[PR #21111] [CLOSED] chore(deps): bump the npm_and_yarn group across 1 directory with 10 updates #25933

Closed
opened 2026-04-20 06:13:03 -05:00 by GiteaMirror · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/open-webui/open-webui/pull/21111
Author: @dependabot[bot]
Created: 2/2/2026
Status: Closed

Base: mainHead: dependabot/npm_and_yarn/npm_and_yarn-7a499d7aae


📝 Commits (1)

  • 841cde7 chore(deps): bump the npm_and_yarn group across 1 directory with 10 updates

📊 Changes

2 files changed (+207 additions, -971 deletions)

View changed files

📝 package-lock.json (+204 -968)
📝 package.json (+3 -3)

📄 Description

Bumps the npm_and_yarn group with 9 updates in the / directory:

Package From To
jspdf 4.0.0 4.1.0
undici 7.11.0 7.20.0
undici 6.21.2 6.23.0
@sveltejs/kit 2.22.4 2.50.1
js-yaml 4.1.0 4.1.1
lodash 4.17.21 4.17.23
qs 6.13.0 6.14.1
tar 7.4.3 7.5.7
vega-functions 6.1.0 6.1.1
vega-selections 6.1.0 6.1.2

Updates jspdf from 4.0.0 to 4.1.0

Release notes

Sourced from jspdf's releases.

v4.1.0

This release fixes several security issues.

What's Changed

Full Changelog: https://github.com/parallax/jsPDF/compare/v4.0.0...v4.1.0

Commits

Updates undici from 7.11.0 to 7.20.0

Release notes

Sourced from undici's releases.

v7.20.0

What's Changed

New Contributors

Full Changelog: https://github.com/nodejs/undici/compare/v7.19.2...v7.20.0

v7.19.2

What's Changed

New Contributors

Full Changelog: https://github.com/nodejs/undici/compare/v7.19.1...v7.19.2

v7.19.1

What's Changed

New Contributors

Full Changelog: https://github.com/nodejs/undici/compare/v7.19.0...v7.19.1

v7.19.0

What's Changed

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for undici since your current version.


Updates undici from 6.21.2 to 6.23.0

Release notes

Sourced from undici's releases.

v7.20.0

What's Changed

New Contributors

Full Changelog: https://github.com/nodejs/undici/compare/v7.19.2...v7.20.0

v7.19.2

What's Changed

New Contributors

Full Changelog: https://github.com/nodejs/undici/compare/v7.19.1...v7.19.2

v7.19.1

What's Changed

New Contributors

Full Changelog: https://github.com/nodejs/undici/compare/v7.19.0...v7.19.1

v7.19.0

What's Changed

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for undici since your current version.


Updates @sveltejs/kit from 2.22.4 to 2.50.1

Release notes

Sourced from @​sveltejs/kit's releases.

@​sveltejs/kit@​2.50.1

Patch Changes

  • fix: include hooks.server and hooks.universal as explicit Vite build inputs to ensure assets imported by hooks files are correctly discovered (#15178)

  • fix: improves fields type for generic components (#14974)

  • fix: preload links if href changes (#15191)

@​sveltejs/kit@​2.50.0

Minor Changes

  • breaking: remove buttonProps from experimental remote form functions; use e.g. <button {...myForm.fields.action.as('submit', 'register')}>Register</button> button instead (#15144)

@​sveltejs/kit@​2.49.5

Patch Changes

  • fix: avoid overriding Vite default base when running Vitest 4 (#14866)

  • fix: ensure url decoded pathnames are not mistaken as rerouted requests (d9ae9b0)

  • fix: add length checks to remote forms (8ed8155)

@​sveltejs/kit@​2.49.4

Patch Changes

  • fix: support instrumentation for vite preview (#15105)

  • fix: support for URLSearchParams.has(name, value) overload (#15076)

  • fix: put forking behind experimental.forkPreloads (#15135)

@​sveltejs/kit@​2.49.3

Patch Changes

  • fix: avoid false-positive Vite config overridden warning when using Vitest 4 (#15121)

  • fix: add typescript as an optional peer dependency (#15074)

  • fix: use hasOwn check when deep-setting object properties (#15127)

@​sveltejs/kit@​2.49.2

... (truncated)

Changelog

Sourced from @​sveltejs/kit's changelog.

2.50.1

Patch Changes

  • fix: include hooks.server and hooks.universal as explicit Vite build inputs to ensure assets imported by hooks files are correctly discovered (#15178)

  • fix: improves fields type for generic components (#14974)

  • fix: preload links if href changes (#15191)

2.50.0

Minor Changes

  • breaking: remove buttonProps from experimental remote form functions; use e.g. <button {...myForm.fields.action.as('submit', 'register')}>Register</button> button instead (#15144)

2.49.5

Patch Changes

  • fix: avoid overriding Vite default base when running Vitest 4 (#14866)

  • fix: ensure url decoded pathnames are not mistaken as rerouted requests (d9ae9b0)

  • fix: add length checks to remote forms (8ed8155)

2.49.4

Patch Changes

  • fix: support instrumentation for vite preview (#15105)

  • fix: support for URLSearchParams.has(name, value) overload (#15076)

  • fix: put forking behind experimental.forkPreloads (#15135)

2.49.3

Patch Changes

  • fix: avoid false-positive Vite config overridden warning when using Vitest 4 (#15121)

  • fix: add typescript as an optional peer dependency (#15074)

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​sveltejs/kit since your current version.


Updates devalue from 5.1.1 to 5.6.2

Release notes

Sourced from devalue's releases.

v5.6.2

Patch Changes

  • 1175584: fix: validate input for ArrayBuffer parsing
  • e46afa6: fix: validate input for typed arrays
  • 1175584: fix: more helpful errors for inputs causing stack overflows

v5.6.1

Patch Changes

  • 2161d44: fix: add hasOwn check before calling reviver

v5.6.0

Minor Changes

  • a3d09d4: feat: expose DevalueError for instanceof checks in catch clauses
  • a3d09d4: feat: add value and root properties in DevalueError instances

v5.5.0

Minor Changes

  • 828fa1c: Enable support for custom reducer/reviver for "function" values

v5.4.2

Patch Changes

  • 5c26c0d: fix: allow custom revivers to revive things serialized by builtin reducers

v5.4.1

Patch Changes

  • ca3c7b6: chore: Remove impossible void type from replacer's uneval

v5.4.0

Minor Changes

  • 9306d09: feat: pass uneval to replacer, for handling nested custom types

Patch Changes

  • b617c7c: perf: shrink uneval output with null-proto objects

v5.3.2

Patch Changes

  • 0623a47: fix: disallow array method access when parsing
  • 0623a47: fix: disallow __proto__ properties on objects

v5.3.1

Patch Changes

... (truncated)

Changelog

Sourced from devalue's changelog.

5.6.2

Patch Changes

  • 1175584: fix: validate input for ArrayBuffer parsing
  • e46afa6: fix: validate input for typed arrays
  • 1175584: fix: more helpful errors for inputs causing stack overflows

5.6.1

Patch Changes

  • 2161d44: fix: add hasOwn check before calling reviver

5.6.0

Minor Changes

  • a3d09d4: feat: expose DevalueError for instanceof checks in catch clauses
  • a3d09d4: feat: add value and root properties in DevalueError instances

5.5.0

Minor Changes

  • 828fa1c: Enable support for custom reducer/reviver for "function" values

5.4.2

Patch Changes

  • 5c26c0d: fix: allow custom revivers to revive things serialized by builtin reducers

5.4.1

Patch Changes

  • ca3c7b6: chore: Remove impossible void type from replacer's uneval

5.4.0

Minor Changes

  • 9306d09: feat: pass uneval to replacer, for handling nested custom types

Patch Changes

  • b617c7c: perf: shrink uneval output with null-proto objects

5.3.2

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for devalue since your current version.


Updates js-yaml from 4.1.0 to 4.1.1

Changelog

Sourced from js-yaml's changelog.

[4.1.1] - 2025-11-12

Security

  • Fix prototype pollution issue in yaml merge (<<) operator.
Commits

Updates lodash from 4.17.21 to 4.17.23

Commits

Updates qs from 6.13.0 to 6.14.1

Changelog

Sourced from qs's changelog.

