{"id":4231,"name":"markdown-it","ecosystem":"npm","repository_url":"https://github.com/markdown-it/markdown-it","issues_count":2495,"created_at":"2025-06-06T16:30:22.224Z","updated_at":"2025-06-06T16:30:22.224Z","purl":"pkg:npm/markdown-it","metadata":{"id":1991597,"name":"markdown-it","ecosystem":"npm","description":"Markdown-it - modern pluggable markdown parser.","homepage":"https://github.com/markdown-it/markdown-it#readme","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/markdown-it/markdown-it","keywords_array":["markdown","parser","commonmark","markdown-it","markdown-it-plugin"],"namespace":null,"versions_count":79,"first_release_published_at":"2014-12-19T23:46:48.471Z","latest_release_published_at":"2024-03-18T23:17:52.302Z","latest_release_number":"14.1.0","last_synced_at":"2025-06-05T06:31:49.271Z","created_at":"2022-04-09T19:18:03.032Z","updated_at":"2025-06-05T06:34:08.111Z","registry_url":"https://www.npmjs.com/package/markdown-it","install_command":"npm install markdown-it","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"latest":"14.1.0"}},"repo_metadata":{"id":24834828,"uuid":"28249537","full_name":"markdown-it/markdown-it","owner":"markdown-it","description":"Markdown parser, done right. 100% CommonMark support, extensions, syntax plugins \u0026 high speed","archived":false,"fork":false,"pushed_at":"2024-08-04T11:25:40.000Z","size":3828,"stargazers_count":19729,"open_issues_count":55,"forks_count":1745,"subscribers_count":182,"default_branch":"master","last_synced_at":"2025-06-04T01:04:52.173Z","etag":null,"topics":["commonmark","javascript","markdown"],"latest_commit_sha":null,"homepage":"https://markdown-it.github.io","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/markdown-it.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"docs/security.md","support":"support/api_header.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null},"funding":{"github":"markdown-it","open_collective":"markdown-it","tidelift":"npm/markdown-it"}},"created_at":"2014-12-19T22:54:53.000Z","updated_at":"2025-06-04T00:27:58.000Z","dependencies_parsed_at":"2023-09-26T18:33:11.140Z","dependency_job_id":"fa13985c-b0f8-4d85-a53c-06675efb7892","html_url":"https://github.com/markdown-it/markdown-it","commit_stats":{"total_commits":1063,"total_committers":87,"mean_commits":"12.218390804597702","dds":0.3668861712135466,"last_synced_commit":"0fe7ccb4b7f30236fb05f623be6924961d296d3d"},"previous_names":[],"tags_count":79,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/markdown-it","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":258103512,"owners_count":22651029,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"markdown-it","name":"Markdown it!","uuid":"10248321","kind":"organization","description":"Next generation markdown parser in javascript, with pluggable syntax!","email":null,"website":"https://markdown-it.github.io/","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/10248321?v=4","repositories_count":19,"last_synced_at":"2024-10-29T15:54:12.318Z","metadata":{"has_sponsors_listing":true},"html_url":"https://github.com/markdown-it","funding_links":["https://github.com/sponsors/markdown-it"],"total_stars":20547,"followers":176,"following":0,"created_at":"2022-11-02T16:20:41.236Z","updated_at":"2024-10-29T15:54:12.318Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/markdown-it","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/markdown-it/repositories"},"tags":[{"name":"14.1.0","sha":"0fe7ccb4b7f30236fb05f623be6924961d296d3d","kind":"commit","published_at":"2024-03-18T23:10:30.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/14.1.0","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/14.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/14.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/14.1.0/manifests"},{"name":"14.0.0","sha":"4949a10120d101bdca48bf1b13f9e790d6f2049e","kind":"commit","published_at":"2023-12-08T01:24:17.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/14.0.0","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/14.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/14.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/14.0.0/manifests"},{"name":"13.0.2","sha":"e476f78bc3ea3576beb61bdc94322d0a6b2d85cc","kind":"commit","published_at":"2023-09-26T18:23:55.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/13.0.2","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/13.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/13.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/13.0.2/manifests"},{"name":"13.0.1","sha":"e843acc9edad115cbf8cf85e676443f01658be08","kind":"commit","published_at":"2022-05-03T14:21:00.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/13.0.1","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/13.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/13.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/13.0.1/manifests"},{"name":"13.0.0","sha":"6ec0b76ebe439f5858ae51d8e0cb45ee4a7ad46c","kind":"commit","published_at":"2022-04-22T17:18:25.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/13.0.0","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/13.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/13.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/13.0.0/manifests"},{"name":"12.3.2","sha":"d72c68b520cedacae7878caa92bf7fe32e3e0e6f","kind":"commit","published_at":"2022-01-08T15:02:53.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/12.3.2","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/12.3.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/12.3.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/12.3.2/manifests"},{"name":"12.3.1","sha":"76469e83dc1a1e3ed943b483b554003a666bddf7","kind":"commit","published_at":"2022-01-07T16:34:54.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/12.3.1","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/12.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/12.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/12.3.1/manifests"},{"name":"12.3.0","sha":"2e31d3430187d2eee1ba120c954783eebb93b4e8","kind":"commit","published_at":"2021-12-09T16:59:26.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/12.3.0","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/12.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/12.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/12.3.0/manifests"},{"name":"12.2.0","sha":"6e2de08a0b03d3d0dcc524b89710ce05f83a0283","kind":"commit","published_at":"2021-08-02T18:18:00.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/12.2.0","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/12.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/12.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/12.2.0/manifests"},{"name":"12.1.0","sha":"13cdeb95abccc78a5ce17acf9f6e8cf5b9ce713b","kind":"commit","published_at":"2021-07-01T18:36:41.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/12.1.0","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/12.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/12.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/12.1.0/manifests"},{"name":"12.0.6","sha":"df4607f1d4d4be7fdc32e71c04109aea8cc373fa","kind":"commit","published_at":"2021-04-16T12:08:12.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/12.0.6","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/12.0.6","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/12.0.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/12.0.6/manifests"},{"name":"12.0.5","sha":"3740146fc9c92ea15fdc6a358137ec7b68f05f4b","kind":"commit","published_at":"2021-04-14T21:34:55.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/12.0.5","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/12.0.5","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/12.0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/12.0.5/manifests"},{"name":"12.0.4","sha":"7b8969ce5cb2edc54f2c1aa39a85a3a08076337d","kind":"commit","published_at":"2020-12-20T15:59:55.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/12.0.4","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/12.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/12.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/12.0.4/manifests"},{"name":"12.0.3","sha":"ef59691072cdb003e07875737d1ce3e70ed67395","kind":"commit","published_at":"2020-12-07T20:52:53.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/12.0.3","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/12.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/12.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/12.0.3/manifests"},{"name":"12.0.2","sha":"b60493e620a685a40eac016dde2c207ee9e07875","kind":"commit","published_at":"2020-10-23T17:06:05.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/12.0.2","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/12.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/12.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/12.0.2/manifests"},{"name":"12.0.1","sha":"e3c4c5cfd73f019291d310f4abba7a20d225e060","kind":"commit","published_at":"2020-10-19T12:13:58.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/12.0.1","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/12.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/12.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/12.0.1/manifests"},{"name":"12.0.0","sha":"1731de407e56595d1e206c79482061d1c6f501ed","kind":"commit","published_at":"2020-10-14T18:20:41.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/12.0.0","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/12.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/12.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/12.0.0/manifests"},{"name":"11.0.1","sha":"331ae117e09115366db12b517ca526b1b7fee1e8","kind":"commit","published_at":"2020-09-14T08:02:07.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/11.0.1","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/11.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/11.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/11.0.1/manifests"},{"name":"11.0.0","sha":"1093e68e51c9b3104289c3cfbaffbb1fa4039d59","kind":"commit","published_at":"2020-05-19T21:20:40.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/11.0.0","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/11.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/11.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/11.0.0/manifests"},{"name":"10.0.0","sha":"b5d7ea5e8a70563196f8813ec5030d7b6960ea95","kind":"commit","published_at":"2019-09-10T21:39:58.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/10.0.0","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/10.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/10.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/10.0.0/manifests"},{"name":"9.1.0","sha":"9e5015f8f759580bbdd7412db2667ec8a72c71f7","kind":"commit","published_at":"2019-08-11T12:36:28.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/9.1.0","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/9.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/9.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/9.1.0/manifests"},{"name":"9.0.1","sha":"28cec6d30a5b18ded43d595ed24ba7a095ed859f","kind":"commit","published_at":"2019-07-12T16:47:45.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/9.0.1","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/9.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/9.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/9.0.1/manifests"},{"name":"9.0.0","sha":"bd43aaeedbcca9750428c27f285268a83450094b","kind":"commit","published_at":"2019-07-09T05:42:53.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/9.0.0","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/9.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/9.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/9.0.0/manifests"},{"name":"8.4.2","sha":"2c02e3e2371f57fc09ba24229eb35f7f9400fad3","kind":"commit","published_at":"2018-07-17T19:03:22.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/8.4.2","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/8.4.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/8.4.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/8.4.2/manifests"},{"name":"8.4.1","sha":"42e388224b92c41208941093e15b5c0dc486464c","kind":"commit","published_at":"2018-02-15T14:13:54.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/8.4.1","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/8.