><code>@nicolo-ribaudo</code></a>)</li>
</ul>
<h2>v7.29.5 (2026-05-05)</h2>
<h4>🏠 Internal</h4>
<ul>
<li><code>babel-preset-env</code>
<ul>
<li>Update <code>@babel/*</code> dependencies</li>
</ul>
</li>
</ul>
<h2>v7.29.4 (2026-05-05)</h2>
<h4>🐛 Bug Fix</h4>
<ul>
<li><code>babel-plugin-transform-modules-systemjs</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/17974 ">#17974</a>
[7.x backport]fix(systemjs): improve module string name support (<a
href="https://github.com/JLHwung "><code>@JLHwung</code></a>)</li>
</ul>
</li>
</ul>
<h4>Committers: 1</h4>
<ul>
<li>Huáng Jùnliàng (<a
href="https://github.com/JLHwung "><code>@JLHwung</code></a>)</li>
</ul>
<h2>v7.29.3 (2026-04-30)</h2>
<h4>👓 Spec Compliance</h4>
<ul>
<li><code>babel-parser</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/17923 ">#17923</a>
Support flow extends bound (<a
href="https://github.com/JLHwung "><code>@JLHwung</code></a>)</li>
</ul>
</li>
</ul>
<h4>🐛 Bug Fix</h4>
<ul>
<li><code>babel-helper-create-class-features-plugin</code>,
<code>babel-plugin-proposal-decorators</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/17931 ">#17931</a>
fix(decorators): replace super within all removed static elements (<a
href="https://github.com/JLHwung "><code>@JLHwung</code></a>)</li>
</ul>
</li>
<li><code>babel-register</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/17915 ">#17915</a> Fix
thread synchronization issues in <code>@babel/register</code> (<a
href="https://github.com/liuxingbaoyu "><code>@liuxingbaoyu</code></a>)</li>
</ul>
</li>
<li><code>babel-compat-data</code>,
<code>babel-plugin-bugfix-safari-rest-destructuring-rhs-array</code>,
<code>babel-preset-env</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/17788 ">#17788</a> Add
bugfix plugin for Safari array rest destructuring bug (<a
href="https://github.com/JLHwung "><code>@JLHwung</code></a>)</li>
</ul>
</li>
</ul>
<h4>💅 Polish</h4>
<ul>
<li><code>babel-parser</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/17782 ">#17782</a>
Improve trailing comma comment handling (<a
href="https://github.com/JLHwung "><code>@JLHwung</code></a>)</li>
</ul>
</li>
</ul>
<h4>📝 Documentation</h4>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/17847 ">#17847</a>
Replace npmjs.com links with npmx.dev (<a
href="https://github.com/nicolo-ribaudo "><code>@nicolo-ribaudo</code></a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/babel/babel/commit/04ea6b27fdac8f40c3481aec2080ac9678779509 "><code>04ea6b2</code></a>
v7.29.6</li>
<li><a
href="https://github.com/babel/babel/commit/99f498a9b9fa0b900d603fbe8f6601bb3b9e42bb "><code>99f498a</code></a>
[7.x packport]Improve input source map handling (<a
href="https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/18001 ">#18001</a>)</li>
<li><a
href="https://github.com/babel/babel/commit/feba0a3654c596bd369d1ef1231f5d56666d56dc "><code>feba0a3</code></a>
Preserve original identifier names from input sourcemaps (<a
href="https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17992 ">#17992</a>)
(<a
href="https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17998 ">#17998</a>)</li>
<li><a
href="https://github.com/babel/babel/commit/aa8394e454337d118ac3d40bfa3ee1a3cb3f3ed2 "><code>aa8394e</code></a>
v7.29.0</li>
<li><a
href="https://github.com/babel/babel/commit/ad0d03f0c92404a60ec6b1c12f15febd38e2397a "><code>ad0d03f</code></a>
[7.x backport] feat: Allow specifying startLine in code frame (<a
href="https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17739 ">#17739</a>)</li>
<li><a
href="https://github.com/babel/babel/commit/d7f400889567ae18ef9ac41b024b5120f6060e17 "><code>d7f4008</code></a>
v7.28.6</li>
<li><a
href="https://github.com/babel/babel/commit/e130225028e93e106135586f344cfa44c4aac847 "><code>e130225</code></a>
Polish(standalone): improve message on invalid preset/plugin (<a
href="https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17606 ">#17606</a>)</li>
<li><a
href="https://github.com/babel/babel/commit/99dcba5e71de3bd81ce14077cfa5b6df58e9b177 "><code>99dcba5</code></a>
chore: enable some ts-eslint rules (<a
href="https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17592 ">#17592</a>)</li>
<li><a
href="https://github.com/babel/babel/commit/c92c4919771105140015167f25f7bacac77c90d9 "><code>c92c491</code></a>
Improve Unicode handling in code-frame tokenizer (<a
href="https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17589 ">#17589</a>)</li>
<li><a
href="https://github.com/babel/babel/commit/d725e399fd6a4da463cff4918cf71aa03b8beb14 "><code>d725e39</code></a>
Add <code>BABEL_7_TO_8_DANGEROUSLY_DISABLE_VERSION_CHECK</code> (<a
href="https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17569 ">#17569</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/babel/babel/commits/v7.29.6/packages/babel-core ">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~GitHub%20Actions ">GitHub Actions</a>, a new
releaser for <code>@babel/core</code> since your current version.</p>
</details>
<br />
Updates `axios` from 1.8.2 to 1.18.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/axios/axios/releases ">axios's
releases</a>.</em></p>
<blockquote>
<h2>v1.18.0 — June 13, 2026</h2>
<p>This release hardens redirect and URL handling, improves the
validateStatus configuration semantics, and includes updates to
documentation, dependencies, and release metadata.</p>
<h2>🔒 Security Fixes</h2>
<ul>
<li>
<p><strong>Redirect Header Safety:</strong> Added Node HTTP adapter
support for stripping caller-specified sensitive headers on cross-origin
redirects, helping prevent custom auth headers such as API keys from
leaking to another origin. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10892 ">#10892</a></strong>)</p>
</li>
<li>
<p><strong>URL And Request Hardening:</strong> Rejects malformed
<code>http:</code> and <code>https:</code> URLs that omit
<code>//</code> with <code>ERR_INVALID_URL</code>, while tightening
prototype-pollution-safe config reads, stream size limits, FormData
depth handling, data URL sizing, and local <code>NO_PROXY</code>
matching. (<strong><a
href="https://redirect.github.com/axios/axios/issues/11000 ">#11000</a></strong>)</p>
</li>
</ul>
<h2>🐛 Bug Fixes</h2>
<ul>
<li><strong>Status Validation:</strong> Added
<code>transitional.validateStatusUndefinedResolves</code> so
applications can opt in to treating <code>validateStatus:
undefined</code> like the option was omitted, while
<code>validateStatus: null</code> remains the explicit way to accept
every status. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10899 ">#10899</a></strong>)</li>
</ul>
<h2>🔧 Maintenance & Chores</h2>
<ul>
<li>
<p><strong>Documentation:</strong> Published the v1.17.0 release notes,
fixed a changelog typo, clarified the package update PR policy, and
marked the <code>proxy</code> request config as Node.js-only in the
advanced docs. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10984 ">#10984</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/issues/10988 ">#10988</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/issues/10992 ">#10992</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/issues/10995 ">#10995</a></strong>)</p>
</li>
<li>
<p><strong>Dependencies:</strong> Bumped <code>@babel/core</code>,
<code>@babel/preset-env</code>, <code>@commitlint/cli</code>,
<code>@commitlint/config-conventional</code>,
<code>@rollup/plugin-babel</code>, <code>@rollup/plugin-commonjs</code>,
<code>@vitest/browser</code>, <code>@vitest/browser-playwright</code>,
<code>eslint</code>, <code>lint-staged</code>, <code>rollup</code>,
<code>vitest</code>, and <code>actions/checkout</code>. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10989 ">#10989</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/issues/10996 ">#10996</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/issues/10997 ">#10997</a></strong>)</p>
</li>
<li>
<p><strong>Release Metadata:</strong> Prepared the 1.18.0 release by
updating package metadata and the runtime <code>VERSION</code> value.
(<strong><a
href="https://redirect.github.com/axios/axios/issues/11003 ">#11003</a></strong>)</p>
</li>
</ul>
<h2>🌟 New Contributors</h2>
<p>We are thrilled to welcome our new contributors. Thank you for
helping improve axios:</p>
<ul>
<li><strong><a
href="https://github.com/drori12 "><code>@drori12</code></a></strong>
(<strong><a
href="https://redirect.github.com/axios/axios/issues/10984 ">#10984</a></strong>)</li>
<li><strong><a
href="https://github.com/eyupcanakman "><code>@eyupcanakman</code></a></strong>
(<strong><a
href="https://redirect.github.com/axios/axios/issues/10899 ">#10899</a></strong>)</li>
<li><strong><a
href="https://github.com/Adi-Beker "><code>@Adi-Beker</code></a></strong>
(<strong><a
href="https://redirect.github.com/axios/axios/issues/10995 ">#10995</a></strong>)</li>
</ul>
<p><a
href="https://github.com/axios/axios/compare/v1.17.0...v1.18.0 ">Full
Changelog</a></p>
<h2>v1.17.0 — June 1, 2026</h2>
<p>This release adds Node HTTP zstd decompression, hardens config and
release workflows, and fixes authentication, header, proxy, and
type-handling regressions.</p>
<h2>🔒 Security Fixes</h2>
<ul>
<li><strong>Config Hardening:</strong> Guarded <code>socketPath</code>,
<code>params</code>, and <code>paramsSerializer</code> reads with
own-property checks to prevent inherited prototype values from affecting
request behavior, including SSRF-sensitive paths. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10901 ">#10901</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/issues/10922 ">#10922</a></strong>)</li>
<li><strong>Release Publishing:</strong> Switched the publish workflow
to npm staged publishing for safer, auditable package releases with
provenance. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10926 ">#10926</a></strong>)</li>
</ul>
<h2>🚀 New Features</h2>
<ul>
<li><strong>HTTP Compression:</strong> Added Node HTTP adapter support
for zstd response decompression, with
<code>transitional.advertiseZstdAcceptEncoding</code> controlling
whether <code>zstd</code> is advertised in <code>Accept-Encoding</code>.
(<strong><a
href="https://redirect.github.com/axios/axios/issues/6792 ">#6792</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/issues/10920 ">#10920</a></strong>)</li>
</ul>
<h2>🐛 Bug Fixes</h2>
<ul>
<li><strong>Authentication Handling:</strong> Restored Basic auth on
same-origin Node redirects while continuing to strip credentials
cross-origin, and aligned the fetch adapter with HTTP adapter behavior
for URL-embedded Basic auth. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10929 ">#10929</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/issues/10896 ">#10896</a></strong>)</li>
<li><strong>Proxy TLS:</strong> Preserved user <code>httpsAgent</code>
TLS options when tunneling HTTPS requests through HTTP CONNECT proxies.
(<strong><a
href="https://redirect.github.com/axios/axios/issues/10957 ">#10957</a></strong>)</li>
<li><strong>React Native FormData:</strong> Cleared default
<code>Content-Type</code> for React Native <code>FormData</code> so
multipart boundaries can be generated correctly. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10898 ">#10898</a></strong>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/axios/axios/blob/v1.x/CHANGELOG.md ">axios's
changelog</a>.</em></p>
<blockquote>
<h2>v1.18.0 — June 13, 2026</h2>
<p>This release hardens redirect and URL handling, improves the
validateStatus configuration semantics, and includes updates to
documentation, dependencies, and release metadata.</p>
<h2>🔒 Security Fixes</h2>
<ul>
<li>
<p><strong>Redirect Header Safety:</strong> Added Node HTTP adapter
support for stripping caller-specified sensitive headers on cross-origin
redirects, helping prevent custom auth headers such as API keys from
leaking to another origin. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10892 ">#10892</a></strong>)</p>
</li>
<li>
<p><strong>URL And Request Hardening:</strong> Rejects malformed
<code>http:</code> and <code>https:</code> URLs that omit
<code>//</code> with <code>ERR_INVALID_URL</code>, while tightening
prototype-pollution-safe config reads, stream size limits, FormData
depth handling, data URL sizing, and local <code>NO_PROXY</code>
matching. (<strong><a
href="https://redirect.github.com/axios/axios/issues/11000 ">#11000</a></strong>)</p>
</li>
</ul>
<h2>🐛 Bug Fixes</h2>
<ul>
<li><strong>Status Validation:</strong> Added
<code>transitional.validateStatusUndefinedResolves</code> so
applications can opt in to treating <code>validateStatus:
undefined</code> like the option was omitted, while
<code>validateStatus: null</code> remains the explicit way to accept
every status. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10899 ">#10899</a></strong>)</li>
</ul>
<h2>🔧 Maintenance & Chores</h2>
<ul>
<li>
<p><strong>Documentation:</strong> Published the v1.17.0 release notes,
fixed a changelog typo, clarified the package update PR policy, and
marked the <code>proxy</code> request config as Node.js-only in the
advanced docs. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10984 ">#10984</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/issues/10988 ">#10988</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/issues/10992 ">#10992</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/issues/10995 ">#10995</a></strong>)</p>
</li>
<li>
<p><strong>Dependencies:</strong> Bumped <code>@babel/core</code>,
<code>@babel/preset-env</code>, <code>@commitlint/cli</code>,
<code>@commitlint/config-conventional</code>,
<code>@rollup/plugin-babel</code>, <code>@rollup/plugin-commonjs</code>,
<code>@vitest/browser</code>, <code>@vitest/browser-playwright</code>,
<code>eslint</code>, <code>lint-staged</code>, <code>rollup</code>,
<code>vitest</code>, and <code>actions/checkout</code>. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10989 ">#10989</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/issues/10996 ">#10996</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/issues/10997 ">#10997</a></strong>)</p>
</li>
<li>
<p><strong>Release Metadata:</strong> Prepared the 1.18.0 release by
updating package metadata and the runtime <code>VERSION</code> value.
(<strong><a
href="https://redirect.github.com/axios/axios/issues/11003 ">#11003</a></strong>)</p>
</li>
</ul>
<h2>🌟 New Contributors</h2>
<p>We are thrilled to welcome our new contributors. Thank you for
helping improve axios:</p>
<ul>
<li><strong><a
href="https://github.com/drori12 "><code>@drori12</code></a></strong>
(<strong><a
href="https://redirect.github.com/axios/axios/issues/10984 ">#10984</a></strong>)</li>
<li><strong><a
href="https://github.com/eyupcanakman "><code>@eyupcanakman</code></a></strong>
(<strong><a
href="https://redirect.github.com/axios/axios/issues/10899 ">#10899</a></strong>)</li>
<li><strong><a
href="https://github.com/Adi-Beker "><code>@Adi-Beker</code></a></strong>
(<strong><a
href="https://redirect.github.com/axios/axios/issues/10995 ">#10995</a></strong>)</li>
</ul>
<p><a
href="https://github.com/axios/axios/compare/v1.17.0...v1.18.0 ">Full
Changelog</a></p>
<h2>v1.17.0 — June 1, 2026</h2>
<p>This release adds Node HTTP zstd decompression, hardens config and
release workflows, and fixes authentication, header, proxy, and
type-handling regressions.</p>
<h2>🔒 Security Fixes</h2>
<ul>
<li><strong>Config Hardening:</strong> Guarded <code>socketPath</code>,
<code>params</code>, and <code>paramsSerializer</code> reads with
own-property checks to prevent inherited prototype values from affecting
request behavior, including SSRF-sensitive paths. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10901 ">#10901</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/issues/10922 ">#10922</a></strong>)</li>
<li><strong>Release Publishing:</strong> Switched the publish workflow
to npm staged publishing for safer, auditable package releases with
provenance. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10926 ">#10926</a></strong>)</li>
</ul>
<h2>🚀 New Features</h2>
<ul>
<li><strong>HTTP Compression:</strong> Added Node HTTP adapter support
for zstd response decompression, with
<code>transitional.advertiseZstdAcceptEncoding</code> controlling
whether <code>zstd</code> is advertised in <code>Accept-Encoding</code>.
(<strong><a
href="https://redirect.github.com/axios/axios/issues/6792 ">#6792</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/issues/10920 ">#10920</a></strong>)</li>
</ul>
<h2>🐛 Bug Fixes</h2>
<ul>
<li><strong>Authentication Handling:</strong> Restored Basic auth on
same-origin Node redirects while continuing to strip credentials
cross-origin, and aligned the fetch adapter with HTTP adapter behavior
for URL-embedded Basic auth. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10929 ">#10929</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/issues/10896 ">#10896</a></strong>)</li>
<li><strong>Proxy TLS:</strong> Preserved user <code>httpsAgent</code>
TLS options when tunneling HTTPS requests through HTTP CONNECT proxies.
(<strong><a
href="https://redirect.github.com/axios/axios/issues/10957 ">#10957</a></strong>)</li>
<li><strong>React Native FormData:</strong> Cleared default
<code>Content-Type</code> for React Native <code>FormData</code> so
multipart boundaries can be generated correctly. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10898 ">#10898</a></strong>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/axios/axios/commit/2d06f96e8602c2db13b65a26340ee4a1bbc0b61f "><code>2d06f96</code></a>
chore(release): prepare release 1.18.0 (<a
href="https://redirect.github.com/axios/axios/issues/11003 ">#11003</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/32fc489632377d214db55bfa4e2c48486a7d7ce2 "><code>32fc489</code></a>
fix: malformed http urls (<a
href="https://redirect.github.com/axios/axios/issues/11000 ">#11000</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/b40ce498abfa10d90b873b4fd08f520afa5d2545 "><code>b40ce49</code></a>
chore(deps-dev): bump the development_dependencies group with 10 updates
(<a
href="https://redirect.github.com/axios/axios/issues/10 ">#10</a>...</li>
<li><a
href="https://github.com/axios/axios/commit/fe964f960ecb52c3e1155b0daf7be77541956b01 "><code>fe964f9</code></a>
docs: mark proxy config as Node.js only (<a
href="https://redirect.github.com/axios/axios/issues/10995 ">#10995</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/5f229d2d1f018d1db3dab6bbe034dbf3f9041b99 "><code>5f229d2</code></a>
chore(deps): bump actions/checkout from 6.0.2 to 6.0.3 in the
github-actions ...</li>
<li><a
href="https://github.com/axios/axios/commit/fae9d4e7db6a858c407c75e607a071c533c5c4f6 "><code>fae9d4e</code></a>
docs: clarify package update PR policy (<a
href="https://redirect.github.com/axios/axios/issues/10992 ">#10992</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/28ab2ced820e55192806c53472ab3eb0cbb68dc2 "><code>28ab2ce</code></a>
chore(deps-dev): bump the development_dependencies group with 2 updates
(<a
href="https://redirect.github.com/axios/axios/issues/10989 ">#10989</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/a8e4f13aeecc45a3b8fab3ecfd9ddb5d70fb772b "><code>a8e4f13</code></a>
fix(core): keep default validateStatus when request passes undefined (<a
href="https://redirect.github.com/axios/axios/issues/10899 ">#10899</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/614f4552a17de757d4171ad7c3bd38c9c1025fd8 "><code>614f455</code></a>
docs: publish v1.17.0 release notes (<a
href="https://redirect.github.com/axios/axios/issues/10988 ">#10988</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/6bb12c191f5380fad321322fb90216ae0dc36985 "><code>6bb12c1</code></a>
fix: custom auth headers not stripped on cross-origin redirects (<a
href="https://redirect.github.com/axios/axios/issues/10892 ">#10892</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/axios/axios/compare/v1.8.2...v1.18.0 ">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~GitHub%20Actions ">GitHub Actions</a>, a new
releaser for axios since your current version.</p>
</details>
<details>
<summary>Install script changes</summary>
<p>This version modifies <code>prepare</code> script that runs during
installation. Review the package contents before updating.</p>
</details>
<br />
Updates `dompurify` from 3.2.4 to 3.4.13
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/cure53/DOMPurify/releases ">dompurify's
releases</a>.</em></p>
<blockquote>
<h2>DOMPurify 3.4.13</h2>
<ul>
<li>Fixed an issue with hook removal during <code>IN_PLACE</code>
sanitization, thanks <a
href="https://github.com/koyokr "><code>@koyokr</code></a></li>
<li>Fixed an issue with hooks potentially bypassing the clone guard,
thanks <a
href="https://github.com/AkshayjainG "><code>@AkshayjainG</code></a></li>
<li>Fixed an issue with DOM clobbering via <code>ownerDocument</code>
during <code>IN_PLACE</code>, thanks <a
href="https://github.com/AkshayjainG "><code>@AkshayjainG</code></a></li>
<li>Bumped several dependencies where possible</li>
</ul>
<h2>DOMPurify 3.4.12</h2>
<ul>
<li>Fixed an issue where a hook would not get called for custom
elements, thanks <a
href="https://github.com/Rikuxx0 "><code>@Rikuxx0</code></a></li>
<li>Hardened the handling of hooks removing elements, <a
href="https://github.com/mkrause-bee360 "><code>@mkrause-bee360</code></a></li>
<li>Added support for a few new SVG attributes, thanks <a
href="https://github.com/cbn-falias "><code>@cbn-falias</code></a> &
<a
href="https://github.com/Develop-KIM "><code>@Develop-KIM</code></a></li>
<li>Hardened the handling of declarative partial updates</li>
<li>Updated the documentation is several spots, README, wiki, etc.</li>
<li>Bumped several dependencies where possible</li>
</ul>
<h2>DOMPurify 3.4.11</h2>
<ul>
<li>Fixed an issue with a leaky config for hooks via
<code>setConfig</code>, thanks <a
href="https://github.com/trace37labs "><code>@trace37labs</code></a></li>
<li>Bumped vulnerable development dependencies to arrive at plain 0 with
<code>npm audit</code></li>
<li>Updated the <code>osv-scanner</code> suppression list as no
vulnerable dependencies are left for now</li>
<li>Updated up the linting tool-chain and removed now-redundant lint
directives</li>
<li>Updated the documentation is several spots, README, wiki, etc.</li>
<li>Bumped several dependencies where possible</li>
</ul>
<h2>DOMPurify 3.4.10</h2>
<ul>
<li>Refactored codebase for clarity: extracted the public type
declarations into <code>types.ts</code></li>
<li>Decomposed the three largest sanitizer functions into focused
helpers</li>
<li>Removed duplicated defaults and dead branches, consolidated
<code>SAFE_FOR_TEMPLATES</code> scrubbing into single shared path</li>
<li>Improved per-node performance by hoisting the mXSS probe regexes and
testing <code>textContent</code> before <code>innerHTML</code></li>
<li>Added a deterministic micro-benchmark harness (<code>npm run
bench</code>) with a <code>--compare</code> mode</li>
<li>Reduced CI cost by running the full three-engine browser suite once
per PR</li>
<li>Refreshed the <code>demos/</code> folder so every demo runs again,
and added a SVG-via-<code><img></code> demo</li>
<li>Documented the bench and <code>test:happydom</code> scripts in the
README</li>
<li>Completed the Attack Classes & Bypass History wiki page</li>
<li>Bumped several dependencies where possible</li>
</ul>
<h2>DOMPurify 3.4.9</h2>
<ul>
<li>Further improved the handling of Trusted Types config options,
thanks <a
href="https://github.com/offset "><code>@offset</code></a></li>
<li>Further improved the handling of <code>IN_PLACE</code> sanitization,
thanks <a
href="https://github.com/mozfreddyb "><code>@mozfreddyb</code></a></li>
<li>Added more test coverage for <code>IN_PLACE</code> and Trusted Types
related usage</li>
<li>Bumped several dependencies where possible</li>
<li>Updated README and wiki with more accurate documentation &
attack samples</li>
</ul>
<h2>DOMPurify 3.4.8</h2>
<ul>
<li>Cleaned up the repository root, renamed some and removed unneeded
files</li>
<li>Fixed an issue with handling of Trusted Types policies, thanks <a
href="https://github.com/fulstadev "><code>@fulstadev</code></a></li>
<li>Fixed the node iterator for better template scrubbing, thanks <a
href="https://github.com/IamLeandrooooo "><code>@IamLeandrooooo</code></a></li>
<li>Included formerly missing LICENSE-MPL in published npm package,
thanks <a
href="https://github.com/asamuzaK "><code>@asamuzaK</code></a></li>
<li>Bumped several dependencies where possible</li>
</ul>
<h2>DOMPurify 3.4.7</h2>
<ul>
<li>Hardened the handling of Shadow Roots when using
<code>IN_PLACE</code>, thanks <a
href="https://github.com/GameZoneHacker "><code>@GameZoneHacker</code></a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/cure53/DOMPurify/commit/3067f774676975de12306effd6db6ad7a9a8c17f "><code>3067f77</code></a>
release: 3.4.13 (<a
href="https://redirect.github.com/cure53/DOMPurify/issues/1562 ">#1562</a>)</li>
<li><a
href="https://github.com/cure53/DOMPurify/commit/a9ca1e537422319a557a9a2aa61f003b23b4a197 "><code>a9ca1e5</code></a>
release: 3.4.12 (<a
href="https://redirect.github.com/cure53/DOMPurify/issues/1537 ">#1537</a>)</li>
<li><a
href="https://github.com/cure53/DOMPurify/commit/0cae5187403132f96a6d357649e4b15633fc210a "><code>0cae518</code></a>
release: 3.4.11 (<a
href="https://redirect.github.com/cure53/DOMPurify/issues/1494 ">#1494</a>)</li>
<li><a
href="https://github.com/cure53/DOMPurify/commit/6ee5716f8336989753611beeca364957c0eb0c3e "><code>6ee5716</code></a>
release: 3.4.10 (<a
href="https://redirect.github.com/cure53/DOMPurify/issues/1478 ">#1478</a>)</li>
<li><a
href="https://github.com/cure53/DOMPurify/commit/52102472d46035857c52df19e44285f8a1e102fc "><code>5210247</code></a>
release: 3.4.9 (<a
href="https://redirect.github.com/cure53/DOMPurify/issues/1459 ">#1459</a>)</li>
<li><a
href="https://github.com/cure53/DOMPurify/commit/bcdd8285412dc9c4c149652aed2d712e790d6ccf "><code>bcdd828</code></a>
release: 3.4.8 (<a
href="https://redirect.github.com/cure53/DOMPurify/issues/1439 ">#1439</a>)</li>
<li><a
href="https://github.com/cure53/DOMPurify/commit/ca30f070c360df162a3e3848e80e6fd3c9e74bff "><code>ca30f07</code></a>
release: 3.4.7 (<a
href="https://redirect.github.com/cure53/DOMPurify/issues/1414 ">#1414</a>)</li>
<li><a
href="https://github.com/cure53/DOMPurify/commit/bb7739e5bccec7e1ab3dae3f3e42d02db3acaaae "><code>bb7739e</code></a>
release: 3.4.6 (<a
href="https://redirect.github.com/cure53/DOMPurify/issues/1394 ">#1394</a>)</li>
<li><a
href="https://github.com/cure53/DOMPurify/commit/011b0c78f2a0f57ee54f5fcccb697a46ca6e63ea "><code>011b0c7</code></a>
release: 3.4.5 (<a
href="https://redirect.github.com/cure53/DOMPurify/issues/1382 ">#1382</a>)</li>
<li><a
href="https://github.com/cure53/DOMPurify/commit/5817ad969c15e67dfcd6cb37248d6e9c1553e7c3 "><code>5817ad9</code></a>
release: 3.4.4 (<a
href="https://redirect.github.com/cure53/DOMPurify/issues/1374 ">#1374</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/cure53/DOMPurify/compare/3.2.4...3.4.13 ">compare
view</a></li>
</ul>
</details>
<details>
<summary>Install script changes</summary>
<p>This version adds <code>prepare</code> script that runs during
installation. Review the package contents before updating.</p>
</details>
<br />
Updates `postcss` from 8.5.3 to 8.5.23
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/postcss/postcss/releases ">postcss's
releases</a>.</em></p>
<blockquote>
<h2>8.5.23</h2>
<ul>
<li>Do not load source map without <code>opts.from</code> for security
reasons.</li>
</ul>
<h2>8.5.22</h2>
<ul>
<li>Fixed custom property losing semicolon before a comment (by <a
href="https://github.com/sarathfrancis90 "><code>@sarathfrancis90</code></a>).</li>
</ul>
<h2>8.5.21</h2>
<ul>
<li>Fixed childless at-rule losing semicolon before comment (by <a
href="https://github.com/sarathfrancis90 "><code>@sarathfrancis90</code></a>).</li>
<li>Fixed docs (by <a
href="https://github.com/isker "><code>@isker</code></a>).</li>
</ul>
<h2>8.5.20</h2>
<ul>
<li>Fixed missing space if <code>AtRule#params</code> is set after (by
<a
href="https://github.com/sarathfrancis90 "><code>@sarathfrancis90</code></a>).</li>
<li>Fixed mixing AST error on warnings (by <a
href="https://github.com/MahinAnowar "><code>@MahinAnowar</code></a>).</li>
</ul>
<h2>8.5.19</h2>
<ul>
<li>Fixed cleaning <code>before</code> for new nodes inserted to
<code>Root</code> (by <a
href="https://github.com/MahinAnowar "><code>@MahinAnowar</code></a>).</li>
</ul>
<h2>8.5.18</h2>
<ul>
<li>Restricted loading previous source maps file to the
<code>opts.from</code> folder for security reasons (use <code>unsafeMap:
true</code> to disable the check).</li>
</ul>
<h2>8.5.17</h2>
<ul>
<li>Fixed <code>Maximum call stack size exceeded</code> error.</li>
<li>Fixed Prototype hijacking for <code>postcss.fromJSON()</code>.</li>
<li>Fixed <code>Input#origin()</code> for unmapped end position (by <a
href="https://github.com/chatman-media "><code>@chatman-media</code></a>).</li>
</ul>
<h2>8.5.16</h2>
<ul>
<li>Fixed <code>Input#origin()</code> position (by <a
href="https://github.com/mizdra "><code>@mizdra</code></a>).</li>
<li>Fixed <code>raws</code> after rehydrating a JSON AST (by <a
href="https://github.com/sarathfrancis90 "><code>@sarathfrancis90</code></a>).</li>
<li>Fixed putting parent-less node in <code>nodes</code> of new node (by
<a
href="https://github.com/MahinAnowar "><code>@MahinAnowar</code></a>).</li>
<li>Fixed computing <code>offset</code> in <code>positionBy()</code> (by
<a
href="https://github.com/greymoth-jp "><code>@greymoth-jp</code></a>).</li>
<li>Fixed <code>rangeBy()</code> on <code>index: 0</code> (by <a
href="https://github.com/sarathfrancis90 "><code>@sarathfrancis90</code></a>).</li>
</ul>
<h2>8.5.15</h2>
<ul>
<li>Fixed declaration parsing performance (by <a
href="https://github.com/homanp "><code>@homanp</code></a>).</li>
</ul>
<h2>8.5.14</h2>
<ul>
<li>Fixed custom syntax regression (by <a