6.14.1

  • [Fix] ensure arrayLength applies to [] notation as well
  • [Fix] parse: when a custom decoder returns null for a key, ignore that key
  • [Refactor] parse: extract key segment splitting helper
  • [meta] add threat model
  • [actions] add workflow permissions
  • [Tests] stringify: increase coverage
  • [Dev Deps] update eslint, @ljharb/eslint-config, npmignore, es-value-fixtures, for-each, object-inspect

6.14.0

  • [New] parse: add throwOnParameterLimitExceeded option (#517)
  • [Refactor] parse: use utils.combine more
  • [patch] parse: add explicit throwOnLimitExceeded default
  • [actions] use shared action; re-add finishers
  • [meta] Fix changelog formatting bug
  • [Deps] update side-channel
  • [Dev Deps] update es-value-fixtures, has-bigints, has-proto, has-symbols
  • [Tests] increase coverage

6.13.1

  • [Fix] stringify: avoid a crash when a filter key is null
  • [Fix] utils.merge: functions should not be stringified into keys
  • [Fix] parse: avoid a crash with interpretNumericEntities: true, comma: true, and iso charset
  • [Fix] stringify: ensure a non-string filter does not crash
  • [Refactor] use __proto__ syntax instead of Object.create for null objects
  • [Refactor] misc cleanup
  • [Tests] utils.merge: add some coverage
  • [Tests] fix a test case
  • [actions] split out node 10-20, and 20+
  • [Dev Deps] update es-value-fixtures, mock-property, object-inspect, tape
Commits
  • 3fa11a5 v6.14.1
  • a626704 [Dev Deps] update npmignore
  • 3086902 [Fix] ensure arrayLength applies to [] notation as well
  • fc7930e [Dev Deps] update eslint, @ljharb/eslint-config
  • 0b06aac [Dev Deps] update @ljharb/eslint-config
  • 64951f6 [Refactor] parse: extract key segment splitting helper
  • e1bd259 [Dev Deps] update @ljharb/eslint-config
  • f4b3d39 [eslint] add eslint 9 optional peer dep
  • 6e94d95 [Dev Deps] update eslint, @ljharb/eslint-config, npmignore
  • 973dc3c [actions] add workflow permissions
  • Additional commits viewable in compare view

Updates tar from 7.4.3 to 7.5.7

Changelog

Sourced from tar's changelog.

Changelog

7.5

  • Added zstd compression support.
  • Consistent TOCTOU behavior in sync t.list
  • Only read from ustar block if not specified in Pax
  • Fix sync tar.list when file size reduces while reading
  • Sanitize absolute linkpaths properly
  • Prevent writing hardlink entries to the archive ahead of their file target

7.4

  • Deprecate onentry in favor of onReadEntry for clarity.

7.3

  • Add onWriteEntry option

7.2

  • DRY the command definitions into a single makeCommand method, and update the type signatures to more appropriately infer the return type from the options and arguments provided.

7.1

  • Update minipass to v7.1.0
  • Update the type definitions of write() and end() methods on Unpack and Parser classes to be compatible with the NodeJS.WritableStream type in the latest versions of @types/node.

7.0

  • Drop support for node <18
  • Rewrite in TypeScript, provide ESM and CommonJS hybrid interface
  • Add tree-shake friendly exports, like import('tar/create') and import('tar/read-entry') to get individual functions or classes.
  • Add chmod option that defaults to false, and deprecate noChmod. That is, reverse the default option regarding explicitly setting file system modes to match tar entry settings.
  • Add processUmask option to avoid having to call process.umask() when chmod: true (or noChmod: false) is set.

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by isaacs, a new releaser for tar since your current version.


Updates vega-functions from 6.1.0 to 6.1.1

Release notes

Sourced from vega-functions's releases.

v6.1.1

Full Changelog: https://github.com/vega/vega/compare/v6.1.0...v6.1.1

Commits
Maintainer changes

This version was pushed to npm by hydrosquall, a new releaser for vega-functions since your current version.


Updates vega-selections from 6.1.0 to 6.1.2

Release notes

Sourced from vega-selections's releases.