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/8.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/8.4.1/manifests"},{"name":"8.4.0","sha":"3353462142d519dfe5b613e4d9e79fa29601ff98","kind":"commit","published_at":"2017-08-24T15:11:11.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/8.4.0","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/8.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/8.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/8.4.0/manifests"},{"name":"8.3.2","sha":"d0e0cbdc805d63e767665d6aa7b0749c3ab894c5","kind":"commit","published_at":"2017-08-03T15:58:47.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/8.3.2","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/8.3.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/8.3.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/8.3.2/manifests"},{"name":"8.3.1","sha":"427cc20c9b9dd73b8e00b33f48cc643042261a1b","kind":"commit","published_at":"2017-03-06T15:39:47.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/8.3.1","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/8.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/8.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/8.3.1/manifests"},{"name":"8.3.0","sha":"bcfbe38cdd4bbeadc348b59efd44b19ae77c4c3a","kind":"commit","published_at":"2017-02-16T18:04:51.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/8.3.0","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/8.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/8.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/8.3.0/manifests"},{"name":"8.2.2","sha":"1f5397279f19367ef3d4bb3911e5fd94d0532bdf","kind":"commit","published_at":"2016-12-14T22:12:36.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/8.2.2","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/8.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/8.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/8.2.2/manifests"},{"name":"8.2.1","sha":"835dcb3d9ed1f3ba96e3aae601e802db5b810450","kind":"commit","published_at":"2016-12-01T19:52:38.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/8.2.1","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/8.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/8.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/8.2.1/manifests"},{"name":"8.2.0","sha":"31ede2430ad5caacd7118a3611de2ab820ec5fff","kind":"commit","published_at":"2016-12-01T05:03:20.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/8.2.0","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/8.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/8.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/8.2.0/manifests"},{"name":"8.1.0","sha":"f625c6250eab230c9a9f43457f8aa35b30f03011","kind":"commit","published_at":"2016-11-03T15:36:11.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/8.1.0","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/8.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/8.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/8.1.0/manifests"},{"name":"8.0.1","sha":"11c71dc904919782fc2afe513f2426ec3cf3e783","kind":"commit","published_at":"2016-10-18T02:56:07.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/8.0.1","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/8.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/8.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/8.0.1/manifests"},{"name":"8.0.0","sha":"e6f19eab4204122e85e4a342e0c1c8486ff40c2d","kind":"commit","published_at":"2016-09-16T03:43:54.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/8.0.0","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/8.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/8.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/8.0.0/manifests"},{"name":"7.0.1","sha":"c3f619c19a0b76abcd288e621a69099a72a5ee26","kind":"commit","published_at":"2016-08-16T18:55:37.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/7.0.1","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/7.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/7.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/7.0.1/manifests"},{"name":"7.0.0","sha":"c9403ed8a7ac4e31b310aedc2225e66c76429338","kind":"commit","published_at":"2016-06-22T10:56:55.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/7.0.0","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/7.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/7.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/7.0.0/manifests"},{"name":"6.1.1","sha":"c6a952eb0211c856355e25066bbfc80f3945bd58","kind":"commit","published_at":"2016-06-21T10:39:45.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/6.1.1","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/6.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/6.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/6.1.1/manifests"},{"name":"6.1.0","sha":"4eb0e21ef419cca9baa1b99716122e87a025c63e","kind":"commit","published_at":"2016-06-19T05:57:29.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/6.1.0","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/6.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/6.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/6.1.0/manifests"},{"name":"6.0.5","sha":"c09b56331794de4f6776e46bfa099e12ac12fde6","kind":"commit","published_at":"2016-06-01T17:44:12.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/6.0.5","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/6.0.5","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/6.0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/6.0.5/manifests"},{"name":"6.0.4","sha":"e95a8b765ef72b53c122ec6da1b1c95055deac6b","kind":"commit","published_at":"2016-05-30T16:00:31.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/6.0.4","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/6.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/6.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/6.0.4/manifests"},{"name":"6.0.3","sha":"e0aa62e0cdd226f1294c790678d99c6ecbd5dc92","kind":"commit","published_at":"2016-05-30T14:24:50.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/6.0.3","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/6.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/6.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/6.0.3/manifests"},{"name":"6.0.2","sha":"4998b813fc00e4612b613c2f0f826180b46bdf53","kind":"commit","published_at":"2016-05-16T10:39:56.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/6.0.2","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/6.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/6.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/6.0.2/manifests"},{"name":"6.0.1","sha":"8fcb93cdcfc653788bba5cc6030a89a8b41134db","kind":"commit","published_at":"2016-04-02T09:11:26.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/6.0.1","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/6.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/6.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/6.0.1/manifests"},{"name":"6.0.0","sha":"38bf443aab2f169b3c2587cbeee89afba2581604","kind":"commit","published_at":"2016-02-10T21:31:55.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/6.0.0","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/6.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/6.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/6.0.0/manifests"},{"name":"5.1.0","sha":"ae2986b7bd3361facb025b1030f0f3a4cb07de73","kind":"commit","published_at":"2016-01-06T23:48:53.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/5.1.0","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/5.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/5.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/5.1.0/manifests"},{"name":"5.0.3","sha":"41b913da9852f21e04b8c33fab2fe16561d4a585","kind":"commit","published_at":"2016-01-04T14:48:38.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/5.0.3","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/5.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/5.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/5.0.3/manifests"},{"name":"5.0.2","sha":"73a6ec97b74d0b9acb8219c7b5a9886709229695","kind":"commit","published_at":"2015-11-20T16:01:12.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/5.0.2","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/5.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/5.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/5.0.2/manifests"},{"name":"5.0.1","sha":"9074242bdd6b25abf0b8bfe432f152e7b409b8e1","kind":"commit","published_at":"2015-10-30T17:43:23.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/5.0.1","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/5.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/5.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/5.0.1/manifests"},{"name":"5.0.0","sha":"6bd4534af7f500e1e48630ac94912195af6f79e4","kind":"commit","published_at":"2015-10-05T11:46:48.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/5.0.0","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/5.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/5.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/5.0.0/manifests"},{"name":"4.4.0","sha":"4401922b2e08e1e4379ea474f0f9a695c429ec13","kind":"commit","published_at":"2015-07-18T04:53:07.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/4.4.0","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/4.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/4.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/4.4.0/manifests"},{"name":"4.3.1","sha":"521588d5f4c4c49dcddbdedfb1ec223b2ca7711c","kind":"commit","published_at":"2015-07-15T16:21:26.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/4.3.1","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/4.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/4.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/4.3.1/manifests"},{"name":"4.3.0","sha":"abce4475778c9d079f36882ec5105efa929ff932","kind":"commit","published_at":"2015-06-29T13:14:58.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/4.3.0","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/4.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/4.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/4.3.0/manifests"},{"name":"4.2.2","sha":"3e7a021966ae0845ae4b2a29cb69ec349a0b7990","kind":"commit","published_at":"2015-06-09T22:03:33.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/4.2.2","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/4.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/4.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/4.2.2/manifests"},{"name":"4.2.1","sha":"b59148a38d3aa3ceb76c50eac8543e9409d6c0a7","kind":"commit","published_at":"2015-05-01T17:31:16.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/4.2.1","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/4.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/4.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/4.2.1/manifests"},{"name":"4.2.0","sha":"5472253f2b49af442c07bde275c9daa11fa9d314","kind":"commit","published_at":"2015-04-21T08:08:07.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/4.2.0","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/4.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/4.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/4.2.0/manifests"},{"name":"4.1.2","sha":"e11b414d963c15cec34a887d36f3353e7dc240b5","kind":"commit","published_at":"2015-04-19T02:24:08.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/4.1.2","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/4.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/4.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/4.1.2/manifests"},{"name":"4.1.1","sha":"12506ebbdbcc9177ed8281ea9a05233e7969cf42","kind":"commit","published_at":"2015-04-13T20:07:29.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/4.1.1","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/4.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/4.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/4.1.1/manifests"},{"name":"4.1.0","sha":"170bc1ce54a943f4d116fbaedc4e9acdcbb23091","kind":"commit","published_at":"2015-03-31T19:01:07.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/4.1.0","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/4.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/4.