href="https://github.com/43081j "><code>@43081j</code></a>).</li>
</ul>
<h2>8.5.13</h2>
<ul>
<li>Fixed <code>postcss-scss</code> commend regression.</li>
</ul>
<h2>8.5.12</h2>
<ul>
<li>Fixed reading any file via user-generated CSS.</li>
<li>Added <code>opts.unsafeMap</code> to disable checks.</li>
</ul>
<h2>8.5.11</h2>
<ul>
<li>Fixed nested brackets parsing performance (by <a
href="https://github.com/offset "><code>@offset</code></a>).</li>
</ul>
<h2>8.5.10</h2>
<ul>
<li>Fixed XSS via unescaped <code></style></code> in non-bundler
cases (by <a
href="https://github.com/TharVid "><code>@TharVid</code></a>).</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/postcss/postcss/blob/main/CHANGELOG.md ">postcss's
changelog</a>.</em></p>
<blockquote>
<h2>8.5.23</h2>
<ul>
<li>Do not load source map without <code>opts.from</code> for security
reasons.</li>
</ul>
<h2>8.5.22</h2>
<ul>
<li>Fixed custom property losing semicolon before a comment (by <a
href="https://github.com/sarathfrancis90 "><code>@sarathfrancis90</code></a>).</li>
</ul>
<h2>8.5.21</h2>
<ul>
<li>Fixed childless at-rule losing semicolon before comment (by <a
href="https://github.com/sarathfrancis90 "><code>@sarathfrancis90</code></a>).</li>
<li>Fixed docs (by <a
href="https://github.com/isker "><code>@isker</code></a>).</li>
</ul>
<h2>8.5.20</h2>
<ul>
<li>Fixed missing space if <code>AtRule#params</code> is set after (by
<a
href="https://github.com/sarathfrancis90 "><code>@sarathfrancis90</code></a>).</li>
<li>Fixed mixing AST error on warnings (by <a
href="https://github.com/MahinAnowar "><code>@MahinAnowar</code></a>).</li>
</ul>
<h2>8.5.19</h2>
<ul>
<li>Fixed cleaning <code>before</code> for new nodes inserted to
<code>Root</code> (by <a
href="https://github.com/MahinAnowar "><code>@MahinAnowar</code></a>).</li>
</ul>
<h2>8.5.18</h2>
<ul>
<li>Restricted loading previous source maps file to the
<code>opts.from</code> folder for security reasons (use <code>unsafeMap:
true</code> to disable the check).</li>
</ul>
<h2>8.5.17</h2>
<ul>
<li>Fixed <code>Maximum call stack size exceeded</code> error.</li>
<li>Fixed Prototype hijacking for <code>postcss.fromJSON()</code>.</li>
<li>Fixed <code>Input#origin()</code> for unmapped end position (by <a
href="https://github.com/chatman-media "><code>@chatman-media</code></a>).</li>
</ul>
<h2>8.5.16</h2>
<ul>
<li>Fixed <code>Input#origin()</code> position (by <a
href="https://github.com/mizdra "><code>@mizdra</code></a>).</li>
<li>Fixed <code>raws</code> after rehydrating a JSON AST (by <a
href="https://github.com/sarathfrancis90 "><code>@sarathfrancis90</code></a>).</li>
<li>Fixed putting parent-less node in <code>nodes</code> of new node (by
<a
href="https://github.com/MahinAnowar "><code>@MahinAnowar</code></a>).</li>
<li>Fixed computing <code>offset</code> in <code>positionBy()</code> (by
<a
href="https://github.com/greymoth-jp "><code>@greymoth-jp</code></a>).</li>
<li>Fixed <code>rangeBy()</code> on <code>index: 0</code> (by <a
href="https://github.com/sarathfrancis90 "><code>@sarathfrancis90</code></a>).</li>
</ul>
<h2>8.5.15</h2>
<ul>
<li>Fixed declaration parsing performance (by <a
href="https://github.com/homanp "><code>@homanp</code></a>).</li>
</ul>
<h2>8.5.14</h2>
<ul>
<li>Fixed custom syntax regression (by <a
href="https://github.com/43081j "><code>@43081j</code></a>).</li>
</ul>
<h2>8.5.13</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/postcss/postcss/commit/eb9e1fe793740bb3280bdf5bf98147f857f011bd "><code>eb9e1fe</code></a>
Release 8.5.23 version</li>
<li><a
href="https://github.com/postcss/postcss/commit/9d19c78ac91108b3f7d7130e55c6fa806c0efb84 "><code>9d19c78</code></a>
Update dependencies</li>
<li><a
href="https://github.com/postcss/postcss/commit/7beca139e70f9075c6b19700fcb00dd8033e5da8 "><code>7beca13</code></a>
Does no load source map file without opts.from</li>
<li><a
href="https://github.com/postcss/postcss/commit/decea51421682341401575b3740709fda0e12930 "><code>decea51</code></a>
Typo</li>
<li><a
href="https://github.com/postcss/postcss/commit/c18e30d126395d42a0726aa00e03a8f1088985ae "><code>c18e30d</code></a>
Update EM banner</li>
<li><a
href="https://github.com/postcss/postcss/commit/98a39ad73d163a90be924d5126c771262110f1fc "><code>98a39ad</code></a>
Update EM banner</li>
<li><a
href="https://github.com/postcss/postcss/commit/a3e48c492ddec0e4879d513b8b995fee887af352 "><code>a3e48c4</code></a>
Release 8.5.22 version</li>
<li><a
href="https://github.com/postcss/postcss/commit/f49d6911795f53b2cfe023bb686bf1144ec30618 "><code>f49d691</code></a>
Fix custom property losing its semicolon before a comment (<a
href="https://redirect.github.com/postcss/postcss/issues/2117 ">#2117</a>)</li>
<li><a
href="https://github.com/postcss/postcss/commit/28e0daf8f2fe5ba9e19ea3f8c27c8fe176f9419e "><code>28e0daf</code></a>
Release 8.5.21 version</li>
<li><a
href="https://github.com/postcss/postcss/commit/3d2b4e43e38274f233b5609d09687cadad8215d9 "><code>3d2b4e4</code></a>
Update dependencies</li>
<li>Additional commits viewable in <a
href="https://github.com/postcss/postcss/compare/8.5.3...8.5.23 ">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~GitHub%20Actions ">GitHub Actions</a>, a new
releaser for postcss since your current version.</p>
</details>
<br />
Updates `mongoose` from 8.9.5 to 8.24.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/Automattic/mongoose/releases ">mongoose's
releases</a>.</em></p>
<blockquote>
<h2>8.24.1</h2>
<ul>
<li>fix(documentarray): reindex subdocs after array reordering and
removal so subsequent nested changes save using the correct path <a
href="https://redirect.github.com/Automattic/mongoose/issues/16282 ">#16282</a>
<a href="https://github.com/AbdelrahmanHafez ">AbdelrahmanHafez</a></li>
<li>fix(document): avoid accessing special properties in
<code>Document.prototype.get()</code></li>
<li>fix(schema): avoid returning inherited properties from schema path
lookups, including paths underneath maps of subdocuments</li>
<li>fix(clone): isolate cloned arrays from source documents <a
href="https://redirect.github.com/Automattic/mongoose/issues/16281 ">#16281</a>
<a href="https://github.com/AbdelrahmanHafez ">AbdelrahmanHafez</a></li>
<li>types: enable exactOptionalPropertyTypes in TypeScript tests <a
href="https://redirect.github.com/Automattic/mongoose/issues/16287 ">#16287</a></li>
</ul>
<h1>8.24.0 / 2026-05-14</h1>
<ul>
<li>feat(aggregate): add pipelineForUnionWith() helper to allow reusing
pipelines with $unionWith in TypeScript <a
href="https://redirect.github.com/Automattic/mongoose/issues/16247 ">#16247</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/16041 ">#16041</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/16033 ">#16033</a></li>
<li>fix(connection): handle calling watch() on disconnected connection
<a
href="https://redirect.github.com/Automattic/mongoose/issues/16246 ">#16246</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/16034 ">#16034</a></li>
<li>types: handle compiling with exactOptionalPropertyTypes <a
href="https://redirect.github.com/Automattic/mongoose/issues/16286 ">#16286</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/16273 ">#16273</a></li>
</ul>
<h1>8.23.1 / 2026-04-23</h1>
<ul>
<li>fix(model): support sort option in Model.bulkWrite() updateOne and
replaceOne operations <a
href="https://redirect.github.com/Automattic/mongoose/issues/16091 ">#16091</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/16079 ">#16079</a></li>
<li>fix(setDefaultsOnInsert): check child filter paths before applying
defaults (backport <a
href="https://redirect.github.com/Automattic/mongoose/issues/16031 ">#16031</a>
to 8.x) <a
href="https://redirect.github.com/Automattic/mongoose/issues/16219 ">#16219</a>
<a href="https://github.com/marklai1998 ">marklai1998</a></li>
<li>fix(schema): always pass raw string value to error validators, only
trim to 30 chars for maxlength validator <a
href="https://redirect.github.com/Automattic/mongoose/issues/16238 ">#16238</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/16236 ">#16236</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/15550 ">#15550</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/15571 ">#15571</a></li>
</ul>
<h1>8.23.0 / 2026-02-09</h1>
<ul>
<li>feat(document): add flattenUUIDs option to toObject() and toJSON()
(backport <a
href="https://redirect.github.com/Automattic/mongoose/issues/15021 ">#15021</a>
to 8.x)</li>
</ul>
<h1>8.22.1 / 2025-02-04</h1>
<ul>
<li>fix: handle other top-level query operators in sanitizeFilter</li>
<li>fix(document): when cloning a doc with subdocs, make sure the
subdocs parent is the cloned doc <a
href="https://redirect.github.com/Automattic/mongoose/issues/15904 ">#15904</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/15901 ">#15901</a></li>
<li>types(models): support Mongoose query casting in
AnyBulkWriteOperation filter property <a
href="https://redirect.github.com/Automattic/mongoose/issues/15910 ">#15910</a></li>
<li>types: add toBSON() to documents <a
href="https://redirect.github.com/Automattic/mongoose/issues/15927 ">#15927</a></li>
</ul>
<h1>8.22.0 / 2026-01-27</h1>
<ul>
<li>feat(model): allow passing strict option to hydrate() <a
href="https://redirect.github.com/Automattic/mongoose/issues/15944 ">#15944</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/15940 ">#15940</a></li>
</ul>
<h2>8.21.1</h2>
<ul>
<li>fix(clone): fix parent doc for map subdocuments and array
subdocuments <a
href="https://redirect.github.com/Automattic/mongoose/issues/15958 ">#15958</a>
<a href="https://github.com/AbdelrahmanHafez ">AbdelrahmanHafez</a></li>
<li>fix(document): when cloning a doc with subdocs, make sure the
subdocs parent is the cloned doc <a
href="https://redirect.github.com/Automattic/mongoose/issues/15904 ">#15904</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/15901 ">#15901</a></li>
<li>fix: respect currentTime schema option in bulkWrite updates <a
href="https://redirect.github.com/Automattic/mongoose/issues/15976 ">#15976</a>
<a href="https://github.com/sderrow ">sderrow</a></li>
<li>types(models): support Mongoose query casting in
AnyBulkWriteOperation filter property <a
href="https://redirect.github.com/Automattic/mongoose/issues/15910 ">#15910</a></li>
<li>types: add toBSON() to documents <a
href="https://redirect.github.com/Automattic/mongoose/issues/15927 ">#15927</a></li>
</ul>
<h1>8.21.0 / 2025-12-29</h1>
<ul>
<li>feat(document): add support for getAtomics() to allow custom
container types to utilize atomics <a
href="https://redirect.github.com/Automattic/mongoose/issues/15817 ">#15817</a></li>
<li>feat(document+model): pass options to pre('deleteOne') and
update+options to pre('updateOne') hooks <a
href="https://redirect.github.com/Automattic/mongoose/issues/15908 ">#15908</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/15870 ">#15870</a></li>
<li>fix: add support for typescript style enums <a
href="https://redirect.github.com/Automattic/mongoose/issues/15914 ">#15914</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/15913 ">#15913</a>
<a href="https://github.com/mjfwebb ">mjfwebb</a></li>
</ul>
<h1>8.20.4 / 2025-12-18</h1>
<ul>
<li>fix(model): ensure $isDeleted is set after calling doc.deleteOne()
successfully <a
href="https://redirect.github.com/Automattic/mongoose/issues/15898 ">#15898</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/Automattic/mongoose/blob/master/CHANGELOG.md ">mongoose's
changelog</a>.</em></p>
<blockquote>
<h1>8.24.1 / 2026-06-22</h1>
<ul>
<li>fix(documentarray): reindex subdocs after array reordering and
removal so subsequent nested changes save using the correct path <a
href="https://redirect.github.com/Automattic/mongoose/issues/16282 ">#16282</a>
<a href="https://github.com/AbdelrahmanHafez ">AbdelrahmanHafez</a></li>
<li>fix(document): avoid accessing special properties in
<code>Document.prototype.get()</code></li>
<li>fix(schema): avoid returning inherited properties from schema path
lookups, including paths underneath maps of subdocuments</li>
<li>fix(clone): isolate cloned arrays from source documents <a
href="https://redirect.github.com/Automattic/mongoose/issues/16281 ">#16281</a>
<a href="https://github.com/AbdelrahmanHafez ">AbdelrahmanHafez</a></li>
<li>types: enable exactOptionalPropertyTypes in TypeScript tests <a
href="https://redirect.github.com/Automattic/mongoose/issues/16287 ">#16287</a></li>
</ul>
<h1>9.7.2 / 2026-06-22</h1>
<ul>
<li>fix(documentarray): reindex subdocs after array reordering and
removal so subsequent nested changes save using the correct path <a
href="https://redirect.github.com/Automattic/mongoose/issues/16282 ">#16282</a>
<a href="https://github.com/AbdelrahmanHafez ">AbdelrahmanHafez</a></li>
<li>fix(document): avoid accessing special properties in
<code>Document.prototype.get()</code></li>
<li>fix(schema): only return own properties in schematype lookups and
disallow setting schema paths under special properties</li>
<li>docs: update homepage sponsor layout</li>
</ul>
<h1>9.7.1 / 2026-06-17</h1>
<ul>
<li>perf(document+model): improve save performance by avoiding
unnecessary promise allocations and reducing path/default/dirty-state
overhead <a
href="https://redirect.github.com/Automattic/mongoose/issues/16331 ">#16331</a></li>
<li>fix(schema): include ObjectId regex pattern in
<code>toJSONSchema()</code> output <a
href="https://redirect.github.com/Automattic/mongoose/issues/16335 ">#16335</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/16334 ">#16334</a>
<a href="https://github.com/AbdelrahmanHafez ">AbdelrahmanHafez</a></li>
<li>fix(populate): split populate into separate queries per document if
the resulting <code>$in</code> filter has more than 50k elements to
reduce risk of BSON size errors <a
href="https://redirect.github.com/Automattic/mongoose/issues/16333 ">#16333</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/5890 ">#5890</a></li>
<li>docs: add assistant sidebar with MongoDB Knowledge integration <a
href="https://redirect.github.com/Automattic/mongoose/issues/16311 ">#16311</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/16283 ">#16283</a></li>
<li>docs: update docs copy buttons, edit links, homepage alignment, and
<code>llms.txt</code> generation <a
href="https://redirect.github.com/Automattic/mongoose/issues/16326 ">#16326</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/16327 ">#16327</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/16329 ">#16329</a></li>
</ul>
<h1>9.7.0 / 2026-06-09</h1>
<ul>
<li>feat: add Node.js TracingChannel support for APM instrumentation <a
href="https://redirect.github.com/Automattic/mongoose/issues/16275 ">#16275</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/16105 ">#16105</a>
<a href="https://github.com/logaretm ">logaretm</a></li>
<li>feat(model): add standard schema adapter for models <a
href="https://redirect.github.com/Automattic/mongoose/issues/16308 ">#16308</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/16280 ">#16280</a></li>
<li>fix(cursor): avoid waiting on buffering to run aggregation
middleware <a
href="https://redirect.github.com/Automattic/mongoose/issues/16289 ">#16289</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/16284 ">#16284</a></li>
<li>fix(document): throw error if overwriting array selected with
<code>$slice</code> <a
href="https://redirect.github.com/Automattic/mongoose/issues/16313 ">#16313</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/2432 ">#2432</a></li>
<li>fix(schema): remove <code>validateSync()</code> union fallback <a
href="https://redirect.github.com/Automattic/mongoose/issues/16310 ">#16310</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/16291 ">#16291</a>
<a href="https://github.com/AbdelrahmanHafez ">AbdelrahmanHafez</a></li>
<li>types: cast primitive types within unions when applying create
casting <a
href="https://redirect.github.com/Automattic/mongoose/issues/16320 ">#16320</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/16316 ">#16316</a></li>
<li>docs: add <code>llms.txt</code> <a
href="https://redirect.github.com/Automattic/mongoose/issues/16312 ">#16312</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/15687 ">#15687</a></li>
<li>docs: rewrite documents docs <a
href="https://redirect.github.com/Automattic/mongoose/issues/16298 ">#16298</a></li>
<li>docs(model): clarify some details on <code>model.validate()</code>
casting <a
href="https://redirect.github.com/Automattic/mongoose/issues/16308 ">#16308</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/16280 ">#16280</a></li>
<li>docs(findOneAndUpdate): clarify update handling of undefined <a
href="https://redirect.github.com/Automattic/mongoose/issues/16299 ">#16299</a></li>
<li>docs(model): fix link to be absolute <a
href="https://redirect.github.com/Automattic/mongoose/issues/16321 ">#16321</a>
<a href="https://github.com/hasezoey ">hasezoey</a></li>
</ul>
<h1>9.6.3 / 2026-05-27</h1>
<ul>
<li>fix(clone): isolate cloned arrays from source documents <a
href="https://redirect.github.com/Automattic/mongoose/issues/16281 ">#16281</a>
<a href="https://github.com/AbdelrahmanHafez ">AbdelrahmanHafez</a></li>
<li>fix(update): preserve user-provided
<code>$setOnInsert.createdAt</code> with <code>overwriteImmutable:
true</code> <a
href="https://redirect.github.com/Automattic/mongoose/issues/16278 ">#16278</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/15781 ">#15781</a>
<a href="https://github.com/AbdelrahmanHafez ">AbdelrahmanHafez</a></li>
<li>fix(schema): always pass raw string value to error validators, only
trim to 30 chars for maxlength validator <a
href="https://redirect.github.com/Automattic/mongoose/issues/16238 ">#16238</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/16236 ">#16236</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/15550 ">#15550</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/15571 ">#15571</a></li>
<li>types: add <code>$percentile</code> to TypeScript aggregation
expression types <a
href="https://redirect.github.com/Automattic/mongoose/issues/16290 ">#16290</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/16288 ">#16288</a></li>
<li>docs: update default pool sizes on createConnection() <a
href="https://redirect.github.com/Automattic/mongoose/issues/16295 ">#16295</a>
<a href="https://github.com/torbiak-samdesk ">torbiak-samdesk</a></li>
<li>docs: improve code block copy button behavior and sidebar scrolling
<a
href="https://redirect.github.com/Automattic/mongoose/issues/16294 ">#16294</a>
<a href="https://github.com/DraXx-Van ">DraXx-Van</a></li>
<li>docs: remove broken link to deleted schema example <a
href="https://redirect.github.com/Automattic/mongoose/issues/16297 ">#16297</a>
<a href="https://github.com/kaseken ">kaseken</a></li>
</ul>
<h1>8.24.0 / 2026-05-14</h1>
<ul>
<li>feat(aggregate): add pipelineForUnionWith() helper to allow reusing
pipelines with $unionWith in TypeScript <a
href="https://redirect.github.com/Automattic/mongoose/issues/16247 ">#16247</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/16041 ">#16041</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/16033 ">#16033</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/Automattic/mongoose/commit/d5dd19e1dae8dd70f39eae357357f63dcb54055e "><code>d5dd19e</code></a>
chore: release 8.24.1</li>
<li><a
href="https://github.com/Automattic/mongoose/commit/0c346a4047faccb2015f2fd6490e4bab5d249149 "><code>0c346a4</code></a>
fix(documentarray): reindex subdocs after reordering (<a
href="https://redirect.github.com/Automattic/mongoose/issues/16282 ">#16282</a>)</li>
<li><a
href="https://github.com/Automattic/mongoose/commit/550b8037a276accb242495b31e6d9446720bdd49 "><code>550b803</code></a>
fix(document): additional defensive checks in
Document.prototype.get()</li>
<li><a
href="https://github.com/Automattic/mongoose/commit/953d085bee5a16b5d6c5af33a156e6314d6d9a45 "><code>953d085</code></a>
fix(schema): only return own properties in schematype lookups</li>
<li><a
href="https://github.com/Automattic/mongoose/commit/1e1679f3193cf952edf40e3c07b91a7191ef9612 "><code>1e1679f</code></a>
types: use exactOptionalPropertyTypes in tests (<a
href="https://redirect.github.com/Automattic/mongoose/issues/16287 ">#16287</a>)</li>
<li><a
href="https://github.com/Automattic/mongoose/commit/051b095f8d4daff4bcc266668e4f293d53bffea7 "><code>051b095</code></a>
fix(clone): isolate cloned arrays from source documents (<a
href="https://redirect.github.com/Automattic/mongoose/issues/16281 ">#16281</a>)</li>
<li><a
href="https://github.com/Automattic/mongoose/commit/89ca7f2d432422fdacfceb9125a6a879cef8a7d8 "><code>89ca7f2</code></a>
chore: release 8.24.0</li>
<li><a
href="https://github.com/Automattic/mongoose/commit/6922aa4520a5b4082be0f243109b0a0b4978476d "><code>6922aa4</code></a>
Merge pull request <a
href="https://redirect.github.com/Automattic/mongoose/issues/16286 ">#16286</a>
from Automattic/vkarpov15/gh-16273-8x</li>
<li><a
href="https://github.com/Automattic/mongoose/commit/4295effda92d560cd5f5cdb0472c17697ddde927 "><code>4295eff</code></a>
types: handle compiling with exactOptionalPropertyTypes</li>
<li><a
href="https://github.com/Automattic/mongoose/commit/f712fdbbb400e76c305b9352ade4080094103f35 "><code>f712fdb</code></a>
Merge pull request <a
href="https://redirect.github.com/Automattic/mongoose/issues/16246 ">#16246</a>
from Automattic/vkarpov15/<a
href="https://redirect.github.com/Automattic/mongoose/issues/16034 ">gh-16034</a></li>
<li>Additional commits viewable in <a
href="https://github.com/Automattic/mongoose/compare/8.9.5...8.24.1 ">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~GitHub%20Actions ">GitHub Actions</a>, a new
releaser for mongoose since your current version.</p>
</details>
<br />
Updates `@babel/plugin-transform-modules-systemjs` from 7.23.9 to 7.29.8
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/babel/babel/releases ">@babel/plugin-transform-modules-systemjs's
releases</a>.</em></p>
<blockquote>
<h2>v7.29.8 (2026-07-31)</h2>
<h4>👓 Spec Compliance</h4>
<ul>
<li><code>babel-generator</code>, <code>babel-parser</code>,
<code>babel-plugin-transform-spread</code>, <code>babel-traverse</code>,
<code>babel-types</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/17871 ">#17871</a>
Disallow super call after new (<a
href="https://github.com/JLHwung "><code>@JLHwung</code></a>)</li>
</ul>
</li>
</ul>
<h4>🐛 Bug Fix</h4>
<ul>
<li><code>babel-generator</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/18046 ">#18046</a>
fix(generator): improve new callee parens check (<a
href="https://github.com/JLHwung "><code>@JLHwung</code></a>)</li>
</ul>
</li>
<li><code>babel-node</code>,
<code>babel-plugin-transform-modules-systemjs</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/18044 ">#18044</a>
fix(systemjs): support <code>__proto__</code> as an export name (<a
href="https://github.com/JLHwung "><code>@JLHwung</code></a>)</li>
</ul>
</li>
</ul>
<h4>Committers: 2</h4>
<ul>
<li>Huáng Jùnliàng (<a
href="https://github.com/JLHwung "><code>@JLHwung</code></a>)</li>
<li>Nicolò Ribaudo (<a
href="https://github.com/nicolo-ribaudo "><code>@nicolo-ribaudo</code></a>)</li>
</ul>
<h2>v7.29.7 (2026-05-25)</h2>
<p>Re-release all packages with npm provenance attestations</p>
<h2>v7.29.6 (2026-05-25)</h2>
<h4>🐛 Bug Fix</h4>
<ul>
<li><code>babel-generator</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/18014 ">#18014</a>
Catchup source map position in preserveFormat (<a
href="https://github.com/nicolo-ribaudo "><code>@nicolo-ribaudo</code></a>)</li>
</ul>
</li>
<li><code>babel-core</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/18001 ">#18001</a>
[7.x packport]Improve input source map handling (<a
href="https://github.com/JLHwung "><code>@JLHwung</code></a>)</li>
</ul>
</li>
<li><code>babel-core</code>, <code>babel-generator</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/17998 ">#17998</a>
Preserve original identifier names from input sourcemaps (<a
href="https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-systemjs/issues/17992 ">#17992</a>)
(<a href="https://github.com/Andarist "><code>@Andarist</code></a>)</li>
</ul>
</li>
</ul>
<h4>Committers: 3</h4>
<ul>
<li>Huáng Jùnliàng (<a
href="https://github.com/JLHwung "><code>@JLHwung</code></a>)</li>
<li>Mateusz Burzyński (<a
href="https://github.com/Andarist "><code>@Andarist</code></a>)</li>
<li>Nicolò Ribaudo (<a
href="https://github.com/nicolo-ribaudo "><code>@nicolo-ribaudo</code></a>)</li>
</ul>
<h2>v7.29.5 (2026-05-05)</h2>
<h4>🏠 Internal</h4>
<ul>
<li><code>babel-preset-env</code>
<ul>
<li>Update <code>@babel/*</code> dependencies</li>
</ul>
</li>
</ul>
<h2>v7.29.4 (2026-05-05)</h2>
<h4>🐛 Bug Fix</h4>
<ul>
<li><code>babel-plugin-transform-modules-systemjs</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/17974 ">#17974</a>
[7.x backport]fix(systemjs): improve module string name support (<a
href="https://github.com/JLHwung "><code>@JLHwung</code></a>)</li>
</ul>
</li>
</ul>
<h4>Committers: 1</h4>
<ul>
<li>Huáng Jùnliàng (<a
href="https://github.com/JLHwung "><code>@JLHwung</code></a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/babel/babel/commit/5de11ca9234379b78ef95df72aebbec93f28bf45 "><code>5de11ca</code></a>
v7.29.8</li>
<li><a
href="https://github.com/babel/babel/commit/f08d4342e1f189a56e7cee46e60a1817af96219e "><code>f08d434</code></a>
fix(systemjs): support <strong>proto</strong> as an export name (<a
href="https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-systemjs/issues/18044 ">#18044</a>)</li>
<li><a
href="https://github.com/babel/babel/commit/4fba7541180bf5f58256d8e358b544e3831ad090 "><code>4fba754</code></a>
v7.29.7</li>
<li><a
href="https://github.com/babel/babel/commit/a458f66074b97d54773db8159af673d23b26079b "><code>a458f66</code></a>
v7.29.4</li>
<li><a
href="https://github.com/babel/babel/commit/32ebd5aaf2526ddd176fd6a3d1e3dc594abdc8d9 "><code>32ebd5a</code></a>
[7.x backport]fix(systemjs): improve module string name support (<a
href="https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-systemjs/issues/17974 ">#17974</a>)</li>
<li><a
href="https://github.com/babel/babel/commit/aa8394e454337d118ac3d40bfa3ee1a3cb3f3ed2 "><code>aa8394e</code></a>
v7.29.0</li>
<li><a
href="https://github.com/babel/babel/commit/0053db620c05acf0036f593b5aaf4e372daa79d0 "><code>0053db6</code></a>
Update polyfill packages (<a
href="https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-systemjs/issues/17727 ">#17727</a>)</li>
<li><a
href="https://github.com/babel/babel/commit/61647ae2397c82c3c71f077b5ab109106a5cac0f "><code>61647ae</code></a>
v7.28.5</li>
<li><a
href="https://github.com/babel/babel/commit/a177d551adba99773f4ff00ea9bf46550def6132 "><code>a177d55</code></a>
[Babel 8] Use <code>t.traverseFast</code> to replace some
<code>path.traverse</code> (<a
href="https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-systemjs/issues/17518 ">#17518</a>)</li>
<li><a
href="https://github.com/babel/babel/commit/eebd3a06021c13d335b5b0bd79734df3abbea678 "><code>eebd3a0</code></a>
v7.27.1</li>
<li>Additional commits viewable in <a
href="https://github.com/babel/babel/commits/v7.29.8/packages/babel-plugin-transform-modules-systemjs ">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~GitHub%20Actions ">GitHub Actions</a>, a new
releaser for <code>@babel/plugin-transform-modules-systemjs</code>
since your current version.</p>
</details>
<br />
Updates `browserslist` from 4.23.0 to 4.29.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/browserslist/browserslist/releases ">browserslist's
releases</a>.</em></p>
<blockquote>
<h2>4.29.1</h2>
<ul>
<li>Fixed config name loading protection on Windows (by <a
href="https://github.com/oss-security-shop "><code>@oss-security-shop</code></a>).</li>
<li>Fixed case-insensitive negation queries (by <a
href="https://github.com/jakezwang "><code>@jakezwang</code></a>).</li>
<li>Fixed percentage and supports queries case-insensitive (by <a
href="https://github.com/wahidrizka "><code>@wahidrizka</code></a>).</li>
<li>Fixed old Node.js tests (by <a
href="https://github.com/aaron-belenky "><code>@aaron-belenky</code></a>).</li>
<li>Reduced code (by <a
href="https://github.com/charmander "><code>@charmander</code></a>).</li>
</ul>
<h2>4.29.0</h2>
<ul>
<li>Added query continuations across lines and array entries (by <a
href="https://github.com/fzlzjerry "><code>@fzlzjerry</code></a>).</li>
</ul>
<h2>4.28.9</h2>
<ul>
<li>Improve <code>or</code> parsing performance (by <a
href="https://github.com/NotAFlightRisk "><code>@NotAFlightRisk</code></a>).</li>
</ul>
<h2>4.28.8</h2>
<ul>
<li>Fixed <code>including kaios</code> in baseline queries (by <a
href="https://github.com/Jaybhade "><code>@Jaybhade</code></a>).</li>
</ul>
<h2>4.28.7</h2>
<ul>
<li>Improved parsing performance.</li>
<li>Fixed unbounded memory growth (by <a
href="https://github.com/alanturing881 "><code>@alanturing881</code></a>).</li>
<li>Fixed prototype write issue (by <a
href="https://github.com/alanturing881 "><code>@alanturing881</code></a>).</li>
</ul>
<h2>4.28.6</h2>
<ul>
<li>Fixed Electron version queries (by <a
href="https://github.com/spokodev "><code>@spokodev</code></a>).</li>
</ul>
<h2>4.28.5</h2>
<ul>
<li>Fixed <code>></code> and <code>>=</code> queries (by <a
href="https://github.com/spokodev "><code>@spokodev</code></a>).</li>
</ul>
<h2>4.28.4</h2>
<ul>
<li>Fixed <code>SyntaxError</code> regression of 4.28.3.</li>
</ul>
<h2>4.28.3</h2>
<ul>
<li>Fixed baseline query case-insensitivity (by <a
href="https://github.com/swwind "><code>@swwind</code></a>).</li>
</ul>
<h2>4.28.2</h2>
<ul>
<li>Fix prototype pollution (by <a
href="https://github.com/chluo1997 "><code>@chluo1997</code></a>).</li>
</ul>
<h2>4.28.1</h2>
<ul>
<li>Removed Baseline warning since we have it own warning.</li>
</ul>
<h2>4.27.0</h2>
<ul>
<li>Added <code>BROWSERSLIST_TRACE_WARNING</code> environment
variable.</li>
</ul>
<h2>4.26.3</h2>
<ul>
<li>Fixed <code>throwOnMissing</code> with <code>extends</code> quer...