v6.1.2

Full Changelog: https://github.com/vega/vega/compare/v6.1.1...v6.1.2

v6.1.1

Full Changelog: https://github.com/vega/vega/compare/v6.1.0...v6.1.1

Commits
Maintainer changes

This version was pushed to npm by hydrosquall, a new releaser for vega-selections since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/open-webui/open-webui/pull/21111 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 2/2/2026 **Status:** ❌ Closed **Base:** `main` ← **Head:** `dependabot/npm_and_yarn/npm_and_yarn-7a499d7aae` --- ### 📝 Commits (1) - [`841cde7`](https://github.com/open-webui/open-webui/commit/841cde7e96de3cd1f0062631c2b249ee0b00c4ce) chore(deps): bump the npm_and_yarn group across 1 directory with 10 updates ### 📊 Changes **2 files changed** (+207 additions, -971 deletions) <details> <summary>View changed files</summary> 📝 `package-lock.json` (+204 -968) 📝 `package.json` (+3 -3) </details> ### 📄 Description Bumps the npm_and_yarn group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [jspdf](https://github.com/parallax/jsPDF) | `4.0.0` | `4.1.0` | | [undici](https://github.com/nodejs/undici) | `7.11.0` | `7.20.0` | | [undici](https://github.com/nodejs/undici) | `6.21.2` | `6.23.0` | | [@sveltejs/kit](https://github.com/sveltejs/kit/tree/HEAD/packages/kit) | `2.22.4` | `2.50.1` | | [js-yaml](https://github.com/nodeca/js-yaml) | `4.1.0` | `4.1.1` | | [lodash](https://github.com/lodash/lodash) | `4.17.21` | `4.17.23` | | [qs](https://github.com/ljharb/qs) | `6.13.0` | `6.14.1` | | [tar](https://github.com/isaacs/node-tar) | `7.4.3` | `7.5.7` | | [vega-functions](https://github.com/vega/vega) | `6.1.0` | `6.1.1` | | [vega-selections](https://github.com/vega/vega) | `6.1.0` | `6.1.2` | Updates `jspdf` from 4.0.0 to 4.1.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/parallax/jsPDF/releases">jspdf's releases</a>.</em></p> <blockquote> <h2>v4.1.0</h2> <p>This release fixes several security issues.</p> <h2>What's Changed</h2> <ul> <li>Upgrade optional dompurify dependency to 3.3.1 in <a href="https://redirect.github.com/parallax/jsPDF/pull/3948">parallax/jsPDF#3948</a></li> <li>Fix <a href="https://github.com/parallax/jsPDF/security/advisories/GHSA-pqxr-3g65-p328">PDF Injection in AcroForm module allows Arbitrary JavaScript Execution</a> vulnerability</li> <li>Fix <a href="https://github.com/parallax/jsPDF/security/advisories/GHSA-vm32-vv63-w422">Stored XMP Metadata Injection (Spoofing &amp; Integrity Violation)</a> vulnerability</li> <li>Fix <a href="https://github.com/parallax/jsPDF/security/advisories/GHSA-cjw8-79x6-5cj4">Shared State Race Condition in addJS Method</a> vulnerability</li> <li>Fix <a href="https://github.com/parallax/jsPDF/security/advisories/GHSA-95fx-jjr5-f39c">Denial of Service (DoS) via Unvalidated BMP Dimensions in BMPDecoder</a> vulnerability</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/parallax/jsPDF/compare/v4.0.0...v4.1.0">https://github.com/parallax/jsPDF/compare/v4.0.0...v4.1.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/parallax/jsPDF/commit/02273814bf0222eda02944f9a14128811f3b5a33"><code>0227381</code></a> 4.1.0</li> <li><a href="https://github.com/parallax/jsPDF/commit/ae4b93f76d8fc1baa5614bd5fdb5d174c3b85f0d"><code>ae4b93f</code></a> Merge commit from fork</li> <li><a href="https://github.com/parallax/jsPDF/commit/2863e5c26afef211a545e8c174ab4d5fce3b8c0e"><code>2863e5c</code></a> Merge commit from fork</li> <li><a href="https://github.com/parallax/jsPDF/commit/efe54bf50f3f5e5416b2495e3c24624fc80b6cff"><code>efe54bf</code></a> Merge commit from fork</li> <li><a href="https://github.com/parallax/jsPDF/commit/da291a5f01b96282545c9391996702cdb8879f79"><code>da291a5</code></a> Merge commit from fork</li> <li><a href="https://github.com/parallax/jsPDF/commit/685e41e19905fefeb3a0bee415d59a650a6a5693"><code>685e41e</code></a> Bump <code>@​koa/cors</code> and local-web-server (<a href="https://redirect.github.com/parallax/jsPDF/issues/3951">#3951</a>)</li> <li><a href="https://github.com/parallax/jsPDF/commit/8cc22a5d80e27d5ee8d7367bae0578ef18591c53"><code>8cc22a5</code></a> Bump tmp, inquirer and karma (<a href="https://redirect.github.com/parallax/jsPDF/issues/3945">#3945</a>)</li> <li><a href="https://github.com/parallax/jsPDF/commit/008b276a11476bd9a8956b6e51d3f2ae7fe2055b"><code>008b276</code></a> Bump sha.js from 2.4.11 to 2.4.12 (<a href="https://redirect.github.com/parallax/jsPDF/issues/3946">#3946</a>)</li> <li><a href="https://github.com/parallax/jsPDF/commit/ff66d527b9ab26b785df7ebe5d14a75edc200123"><code>ff66d52</code></a> Bump vite from 5.4.20 to 5.4.21 in /examples/vite (<a href="https://redirect.github.com/parallax/jsPDF/issues/3949">#3949</a>)</li> <li><a href="https://github.com/parallax/jsPDF/commit/bcf79f2819376a7b4170129e14c70aa4b5643d6c"><code>bcf79f2</code></a> Bump cipher-base from 1.0.4 to 1.0.7 (<a href="https://redirect.github.com/parallax/jsPDF/issues/3942">#3942</a>)</li> <li>Additional commits viewable in <a href="https://github.com/parallax/jsPDF/compare/v4.0.0...v4.1.0">compare view</a></li> </ul> </details> <br /> Updates `undici` from 7.11.0 to 7.20.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/nodejs/undici/releases">undici's releases</a>.</em></p> <blockquote> <h2>v7.20.0</h2> <h2>What's Changed</h2> <ul> <li>fix: preserve fetch stack traces by <a href="https://github.com/mcollina"><code>@​mcollina</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4778">nodejs/undici#4778</a></li> <li>Fix error handling in MockPool example by <a href="https://github.com/dave-kennedy"><code>@​dave-kennedy</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4781">nodejs/undici#4781</a></li> <li>feat: expose statusText in request() ResponseData by <a href="https://github.com/domenic"><code>@​domenic</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4784">nodejs/undici#4784</a></li> <li>test: reduce retry-after invalid date flake by <a href="https://github.com/mcollina"><code>@​mcollina</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4788">nodejs/undici#4788</a></li> <li>extractBody fixes by <a href="https://github.com/KhafraDev"><code>@​KhafraDev</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4791">nodejs/undici#4791</a></li> <li>fix: MockAgent delayed response with AbortSignal (<a href="https://redirect.github.com/nodejs/undici/issues/4693">#4693</a>) by <a href="https://github.com/mcollina"><code>@​mcollina</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4772">nodejs/undici#4772</a></li> <li>fix: onParserTimeout potentially accessing undefined by <a href="https://github.com/vbfox"><code>@​vbfox</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4758">nodejs/undici#4758</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/dave-kennedy"><code>@​dave-kennedy</code></a> made their first contribution in <a href="https://redirect.github.com/nodejs/undici/pull/4781">nodejs/undici#4781</a></li> <li><a href="https://github.com/vbfox"><code>@​vbfox</code></a> made their first contribution in <a href="https://redirect.github.com/nodejs/undici/pull/4758">nodejs/undici#4758</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/nodejs/undici/compare/v7.19.2...v7.20.0">https://github.com/nodejs/undici/compare/v7.19.2...v7.20.0</a></p> <h2>v7.19.2</h2> <h2>What's Changed</h2> <ul> <li>Minor code cleanups to decompress interceptor by <a href="https://github.com/domenic"><code>@​domenic</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4754">nodejs/undici#4754</a></li> <li>fix(h2): fix flaky stream end handling on macOS by <a href="https://github.com/mcollina"><code>@​mcollina</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4762">nodejs/undici#4762</a></li> <li>return response when receiving 401 instead of network error by <a href="https://github.com/KhafraDev"><code>@​KhafraDev</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4769">nodejs/undici#4769</a></li> <li>fix: properly close idle connections in test server cleanup by <a href="https://github.com/mcollina"><code>@​mcollina</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4764">nodejs/undici#4764</a></li> <li>fix: decode HTTP headers as latin1 instead of utf8 by <a href="https://github.com/mcollina"><code>@​mcollina</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4768">nodejs/undici#4768</a></li> <li>fix: submodule update by <a href="https://github.com/Uzlopak"><code>@​Uzlopak</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4648">nodejs/undici#4648</a></li> <li>build(deps): bump peter-evans/create-pull-request from 7.0.8 to 8.0.