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/4.1.0/manifests"},{"name":"4.0.3","sha":"f530f2ff7558f8bfe3811a8df1e3e6e8d0781e82","kind":"commit","published_at":"2015-03-25T19:44:07.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/4.0.3","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/4.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/4.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/4.0.3/manifests"},{"name":"4.0.2","sha":"12b60c69640d9a0569347b71227bd5c0e885cf16","kind":"commit","published_at":"2015-03-22T02:15:48.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/4.0.2","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/4.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/4.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/4.0.2/manifests"},{"name":"4.0.1","sha":"7bd522167324b5551fc1fc88d24ca779ac3eaf82","kind":"commit","published_at":"2015-03-13T08:10:41.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/4.0.1","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/4.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/4.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/4.0.1/manifests"},{"name":"4.0.0","sha":"e0f01864e8d4521f70da47c57c8e4049e0422230","kind":"commit","published_at":"2015-03-12T08:44:00.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/4.0.0","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/4.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/4.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/4.0.0/manifests"},{"name":"3.1.0","sha":"329a35a9c96a9451f66febfdb00255aa06de29c7","kind":"commit","published_at":"2015-03-05T13:28:15.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/3.1.0","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/3.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/3.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/3.1.0/manifests"},{"name":"3.0.7","sha":"e03f9586c3f355c596a908172d33a08ac6868daf","kind":"commit","published_at":"2015-02-22T05:25:04.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/3.0.7","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/3.0.7","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/3.0.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/3.0.7/manifests"},{"name":"3.0.6","sha":"01d22b245e60171a8db8564731f9d46ae6951187","kind":"commit","published_at":"2015-02-12T16:24:13.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/3.0.6","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/3.0.6","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/3.0.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/3.0.6/manifests"},{"name":"3.0.5","sha":"0dc415f1d24fbaf65c4bb95e533976a4dc7153a4","kind":"commit","published_at":"2015-02-06T19:34:41.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/3.0.5","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/3.0.5","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/3.0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/3.0.5/manifests"},{"name":"3.0.4","sha":"bf846041fc6dbeaac82f47ce7ad04f9b054d368c","kind":"commit","published_at":"2015-01-13T20:15:19.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/3.0.4","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/3.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/3.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/3.0.4/manifests"},{"name":"3.0.3","sha":"a2e2d3958545aac1acbb3c97e94374a7c31f0249","kind":"commit","published_at":"2015-01-11T00:17:56.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/3.0.3","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/3.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/3.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/3.0.3/manifests"},{"name":"3.0.2","sha":"034997b9da608d33d548dc426ac86c42b83162b5","kind":"commit","published_at":"2015-01-08T23:26:29.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/3.0.2","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/3.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/3.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/3.0.2/manifests"},{"name":"3.0.1","sha":"f93089823c688b5468d4e67d20cd220524d341df","kind":"commit","published_at":"2015-01-07T22:04:33.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/3.0.1","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/3.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/3.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/3.0.1/manifests"},{"name":"3.0.0","sha":"801ad9795682b3ae0c830e692cfb8824bfaa14f9","kind":"commit","published_at":"2015-01-04T13:12:35.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/3.0.0","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/3.0.0/manifests"},{"name":"2.2.1","sha":"abaf0bd1c4878cec5e7ede75ea14804aebc6395a","kind":"commit","published_at":"2014-12-29T14:34:28.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/2.2.1","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/2.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/2.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/2.2.1/manifests"},{"name":"2.2.0","sha":"8e098b4bd8598dea3e1eaa5d3b6c65219892f0dc","kind":"commit","published_at":"2014-12-28T20:35:59.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/2.2.0","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/2.2.0/manifests"},{"name":"2.1.3","sha":"fb5f6aaa03db1c71ef89967dce6b12a4fefc16b7","kind":"commit","published_at":"2014-12-24T18:00:16.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/2.1.3","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/2.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/2.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/2.1.3/manifests"},{"name":"2.1.2","sha":"c613c792c68f29008972ca37c49dadc29644dbbc","kind":"commit","published_at":"2014-12-23T04:04:43.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/2.1.2","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/2.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/2.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/2.1.2/manifests"},{"name":"2.1.1","sha":"e4bae86296155592a0a0518db737a905c778b944","kind":"commit","published_at":"2014-12-22T01:08:50.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/2.1.1","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/2.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/2.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/2.1.1/manifests"},{"name":"2.1.0","sha":"47f7f689ebfa28231d2ad0f867d6f01c7f63c3ae","kind":"commit","published_at":"2014-12-21T04:41:38.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/2.1.0","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/2.1.0/manifests"},{"name":"2.0.0","sha":"ca04a87059211c62c3ca76bcbbbd01fe85ae5c21","kind":"commit","published_at":"2014-12-19T23:42:22.000Z","download_url":"https://codeload.github.com/markdown-it/markdown-it/tar.gz/2.0.0","html_url":"https://github.com/markdown-it/markdown-it/releases/tag/2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/markdown-it%2Fmarkdown-it/tags/2.0.0/manifests"}]},"repo_metadata_updated_at":"2025-06-05T06:34:08.110Z","dependent_packages_count":8475,"downloads":39354029,"downloads_period":"last-month","dependent_repos_count":205037,"rankings":{"downloads":0.05265140770643568,"dependent_repos_count":0.07392553344117334,"dependent_packages_count":0.011390008115380783,"stargazers_count":0.7815297876092044,"forks_count":0.9511478171158966,"docker_downloads_count":0.03756512291899623,"average":0.31803494615118116},"purl":"pkg:npm/markdown-it","advisories":[{"uuid":"GSA_kwCzR0hTQS1qNXA3LWpmNHEtNzQycc4AAwnP","url":"https://github.com/advisories/GHSA-j5p7-jf4q-742q","title":"markdown-it vulnerable to Inefficient Regular Expression Complexity","description":"A vulnerability was found in markdown-it up to 2.x. It has been classified as problematic. Affected is an unknown function of the file `lib/common/html_re.js`. The manipulation leads to inefficient regular expression complexity. Upgrading to version 3.0.0 is able to address this issue. The name of the patch is 89c8620157d6e38f9872811620d25138fc9d1b0d. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-216852.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2022-12-27T09:30:41.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://nvd.nist.gov/vuln/detail/CVE-2015-10005","https://github.com/markdown-it/markdown-it/commit/89c8620157d6e38f9872811620d25138fc9d1b0d","https://github.com/markdown-it/markdown-it/releases/tag/3.0.0","https://vuldb.com/?ctiid.216852","https://vuldb.com/?id.216852","https://github.com/advisories/GHSA-j5p7-jf4q-742q"],"source_kind":"github","identifiers":["GHSA-j5p7-jf4q-742q","CVE-2015-10005"],"repository_url":"https://github.com/markdown-it/markdown-it","blast_radius":0.0,"packages":[{"versions":[{"first_patched_version":"3.0.0","vulnerable_version_range":"\u003c 3.0.0"}],"ecosystem":"npm","package_name":"markdown-it"}],"created_at":"2022-12-30T17:09:53.461Z","updated_at":"2023-02-03T05:01:29.000Z","epss_percentage":0.00048,"epss_percentile":0.14536},{"uuid":"GSA_kwCzR0hTQS02dmZjLXF2M2YtdnI2Y80hTA","url":"https://github.com/advisories/GHSA-6vfc-qv3f-vr6c","title":"Uncontrolled Resource Consumption in markdown-it","description":"### Impact\n\nSpecial patterns with length \u003e 50K chars can slow down parser significantly.\n\n```js\nconst md = require('markdown-it')();\n\nmd.render(`x ${' '.repeat(150000)} x  \\nx`);\n```\n\n\n### Patches\n\nUpgrade to v12.3.2+\n\n### Workarounds\n\nNo.\n\n### References\n\nFix + test sample: https://github.com/markdown-it/markdown-it/commit/ffc49ab46b5b751cd2be0aabb146f2ef84986101\n","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2022-01-12T22:20:22.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://github.com/markdown-it/markdown-it/security/advisories/GHSA-6vfc-qv3f-vr6c","https://github.com/markdown-it/markdown-it/commit/ffc49ab46b5b751cd2be0aabb146f2ef84986101","https://nvd.nist.gov/vuln/detail/CVE-2022-21670","https://github.com/advisories/GHSA-6vfc-qv3f-vr6c"],"source_kind":"github","identifiers":["GHSA-6vfc-qv3f-vr6c","CVE-2022-21670"],"repository_url":"https://github.com/markdown-it/markdown-it","blast_radius":0.0,"packages":[{"versions":[{"first_patched_version":"12.3.2","vulnerable_version_range":"\u003c 12.3.2"}],"ecosystem":"npm","package_name":"markdown-it"}],"created_at":"2022-12-21T16:12:38.618Z","updated_at":"2025-04-19T01:14:52.241Z","epss_percentage":0.00575,"epss_percentile":0.67509}],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/markdown-it","docker_dependents_count":3521,"docker_downloads_count":3113061388,"usage_url":"https://repos.ecosyste.ms/usage/npm/markdown-it","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/markdown-it/dependencies","status":null,"funding_links":["https://github.com/sponsors/markdown-it","https://opencollective.com/markdown-it","https://tidelift.com/funding/github/npm/markdown-it"],"critical":true,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/markdown-it/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/markdown-it/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/markdown-it/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/markdown-it/related_packages","maintainers":[{"uuid":"vitaly","login":"vitaly","name":null,"email":"vitaly@rcopen.com","url":null,"packages_count":64,"html_url":"https://www.npmjs.com/~vitaly","role":null,"created_at":"2022-11-10T11:23:03.567Z","updated_at":"2022-11-10T11:23:03.567Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/vitaly/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5003674,"maintainers_count":1012339,"namespaces_count":295318,"keywords_count":699769,"github":"npm","metadata":{"funded_packages_count":150180},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2025-06-05T05:52:15.849Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},"unique_repositories_count":1764,"unique_repositories_count_past_30_days":240,"recent_issues":[{"uuid":"6033385995","node_id":"PR_kwDOQ7n3x88AAAABKr5i1g","number":107,"state":"open","title":"build(deps): bump the npm-dependencies group across 1 directory with 25 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-26T04:32:14.000Z","updated_at":"2026-10-26T04:32:25.