_Description has been truncated_
2026-09-26 11:12:36 +10:00
dependabot[bot]
604f1ef4b6
chore(deps): bump the npm_and_yarn group across 1 directory with 12 updates
...
Bumps the npm_and_yarn group with 12 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
| [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core ) | `7.24.0` | `7.29.6` |
| [axios](https://github.com/axios/axios ) | `1.8.2` | `1.18.0` |
| [dompurify](https://github.com/cure53/DOMPurify ) | `3.2.4` | `3.4.13` |
| [postcss](https://github.com/postcss/postcss ) | `8.5.3` | `8.5.23` |
| [mongoose](https://github.com/Automattic/mongoose ) | `8.9.5` | `8.24.1` |
| [@babel/plugin-transform-modules-systemjs](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-systemjs ) | `7.23.9` | `7.29.8` |
| [browserslist](https://github.com/browserslist/browserslist ) | `4.23.0` | `4.29.1` |
| [engine.io](https://github.com/socketio/socket.io ) | `6.5.4` | `6.5.5` |
| [nanoid](https://github.com/ai/nanoid ) | `3.3.11` | `3.3.19` |
| [shell-quote](https://github.com/ljharb/shell-quote ) | `1.8.1` | `1.10.0` |
| [socket.io-parser](https://github.com/socketio/socket.io ) | `4.2.4` | `4.2.7` |
| [tmp](https://github.com/raszi/node-tmp ) | `0.2.1` | `0.2.7` |
Updates `@babel/core` from 7.24.0 to 7.29.6
- [Release notes](https://github.com/babel/babel/releases )
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md )
- [Commits](https://github.com/babel/babel/commits/v7.29.6/packages/babel-core )
Updates `axios` from 1.8.2 to 1.18.0
- [Release notes](https://github.com/axios/axios/releases )
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md )
- [Commits](https://github.com/axios/axios/compare/v1.8.2...v1.18.0 )
Updates `dompurify` from 3.2.4 to 3.4.13
- [Release notes](https://github.com/cure53/DOMPurify/releases )
- [Commits](https://github.com/cure53/DOMPurify/compare/3.2.4...3.4.13 )
Updates `postcss` from 8.5.3 to 8.5.23
- [Release notes](https://github.com/postcss/postcss/releases )
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md )
- [Commits](https://github.com/postcss/postcss/compare/8.5.3...8.5.23 )
Updates `mongoose` from 8.9.5 to 8.24.1
- [Release notes](https://github.com/Automattic/mongoose/releases )
- [Changelog](https://github.com/Automattic/mongoose/blob/master/CHANGELOG.md )
- [Commits](https://github.com/Automattic/mongoose/compare/8.9.5...8.24.1 )
Updates `@babel/plugin-transform-modules-systemjs` from 7.23.9 to 7.29.8
- [Release notes](https://github.com/babel/babel/releases )
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md )
- [Commits](https://github.com/babel/babel/commits/v7.29.8/packages/babel-plugin-transform-modules-systemjs )
Updates `browserslist` from 4.23.0 to 4.29.1
- [Release notes](https://github.com/browserslist/browserslist/releases )
- [Changelog](https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md )
- [Commits](https://github.com/browserslist/browserslist/compare/4.23.0...4.29.1 )
Updates `engine.io` from 6.5.4 to 6.5.5
- [Release notes](https://github.com/socketio/socket.io/releases )
- [Changelog](https://github.com/socketio/socket.io/blob/main/CHANGELOG.md )
- [Commits](https://github.com/socketio/socket.io/commits )
Updates `nanoid` from 3.3.11 to 3.3.19
- [Release notes](https://github.com/ai/nanoid/releases )
- [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md )
- [Commits](https://github.com/ai/nanoid/compare/3.3.11...3.3.19 )
Updates `shell-quote` from 1.8.1 to 1.10.0
- [Changelog](https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md )
- [Commits](https://github.com/ljharb/shell-quote/compare/v1.8.1...v1.10.0 )
Updates `socket.io-parser` from 4.2.4 to 4.2.7
- [Release notes](https://github.com/socketio/socket.io/releases )
- [Changelog](https://github.com/socketio/socket.io/blob/main/CHANGELOG.md )
- [Commits](https://github.com/socketio/socket.io/compare/socket.io-parser@4.2.4...socket.io-parser@4.2.7 )
Updates `tmp` from 0.2.1 to 0.2.7
- [Changelog](https://github.com/raszi/node-tmp/blob/master/CHANGELOG.md )
- [Commits](https://github.com/raszi/node-tmp/compare/v0.2.1...v0.2.7 )
---
updated-dependencies:
- dependency-name: "@babel/core"
dependency-version: 7.29.6
dependency-type: direct:development
dependency-group: npm_and_yarn
- dependency-name: axios
dependency-version: 1.18.0
dependency-type: direct:production
dependency-group: npm_and_yarn
- dependency-name: dompurify
dependency-version: 3.4.13
dependency-type: direct:production
dependency-group: npm_and_yarn
- dependency-name: postcss
dependency-version: 8.5.23
dependency-type: direct:development
dependency-group: npm_and_yarn
- dependency-name: mongoose
dependency-version: 8.24.1
dependency-type: direct:production
dependency-group: npm_and_yarn
- dependency-name: "@babel/plugin-transform-modules-systemjs"
dependency-version: 7.29.8
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: browserslist
dependency-version: 4.29.1
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: engine.io
dependency-version: 6.5.5
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: nanoid
dependency-version: 3.3.19
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: shell-quote
dependency-version: 1.10.0
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: socket.io-parser
dependency-version: 4.2.7
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: tmp
dependency-version: 0.2.7
dependency-type: indirect
dependency-group: npm_and_yarn
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-26 01:08:54 +00:00
Justin Lin
43a76c4952
chore(deps-dev): bump vite from 6.3.3 to 6.4.3 in the npm_and_yarn group across 1 directory ( #197 )
...
Bumps the npm_and_yarn group with 1 update in the / directory:
[vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite ).
Updates `vite` from 6.3.3 to 6.4.3
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/releases ">vite's
releases</a>.</em></p>
<blockquote>
<h2>v6.4.3</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v6.4.3/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v6.4.2</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v6.4.2/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/blob/v6.4.3/packages/vite/CHANGELOG.md ">vite's
changelog</a>.</em></p>
<blockquote>
<h2><!-- raw HTML omitted -->6.4.3 (2026-06-01)<!-- raw HTML omitted
--></h2>
<ul>
<li>fix: backport <a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22572 ">#22572</a>,
reject windows alternate paths (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22576 ">#22576</a>)
(<a
href="https://github.com/vitejs/vite/commit/96b0c10162e9c55485d922db2cfc6b8227cbc176 ">96b0c10</a>),
closes <a
href="https://redirect.github.com/vitejs/vite/issues/22572 ">#22572</a>
<a
href="https://redirect.github.com/vitejs/vite/issues/22576 ">#22576</a></li>
<li>fix(deps): backport <a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22571 ">#22571</a>,
reject UNC paths for launch-editor-middleware (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22575 ">#22575</a>)
(<a
href="https://github.com/vitejs/vite/commit/8fed5cf540c0d475266787f52072f258478cd42f ">8fed5cf</a>),
closes <a
href="https://redirect.github.com/vitejs/vite/issues/22571 ">#22571</a>
<a
href="https://redirect.github.com/vitejs/vite/issues/22575 ">#22575</a></li>
</ul>
<h2><!-- raw HTML omitted -->6.4.2 (2026-04-06)<!-- raw HTML omitted
--></h2>
<ul>
<li>fix: apply server.fs check to env transport (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22159 ">#22159</a>)
(<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22163 ">#22163</a>)
(<a
href="https://github.com/vitejs/vite/commit/fe28e47e9463e4c9619f94bfa06d2f8f1411b44b ">fe28e47</a>),
closes <a
href="https://redirect.github.com/vitejs/vite/issues/22159 ">#22159</a>
<a
href="https://redirect.github.com/vitejs/vite/issues/22163 ">#22163</a></li>
<li>fix: avoid path traversal with optimize deps sourcemap handler (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22161 ">#22161</a>)
(<a
href="https://github.com/vitejs/vite/commit/ca4da5d1fb45c9cfdce606aa30825095791b164b ">ca4da5d</a>),
closes <a
href="https://redirect.github.com/vitejs/vite/issues/22161 ">#22161</a></li>
</ul>
<h2><!-- raw HTML omitted -->6.4.1 (2025-10-20)<!-- raw HTML omitted
--></h2>
<ul>
<li>fix(dev): trim trailing slash before <code>server.fs.deny</code>
check (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/20968 ">#20968</a>)
(<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/20969 ">#20969</a>)
(<a
href="https://github.com/vitejs/vite/commit/1114b5d7ea03e26572708715343bec69db4536e8 ">1114b5d</a>),
closes <a
href="https://redirect.github.com/vitejs/vite/issues/20968 ">#20968</a>
<a
href="https://redirect.github.com/vitejs/vite/issues/20969 ">#20969</a></li>
</ul>
<h2>6.4.0 (2025-10-15)</h2>
<ul>
<li>feat: allow passing down resolved config to vite's createServer (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/20932 ">#20932</a>)
(<a
href="https://github.com/vitejs/vite/commit/ca6455ee9eb6111a9caa9810506a1b9ac96a520a ">ca6455e</a>),
closes <a
href="https://redirect.github.com/vitejs/vite/issues/20932 ">#20932</a></li>
</ul>
<h2><!-- raw HTML omitted -->6.3.7 (2025-10-14)<!-- raw HTML omitted
--></h2>
<ul>
<li>fix(esbuild): inject esbuild helpers correctly for esbuild 0.25.9+
(<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/20940 ">#20940</a>)
(<a
href="https://github.com/vitejs/vite/commit/c59a222aa584c087cfe710173de1b9ecb597a3ff ">c59a222</a>),
closes <a
href="https://redirect.github.com/vitejs/vite/issues/20940 ">#20940</a></li>
</ul>
<h2><!-- raw HTML omitted -->6.3.6 (2025-09-08)<!-- raw HTML omitted
--></h2>
<ul>
<li>fix: apply <code>fs.strict</code> check to HTML files (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/20736 ">#20736</a>)
(<a
href="https://github.com/vitejs/vite/commit/0ab19ea9fcb66f544328f442cf6e70f7c0528d5f ">0ab19ea</a>),
closes <a
href="https://redirect.github.com/vitejs/vite/issues/20736 ">#20736</a></li>
<li>fix: upgrade sirv to 3.0.2 (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/20735 ">#20735</a>)
(<a
href="https://github.com/vitejs/vite/commit/e11d24008b97d4ca731ecc1a3b95260a6d12e7e0 ">e11d240</a>),
closes <a
href="https://redirect.github.com/vitejs/vite/issues/20735 ">#20735</a></li>
<li>test: detect ts support via <code>process.features</code> (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/20544 ">#20544</a>)
(<a
href="https://github.com/vitejs/vite/commit/7d9922972b62329d37a71d4da5a4a382d0bf8a79 ">7d99229</a>),
closes <a
href="https://redirect.github.com/vitejs/vite/issues/20544 ">#20544</a></li>
</ul>
<h2><!-- raw HTML omitted -->6.3.5 (2025-05-05)<!-- raw HTML omitted
--></h2>
<ul>
<li>fix(ssr): handle uninitialized export access as undefined (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19959 ">#19959</a>)
(<a
href="https://github.com/vitejs/vite/commit/fd38d076fe2455aac1e00a7b15cd51159bf12bb5 ">fd38d07</a>),
closes <a
href="https://redirect.github.com/vitejs/vite/issues/19959 ">#19959</a></li>
</ul>
<h2><!-- raw HTML omitted -->6.3.4 (2025-04-30)<!-- raw HTML omitted
--></h2>
<ul>
<li>fix: check static serve file inside sirv (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19965 ">#19965</a>)
(<a
href="https://github.com/vitejs/vite/commit/c22c43de612eebb6c182dd67850c24e4fab8cacb ">c22c43d</a>),
closes <a
href="https://redirect.github.com/vitejs/vite/issues/19965 ">#19965</a></li>
<li>fix(optimizer): return plain object when using <code>require</code>
to import externals in optimized dependenci (<a
href="https://github.com/vitejs/vite/commit/efc5eab253419fde0a6a48b8d2f233063d6a9643 ">efc5eab</a>),
closes <a
href="https://redirect.github.com/vitejs/vite/issues/19940 ">#19940</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vitejs/vite/commit/6c2c881f15495738ff03bc1d67cc052c07e0cac4 "><code>6c2c881</code></a>
release: v6.4.3</li>
<li><a
href="https://github.com/vitejs/vite/commit/96b0c10162e9c55485d922db2cfc6b8227cbc176 "><code>96b0c10</code></a>
fix: backport <a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22572 ">#22572</a>,
reject windows alternate paths (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22576 ">#22576</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/8fed5cf540c0d475266787f52072f258478cd42f "><code>8fed5cf</code></a>
fix(deps): backport <a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22571 ">#22571</a>,
reject UNC paths for launch-editor-middleware (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/2 ">#2</a>...</li>
<li><a
href="https://github.com/vitejs/vite/commit/6b3fad02abd550bd7b79934ff92c58dbd7f33045 "><code>6b3fad0</code></a>
release: v6.4.2</li>
<li><a
href="https://github.com/vitejs/vite/commit/ca4da5d1fb45c9cfdce606aa30825095791b164b "><code>ca4da5d</code></a>
fix: avoid path traversal with optimize deps sourcemap handler (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22161 ">#22161</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/fe28e47e9463e4c9619f94bfa06d2f8f1411b44b "><code>fe28e47</code></a>
fix: apply server.fs check to env transport (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22159 ">#22159</a>)
(<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22163 ">#22163</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/5487f4f641f70c47ea05fd101a4319897df048b3 "><code>5487f4f</code></a>
release: v6.4.1</li>
<li><a
href="https://github.com/vitejs/vite/commit/1114b5d7ea03e26572708715343bec69db4536e8 "><code>1114b5d</code></a>
fix(dev): trim trailing slash before <code>server.fs.deny</code> check
(<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/20968 ">#20968</a>)
(<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/20969 ">#20969</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/f12697c0f64b9a37196b9ab218a0911829d5b103 "><code>f12697c</code></a>
release: v6.4.0</li>
<li><a
href="https://github.com/vitejs/vite/commit/ca6455ee9eb6111a9caa9810506a1b9ac96a520a "><code>ca6455e</code></a>
feat: allow passing down resolved config to vite's createServer (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/20932 ">#20932</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/vitejs/vite/commits/v6.4.3/packages/vite ">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~GitHub%20Actions ">GitHub Actions</a>, a new
releaser for vite since your current version.</p>
</details>
<br />
2026-09-26 11:03:42 +10:00
dependabot[bot]
492f27cf29
chore(deps-dev): bump vite in the npm_and_yarn group across 1 directory
...
Bumps the npm_and_yarn group with 1 update in the / directory: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite ).
Updates `vite` from 6.3.3 to 6.4.3
- [Release notes](https://github.com/vitejs/vite/releases )
- [Changelog](https://github.com/vitejs/vite/blob/v6.4.3/packages/vite/CHANGELOG.md )
- [Commits](https://github.com/vitejs/vite/commits/v6.4.3/packages/vite )
---
updated-dependencies:
- dependency-name: vite
dependency-version: 6.3.4
dependency-type: direct:development
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-26 00:59:48 +00:00
Justin Lin
cf5e8a1f24
feat: implement multilingual feature for UI ( #202 )
2026-09-26 10:57:20 +10:00
Justin Lin
7b16722e55
fix: move translation button to rightmost
2026-09-26 10:51:54 +10:00
Justin Lin
a037c7d512
docs: refine Windows setup instructions ( #201 )
2026-09-26 10:35:48 +10:00
neilchen0812
c9b04682c9
fix(i18n): correct key name for landing navbar
2026-09-26 00:09:43 +09:30
neilchen0812
03fbae616d
feat(i18n): add localized content for game page
2026-09-22 02:33:53 +09:30
neilchen0812
87df12ac85
feat(i18n): add localized content for leaderboard
2026-09-22 01:31:48 +09:30
neilchen0812
10c8dd5f0e
feat(i18n): add localized content for quest map
2026-09-22 01:22:25 +09:30
neilchen0812
4a43df9dd9
feat(i18n): add localized content for game navbar
2026-09-22 00:57:39 +09:30
neilchen0812
013a5acaa7
feat(i18n): add localized content for authentication error
2026-09-21 22:49:27 +09:30
neilchen0812
bd1d5af699
feat(i18n): add localized content for authentication form
2026-09-21 22:09:25 +09:30
neilchen0812
e4da258a8d
feat(i18n): add localized content for landing page
2026-09-21 03:17:30 +09:30
neilchen0812
4aeba17a1d
feat(i18n): add landing page navbar translations for en and zh-tw
2026-09-21 01:55:43 +09:30
neilchen0812
0fddc05443
feat(i18n): implement language selector
2026-09-21 01:49:48 +09:30
neilchen0812
a3c69764c8
feat(i18n): add frontend internationalization setup
2026-09-20 20:42:26 +09:30
neilchen0812
f0a279fa83
docs: refine Windows setup instructions
2026-09-20 16:57:32 +09:30
Justin Lin
f1038e40f4
fix: analytics start path
2026-02-27 20:59:21 +11:00
Justin Lin
c5fb65db51
feat: add IMAGE_TAG variables in production compose
2026-02-27 20:59:21 +11:00
Justin Lin
d4c67a7d81
fix: forward headers to backend to setup cookies properly
2026-02-27 20:43:53 +11:00
Justin Lin
0a1973f220
Feat terminal service ( #196 )
2026-02-27 16:06:58 +11:00
Justin Lin
776ef1162a
chore: change console log to logger
2026-02-27 16:04:27 +11:00
Justin Lin
5b7bf0794c
chore: Move open terminal in new tab to terminal component
2026-02-27 16:02:28 +11:00
Justin Lin
ab4d06498a
chore: update traefik version
2026-02-27 16:01:43 +11:00
Justin Lin
d9fc465731
feat: remove container on finish
2025-05-09 16:46:13 +08:00
Justin Lin
dca6861940
fix: remove writng error user terminal on disconnecting
2025-05-09 16:36:53 +08:00
Justin Lin
8161849504
feat: use traefik to proxy in production
2025-05-09 16:36:21 +08:00
Justin Lin
3c2dfcf322
refactor: update Dockerfile paths for analytics service
2025-05-05 19:55:41 +08:00
Justin Lin
0341efdd50
docs: update README with TLDR section and improve development instructions
2025-05-05 19:55:41 +08:00
Justin Lin
aba492ff43
fix: reset terminal on connection and improve error handling
2025-05-05 19:55:41 +08:00
Justin Lin
c2566cf3dd
fix: change dev port of traefik to 8000
2025-05-05 19:55:41 +08:00
Justin Lin
307af61726
refactor: remove generating keypair
2025-05-05 19:55:41 +08:00
Justin Lin
740cbcecb4
refactor: move analytics into services directory
2025-05-05 19:55:40 +08:00
Justin Lin
e43cbe26ce
refactor: remove deprecated container package
2025-05-05 19:55:40 +08:00
Justin Lin
95c4fb71ae
feat: handle command hooks
...
feat: handle copy
feat: handle remove
feat: handle move and home ~ path
refactor: improve error handling in cmd-hook
feat: handlePwd
2025-05-05 19:55:40 +08:00
Justin Lin
d755822908
chore: update go.mod to remove unnecessary indirect dependencies
2025-05-05 19:55:40 +08:00
Justin Lin
372378021d
feat: add timout settings for reconnectin websocket
2025-05-05 19:55:40 +08:00
Justin Lin
63e36c1c98
fix: reduce size of quest image by removing unnecessary apt cache
2025-05-05 19:55:40 +08:00
Justin Lin
2f7845e63e
fix: write echo start on starting
2025-05-05 19:55:40 +08:00
Justin Lin
156abc044a
refactor: clean up unused code
2025-05-05 19:55:40 +08:00
Justin Lin
21ff710f83
fix: cannot backspace in terminal
2025-05-05 19:55:40 +08:00
Justin Lin
fb863ba030
fix: make quest image building process cleaner
2025-05-05 19:55:40 +08:00
Justin Lin
c7e6d31b9c
feat: connect frontend terminal to terminal service
...
fix: use ReconnectWebSocket to make the connection more stable
fix: typescript error on importing css in vue
2025-05-05 19:55:35 +08:00
Justin Lin
9c9456693d
feat: handle dev server proxy by traefik
2025-05-05 19:54:35 +08:00
Justin Lin
5e81db2759
feat: connect terminal service to backend
...
feat: put terminal service into container
refactor: separate main into terminal and websocket
feat: create zsh using commander in home
feat: pass backendUrl to container
feat: pass token to ws server to cmd-hook
feat: gen terminal access token for frontend
feat: success to connect through traefik
fix: handle invalid jwt
feat: connect to session container via traefik
2025-05-05 19:53:33 +08:00
Justin Lin
0b08a9a5d9
feat: init cmd-hook and move terminal-service to services directory
...
feat: put cmd-hook in container
feat: cmd-hook request type, auto restart setup
feat: handle ls
2025-05-05 19:51:06 +08:00
Justin Lin
58b6448c3d
feat: init terminal-service
...
feat: make interactive ws terminal
2025-05-05 19:50:34 +08:00
Justin Lin
3b77d91796
Quest: remove unnecessary ls-stages ( #195 )
...
* quest: remove ls-stages in create
* feat: prevent throwing errors when failed to copy files
* feat: log new command in dev mode
* quest: copy
* quest: mv
* quest: rm
* quest: execute. Add many exceptions
* feat: pwd discovers parent folders
2025-04-30 15:01:25 +08:00
Justin Lin
f0a09ac4d9
Feat filegraph ( #194 )
...
* feat: update filegraph on touch command
* feat: update filegraph on mkdir
* feat: add different parsing opts for each command
* refactor: replace axios with fetch. put handleCommand to a new file
* feat: add config for mounting cli in dev stage
* refactor: clean up unused validators
* feat: add command handler for copy files. reuse resolvePath function
* feat: add rm handler, support specific files deletion. Glob not supported yet
* feat: handle discover cases that the folder is actually empty
* feat: handle discover empty folder better and support rmdir
* feat: handle mv command
* refactor: remove unused console logs
2025-04-29 20:40:02 +08:00
Justin Lin
a732c1d119
chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates ( #193 )
...
Bumps the npm_and_yarn group with 2 updates in the / directory:
[braces](https://github.com/micromatch/braces ) and
[nanoid](https://github.com/ai/nanoid ).
Updates `braces` from 3.0.2 to 3.0.3
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/micromatch/braces/commit/74b2db2938fad48a2ea54a9c8bf27a37a62c350d "><code>74b2db2</code></a>
3.0.3</li>
<li><a
href="https://github.com/micromatch/braces/commit/88f1429a0f47e1dd3813de35211fc97ffda27f9e "><code>88f1429</code></a>
update eslint. lint, fix unit tests.</li>
<li><a
href="https://github.com/micromatch/braces/commit/415d660c3002d1ab7e63dbf490c9851da80596ff "><code>415d660</code></a>
Snyk js braces 6838727 (<a
href="https://redirect.github.com/micromatch/braces/issues/40 ">#40</a>)</li>
<li><a
href="https://github.com/micromatch/braces/commit/190510f79db1adf21d92798b0bb6fccc1f72c9d6 "><code>190510f</code></a>
fix tests, skip 1 test in test/braces.expand</li>
<li><a
href="https://github.com/micromatch/braces/commit/716eb9f12d820b145a831ad678618731927e8856 "><code>716eb9f</code></a>
readme bump</li>
<li><a
href="https://github.com/micromatch/braces/commit/a5851e57f45c3431a94d83fc565754bc10f5bbc3 "><code>a5851e5</code></a>
Merge pull request <a
href="https://redirect.github.com/micromatch/braces/issues/37 ">#37</a>
from coderaiser/fix/vulnerability</li>
<li><a
href="https://github.com/micromatch/braces/commit/2092bd1fb108d2c59bd62e243b70ad98db961538 "><code>2092bd1</code></a>
feature: braces: add maxSymbols (<a
href="https://github.com/micromatch/braces/issues/ ">https://github.com/micromatch/braces/issues/ </a>...</li>
<li><a
href="https://github.com/micromatch/braces/commit/9f5b4cf47329351bcb64287223ffb6ecc9a5e6d3 "><code>9f5b4cf</code></a>
fix: vulnerability (<a
href="https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727 ">https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727 </a>)</li>
<li><a
href="https://github.com/micromatch/braces/commit/98414f9f1fabe021736e26836d8306d5de747e0d "><code>98414f9</code></a>
remove funding file</li>
<li><a
href="https://github.com/micromatch/braces/commit/665ab5d561c017a38ba7aafd92cc6655b91d8c14 "><code>665ab5d</code></a>
update keepEscaping doc (<a
href="https://redirect.github.com/micromatch/braces/issues/27 ">#27</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/micromatch/braces/compare/3.0.2...3.0.3 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `nanoid` from 3.3.7 to 3.3.11
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/ai/nanoid/releases ">nanoid's
releases</a>.</em></p>
<blockquote>
<h2>3.3.11</h2>
<ul>
<li>Fixed React Native support.</li>
</ul>
<h2>3.3.10</h2>
<ul>
<li>Fixed React Native support (by <a
href="https://github.com/steida "><code>@steida</code></a>).</li>
</ul>
<h2>3.3.9</h2>
<ul>
<li>Reduced npm package size.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/ai/nanoid/blob/main/CHANGELOG.md ">nanoid's
changelog</a>.</em></p>
<blockquote>
<h2>3.3.11</h2>
<ul>
<li>Fixed React Native support.</li>
</ul>
<h2>3.3.10</h2>
<ul>
<li>Fixed React Native support (by <a
href="https://github.com/steida "><code>@steida</code></a>).</li>
</ul>
<h2>3.3.9</h2>
<ul>
<li>Reduced npm package size.</li>
</ul>
<h2>3.3.8</h2>
<ul>
<li>Fixed a way to break Nano ID by passing non-integer size (by <a
href="https://github.com/myndzi "><code>@myndzi</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/ai/nanoid/commit/37289ceee51a3194a1f121a1e5d2bbb864076b74 "><code>37289ce</code></a>
Release 3.3.11 version</li>
<li><a
href="https://github.com/ai/nanoid/commit/23690b77719ec8043c2509d28c1d74b0e2295b75 "><code>23690b7</code></a>
Fix CI</li>
<li><a
href="https://github.com/ai/nanoid/commit/c147962de7f5da3311a0e731030a28f49c5266a3 "><code>c147962</code></a>
Fix RN support</li>
<li><a
href="https://github.com/ai/nanoid/commit/a83734e28fa071f51fe3614a5fb891f08a4b91b2 "><code>a83734e</code></a>
Move to manually ESM/CJS dual package</li>
<li><a
href="https://github.com/ai/nanoid/commit/bb12e8a6f9c37ebe0b5ff2c697b8f9dcf34c8948 "><code>bb12e8a</code></a>
Release 3.3.10 version</li>
<li><a
href="https://github.com/ai/nanoid/commit/8f44264cd724080447f40620974163f1daca4612 "><code>8f44264</code></a>
Fix Expo support</li>
<li><a
href="https://github.com/ai/nanoid/commit/adf9b0c05eeeebbbf391c16bbd93da2fc275e235 "><code>adf9b0c</code></a>
Release 3.3.9 version</li>
<li><a
href="https://github.com/ai/nanoid/commit/1c6f08825b4f17c4462bd1c19dbc3f1c5626b76f "><code>1c6f088</code></a>
Remove dev file from npm package</li>
<li><a
href="https://github.com/ai/nanoid/commit/3044cd5e73f4cf31795f61f6e6b961c8c0a5c744 "><code>3044cd5</code></a>
Release 3.3.8 version</li>
<li><a
href="https://github.com/ai/nanoid/commit/4fe34959c34e5b3573889ed4f24fe91d1d3e7231 "><code>4fe3495</code></a>
Update size limit</li>
<li>Additional commits viewable in <a
href="https://github.com/ai/nanoid/compare/3.3.7...3.3.11 ">compare
view</a></li>
</ul>
</details>
<br />
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/linux-odyssey/linux-odyssey/network/alerts ).
</details>
2025-04-28 00:14:54 +08:00
dependabot[bot]
da473ceb8f
chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates
...