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/nodejs/undici/pull/4720">nodejs/undici#4720</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/domenic"><code>@​domenic</code></a> made their first contribution in <a href="https://redirect.github.com/nodejs/undici/pull/4754">nodejs/undici#4754</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/nodejs/undici/compare/v7.19.1...v7.19.2">https://github.com/nodejs/undici/compare/v7.19.1...v7.19.2</a></p> <h2>v7.19.1</h2> <h2>What's Changed</h2> <ul> <li>fix: use commit hash when generating release (<a href="https://redirect.github.com/nodejs/undici/issues/4757">#4757</a>) by <a href="https://github.com/fenichelar"><code>@​fenichelar</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4759">nodejs/undici#4759</a></li> <li>fix fetch 401 loop by <a href="https://github.com/KhafraDev"><code>@​KhafraDev</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4761">nodejs/undici#4761</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/fenichelar"><code>@​fenichelar</code></a> made their first contribution in <a href="https://redirect.github.com/nodejs/undici/pull/4759">nodejs/undici#4759</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/nodejs/undici/compare/v7.19.0...v7.19.1">https://github.com/nodejs/undici/compare/v7.19.0...v7.19.1</a></p> <h2>v7.19.0</h2> <h2>What's Changed</h2> <ul> <li>fix: Handle FormData body type correctly in RetryAgent retried requests by <a href="https://github.com/eliotschu"><code>@​eliotschu</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4692">nodejs/undici#4692</a></li> <li>feat(client): expose HTTP/2 flow-control options by <a href="https://github.com/pabloelisseo"><code>@​pabloelisseo</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4706">nodejs/undici#4706</a></li> <li>Implement origin normalization in MockAgent for case-insensitivity and URL handling by <a href="https://github.com/SksOp"><code>@​SksOp</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4731">nodejs/undici#4731</a></li> <li>fix websocket basic auth by <a href="https://github.com/KhafraDev"><code>@​KhafraDev</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4747">nodejs/undici#4747</a></li> <li>fix(cache): regenerate stream from source when cache.match is called after GC by <a href="https://github.com/mcollina"><code>@​mcollina</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4713">nodejs/undici#4713</a></li> <li>chore: use testcontext for test:cache by <a href="https://github.com/Uzlopak"><code>@​Uzlopak</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4571">nodejs/undici#4571</a></li> <li>chore: use testcontext for subresource integrity tests by <a href="https://github.com/Uzlopak"><code>@​Uzlopak</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4575">nodejs/undici#4575</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/nodejs/undici/commit/6cc668d9e24fc23a75b9cdfef5faa0212e4fb29f"><code>6cc668d</code></a> Bumped v7.20.0 (<a href="https://redirect.github.com/nodejs/undici/issues/4792">#4792</a>)</li> <li><a href="https://github.com/nodejs/undici/commit/e65fa39309ef0dc17bf0302c8b19db5987874420"><code>e65fa39</code></a> fix: onParserTimeout potentially accessing undefined (<a href="https://redirect.github.com/nodejs/undici/issues/4758">#4758</a>)</li> <li><a href="https://github.com/nodejs/undici/commit/f1d50a2dd4080e80b88c65bae0341a9b21e5707b"><code>f1d50a2</code></a> fix: MockAgent delayed response with AbortSignal (<a href="https://redirect.github.com/nodejs/undici/issues/4693">#4693</a>) (<a href="https://redirect.github.com/nodejs/undici/issues/4772">#4772</a>)</li> <li><a href="https://github.com/nodejs/undici/commit/9948d6fdb5edf577201a073115a6fcfc62976e9a"><code>9948d6f</code></a> extractBody fixes (<a href="https://redirect.github.com/nodejs/undici/issues/4791">#4791</a>)</li> <li><a href="https://github.com/nodejs/undici/commit/5a5920db0dcbea436ee93019c84f28d2061e21da"><code>5a5920d</code></a> test: reduce retry-after invalid date timing flake (<a href="https://redirect.github.com/nodejs/undici/issues/4788">#4788</a>)</li> <li><a href="https://github.com/nodejs/undici/commit/352c691985bbdeb8b7318bf53a70aeec9213245d"><code>352c691</code></a> feat: expose statusText in request() ResponseData (<a href="https://redirect.github.com/nodejs/undici/issues/4784">#4784</a>)</li> <li><a href="https://github.com/nodejs/undici/commit/fecd473cbc608231de5c6c7cc8ef36fec92230ab"><code>fecd473</code></a> docs: Fix error handling in MockPool example (<a href="https://redirect.github.com/nodejs/undici/issues/4781">#4781</a>)</li> <li><a href="https://github.com/nodejs/undici/commit/1edea72a118c1ab6433d9574128532e818ed61e7"><code>1edea72</code></a> fix: preserve fetch stack traces (<a href="https://redirect.github.com/nodejs/undici/issues/4778">#4778</a>)</li> <li><a href="https://github.com/nodejs/undici/commit/4b36fef66487eacb884e48c9a6f39e3317f5a034"><code>4b36fef</code></a> Bumped v7.19.2 (<a href="https://redirect.github.com/nodejs/undici/issues/4777">#4777</a>)</li> <li><a href="https://github.com/nodejs/undici/commit/44e437dce491e2576105b7b96015e90d12514b7f"><code>44e437d</code></a> build(deps): bump peter-evans/create-pull-request from 7.0.8 to 8.0.0 (<a href="https://redirect.github.com/nodejs/undici/issues/4720">#4720</a>)</li> <li>Additional commits viewable in <a href="https://github.com/nodejs/undici/compare/v7.11.0...v7.20.0">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by [GitHub Actions](<a href="https://www.npmjs.com/~GitHub">https://www.npmjs.com/~GitHub</a> Actions), a new releaser for undici since your current version.</p> </details> <br /> Updates `undici` from 6.21.2 to 6.23.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/nodejs/undici/releases">undici's releases</a>.</em></p> <blockquote> <h2>v7.20.0</h2> <h2>What's Changed</h2> <ul> <li>fix: preserve fetch stack traces by <a href="https://github.com/mcollina"><code>@​mcollina</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4778">nodejs/undici#4778</a></li> <li>Fix error handling in MockPool example by <a href="https://github.com/dave-kennedy"><code>@​dave-kennedy</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4781">nodejs/undici#4781</a></li> <li>feat: expose statusText in request() ResponseData by <a href="https://github.com/domenic"><code>@​domenic</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4784">nodejs/undici#4784</a></li> <li>test: reduce retry-after invalid date flake by <a href="https://github.com/mcollina"><code>@​mcollina</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4788">nodejs/undici#4788</a></li> <li>extractBody fixes by <a href="https://github.com/KhafraDev"><code>@​KhafraDev</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4791">nodejs/undici#4791</a></li> <li>fix: MockAgent delayed response with AbortSignal (<a href="https://redirect.github.com/nodejs/undici/issues/4693">#4693</a>) by <a href="https://github.com/mcollina"><code>@​mcollina</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4772">nodejs/undici#4772</a></li> <li>fix: onParserTimeout potentially accessing undefined by <a href="https://github.com/vbfox"><code>@​vbfox</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4758">nodejs/undici#4758</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/dave-kennedy"><code>@​dave-kennedy</code></a> made their first contribution in <a href="https://redirect.github.com/nodejs/undici/pull/4781">nodejs/undici#4781</a></li> <li><a href="https://github.com/vbfox"><code>@​vbfox</code></a> made their first contribution in <a href="https://redirect.github.com/nodejs/undici/pull/4758">nodejs/undici#4758</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/nodejs/undici/compare/v7.19.2...v7.20.0">https://github.com/nodejs/undici/compare/v7.19.2...v7.20.0</a></p> <h2>v7.19.2</h2> <h2>What's Changed</h2> <ul> <li>Minor code cleanups to decompress interceptor by <a href="https://github.com/domenic"><code>@​domenic</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4754">nodejs/undici#4754</a></li> <li>fix(h2): fix flaky stream end handling on macOS by <a href="https://github.com/mcollina"><code>@​mcollina</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4762">nodejs/undici#4762</a></li> <li>return response when receiving 401 instead of network error by <a href="https://github.com/KhafraDev"><code>@​KhafraDev</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4769">nodejs/undici#4769</a></li> <li>fix: properly close idle connections in test server cleanup by <a href="https://github.com/mcollina"><code>@​mcollina</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4764">nodejs/undici#4764</a></li> <li>fix: decode HTTP headers as latin1 instead of utf8 by <a href="https://github.com/mcollina"><code>@​mcollina</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4768">nodejs/undici#4768</a></li> <li>fix: submodule update by <a href="https://github.com/Uzlopak"><code>@​Uzlopak</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4648">nodejs/undici#4648</a></li> <li>build(deps): bump peter-evans/create-pull-request from 7.0.8 to 8.0.