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps): bump","group_name":"npm-dependencies","update_count":25,"packages":[{"name":"@clerk/clerk-js","old_version":"6.31.1","new_version":"6.40.0","repository_url":"https://github.com/clerk/javascript"},{"name":"@kenjiuno/msgreader","old_version":"1.28.0","new_version":"1.29.0","repository_url":"https://github.com/HiraokaHyperTools/msgreader"},{"name":"cropperjs","old_version":"2.2.0","new_version":"2.3.1","repository_url":"https://github.com/fengyuanchen/cropperjs"},{"name":"i18next","old_version":"26.4.2","new_version":"26.5.6","repository_url":"https://github.com/i18next/i18next"},{"name":"i18next-http-backend","old_version":"4.0.2","new_version":"4.0.4","repository_url":"https://github.com/i18next/i18next-http-backend"},{"name":"jspdf-autotable","old_version":"5.0.8","new_version":"5.0.9","repository_url":"https://github.com/simonbengtsson/jsPDF-AutoTable"},{"name":"lucide","old_version":"1.44.0","new_version":"1.61.0","repository_url":"https://github.com/lucide-icons/lucide"},{"name":"markdown-it","old_version":"15.0.2","new_version":"15.0.3","repository_url":"https://github.com/markdown-it/markdown-it"},{"name":"mermaid","old_version":"12.0.0","new_version":"12.2.0","repository_url":"https://github.com/mermaid-js/mermaid"},{"name":"motion","old_version":"13.2.0","new_version":"14.6.0","repository_url":"https://github.com/motiondivision/motion"},{"name":"pdfjs-dist","old_version":"6.3.289","new_version":"6.4.299","repository_url":"https://github.com/mozilla/pdf.js"},{"name":"postal-mime","old_version":"3.0.0","new_version":"4.1.4","repository_url":"https://github.com/postalsys/postal-mime"},{"name":"@testing-library/dom","old_version":"10.4.1","new_version":"10.4.2","repository_url":"https://github.com/testing-library/dom-testing-library"},{"name":"@types/pdfkit","old_version":"0.17.6","new_version":"0.17.7","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"@vitest/coverage-v8","old_version":"5.0.0","new_version":"5.0.5","repository_url":"https://github.com/vitest-dev/vitest"},{"name":"@vitest/ui","old_version":"5.0.0","new_version":"5.0.5","repository_url":"https://github.com/vitest-dev/vitest"},{"name":"eslint","old_version":"10.10.0","new_version":"10.13.0","repository_url":"https://github.com/eslint/eslint"},{"name":"globals","old_version":"17.12.0","new_version":"17.13.0","repository_url":"https://github.com/sindresorhus/globals"},{"name":"jsdom","old_version":"30.0.1","new_version":"30.1.3","repository_url":"https://github.com/jsdom/jsdom"},{"name":"lint-staged","old_version":"17.5.1","new_version":"17.6.0","repository_url":"https://github.com/lint-staged/lint-staged"},{"name":"prettier","old_version":"3.9.6","new_version":"3.9.10","repository_url":"https://github.com/prettier/prettier"},{"name":"typescript-eslint","old_version":"8.70.0","new_version":"8.72.0","repository_url":"https://github.com/typescript-eslint/typescript-eslint"},{"name":"vite","old_version":"8.3.0","new_version":"8.3.5","repository_url":"https://github.com/vitejs/vite"},{"name":"vitest","old_version":"5.0.0","new_version":"5.0.5","repository_url":"https://github.com/vitest-dev/vitest"},{"name":"vue","old_version":"3.5.42","new_version":"3.5.44","repository_url":"https://github.com/vuejs/core"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm-dependencies group with 25 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [@clerk/clerk-js](https://github.com/clerk/javascript/tree/HEAD/packages/clerk-js) | `6.31.1` | `6.40.0` |\n| [@kenjiuno/msgreader](https://github.com/HiraokaHyperTools/msgreader) | `1.28.0` | `1.29.0` |\n| [cropperjs](https://github.com/fengyuanchen/cropperjs/tree/HEAD/packages/cropperjs) | `2.2.0` | `2.3.1` |\n| [i18next](https://github.com/i18next/i18next) | `26.4.2` | `26.5.6` |\n| [i18next-http-backend](https://github.com/i18next/i18next-http-backend) | `4.0.2` | `4.0.4` |\n| [jspdf-autotable](https://github.com/simonbengtsson/jsPDF-AutoTable) | `5.0.8` | `5.0.9` |\n| [lucide](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide) | `1.44.0` | `1.61.0` |\n| [markdown-it](https://github.com/markdown-it/markdown-it) | `15.0.2` | `15.0.3` |\n| [mermaid](https://github.com/mermaid-js/mermaid) | `12.0.0` | `12.2.0` |\n| [motion](https://github.com/motiondivision/motion) | `13.2.0` | `14.6.0` |\n| [pdfjs-dist](https://github.com/mozilla/pdf.js) | `6.3.289` | `6.4.299` |\n| [postal-mime](https://github.com/postalsys/postal-mime) | `3.0.0` | `4.1.4` |\n| [@testing-library/dom](https://github.com/testing-library/dom-testing-library) | `10.4.1` | `10.4.2` |\n| [@types/pdfkit](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/pdfkit) | `0.17.6` | `0.17.7` |\n| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `5.0.0` | `5.0.5` |\n| [@vitest/ui](https://github.com/vitest-dev/vitest/tree/HEAD/packages/ui) | `5.0.0` | `5.0.5` |\n| [eslint](https://github.com/eslint/eslint) | `10.10.0` | `10.13.0` |\n| [globals](https://github.com/sindresorhus/globals) | `17.12.0` | `17.13.0` |\n| [jsdom](https://github.com/jsdom/jsdom) | `30.0.1` | `30.1.3` |\n| [lint-staged](https://github.com/lint-staged/lint-staged) | `17.5.1` | `17.6.0` |\n| [prettier](https://github.com/prettier/prettier) | `3.9.6` | `3.9.10` |\n| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.70.0` | `8.72.0` |\n| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.3.0` | `8.3.5` |\n| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `5.0.0` | `5.0.5` |\n| [vue](https://github.com/vuejs/core) | `3.5.42` | `3.5.44` |\n\n\nUpdates `@clerk/clerk-js` from 6.31.1 to 6.40.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/clerk/javascript/releases\"\u003e@​clerk/clerk-js's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ccode\u003e@​clerk/clerk-js\u003c/code\u003e\u003ca href=\"https://github.com/6\"\u003e\u003ccode\u003e@​6\u003c/code\u003e\u003c/a\u003e.40.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eSupport passkeys as a second factor during sign-in and session reverification. (\u003ca href=\"https://redirect.github.com/clerk/javascript/pull/9127\"\u003e#9127\u003c/a\u003e) by \u003ca href=\"https://github.com/dmoerner\"\u003e\u003ccode\u003e@​dmoerner\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eWhen a user has a passkey, the prebuilt \u003ccode\u003e\u0026lt;SignIn/\u0026gt;\u003c/code\u003e and \u003ccode\u003e\u0026lt;UserVerification/\u0026gt;\u003c/code\u003e\ncomponents preselect it as the second factor, as they already do for the first\nfactor. Other methods stay available under \u0026quot;Use another method\u0026quot;.\u003c/p\u003e\n\u003cp\u003eTo use it, your instance must allow passkeys to satisfy the second factor. This\nis on by default for instances created after 2026-07-08, and can be turned on\nin the Dashboard for older ones. Web apps also need to opt in to the passkey\nsecond factor update in the Dashboard.\u003c/p\u003e\n\u003cp\u003eIf you build a custom flow, \u003ccode\u003esupportedSecondFactors\u003c/code\u003e can now include \u003ccode\u003epasskey\u003c/code\u003e.\nCall \u003ccode\u003esignIn.authenticateWithPasskey()\u003c/code\u003e to complete it.\u003c/p\u003e\n\u003cp\u003ePasskeys are no longer preselected, for either factor, where the SDK reports\nthat WebAuthn is unavailable (for example, Electron apps without passkey\nsupport enabled).\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies [\u003ca href=\"https://github.com/clerk/javascript/commit/e5cfdffc768f99a3be50a10ef247f5dbe8b3ed18\"\u003e\u003ccode\u003ee5cfdff\u003c/code\u003e\u003c/a\u003e]:\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​clerk/shared\u003c/code\u003e\u003ca href=\"https://github.com/4\"\u003e\u003ccode\u003e@​4\u003c/code\u003e\u003c/a\u003e.41.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ccode\u003e@​clerk/clerk-js\u003c/code\u003e\u003ca href=\"https://github.com/6\"\u003e\u003ccode\u003e@​6\u003c/code\u003e\u003c/a\u003e.39.1\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eFix \u003ccode\u003eoidcPrompt\u003c/code\u003e being ignored for OAuth strategies in \u003ccode\u003esignIn.sso()\u003c/code\u003e and \u003ccode\u003esignIn.authenticateWithRedirect()\u003c/code\u003e. The value is now sent when the sign-in is created, so a prompt such as \u003ccode\u003eselect_account\u003c/code\u003e reaches the OAuth provider. (\u003ca href=\"https://redirect.github.com/clerk/javascript/pull/10125\"\u003e#10125\u003c/a\u003e) by \u003ca href=\"https://github.com/wobsoriano\"\u003e\u003ccode\u003e@​wobsoriano\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ccode\u003esession.getToken()\u003c/code\u003e no longer skips the network request when \u003ccode\u003enavigator.onLine\u003c/code\u003e reports \u003ccode\u003efalse\u003c/code\u003e. Some environments, such as Chrome behind certain VPN clients, can report offline while the network works, which caused every token refresh to fail with \u003ccode\u003eclerk_offline\u003c/code\u003e. HTTP errors from the Frontend API, including ones with non-JSON bodies such as a proxy's HTML 502, are now surfaced as-is instead of being relabeled as \u003ccode\u003eClerkOfflineError\u003c/code\u003e. When a resource cache is configured (e.g. Expo), a 5xx response during startup now falls back to the cached resources, and non-JSON 5xx responses no longer clear the Chrome extension's stored development browser token. (\u003ca href=\"https://redirect.github.com/clerk/javascript/pull/10264\"\u003e#10264\u003c/a\u003e) by \u003ca href=\"https://github.com/paulogdm\"\u003e\u003ccode\u003e@​paulogdm\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/clerk/javascript/blob/main/packages/clerk-js/CHANGELOG.md\"\u003e@​clerk/clerk-js's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e6.40.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eSupport passkeys as a second factor during sign-in and session reverification. (\u003ca href=\"https://redirect.github.com/clerk/javascript/pull/9127\"\u003e#9127\u003c/a\u003e) by \u003ca href=\"https://github.com/dmoerner\"\u003e\u003ccode\u003e@​dmoerner\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eWhen a user has a passkey, the prebuilt \u003ccode\u003e\u0026lt;SignIn/\u0026gt;\u003c/code\u003e and \u003ccode\u003e\u0026lt;UserVerification/\u0026gt;\u003c/code\u003e\ncomponents preselect it as the second factor, as they already do for the first\nfactor. Other methods stay available under \u0026quot;Use another method\u0026quot;.\u003c/p\u003e\n\u003cp\u003eTo use it, your instance must allow passkeys to satisfy the second factor. This\nis on by default for instances created after 2026-07-08, and can be turned on\nin the Dashboard for older ones. Web apps also need to opt in to the passkey\nsecond factor update in the Dashboard.\u003c/p\u003e\n\u003cp\u003eIf you build a custom flow, \u003ccode\u003esupportedSecondFactors\u003c/code\u003e can now include \u003ccode\u003epasskey\u003c/code\u003e.\nCall \u003ccode\u003esignIn.authenticateWithPasskey()\u003c/code\u003e to complete it.\u003c/p\u003e\n\u003cp\u003ePasskeys are no longer preselected, for either factor, where the SDK reports\nthat WebAuthn is unavailable (for example, Electron apps without passkey\nsupport enabled).\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies [\u003ca href=\"https://github.com/clerk/javascript/commit/e5cfdffc768f99a3be50a10ef247f5dbe8b3ed18\"\u003e\u003ccode\u003ee5cfdff\u003c/code\u003e\u003c/a\u003e]:\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​clerk/shared\u003c/code\u003e\u003ca href=\"https://github.com/4\"\u003e\u003ccode\u003e@​4\u003c/code\u003e\u003c/a\u003e.41.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e6.39.1\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eFix \u003ccode\u003eoidcPrompt\u003c/code\u003e being ignored for OAuth strategies in \u003ccode\u003esignIn.sso()\u003c/code\u003e and \u003ccode\u003esignIn.authenticateWithRedirect()\u003c/code\u003e. The value is now sent when the sign-in is created, so a prompt such as \u003ccode\u003eselect_account\u003c/code\u003e reaches the OAuth provider. (\u003ca href=\"https://redirect.github.com/clerk/javascript/pull/10125\"\u003e#10125\u003c/a\u003e) by \u003ca href=\"https://github.com/wobsoriano\"\u003e\u003ccode\u003e@​wobsoriano\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ccode\u003esession.getToken()\u003c/code\u003e no longer skips the network request when \u003ccode\u003enavigator.onLine\u003c/code\u003e reports \u003ccode\u003efalse\u003c/code\u003e. Some environments, such as Chrome behind certain VPN clients, can report offline while the network works, which caused every token refresh to fail with \u003ccode\u003eclerk_offline\u003c/code\u003e. HTTP errors from the Frontend API, including ones with non-JSON bodies such as a proxy's HTML 502, are now surfaced as-is instead of being relabeled as \u003ccode\u003eClerkOfflineError\u003c/code\u003e. When a resource cache is configured (e.g. Expo), a 5xx response during startup now falls back to the cached resources, and non-JSON 5xx responses no longer clear the Chrome extension's stored development browser token. (\u003ca href=\"https://redirect.github.com/clerk/javascript/pull/10264\"\u003e#10264\u003c/a\u003e) by \u003ca href=\"https://github.com/paulogdm\"\u003e\u003ccode\u003e@​paulogdm\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e6.39.