Bumps the npm_and_yarn group with 2 updates in the / directory: [braces](https://github.com/micromatch/braces ) and [nanoid](https://github.com/ai/nanoid ).
Updates `braces` from 3.0.2 to 3.0.3
- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md )
- [Commits](https://github.com/micromatch/braces/compare/3.0.2...3.0.3 )
Updates `nanoid` from 3.3.7 to 3.3.11
- [Release notes](https://github.com/ai/nanoid/releases )
- [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md )
- [Commits](https://github.com/ai/nanoid/compare/3.3.7...3.3.11 )
---
updated-dependencies:
- dependency-name: braces
dependency-version: 3.0.3
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: nanoid
dependency-version: 3.3.11
dependency-type: indirect
dependency-group: npm_and_yarn
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-04-27 09:04:42 +00:00
Justin Lin
01d60e259c
chore(deps): bump mongoose from 8.1.3 to 8.9.5 ( #185 )
...
Bumps [mongoose](https://github.com/Automattic/mongoose ) from 8.1.3 to
8.9.5.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/Automattic/mongoose/releases ">mongoose's
releases</a>.</em></p>
<blockquote>
<h1>8.9.5 / 2025-01-13</h1>
<ul>
<li>fix: disallow nested $where in populate match</li>
<li>fix(schema): handle bitwise operators on Int32 <a
href="https://redirect.github.com/Automattic/mongoose/issues/15176 ">#15176</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/15170 ">#15170</a></li>
</ul>
<h1>8.9.4 / 2025-01-09</h1>
<ul>
<li>fix(document): fix document not applying manual populate when using
a function in schema.options.ref <a
href="https://redirect.github.com/Automattic/mongoose/issues/15138 ">#15138</a>
<a href="https://github.com/IchirokuXVI ">IchirokuXVI</a></li>
<li>fix(model): make Model.validate() static correctly cast document
arrays <a
href="https://redirect.github.com/Automattic/mongoose/issues/15169 ">#15169</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/15164 ">#15164</a></li>
<li>fix(model): allow passing validateBeforeSave option to bulkSave() to
skip validation <a
href="https://redirect.github.com/Automattic/mongoose/issues/15161 ">#15161</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/15156 ">#15156</a></li>
<li>fix(schema): allow multiple self-referencing discriminator schemas
using Schema.prototype.discriminator <a
href="https://redirect.github.com/Automattic/mongoose/issues/15142 ">#15142</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/15120 ">#15120</a></li>
<li>types: avoid BufferToBinary<> wiping lean types when passed to
generic functions <a
href="https://redirect.github.com/Automattic/mongoose/issues/15160 ">#15160</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/15158 ">#15158</a></li>
<li>docs: fix <code> in header ids <a
href="https://redirect.github.com/Automattic/mongoose/issues/15159 ">#15159</a></li>
<li>docs: fix header in field-level-encryption.md <a
href="https://redirect.github.com/Automattic/mongoose/issues/15137 ">#15137</a>
<a href="https://github.com/damieng ">damieng</a></li>
</ul>
<h1>8.9.3 / 2024-12-30</h1>
<ul>
<li>fix(schema): make duplicate index error a warning for now to prevent
blocking upgrading <a
href="https://redirect.github.com/Automattic/mongoose/issues/15135 ">#15135</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/15112 ">#15112</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/15109 ">#15109</a></li>
<li>fix(model): handle document array paths set to non-array values in
Model.castObject() <a
href="https://redirect.github.com/Automattic/mongoose/issues/15124 ">#15124</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/15075 ">#15075</a></li>
<li>fix(document): avoid using childSchemas.path for compatibility with
pre-Mongoose-8.8 schemas <a
href="https://redirect.github.com/Automattic/mongoose/issues/15131 ">#15131</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/15071 ">#15071</a></li>
<li>fix(model): avoid throwing unnecessary error if updateOne() returns
null in save() <a
href="https://redirect.github.com/Automattic/mongoose/issues/15126 ">#15126</a></li>
<li>perf(cursor): clear the stack every time if using populate with
batchSize to avoid stack overflows with large docs <a
href="https://redirect.github.com/Automattic/mongoose/issues/15136 ">#15136</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/10449 ">#10449</a></li>
<li>types: make BufferToBinary avoid Document instances <a
href="https://redirect.github.com/Automattic/mongoose/issues/15123 ">#15123</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/15122 ">#15122</a></li>
<li>types(model+query): avoid stripping out virtuals when calling
populate with paths generic <a
href="https://redirect.github.com/Automattic/mongoose/issues/15132 ">#15132</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/15111 ">#15111</a></li>
<li>types(schema): add missing removeIndex <a
href="https://redirect.github.com/Automattic/mongoose/issues/15134 ">#15134</a></li>
<li>types: add cleanIndexes() to IndexManager interface <a
href="https://redirect.github.com/Automattic/mongoose/issues/15127 ">#15127</a></li>
<li>docs: move search endpoint to netlify <a
href="https://redirect.github.com/Automattic/mongoose/issues/15119 ">#15119</a></li>
</ul>
<h1>8.9.2 / 2024-12-19</h1>
<ul>
<li>fix(schema): avoid throwing duplicate index error if index spec keys
have different order or index has a custom name <a
href="https://redirect.github.com/Automattic/mongoose/issues/15112 ">#15112</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/15109 ">#15109</a></li>
<li>fix(map): clean modified subpaths when overwriting values in map of
subdocs <a
href="https://redirect.github.com/Automattic/mongoose/issues/15114 ">#15114</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/15108 ">#15108</a></li>
<li>fix(aggregate): pull session from transaction local storage for
aggregation cursors <a
href="https://redirect.github.com/Automattic/mongoose/issues/15094 ">#15094</a>
<a href="https://github.com/IchirokuXVI ">IchirokuXVI</a></li>
<li>types: correctly handle union types in BufferToBinary and related
helpers <a
href="https://redirect.github.com/Automattic/mongoose/issues/15103 ">#15103</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/15102 ">#15102</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/15057 ">#15057</a></li>
<li>types: add UUID to RefType <a
href="https://redirect.github.com/Automattic/mongoose/issues/15115 ">#15115</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/15101 ">#15101</a></li>
<li>docs: remove link to Mongoose 5.x docs from dropdown <a
href="https://redirect.github.com/Automattic/mongoose/issues/15116 ">#15116</a></li>
<li>docs(connection+document+model): remove remaining references to
remove(), clarify that deleteOne() does not execute until then() or
exec() <a
href="https://redirect.github.com/Automattic/mongoose/issues/15113 ">#15113</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/15107 ">#15107</a></li>
</ul>
<h1>8.9.1 / 2024-12-16</h1>
<ul>
<li>fix(connection): remove heartbeat check in load balanced mode <a
href="https://redirect.github.com/Automattic/mongoose/issues/15089 ">#15089</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/15042 ">#15042</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/14812 ">#14812</a></li>
<li>fix(discriminator): gather childSchemas when creating discriminator
to ensure $getAllSubdocs() can properly get all subdocs <a
href="https://redirect.github.com/Automattic/mongoose/issues/15099 ">#15099</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/15088 ">#15088</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/15092 ">#15092</a></li>
<li>fix(model): handle discriminators in castObject() <a
href="https://redirect.github.com/Automattic/mongoose/issues/15096 ">#15096</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/15075 ">#15075</a></li>
<li>fix(schema): throw error if duplicate index definition using unique
in schema path and subsequent .index() call <a
href="https://redirect.github.com/Automattic/mongoose/issues/15093 ">#15093</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/15056 ">#15056</a></li>
<li>fix: mark documents that are populated using hydratedPopulatedDocs
option as populated in top-level doc <a
href="https://redirect.github.com/Automattic/mongoose/issues/15080 ">#15080</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/15048 ">#15048</a></li>
<li>fix(document+schema): improve error message for get() on invalid
path <a
href="https://redirect.github.com/Automattic/mongoose/issues/15098 ">#15098</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/15071 ">#15071</a></li>
<li>docs: remove more callback doc references & some small other
changes <a
href="https://redirect.github.com/Automattic/mongoose/issues/15095 ">#15095</a></li>
</ul>
<h1>8.9.0 / 2024-12-13</h1>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/Automattic/mongoose/blob/master/CHANGELOG.md ">mongoose's
changelog</a>.</em></p>
<blockquote>
<h1>8.9.5 / 2025-01-13</h1>
<ul>
<li>fix: disallow nested $where in populate match CVE-2025-23061</li>
<li>fix(schema): handle bitwise operators on Int32 <a
href="https://redirect.github.com/Automattic/mongoose/issues/15176 ">#15176</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/15170 ">#15170</a></li>
</ul>
<h1>7.8.4 / 2025-01-13</h1>
<ul>
<li>fix: disallow nested $where in populate match CVE-2025-23061</li>
</ul>
<h1>6.13.6 / 2025-01-13</h1>
<ul>
<li>fix: disallow nested $where in populate match CVE-2025-23061</li>
</ul>
<h1>8.9.4 / 2025-01-09</h1>
<ul>
<li>fix(document): fix document not applying manual populate when using
a function in schema.options.ref <a
href="https://redirect.github.com/Automattic/mongoose/issues/15138 ">#15138</a>
<a href="https://github.com/IchirokuXVI ">IchirokuXVI</a></li>
<li>fix(model): make Model.validate() static correctly cast document
arrays <a
href="https://redirect.github.com/Automattic/mongoose/issues/15169 ">#15169</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/15164 ">#15164</a></li>
<li>fix(model): allow passing validateBeforeSave option to bulkSave() to
skip validation <a
href="https://redirect.github.com/Automattic/mongoose/issues/15161 ">#15161</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/15156 ">#15156</a></li>
<li>fix(schema): allow multiple self-referencing discriminator schemas
using Schema.prototype.discriminator <a
href="https://redirect.github.com/Automattic/mongoose/issues/15142 ">#15142</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/15120 ">#15120</a></li>
<li>types: avoid BufferToBinary<> wiping lean types when passed to
generic functions <a
href="https://redirect.github.com/Automattic/mongoose/issues/15160 ">#15160</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/15158 ">#15158</a></li>
<li>docs: fix <code><code></code> in header ids <a
href="https://redirect.github.com/Automattic/mongoose/issues/15159 ">#15159</a></li>
<li>docs: fix header in field-level-encryption.md <a
href="https://redirect.github.com/Automattic/mongoose/issues/15137 ">#15137</a>
<a href="https://github.com/damieng ">damieng</a></li>
</ul>
<h1>8.9.3 / 2024-12-30</h1>
<ul>
<li>fix(schema): make duplicate index error a warning for now to prevent
blocking upgrading <a
href="https://redirect.github.com/Automattic/mongoose/issues/15135 ">#15135</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/15112 ">#15112</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/15109 ">#15109</a></li>
<li>fix(model): handle document array paths set to non-array values in
Model.castObject() <a
href="https://redirect.github.com/Automattic/mongoose/issues/15124 ">#15124</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/15075 ">#15075</a></li>
<li>fix(document): avoid using childSchemas.path for compatibility with
pre-Mongoose-8.8 schemas <a
href="https://redirect.github.com/Automattic/mongoose/issues/15131 ">#15131</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/15071 ">#15071</a></li>
<li>fix(model): avoid throwing unnecessary error if updateOne() returns
null in save() <a
href="https://redirect.github.com/Automattic/mongoose/issues/15126 ">#15126</a></li>
<li>perf(cursor): clear the stack every time if using populate with
batchSize to avoid stack overflows with large docs <a
href="https://redirect.github.com/Automattic/mongoose/issues/15136 ">#15136</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/10449 ">#10449</a></li>
<li>types: make BufferToBinary avoid Document instances <a
href="https://redirect.github.com/Automattic/mongoose/issues/15123 ">#15123</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/15122 ">#15122</a></li>
<li>types(model+query): avoid stripping out virtuals when calling
populate with paths generic <a
href="https://redirect.github.com/Automattic/mongoose/issues/15132 ">#15132</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/15111 ">#15111</a></li>
<li>types(schema): add missing removeIndex <a
href="https://redirect.github.com/Automattic/mongoose/issues/15134 ">#15134</a></li>
<li>types: add cleanIndexes() to IndexManager interface <a
href="https://redirect.github.com/Automattic/mongoose/issues/15127 ">#15127</a></li>
<li>docs: move search endpoint to netlify <a
href="https://redirect.github.com/Automattic/mongoose/issues/15119 ">#15119</a></li>
</ul>
<h1>8.9.2 / 2024-12-19</h1>
<ul>
<li>fix(schema): avoid throwing duplicate index error if index spec keys
have different order or index has a custom name <a
href="https://redirect.github.com/Automattic/mongoose/issues/15112 ">#15112</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/15109 ">#15109</a></li>
<li>fix(map): clean modified subpaths when overwriting values in map of
subdocs <a
href="https://redirect.github.com/Automattic/mongoose/issues/15114 ">#15114</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/15108 ">#15108</a></li>
<li>fix(aggregate): pull session from transaction local storage for
aggregation cursors <a
href="https://redirect.github.com/Automattic/mongoose/issues/15094 ">#15094</a>
<a href="https://github.com/IchirokuXVI ">IchirokuXVI</a></li>
<li>types: correctly handle union types in BufferToBinary and related
helpers <a
href="https://redirect.github.com/Automattic/mongoose/issues/15103 ">#15103</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/15102 ">#15102</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/15057 ">#15057</a></li>
<li>types: add UUID to RefType <a
href="https://redirect.github.com/Automattic/mongoose/issues/15115 ">#15115</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/15101 ">#15101</a></li>
<li>docs: remove link to Mongoose 5.x docs from dropdown <a
href="https://redirect.github.com/Automattic/mongoose/issues/15116 ">#15116</a></li>
<li>docs(connection+document+model): remove remaining references to
remove(), clarify that deleteOne() does not execute until then() or
exec() <a
href="https://redirect.github.com/Automattic/mongoose/issues/15113 ">#15113</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/15107 ">#15107</a></li>
</ul>
<h1>8.9.1 / 2024-12-16</h1>
<ul>
<li>fix(connection): remove heartbeat check in load balanced mode <a
href="https://redirect.github.com/Automattic/mongoose/issues/15089 ">#15089</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/15042 ">#15042</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/14812 ">#14812</a></li>
<li>fix(discriminator): gather childSchemas when creating discriminator
to ensure $getAllSubdocs() can properly get all subdocs <a
href="https://redirect.github.com/Automattic/mongoose/issues/15099 ">#15099</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/15088 ">#15088</a>
<a
href="https://redirect.github.com/Automattic/mongoose/issues/15092 ">#15092</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/Automattic/mongoose/commit/5af0a109fcf206eb765c02e0fffe54a78ab95174 "><code>5af0a10</code></a>
chore: release 8.9.5</li>
<li><a
href="https://github.com/Automattic/mongoose/commit/a42d8f5e3b8a6c2abd7d32c15b0cc5edac928d4e "><code>a42d8f5</code></a>
Merge branch '7.x'</li>
<li><a
href="https://github.com/Automattic/mongoose/commit/73e81abe3ec012f8255d3ca9978594075378faf4 "><code>73e81ab</code></a>
chore: release 7.8.4</li>
<li><a
href="https://github.com/Automattic/mongoose/commit/4fe9a904e3c2184ce6d01d9c3c8f3b239616f155 "><code>4fe9a90</code></a>
Merge branch '6.x' into 7.x</li>
<li><a
href="https://github.com/Automattic/mongoose/commit/e59e342e5d01bfeee31c5d5c796745315ecf0fa9 "><code>e59e342</code></a>
chore: release 6.13.6</li>
<li><a
href="https://github.com/Automattic/mongoose/commit/64a9f9706f2428c49e0cfb8e223065acc645f7bc "><code>64a9f97</code></a>
fix: disallow nested $where in populate match</li>
<li><a
href="https://github.com/Automattic/mongoose/commit/fa33717db8c6ee2331c68241abff7a81b84a70fb "><code>fa33717</code></a>
Merge pull request <a
href="https://redirect.github.com/Automattic/mongoose/issues/15176 ">#15176</a>
from Automattic/vkarpov15/<a
href="https://redirect.github.com/Automattic/mongoose/issues/15170 ">gh-15170</a></li>
<li><a
href="https://github.com/Automattic/mongoose/commit/072860237a2b8d968e06d4090a24127de8cdff24 "><code>0728602</code></a>
test: make test cast non-boolean value</li>
<li><a
href="https://github.com/Automattic/mongoose/commit/0cad0d71a8667295c6abd4636ea7d7b5cdc164e8 "><code>0cad0d7</code></a>
fix(schema): handle bitwise operators on Int32</li>
<li><a
href="https://github.com/Automattic/mongoose/commit/39886fbb57aaf345d01c0294cf2c3d2781898c29 "><code>39886fb</code></a>
docs: quick changelog formatting fix</li>
<li>Additional commits viewable in <a
href="https://github.com/Automattic/mongoose/compare/8.1.3...8.9.5 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/linux-odyssey/linux-odyssey/network/alerts ).
</details>
2025-04-27 17:00:44 +08:00
dependabot[bot]
0aeb9fe47e
chore(deps): bump mongoose from 8.1.3 to 8.9.5
...
Bumps [mongoose](https://github.com/Automattic/mongoose ) from 8.1.3 to 8.9.5.
- [Release notes](https://github.com/Automattic/mongoose/releases )
- [Changelog](https://github.com/Automattic/mongoose/blob/master/CHANGELOG.md )
- [Commits](https://github.com/Automattic/mongoose/compare/8.1.3...8.9.5 )
---
updated-dependencies:
- dependency-name: mongoose
dependency-version: 8.9.5
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-04-27 08:59:09 +00:00
Justin Lin
fd4f3bf8f5
chore(deps): bump dompurify from 3.0.9 to 3.2.4 ( #187 )
...
Bumps [dompurify](https://github.com/cure53/DOMPurify ) from 3.0.9 to
3.2.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/cure53/DOMPurify/releases ">dompurify's
releases</a>.</em></p>
<blockquote>
<h2>DOMPurify 3.2.4</h2>
<ul>
<li>Fixed a conditional and config dependent mXSS-style <a
href="https://nsysean.github.io/posts/dompurify-323-bypass/ ">bypass</a>
reported by <a
href="https://github.com/nsysean "><code>@nsysean</code></a></li>
<li>Added a new feature to allow specific hook removal, thanks <a
href="https://github.com/davecardwell "><code>@davecardwell</code></a></li>
<li>Added <em>purify.js</em> and <em>purify.min.js</em> to exports,
thanks <a
href="https://github.com/Aetherinox "><code>@Aetherinox</code></a></li>
<li>Added better logic in case no window object is president, thanks <a
href="https://github.com/yehuya "><code>@yehuya</code></a></li>
<li>Updated some dependencies called out by dependabot</li>
<li>Updated license files etc to show the correct year</li>
</ul>
<h2>DOMPurify 3.2.3</h2>
<ul>
<li>Fixed two conditional sanitizer bypasses discovered by <a
href="https://github.com/parrot409 "><code>@parrot409</code></a> and <a
href="https://x.com/slonser_ "><code>@Slonser</code></a></li>
<li>Updated the attribute clobbering checks to prevent future bypasses,
thanks <a
href="https://github.com/parrot409 "><code>@parrot409</code></a></li>
</ul>
<h2>DOMPurify 3.2.2</h2>
<ul>
<li>Fixed a possible bypass in case a rather specific config for custom
elements is set, thanks <a
href="https://github.com/yaniv-git "><code>@yaniv-git</code></a></li>
<li>Fixed several minor issues with the type definitions, thanks again
<a href="https://github.com/reduckted "><code>@reduckted</code></a></li>
<li>Fixed a minor issue with the types reference for trusted types,
thanks <a
href="https://github.com/reduckted "><code>@reduckted</code></a></li>
<li>Fixed a minor problem with the template detection regex on some
systems, thanks <a
href="https://github.com/svdb99 "><code>@svdb99</code></a></li>
</ul>
<h2>DOMPurify 3.2.1</h2>
<ul>
<li>Fixed several minor issues with the type definitions, thanks <a
href="https://github.com/reduckted "><code>@reduckted</code></a> <a
href="https://github.com/ghiscoding "><code>@ghiscoding</code></a> <a
href="https://github.com/asamuzaK "><code>@asamuzaK</code></a> <a
href="https://github.com/MiniDigger "><code>@MiniDigger</code></a></li>
<li>Fixed an issue with non-minified dist files and order of imports,
thanks <a
href="https://github.com/reduckted "><code>@reduckted</code></a></li>
</ul>
<h2>DOMPurify 3.2.0</h2>
<ul>
<li>Added type declarations, thanks <a
href="https://github.com/reduckted "><code>@reduckted</code></a> , <a
href="https://github.com/philmayfield "><code>@philmayfield</code></a>,
<a href="https://github.com/aloisklink "><code>@aloisklink</code></a>,
<a href="https://github.com/ssi02014 "><code>@ssi02014</code></a> and
others</li>
<li>Fixed a minor issue with the handling of hooks, thanks <a
href="https://github.com/kevin-mizu "><code>@kevin-mizu</code></a></li>
</ul>
<h2>DOMPurify 3.1.7</h2>
<ul>
<li>Fixed an issue with comment detection and possible bypasses with
specific config settings, thanks <a
href="https://github.com/masatokinugawa "><code>@masatokinugawa</code></a></li>
<li>Fixed several smaller typos in documentation and test & build
files, thanks <a
href="https://github.com/christianhg "><code>@christianhg</code></a></li>
<li>Added better support for Angular compiler, thanks <a
href="https://github.com/jeroen1602 "><code>@jeroen1602</code></a></li>
<li>Added several new attributes to HTML and SVG allow-list, thanks <a
href="https://github.com/Gigabyte5671 "><code>@Gigabyte5671</code></a>
and <a href="https://github.com/Rotzbua "><code>@Rotzbua</code></a></li>
<li>Removed the <code>foreignObject</code> element from the list of HTML
entry-points, thanks <a
href="https://github.com/masatokinugawa "><code>@masatokinugawa</code></a></li>
<li>Bumped several dependencies to be more up to date</li>
</ul>
<h2>DOMPurify 3.1.6</h2>
<ul>
<li>Fixed an issue with the execution logic of attribute hooks to
prevent bypasses, thanks <a
href="https://github.com/kevin-mizu "><code>@kevin-mizu</code></a></li>
<li>Fixed an issue with element removal leading to uncaught errors
through DOM Clobbering, thanks <a
href="https://github.com/realansgar "><code>@realansgar</code></a></li>
<li>Fixed a minor problem with the bower file pointing to the wrong dist
path</li>
<li>Fixed several minor typos in docs, comments and comment blocks,
thanks <a
href="https://github.com/Rotzbua "><code>@Rotzbua</code></a></li>
<li>Updated several development dependencies</li>
</ul>
<h2>DOMPurify 3.1.5</h2>
<ul>
<li>Fixed a minor issue with the dist paths in <code>bower.js</code>,
thanks <a
href="https://github.com/HakumenNC "><code>@HakumenNC</code></a></li>
<li>Fixed a minor issue with sanitizing HTML coming from copy&paste
Word content, thanks <a
href="https://github.com/kakao-bishop-cho "><code>@kakao-bishop-cho</code></a></li>
</ul>
<h2>DOMPurify 3.1.4</h2>
<ul>
<li>Fixed an issue with the recently implemented <code>isNaN</code>
checks, thanks <a
href="https://github.com/tulach "><code>@tulach</code></a></li>
<li>Added several new popover attributes to allow-list, thanks <a
href="https://github.com/Gigabyte5671 "><code>@Gigabyte5671</code></a></li>
<li>Fixed the tests and adjusted the test runner to cover all
branches</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/cure53/DOMPurify/commit/ec29e65f3675077c1a78e6edcab97f797f004a2e "><code>ec29e65</code></a>
Merge pull request <a
href="https://redirect.github.com/cure53/DOMPurify/issues/1062 ">#1062</a>
from cure53/main</li>
<li><a
href="https://github.com/cure53/DOMPurify/commit/1c1b1838625851939d4b86436feeb3e3ccb7dbb6 "><code>1c1b183</code></a>
chore: Preparing 3.2.4 release</li>
<li><a
href="https://github.com/cure53/DOMPurify/commit/d18ffcb554e0001748865da03ac75dd7829f0f02 "><code>d18ffcb</code></a>
fix: Changed the template literal regex to avoid a config-dependent
bypass</li>
<li><a
href="https://github.com/cure53/DOMPurify/commit/0d64d2b12f9ecaa28899c60aba0b9ed5072c4d93 "><code>0d64d2b</code></a>
Merge pull request <a
href="https://redirect.github.com/cure53/DOMPurify/issues/1060 ">#1060</a>
from yehuya/initializeTestImprovements</li>
<li><a
href="https://github.com/cure53/DOMPurify/commit/9ad79331566e0671788b120cc1f682f4e7f33f44 "><code>9ad7933</code></a>
tests: DOMPurify custom window tests improvements</li>
<li><a
href="https://github.com/cure53/DOMPurify/commit/72760ca8ee425c3129420390d4c10afe698ff2fb "><code>72760ca</code></a>
Merge pull request <a
href="https://redirect.github.com/cure53/DOMPurify/issues/1059 ">#1059</a>
from yehuya/fixMissingWindowElement</li>
<li><a
href="https://github.com/cure53/DOMPurify/commit/bc72d44b2e3cec00d8ef2427869d03cb668969fa "><code>bc72d44</code></a>
Fix tests</li>
<li><a
href="https://github.com/cure53/DOMPurify/commit/363a89dd3a051b72334cd4d0c867616fdc4ee40d "><code>363a89d</code></a>
fix: handle undefined Element in DOMPurify initialization</li>
<li><a
href="https://github.com/cure53/DOMPurify/commit/f41b45df18a9666a50c1ad2662cee259230cfef4 "><code>f41b45d</code></a>
Update LICENSE</li>
<li><a
href="https://github.com/cure53/DOMPurify/commit/b25bf26d674ff4db9074cef01fc51490cb1369a0 "><code>b25bf26</code></a>
Update README.md</li>
<li>Additional commits viewable in <a
href="https://github.com/cure53/DOMPurify/compare/3.0.9...3.2.4 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/linux-odyssey/linux-odyssey/network/alerts ).
</details>
2025-04-27 16:57:01 +08:00
dependabot[bot]
39c81e6b6e
chore(deps): bump dompurify from 3.0.9 to 3.2.4
...
Bumps [dompurify](https://github.com/cure53/DOMPurify ) from 3.0.9 to 3.2.4.
- [Release notes](https://github.com/cure53/DOMPurify/releases )
- [Commits](https://github.com/cure53/DOMPurify/compare/3.0.9...3.2.4 )
---
updated-dependencies:
- dependency-name: dompurify
dependency-version: 3.2.4
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-04-27 08:54:25 +00:00
Justin Lin
ef24270e7e
fix: remove the usage of secret in workflows ( #192 )
2025-04-27 16:51:22 +08:00
Justin Lin
13b90f83c4
chore(deps): bump axios from 1.6.7 to 1.8.2 ( #186 )
...