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/nodejs/undici/pull/4720">nodejs/undici#4720</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/domenic"><code>@​domenic</code></a> made their first contribution in <a href="https://redirect.github.com/nodejs/undici/pull/4754">nodejs/undici#4754</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/nodejs/undici/compare/v7.19.1...v7.19.2">https://github.com/nodejs/undici/compare/v7.19.1...v7.19.2</a></p> <h2>v7.19.1</h2> <h2>What's Changed</h2> <ul> <li>fix: use commit hash when generating release (<a href="https://redirect.github.com/nodejs/undici/issues/4757">#4757</a>) by <a href="https://github.com/fenichelar"><code>@​fenichelar</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4759">nodejs/undici#4759</a></li> <li>fix fetch 401 loop by <a href="https://github.com/KhafraDev"><code>@​KhafraDev</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4761">nodejs/undici#4761</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/fenichelar"><code>@​fenichelar</code></a> made their first contribution in <a href="https://redirect.github.com/nodejs/undici/pull/4759">nodejs/undici#4759</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/nodejs/undici/compare/v7.19.0...v7.19.1">https://github.com/nodejs/undici/compare/v7.19.0...v7.19.1</a></p> <h2>v7.19.0</h2> <h2>What's Changed</h2> <ul> <li>fix: Handle FormData body type correctly in RetryAgent retried requests by <a href="https://github.com/eliotschu"><code>@​eliotschu</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4692">nodejs/undici#4692</a></li> <li>feat(client): expose HTTP/2 flow-control options by <a href="https://github.com/pabloelisseo"><code>@​pabloelisseo</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4706">nodejs/undici#4706</a></li> <li>Implement origin normalization in MockAgent for case-insensitivity and URL handling by <a href="https://github.com/SksOp"><code>@​SksOp</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4731">nodejs/undici#4731</a></li> <li>fix websocket basic auth by <a href="https://github.com/KhafraDev"><code>@​KhafraDev</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4747">nodejs/undici#4747</a></li> <li>fix(cache): regenerate stream from source when cache.match is called after GC by <a href="https://github.com/mcollina"><code>@​mcollina</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4713">nodejs/undici#4713</a></li> <li>chore: use testcontext for test:cache by <a href="https://github.com/Uzlopak"><code>@​Uzlopak</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4571">nodejs/undici#4571</a></li> <li>chore: use testcontext for subresource integrity tests by <a href="https://github.com/Uzlopak"><code>@​Uzlopak</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4575">nodejs/undici#4575</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/nodejs/undici/commit/6cc668d9e24fc23a75b9cdfef5faa0212e4fb29f"><code>6cc668d</code></a> Bumped v7.20.0 (<a href="https://redirect.github.com/nodejs/undici/issues/4792">#4792</a>)</li> <li><a href="https://github.com/nodejs/undici/commit/e65fa39309ef0dc17bf0302c8b19db5987874420"><code>e65fa39</code></a> fix: onParserTimeout potentially accessing undefined (<a href="https://redirect.github.com/nodejs/undici/issues/4758">#4758</a>)</li> <li><a href="https://github.com/nodejs/undici/commit/f1d50a2dd4080e80b88c65bae0341a9b21e5707b"><code>f1d50a2</code></a> fix: MockAgent delayed response with AbortSignal (<a href="https://redirect.github.com/nodejs/undici/issues/4693">#4693</a>) (<a href="https://redirect.github.com/nodejs/undici/issues/4772">#4772</a>)</li> <li><a href="https://github.com/nodejs/undici/commit/9948d6fdb5edf577201a073115a6fcfc62976e9a"><code>9948d6f</code></a> extractBody fixes (<a href="https://redirect.github.com/nodejs/undici/issues/4791">#4791</a>)</li> <li><a href="https://github.com/nodejs/undici/commit/5a5920db0dcbea436ee93019c84f28d2061e21da"><code>5a5920d</code></a> test: reduce retry-after invalid date timing flake (<a href="https://redirect.github.com/nodejs/undici/issues/4788">#4788</a>)</li> <li><a href="https://github.com/nodejs/undici/commit/352c691985bbdeb8b7318bf53a70aeec9213245d"><code>352c691</code></a> feat: expose statusText in request() ResponseData (<a href="https://redirect.github.com/nodejs/undici/issues/4784">#4784</a>)</li> <li><a href="https://github.com/nodejs/undici/commit/fecd473cbc608231de5c6c7cc8ef36fec92230ab"><code>fecd473</code></a> docs: Fix error handling in MockPool example (<a href="https://redirect.github.com/nodejs/undici/issues/4781">#4781</a>)</li> <li><a href="https://github.com/nodejs/undici/commit/1edea72a118c1ab6433d9574128532e818ed61e7"><code>1edea72</code></a> fix: preserve fetch stack traces (<a href="https://redirect.github.com/nodejs/undici/issues/4778">#4778</a>)</li> <li><a href="https://github.com/nodejs/undici/commit/4b36fef66487eacb884e48c9a6f39e3317f5a034"><code>4b36fef</code></a> Bumped v7.19.2 (<a href="https://redirect.github.com/nodejs/undici/issues/4777">#4777</a>)</li> <li><a href="https://github.com/nodejs/undici/commit/44e437dce491e2576105b7b96015e90d12514b7f"><code>44e437d</code></a> build(deps): bump peter-evans/create-pull-request from 7.0.8 to 8.0.0 (<a href="https://redirect.github.com/nodejs/undici/issues/4720">#4720</a>)</li> <li>Additional commits viewable in <a href="https://github.com/nodejs/undici/compare/v7.11.0...v7.20.0">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by [GitHub Actions](<a href="https://www.npmjs.com/~GitHub">https://www.npmjs.com/~GitHub</a> Actions), a new releaser for undici since your current version.</p> </details> <br /> Updates `@sveltejs/kit` from 2.22.4 to 2.50.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sveltejs/kit/releases"><code>@​sveltejs/kit</code>'s releases</a>.</em></p> <blockquote> <h2><code>@​sveltejs/kit</code><a href="https://github.com/2"><code>@​2</code></a>.50.1</h2> <h3>Patch Changes</h3> <ul> <li> <p>fix: include <code>hooks.server</code> and <code>hooks.universal</code> as explicit Vite build inputs to ensure assets imported by hooks files are correctly discovered (<a href="https://redirect.github.com/sveltejs/kit/pull/15178">#15178</a>)</p> </li> <li> <p>fix: improves fields type for generic components (<a href="https://redirect.github.com/sveltejs/kit/pull/14974">#14974</a>)</p> </li> <li> <p>fix: preload links if href changes (<a href="https://redirect.github.com/sveltejs/kit/pull/15191">#15191</a>)</p> </li> </ul> <h2><code>@​sveltejs/kit</code><a href="https://github.com/2"><code>@​2</code></a>.50.0</h2> <h3>Minor Changes</h3> <ul> <li>breaking: remove <code>buttonProps</code> from experimental remote form functions; use e.g. <code>&lt;button {...myForm.fields.action.as('submit', 'register')}&gt;Register&lt;/button&gt;</code> button instead (<a href="https://redirect.github.com/sveltejs/kit/pull/15144">#15144</a>)</li> </ul> <h2><code>@​sveltejs/kit</code><a href="https://github.com/2"><code>@​2</code></a>.49.5</h2> <h3>Patch Changes</h3> <ul> <li> <p>fix: avoid overriding Vite default <code>base</code> when running Vitest 4 (<a href="https://redirect.github.com/sveltejs/kit/pull/14866">#14866</a>)</p> </li> <li> <p>fix: ensure url decoded pathnames are not mistaken as rerouted requests (<a href="https://github.com/sveltejs/kit/commit/d9ae9b00b14f5574d109f3fd548f960594346226"><code>d9ae9b0</code></a>)</p> </li> <li> <p>fix: add length checks to remote forms (<a href="https://github.com/sveltejs/kit/commit/8ed8155215b9a74012fecffb942ad9a793b274e5"><code>8ed8155</code></a>)</p> </li> </ul> <h2><code>@​sveltejs/kit</code><a href="https://github.com/2"><code>@​2</code></a>.49.4</h2> <h3>Patch Changes</h3> <ul> <li> <p>fix: support instrumentation for <code>vite preview</code> (<a href="https://redirect.github.com/sveltejs/kit/pull/15105">#15105</a>)</p> </li> <li> <p>fix: support for <code>URLSearchParams.has(name, value)</code> overload (<a href="https://redirect.github.com/sveltejs/kit/pull/15076">#15076</a>)</p> </li> <li> <p>fix: put forking behind <code>experimental.forkPreloads</code> (<a href="https://redirect.github.com/sveltejs/kit/pull/15135">#15135</a>)</p> </li> </ul> <h2><code>@​sveltejs/kit</code><a href="https://github.com/2"><code>@​2</code></a>.49.3</h2> <h3>Patch Changes</h3> <ul> <li> <p>fix: avoid false-positive Vite config overridden warning when using Vitest 4 (<a href="https://redirect.github.com/sveltejs/kit/pull/15121">#15121</a>)</p> </li> <li> <p>fix: add <code>typescript</code> as an optional peer dependency (<a href="https://redirect.github.com/sveltejs/kit/pull/15074">#15074</a>)</p> </li> <li> <p>fix: use hasOwn check when deep-setting object properties (<a href="https://redirect.github.com/sveltejs/kit/pull/15127">#15127</a>)</p> </li> </ul> <h2><code>@​sveltejs/kit</code><a href="https://github.com/2"><code>@​2</code></a>.49.2</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sveltejs/kit/blob/main/packages/kit/CHANGELOG.md"><code>@​sveltejs/kit</code>'s changelog</a>.