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd a role mapping step to the self-serve Directory Sync setup in \u003ccode\u003e\u0026lt;OrganizationProfile /\u0026gt;\u003c/code\u003e. Organization admins can now assign an organization role to each directory group their identity provider pushes, set which group wins when a member belongs to several, and turn role syncing on or off. Members in no mapped group keep the organization's default role. The step is read-only for members without the \u003ccode\u003eorg:sys_memberships:manage\u003c/code\u003e permission and while the organization's role set is being migrated. (\u003ca href=\"https://redirect.github.com/clerk/javascript/pull/10081\"\u003e#10081\u003c/a\u003e) by \u003ca href=\"https://github.com/kalafut\"\u003e\u003ccode\u003e@​kalafut\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eAdd an \u003ccode\u003eenterpriseConnectionsUrl\u003c/code\u003e option to \u003ccode\u003ehandleRedirectCallback()\u003c/code\u003e and \u003ccode\u003e\u0026lt;AuthenticateWithRedirectCallback /\u0026gt;\u003c/code\u003e. When the Clerk API asks an OAuth sign-up to choose between several enterprise connections for the same email domain, the callback navigates to this URL, which defaults to the \u003ccode\u003eenterprise-connections\u003c/code\u003e route of your sign-up page. (\u003ca href=\"https://redirect.github.com/clerk/javascript/pull/9947\"\u003e#9947\u003c/a\u003e) by \u003ca href=\"https://github.com/NicolasLopes7\"\u003e\u003ccode\u003e@​NicolasLopes7\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eUpdated dependencies [\u003ca href=\"https://github.com/clerk/javascript/commit/dcb03d3c6d4597b029e39ef3eebc2ec681bb48b1\"\u003e\u003ccode\u003edcb03d3\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/clerk/javascript/commit/31c1930f0d4933cf952133c784692cb5159a7659\"\u003e\u003ccode\u003e31c1930\u003c/code\u003e\u003c/a\u003e]:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​clerk/shared\u003c/code\u003e\u003ca href=\"https://github.com/4\"\u003e\u003ccode\u003e@​4\u003c/code\u003e\u003c/a\u003e.40.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e6.38.1\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/clerk/javascript/commit/ec91b9b1826328a327154d0f56ea928f57c277a7\"\u003e\u003ccode\u003eec91b9b\u003c/code\u003e\u003c/a\u003e ci(repo): Version packages (\u003ca href=\"https://github.com/clerk/javascript/tree/HEAD/packages/clerk-js/issues/10283\"\u003e#10283\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/clerk/javascript/commit/e5cfdffc768f99a3be50a10ef247f5dbe8b3ed18\"\u003e\u003ccode\u003ee5cfdff\u003c/code\u003e\u003c/a\u003e feat(clerk-js,ui,shared,localizations): Support passkey as a second factor (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/clerk/javascript/commit/0c7e63b489a355a75cf87784e8f5f6e1ad28233a\"\u003e\u003ccode\u003e0c7e63b\u003c/code\u003e\u003c/a\u003e ci(repo): Version packages (\u003ca href=\"https://github.com/clerk/javascript/tree/HEAD/packages/clerk-js/issues/10274\"\u003e#10274\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/clerk/javascript/commit/560ff507af494b43210fd2d9a7bd109c4eb6902c\"\u003e\u003ccode\u003e560ff50\u003c/code\u003e\u003c/a\u003e fix(clerk-js): don't trust navigator.onLine to skip token fetches (\u003ca href=\"https://github.com/clerk/javascript/tree/HEAD/packages/clerk-js/issues/10264\"\u003e#10264\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/clerk/javascript/commit/c0ba3bc728d76bd40f80c2c4c506cbfeb5d0807a\"\u003e\u003ccode\u003ec0ba3bc\u003c/code\u003e\u003c/a\u003e fix(clerk-js): send oidcPrompt when creating an OAuth sign-in (\u003ca href=\"https://github.com/clerk/javascript/tree/HEAD/packages/clerk-js/issues/10125\"\u003e#10125\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/clerk/javascript/commit/f9aa91e611a271b0c8e9ebc9cc3075f1d255172c\"\u003e\u003ccode\u003ef9aa91e\u003c/code\u003e\u003c/a\u003e fix(ui): sign in a returning user after a sign-up verification challenge (\u003ca href=\"https://github.com/clerk/javascript/tree/HEAD/packages/clerk-js/issues/10\"\u003e#10\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/clerk/javascript/commit/a0ea2707532f8b4e03df8eae322a936f4ab0d35b\"\u003e\u003ccode\u003ea0ea270\u003c/code\u003e\u003c/a\u003e ci(repo): Version packages (\u003ca href=\"https://github.com/clerk/javascript/tree/HEAD/packages/clerk-js/issues/10155\"\u003e#10155\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/clerk/javascript/commit/dcb03d3c6d4597b029e39ef3eebc2ec681bb48b1\"\u003e\u003ccode\u003edcb03d3\u003c/code\u003e\u003c/a\u003e feat(ui,clerk-js,shared): add a role mapping step to the Directory Sync wizar...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/clerk/javascript/commit/31c1930f0d4933cf952133c784692cb5159a7659\"\u003e\u003ccode\u003e31c1930\u003c/code\u003e\u003c/a\u003e feat(clerk-js): route OAuth callbacks to the enterprise connection chooser (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/clerk/javascript/commit/ff81d5a96232547a73c85a92c3d88822c1d86586\"\u003e\u003ccode\u003eff81d5a\u003c/code\u003e\u003c/a\u003e ci(repo): Version packages (\u003ca href=\"https://github.com/clerk/javascript/tree/HEAD/packages/clerk-js/issues/10074\"\u003e#10074\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/clerk/javascript/commits/@clerk/clerk-js@6.40.0/packages/clerk-js\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@kenjiuno/msgreader` from 1.28.0 to 1.29.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/HiraokaHyperTools/msgreader/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `cropperjs` from 2.2.0 to 2.3.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/fengyuanchen/cropperjs/releases\"\u003ecropperjs's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.3.1\u003c/h2\u003e\n\u003cp\u003eSee \u003ca href=\"https://github.com/fengyuanchen/cropperjs/blob/main/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev2.3.0\u003c/h2\u003e\n\u003cp\u003eSee \u003ca href=\"https://github.com/fengyuanchen/cropperjs/blob/main/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/fengyuanchen/cropperjs/blob/main/CHANGELOG.md\"\u003ecropperjs's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e2.3.1 (2026-10-16)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(cropper-image): fix \u003ccode\u003e\u0026lt;cropper-image\u0026gt;\u003c/code\u003e staying 0×0 when \u003ccode\u003esrc\u003c/code\u003e is set after connect (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/tree/HEAD/packages/cropperjs/issues/1306\"\u003e#1306\u003c/a\u003e) (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/6b53510\"\u003e6b53510\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/fengyuanchen/cropperjs/issues/1306\"\u003e#1306\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs(examples): update Cropper instantiation to use createCropper method (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/9c8828d\"\u003e9c8828d\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.3.0 (2026-10-07)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: release v2.3.0 (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/0344ca3\"\u003e0344ca3\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erefactor(cropper-image): implement fit checking logic in \u003ccode\u003e$exceedsFit\u003c/code\u003e method (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/6a72df9\"\u003e6a72df9\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erefactor(element-viewer): change properties order (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/30cf335\"\u003e30cf335\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(cropper-image): add \u003ccode\u003ezoomAroundCenter\u003c/code\u003e property (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/fea6cac\"\u003efea6cac\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(cropper-image): add the \u003ccode\u003emaxInset\u003c/code\u003e and \u003ccode\u003eminInset\u003c/code\u003e properties (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/58664a8\"\u003e58664a8\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(cropper-selection): add \u003ccode\u003eresizeAroundCenter\u003c/code\u003e property (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/01e5c1a\"\u003e01e5c1a\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/fengyuanchen/cropperjs/issues/1299\"\u003e#1299\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(cropper-selection): add \u003ccode\u003ezoomAroundCenter\u003c/code\u003e property (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/9d3c874\"\u003e9d3c874\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(cropper-selection): add the \u003ccode\u003emaxInset\u003c/code\u003e and \u003ccode\u003eminInset\u003c/code\u003e properties (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/51c984f\"\u003e51c984f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(cropper-selection): enhance resize handling with initial dimensions tracking (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/f8e5208\"\u003ef8e5208\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/fengyuanchen/cropperjs/issues/1298\"\u003e#1298\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(cropper-selection): enhance selection handling for non-resizable elements (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/6926e84\"\u003e6926e84\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/fengyuanchen/cropperjs/issues/1302\"\u003e#1302\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(cropper-selection): improve selection coverage and boundary handling (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/32112a8\"\u003e32112a8\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/fengyuanchen/cropperjs/issues/1285\"\u003e#1285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(cropper-selection/shade): add border radius support for selection and shade elements (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/75b1cfe\"\u003e75b1cfe\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/fengyuanchen/cropperjs/issues/1238\"\u003e#1238\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(cropperjs): add the \u003ccode\u003ecreateCropper\u003c/code\u003e function for creating a new \u003ccode\u003eCropper\u003c/code\u003e instance (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/0a3cf33\"\u003e0a3cf33\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePreserve explicit selection dimensions on initial coverage (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/tree/HEAD/packages/cropperjs/issues/1304\"\u003e#1304\u003c/a\u003e) (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/2aba2f4\"\u003e2aba2f4\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/fengyuanchen/cropperjs/issues/1304\"\u003e#1304\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: add gzip size badge (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/8a77f71\"\u003e8a77f71\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edocs: add module example (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/26cd677\"\u003e26cd677\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edocs: improve limit boundaries examples (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/31e624e\"\u003e31e624e\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/fengyuanchen/cropperjs/issues/1255\"\u003e#1255\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: standardize section headings in API documentation (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/7af9124\"\u003e7af9124\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edocs: update descriptions and links in API documentation for clarity (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/a6bbf08\"\u003ea6bbf08\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edocs: update examples to include module and script usage (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/fb4b379\"\u003efb4b379\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edocs(cropper-selection): add example for fixed selection while moving or scaling the image (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/31ef548\"\u003e31ef548\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edocs(examples): add example for adding a watermark (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/741892b\"\u003e741892b\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edocs(examples): add example for applying an image filter (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/6a47507\"\u003e6a47507\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edocs(examples): add example for cropping an image drawn on a canvas (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/b2ce7cc\"\u003eb2ce7cc\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edocs(examples): add example for multiple selections and viewers (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/36470ad\"\u003e36470ad\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edocs(examples): add example for redacting part of an image (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/f46bf1c\"\u003ef46bf1c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edocs(examples): add example for uploading a cropped image to a server (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/9ca08e6\"\u003e9ca08e6\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edocs(examples): enhance code highlighting in HTML examples (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/d42436b\"\u003ed42436b\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edocs(guide): update npm package link for cropperjs version badge (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/ae47ba0\"\u003eae47ba0\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix: handle image load event for complete images (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/91bbb5d\"\u003e91bbb5d\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/fengyuanchen/cropperjs/issues/1303\"\u003e#1303\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: enhance tests with keyboard interactions and lifecycle events (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/d19b3a6\"\u003ed19b3a6\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eci: add codecov action to CI workflow for test coverage reporting (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/1dabc83\"\u003e1dabc83\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eci(deploy): add --no-verify flag to git commit command (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/9ca2a3e\"\u003e9ca2a3e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/d671590f32aa655eba87069b61b1e22ff0a2fb63\"\u003e\u003ccode\u003ed671590\u003c/code\u003e\u003c/a\u003e build: release v2.3.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/0344ca3fbd78d1c1928f8d80e6014f4ab03a6942\"\u003e\u003ccode\u003e0344ca3\u003c/code\u003e\u003c/a\u003e build: release v2.3.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/0a3cf33310e2159293bb71acc3c918a8880c0ad2\"\u003e\u003ccode\u003e0a3cf33\u003c/code\u003e\u003c/a\u003e feat(cropperjs): add the \u003ccode\u003ecreateCropper\u003c/code\u003e function for creating a new `Cropper...\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/fengyuanchen/cropperjs/commits/v2.3.1/packages/cropperjs\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `i18next` from 26.4.2 to 26.5.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/i18next/i18next/releases\"\u003ei18next's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev26.5.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: \u003ccode\u003ecloneInstance({ forkResourceStore: true })\u003c/code\u003e now copies the resources at every level. It copied them only down to the namespace objects, so nested keys and arrays stayed shared with the original instance: \u003ccode\u003eaddResource()\u003c/code\u003e with a nested key (\u003ccode\u003efork.addResource('en', 'translation', 'greeting.hello', 'Hi')\u003c/code\u003e) or a deep \u003ccode\u003eaddResourceBundle()\u003c/code\u003e on the fork also changed the original instance and every other fork. Flat keys were already isolated. Forking a large store takes a bit longer: with 300k keys in nested groups, about 11 ms instead of 3 ms per fork. Clones without \u003ccode\u003eforkResourceStore\u003c/code\u003e still share the store as before. Thanks \u003ca href=\"https://github.com/nk-batman21\"\u003e\u003ccode\u003e@​nk-batman21\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/i18next/i18next/pull/2456\"\u003e#2456\u003c/a\u003e, follow-up to \u003ca href=\"https://redirect.github.com/i18next/i18next/issues/2270\"\u003e#2270\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev26.5.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: with the default \u003ccode\u003eskipOnVariables: true\u003c/code\u003e, a \u003ccode\u003e{{placeholder}}\u003c/code\u003e inside a value inserted with an unescaped \u003ccode\u003e{{- var}}\u003c/code\u003e now stays literal, as it already did for \u003ccode\u003e{{var}}\u003c/code\u003e. The escape pass ran after the unescaped values were written and scanned them again, so \u003ccode\u003et('{{- a}}', { a: '{{b}}', b: 'c' })\u003c/code\u003e returned \u003ccode\u003e'c'\u003c/code\u003e instead of \u003ccode\u003e'{{b}}'\u003c/code\u003e. With pre-built HTML that carries user text, like \u003ccode\u003et('You may contact {{name}} at {{- emailHTML}}.', { name, emailHTML })\u003c/code\u003e, that text could pull another variable of the same \u003ccode\u003et()\u003c/code\u003e call into the output. Results with \u003ccode\u003eskipOnVariables: false\u003c/code\u003e, and values without placeholders, are unchanged. Compatibility note: a \u003ccode\u003e{{- var}}\u003c/code\u003e value whose placeholders were meant to be filled from the same \u003ccode\u003et()\u003c/code\u003e call now keeps them literally; \u003ccode\u003eskipOnVariables: false\u003c/code\u003e restores the old behavior. Thanks \u003ca href=\"https://github.com/nk-batman21\"\u003e\u003ccode\u003e@​nk-batman21\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/i18next/i18next/pull/2455\"\u003e#2455\u003c/a\u003e, reported in \u003ca href=\"https://redirect.github.com/i18next/i18next/issues/1595#issuecomment-814611747\"\u003e#1595\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev26.5.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: with the default \u003ccode\u003eskipOnVariables: true\u003c/code\u003e, a \u003ccode\u003e{{placeholder}}\u003c/code\u003e inside an interpolated value now stays literal also when the same placeholder appears later in the translation. Each value was written with \u003ccode\u003eString.replace\u003c/code\u003e, which replaces the first copy of the placeholder text, and that could be the copy inside an earlier value: \u003ccode\u003et('{{name}} has {{count}} items', { name: '{{count}}', count: 5 })\u003c/code\u003e returned \u003ccode\u003e'5 has {{count}} items'\u003c/code\u003e instead of \u003ccode\u003e'{{count}} has 5 items'\u003c/code\u003e. The value is now written at the position of the matched placeholder. Results with \u003ccode\u003eskipOnVariables: false\u003c/code\u003e are unchanged. Thanks \u003ca href=\"https://github.com/nk-batman21\"\u003e\u003ccode\u003e@​nk-batman21\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/i18next/i18next/pull/2454\"\u003e#2454\u003c/a\u003e, reported in \u003ca href=\"https://redirect.github.com/i18next/i18next/issues/1595#issuecomment-814609503\"\u003e#1595\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003efix: with \u003ccode\u003euseRawValueToEscape: true\u003c/code\u003e, a non-string value in an unescaped \u003ccode\u003e{{- var}}\u003c/code\u003e placeholder or with \u003ccode\u003eescapeValue: false\u003c/code\u003e no longer throws \u003ccode\u003eval.replace is not a function\u003c/code\u003e; it is converted to a string like any other value.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev26.5.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(types): with the selector API, a plural key now requires \u003ccode\u003ecount\u003c/code\u003e also when the call passes an explicit \u003ccode\u003ens\u003c/code\u003e. \u003ccode\u003et(($) =\u0026gt; $.item)\u003c/code\u003e already failed without \u003ccode\u003ecount\u003c/code\u003e, but \u003ccode\u003et(($) =\u0026gt; $.item, { ns: 'items' })\u003c/code\u003e compiled, although at runtime it looks up \u003ccode\u003eitem\u003c/code\u003e instead of \u003ccode\u003eitem_one\u003c/code\u003e / \u003ccode\u003eitem_other\u003c/code\u003e and returns the key. It now fails the same way, also with \u003ccode\u003eordinal: true\u003c/code\u003e, \u003ccode\u003edefaultValue\u003c/code\u003e, an \u003ccode\u003ens\u003c/code\u003e array, a key prefix and \u003ccode\u003ei18n.t\u003c/code\u003e. Calls with \u003ccode\u003ecount\u003c/code\u003e, \u003ccode\u003econtext\u003c/code\u003e, \u003ccode\u003ereturnObjects: true\u003c/code\u003e and arrays of selectors, as well as return types, are unchanged. Thanks \u003ca href=\"https://github.com/nyarthan\"\u003e\u003ccode\u003e@​nyarthan\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/i18next/i18next/pull/2452\"\u003e#2452\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev26.5.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(types): on TypeScript 7, a \u003ccode\u003et()\u003c/code\u003e call with a missing, misspelled or wrongly typed option now reports that option again (\u003ccode\u003eProperty 'album' is missing\u003c/code\u003e, \u003ccode\u003eType 'string' is not assignable to type 'number'\u003c/code\u003e), as TypeScript 5 and 6 do. TypeScript 7 elaborated the error against the default-value signature instead and ended in \u003ccode\u003e'{ count: 3; albm: \u0026quot;Summer\u0026quot;; }' is not assignable to type 'string'\u003c/code\u003e: on a failed call TypeScript explains the last of the equally matching signatures, and TypeScript 7 sorts the 3-element \u003ccode\u003e[key, defaultValue, options?]\u003c/code\u003e last. It is now written as two signatures, \u003ccode\u003e[key, defaultValue]\u003c/code\u003e and \u003ccode\u003e[key, defaultValue, options]\u003c/code\u003e. This affects the default key checks with i18next \u003ccode\u003e{{name}}\u003c/code\u003e messages as well as \u003ccode\u003eparseInterpolation: 'icu'\u003c/code\u003e and \u003ccode\u003e'mf2'\u003c/code\u003e. Which calls compile, their return types and the error positions are unchanged on TypeScript 5.9, 6 and 7.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev26.5.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eperf(types): type-checking \u003ccode\u003et()\u003c/code\u003e calls against a large namespace is no longer quadratic in the number of keys. TypeScript does not cache \u003ccode\u003ekeyof\u003c/code\u003e of an object type, and the types rebuilt the union of all keys of a namespace once per key while building the key union, and again in every \u003ccode\u003et()\u003c/code\u003e call to look up the return type. Both now use a cached key union, and a literal key is looked up directly instead of being intersected with every key. With 5,000 keys in one namespace and one call per key, the check time went from 14.8s to 1.1s (TypeScript 6); with 1,000 keys from 0.75s to 0.27s. Keys, return types and errors are unchanged.\u003c/li\u003e\n\u003cli\u003eperf(types): the selector API (\u003ccode\u003eenableSelector: true\u003c/code\u003e / \u003ccode\u003e'strict'\u003c/code\u003e) with \u003ccode\u003econtext\u003c/code\u003e is no longer quadratic in the size of an object. To decide which keys a context keeps, the types scanned all keys of the object once for every key, also when TypeScript checks the selector with \u003ccode\u003econtext\u003c/code\u003e widened to \u003ccode\u003estring\u003c/code\u003e. With 1,000 keys plus one context variant each, a namespace took 18.7s and failed with \u0026quot;Type instantiation is excessively deep and possibly infinite\u0026quot; (TS2589); 2,500 and more ran out of memory. The context variants of an object are now collected once, in one pass over its keys: 1,000 keys check in 0.69s, 5,000 in 3.1s. Long keys (whole sentences with \u003ccode\u003ekeySeparator: false\u003c/code\u003e) work as before. Selected values and errors are unchanged.