Bumps [axios](https://github.com/axios/axios ) from 1.6.7 to 1.8.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/axios/axios/releases ">axios's
releases</a>.</em></p>
<blockquote>
<h2>Release v1.8.2</h2>
<h2>Release notes:</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>http-adapter:</strong> add allowAbsoluteUrls to path
building (<a
href="https://redirect.github.com/axios/axios/issues/6810 ">#6810</a>)
(<a
href="https://github.com/axios/axios/commit/fb8eec214ce7744b5ca787f2c3b8339b2f54b00f ">fb8eec2</a>)</li>
</ul>
<h3>Contributors to this release</h3>
<ul>
<li><!-- raw HTML omitted --> <a href="https://github.com/lexcorp16 "
title="+1/-1 ([#6810 ](https://github.com/axios/axios/issues/6810 )
)">Fasoro-Joseph Alexander</a></li>
</ul>
<h2>Release v1.8.1</h2>
<h2>Release notes:</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>utils:</strong> move <code>generateString</code> to platform
utils to avoid importing crypto module into client builds; (<a
href="https://redirect.github.com/axios/axios/issues/6789 ">#6789</a>)
(<a
href="https://github.com/axios/axios/commit/36a5a620bec0b181451927f13ac85b9888b86cec ">36a5a62</a>)</li>
</ul>
<h3>Contributors to this release</h3>
<ul>
<li><!-- raw HTML omitted --> <a
href="https://github.com/DigitalBrainJS " title="+51/-47
([#6789 ](https://github.com/axios/axios/issues/6789 ) )">Dmitriy
Mozgovoy</a></li>
</ul>
<h2>Release v1.8.0</h2>
<h2>Release notes:</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>examples:</strong> application crashed when navigating
examples in browser (<a
href="https://redirect.github.com/axios/axios/issues/5938 ">#5938</a>)
(<a
href="https://github.com/axios/axios/commit/1260ded634ec101dd5ed05d3b70f8e8f899dba6c ">1260ded</a>)</li>
<li>missing word in SUPPORT_QUESTION.yml (<a
href="https://redirect.github.com/axios/axios/issues/6757 ">#6757</a>)
(<a
href="https://github.com/axios/axios/commit/1f890b13f2c25a016f3c84ae78efb769f244133e ">1f890b1</a>)</li>
<li><strong>utils:</strong> replace getRandomValues with crypto module
(<a
href="https://redirect.github.com/axios/axios/issues/6788 ">#6788</a>)
(<a
href="https://github.com/axios/axios/commit/23a25af0688d1db2c396deb09229d2271cc24f6c ">23a25af</a>)</li>
</ul>
<h3>Features</h3>
<ul>
<li>Add config for ignoring absolute URLs (<a
href="https://redirect.github.com/axios/axios/issues/5902 ">#5902</a>)
(<a
href="https://redirect.github.com/axios/axios/issues/6192 ">#6192</a>)
(<a
href="https://github.com/axios/axios/commit/32c7bcc0f233285ba27dec73a4b1e81fb7a219b3 ">32c7bcc</a>)</li>
</ul>
<h3>Reverts</h3>
<ul>
<li>Revert "chore: expose fromDataToStream to be consumable (<a
href="https://redirect.github.com/axios/axios/issues/6731 ">#6731</a>)"
(<a
href="https://redirect.github.com/axios/axios/issues/6732 ">#6732</a>)
(<a
href="https://github.com/axios/axios/commit/1317261125e9c419fe9f126867f64d28f9c1efda ">1317261</a>),
closes <a
href="https://redirect.github.com/axios/axios/issues/6731 ">#6731</a> <a
href="https://redirect.github.com/axios/axios/issues/6732 ">#6732</a></li>
</ul>
<h3>BREAKING CHANGES</h3>
<ul>
<li>
<p>code relying on the above will now combine the URLs instead of prefer
request URL</p>
</li>
<li>
<p>feat: add config option for allowing absolute URLs</p>
</li>
<li>
<p>fix: add default value for allowAbsoluteUrls in buildFullPath</p>
</li>
<li>
<p>fix: typo in flow control when setting allowAbsoluteUrls</p>
</li>
</ul>
<h3>Contributors to this release</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/axios/axios/blob/v1.x/CHANGELOG.md ">axios's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/axios/axios/compare/v1.8.1...v1.8.2 ">1.8.2</a>
(2025-03-07)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>http-adapter:</strong> add allowAbsoluteUrls to path
building (<a
href="https://redirect.github.com/axios/axios/issues/6810 ">#6810</a>)
(<a
href="https://github.com/axios/axios/commit/fb8eec214ce7744b5ca787f2c3b8339b2f54b00f ">fb8eec2</a>)</li>
</ul>
<h3>Contributors to this release</h3>
<ul>
<li><!-- raw HTML omitted --> <a href="https://github.com/lexcorp16 "
title="+1/-1 ([#6810 ](https://github.com/axios/axios/issues/6810 )
)">Fasoro-Joseph Alexander</a></li>
</ul>
<h2><a
href="https://github.com/axios/axios/compare/v1.8.0...v1.8.1 ">1.8.1</a>
(2025-02-26)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>utils:</strong> move <code>generateString</code> to platform
utils to avoid importing crypto module into client builds; (<a
href="https://redirect.github.com/axios/axios/issues/6789 ">#6789</a>)
(<a
href="https://github.com/axios/axios/commit/36a5a620bec0b181451927f13ac85b9888b86cec ">36a5a62</a>)</li>
</ul>
<h3>Contributors to this release</h3>
<ul>
<li><!-- raw HTML omitted --> <a
href="https://github.com/DigitalBrainJS " title="+51/-47
([#6789 ](https://github.com/axios/axios/issues/6789 ) )">Dmitriy
Mozgovoy</a></li>
</ul>
<h1><a
href="https://github.com/axios/axios/compare/v1.7.9...v1.8.0 ">1.8.0</a>
(2025-02-25)</h1>
<h3>Bug Fixes</h3>
<ul>
<li><strong>examples:</strong> application crashed when navigating
examples in browser (<a
href="https://redirect.github.com/axios/axios/issues/5938 ">#5938</a>)
(<a
href="https://github.com/axios/axios/commit/1260ded634ec101dd5ed05d3b70f8e8f899dba6c ">1260ded</a>)</li>
<li>missing word in SUPPORT_QUESTION.yml (<a
href="https://redirect.github.com/axios/axios/issues/6757 ">#6757</a>)
(<a
href="https://github.com/axios/axios/commit/1f890b13f2c25a016f3c84ae78efb769f244133e ">1f890b1</a>)</li>
<li><strong>utils:</strong> replace getRandomValues with crypto module
(<a
href="https://redirect.github.com/axios/axios/issues/6788 ">#6788</a>)
(<a
href="https://github.com/axios/axios/commit/23a25af0688d1db2c396deb09229d2271cc24f6c ">23a25af</a>)</li>
</ul>
<h3>Features</h3>
<ul>
<li>Add config for ignoring absolute URLs (<a
href="https://redirect.github.com/axios/axios/issues/5902 ">#5902</a>)
(<a
href="https://redirect.github.com/axios/axios/issues/6192 ">#6192</a>)
(<a
href="https://github.com/axios/axios/commit/32c7bcc0f233285ba27dec73a4b1e81fb7a219b3 ">32c7bcc</a>)</li>
</ul>
<h3>Reverts</h3>
<ul>
<li>Revert "chore: expose fromDataToStream to be consumable (<a
href="https://redirect.github.com/axios/axios/issues/6731 ">#6731</a>)"
(<a
href="https://redirect.github.com/axios/axios/issues/6732 ">#6732</a>)
(<a
href="https://github.com/axios/axios/commit/1317261125e9c419fe9f126867f64d28f9c1efda ">1317261</a>),
closes <a
href="https://redirect.github.com/axios/axios/issues/6731 ">#6731</a> <a
href="https://redirect.github.com/axios/axios/issues/6732 ">#6732</a></li>
</ul>
<h3>BREAKING CHANGES</h3>
<ul>
<li>
<p>code relying on the above will now combine the URLs instead of prefer
request URL</p>
</li>
<li>
<p>feat: add config option for allowing absolute URLs</p>
</li>
<li>
<p>fix: add default value for allowAbsoluteUrls in buildFullPath</p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/axios/axios/commit/a9f7689b0c4b6d68c7f587c3aa376860da509d94 "><code>a9f7689</code></a>
chore(release): v1.8.2 (<a
href="https://redirect.github.com/axios/axios/issues/6812 ">#6812</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/fb8eec214ce7744b5ca787f2c3b8339b2f54b00f "><code>fb8eec2</code></a>
fix(http-adapter): add allowAbsoluteUrls to path building (<a
href="https://redirect.github.com/axios/axios/issues/6810 ">#6810</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/98120457559e573024862e2925d56295a965ad7e "><code>9812045</code></a>
chore(sponsor): update sponsor block (<a
href="https://redirect.github.com/axios/axios/issues/6804 ">#6804</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/72acf759373ef4e211d5299818d19e50e08c02f8 "><code>72acf75</code></a>
chore(sponsor): update sponsor block (<a
href="https://redirect.github.com/axios/axios/issues/6794 ">#6794</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/2e64afdff5c41e38284a6fb8312f2745072513a1 "><code>2e64afd</code></a>
chore(release): v1.8.1 (<a
href="https://redirect.github.com/axios/axios/issues/6800 ">#6800</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/36a5a620bec0b181451927f13ac85b9888b86cec "><code>36a5a62</code></a>
fix(utils): move <code>generateString</code> to platform utils to avoid
importing crypto...</li>
<li><a
href="https://github.com/axios/axios/commit/cceb7b1e154fbf294135c93d3f91921643bbe49f "><code>cceb7b1</code></a>
chore(release): v1.8.0 (<a
href="https://redirect.github.com/axios/axios/issues/6795 ">#6795</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/23a25af0688d1db2c396deb09229d2271cc24f6c "><code>23a25af</code></a>
fix(utils): replace getRandomValues with crypto module (<a
href="https://redirect.github.com/axios/axios/issues/6788 ">#6788</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/32c7bcc0f233285ba27dec73a4b1e81fb7a219b3 "><code>32c7bcc</code></a>
feat: Add config for ignoring absolute URLs (<a
href="https://redirect.github.com/axios/axios/issues/5902 ">#5902</a>)
(<a
href="https://redirect.github.com/axios/axios/issues/6192 ">#6192</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/4a3e26cf65bb040b7eb4577d5fd62199b0f3d017 "><code>4a3e26c</code></a>
chore(config): adjust rollup config to preserve license header to
minified Ja...</li>
<li>Additional commits viewable in <a
href="https://github.com/axios/axios/compare/v1.6.7...v1.8.2 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/linux-odyssey/linux-odyssey/network/alerts ).
</details>
2025-04-27 16:46:31 +08:00
Justin Lin
cb77a3e266
chore(deps): bump @trpc/server from 11.1.0 to 11.1.1 ( #188 )
...
Bumps
[@trpc/server](https://github.com/trpc/trpc/tree/HEAD/packages/server )
from 11.1.0 to 11.1.1.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/trpc/trpc/commit/9c1c753a778ac7a2709b1e81be392231c4657319 "><code>9c1c753</code></a>
v11.1.1</li>
<li><a
href="https://github.com/trpc/trpc/commit/9beb26c636d44852e0f407f3d7a82ad54df65b4d "><code>9beb26c</code></a>
Merge commit from fork</li>
<li>See full diff in <a
href="https://github.com/trpc/trpc/commits/v11.1.1/packages/server ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/linux-odyssey/linux-odyssey/network/alerts ).
</details>
2025-04-27 16:45:48 +08:00
Justin Lin
61cb36f357
Fix/login limit (By Vincent) ( #191 )
...
This PR is originally by @Vincent23412 from #190 . Edited by @lancatlin
2025-04-27 16:43:56 +08:00
Justin Lin
58f3bf7817
fix: use config value instead of hard coded values
2025-04-27 16:41:19 +08:00
Justin Lin
ccbc4ff4b0
feat(rate-limiting): implement rate limiting for login attempts and enhance configuration
...
- Added environment variables for `RATE_LIMIT_MAX_FAILED_ATTEMPTS` and `RATE_LIMIT_LOCKOUT_TIME`
- Integrated rate limiting into the login process with a maximum of 5 failed attempts
- Refactored login attempt recording into the `authRouter`
- Removed deprecated `recordLogin` middleware and adjusted related logic
2025-04-27 16:29:03 +08:00
Justin Lin
aef760478c
fix: remove the usage of
2025-04-27 16:07:00 +08:00
Vincent23412
bda68ad293
fix path bugs
2025-04-27 16:02:21 +08:00
Vincent23412
af2f1ef707
feat(auth): add LoginAttempt schema and record login attempts with failure rate limit
...
- Added `LoginAttempt` Mongoose schema to store login history
- Integrated login attempt recording into login flow (success/failure)
- Created `rateLimitByAccount` middleware to block login if 10 failed attempts in 10 minutes
2025-04-27 15:57:34 +08:00
dependabot[bot]
3b4891412e
chore(deps): bump @trpc/server from 11.1.0 to 11.1.1
...
Bumps [@trpc/server](https://github.com/trpc/trpc/tree/HEAD/packages/server ) from 11.1.0 to 11.1.1.
- [Release notes](https://github.com/trpc/trpc/releases )
- [Commits](https://github.com/trpc/trpc/commits/v11.1.1/packages/server )
---
updated-dependencies:
- dependency-name: "@trpc/server"
dependency-version: 11.1.1
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-04-27 07:47:14 +00:00
dependabot[bot]
ef588414db
chore(deps): bump axios from 1.6.7 to 1.8.2
...
Bumps [axios](https://github.com/axios/axios ) from 1.6.7 to 1.8.2.
- [Release notes](https://github.com/axios/axios/releases )
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md )
- [Commits](https://github.com/axios/axios/compare/v1.6.7...v1.8.2 )
---
updated-dependencies:
- dependency-name: axios
dependency-version: 1.8.2
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-04-27 07:47:09 +00:00
Justin Lin
bc43184adc
chore(deps): bump express from 4.19.2 to 4.20.0 ( #163 )
...
Bumps [express](https://github.com/expressjs/express ) from 4.19.2 to
4.20.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/expressjs/express/releases ">express's
releases</a>.</em></p>
<blockquote>
<h2>4.20.0</h2>
<h2>What's Changed</h2>
<h3>Important</h3>
<ul>
<li>IMPORTANT: The default <code>depth</code> level for parsing
URL-encoded data is now <code>32</code> (previously was
<code>Infinity</code>)</li>
<li>Remove link renderization in html while using
<code>res.redirect</code></li>
</ul>
<h3>Other Changes</h3>
<ul>
<li>4.19.2 Staging by <a
href="https://github.com/wesleytodd "><code>@wesleytodd</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/5561 ">expressjs/express#5561</a></li>
<li>remove duplicate location test for data uri by <a
href="https://github.com/wesleytodd "><code>@wesleytodd</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/5562 ">expressjs/express#5562</a></li>
<li>feat: document beta releases expectations by <a
href="https://github.com/marco-ippolito "><code>@marco-ippolito</code></a>
in <a
href="https://redirect.github.com/expressjs/express/pull/5565 ">expressjs/express#5565</a></li>
<li>Cut down on duplicated CI runs by <a
href="https://github.com/jonchurch "><code>@jonchurch</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/5564 ">expressjs/express#5564</a></li>
<li>Add a Threat Model by <a
href="https://github.com/UlisesGascon "><code>@UlisesGascon</code></a>
in <a
href="https://redirect.github.com/expressjs/express/pull/5526 ">expressjs/express#5526</a></li>
<li>Assign captain of encodeurl by <a
href="https://github.com/blakeembrey "><code>@blakeembrey</code></a> in
<a
href="https://redirect.github.com/expressjs/express/pull/5579 ">expressjs/express#5579</a></li>
<li>Nominate jonchurch as repo captain for <code>http-errors</code>,
<code>expressjs.com</code>, <code>morgan</code>, <code>cors</code>,
<code>body-parser</code> by <a
href="https://github.com/jonchurch "><code>@jonchurch</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/5587 ">expressjs/express#5587</a></li>
<li>docs: update Security.md by <a
href="https://github.com/inigomarquinez "><code>@inigomarquinez</code></a>
in <a
href="https://redirect.github.com/expressjs/express/pull/5590 ">expressjs/express#5590</a></li>
<li>docs: update triage nomination policy by <a
href="https://github.com/UlisesGascon "><code>@UlisesGascon</code></a>
in <a
href="https://redirect.github.com/expressjs/express/pull/5600 ">expressjs/express#5600</a></li>
<li>Add CodeQL (SAST) by <a
href="https://github.com/UlisesGascon "><code>@UlisesGascon</code></a>
in <a
href="https://redirect.github.com/expressjs/express/pull/5433 ">expressjs/express#5433</a></li>
<li>docs: add UlisesGascon as triage initiative captain by <a
href="https://github.com/UlisesGascon "><code>@UlisesGascon</code></a>
in <a
href="https://redirect.github.com/expressjs/express/pull/5605 ">expressjs/express#5605</a></li>
<li>deps: encodeurl@~2.0.0 by <a
href="https://github.com/blakeembrey "><code>@blakeembrey</code></a> in
<a
href="https://redirect.github.com/expressjs/express/pull/5569 ">expressjs/express#5569</a></li>
<li>skip QUERY method test by <a
href="https://github.com/jonchurch "><code>@jonchurch</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/5628 ">expressjs/express#5628</a></li>
<li>ignore ETAG query test on 21 and 22, reuse skip util by <a
href="https://github.com/jonchurch "><code>@jonchurch</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/5639 ">expressjs/express#5639</a></li>
<li>add support Node.js@22 in the CI by <a
href="https://github.com/mertcanaltin "><code>@mertcanaltin</code></a>
in <a
href="https://redirect.github.com/expressjs/express/pull/5627 ">expressjs/express#5627</a></li>
<li>doc: add table of contents, tc/triager lists to readme by <a
href="https://github.com/mertcanaltin "><code>@mertcanaltin</code></a>
in <a
href="https://redirect.github.com/expressjs/express/pull/5619 ">expressjs/express#5619</a></li>
<li>List and sort all projects, add captains by <a
href="https://github.com/blakeembrey "><code>@blakeembrey</code></a> in
<a
href="https://redirect.github.com/expressjs/express/pull/5653 ">expressjs/express#5653</a></li>
<li>docs: add <a
href="https://github.com/UlisesGascon "><code>@UlisesGascon</code></a>
as captain for cookie-parser by <a
href="https://github.com/UlisesGascon "><code>@UlisesGascon</code></a>
in <a
href="https://redirect.github.com/expressjs/express/pull/5666 ">expressjs/express#5666</a></li>
<li>✨ bring back query tests for node 21 by <a
href="https://github.com/ctcpip "><code>@ctcpip</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/5690 ">expressjs/express#5690</a></li>
<li>[v4] Deprecate <code>res.clearCookie</code> accepting
<code>options.maxAge</code> and <code>options.expires</code> by <a
href="https://github.com/jonchurch "><code>@jonchurch</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/5672 ">expressjs/express#5672</a></li>
<li>skip QUERY tests for Node 21 only, still not supported by <a
href="https://github.com/jonchurch "><code>@jonchurch</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/5695 ">expressjs/express#5695</a></li>
<li>📝 update people, add ctcpip to TC by <a
href="https://github.com/ctcpip "><code>@ctcpip</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/5683 ">expressjs/express#5683</a></li>
<li>remove minor version pinning from ci by <a
href="https://github.com/jonchurch "><code>@jonchurch</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/5722 ">expressjs/express#5722</a></li>
<li>Fix link variable use in attribution section of CODE OF CONDUCT by
<a href="https://github.com/IamLizu "><code>@IamLizu</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/5762 ">expressjs/express#5762</a></li>
<li>Replace Appveyor windows testing with GHA by <a
href="https://github.com/jonchurch "><code>@jonchurch</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/5599 ">expressjs/express#5599</a></li>
<li>Add OSSF Scorecard badge by <a
href="https://github.com/UlisesGascon "><code>@UlisesGascon</code></a>
in <a
href="https://redirect.github.com/expressjs/express/pull/5436 ">expressjs/express#5436</a></li>
<li>update scorecard link by <a
href="https://github.com/bjohansebas "><code>@bjohansebas</code></a> in
<a
href="https://redirect.github.com/expressjs/express/pull/5814 ">expressjs/express#5814</a></li>
<li>Nominate <a
href="https://github.com/IamLizu "><code>@IamLizu</code></a> to the
triage team by <a
href="https://github.com/UlisesGascon "><code>@UlisesGascon</code></a>
in <a
href="https://redirect.github.com/expressjs/express/pull/5836 ">expressjs/express#5836</a></li>
<li>deps: path-to-regexp@0.1.8 by <a
href="https://github.com/blakeembrey "><code>@blakeembrey</code></a> in
<a
href="https://redirect.github.com/expressjs/express/pull/5603 ">expressjs/express#5603</a></li>
<li>docs: specify new instructions for <code>question</code> and
<code>discuss</code> by <a
href="https://github.com/IamLizu "><code>@IamLizu</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/5835 ">expressjs/express#5835</a></li>
<li>4.x: Upgrade <code>merge-descriptors</code> dependency by <a
href="https://github.com/RobinTail "><code>@RobinTail</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/5781 ">expressjs/express#5781</a></li>
<li>path-to-regexp@0.1.10 by <a
href="https://github.com/blakeembrey "><code>@blakeembrey</code></a> in
<a
href="https://redirect.github.com/expressjs/express/pull/5902 ">expressjs/express#5902</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/marco-ippolito "><code>@marco-ippolito</code></a>
made their first contribution in <a
href="https://redirect.github.com/expressjs/express/pull/5565 ">expressjs/express#5565</a></li>
<li><a
href="https://github.com/inigomarquinez "><code>@inigomarquinez</code></a>
made their first contribution in <a
href="https://redirect.github.com/expressjs/express/pull/5590 ">expressjs/express#5590</a></li>
<li><a
href="https://github.com/mertcanaltin "><code>@mertcanaltin</code></a>
made their first contribution in <a
href="https://redirect.github.com/expressjs/express/pull/5627 ">expressjs/express#5627</a></li>
<li><a href="https://github.com/ctcpip "><code>@ctcpip</code></a> made
their first contribution in <a
href="https://redirect.github.com/expressjs/express/pull/5690 ">expressjs/express#5690</a></li>
<li><a
href="https://github.com/bjohansebas "><code>@bjohansebas</code></a>
made their first contribution in <a
href="https://redirect.github.com/expressjs/express/pull/5814 ">expressjs/express#5814</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/expressjs/express/compare/4.19.1...4.20.0 ">https://github.com/expressjs/express/compare/4.19.1...4.20.0 </a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/expressjs/express/blob/master/History.md ">express's
changelog</a>.</em></p>
<blockquote>
<h1>4.20.0 / 2024-09-10</h1>
<ul>
<li>deps: serve-static@0.16 .0
<ul>
<li>Remove link renderization in html while redirecting</li>
</ul>
</li>
<li>deps: send@0.19 .0
<ul>
<li>Remove link renderization in html while redirecting</li>
</ul>
</li>
<li>deps: body-parser@0.6.0
<ul>
<li>add <code>depth</code> option to customize the depth level in the
parser</li>
<li>IMPORTANT: The default <code>depth</code> level for parsing
URL-encoded data is now <code>32</code> (previously was
<code>Infinity</code>)</li>
</ul>
</li>
<li>Remove link renderization in html while using
<code>res.redirect</code></li>
<li>deps: path-to-regexp@0.1.10
<ul>
<li>Adds support for named matching groups in the routes using a
regex</li>
<li>Adds backtracking protection to parameters without regexes
defined</li>
</ul>
</li>
<li>deps: encodeurl@~2.0.0
<ul>
<li>Removes encoding of <code>\</code>, <code>|</code>, and
<code>^</code> to align better with URL spec</li>
</ul>
</li>
<li>Deprecate passing <code>options.maxAge</code> and
<code>options.expires</code> to <code>res.clearCookie</code>
<ul>
<li>Will be ignored in v5, clearCookie will set a cookie with an expires
in the past to instruct clients to delete the cookie</li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/expressjs/express/commit/21df421ebc7a5249bb31101da666bbf22adc3f18 "><code>21df421</code></a>
4.20.0</li>
<li><a
href="https://github.com/expressjs/express/commit/4c9ddc1c47bf579e55c2fe837d76a952e9fd8959 "><code>4c9ddc1</code></a>
feat: upgrade to serve-static@0.16 .0</li>
<li><a
href="https://github.com/expressjs/express/commit/9ebe5d500d22cbb2b8aaa73446866b084c747971 "><code>9ebe5d5</code></a>
feat: upgrade to send@0.19 .0 (<a
href="https://redirect.github.com/expressjs/express/issues/5928 ">#5928</a>)</li>
<li><a
href="https://github.com/expressjs/express/commit/ec4a01b6b8814d7b007f36a3023f4dbafdbc3d09 "><code>ec4a01b</code></a>
feat: upgrade to body-parser@1.20 .3 (<a
href="https://redirect.github.com/expressjs/express/issues/5926 ">#5926</a>)</li>
<li><a
href="https://github.com/expressjs/express/commit/54271f69b511fea198471e6ff3400ab805d6b553 "><code>54271f6</code></a>
fix: don't render redirect values in anchor href</li>
<li><a
href="https://github.com/expressjs/express/commit/125bb742a38cd97938a3932b47cc301e41c31f5d "><code>125bb74</code></a>
path-to-regexp@0.1.10 (<a
href="https://redirect.github.com/expressjs/express/issues/5902 ">#5902</a>)</li>
<li><a
href="https://github.com/expressjs/express/commit/2a980ad16052e53b398c9953fea50e3daa0b495c "><code>2a980ad</code></a>
merge-descriptors@1.0.3 (<a
href="https://redirect.github.com/expressjs/express/issues/5781 ">#5781</a>)</li>
<li><a
href="https://github.com/expressjs/express/commit/a3e7e05e0a435b7b4be25bd38d8d0ca19a773ca9 "><code>a3e7e05</code></a>
docs: specify new instructions for <code>question</code> and
<code>discuss</code></li>
<li><a
href="https://github.com/expressjs/express/commit/c5addb9a17c5b4c9fccdd2c04153a30595e03385 "><code>c5addb9</code></a>
deps: path-to-regexp@0.1.8 (<a
href="https://redirect.github.com/expressjs/express/issues/5603 ">#5603</a>)</li>
<li><a
href="https://github.com/expressjs/express/commit/e35380a39d94937e3d0f7119e0efbc7cd69d003f "><code>e35380a</code></a>
docs: add <a
href="https://github.com/IamLizu "><code>@IamLizu</code></a> to the
triage team (<a
href="https://redirect.github.com/expressjs/express/issues/5836 ">#5836</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/expressjs/express/compare/4.19.2...4.20.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/linux-odyssey/linux-odyssey/network/alerts ).
</details>
2025-04-27 15:46:10 +08:00
Justin Lin
13fb8737a3
Fix deploy ( #183 )
2025-04-27 12:38:16 +08:00
Justin Lin
eaced63c68
feat: add console logger in production
2025-04-27 12:34:27 +08:00
Justin Lin
b64cc6028c
feat: add proxy settings to nginx.conf
2025-04-27 12:34:05 +08:00
Justin Lin
dbf26bb490
fix: add docker cli into backend image
2025-04-27 12:33:36 +08:00
Justin Lin
698dc368e6
fix: use wrong parsed command body ( #182 )
2025-04-26 18:48:04 +08:00
Justin Lin and Copilot
0a8ef9a37e
Update packages/container/cli.js
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2025-04-26 18:45:35 +08:00
Justin Lin
aeed963a75
fix: use wrong parsed command body
2025-04-26 18:43:43 +08:00
Justin Lin
128aae33ec
fix: update project root detection and quest directory path ( #181 )
2025-04-26 18:13:27 +08:00
Justin Lin
b86697b6db
fix: validate command input in newCommand controller
2025-04-26 18:10:33 +08:00
Justin Lin
cb1e395579
refactor: update project root detection and quest directory path
2025-04-26 18:02:49 +08:00
Justin Lin
fbe1319183
fix: analytics dockerfile ( #180 )
2025-04-26 17:30:08 +08:00
Justin Lin
94389d4e1c
fix: analytics dockerfile
2025-04-26 17:27:49 +08:00
Justin Lin
a66b4f5adb
Refactor game/packages/trpc ( #179 )
...
- Refactor game core logic in `packages/game`
- Use Zod to parse quests and store in memory directly
- Get quest responses dynamically. Not stored in Session anymore.
- Use tRPC to re-implement some of APIs
- Remove all package.json in `packages`, import them as regular files
- Add JSON schema for quest.yml for better editing experience
- Refine quest files
2025-04-26 17:10:58 +08:00
Justin Lin
9498bb77ef
fix: linting
2025-04-26 17:02:47 +08:00
Justin Lin
6fe49c4f38
fix: dockerfile, production env settings
2025-04-26 16:38:32 +08:00
Justin Lin
3985d5d089
fix: server and app build
2025-04-26 13:22:32 +08:00
Justin Lin
253564376d
fix: analytics type errors
2025-04-26 13:10:48 +08:00
Justin Lin
f7e2b00358
fix: test in game and file-graph
2025-04-26 12:52:12 +08:00
Justin Lin
d450613816
clean: remove unused code
2025-04-26 12:48:29 +08:00
Justin Lin
129d2ff49b
quest: checkpoint-03
2025-04-26 12:35:20 +08:00
Justin Lin
ad0cb3e4b2
quest: checkpoint-02
2025-04-26 12:30:57 +08:00
Justin Lin
66365b106e
quest: checkpoint-1
2025-04-26 12:27:17 +08:00
Justin Lin
f6ee9f91d4
quest: execute
2025-04-26 12:23:46 +08:00
Justin Lin
67e84d8cf9
quest: rm, fix copy (stages removed by AI)
2025-04-26 12:10:53 +08:00
Justin Lin
fda0357a73
feat: add file moving quest with instructions and example files
2025-04-26 11:49:40 +08:00
Justin Lin
e9e924165d
feat: improve Description page switcher style
2025-04-26 11:48:07 +08:00
Justin Lin
937c5de6b8
fix: terminal overflow
2025-04-26 11:46:36 +08:00
Justin Lin
53c5391f61
quest: copy
2025-04-26 11:27:55 +08:00
Justin Lin
876cae6947
feat: close hint for new responses
2025-04-26 11:27:44 +08:00
Justin Lin
beb58e233e
quests: tab & create
2025-04-26 11:09:23 +08:00
Justin Lin
f7860c6197
fix: update CLIFileExistenceChecker to accept containerId in constructor
2025-04-26 11:09:10 +08:00
Justin Lin
5077f9c677
feat: read quest
2025-04-25 19:57:49 +08:00
Justin Lin
9be288d2de
feat: add new path quest with file navigation and update quest structure
2025-04-25 19:55:11 +08:00
Justin Lin
cd6f062556
refactor: enhance get-started quest
2025-04-25 12:36:39 +08:00
Justin Lin
c61f844e42
feat: add exploration quest with file navigation instructions and example files
2025-04-25 12:01:25 +08:00
Justin Lin
26e79690f8
feat: add pwd handling to session and update related components
2025-04-25 11:33:16 +08:00
Justin Lin
fba92dad46
feat: integrate filegraph
2025-04-24 23:30:12 +08:00
Justin Lin
b3ed0e646e
fix: app import inteface
2025-04-24 23:23:58 +08:00
Justin Lin
87b8ca5d04
wip: replace packages with pure files
2025-04-24 23:20:40 +08:00
Justin Lin
2d95ca382f
wip: integrate filegraph into session
2025-04-24 22:05:10 +08:00
Justin Lin
cdd22634e0
refactor: replace "folder" with "directory" across file handling components and tests
2025-04-24 21:24:55 +08:00
Justin Lin
7e50c8e06c
refactor: remove condition tests and update file node interfaces in game session
...
TODO: replace "folder" with "directory"
2025-04-24 18:10:47 +08:00
Justin Lin
0685d71299
refactor: remove print.js and simplify response handling in cli.js
2025-04-24 18:08:09 +08:00
Justin Lin
56049a0a29
fix: DAG setLayer logic
2025-04-23 17:58:24 +08:00
Justin Lin
9b5da4e818
feat: enhance game description with collapsible hint section and update hint text format
2025-04-23 17:44:23 +08:00
Justin Lin
ab63595fba
feat: add JSON schema for quest
2025-04-23 17:40:55 +08:00
Justin Lin
52e9a13645
feat: add isFinished method to GameSession and update commandController to handle session completion
2025-04-23 17:10:51 +08:00
Justin Lin
cfbc386c16
refactor: update file-graph package structure and integrate with game session management
2025-04-23 17:04:00 +08:00
Justin Lin
92173bb7e9
refactor: migrate session management to TRPC and remove legacy API endpoints
2025-04-23 16:37:12 +08:00
Justin Lin
b4b8f8baee
feat: load responses and tasks from existing session
2025-04-23 16:17:10 +08:00
Justin Lin
2fcca0c4b9
refactor: update session management to handle tasks and responses in a single update
2025-04-23 16:03:39 +08:00
Justin Lin
66434ff897
fix: save new created session
2025-04-22 19:06:57 +08:00
Justin Lin
a711e08328
refactor: update QuestMap component to use new node structure and simplify DAG class
2025-04-22 18:58:23 +08:00
Justin Lin
1616f62755
wip: migrate backend to new game package
2025-04-21 22:40:11 +08:00
Justin Lin
1d843f7355
refactor: remove unused quest-related schemas and consolidate exports
2025-04-21 21:42:54 +08:00
Justin Lin
d2cdd1304a
feat: getTasks
2025-04-21 18:31:33 +08:00
Justin Lin
254e4f75ed
feat: include responses from Exceptions
2025-04-21 12:31:53 +08:00
Justin Lin
0f0f43b838
refactor: Create a new super class Event and prevent duplicate logic
2025-04-21 12:23:09 +08:00
Justin Lin
2dc40a2254
refactor: add new name "Event" for the set Stage and Exception
2025-04-21 11:58:05 +08:00
Justin Lin
6e804f0ed4
refactor: reuse satisfies function in condition
2025-04-21 11:53:32 +08:00
Justin Lin
3656868b66
feat: catch-all exceptions
2025-04-21 11:45:23 +08:00
Justin Lin
cfce5ececa
feat: add global exceptions
2025-04-21 11:41:07 +08:00
Justin Lin
fb823814e0
feat: add stage exceptions
2025-04-21 11:19:59 +08:00
Justin Lin
f7780c3d98
feat: add get responses
2025-04-18 15:17:25 +08:00
Justin Lin
dae9e841ca
feat: add run command
2025-04-18 15:04:28 +08:00
Justin Lin
e622011b21
feat: add quest class and session getActiveStages
2025-04-18 14:54:10 +08:00
Justin Lin
471b781d85
refactor: separate schema to files
2025-04-18 14:33:41 +08:00
Justin Lin
57d8f24930
Merge branch 'game' into refactor-trpc
2025-04-18 14:27:41 +08:00
Justin Lin
6043226142
wip: migrating game handler
2025-04-18 14:27:36 +08:00
Justin Lin
61d1871e95
feat: parse all quest
2025-04-16 19:06:47 +08:00
Justin Lin
ed4d04b658
feat: parse quest using zod, basic
2025-04-16 17:37:42 +08:00
Justin Lin
963655c1f7
wip: get active session
2025-04-16 16:58:24 +08:00
Justin Lin
423548804a
feat: migreate get user profile to trpc
2025-04-16 16:40:03 +08:00
Justin Lin
ac92950177
feat: migrate quest api to trpc
2025-04-16 16:24:29 +08:00
Justin Lin
55a41dd3b5
feat: integrate trpc to app
2025-04-16 16:02:23 +08:00
Justin Lin
529869671c
feat: createContext
2025-04-16 15:36:12 +08:00
Justin Lin
6326b84a60
feat: init trpc
2025-04-16 15:27:00 +08:00
Justin Lin
8cc006e3a4
fix: check files using abs path ( #175 )
...
the docker user is changed from commander to root due to #168 pr.