</em></p> <blockquote> <h2>2.50.1</h2> <h3>Patch Changes</h3> <ul> <li> <p>fix: include <code>hooks.server</code> and <code>hooks.universal</code> as explicit Vite build inputs to ensure assets imported by hooks files are correctly discovered (<a href="https://redirect.github.com/sveltejs/kit/pull/15178">#15178</a>)</p> </li> <li> <p>fix: improves fields type for generic components (<a href="https://redirect.github.com/sveltejs/kit/pull/14974">#14974</a>)</p> </li> <li> <p>fix: preload links if href changes (<a href="https://redirect.github.com/sveltejs/kit/pull/15191">#15191</a>)</p> </li> </ul> <h2>2.50.0</h2> <h3>Minor Changes</h3> <ul> <li>breaking: remove <code>buttonProps</code> from experimental remote form functions; use e.g. <code>&lt;button {...myForm.fields.action.as('submit', 'register')}&gt;Register&lt;/button&gt;</code> button instead (<a href="https://redirect.github.com/sveltejs/kit/pull/15144">#15144</a>)</li> </ul> <h2>2.49.5</h2> <h3>Patch Changes</h3> <ul> <li> <p>fix: avoid overriding Vite default <code>base</code> when running Vitest 4 (<a href="https://redirect.github.com/sveltejs/kit/pull/14866">#14866</a>)</p> </li> <li> <p>fix: ensure url decoded pathnames are not mistaken as rerouted requests (<a href="https://github.com/sveltejs/kit/commit/d9ae9b00b14f5574d109f3fd548f960594346226"><code>d9ae9b0</code></a>)</p> </li> <li> <p>fix: add length checks to remote forms (<a href="https://github.com/sveltejs/kit/commit/8ed8155215b9a74012fecffb942ad9a793b274e5"><code>8ed8155</code></a>)</p> </li> </ul> <h2>2.49.4</h2> <h3>Patch Changes</h3> <ul> <li> <p>fix: support instrumentation for <code>vite preview</code> (<a href="https://redirect.github.com/sveltejs/kit/pull/15105">#15105</a>)</p> </li> <li> <p>fix: support for <code>URLSearchParams.has(name, value)</code> overload (<a href="https://redirect.github.com/sveltejs/kit/pull/15076">#15076</a>)</p> </li> <li> <p>fix: put forking behind <code>experimental.forkPreloads</code> (<a href="https://redirect.github.com/sveltejs/kit/pull/15135">#15135</a>)</p> </li> </ul> <h2>2.49.3</h2> <h3>Patch Changes</h3> <ul> <li> <p>fix: avoid false-positive Vite config overridden warning when using Vitest 4 (<a href="https://redirect.github.com/sveltejs/kit/pull/15121">#15121</a>)</p> </li> <li> <p>fix: add <code>typescript</code> as an optional peer dependency (<a href="https://redirect.github.com/sveltejs/kit/pull/15074">#15074</a>)</p> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sveltejs/kit/commit/3b2ea1baffd7bc93e3129be964233b05518e9cc8"><code>3b2ea1b</code></a> Version Packages (<a href="https://github.com/sveltejs/kit/tree/HEAD/packages/kit/issues/15186">#15186</a>)</li> <li><a href="https://github.com/sveltejs/kit/commit/2dd74c8c86ae4855c3e9d74d8cf241e86dcd5b36"><code>2dd74c8</code></a> fix: improve <code>fields</code> type for generic components (<a href="https://github.com/sveltejs/kit/tree/HEAD/packages/kit/issues/14974">#14974</a>)</li> <li><a href="https://github.com/sveltejs/kit/commit/8871b5444413d0c7d7ef4d260996c3b5c359d0b8"><code>8871b54</code></a> fix: preload links if href changes (<a href="https://github.com/sveltejs/kit/tree/HEAD/packages/kit/issues/15191">#15191</a>)</li> <li><a href="https://github.com/sveltejs/kit/commit/e5627ef17f1b24f2caacc75ff44eff1b51443f23"><code>e5627ef</code></a> fix: Skip failing tests on async (<a href="https://github.com/sveltejs/kit/tree/HEAD/packages/kit/issues/15189">#15189</a>)</li> <li><a href="https://github.com/sveltejs/kit/commit/46c1ebd9f662f0de499e921bfee2661316449e9d"><code>46c1ebd</code></a> fix: include <code>hooks.server</code> and <code>hooks.universal</code> as entrypoints to give them...</li> <li><a href="https://github.com/sveltejs/kit/commit/391c6f742a1e6704b1113f9a051b6987c35c78d0"><code>391c6f7</code></a> Version Packages (<a href="https://github.com/sveltejs/kit/tree/HEAD/packages/kit/issues/15177">#15177</a>)</li> <li><a href="https://github.com/sveltejs/kit/commit/36cb864b7f8a5dca0694d4f9e4a76abefc742a10"><code>36cb864</code></a> Revert &quot;Revert &quot;breaking: remove <code>buttonProps</code> from experimental remote form ...</li> <li><a href="https://github.com/sveltejs/kit/commit/8a828596b9f51154ea63f4f8b65ce049cae4bd27"><code>8a82859</code></a> chore: fix lint errors (<a href="https://github.com/sveltejs/kit/tree/HEAD/packages/kit/issues/15174">#15174</a>)</li> <li><a href="https://github.com/sveltejs/kit/commit/80ffb53382e397a8fc83e6b63d2675eeabb427bd"><code>80ffb53</code></a> Version Packages (<a href="https://github.com/sveltejs/kit/tree/HEAD/packages/kit/issues/15162">#15162</a>)</li> <li><a href="https://github.com/sveltejs/kit/commit/8ed8155215b9a74012fecffb942ad9a793b274e5"><code>8ed8155</code></a> Merge commit from fork</li> <li>Additional commits viewable in <a href="https://github.com/sveltejs/kit/commits/@sveltejs/kit@2.50.1/packages/kit">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by [GitHub Actions](<a href="https://www.npmjs.com/~GitHub">https://www.npmjs.com/~GitHub</a> Actions), a new releaser for <code>@​sveltejs/kit</code> since your current version.</p> </details> <br /> Updates `devalue` from 5.1.1 to 5.6.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sveltejs/devalue/releases">devalue's releases</a>.</em></p> <blockquote> <h2>v5.6.2</h2> <h3>Patch Changes</h3> <ul> <li>1175584: fix: validate input for <code>ArrayBuffer</code> parsing</li> <li>e46afa6: fix: validate input for typed arrays</li> <li>1175584: fix: more helpful errors for inputs causing stack overflows</li> </ul> <h2>v5.6.1</h2> <h3>Patch Changes</h3> <ul> <li>2161d44: fix: add hasOwn check before calling reviver</li> </ul> <h2>v5.6.0</h2> <h3>Minor Changes</h3> <ul> <li>a3d09d4: feat: expose <code>DevalueError</code> for <code>instanceof</code> checks in <code>catch</code> clauses</li> <li>a3d09d4: feat: add <code>value</code> and <code>root</code> properties in <code>DevalueError</code> instances</li> </ul> <h2>v5.5.0</h2> <h3>Minor Changes</h3> <ul> <li>828fa1c: Enable support for custom reducer/reviver for &quot;function&quot; values</li> </ul> <h2>v5.4.2</h2> <h3>Patch Changes</h3> <ul> <li>5c26c0d: fix: allow custom revivers to revive things serialized by builtin reducers</li> </ul> <h2>v5.4.1</h2> <h3>Patch Changes</h3> <ul> <li>ca3c7b6: chore: Remove impossible <code>void</code> type from replacer's <code>uneval</code></li> </ul> <h2>v5.4.0</h2> <h3>Minor Changes</h3> <ul> <li>9306d09: feat: pass <code>uneval</code> to replacer, for handling nested custom types</li> </ul> <h3>Patch Changes</h3> <ul> <li>b617c7c: perf: shrink <code>uneval</code> output with null-proto objects</li> </ul> <h2>v5.3.2</h2> <h3>Patch Changes</h3> <ul> <li>0623a47: fix: disallow array method access when parsing</li> <li>0623a47: fix: disallow <code>__proto__</code> properties on objects</li> </ul> <h2>v5.3.1</h2> <h3>Patch Changes</h3> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sveltejs/devalue/blob/main/CHANGELOG.md">devalue's changelog</a>.