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev26.5.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat(types): \u003ccode\u003eparseInterpolation: 'icu'\u003c/code\u003e and \u003ccode\u003eparseInterpolation: 'mf2'\u003c/code\u003e type \u003ccode\u003et()\u003c/code\u003e options from the message's ICU MessageFormat arguments (i18next-icu) or MessageFormat 2 variables (i18next-mf2), so ICU and MF2 users no longer need \u003ccode\u003eparseInterpolation: false\u003c/code\u003e and lose argument checking. Missing, misspelled and wrongly typed arguments fail, and so does leaving out the options for a message with arguments (\u003ccode\u003et('greeting')\u003c/code\u003e); that error names the missing arguments. Opt-in, default \u003ccode\u003etrue\u003c/code\u003e is unchanged.\n\u003cul\u003e\n\u003cli\u003eICU: \u003ccode\u003e{name}\u003c/code\u003e takes \u003ccode\u003estring | number\u003c/code\u003e, \u003ccode\u003e{n, number}\u003c/code\u003e, \u003ccode\u003eplural\u003c/code\u003e and \u003ccode\u003eselectordinal\u003c/code\u003e take \u003ccode\u003enumber\u003c/code\u003e, \u003ccode\u003e{d, date}\u003c/code\u003e and \u003ccode\u003e{t, time}\u003c/code\u003e take \u003ccode\u003eDate\u003c/code\u003e, \u003ccode\u003eselect\u003c/code\u003e takes its case keys or any string (for \u003ccode\u003eother\u003c/code\u003e), and arguments nested in cases are required too. \u003ccode\u003e#\u003c/code\u003e and tags are not arguments, apostrophe quoting is read like intl-messageformat does.\u003c/li\u003e\n\u003cli\u003eMF2: \u003ccode\u003e{$name}\u003c/code\u003e takes \u003ccode\u003estring | number\u003c/code\u003e, a variable annotated with \u003ccode\u003e:number\u003c/code\u003e, \u003ccode\u003e:integer\u003c/code\u003e, \u003ccode\u003e:currency\u003c/code\u003e, \u003ccode\u003e:percent\u003c/code\u003e or \u003ccode\u003e:unit\u003c/code\u003e (inline or through \u003ccode\u003e.input\u003c/code\u003e / \u003ccode\u003e.local\u003c/code\u003e) takes \u003ccode\u003enumber\u003c/code\u003e, \u003ccode\u003e:datetime\u003c/code\u003e, \u003ccode\u003e:date\u003c/code\u003e and \u003ccode\u003e:time\u003c/code\u003e take \u003ccode\u003eDate\u003c/code\u003e, \u003ccode\u003e:string\u003c/code\u003e takes \u003ccode\u003estring\u003c/code\u003e, option and markup variables (\u003ccode\u003eminimumFractionDigits=$digits\u003c/code\u003e, \u003ccode\u003e{#link href=$url}\u003c/code\u003e) are required too, \u003ccode\u003e.local\u003c/code\u003e variables are not arguments, and \u003ccode\u003e|quoted literals|\u003c/code\u003e and \u003ccode\u003e\\{\u003c/code\u003e escapes are skipped.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003einterpolationFormatTypeMap\u003c/code\u003e overrides a type by ICU format or MF2 function name, e.g. \u003ccode\u003edate: Date | number\u003c/code\u003e or a custom \u003ccode\u003euppercase: string\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eApplies to \u003ccode\u003et()\u003c/code\u003e, \u003ccode\u003egetFixedT()\u003c/code\u003e, \u003ccode\u003ei18n.t\u003c/code\u003e, key prefixes, namespaces, the selector API and react-i18next's \u003ccode\u003eTrans\u003c/code\u003e \u003ccode\u003evalues\u003c/code\u003e. Messages need literal types, as the resources file from i18next-cli's \u003ccode\u003etypes\u003c/code\u003e command has them.\u003c/li\u003e\n\u003cli\u003eType-check cost with 1,000 messages and one call each: 1.35s instead of 0.86s with \u003ccode\u003efalse\u003c/code\u003e (TypeScript 6), 0.5s instead of 0.26s with TypeScript 7. Messages that no call uses cost nothing.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003efix(types): with the default (non-strict) key checks, an options object with a missing or misspelled interpolation variable now reports the missing variable (\u003ccode\u003eProperty 'name' is missing\u003c/code\u003e) instead of \u003ccode\u003e'{ nmae: string }' is not assignable to type 'string'\u003c/code\u003e from the default-value overload.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev26.4.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eperf: \u003ccode\u003ecloneInstance()\u003c/code\u003e no longer inherits \u003ccode\u003epreload\u003c/code\u003e. \u003ccode\u003eloadResources()\u003c/code\u003e adds every \u003ccode\u003epreload\u003c/code\u003e language to each load, and clones copied \u003ccode\u003epreload\u003c/code\u003e from the parent, so a clone's \u003ccode\u003einit()\u003c/code\u003e and every \u003ccode\u003echangeLanguage()\u003c/code\u003e walked all preloaded languages × all namespaces through \u003ccode\u003equeueLoad()\u003c/code\u003e / \u003ccode\u003ehasResourceBundle()\u003c/code\u003e, although the parent had already loaded them into the shared store. With i18next-http-middleware (one clone + \u003ccode\u003echangeLanguage()\u003c/code\u003e per request), 25 preloaded languages and 20 namespaces, that was most of the per-request CPU: the reproduction from the issue went from ~90 µs to ~10 µs per request, the same as with a single language. A clone now only loads what it uses itself: its \u003ccode\u003echangeLanguage()\u003c/code\u003e no longer waits for parent preload languages that are still loading (the parent's own \u003ccode\u003einit()\u003c/code\u003e still does), and \u003ccode\u003eclone.loadNamespaces()\u003c/code\u003e loads the new namespace for the clone's language and fallbacks instead of every preloaded language. \u003ccode\u003eclone.loadLanguages()\u003c/code\u003e works as before, the parent instance is unchanged, and passing \u003ccode\u003epreload\u003c/code\u003e to \u003ccode\u003ecloneInstance()\u003c/code\u003e keeps the old behavior. Thanks \u003ca href=\"https://github.com/theMostCuriousHomunculus\"\u003e\u003ccode\u003e@​theMostCuriousHomunculus\u003c/code\u003e\u003c/a\u003e for the detailed report (\u003ca href=\"https://redirect.github.com/i18next/i18next/issues/2451\"\u003e#2451\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev26.4.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: a fallback language whose formatted code is already in the hierarchy is no longer added a second time. \u003ccode\u003etoResolveHierarchy()\u003c/code\u003e checked the raw \u003ccode\u003efallbackLng\u003c/code\u003e value against the list, but the list holds formatted codes, so any fallback written differently from its formatted form slipped through: \u003ccode\u003elng: 'de-CH'\u003c/code\u003e with \u003ccode\u003efallbackLng: 'de-ch'\u003c/code\u003e gave \u003ccode\u003elanguages\u003c/code\u003e \u003ccode\u003e['de-CH', 'de', 'de-CH']\u003c/code\u003e, and the same happened with \u003ccode\u003efallbackLng: 'EN'\u003c/code\u003e + \u003ccode\u003ecleanCode\u003c/code\u003e, \u003ccode\u003elowerCaseLng\u003c/code\u003e, and Intl aliases (\u003ccode\u003eiw-IL\u003c/code\u003e → \u003ccode\u003ehe-IL\u003c/code\u003e). Missing keys were looked up in the same language twice. Only exact duplicates are removed; the order is unchanged. Thanks \u003ca href=\"https://github.com/lprnmns\"\u003e\u003ccode\u003e@​lprnmns\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/i18next/i18next/pull/2450\"\u003e#2450\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev26.4.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: \u003ccode\u003ehasLoadedNamespace(ns, { lng })\u003c/code\u003e no longer stays \u003ccode\u003efalse\u003c/code\u003e forever when the passed in \u003ccode\u003elng\u003c/code\u003e is loaded under another code, or not at all. It checked the load state of the raw \u003ccode\u003elng\u003c/code\u003e, but \u003ccode\u003eloadLanguages()\u003c/code\u003e stores a language under its resolved code (\u003ccode\u003ede-ch\u003c/code\u003e → \u003ccode\u003ede-CH\u003c/code\u003e, \u003ccode\u003ede-CH\u003c/code\u003e → \u003ccode\u003ede\u003c/code\u003e with \u003ccode\u003eload: 'languageOnly'\u003c/code\u003e) and skips a \u003ccode\u003elng\u003c/code\u003e outside \u003ccode\u003esupportedLngs\u003c/code\u003e entirely (only the fallback gets loaded), so that state never got set. react-i18next's \u003ccode\u003euseTranslation(ns, { lng })\u003c/code\u003e then never became ready: with \u003ccode\u003euseSuspense\u003c/code\u003e it kept throwing an already resolved promise and React retried forever (100% CPU, SSR never finished), without it the load effect re-rendered in a loop. It now checks the code the language is actually loaded under, and for a \u003ccode\u003elng\u003c/code\u003e outside \u003ccode\u003esupportedLngs\u003c/code\u003e only waits for the fallback, which is also what \u003ccode\u003et()\u003c/code\u003e resolves to. Calls without \u003ccode\u003elng\u003c/code\u003e and the \u003ccode\u003eprecheck\u003c/code\u003e (react-i18next's \u003ccode\u003ebindI18n: 'languageChanging'\u003c/code\u003e) are unchanged (\u003ca href=\"https://redirect.github.com/i18next/react-i18next/issues/1934\"\u003ereact-i18next#1934\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev26.4.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(security): the nesting regexp no longer backtracks exponentially (ReDoS) on an unclosed \u003ccode\u003e$t(\u003c/code\u003e. Its repeated group had overlapping alternatives (\u003ccode\u003e[^()\u0026quot;']+\u003c/code\u003e inside \u003ccode\u003e(?:...)*?\u003c/code\u003e, and inside parentheses \u003ccode\u003e[^()]\u003c/code\u003e also matched quotes), so a string containing \u003ccode\u003e$t(\u003c/code\u003e without a closing \u003ccode\u003e)\u003c/code\u003e made the engine try every way to split the text: about 2x the runtime per extra character, and a ~25 character value hung \u003ccode\u003et()\u003c/code\u003e for minutes. With the default config this was reachable through any interpolated value (\u003ccode\u003et('greet', { name: '$t(aaaaaaaaaaaaaaaaaaaaaaaa' })\u003c/code\u003e): escaping does not touch \u003ccode\u003e$\u003c/code\u003e, \u003ccode\u003et\u003c/code\u003e or \u003ccode\u003e(\u003c/code\u003e, and the \u003ccode\u003eskipOnVariables\u003c/code\u003e check runs the regexp on the interpolated result, so \u003ccode\u003enest: false\u003c/code\u003e did not help either. Every alternative now starts with a different character (plain char, \u003ccode\u003e\u0026quot;\u003c/code\u003e, \u003ccode\u003e'\u003c/code\u003e or \u003ccode\u003e(\u003c/code\u003e), so there is only one way to match and the cost is linear. Quoted strings and one level of parentheses in nesting options keep working (\u003ca href=\"https://redirect.github.com/i18next/i18next/issues/2336\"\u003e#2336\u003c/a\u003e). The only difference: a lone \u003ccode\u003e\u0026quot;\u003c/code\u003e or \u003ccode\u003e'\u003c/code\u003e inside unquoted parentheses within \u003ccode\u003e$t(...)\u003c/code\u003e is no longer matched. Affects 25.3.3 to 26.4.3. Thanks to Anisetti Chaitanya Eshwar Prasad for the responsible disclosure.\u003c/li\u003e\n\u003cli\u003efix(security): \u003ccode\u003enest()\u003c/code\u003e now resolves \u003ccode\u003e$t(...)\u003c/code\u003e in a single pass and no longer nests text that came out of a resolved value. Every nested lookup reset the shared nesting regexp, so the loop started over from the beginning of the string after each match. That had two effects. First, a \u003ccode\u003e$t(...)\u003c/code\u003e inside a variable that the nested lookup deliberately kept literal (default \u003ccode\u003eskipOnVariables: true\u003c/code\u003e) was resolved anyway by the outer loop: with \u003ccode\u003eouter: 'A $t(inner) B'\u003c/code\u003e and \u003ccode\u003einner: 'Hi {{name}}'\u003c/code\u003e, \u003ccode\u003et('outer', { name: '$t(secret)' })\u003c/code\u003e rendered the \u003ccode\u003esecret\u003c/code\u003e translation. It now stays \u003ccode\u003eA Hi $t(secret) B\u003c/code\u003e, the same as without the outer nesting; with \u003ccode\u003eskipOnVariables: false\u003c/code\u003e it is still resolved. Second, the cost was quadratic when an unclosed \u003ccode\u003e$t(\u003c/code\u003e preceded many nestings, which matters when an app passes untrusted input as the key itself (\u003ccode\u003et(userInput)\u003c/code\u003e): 20,000 nestings took ~1.4 s, now ~25 ms. The resolved value is now sliced into the result instead of going through \u003ccode\u003eString.replace\u003c/code\u003e, so \u003ccode\u003e$\u0026amp;\u003c/code\u003e, \u003ccode\u003e$`\u003c/code\u003e, \u003ccode\u003e$'\u003c/code\u003e and \u003ccode\u003e$$\u003c/code\u003e stay literal as before (26.4.2).