Use absolute path instead of relative path to prevent false detection.
2025-02-15 20:55:03 +08:00
Justin Lin
d6ae6d818d
Fix network ( #174 )
2025-02-15 20:52:25 +08:00
wancat
6692ae2b9b
fix: check files using abs path
...
(the docker user is changed due to feat-ssh pr)
2025-02-15 20:42:50 +08:00
Justin Lin
fab02d03a9
fix: update env samples, use dash only for naming networks
2024-12-27 21:01:31 +08:00
Justin Lin
9e44ebe415
fix: remove unwanted error logging
2024-12-27 20:56:23 +08:00
Justin Lin
019caf58e4
fix: use a different docker network for dev to prevent "interna" settings conflicts
2024-12-27 20:56:05 +08:00
Justin Lin
97ad1a7b50
fix: set mongodb version to 6 ( #170 )
2024-10-21 13:51:17 +08:00
Justin Lin
cb4b9f429a
fix: set mongodb version to 6
2024-10-21 13:43:58 +08:00
Justin Lin
5e11d2da11
fix: pass env file to containers directly ( #169 )
2024-10-21 12:59:56 +08:00
Justin Lin
a901ce005c
fix: pass env file to containers directly
2024-10-21 12:53:39 +08:00
Justin Lin
4dd2a7cbe1
Feat ssh ( #168 )
2024-10-21 12:15:43 +08:00
Justin Lin
5cf375905d
feat: remove debug logs
2024-10-21 12:12:52 +08:00
Justin Lin
d7c5c756f3
feat: add production env sample
2024-10-21 12:11:32 +08:00
Justin Lin
44ecd3b87a
fix: mounting quest home into production container
2024-10-21 12:11:24 +08:00
Justin Lin
1888781a47
fix: copy entrypoint into quest container. Disable mounting for entrypoint & public key. Use Env to pass ssh public key into container.
2024-10-21 11:54:32 +08:00
Justin Lin
860b257ea7
doc: update Windows setup guide
2024-10-20 20:06:39 +08:00
Justin Lin
ba251fb933
feat: update dump script
2024-10-17 22:08:52 +08:00
Chen, Tai-Lin
84bd2620d8
docs: add windows environment setup document draft
2024-10-16 23:53:58 +08:00
Justin Lin
b449d84c54
feat: auto create config folder and player network
2024-10-16 14:13:41 +08:00
Justin Lin
91ebaec22c
feat: update document and remove some debug logging
2024-10-14 18:32:02 +08:00
Justin Lin
58354b7cd8
feat: clean up /etc/skel and move ssh key to /etc/ssh/authorized_keys/
2024-10-14 17:48:05 +08:00
Justin Lin
31301419ad
feat: add ssh connection retry
2024-10-14 17:31:35 +08:00
Justin Lin
251139c159
feat: move sshd_config to .include folder
2024-10-14 17:31:23 +08:00
Justin Lin
a4ed4cf533
feat: remove unnecessary quest Dockerfiles
2024-10-14 12:40:53 +08:00
Justin Lin
247f03b71a
feat: mount quest home to /etc/skel to prevent building images
2024-10-14 12:30:28 +08:00
Justin Lin
be22a121c8
feat: use entrypoint to create user account and copy ssh key
2024-10-14 12:06:05 +08:00
Justin Lin
261c6fc029
feat: generate key pair using ssh2 for right public key format
2024-10-14 11:34:53 +08:00
Justin Lin
03b2993b56
feat: load or create key
2024-10-14 11:23:25 +08:00
Justin Lin
2cc348687a
feat: generate key pair function
2024-10-14 10:53:15 +08:00
Justin Lin
2a3429106c
feat: remove welcome banner
2024-10-13 16:31:17 +08:00
Justin Lin
a6720cfe39
feat: connect through ssh
2024-10-13 15:59:01 +08:00
Justin Lin
4c292fd6ba
wip: allow connection from docker container
2024-10-13 15:05:20 +08:00
Justin Lin
5ba0021c37
fix: ssh server
2024-10-10 22:43:39 +08:00
Justin Lin
19897e607f
wip: connect container through ssh
2024-10-10 20:54:42 +08:00
Justin Lin
08e9191c4b
feat: replace alpine with debian slim
2024-10-10 20:54:09 +08:00
Justin Lin
aa95eda23c
Doc ( #167 )
2024-10-10 19:52:04 +08:00
Justin Lin
6bc37900d8
doc: update README
2024-10-10 17:41:47 +08:00
Justin Lin
98f18627e5
feat: mount quest
2024-10-10 17:21:38 +08:00
Justin Lin
19c44fbe52
wip: game schema
2024-10-10 16:22:20 +08:00
dependabot[bot]
c254d6c948
chore(deps): bump express from 4.19.2 to 4.20.0
...
Bumps [express](https://github.com/expressjs/express ) from 4.19.2 to 4.20.0.
- [Release notes](https://github.com/expressjs/express/releases )
- [Changelog](https://github.com/expressjs/express/blob/master/History.md )
- [Commits](https://github.com/expressjs/express/compare/4.19.2...4.20.0 )
---
updated-dependencies:
- dependency-name: express
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-09-21 06:11:22 +00:00
Justin Lin
e66598f1a7
chore: update dependencies
2024-08-28 14:52:45 +08:00
Justin Lin
2a868ead48
Merge branch 'main' into game
2024-08-28 14:52:13 +08:00
Justin Lin
9b4f50ebbd
Formbricks ( #157 )
...
add quest feedback and bug report form using Formbricks
2024-08-02 22:07:36 +08:00
wancat
5fd24190d2
feat: change form to production
2024-08-02 21:17:18 +08:00
wancat
d2bb079f50
feat: add bug report
2024-08-02 20:54:38 +08:00
wancat
d959ab22fe
refactor: move open survey to formbricks
2024-08-02 16:49:26 +08:00
wancat
9c8260a411
feat: integrate form after finishing quest
2024-08-02 16:15:06 +08:00
wancat
3c92c9d143
feat: add formbricks
2024-08-02 15:32:47 +08:00
raygur
5208d87bd6
feat: formbricks editing
2024-08-02 14:44:28 +08:00
RayGur
634464065d
feat: formbricks edit
2024-08-02 14:44:28 +08:00
RayGur
4c90793fc6
feat: formbricks init
2024-08-02 14:44:28 +08:00
RayGur
169587c54d
feat: formbricks setup
2024-08-02 14:41:14 +08:00
Justin Lin
4dd5f94c60
fix: map background ( #156 )
...
Put catelog background to public folder
2024-08-02 14:36:38 +08:00
Justin Lin
14bcb3b0d5
Basic checkpoint quests ( #155 )
2024-08-02 14:35:32 +08:00
Annie Huang
8281a9d882
fix: map background
2024-08-02 13:19:53 +08:00
Chen, Tai-Lin
dcf72d046c
quest: fix checkpoint-03
2024-08-02 11:12:30 +08:00
Chen, Tai-Lin
b73607fb8d
quest: fix checkpoint-02 bug
2024-08-02 10:45:31 +08:00
Chen, Tai-Lin
b64d707d16
quest: fix checkpoints bug
2024-08-02 10:22:42 +08:00
Chen, Tai-Lin
7dcac306f9
quest: checkpoint03
2024-08-02 02:27:41 +08:00
Chen, Tai-Lin
eddbda23d7
quest: fix content in remove
2024-08-02 01:06:05 +08:00
Chen, Tai-Lin
124c5cc401
quest: checkpoint-02
2024-08-02 01:05:38 +08:00
Chen, Tai-Lin
21d08b8156
quest: checkpoint01
2024-08-02 00:28:59 +08:00
Chen, Tai-Lin
3745011504
fix quest content
2024-08-01 21:57:43 +08:00
Justin Lin
3f08452ea4
feat: 119-Quest-Intro ( #154 )
...
- Add an introduction for every quest
- Not yet written documents for the introduction, so the contents are
from the information in the game
2024-08-01 20:52:10 +08:00
Annie Huang
acfb09c6ca
delete redundant code
2024-08-01 19:58:13 +08:00
Annie Huang
c2c100e6e6
simplify data usage
2024-08-01 19:55:24 +08:00
Annie Huang
4033eefa0d
remove redundant variable
2024-08-01 19:41:55 +08:00
Annie Huang
334b34ef65
Green button for unlocked and completed quest
2024-08-01 19:40:17 +08:00
Annie Huang
ac89d521fc
remove console log
2024-08-01 19:32:28 +08:00
Annie Huang
60641ba0ad
change background loading method
2024-08-01 19:29:01 +08:00
Annie Huang
dd67bcb1bd
Add: Quest Introduction
2024-08-01 19:11:27 +08:00
Justin Lin
d002b21aa8
Feat map ( #152 )
2024-07-31 20:37:49 +08:00
wancat
033c808c02
chore: remove echarts dependency
2024-07-31 18:25:01 +08:00
wancat
1be4f73e7e
refactor: styles of nodes and edges
2024-07-31 18:17:44 +08:00
wancat
9ddfcd2a86
feat: add edges (straight line for now)
2024-07-31 18:11:18 +08:00
wancat
ca36f6391a
feat: add dragging
2024-07-31 18:00:19 +08:00
wancat
1572b2ea06
feat: rewrite map state handling
2024-07-31 17:54:59 +08:00
wancat
8f6914d46c
feat: new map by svg
2024-07-31 17:12:43 +08:00
Justin Lin
517ab43e8c
Execute Quest ( #150 )
2024-07-31 16:37:32 +08:00
Justin Lin
74c49e1df7
Quest tab ( #151 )
2024-07-31 16:37:17 +08:00
wancat
cb0f3cc3b0
fix: hint instruction
2024-07-31 08:46:50 +08:00
Chen, Tai-Lin
5605b27127
modify quests' text
2024-07-30 23:43:23 +08:00
wancat
a7368110dd
feat: update quest requirements to include tab
2024-07-29 22:19:32 +08:00
wancat
bdb7def73a
feat: finish tab quest
2024-07-29 22:16:58 +08:00
wancat
b74866e50f
wip: tab
2024-07-28 15:14:56 +08:00
wancat
d577656eb1
feat: allow testing on creating new session
2024-07-28 15:14:45 +08:00
Lin, Hung-Shin
6400aa4a56
Style: Add file/folder icon in file tree ( #149 )
2024-07-28 12:22:59 +08:00
wancat
887d205ec1
quest: execute
2024-07-26 16:25:38 +08:00
wancat
8597c22b9f
wip: execute tutorial content
2024-07-23 18:37:52 +08:00
Chen, Tai-Lin
d8c0ee4b20
style: add file/folder icon and modify some style in visualization part
2024-07-23 18:30:57 +08:00
Chen, Tai-Lin
8180e9a0cf
delete unused text
2024-07-23 12:15:03 +08:00
Chen, Tai-Lin
6daa11bff7
fix: start buttom languege issue
2024-07-23 11:20:56 +08:00
Chen, Tai-Lin
976dc6363c
fix: wrong answer in answer.sh
2024-07-23 10:29:50 +08:00
Lin, Hung-Shin
8d0a210f0e
Fix current quests ( #144 )
2024-07-03 08:15:18 +08:00
wancat
c38104d043
fix: typo
2024-07-03 08:09:57 +08:00
wancat
83e563ab56
fix: requirement in get-started
2024-07-03 08:05:58 +08:00
wancat
fa2059814c
fix: increase line height in description part
2024-07-03 08:05:40 +08:00
Chen, Tai-Lin
f9fa5a2102
fix: update quest [remove]
2024-07-03 01:57:39 +08:00
Chen, Tai-Lin
8ed6acbcc1
fix: update quest [move]
2024-07-03 01:47:59 +08:00
Chen, Tai-Lin
d2452c91a6
fix: update quest [copy]
2024-07-03 01:42:37 +08:00
Chen, Tai-Lin
5bac9ce099
style: revise description part
2024-07-03 01:25:34 +08:00
Chen, Tai-Lin
2aaff0f7bc
fix: quests exceptions
2024-07-03 01:10:59 +08:00
Chen, Tai-Lin
96ab39437b
fix: quest error [remove]
2024-07-03 01:02:15 +08:00
Chen, Tai-Lin
d6b606e807
fix: update quest [get-started]
2024-07-03 01:01:30 +08:00
Chen, Tai-Lin
b792992391
fix: update quest [explore]
2024-07-03 01:01:30 +08:00
Chen, Tai-Lin
922100d8da
fix: update quest [cast]
2024-07-03 01:01:30 +08:00
Chen, Tai-Lin
52597e8c5e
fix: update quest [explore]
2024-07-03 01:01:30 +08:00
Chen, Tai-Lin
a6c160ac0e
fix: update quest [cast]
2024-07-03 01:00:33 +08:00
Chen, Tai-Lin
3859403b56
fix: revise quest content [get-started] (1 to be fixed)
2024-07-03 01:00:17 +08:00
Chen, Tai-Lin
2a29b0b8ac
fix: update quest [read]
2024-07-03 00:57:33 +08:00
Chen, Tai-Lin
aaa97e0dca
fix: update quest [path]
2024-07-03 00:53:56 +08:00
Chen, Tai-Lin
3a28af0a67
fix: update quest [move]
2024-07-03 00:53:56 +08:00
Chen, Tai-Lin
551d502845
fix: update quest [helloworld]
2024-07-03 00:53:56 +08:00
Chen, Tai-Lin
3f0191112d
fix: update quest [get-started]
2024-07-03 00:53:56 +08:00
Chen, Tai-Lin
d565709a59
fix: update quest [explore]
2024-07-03 00:53:56 +08:00
Chen, Tai-Lin
435a426f5b
fix: update quest [remove]
2024-07-03 00:53:56 +08:00
Chen, Tai-Lin
377afb3078
fix: update quest [create]
2024-07-03 00:53:56 +08:00
Chen, Tai-Lin
9d26951978
fix: update quest [cast]
2024-07-03 00:53:56 +08:00
Chen, Tai-Lin
db3b00f8ee
fix: update quest [copy]
2024-07-03 00:53:56 +08:00
Chen, Tai-Lin
c09c4ff9e0
fix: quests exceptions error
2024-07-03 00:53:56 +08:00
Chen, Tai-Lin
b3b374b3cd
fix: update quest [explore]
2024-07-03 00:53:56 +08:00
Chen, Tai-Lin
5ca187651d
fix: update quest answer file [get-started]
2024-07-03 00:53:55 +08:00
Chen, Tai-Lin
f2ca4a26ac
fix: update quest's exceptions
2024-07-03 00:53:55 +08:00
Chen, Tai-Lin
462f17a779
fix: update quest [cast]
2024-07-03 00:53:55 +08:00
Chen, Tai-Lin
3deabb25a9
fix: update quest [get-started]
2024-07-03 00:53:55 +08:00
Chen, Tai-Lin
3dad7ddccb
fix: revise quest content [get-started] (1 to be fixed)
2024-07-03 00:53:55 +08:00
Chen, Tai-Lin
25888a1465
fix: modify component name and title (HintPart=>DescriptionPart)
2024-07-03 00:53:55 +08:00
Chen, Tai-Lin
3559814f55
fix: quest error [remove]
2024-07-03 00:44:30 +08:00
Chen, Tai-Lin
8142ff816c
Merge branch 'fix-current-quests' of https://github.com/lancatlin/linux-odyssey into fix-current-quests
2024-07-03 00:34:39 +08:00
Chen, Tai-Lin
9c160253c9
fix: update quest [read]
2024-07-03 00:34:33 +08:00
Chen, Tai-Lin
80e1a40b6e
fix: update quest [path]
2024-07-03 00:34:33 +08:00
Chen, Tai-Lin
2b70f3c7cd
fix: update quest [move]
2024-07-03 00:34:32 +08:00
Chen, Tai-Lin
2e29919ad9
fix: update quest [helloworld]
2024-07-03 00:34:32 +08:00
Chen, Tai-Lin
ca79042a3b
fix: update quest [get-started]
2024-07-03 00:34:32 +08:00
Chen, Tai-Lin
c8d2320bf5
fix: update quest [explore]
2024-07-03 00:34:32 +08:00
Chen, Tai-Lin
441909efd5
fix: update quest [remove]
2024-07-03 00:34:32 +08:00
Chen, Tai-Lin
90e3fc2bd0
fix: update quest [create]
2024-07-03 00:34:32 +08:00
Chen, Tai-Lin
598141d735
fix: update quest [cast]
2024-07-03 00:34:32 +08:00
Chen, Tai-Lin
e11432be45
fix: update quest [copy]
2024-07-03 00:34:32 +08:00
Chen, Tai-Lin
2c1fe7bb96
fix: quests exceptions error
2024-07-03 00:34:32 +08:00
Chen, Tai-Lin
8c54bfe192
fix: update quest [explore]
2024-07-03 00:34:32 +08:00
Chen, Tai-Lin
d292195302
fix: update quest answer file [get-started]
2024-07-03 00:34:32 +08:00
Chen, Tai-Lin
6bbf70a258
fix: update quest's exceptions
2024-07-03 00:34:32 +08:00
Chen, Tai-Lin
526b856de7
fix: update quest [cast]
2024-07-03 00:34:32 +08:00
Chen, Tai-Lin
1a20ffb295
fix: update quest [get-started]
2024-07-03 00:34:32 +08:00
Chen, Tai-Lin
4efa9b8831
fix: revise quest content [get-started] (1 to be fixed)
2024-07-03 00:34:32 +08:00
Chen, Tai-Lin
3944e91d0c
fix: modify component name and title (HintPart=>DescriptionPart)
2024-07-03 00:34:32 +08:00
wancat
c30b4a7c6e
feat: add isGuest migration script
2024-07-03 00:34:32 +08:00
wancat
14cd16b611
feat: add isGuest field in user model
2024-07-03 00:34:32 +08:00
wancat
b07b60f6bd
feat: add register guest button
2024-07-03 00:34:32 +08:00
wancat
9d1bed7543
feat: add register-guest api
2024-07-03 00:34:32 +08:00
wancat
715352f77c
feat: install date-fns
2024-07-03 00:34:32 +08:00
Annie Huang
c4550a395a
fix map view
2024-07-03 00:34:32 +08:00
dependabot[bot]
5795cb16b8
build(deps): bump tar from 6.2.0 to 6.2.1
...
Bumps [tar](https://github.com/isaacs/node-tar ) from 6.2.0 to 6.2.1.
- [Release notes](https://github.com/isaacs/node-tar/releases )
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md )
- [Commits](https://github.com/isaacs/node-tar/compare/v6.2.0...v6.2.1 )
---
updated-dependencies:
- dependency-name: tar
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-07-03 00:34:32 +08:00
Chen, Tai-Lin
691a6dcb25
fix: update quest [read]
2024-07-03 00:32:04 +08:00
Chen, Tai-Lin
979ea72f3a
fix: update quest [path]
2024-07-03 00:31:57 +08:00
Chen, Tai-Lin
f9e40edb8a
fix: update quest [move]
2024-07-03 00:31:46 +08:00
Chen, Tai-Lin
276bfee5ed
fix: update quest [helloworld]
2024-07-03 00:31:40 +08:00
Chen, Tai-Lin
f03c359f89
fix: update quest [get-started]
2024-07-03 00:31:30 +08:00
Chen, Tai-Lin
7db08a5cda
fix: update quest [explore]
2024-07-03 00:31:20 +08:00
Chen, Tai-Lin
b19f0da678
fix: update quest [remove]
2024-07-03 00:31:10 +08:00
Chen, Tai-Lin
c87eef233c
fix: update quest [create]
2024-07-03 00:30:59 +08:00
Chen, Tai-Lin
dabc40eb1e
fix: update quest [cast]
2024-07-03 00:30:44 +08:00
Chen, Tai-Lin
0efe2235f8
fix: update quest [copy]
2024-07-03 00:30:37 +08:00
Chen, Tai-Lin
9d45993d0d
fix: quests exceptions error
2024-07-02 22:32:00 +08:00
Lin, Hung-Shin
99871fa299
Fix exception not showing bug ( #143 )
2024-07-02 11:58:27 +08:00
wancat
248271355f
fix: restore quests changes to prevent conflicts
2024-07-02 11:57:55 +08:00
Chen, Tai-Lin
79f9cb3e95
fix: update quest [explore]
2024-07-02 02:09:09 +08:00
Chen, Tai-Lin
47c7ff04a9
fix: update quest answer file [get-started]
2024-07-02 00:49:42 +08:00
Chen, Tai-Lin
f831f4d4e5
fix: update quest's exceptions
2024-07-01 23:39:58 +08:00
Chen, Tai-Lin
29799faa79
fix: update quest [cast]
2024-07-01 23:10:46 +08:00
Chen, Tai-Lin
2727c9f4bb
fix: update quest [get-started]
2024-07-01 22:38:42 +08:00
wancat
988cb65b51
fix: wrong exception condition
2024-07-01 10:41:48 +08:00
wancat
4324932fc9
fix: exception not showing
2024-07-01 10:41:26 +08:00
wancat
e9b49502ab
fix: progress not update when completing quest
2024-06-28 16:42:15 +08:00
Lin, Hung-Shin
d5519e7157
Fix duplicate responses ( #140 )
2024-06-28 16:19:48 +08:00
wancat
ed596c245d
fix: duplicate response
2024-06-28 16:17:28 +08:00
Lin, Hung-Shin
57c080d88b
Add start session button ( #134 )
...
- Add new file StartButton
- Covering Hint part and Terminal part
- Load instruction before pressing button
- Load session after pressing the button
2024-06-28 16:15:26 +08:00
wancat
d795dbd788
refactor: Remove commented out code and unused imports
2024-06-28 16:14:26 +08:00
wancat
218d433c14
fix: remove unused logging
2024-06-28 16:05:45 +08:00
wancat
48835f8830
feat: change e2e to not required
2024-06-28 11:41:12 +08:00
Chen, Tai-Lin
9ed726d597
fix: revise quest content [get-started] (1 to be fixed)
2024-06-28 02:25:34 +08:00
Chen, Tai-Lin
fcb52b9d9e
fix: modify component name and title (HintPart=>DescriptionPart)
2024-06-28 02:14:22 +08:00
wancat
dcd8f441f8
feat: echo start after creating session
2024-06-27 12:14:15 +08:00
wancat
94ef3749f5
fix: socket & terminal states across quests
2024-06-27 12:04:35 +08:00
wancat
3398d18055
feat: load session and display start button if not exists
2024-06-27 11:55:34 +08:00
wancat
c64043316e
feat: replace getOrCreateActive session to getActiveSession
2024-06-27 11:54:28 +08:00
wancat
7cdc542c19
refactor: rewrite session store using pinia and fix start button
2024-06-27 11:23:21 +08:00
wancat
78b9529699
refactor: rewrite map page using user profile store
2024-06-27 10:52:02 +08:00
wancat
8a31a58c56
refactor: rewrite user profile store using pinia
2024-06-27 10:48:08 +08:00
wancat
103ce4774c
refactor: rename dev docker compose file and remove unused services
2024-06-27 10:31:26 +08:00
Annie Huang
4e6602d82f
change post to get (not yet success)
2024-06-27 10:30:00 +08:00
Annie Huang
2eaf3c8f24
auto type echo start
2024-06-27 10:30:00 +08:00
Annie Huang
15465feda9
auto connect session, create session after button
2024-06-27 10:30:00 +08:00
Annie Huang
ea2ba2c7a0
load quest info before start
2024-06-27 10:30:00 +08:00
Annie Huang
0b136a830a
add start button
...
- new stage will load previous stored data at first
2024-06-27 10:30:00 +08:00
Lin, Hung-Shin
3848ca6941
116 guest account ( #137 )
...
* add isGuest flag in User model
* add register guest api
* add continue as guest button in frontend
2024-06-27 10:03:04 +08:00
wancat
443e810471
feat: add isGuest migration script
2024-06-17 20:12:32 +08:00
wancat
198dcae3f8
feat: add isGuest field in user model
2024-06-17 19:50:58 +08:00
wancat
7347c37a9e
feat: add register guest button
2024-06-17 19:49:00 +08:00
wancat
1d725d82ae
feat: add register-guest api
2024-06-17 19:23:30 +08:00
wancat
b5c601f4a9
feat: install date-fns
2024-06-17 19:23:23 +08:00
Annie Huang
5069ac12da
fix map view
2024-04-11 23:39:57 +08:00
Lin, Hung-Shin
cec4d86058
build(deps): bump tar from 6.2.0 to 6.2.1 ( #131 )
...
Bumps [tar](https://github.com/isaacs/node-tar ) from 6.2.0 to 6.2.1.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/isaacs/node-tar/commit/bef7b1e4ffab822681fea2a9b22187192ed14717 "><code>bef7b1e</code></a>
6.2.1</li>
<li><a
href="https://github.com/isaacs/node-tar/commit/fe8cd57da5686f8695415414bda49206a545f7f7 "><code>fe8cd57</code></a>
prevent extraction in excessively deep subfolders</li>
<li><a
href="https://github.com/isaacs/node-tar/commit/fe7ebfdcede1f8a2e65db12e19ecc4b3a9934648 "><code>fe7ebfd</code></a>
remove security.md</li>
<li>See full diff in <a
href="https://github.com/isaacs/node-tar/compare/v6.2.0...v6.2.1 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/linux-odyssey/linux-odyssey/network/alerts ).
</details>
2024-04-11 22:39:51 +08:00
dependabot[bot]
93b0bae204
build(deps): bump tar from 6.2.0 to 6.2.1
...
Bumps [tar](https://github.com/isaacs/node-tar ) from 6.2.0 to 6.2.1.
- [Release notes](https://github.com/isaacs/node-tar/releases )
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md )
- [Commits](https://github.com/isaacs/node-tar/compare/v6.2.0...v6.2.1 )
---
updated-dependencies:
- dependency-name: tar
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-04-11 11:56:58 +00:00
Lin, Hung-Shin
4713b11c95
Fix e2e Testing ( #130 )
...
**Fix e2e broken caused by website modification**
- Add back "GameTitle" for **Linux Odyssey** in header
- Delete echo hint in quest **move** (It stucks the testing)
- Modify paths for several testing describes
- Fix type problems in command.ts
2024-04-11 15:19:38 +08:00
Annie Huang
36e6bc10d3
fix: e2e broken caused by website modification
2024-04-09 11:32:58 +08:00
Annie Huang
580d5fc3f8
Feat landing page - Mobile Optimisation ( #112 )
...
This optimisation is for mobile usage and also make header a better
component.
- Header Restruction
- Menu pop up when using smaller screen
- Seperate header components and other components
2024-04-07 23:49:53 +08:00
Annie Huang
d8392ec3f6
delete redundant code
2024-04-07 23:44:41 +08:00
Annie Huang
5f99f42f5f
fix type problems
2024-04-07 20:41:17 +08:00
Annie Huang
bdf757c2d4
fix: header components in the middle
2024-04-07 20:40:44 +08:00
Annie Huang
453bfb7f1e
delete redundant code
2024-04-06 22:06:48 +08:00
wancat
3b470ed952
fix: session store type
2024-04-06 22:06:48 +08:00
Annie Huang
b4af2d46d3
fix hint display problems
2024-04-06 22:06:48 +08:00
Annie Huang
0e96e30b96
categorise components
2024-04-06 22:06:48 +08:00
Annie Huang
3e3ac58c6b
Restruct heading
2024-04-06 22:06:48 +08:00
wancat
9f690548cf
fix: session store type
2024-04-06 22:06:48 +08:00
Annie Huang
cd2ec6df75
fix hint display problems
2024-04-06 22:06:48 +08:00
Annie Huang
8e7b5f2552
modify menu position while open
2024-04-06 22:06:48 +08:00
Annie Huang
385c6bc110
delete testing id
2024-04-06 22:06:48 +08:00
wancat
092cf284dd
fix: session store type
2024-04-06 22:06:48 +08:00
Annie Huang
7806852cab
fix hint display problems
2024-04-06 22:06:48 +08:00
Annie Huang
1e31cf3be5
fix file locations and transfer to ts
2024-04-06 22:06:29 +08:00
Annie Huang
aa903fbacf
fix file position
2024-04-06 22:06:29 +08:00
Annie Huang
df980a7d56
delete redundant code
2024-04-06 22:06:29 +08:00
Annie Huang
980d0497f4
fix header justify end property
2024-04-06 22:06:29 +08:00
Annie Huang
e37a23c34f
mobile menu (but not justify end while bigger screen, still solving)
2024-04-06 22:06:29 +08:00
Annie Huang
f4fc6de4cc
canceling [..vh]
2024-04-06 22:06:29 +08:00
Annie Huang
9bfc6614ca
hide some text when screen is small
2024-04-06 22:06:29 +08:00
Annie Huang
8c4a9ea871
add header to login and register page, modified header class but not fit for all circumstances
2024-04-06 22:06:29 +08:00
Annie Huang
ad29137b86
categorise components - change path
2024-04-06 22:06:29 +08:00
Annie Huang
b5e49547ea
categorise components
2024-04-06 22:06:29 +08:00
Annie Huang
9a4f9b958a
Restruct heading
2024-04-06 22:06:29 +08:00
Annie Huang
29602785cd
rwd player opinions
2024-04-06 22:05:59 +08:00
Lin, Hung-Shin
bf44cce580
Ts project refs ( #108 )
...