</em></p> <blockquote> <h2>5.6.2</h2> <h3>Patch Changes</h3> <ul> <li>1175584: fix: validate input for <code>ArrayBuffer</code> parsing</li> <li>e46afa6: fix: validate input for typed arrays</li> <li>1175584: fix: more helpful errors for inputs causing stack overflows</li> </ul> <h2>5.6.1</h2> <h3>Patch Changes</h3> <ul> <li>2161d44: fix: add hasOwn check before calling reviver</li> </ul> <h2>5.6.0</h2> <h3>Minor Changes</h3> <ul> <li>a3d09d4: feat: expose <code>DevalueError</code> for <code>instanceof</code> checks in <code>catch</code> clauses</li> <li>a3d09d4: feat: add <code>value</code> and <code>root</code> properties in <code>DevalueError</code> instances</li> </ul> <h2>5.5.0</h2> <h3>Minor Changes</h3> <ul> <li>828fa1c: Enable support for custom reducer/reviver for &quot;function&quot; values</li> </ul> <h2>5.4.2</h2> <h3>Patch Changes</h3> <ul> <li>5c26c0d: fix: allow custom revivers to revive things serialized by builtin reducers</li> </ul> <h2>5.4.1</h2> <h3>Patch Changes</h3> <ul> <li>ca3c7b6: chore: Remove impossible <code>void</code> type from replacer's <code>uneval</code></li> </ul> <h2>5.4.0</h2> <h3>Minor Changes</h3> <ul> <li>9306d09: feat: pass <code>uneval</code> to replacer, for handling nested custom types</li> </ul> <h3>Patch Changes</h3> <ul> <li>b617c7c: perf: shrink <code>uneval</code> output with null-proto objects</li> </ul> <h2>5.3.2</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sveltejs/devalue/commit/fcf4e88275f2e2e45b9ea70ffaa5247c8f55f057"><code>fcf4e88</code></a> fix tests</li> <li><a href="https://github.com/sveltejs/devalue/commit/1d8a5ea5863bcd9992755ce5a3842265753cb4ab"><code>1d8a5ea</code></a> Version Packages (<a href="https://redirect.github.com/sveltejs/devalue/issues/131">#131</a>)</li> <li><a href="https://github.com/sveltejs/devalue/commit/11755849fa0634ae294a15ec0aef2f43efcad7c4"><code>1175584</code></a> Merge commit from fork</li> <li><a href="https://github.com/sveltejs/devalue/commit/e46afa64dd2b25aa35fb905ba5d20cea63aabbf7"><code>e46afa6</code></a> Merge commit from fork</li> <li><a href="https://github.com/sveltejs/devalue/commit/5e07a67eda945b3ac2ebac26b18863beabee7357"><code>5e07a67</code></a> Version Packages (<a href="https://redirect.github.com/sveltejs/devalue/issues/129">#129</a>)</li> <li><a href="https://github.com/sveltejs/devalue/commit/aa096040e21a17c628dabea4bcb9d2d4f4542366"><code>aa09604</code></a> Bump js-yaml from 3.14.1 to 3.14.2 (<a href="https://redirect.github.com/sveltejs/devalue/issues/125">#125</a>)</li> <li><a href="https://github.com/sveltejs/devalue/commit/2161d4490aa66e4b120cfa9521874b6f857319dd"><code>2161d44</code></a> fix: add hasOwn check before calling reviver (<a href="https://redirect.github.com/sveltejs/devalue/issues/128">#128</a>)</li> <li><a href="https://github.com/sveltejs/devalue/commit/83de81d13d02dc90dbc94d952b1438b17471547a"><code>83de81d</code></a> Version Packages (<a href="https://redirect.github.com/sveltejs/devalue/issues/127">#127</a>)</li> <li><a href="https://github.com/sveltejs/devalue/commit/a3d09d42a1a2fafb0cafab2c129756baffd858af"><code>a3d09d4</code></a> Add <code>value</code> and <code>root</code> properties in <code>DevalueError</code> instances (<a href="https://redirect.github.com/sveltejs/devalue/issues/126">#126</a>)</li> <li><a href="https://github.com/sveltejs/devalue/commit/f4b37f37ee91d1c22e41920a7320d320f5deaae8"><code>f4b37f3</code></a> Version Packages (<a href="https://redirect.github.com/sveltejs/devalue/issues/124">#124</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sveltejs/devalue/compare/v5.1.1...v5.6.2">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by [GitHub Actions](<a href="https://www.npmjs.com/~GitHub">https://www.npmjs.com/~GitHub</a> Actions), a new releaser for devalue since your current version.</p> </details> <br /> Updates `js-yaml` from 4.1.0 to 4.1.1 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md">js-yaml's changelog</a>.</em></p> <blockquote> <h2>[4.1.1] - 2025-11-12</h2> <h3>Security</h3> <ul> <li>Fix prototype pollution issue in yaml merge (&lt;&lt;) operator.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/nodeca/js-yaml/commit/cc482e775913e6625137572a3712d2826170e53a"><code>cc482e7</code></a> 4.1.1 released</li> <li><a href="https://github.com/nodeca/js-yaml/commit/50968b862e75866ef90e626572fe0b2f97b55f9f"><code>50968b8</code></a> dist rebuild</li> <li><a href="https://github.com/nodeca/js-yaml/commit/d092d866031751cb27c12d93f3e2470ad74d678b"><code>d092d86</code></a> lint fix</li> <li><a href="https://github.com/nodeca/js-yaml/commit/383665ff4248ec2192d1274e934462bb30426879"><code>383665f</code></a> fix prototype pollution in merge (&lt;&lt;)</li> <li><a href="https://github.com/nodeca/js-yaml/commit/0d3ca7a27b03a6c974790a30a89e456007d62976"><code>0d3ca7a</code></a> README.md: HTTP =&gt; HTTPS (<a href="https://redirect.github.com/nodeca/js-yaml/issues/678">#678</a>)</li> <li><a href="https://github.com/nodeca/js-yaml/commit/49baadd52af887d2991e2c39a6639baa56d6c71b"><code>49baadd</code></a> doc: 'empty' style option for !!null</li> <li><a href="https://github.com/nodeca/js-yaml/commit/ba3460eb9d3e4478edcbc29edabe17c2157fc9ce"><code>ba3460e</code></a> Fix demo link (<a href="https://redirect.github.com/nodeca/js-yaml/issues/618">#618</a>)</li> <li>See full diff in <a href="https://github.com/nodeca/js-yaml/compare/4.1.0...4.1.1">compare view</a></li> </ul> </details> <br /> Updates `lodash` from 4.17.21 to 4.17.23 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/lodash/lodash/commit/dec55b7a3b382da075e2eac90089b4cd00a26cbb"><code>dec55b7</code></a> Bump main to v4.17.23 (<a href="https://redirect.github.com/lodash/lodash/issues/6088">#6088</a>)</li> <li><a href="https://github.com/lodash/lodash/commit/19c9251b3631d7cf220b43bc757eb33f1084f117"><code>19c9251</code></a> fix: setCacheHas JSDoc return type should be boolean (<a href="https://redirect.github.com/lodash/lodash/issues/6071">#6071</a>)</li> <li><a href="https://github.com/lodash/lodash/commit/b5e672995ae26929d111a6e94589f8d03fb8e578"><code>b5e6729</code></a> jsdoc: Add -0 and BigInt zeros to _.compact falsey values list (<a href="https://redirect.github.com/lodash/lodash/issues/6062">#6062</a>)</li> <li><a href="https://github.com/lodash/lodash/commit/edadd452146f7e4bad4ea684e955708931d84d81"><code>edadd45</code></a> Prevent prototype pollution on baseUnset function</li> <li><a href="https://github.com/lodash/lodash/commit/4879a7a7d0a4494b0e83c7fa21bcc9fc6e7f1a6d"><code>4879a7a</code></a> doc: fix autoLink function, conversion of source links (<a href="https://redirect.github.com/lodash/lodash/issues/6056">#6056</a>)</li> <li><a href="https://github.com/lodash/lodash/commit/9648f692b0fc7c2f6a7a763d754377200126c2e8"><code>9648f69</code></a> chore: remove <code>yarn.lock</code> file (<a href="https://redirect.github.com/lodash/lodash/issues/6053">#6053</a>)</li> <li><a href="https://github.com/lodash/lodash/commit/dfa407db0bf5b200f2c7a9e4f06830ceaf074be9"><code>dfa407d</code></a> ci: remove legacy configuration files (<a href="https://redirect.github.com/lodash/lodash/issues/6052">#6052</a>)</li> <li><a href="https://github.com/lodash/lodash/commit/156e1965ae78b121a88f81178ab81632304e8d64"><code>156e196</code></a> feat: add renovate setup (<a href="https://redirect.github.com/lodash/lodash/issues/6039">#6039</a>)</li> <li><a href="https://github.com/lodash/lodash/commit/933e1061b8c344d3fc742cdc400175d5ffc99bce"><code>933e106</code></a> ci: add pipeline for Bun (<a href="https://redirect.github.com/lodash/lodash/issues/6023">#6023</a>)</li> <li><a href="https://github.com/lodash/lodash/commit/072a807ff7ad8ffc7c1d2c3097266e815d138e20"><code>072a807</code></a> docs: update links related to Open JS Foundation (<a href="https://redirect.github.com/lodash/lodash/issues/5968">#5968</a>)</li> <li>Additional commits viewable in <a href="https://github.com/lodash/lodash/compare/4.17.21...4.17.23">compare view</a></li> </ul> </details> <br /> Updates `qs` from 6.13.0 to 6.14.1 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/ljharb/qs/blob/main/CHANGELOG.md">qs's changelog</a>.</em></p> <blockquote> <h2><strong>6.14.1</strong></h2> <ul> <li>[Fix] ensure arrayLength applies to <code>[]</code> notation as well</li> <li>[Fix] <code>parse</code>: when a custom decoder returns <code>null</code> for a key, ignore that key</li> <li>[Refactor] <code>parse</code>: extract key segment splitting helper</li> <li>[meta] add threat model</li> <li>[actions] add workflow permissions</li> <li>[Tests] <code>stringify</code>: increase coverage</li> <li>[Dev Deps] update <code>eslint</code>, <code>@ljharb/eslint-config</code>, <code>npmignore</code>, <code>es-value-fixtures</code>, <code>for-each</code>, <code>object-inspect</code></li> </ul> <h2><strong>6.14.0</strong></h2> <ul> <li>[New] <code>parse</code>: add <code>throwOnParameterLimitExceeded</code> option (<a href="https://redirect.github.com/ljharb/qs/issues/517">#517</a>)</li> <li>[Refactor] <code>parse</code>: use <code>utils.combine</code> more</li> <li>[patch] <code>parse</code>: add explicit <code>throwOnLimitExceeded</code> default</li> <li>[actions] use shared action; re-add finishers</li> <li>[meta] Fix changelog formatting bug</li> <li>[Deps] update <code>side-channel</code></li> <li>[Dev Deps] update <code>es-value-fixtures</code>, <code>has-bigints</code>, <code>has-proto</code>, <code>has-symbols</code></li> <li>[Tests] increase coverage</li> </ul> <h2><strong>6.13.1</strong></h2> <ul> <li>[Fix] <code>stringify</code>: avoid a crash when a <code>filter</code> key is <code>null</code></li> <li>[Fix] <code>utils.merge</code>: functions should not be stringified into keys</li> <li>[Fix] <code>parse</code>: avoid a crash with interpretNumericEntities: true, comma: true, and iso charset</li> <li>[Fix] <code>stringify</code>: ensure a non-string <code>filter</code> does not crash</li> <li>[Refactor] use <code>__proto__</code> syntax instead of <code>Object.create</code> for null