# TypeScript Project References
Change shared packages to use [project
reference](https://www.typescriptlang.org/docs/handbook/project-references.html ).
Project references allow TypeScript to automatically build dependency
packages. By this change, we can speed up and simplify the building
process of `server` and `app`. Vite doesn't support project references
yet, so we need to run `yarn workspace app build:refs` before starting
Vite, or you can simply run `yarn build` to build everything.
# ts-node and SWC
Inspired by @chreamy #106 , I changed to use ts-node as dev-server
runner, and use [swc](https://swc.rs/ ) for loader to speed up, which
remove the needs of having a separate tsc daemon.
2024-04-06 00:10:28 +08:00
wancat
7c88a60d94
fix: change test to typescript
2024-04-06 00:03:27 +08:00
wancat
1f55ae09d6
fix: build app docker image
2024-04-05 23:59:26 +08:00
wancat
e2b5bb3b70
fix: terminal type
2024-04-05 23:04:51 +08:00
wancat
ba69685ea2
fix: analytics build image
2024-04-05 22:59:22 +08:00
wancat
84e65c9ef6
feat: enable swc and ts-node in server dev
2024-04-05 22:42:02 +08:00
wancat
f466a7a793
feat: use babel to replace ts-jest (improve performance)
2024-04-05 22:42:02 +08:00
wancat
d74a549b89
fix: docker
2024-04-05 22:42:02 +08:00
wancat
33a1a110e8
feat: use project references to build dependencies efficiently
2024-04-05 22:42:02 +08:00
Lin, Hung-Shin
d4c9d4577c
117 fix oauth ( #127 )
...
* change session cookie from 'strict' to 'lax' to fix "forbidden" issue
* add scope settings to Google
some additional improvements:
* update ESLint settings to allow unused parameters before used ones
some related discussions:
* https://github.com/auth0/passport-auth0/issues/70
*
https://stackoverflow.com/questions/59221899/add-samesite-attribute-to-passport-js-session-cookie
2024-04-05 22:24:16 +08:00
wancat
27b6096633
fix: eslint unused error
2024-04-05 22:22:44 +08:00
Annie Huang
a8a367f477
delete testing id
2024-04-05 22:19:38 +08:00
wancat
78b92ee8ce
fix: session store type
2024-04-05 22:19:38 +08:00
Annie Huang
14fb870838
fix hint display problems
2024-04-05 22:19:38 +08:00
wancat
455fde41ab
fix: OAuth flow by setting scope and cookie to 'lax'
2024-04-05 17:56:09 +08:00
dependabot[bot]
ff1cdc9a95
build(deps-dev): bump vite from 4.5.2 to 4.5.3
...
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite ) from 4.5.2 to 4.5.3.
- [Release notes](https://github.com/vitejs/vite/releases )
- [Changelog](https://github.com/vitejs/vite/blob/v4.5.3/packages/vite/CHANGELOG.md )
- [Commits](https://github.com/vitejs/vite/commits/v4.5.3/packages/vite )
---
updated-dependencies:
- dependency-name: vite
dependency-type: direct:development
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-04-04 15:48:55 +08:00
wancat
df140c64f8
fix: Update eslint rule for unused variables
2024-04-01 11:53:02 +08:00
Lin, Hung-Shin
4efd670ed6
build(deps): bump follow-redirects from 1.15.5 to 1.15.6 ( #114 )
...
Bumps
[follow-redirects](https://github.com/follow-redirects/follow-redirects )
from 1.15.5 to 1.15.6.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/follow-redirects/follow-redirects/commit/35a517c5861d79dc8bff7db8626013d20b711b06 "><code>35a517c</code></a>
Release version 1.15.6 of the npm package.</li>
<li><a
href="https://github.com/follow-redirects/follow-redirects/commit/c4f847f85176991f95ab9c88af63b1294de8649b "><code>c4f847f</code></a>
Drop Proxy-Authorization across hosts.</li>
<li><a
href="https://github.com/follow-redirects/follow-redirects/commit/8526b4a1b2ab3a2e4044299377df623a661caa76 "><code>8526b4a</code></a>
Use GitHub for disclosure.</li>
<li>See full diff in <a
href="https://github.com/follow-redirects/follow-redirects/compare/v1.15.5...v1.15.6 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/linux-odyssey/linux-odyssey/network/alerts ).
</details>
2024-03-28 21:45:49 +08:00
Lin, Hung-Shin
4814626a71
build(deps): bump express from 4.18.2 to 4.19.2 ( #115 )
...
[//]: # (dependabot-start)
⚠️ **Dependabot is rebasing this PR** ⚠️
Rebasing might not happen immediately, so don't worry if this takes some
time.
Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.
---
[//]: # (dependabot-end)
Bumps [express](https://github.com/expressjs/express ) from 4.18.2 to
4.19.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/expressjs/express/releases ">express's
releases</a>.</em></p>
<blockquote>
<h2>4.19.2</h2>
<h2>What's Changed</h2>
<ul>
<li><a
href="https://github.com/expressjs/express/commit/0b746953c4bd8e377123527db11f9cd866e39f94 ">Improved
fix for open redirect allow list bypass</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/expressjs/express/compare/4.19.1...4.19.2 ">https://github.com/expressjs/express/compare/4.19.1...4.19.2 </a></p>
<h2>4.19.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Fix ci after location patch by <a
href="https://github.com/wesleytodd "><code>@wesleytodd</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/5552 ">expressjs/express#5552</a></li>
<li>fixed un-edited version in history.md for 4.19.0 by <a
href="https://github.com/wesleytodd "><code>@wesleytodd</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/5556 ">expressjs/express#5556</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/expressjs/express/compare/4.19.0...4.19.1 ">https://github.com/expressjs/express/compare/4.19.0...4.19.1 </a></p>
<h2>4.19.0</h2>
<h2>What's Changed</h2>
<ul>
<li>fix typo in release date by <a
href="https://github.com/UlisesGascon "><code>@UlisesGascon</code></a>
in <a
href="https://redirect.github.com/expressjs/express/pull/5527 ">expressjs/express#5527</a></li>
<li>docs: nominating <a
href="https://github.com/wesleytodd "><code>@wesleytodd</code></a> to be
project captian by <a
href="https://github.com/wesleytodd "><code>@wesleytodd</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/5511 ">expressjs/express#5511</a></li>
<li>docs: loosen TC activity rules by <a
href="https://github.com/wesleytodd "><code>@wesleytodd</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/5510 ">expressjs/express#5510</a></li>
<li>Add note on how to update docs for new release by <a
href="https://github.com/crandmck "><code>@crandmck</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/5541 ">expressjs/express#5541</a></li>
<li><a
href="https://redirect.github.com/expressjs/express/pull/5551/commits/660ccf5fa33dd0baab069e5c8ddd9ffe7d8bbff1 ">Prevent
open redirect allow list bypass due to encodeurl</a></li>
<li>Release 4.19.0 by <a
href="https://github.com/wesleytodd "><code>@wesleytodd</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/5551 ">expressjs/express#5551</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/crandmck "><code>@crandmck</code></a>
made their first contribution in <a
href="https://redirect.github.com/expressjs/express/pull/5541 ">expressjs/express#5541</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/expressjs/express/compare/4.18.3...4.19.0 ">https://github.com/expressjs/express/compare/4.18.3...4.19.0 </a></p>
<h2>4.18.3</h2>
<h2>Main Changes</h2>
<ul>
<li>Fix routing requests without method</li>
<li>deps: body-parser@1.20 .2
<ul>
<li>Fix strict json error message on Node.js 19+</li>
<li>deps: content-type@~1.0.5</li>
<li>deps: raw-body@2.5.2</li>
</ul>
</li>
</ul>
<h2>Other Changes</h2>
<ul>
<li>Use https: protocol instead of deprecated git: protocol by <a
href="https://github.com/vcsjones "><code>@vcsjones</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/5032 ">expressjs/express#5032</a></li>
<li>build: Node.js@16.18 and Node.js@18.12 by <a
href="https://github.com/abenhamdine "><code>@abenhamdine</code></a> in
<a
href="https://redirect.github.com/expressjs/express/pull/5034 ">expressjs/express#5034</a></li>
<li>ci: update actions/checkout to v3 by <a
href="https://github.com/armujahid "><code>@armujahid</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/5027 ">expressjs/express#5027</a></li>
<li>test: remove unused function arguments in params by <a
href="https://github.com/raksbisht "><code>@raksbisht</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/5124 ">expressjs/express#5124</a></li>
<li>Remove unused originalIndex from acceptParams by <a
href="https://github.com/raksbisht "><code>@raksbisht</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/5119 ">expressjs/express#5119</a></li>
<li>Fixed typos by <a
href="https://github.com/raksbisht "><code>@raksbisht</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/5117 ">expressjs/express#5117</a></li>
<li>examples: remove unused params by <a
href="https://github.com/raksbisht "><code>@raksbisht</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/5113 ">expressjs/express#5113</a></li>
<li>fix: parameter str is not described in JSDoc by <a
href="https://github.com/raksbisht "><code>@raksbisht</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/5130 ">expressjs/express#5130</a></li>
<li>fix: typos in History.md by <a
href="https://github.com/raksbisht "><code>@raksbisht</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/5131 ">expressjs/express#5131</a></li>
<li>build : add Node.js@19.7 by <a
href="https://github.com/abenhamdine "><code>@abenhamdine</code></a> in
<a
href="https://redirect.github.com/expressjs/express/pull/5028 ">expressjs/express#5028</a></li>
<li>test: remove unused function arguments in params by <a
href="https://github.com/raksbisht "><code>@raksbisht</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/5137 ">expressjs/express#5137</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/expressjs/express/blob/master/History.md ">express's
changelog</a>.</em></p>
<blockquote>
<h1>4.19.2 / 2024-03-25</h1>
<ul>
<li>Improved fix for open redirect allow list bypass</li>
</ul>
<h1>4.19.1 / 2024-03-20</h1>
<ul>
<li>Allow passing non-strings to res.location with new encoding handling
checks</li>
</ul>
<h1>4.19.0 / 2024-03-20</h1>
<ul>
<li>Prevent open redirect allow list bypass due to encodeurl</li>
<li>deps: cookie@0.6.0</li>
</ul>
<h1>4.18.3 / 2024-02-29</h1>
<ul>
<li>Fix routing requests without method</li>
<li>deps: body-parser@1.20 .2
<ul>
<li>Fix strict json error message on Node.js 19+</li>
<li>deps: content-type@~1.0.5</li>
<li>deps: raw-body@2.5.2</li>
</ul>
</li>
<li>deps: cookie@0.6.0
<ul>
<li>Add <code>partitioned</code> option</li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/expressjs/express/commit/04bc62787be974874bc1467b23606c36bc9779ba "><code>04bc627</code></a>
4.19.2</li>
<li><a
href="https://github.com/expressjs/express/commit/da4d763ff6ba9df6dbd8f1f0b1d05412dda934d5 "><code>da4d763</code></a>
Improved fix for open redirect allow list bypass</li>
<li><a
href="https://github.com/expressjs/express/commit/4f0f6cc67d531431c096ea006c2191b92931bbc3 "><code>4f0f6cc</code></a>
4.19.1</li>
<li><a
href="https://github.com/expressjs/express/commit/a003cfab034fbadb1c78ae337ee8ab389adda217 "><code>a003cfa</code></a>
Allow passing non-strings to res.location with new encoding handling
checks f...</li>
<li><a
href="https://github.com/expressjs/express/commit/a1fa90fcea7d8e844e1c9938ad095d62669c3abd "><code>a1fa90f</code></a>
fixed un-edited version in history.md for 4.19.0</li>
<li><a
href="https://github.com/expressjs/express/commit/11f2b1db227fd42c2508c427032c1ec671b306be "><code>11f2b1d</code></a>
build: fix build due to inconsistent supertest behavior in older
versions</li>
<li><a
href="https://github.com/expressjs/express/commit/084e36506a18774f85206a65d8da04dc1107fc1b "><code>084e365</code></a>
4.19.0</li>
<li><a
href="https://github.com/expressjs/express/commit/0867302ddbde0e9463d0564fea5861feb708c2dd "><code>0867302</code></a>
Prevent open redirect allow list bypass due to encodeurl</li>
<li><a
href="https://github.com/expressjs/express/commit/567c9c665d0de4c344b8e160146050770233783c "><code>567c9c6</code></a>
Add note on how to update docs for new release (<a
href="https://redirect.github.com/expressjs/express/issues/5541 ">#5541</a>)</li>
<li><a
href="https://github.com/expressjs/express/commit/69a4cf2819c4449ec6ea45649691fb43a528d5d1 "><code>69a4cf2</code></a>
deps: cookie@0.6.0</li>
<li>Additional commits viewable in <a
href="https://github.com/expressjs/express/compare/4.18.2...4.19.2 ">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~wesleytodd ">wesleytodd</a>, a new releaser
for express since your current version.</p>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/linux-odyssey/linux-odyssey/network/alerts ).
</details>
2024-03-28 21:45:13 +08:00
dependabot[bot]
1179faf176
build(deps): bump express from 4.18.2 to 4.19.2
...
Bumps [express](https://github.com/expressjs/express ) from 4.18.2 to 4.19.2.
- [Release notes](https://github.com/expressjs/express/releases )
- [Changelog](https://github.com/expressjs/express/blob/master/History.md )
- [Commits](https://github.com/expressjs/express/compare/4.18.2...4.19.2 )
---
updated-dependencies:
- dependency-name: express
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-03-28 13:44:47 +00:00
Lin, Hung-Shin
a9acf54139
Chris - convert analytics to TS ( #106 )
2024-03-28 21:43:17 +08:00
wancat
b64f49915f
fix: restore server changes
2024-03-28 21:39:26 +08:00
wancat
ef279ba00e
fix: building and production starting scripts
2024-03-28 21:35:07 +08:00
wancat
eb106c020a
fix: missing express type annotation
2024-03-28 21:28:18 +08:00
Lin, Hung-Shin
432084cc66
Delete package-lock.json
2024-03-28 21:23:30 +08:00
Lin, Hung-Shin
2fb1315c5a
Feat typescript frontend ( #107 )
...
There is still tons of errors in e2e. Fix it after merging.
2024-03-28 21:22:42 +08:00
wancat
75f5407dde
fix: fix overwritten new response model
2024-03-28 21:18:00 +08:00
wancat
ebd713200c
refactor: update socket types
2024-03-28 21:06:09 +08:00
wancat
bb2a1a145f
refactor: move interfaces to types.ts
2024-03-28 20:55:40 +08:00
Chen, Tai-Lin
7f33100132
update
2024-03-25 15:48:37 +08:00
Chen, Tai-Lin
59a0865157
reverse change
2024-03-25 14:53:44 +08:00
chreamy
c843a03fc8
feat: analytics UI
2024-03-25 00:08:14 -05:00
dependabot[bot]
182cc7d1bb
build(deps): bump follow-redirects from 1.15.5 to 1.15.6
...
Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects ) from 1.15.5 to 1.15.6.
- [Release notes](https://github.com/follow-redirects/follow-redirects/releases )
- [Commits](https://github.com/follow-redirects/follow-redirects/compare/v1.15.5...v1.15.6 )
---
updated-dependencies:
- dependency-name: follow-redirects
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-03-16 23:56:54 +00:00
chreamy
daa3f11b2e
test build
2024-03-11 22:16:17 -05:00
chreamy
a4c121dc94
test build
2024-03-11 22:14:30 -05:00
chreamy
5adaa47c5c
test build
2024-03-11 22:10:32 -05:00
chreamy
3345fb3b3f
test build
2024-03-11 22:06:43 -05:00
chreamy
0313671ff5
test build
2024-03-11 21:37:38 -05:00
chreamy
e31511fdc1
fix: file imports
2024-03-11 21:33:01 -05:00
chreamy
685be8c1d2
fix: file imports
2024-03-11 21:27:15 -05:00
chreamy
0d2e62be24
fix: file imports
2024-03-11 21:18:44 -05:00
chreamy
962db4e8a4
fix: file imports
2024-03-11 21:14:45 -05:00
chreamy
52d8e86043
fix: file imports
2024-03-11 21:05:02 -05:00
Christopher Liu and Lin, Hung-Shin
51fb25aa50
Update packages/analytics/package.json
...
Co-authored-by: Lin, Hung-Shin <wancat@wancat.cc >
2024-03-11 20:51:49 -05:00
Christopher Liu and Lin, Hung-Shin
d2d8374926
Update packages/analytics/package.json
...
Co-authored-by: Lin, Hung-Shin <wancat@wancat.cc >
2024-03-11 20:51:40 -05:00
Christopher Liu and Lin, Hung-Shin
4570162e7b
Update packages/analytics/nodemon.json
...
Co-authored-by: Lin, Hung-Shin <wancat@wancat.cc >
2024-03-11 20:51:27 -05:00
Christopher Liu and Lin, Hung-Shin
3194c03f48
Update packages/analytics/src/interface.ts
...
Co-authored-by: Lin, Hung-Shin <wancat@wancat.cc >
2024-03-11 20:50:49 -05:00
Chen, Tai-Lin
c4fd92e289
fix types issue
2024-03-11 21:04:32 +08:00
wancat
b449ea455a
feat: add Session and stage active check
2024-03-08 01:05:26 +08:00
wancat
5bea2ea78c
feat: add stage condition checks
2024-03-08 00:47:50 +08:00
wancat
77fe2d37b3
feat: create stage
2024-03-08 00:38:49 +08:00
wancat
65ad72223b
feat: add checkfiles into Condition
2024-03-08 00:24:51 +08:00
wancat
d612b2d6af
feat: add file matcher
2024-03-08 00:13:38 +08:00
wancat
b5e20766a3
refactor: rename paths
2024-03-07 00:50:42 +08:00
wancat
e5f5590a67
feat: add "or" and "not" matchers
2024-03-07 00:42:49 +08:00
wancat
e83d913852
refactor: separate matchers
2024-03-07 00:25:50 +08:00
wancat
8280f7073d
refactor: remove unnecessary patter matcher
2024-03-06 23:57:35 +08:00
wancat
4f3752060d
feat: condition matcher
2024-03-06 23:54:03 +08:00
wancat
cb26e1dcb0
feat: add output matcher
2024-03-06 23:32:23 +08:00
wancat
9eb08b45f4
feat: add pwdmatcher and update error matcher
2024-03-06 23:28:28 +08:00
wancat
3b4a808131
feat: create pattern and command matcher
2024-03-06 23:06:52 +08:00
wancat
a8a19ca902
Merge branch 'ts-project-refs' into game
2024-03-06 22:39:49 +08:00
chreamy
ce538a049c
modified: packages/analytics/src/models/sessions.ts
...
modified: packages/analytics/src/models/users.ts
2024-03-05 01:51:30 -06:00
chreamy
36932e1eb1
This part is somehow influencing the checks, please review
2024-03-05 01:43:40 -06:00
chreamy
ca3d9b4236
Merge branch 'ts-analytics' of https://github.com/linux-odyssey/linux-odyssey into ts-analytics
2024-03-05 01:38:58 -06:00
chreamy
76e6cda0cb
revert changes
2024-03-05 01:38:38 -06:00
Christopher Liu
3dee3d0373
Merge branch 'main' into ts-analytics
2024-03-05 02:32:48 -05:00
chreamy
218a25daee
feat: user sessions history & fix ts <any>
2024-03-05 01:27:53 -06:00
chreamy
94ae2d7df4
Merge branch 'ts-analytics' of https://github.com/linux-odyssey/linux-odyssey into ts-analytics
2024-03-05 01:27:10 -06:00
chreamy
a71411d5bf
Feat: User Session History
2024-03-05 00:26:22 -06:00
Chen, Tai-Lin
807974d727
fix types issue
2024-03-05 00:27:08 +08:00
Chen, Tai-Lin
ec63bba0fe
fix using any type
2024-03-04 23:38:18 +08:00
Chen, Tai-Lin
ddaefca5fb
fix using Ref<any> type
2024-03-04 23:38:18 +08:00
Chen, Tai-Lin
ba43b4c5e8
fix wrong yarn package location
2024-03-04 23:38:18 +08:00
Chen, Tai-Lin
f52017ef9f
update .vue
2024-03-04 23:37:46 +08:00
Chen, Tai-Lin
af9b443865
update socket.ts
2024-03-04 23:35:05 +08:00
Chen, Tai-Lin
4739849549
update views
2024-03-04 23:35:05 +08:00
Chen, Tai-Lin
63a57aa2cf
update components
2024-03-04 23:35:05 +08:00
Chen, Tai-Lin
ead321cd62
update config
2024-03-04 23:35:05 +08:00
Chen, Tai-Lin
516e59f855
update utils
2024-03-04 23:35:05 +08:00
Chen, Tai-Lin
4ddbb5aede
update app
2024-03-04 23:35:05 +08:00
Chen, Tai-Lin
d924ccaaa9
update store
2024-03-04 23:35:05 +08:00
Chen, Tai-Lin
c324bfcfee
update utils
2024-03-04 23:34:06 +08:00
wancat
817cf8c40e
hotfix: redirect to map after login
2024-03-01 23:49:58 +08:00
wancat
4e8a56f127
hotfix: analytics build
2024-03-01 23:21:09 +08:00
wancat
6aed5789a5
Merge remote-tracking branch 'origin/main' into feat-landing-page
2024-03-01 23:13:15 +08:00
Lin, Hung-Shin
d737347d0b
UI dialogue ( #110 )
2024-03-01 23:09:39 +08:00
wancat
5041ec9dc6
Contact
2024-03-01 22:48:21 +08:00
wancat
c2c792f10c
video and about
2024-03-01 22:27:00 +08:00
wancat
85b34abc7e
responsive content block
2024-03-01 21:59:12 +08:00
wancat
2bfd2cc06d
setup main block
2024-03-01 21:49:31 +08:00
Annie Huang
5dbdadbb27
change text block color
2024-03-01 21:28:51 +08:00
wancat
1e2a43db50
items-center the header
2024-03-01 21:24:21 +08:00
Annie Huang
ba7409b7a8
- add icons
...
- change first page to landing-page
- add text background
- modify text arrangement
2024-03-01 20:36:36 +08:00
Annie Huang
f9decee80b
fix: scroll bug
...
modify contact layout
2024-03-01 16:17:13 +08:00
Annie Huang
bef134871d
- edit position
...
- add group info
- add opinions
- add start button
2024-02-29 23:06:47 +08:00
Annie Huang
46e27c7456
- add contacts
...
- change contents
- fix broken page
2024-02-29 15:23:07 +08:00
Annie Huang
9146c433b3
add youtube embedded
2024-02-29 15:23:07 +08:00
Annie Huang
00e421861f
Landing page
...
- header
- jump to section
2024-02-29 15:23:07 +08:00
Annie Huang
cdd76f7d0c
add new page
2024-02-29 15:23:07 +08:00
wancat
a389d2752d
disable wait pending in e2e tests
2024-02-29 10:54:53 +08:00
wancat
039da53bbe
feat: send status to the frontend
2024-02-29 10:54:53 +08:00
wancat
622d64dd45
fix: overflow in hint
2024-02-29 10:54:53 +08:00
wancat
90e661f77b
Display dialogue in hints. Adjust Game page layout
2024-02-29 10:54:53 +08:00
wancat
88ee8f2cc3
feat: send response to frontend
2024-02-29 10:54:53 +08:00
wancat
6967e230d0
feat: enable swc and ts-node in server dev
2024-02-29 00:33:41 +08:00
wancat
bb4a11b20c
fix: use swc to optimize ts-node speed
2024-02-29 00:27:06 +08:00
wancat
031d7a8ceb
fix: analytics dockerfile
2024-02-29 00:10:11 +08:00
wancat
48dbac7907
fix: import path and dev server using tsc and nodemon
2024-02-29 00:04:09 +08:00
Christopher Liu
ea33434bea
Update config.ts
2024-02-28 23:38:33 +08:00
chreamy
923de901c4
convert analytics to TS
2024-02-28 23:38:33 +08:00
wancat
6c111a4475
feat: use babel to replace ts-jest (improve performance)
2024-02-28 23:32:06 +08:00
wancat
15278dfab2
fix: docker
2024-02-28 23:32:06 +08:00
wancat
0644783cc4
feat: use project references to build dependencies efficiently
2024-02-28 23:32:06 +08:00
Lin, Hung-Shin
fb69cb4e10
Feat automation test - Transfer to Typescript ( #104 )
...
- Update Readme for new build-up commands (still not the latest version)
- Add Cpress optional OAuth activation
- Transfer testing files into Typescript
2024-02-28 23:29:24 +08:00
wancat
818e4e95e4
fix: compile cypress to commonjs to fix docker issue
2024-02-28 23:20:29 +08:00
Annie Huang
2aa1c84e73
delete port setting of db in testing yml
2024-02-27 22:23:10 +08:00
Annie Huang
1b52349f03
delete redundant code
2024-02-27 14:26:37 +08:00
wancat
a9bc2cc127
fix: disable sourceMap in cypress tsconfig
2024-02-27 12:54:30 +08:00
wancat
7c08d21142
fix: downgrade yarn to v1 in docker
2024-02-27 12:02:22 +08:00
wancat
b059cca7b2
fix jest types by import @jest/globals
2024-02-27 11:45:10 +08:00
Annie Huang
9e108e397b
extend from global settings and modify cypress config
2024-02-27 11:41:37 +08:00
chreamy
dc972173a4
Merge branch 'ts-analytics' of https://github.com/linux-odyssey/linux-odyssey into ts-analytics
2024-02-26 20:43:25 -06:00
chreamy
56d07f14b4
Merge branch 'main' of https://github.com/linux-odyssey/linux-odyssey into ts-analytics
2024-02-26 20:43:16 -06:00
Christopher Liu
b47bb62831
Update config.ts
2024-02-26 20:33:54 -06:00
chreamy
ece0ec7c41
convert analytics to TS
2024-02-26 20:23:03 -06:00
Annie Huang
004d232a84
try transfering config to ts(but import is failing)
2024-02-27 00:12:07 +08:00
Annie Huang
0a730e4eef
exclude cypress config and e2e.js
2024-02-26 23:50:51 +08:00
Annie Huang
5091f8f24f
revise jest tsconfig
2024-02-26 23:44:53 +08:00
Annie Huang
87060aa3ef
try: fix collison excluding and including
2024-02-23 18:19:33 +08:00
Annie Huang
670a5b2e87
try: fix collison by settings
2024-02-23 17:51:31 +08:00
Annie Huang
f540a0166d
add include jest
2024-02-23 17:21:09 +08:00
Annie Huang
b98f4e4c07
exclude jest
2024-02-23 17:17:23 +08:00
Annie Huang
31eb638a6e
fix typo
2024-02-23 17:06:59 +08:00
Annie Huang
583605ef3a
try: fix collison of Jest
2024-02-23 16:59:55 +08:00
wancat
8c6b86ad17
restore changes
2024-02-23 15:09:46 +08:00
wancat
8670d2b3bb
fix: ignore eslint warning
2024-02-23 15:06:12 +08:00
wancat
07ec58e41c
fix: enable restart of db
2024-02-23 15:06:01 +08:00
wancat
025553f42a
Merge branch 'main' into feat-automation-test
2024-02-23 14:59:00 +08:00
Lin, Hung-Shin
bfa839f2f9
Refactor server ( #102 )
2024-02-23 14:55:55 +08:00
Annie Huang
b57e7adb37
update readme
2024-02-23 13:02:23 +08:00
Annie Huang
b1a9a6102c
Optional oAuth activation in Cypress
2024-02-23 11:34:47 +08:00
wancat
c5a7e77f04
fix: testing base url. change cypress base image
2024-02-22 23:15:29 +08:00
Annie Huang
ed142ab27b
update declare types
2024-02-22 23:03:43 +08:00
wancat
f29dcf810f
fix: Dockerfile missing workspace name
...
This commit updates the Dockerfile to build the @linux-odyssey/models and @linux-odyssey/constants workspaces, in addition to the existing workspaces.
2024-02-22 22:26:45 +08:00
wancat
48cfcb2c36
fix dockerfiles by using classic yarn
2024-02-22 22:24:29 +08:00
wancat
14eea84a36
fix: restore yarn version to classic
2024-02-22 22:03:55 +08:00
wancat
c0efce69f4
fix: jest. enable coverage
2024-02-22 21:31:29 +08:00
wancat
37b1bead28
change dependency type
2024-02-22 20:51:49 +08:00
wancat
9f1008336d
refactor: routes and index.js
2024-02-22 20:44:47 +08:00
wancat
59590639ee
refactor: authController, add session types
2024-02-22 20:35:19 +08:00
wancat
885f1c5b27
refactor: leaderboard controller
2024-02-22 20:18:04 +08:00
wancat
ac8e9d1cfa
refactor quest controller
2024-02-22 20:16:08 +08:00
wancat
fd543ed594
finish session controller
2024-02-22 20:10:03 +08:00
wancat
c0ec382510
enable source map in dev mode, add delay for nodemon starting
2024-02-22 20:09:47 +08:00
wancat
e84ca12647
fix missing types in utils
2024-02-19 23:57:08 +08:00
wancat
c912319967
refactor: userController and add req user type
2024-02-19 23:51:21 +08:00
wancat
4c421b4cb3
refactor: game
2024-02-19 23:13:37 +08:00
wancat
2d05149cea
refactor socket
2024-02-19 19:24:18 +08:00
wancat
ad66191d88
refactor: validators
2024-02-19 19:09:32 +08:00
wancat
5e8df7ae01
refactor: middlewares
2024-02-19 19:08:34 +08:00
Annie Huang
9bac360498
fixed type error
2024-02-19 18:46:50 +08:00
wancat
7c1d83ccd3
refactor: cli
2024-02-19 18:36:50 +08:00
wancat
4ab3096fa5
refactor: fix file condition checks
2024-02-19 18:35:39 +08:00
wancat
64215d3ef1
refactor: container
2024-02-19 18:23:52 +08:00
wancat
075e21fb89
change scripts from "watch" to "dev"
2024-02-19 18:05:01 +08:00
wancat
9dc0b43737
add types to models
2024-02-19 18:05:01 +08:00
wancat
5489de2432
refactor: auth
2024-02-19 18:05:01 +08:00
wancat
d6c95cea4a
refactor utils
2024-02-19 18:05:00 +08:00
Annie Huang
2cb82fdcdc
fix type error
2024-02-15 21:20:32 +08:00
Annie Huang
2b495f7cda
update testing library settings and global functions
2024-02-14 16:16:01 +08:00
Lin, Hung-Shin
9509bbc355
Refactor packages ( #101 )
2024-02-09 23:19:36 +08:00
wancat
c3d9130731
Remove logging config into console
2024-02-09 14:33:27 +08:00
Lin, Hung-Shin
4f9b275211
Fix issue 51 ( #99 )
...