objects</li> <li>[Refactor] misc cleanup</li> <li>[Tests] <code>utils.merge</code>: add some coverage</li> <li>[Tests] fix a test case</li> <li>[actions] split out node 10-20, and 20+</li> <li>[Dev Deps] update <code>es-value-fixtures</code>, <code>mock-property</code>, <code>object-inspect</code>, <code>tape</code></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/ljharb/qs/commit/3fa11a5f643c76896387bd2d86904a2d0141fdf7"><code>3fa11a5</code></a> v6.14.1</li> <li><a href="https://github.com/ljharb/qs/commit/a62670423c1ccab0dd83c621bfb98c7c024e314d"><code>a626704</code></a> [Dev Deps] update <code>npmignore</code></li> <li><a href="https://github.com/ljharb/qs/commit/3086902ecf7f088d0d1803887643ac6c03d415b9"><code>3086902</code></a> [Fix] ensure arrayLength applies to <code>[]</code> notation as well</li> <li><a href="https://github.com/ljharb/qs/commit/fc7930e86c2264c1568c9f5606830e19b0bc2af2"><code>fc7930e</code></a> [Dev Deps] update <code>eslint</code>, <code>@ljharb/eslint-config</code></li> <li><a href="https://github.com/ljharb/qs/commit/0b06aac566abee45ef0327667a7cc89e7aed8b58"><code>0b06aac</code></a> [Dev Deps] update <code>@ljharb/eslint-config</code></li> <li><a href="https://github.com/ljharb/qs/commit/64951f6200a1fb72cc003c6e8226dde3d2ef591f"><code>64951f6</code></a> [Refactor] <code>parse</code>: extract key segment splitting helper</li> <li><a href="https://github.com/ljharb/qs/commit/e1bd2599cdff4c936ea52fb1f16f921cbe7aa88c"><code>e1bd259</code></a> [Dev Deps] update <code>@ljharb/eslint-config</code></li> <li><a href="https://github.com/ljharb/qs/commit/f4b3d39709fef6ddbd85128d1ba4c6b566c4902e"><code>f4b3d39</code></a> [eslint] add eslint 9 optional peer dep</li> <li><a href="https://github.com/ljharb/qs/commit/6e94d9596ca50dffafcef40a5f64eca89962cf34"><code>6e94d95</code></a> [Dev Deps] update <code>eslint</code>, <code>@ljharb/eslint-config</code>, <code>npmignore</code></li> <li><a href="https://github.com/ljharb/qs/commit/973dc3c51c86da9f4e30edeb4b1725158d439102"><code>973dc3c</code></a> [actions] add workflow permissions</li> <li>Additional commits viewable in <a href="https://github.com/ljharb/qs/compare/v6.13.0...v6.14.1">compare view</a></li> </ul> </details> <br /> Updates `tar` from 7.4.3 to 7.5.7 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md">tar's changelog</a>.</em></p> <blockquote> <h1>Changelog</h1> <h2>7.5</h2> <ul> <li>Added <code>zstd</code> compression support.</li> <li>Consistent TOCTOU behavior in sync t.list</li> <li>Only read from ustar block if not specified in Pax</li> <li>Fix sync tar.list when file size reduces while reading</li> <li>Sanitize absolute linkpaths properly</li> <li>Prevent writing hardlink entries to the archive ahead of their file target</li> </ul> <h2>7.4</h2> <ul> <li>Deprecate <code>onentry</code> in favor of <code>onReadEntry</code> for clarity.</li> </ul> <h2>7.3</h2> <ul> <li>Add <code>onWriteEntry</code> option</li> </ul> <h2>7.2</h2> <ul> <li>DRY the command definitions into a single <code>makeCommand</code> method, and update the type signatures to more appropriately infer the return type from the options and arguments provided.</li> </ul> <h2>7.1</h2> <ul> <li>Update minipass to v7.1.0</li> <li>Update the type definitions of <code>write()</code> and <code>end()</code> methods on <code>Unpack</code> and <code>Parser</code> classes to be compatible with the NodeJS.WritableStream type in the latest versions of <code>@types/node</code>.</li> </ul> <h2>7.0</h2> <ul> <li>Drop support for node &lt;18</li> <li>Rewrite in TypeScript, provide ESM and CommonJS hybrid interface</li> <li>Add tree-shake friendly exports, like <code>import('tar/create')</code> and <code>import('tar/read-entry')</code> to get individual functions or classes.</li> <li>Add <code>chmod</code> option that defaults to false, and deprecate <code>noChmod</code>. That is, reverse the default option regarding explicitly setting file system modes to match tar entry settings.</li> <li>Add <code>processUmask</code> option to avoid having to call <code>process.umask()</code> when <code>chmod: true</code> (or <code>noChmod: false</code>) is set.</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/isaacs/node-tar/commit/4a37eb9a1cf1137df4eb70c5c7f849f412ff3cdb"><code>4a37eb9</code></a> 7.5.7</li> <li><a href="https://github.com/isaacs/node-tar/commit/f4a7aa9bc3d717c987fdf1480ff7a64e87ffdb46"><code>f4a7aa9</code></a> fix: properly sanitize hard links containing ..</li> <li><a href="https://github.com/isaacs/node-tar/commit/394ece6ad8d81742a4e4058af227c616cd947a25"><code>394ece6</code></a> 7.5.6</li> <li><a href="https://github.com/isaacs/node-tar/commit/7d4cc17c76f6bd11dcd83de47187dc6dff206eee"><code>7d4cc17</code></a> fix race puting a Link ahead of its target File</li> <li><a href="https://github.com/isaacs/node-tar/commit/26ab90474e642cf00d84a05bcdc2eaf2a19f1581"><code>26ab904</code></a> 7.5.5</li> <li><a href="https://github.com/isaacs/node-tar/commit/e9a1ddb821b29ddee75b9470dd511066148c8070"><code>e9a1ddb</code></a> fix: do not prevent valid linkpaths within archive</li> <li><a href="https://github.com/isaacs/node-tar/commit/911c886bb170a6ee3db05fd3709221752213ec8a"><code>911c886</code></a> 7.5.4</li> <li><a href="https://github.com/isaacs/node-tar/commit/3b1abfae650056edfabcbe0a0df5954d390521e6"><code>3b1abfa</code></a> normalize out unicode ligatures</li> <li><a href="https://github.com/isaacs/node-tar/commit/a43478c5c51a71ec996cea62ff824eb9dc9dd17c"><code>a43478c</code></a> remove some unused files</li> <li><a href="https://github.com/isaacs/node-tar/commit/970c58f6d3d0c932081f8b40218f612db2fabb5a"><code>970c58f</code></a> update deps</li> <li>Additional commits viewable in <a href="https://github.com/isaacs/node-tar/compare/v7.4.3...v7.5.7">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~isaacs">isaacs</a>, a new releaser for tar since your current version.</p> </details> <br /> Updates `vega-functions` from 6.1.0 to 6.1.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vega/vega/releases">vega-functions's releases</a>.</em></p> <blockquote> <h2>v6.1.1</h2> <p><strong>Full Changelog</strong>: <a href="https://github.com/vega/vega/compare/v6.1.0...v6.1.1">https://github.com/vega/vega/compare/v6.1.0...v6.1.1</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vega/vega/commit/d67c1b7d5ee707eabd82905088aff1605ca866ba"><code>d67c1b7</code></a> chore: bump to 6.1.1</li> <li><a href="https://github.com/vega/vega/commit/e5745308e2b0573d95eeca63c981c6db79b17a52"><code>e574530</code></a> chore: bump vega-cli</li> <li>See full diff in <a href="https://github.com/vega/vega/compare/v6.1.0...v6.1.1">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~hydrosquall">hydrosquall</a>, a new releaser for vega-functions since your current version.</p> </details> <br /> Updates `vega-selections` from 6.1.0 to 6.1.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vega/vega/releases">vega-selections's releases</a>.</em></p> <blockquote> <h2>v6.1.2</h2> <p><strong>Full Changelog</strong>: <a href="https://github.com/vega/vega/compare/v6.1.1...v6.1.2">https://github.com/vega/vega/compare/v6.1.1...v6.1.2</a></p> <h2>v6.1.1</h2> <p><strong>Full Changelog</strong>: <a href="https://github.com/vega/vega/compare/v6.1.0...v6.1.1">https://github.com/vega/vega/compare/v6.1.0...v6.1.1</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vega/vega/commit/18a55af6207fb183510659bdec3922eddc9a6022"><code>18a55af</code></a> chore: fix json of package.json</li> <li><a href="https://github.com/vega/vega/commit/38957ff074288c014230bd55bbcd0acf6d1ee1ec"><code>38957ff</code></a> chore: bump vega</li> <li><a href="https://github.com/vega/vega/commit/bb800e9dcedaa2d53b729d753cf8a66d221a3063"><code>bb800e9</code></a> chore: simplify gitignore</li> <li><a href="https://github.com/vega/vega/commit/b737e032d9d1dee557bbb9fa0fdbf0789220ee61"><code>b737e03</code></a> fix: run <code>npm pkg fix</code></li> <li><a href="https://github.com/vega/vega/commit/d67c1b7d5ee707eabd82905088aff1605ca866ba"><code>d67c1b7</code></a> chore: bump to 6.1.1</li> <li><a href="https://github.com/vega/vega/commit/e5745308e2b0573d95eeca63c981c6db79b17a52"><code>e574530</code></a> chore: bump vega-cli</li> <li>See full diff in <a href="https://github.com/vega/vega/compare/v6.1.0...v6.1.2">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~hydrosquall">hydrosquall</a>, a new releaser for vega-selections since your current version.</p> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/open-webui/open-webui/network/alerts). </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
GiteaMirror added the pull-request label 2026-04-20 06:13:03 -05:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/open-webui#25933