Please test if this passes security check, modified
server/src/api/routes/index.js
2024-02-09 14:26:28 +08:00
wancat
db16413754
feat: set cookie to secure and strict
2024-02-09 14:24:32 +08:00
Annie Huang
5c17f5ea3c
typescript initial edit
2024-02-08 17:49:16 +08:00
wancat
ca2a40341c
Merge branch 'main' into fix-issue-51
2024-02-08 17:48:11 +08:00
wancat
c06d6d6deb
change e2e to use node module
2024-02-08 17:40:01 +08:00
Annie Huang
f797f4d897
update readme -- build up method
2024-02-07 14:24:54 +08:00
wancat
640d6b58c5
fix ts error
2024-02-07 10:41:46 +08:00
wancat
79a5dac7f1
fix mongo no matching document when deleting container
2024-02-07 10:37:38 +08:00
wancat
cfda174dc5
refactor constants
2024-02-07 10:36:56 +08:00
wancat
ee03b9999e
refactor models to typescript
2024-02-07 10:20:19 +08:00
wancat
253bd04588
finish file-graph and solve jest ts
2024-02-07 10:03:53 +08:00
wancat
2a542302bc
update eslint to omit blank line between members
2024-02-06 09:31:20 +08:00
wancat
e91774fe3b
refactor utils
2024-02-06 09:20:01 +08:00
Lin, Hung-Shin
23f9023f8b
Feat typescript ( #93 )
...
tired. Merge first
2024-02-05 13:15:53 +08:00
wancat
5b0d1f92c4
setup docker prod
2024-02-05 13:13:34 +08:00
wancat
ec4e97a7d6
able to run server without in docker
2024-02-05 12:41:07 +08:00
wancat
19cd66475c
add building scripts
2024-02-05 12:33:05 +08:00
wancat
c353f81b9f
fix vue eslint error
2024-02-05 11:57:53 +08:00
wancat
6e4e1cfed1
fix eslint
2024-02-05 11:49:27 +08:00
wancat
78966d351f
change to use esm
2024-01-30 09:06:41 +08:00
wancat
eb231e4056
Remove project references and add build:watch all
2024-01-29 13:26:41 +08:00
wancat
ba3b40792b
add dotenv to server
2024-01-29 13:21:33 +08:00
wancat
7216158053
add app
2024-01-29 13:21:07 +08:00
wancat
5f36f732b1
feat: docker dev mode
2024-01-29 12:42:50 +08:00
wancat
30aefb47f9
feat: setup project reference
2024-01-29 12:42:50 +08:00
Lin, Hung-Shin
1531846482
fix: eslint
2024-01-29 12:42:50 +08:00
Lin, Hung-Shin
a18e0d9b68
fix: setup Jest with TS
2024-01-29 12:42:50 +08:00
Lin, Hung-Shin
557af91d4b
feat: change to use commonjs output
2024-01-29 12:42:50 +08:00
Lin, Hung-Shin
2bdb804f24
WIP: fixing tests
2024-01-29 12:42:50 +08:00
Lin, Hung-Shin
8eaec839d3
feat: add post-build-script to gradually migrate
2024-01-29 12:42:50 +08:00
Lin, Hung-Shin
3977db87a3
feat: add typescript to file-graph and server
2024-01-29 12:42:50 +08:00
Lin, Hung-Shin
e6abd08963
Fix: Issue 96 ( #98 )
2024-01-28 20:40:56 -06:00
Lin, Hung-Shin
68e922878b
Update tests/package.json
2024-01-29 10:32:38 +08:00
Lin, Hung-Shin
e9e3bc25af
build(deps): bump follow-redirects from 1.15.2 to 1.15.4 ( #95 )
...
Bumps
[follow-redirects](https://github.com/follow-redirects/follow-redirects )
from 1.15.2 to 1.15.4.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/follow-redirects/follow-redirects/commit/65858205e59f1e23c9bf173348a7a7cbb8ac47f5 "><code>6585820</code></a>
Release version 1.15.4 of the npm package.</li>
<li><a
href="https://github.com/follow-redirects/follow-redirects/commit/7a6567e16dfa9ad18a70bfe91784c28653fbf19d "><code>7a6567e</code></a>
Disallow bracketed hostnames.</li>
<li><a
href="https://github.com/follow-redirects/follow-redirects/commit/05629af696588b90d64e738bc2e809a97a5f92fc "><code>05629af</code></a>
Prefer native URL instead of deprecated url.parse.</li>
<li><a
href="https://github.com/follow-redirects/follow-redirects/commit/1cba8e85fa73f563a439fe460cf028688e4358df "><code>1cba8e8</code></a>
Prefer native URL instead of legacy url.resolve.</li>
<li><a
href="https://github.com/follow-redirects/follow-redirects/commit/72bc2a4229bc18dc9fbd57c60579713e6264cb92 "><code>72bc2a4</code></a>
Simplify _processResponse error handling.</li>
<li><a
href="https://github.com/follow-redirects/follow-redirects/commit/3d42aecdca39b144a0a2f27ea134b4cf67dd796a "><code>3d42aec</code></a>
Add bracket tests.</li>
<li><a
href="https://github.com/follow-redirects/follow-redirects/commit/bcbb096b32686ecad6cd34235358ed6f2217d4f0 "><code>bcbb096</code></a>
Do not directly set Error properties.</li>
<li><a
href="https://github.com/follow-redirects/follow-redirects/commit/192dbe7ce671ecad813c074bffe3b3f5d3680fee "><code>192dbe7</code></a>
Release version 1.15.3 of the npm package.</li>
<li><a
href="https://github.com/follow-redirects/follow-redirects/commit/bd8c81e4f32d12f28a35d265f88b1716703687c6 "><code>bd8c81e</code></a>
Fix resource leak on destroy.</li>
<li><a
href="https://github.com/follow-redirects/follow-redirects/commit/9c728c314b06f9595dcd7f245d40731e8a27d79f "><code>9c728c3</code></a>
Split linting and testing.</li>
<li>Additional commits viewable in <a
href="https://github.com/follow-redirects/follow-redirects/compare/v1.15.2...v1.15.4 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/linux-odyssey/linux-odyssey/network/alerts ).
</details>
2024-01-28 20:31:31 -06:00
Lin, Hung-Shin
d4bb5d8f73
build(deps-dev): bump vite from 4.4.12 to 4.5.2 ( #100 )
...
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite )
from 4.4.12 to 4.5.2.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/blob/v4.5.2/packages/vite/CHANGELOG.md ">vite's
changelog</a>.</em></p>
<blockquote>
<h2><!-- raw HTML omitted -->4.5.2 (2024-01-19)<!-- raw HTML omitted
--></h2>
<ul>
<li>fix: fs deny for case insensitive systems (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/15653 ">#15653</a>)
(<a href="https://github.com/vitejs/vite/commit/eeec23b ">eeec23b</a>),
closes <a
href="https://redirect.github.com/vitejs/vite/issues/15653 ">#15653</a></li>
</ul>
<h2><!-- raw HTML omitted -->4.5.1 (2023-12-04)<!-- raw HTML omitted
--></h2>
<ul>
<li>fix: backport <a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/15223 ">#15223</a>,
proxy html path should be encoded (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/15226 ">#15226</a>)
(<a href="https://github.com/vitejs/vite/commit/41bb354 ">41bb354</a>),
closes <a
href="https://redirect.github.com/vitejs/vite/issues/15223 ">#15223</a>
<a
href="https://redirect.github.com/vitejs/vite/issues/15226 ">#15226</a></li>
</ul>
<h2>4.5.0 (2023-10-18)</h2>
<ul>
<li>feat: backport mdx as known js source (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/14560 ">#14560</a>)
(<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/14670 ">#14670</a>)
(<a href="https://github.com/vitejs/vite/commit/45595ef ">45595ef</a>),
closes <a
href="https://redirect.github.com/vitejs/vite/issues/14560 ">#14560</a>
<a
href="https://redirect.github.com/vitejs/vite/issues/14670 ">#14670</a></li>
<li>feat: scan .marko files (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/14669 ">#14669</a>)
(<a href="https://github.com/vitejs/vite/commit/ed7bdc5 ">ed7bdc5</a>),
closes <a
href="https://redirect.github.com/vitejs/vite/issues/14669 ">#14669</a></li>
<li>feat(ssr): backport ssr.resolve.conditions and
ssr.resolve.externalConditions (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/14498 ">#14498</a>)
(<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/14668 ">#14668</a>)
(<a href="https://github.com/vitejs/vite/commit/520139c ">520139c</a>),
closes <a
href="https://redirect.github.com/vitejs/vite/issues/14498 ">#14498</a>
<a
href="https://redirect.github.com/vitejs/vite/issues/14668 ">#14668</a></li>
</ul>
<h2><!-- raw HTML omitted -->4.4.11 (2023-10-05)<!-- raw HTML omitted
--></h2>
<ul>
<li>revert: "fix: use string manipulation instead of regex to
inject esbuild helpers (<a
href="https://github.com/vitejs/vite/commit/54e1275 ">54e1275</a>),
closes <a
href="https://redirect.github.com/vitejs/vite/issues/14094 ">#14094</a></li>
</ul>
<h2><!-- raw HTML omitted -->4.4.10 (2023-10-03)<!-- raw HTML omitted
--></h2>
<ul>
<li>fix: add source map to Web Workers (fix <a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/14216 ">#14216</a>)
(<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/14217 ">#14217</a>)
(<a href="https://github.com/vitejs/vite/commit/df6f32f ">df6f32f</a>),
closes <a
href="https://redirect.github.com/vitejs/vite/issues/14216 ">#14216</a>
<a
href="https://redirect.github.com/vitejs/vite/issues/14217 ">#14217</a></li>
<li>fix: handle errors during <code>hasWorkspacePackageJSON</code>
function (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/14394 ">#14394</a>)
(<a href="https://github.com/vitejs/vite/commit/6f6e5de ">6f6e5de</a>),
closes <a
href="https://redirect.github.com/vitejs/vite/issues/14394 ">#14394</a></li>
<li>fix: handle sourcemap correctly when multiple line import exists (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/14232 ">#14232</a>)
(<a href="https://github.com/vitejs/vite/commit/218861f ">218861f</a>),
closes <a
href="https://redirect.github.com/vitejs/vite/issues/14232 ">#14232</a></li>
<li>fix: if host is specified check whether it is valid (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/14013 ">#14013</a>)
(<a href="https://github.com/vitejs/vite/commit/b1b816a ">b1b816a</a>),
closes <a
href="https://redirect.github.com/vitejs/vite/issues/14013 ">#14013</a></li>
<li>fix: include <code>vite/types/*</code> in exports field (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/14296 ">#14296</a>)
(<a href="https://github.com/vitejs/vite/commit/40e99a1 ">40e99a1</a>),
closes <a
href="https://redirect.github.com/vitejs/vite/issues/14296 ">#14296</a></li>
<li>fix: initWasm options should be optional (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/14152 ">#14152</a>)
(<a href="https://github.com/vitejs/vite/commit/119c074 ">119c074</a>),
closes <a
href="https://redirect.github.com/vitejs/vite/issues/14152 ">#14152</a></li>
<li>fix: restore builtins list (<a
href="https://github.com/vitejs/vite/commit/f8b9adb ">f8b9adb</a>)</li>
<li>fix: use string manipulation instead of regex to inject esbuild
helpers (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/14094 ">#14094</a>)
(<a href="https://github.com/vitejs/vite/commit/128ad8f ">128ad8f</a>),
closes <a
href="https://redirect.github.com/vitejs/vite/issues/14094 ">#14094</a></li>
<li>fix: ws never connects after restarting server if server.hmr.server
is set (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/14127 ">#14127</a>)
(<a href="https://github.com/vitejs/vite/commit/441642e ">441642e</a>),
closes <a
href="https://redirect.github.com/vitejs/vite/issues/14127 ">#14127</a></li>
<li>fix(analysis): warnings for dynamic imports that use static template
literals (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/14458 ">#14458</a>)
(<a href="https://github.com/vitejs/vite/commit/0c6d289 ">0c6d289</a>),
closes <a
href="https://redirect.github.com/vitejs/vite/issues/14458 ">#14458</a></li>
<li>fix(cli): convert special base (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/14283 ">#14283</a>)
(<a href="https://github.com/vitejs/vite/commit/d4bc0fb ">d4bc0fb</a>),
closes <a
href="https://redirect.github.com/vitejs/vite/issues/14283 ">#14283</a></li>
<li>fix(css): remove pure css chunk sourcemap (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/14290 ">#14290</a>)
(<a href="https://github.com/vitejs/vite/commit/cd7e033 ">cd7e033</a>),
closes <a
href="https://redirect.github.com/vitejs/vite/issues/14290 ">#14290</a></li>
<li>fix(css): reset render cache on renderStart (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/14326 ">#14326</a>)
(<a href="https://github.com/vitejs/vite/commit/d334b3d ">d334b3d</a>),
closes <a
href="https://redirect.github.com/vitejs/vite/issues/14326 ">#14326</a></li>
<li>fix(glob): trigger HMR for glob in a package (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/14117 ">#14117</a>)
(<a href="https://github.com/vitejs/vite/commit/0f582bf ">0f582bf</a>),
closes <a
href="https://redirect.github.com/vitejs/vite/issues/14117 ">#14117</a></li>
<li>fix(import-analysis): preserve importedUrls import order (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/14465 ">#14465</a>)
(<a href="https://github.com/vitejs/vite/commit/269aa43 ">269aa43</a>),
closes <a
href="https://redirect.github.com/vitejs/vite/issues/14465 ">#14465</a></li>
<li>fix(manifest): preserve pure css chunk assets (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/14297 ">#14297</a>)
(<a href="https://github.com/vitejs/vite/commit/3d63ae6 ">3d63ae6</a>),
closes <a
href="https://redirect.github.com/vitejs/vite/issues/14297 ">#14297</a></li>
<li>fix(optimizer): define crawlDeps after scanProcessing and
optimizationResult are complete (fix <a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/1428 ">#1428</a>
(<a href="https://github.com/vitejs/vite/commit/fcaf749 ">fcaf749</a>),
closes <a
href="https://redirect.github.com/vitejs/vite/issues/14284 ">#14284</a>
<a
href="https://redirect.github.com/vitejs/vite/issues/14285 ">#14285</a></li>
<li>fix(resolve): support submodules of optional peer deps (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/14489 ">#14489</a>)
(<a href="https://github.com/vitejs/vite/commit/104971d ">104971d</a>),
closes <a
href="https://redirect.github.com/vitejs/vite/issues/14489 ">#14489</a></li>
<li>fix(vite): precisely check if files are in dirs (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/14241 ">#14241</a>)
(<a href="https://github.com/vitejs/vite/commit/c4758d1 ">c4758d1</a>),
closes <a
href="https://redirect.github.com/vitejs/vite/issues/14241 ">#14241</a></li>
<li>feat: improve deno and bun support (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/14379 ">#14379</a>)
(<a href="https://github.com/vitejs/vite/commit/8bc1f9d ">8bc1f9d</a>),
closes <a
href="https://redirect.github.com/vitejs/vite/issues/14379 ">#14379</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vitejs/vite/commit/d0360c12476ccc61e9e78c500ed1bd74ed65a2cf "><code>d0360c1</code></a>
release: v4.5.2</li>
<li><a
href="https://github.com/vitejs/vite/commit/eeec23bbc9d476c54a3a6d36e78455867185a7cb "><code>eeec23b</code></a>
fix: fs deny for case insensitive systems (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/15653 ">#15653</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/c0751156f0c015f6dbd5c7a58afd8cff2fde1a2f "><code>c075115</code></a>
release: v4.5.1</li>
<li><a
href="https://github.com/vitejs/vite/commit/41bb3546a839ed2c822367b3933770c0693a0fb0 "><code>41bb354</code></a>
fix: backport <a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/15223 ">#15223</a>,
proxy html path should be encoded (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/15226 ">#15226</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/055d2b86b0543a7c1a2a4d5bc7298af62bc51fa7 "><code>055d2b8</code></a>
release: v4.5.0</li>
<li><a
href="https://github.com/vitejs/vite/commit/ed7bdc520679577509466ce808a1794ba8377204 "><code>ed7bdc5</code></a>
feat: scan .marko files (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/14669 ">#14669</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/45595ef82f786d6b321ce002f2cd4951659114ac "><code>45595ef</code></a>
feat: backport mdx as known js source (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/14560 ">#14560</a>)
(<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/14670 ">#14670</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/520139cdff88ae3a0bf89692133cce3e453cb29a "><code>520139c</code></a>
feat(ssr): backport ssr.resolve.conditions and
ssr.resolve.externalConditions...</li>
<li>See full diff in <a
href="https://github.com/vitejs/vite/commits/v4.5.2/packages/vite ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/linux-odyssey/linux-odyssey/network/alerts ).
</details>
2024-01-28 20:31:13 -06:00
chreamy
7bb7ac3f00
csrf token
2024-01-20 00:14:59 -06:00
chreamy
42278ad51b
csrf token
2024-01-20 00:11:48 -06:00
dependabot[bot]
107c153e98
build(deps-dev): bump vite from 4.4.12 to 4.5.2
...
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite ) from 4.4.12 to 4.5.2.
- [Release notes](https://github.com/vitejs/vite/releases )
- [Changelog](https://github.com/vitejs/vite/blob/v4.5.2/packages/vite/CHANGELOG.md )
- [Commits](https://github.com/vitejs/vite/commits/v4.5.2/packages/vite )
---
updated-dependencies:
- dependency-name: vite
dependency-type: direct:development
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-01-20 02:24:08 +00:00
chreamy
d45fbee647
fix: CSRF issue #51
2024-01-18 03:23:39 -06:00
chreamy
2ac73a06c9
fix: CSRF issue #51
2024-01-18 03:15:38 -06:00
chreamy
91a9397c58
fix: CSRF issue #51
2024-01-18 03:12:25 -06:00
chreamy
af088730e8
fix: issue #96
2024-01-17 22:02:39 -06:00
chreamy
4b9c7de031
fix: issue #96
2024-01-17 21:55:52 -06:00
chreamy
712a1ff319
test
2024-01-17 21:36:44 -06:00
Lin, Hung-Shin
21c1a4d11c
Fix Build Quests Error ( #94 )
...
#92
2024-01-13 20:18:22 +08:00
dependabot[bot]
d069233407
build(deps): bump follow-redirects from 1.15.2 to 1.15.4
...
Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects ) from 1.15.2 to 1.15.4.
- [Release notes](https://github.com/follow-redirects/follow-redirects/releases )
- [Commits](https://github.com/follow-redirects/follow-redirects/compare/v1.15.2...v1.15.4 )
---
updated-dependencies:
- dependency-name: follow-redirects
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-01-10 21:59:52 +00:00
Lin, Hung-Shin
4a4ce11bcc
Analytics revise ( #91 )
...
Analytics revise
2023-12-21 18:13:53 +08:00
Chen, Tai-Lin
9c650a4c26
fix: restore db name
2023-12-21 18:09:48 +08:00
Chen, Tai-Lin
b96bcb27ad
refactor: remove unused functions
2023-12-21 18:01:25 +08:00
Chen, Tai-Lin
b0e12b2027
refactor: use questList to calculate total quests and completed
2023-12-21 17:58:52 +08:00
Chen, Tai-Lin
3b68693177
feat: add pagination buttons
2023-12-21 17:48:36 +08:00
Chen, Tai-Lin
fa36b63fbe
feat: add order to pagination
2023-12-21 17:28:48 +08:00
Chen, Tai-Lin
68db16419d
refactor: add Pagination class
2023-12-21 17:09:20 +08:00
Chen, Tai-Lin
19cd10ab7b
fix: session pagination
2023-12-21 16:37:37 +08:00
Chen, Tai-Lin
bc0055781e
feat: finish errorCommands pagination
2023-12-21 16:31:34 +08:00
Chen, Tai-Lin
8c634c8115
wip: models/commands analytics
2023-12-20 15:05:10 +08:00
Lin, Hung-Shin
27c5794700
fix: no response when buildImage
2023-12-20 13:31:08 +08:00
Chen, Tai-Lin
ceb9416fab
update: mongoose version
2023-12-13 15:05:46 +08:00
Chen, Tai-Lin
c6733814ba
feat: add sorting order
2023-12-13 15:05:25 +08:00
Chen, Tai-Lin
1b94ae75ca
feat: change to nextKey in users
2023-12-13 14:40:47 +08:00
Chen, Tai-Lin
3e7092dbd6
feat: modify analytics
2023-12-11 21:13:06 +08:00
Chen, Tai-Lin
61f627b125
feat: add quest page in analytics
2023-12-11 17:55:15 +08:00
Chen, Tai-Lin
a578d4f910
fix: analytics completed rate
2023-12-11 01:09:06 +08:00
Lin, Hung-Shin
1bca61da40
feat: add mongo dump script, require ci checks before deployment ( #89 )
...
feat: add mongo dump script, require ci checks before deployment
2023-12-10 08:58:02 +08:00
Lin, Hung-Shin
660a7ce4e8
feat-automation-test (stabilise) ( #90 )
...
feat-automation-test (stabilise)
2023-12-10 08:57:18 +08:00
Chen, Tai-Lin
ac31ca8659
feat: show analytics data page by page
2023-12-10 03:21:30 +08:00
Chen, Tai-Lin
9200336b49
fix: analytics modify
2023-12-10 02:21:02 +08:00
Chen, Tai-Lin
c243e29002
fix: re-calculate completed rate in analytics
2023-12-10 01:25:27 +08:00
Annie Huang
175db7b8bc
reduce timeout
2023-12-10 00:08:45 +08:00
Annie Huang
581e75ee57
Add configs retrying and longer timeout to load
2023-12-09 21:18:03 +08:00
Chen, Tai-Lin
b625abae68
change docker compose file
2023-12-08 20:49:01 +08:00
dependabot[bot]
b0bfbb789c
build(deps-dev): bump vite from 4.4.4 to 4.4.12 ( #88 )
...
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite ) from 4.4.4 to 4.4.12.
- [Release notes](https://github.com/vitejs/vite/releases )
- [Changelog](https://github.com/vitejs/vite/blob/v4.4.12/packages/vite/CHANGELOG.md )
- [Commits](https://github.com/vitejs/vite/commits/v4.4.12/packages/vite )
---
updated-dependencies:
- dependency-name: vite
dependency-type: direct:development
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-06 15:27:17 +08:00
wancat
2ce277c7e5
fix: gpt-4-turbo not supported yet, rollback
2023-12-06 15:25:15 +08:00
wancat
7ef77267d3
fix: update to use main branch action
2023-12-06 15:21:32 +08:00
wancat
d34ae3ef7a
feat: change code review model to save budget
2023-12-06 15:17:13 +08:00
wancat
bfa7ed1cf9
fix: require CI to be passed before deployment
2023-12-06 15:10:04 +08:00
wancat
aa5088cc97
feat: add mongo dump and restore script
2023-12-06 15:07:46 +08:00
Annie Huang
0d0465f722
feat Automation Tests - Updates ( #87 )
...
- Change spec name
- Add spec and complete all quests
- Add Icon (totem version)
- Add some id for tests
- Add answer. sh for all quests
Not yet added verifying the buttons function and other pages
2023-12-05 00:46:18 +08:00
Annie Huang
360279f765
Add logo to nav bar
2023-12-05 00:21:15 +08:00
Annie Huang
6c73a8abc0
remove typing delay, add last (command) parameter
...
prevent pressing enter too quick
2023-12-04 17:21:13 +08:00
Annie Huang
55a0dcb443
edit typing delay
2023-12-04 16:51:01 +08:00
Annie Huang
5b3c52bd9b
reduce typing delay and timeout
2023-12-04 16:45:25 +08:00
Annie Huang
a911d953cd
Add searching element timeout
2023-12-04 15:54:26 +08:00
Annie Huang
c52b5a53cd
extend typing delay
2023-12-04 15:41:53 +08:00
Annie Huang
c9a43eeeb1
remove redundant class
2023-12-04 15:24:53 +08:00
Annie Huang
69624d7a5d
Add logo to login/register page
2023-12-04 15:22:05 +08:00
Annie Huang
4681a743b4
update icon (previous one was boroken)
2023-12-04 14:43:59 +08:00
Annie Huang
e0b3ec74de
extend typing delay to prevent test fail
2023-12-04 14:05:21 +08:00
Annie Huang
d0b179108a
fix failing on finishing
2023-12-03 21:30:34 +08:00
Annie Huang
10ac3c720e
Add check finished, typing delay
2023-12-03 19:16:02 +08:00
Annie Huang
7a3b6b1cfb
- Add auto-complete quest command
...
- Change spec name
- Add spec complete all quests
- Add Icon (totem version)
- Add some id for tests
- Add answer.sh for all quests
2023-12-03 01:40:51 +08:00
Lin, Hung-Shin
dc1d3f6ce5
Feat-optimise-ui ( #85 )
...
Feat-optimise-ui
2023-11-27 06:26:13 +08:00
Lin, Hung-Shin
5cfe6823cc
change xterm back to normal fontWeight
2023-11-27 00:10:52 +08:00
Lin, Hung-Shin
6cd348433a
feat: display code block in terminal to different color
2023-11-27 00:10:41 +08:00
Lin, Hung-Shin
617bb56f5f
Improve quest exceptions ( #84 )
2023-11-27 00:08:03 +08:00
Chen, Tai-Lin
a859b4ff3e
fix exceptions error
2023-11-26 23:48:55 +08:00
Lin, Hung-Shin
46fb8407a6
Feat markdown ( #86 )
2023-11-26 23:44:45 +08:00
Lin, Hung-Shin
c7d18ad95e
fix: stage re-execute
2023-11-26 23:43:44 +08:00
Lin, Hung-Shin
8f31e4f2cd
feat: separate Markdown to a component
2023-11-26 23:32:37 +08:00
Chen, Tai-Lin
d4446186cd
improve exceptions
2023-11-26 23:32:31 +08:00
Annie Huang
8fb8af036d
change color in content, bigger text in term
2023-11-26 23:31:38 +08:00
Chen, Tai-Lin
68492cd932
improve exceptions in quest path
2023-11-26 23:25:44 +08:00
Chen, Tai-Lin
3c1afb92e1
improve exceptions
2023-11-26 23:17:02 +08:00
Lin, Hung-Shin
abaacf7ee7
feat: display markdown to html
2023-11-26 23:16:13 +08:00
Chen, Tai-Lin
a22b898c0c
improve quest exceptions
2023-11-26 23:12:36 +08:00
Chen, Tai-Lin
d64a4ae81d
improve quests
2023-11-26 23:06:14 +08:00
Lin, Hung-Shin
ebd81f7cb4
fix: set content in response to be required
2023-11-26 22:36:10 +08:00
CHEN, TAI-LIN
f657f633b4
Feat global exception ( #83 )
...
- add global exceptions
- refactor quest models to reusable parts
other improvements:
- improve error handling
2023-11-26 22:33:11 +08:00
Lin, Hung-Shin
fb6411e923
feat: logger display error stack
2023-11-26 19:21:58 +08:00
Lin, Hung-Shin
a7e646c28b
feat: check global exceptions
2023-11-26 19:20:30 +08:00
Lin, Hung-Shin
98a226f3ff
feat: load global exceptions
2023-11-26 18:40:39 +08:00
Lin, Hung-Shin
49fb5a6a61
fix: Remove exceptions from stages
2023-11-26 18:32:06 +08:00
Lin, Hung-Shin
fe69841622
feat: improve parsing quest error message
2023-11-26 18:31:45 +08:00
Lin, Hung-Shin
bb968706ad
feat: refactor quest models
...
+ separate stage and exception
+ reuse commandResponder
2023-11-26 18:29:52 +08:00
Annie Huang
849e669147
Map init position, pwd display, instruct speed
2023-11-26 18:27:34 +08:00
Lin, Hung-Shin
b41e67ee0b
fix: error in quest read ( #81 )
2023-11-24 12:59:46 +08:00
Chen, Tai-Lin
50a0bbbab1
add warning
2023-11-24 12:59:09 +08:00
Chen, Tai-Lin
d712925d0f
modify path
2023-11-24 12:56:57 +08:00
Lin, Hung-Shin
b78398680d
fix: add error handling ( #82 )
2023-11-24 12:53:00 +08:00
Lin, Hung-Shin
c7f52b1003
fix: add error handling
2023-11-24 12:52:01 +08:00
Chen, Tai-Lin
f008fb9f60
modify quest map
2023-11-24 12:49:17 +08:00
Chen, Tai-Lin
76a39add29
fix: error in quest read
2023-11-24 11:54:30 +08:00
Lin, Hung-Shin
eb9118d5b1
Quest update ( #80 )
2023-11-24 09:58:09 +08:00
Chen, Tai-Lin
cfdf8730e8
fix error
2023-11-24 09:55:17 +08:00
Chen, Tai-Lin
6651071580
fix: error in quest read
2023-11-24 09:54:18 +08:00
Lin, Hung-Shin
f30f6472f5
fix: error in quests ( #79 )
2023-11-24 09:51:33 +08:00
Chen, Tai-Lin
5ac3b3088d
fix: error in create quest
2023-11-24 09:50:15 +08:00
Chen, Tai-Lin
acc4d5acba
fix: error in create quest
2023-11-24 09:48:41 +08:00
Chen, Tai-Lin
1fb43b78e3
fix: erro in quest explore
2023-11-24 09:46:06 +08:00
Lin, Hung-Shin
b27adc1f69
Add survey and leaderboard button ( #78 )
...
Add survey and leaderboard button
2023-11-24 00:59:34 +08:00
Annie Huang
6f68107405
Add survey and
2023-11-24 00:58:03 +08:00