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev26.4.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eperf: \u003ccode\u003eResourceStore.hasLanguageSomeTranslations()\u003c/code\u003e no longer enumerates every key of a large bundle on each call. It ran \u003ccode\u003eObject.keys()\u003c/code\u003e on the whole bundle just to learn whether it had at least one key, and \u003ccode\u003einit()\u003c/code\u003e / \u003ccode\u003echangeLanguage()\u003c/code\u003e reach it three times per instance (once while picking the language, twice via \u003ccode\u003esetResolvedLanguage()\u003c/code\u003e). With large flat bundles and one i18next instance per SSR request reusing the same resources, that showed up as measurable CPU work before any \u003ccode\u003et()\u003c/code\u003e call. Bundle objects already found non-empty are now remembered in a \u003ccode\u003eWeakSet\u003c/code\u003e shared across instances, so later checks are O(1): 2,000 inits with a 6,800-key bundle went from ~750 ms to ~20 ms, the same as a one-key bundle. Only the non-empty result is cached. No API removes single keys from a bundle, so a non-empty bundle stays non-empty, and empty bundles are re-checked every time, so keys added later (backend loads, \u003ccode\u003eaddResource\u003c/code\u003e, \u003ccode\u003eaddResourceBundle\u003c/code\u003e, direct or silent changes) count right away. The only edge case: a bundle emptied by hand with \u003ccode\u003edelete\u003c/code\u003e on every key while it is still in the store keeps counting as having translations; use \u003ccode\u003eremoveResourceBundle()\u003c/code\u003e for that. Thanks \u003ca href=\"https://github.com/dmchoi77\"\u003e\u003ccode\u003e@​dmchoi77\u003c/code\u003e\u003c/a\u003e for the detailed report (\u003ca href=\"https://redirect.github.com/i18next/i18next/issues/2449\"\u003e#2449\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/i18next/i18next/blob/master/CHANGELOG.md\"\u003ei18next's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e26.5.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: \u003ccode\u003ecloneInstance({ forkResourceStore: true })\u003c/code\u003e now copies the resources at every level. It copied them only down to the namespace objects, so nested keys and arrays stayed shared with the original instance: \u003ccode\u003eaddResource()\u003c/code\u003e with a nested key (\u003ccode\u003efork.addResource('en', 'translation', 'greeting.hello', 'Hi')\u003c/code\u003e) or a deep \u003ccode\u003eaddResourceBundle()\u003c/code\u003e on the fork also changed the original instance and every other fork. Flat keys were already isolated. Forking a large store takes a bit longer: with 300k keys in nested groups, about 11 ms instead of 3 ms per fork. Clones without \u003ccode\u003eforkResourceStore\u003c/code\u003e still share the store as before. Thanks \u003ca href=\"https://github.com/nk-batman21\"\u003e\u003ccode\u003e@​nk-batman21\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/i18next/i18next/pull/2456\"\u003e#2456\u003c/a\u003e, follow-up to \u003ca href=\"https://redirect.github.com/i18next/i18next/issues/2270\"\u003e#2270\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e26.5.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: with the default \u003ccode\u003eskipOnVariables: true\u003c/code\u003e, a \u003ccode\u003e{{placeholder}}\u003c/code\u003e inside a value inserted with an unescaped \u003ccode\u003e{{- var}}\u003c/code\u003e now stays literal, as it already did for \u003ccode\u003e{{var}}\u003c/code\u003e. The escape pass ran after the unescaped values were written and scanned them again, so \u003ccode\u003et('{{- a}}', { a: '{{b}}', b: 'c' })\u003c/code\u003e returned \u003ccode\u003e'c'\u003c/code\u003e instead of \u003ccode\u003e'{{b}}'\u003c/code\u003e. With pre-built HTML that carries user text, like \u003ccode\u003et('You may contact {{name}} at {{- emailHTML}}.', { name, emailHTML })\u003c/code\u003e, that text could pull another variable of the same \u003ccode\u003et()\u003c/code\u003e call into the output. Results with \u003ccode\u003eskipOnVariables: false\u003c/code\u003e, and values without placeholders, are unchanged. Compatibility note: a \u003ccode\u003e{{- var}}\u003c/code\u003e value whose placeholders were meant to be filled from the same \u003ccode\u003et()\u003c/code\u003e call now keeps them literally; \u003ccode\u003eskipOnVariables: false\u003c/code\u003e restores the old behavior. Thanks \u003ca href=\"https://github.com/nk-batman21\"\u003e\u003ccode\u003e@​nk-batman21\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/i18next/i18next/pull/2455\"\u003e#2455\u003c/a\u003e, reported in \u003ca href=\"https://redirect.github.com/i18next/i18next/issues/1595#issuecomment-814611747\"\u003e#1595\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e26.5.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: with the default \u003ccode\u003eskipOnVariables: true\u003c/code\u003e, a \u003ccode\u003e{{placeholder}}\u003c/code\u003e inside an interpolated value now stays literal also when the same placeholder appears later in the translation. Each value was written with \u003ccode\u003eString.replace\u003c/code\u003e, which replaces the first copy of the placeholder text, and that could be the copy inside an earlier value: \u003ccode\u003et('{{name}} has {{count}} items', { name: '{{count}}', count: 5 })\u003c/code\u003e returned \u003ccode\u003e'5 has {{count}} items'\u003c/code\u003e instead of \u003ccode\u003e'{{count}} has 5 items'\u003c/code\u003e. The value is now written at the position of the matched placeholder. Results with \u003ccode\u003eskipOnVariables: false\u003c/code\u003e are unchanged. Thanks \u003ca href=\"https://github.com/nk-batman21\"\u003e\u003ccode\u003e@​nk-batman21\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/i18next/i18next/pull/2454\"\u003e#2454\u003c/a\u003e, reported in \u003ca href=\"https://redirect.github.com/i18next/i18next/issues/1595#issuecomment-814609503\"\u003e#1595\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003efix: with \u003ccode\u003euseRawValueToEscape: true\u003c/code\u003e, a non-string value in an unescaped \u003ccode\u003e{{- var}}\u003c/code\u003e placeholder or with \u003ccode\u003eescapeValue: false\u003c/code\u003e no longer throws \u003ccode\u003eval.replace is not a function\u003c/code\u003e; it is converted to a string like any other value.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e26.5.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(types): with the selector API, a plural key now requires \u003ccode\u003ecount\u003c/code\u003e also when the call passes an explicit \u003ccode\u003ens\u003c/code\u003e. \u003ccode\u003et(($) =\u0026gt; $.item)\u003c/code\u003e already failed without \u003ccode\u003ecount\u003c/code\u003e, but \u003ccode\u003et(($) =\u0026gt; $.item, { ns: 'items' })\u003c/code\u003e compiled, although at runtime it looks up \u003ccode\u003eitem\u003c/code\u003e instead of \u003ccode\u003eitem_one\u003c/code\u003e / \u003ccode\u003eitem_other\u003c/code\u003e and returns the key. It now fails the same way, also with \u003ccode\u003eordinal: true\u003c/code\u003e, \u003ccode\u003edefaultValue\u003c/code\u003e, an \u003ccode\u003ens\u003c/code\u003e array, a key prefix and \u003ccode\u003ei18n.t\u003c/code\u003e. Calls with \u003ccode\u003ecount\u003c/code\u003e, \u003ccode\u003econtext\u003c/code\u003e, \u003ccode\u003ereturnObjects: true\u003c/code\u003e and arrays of selectors, as well as return types, are unchanged. Thanks \u003ca href=\"https://github.com/nyarthan\"\u003e\u003ccode\u003e@​nyarthan\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/i18next/i18next/pull/2452\"\u003e#2452\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e26.5.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(types): on TypeScript 7, a \u003ccode\u003et()\u003c/code\u003e call with a missing, misspelled or wrongly typed option now reports that option again (\u003ccode\u003eProperty 'album' is missing\u003c/code\u003e, \u003ccode\u003eType 'string' is not assignable to type 'number'\u003c/code\u003e), as TypeScript 5 and 6 do. TypeScript 7 elaborated the error against the default-value signature instead and ended in \u003ccode\u003e'{ count: 3; albm: \u0026quot;Summer\u0026quot;; }' is not assignable to type 'string'\u003c/code\u003e: on a failed call TypeScript explains the last of the equally matching signatures, and TypeScript 7 sorts the 3-element \u003ccode\u003e[key, defaultValue, options?]\u003c/code\u003e last. It is now written as two signatures, \u003ccode\u003e[key, defaultValue]\u003c/code\u003e and \u003ccode\u003e[key, defaultValue, options]\u003c/code\u003e. This affects the default key checks with i18next \u003ccode\u003e{{name}}\u003c/code\u003e messages as well as \u003ccode\u003eparseInterpolation: 'icu'\u003c/code\u003e and \u003ccode\u003e'mf2'\u003c/code\u003e. Which calls compile, their return types and the error positions are unchanged on TypeScript 5.9, 6 and 7.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e26.5.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eperf(types): type-checking \u003ccode\u003et()\u003c/code\u003e calls against a large namespace is no longer quadratic in the number of keys. TypeScript does not cache \u003ccode\u003ekeyof\u003c/code\u003e of an object type, and the types rebuilt the union of all keys of a namespace once per key while building the key union, and again in every \u003ccode\u003et()\u003c/code\u003e call to look up the return type. Both now use a cached key union, and a literal key is looked up directly instead of being intersected with every key. With 5,000 keys in one namespace and one call per key, the check time went from 14.8s to 1.1s (TypeScript 6); with 1,000 keys from 0.75s to 0.27s. Keys, return types and errors are unchanged.\u003c/li\u003e\n\u003cli\u003eperf(types): the selector API (\u003ccode\u003eenableSelector: true\u003c/code\u003e / \u003ccode\u003e'strict'\u003c/code\u003e) with \u003ccode\u003econtext\u003c/code\u003e is no longer quadratic in the size of an object. To decide which keys a context keeps, the types scanned all keys of the object once for every key, also when TypeScript checks the selector with \u003ccode\u003econtext\u003c/code\u003e widened to \u003ccode\u003estring\u003c/code\u003e. With 1,000 keys plus one context variant each, a namespace took 18.7s and failed with \u0026quot;Type instantiation is excessively deep and possibly infinite\u0026quot; (TS2589); 2,500 and more ran out of memory. The context variants of an object are now collected once, in one pass over its keys: 1,000 keys check in 0.69s, 5,000 in 3.1s. Long keys (whole sentences with \u003ccode\u003ekeySeparator: false\u003c/code\u003e) work as before. Selected values and errors are unchanged.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e26.5.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat(types): \u003ccode\u003eparseInterpolation: 'icu'\u003c/code\u003e and \u003ccode\u003eparseInterpolation: 'mf2'\u003c/code\u003e type \u003ccode\u003et()\u003c/code\u003e options from the message's ICU MessageFormat arguments (i18next-icu) or MessageFormat 2 variables (i18next-mf2), so ICU and MF2 users no longer need \u003ccode\u003eparseInterpolation: false\u003c/code\u003e and lose argument checking. Missing, misspelled and wrongly typed arguments fail, and so does leaving out the options for a message with arguments (\u003ccode\u003et('greeting')\u003c/code\u003e); that error names the missing arguments. Opt-in, default \u003ccode\u003etrue\u003c/code\u003e is unchanged.\n\u003cul\u003e\n\u003cli\u003eICU: \u003ccode\u003e{name}\u003c/code\u003e takes \u003ccode\u003estring | number\u003c/code\u003e, \u003ccode\u003e{n, number}\u003c/code\u003e, \u003ccode\u003eplural\u003c/code\u003e and \u003ccode\u003eselectordinal\u003c/code\u003e take \u003ccode\u003enumber\u003c/code\u003e, \u003ccode\u003e{d, date}\u003c/code\u003e and \u003ccode\u003e{t, time}\u003c/code\u003e take \u003ccode\u003eDate\u003c/code\u003e, \u003ccode\u003eselect\u003c/code\u003e takes its case keys or any string (for \u003ccode\u003eother\u003c/code\u003e), and arguments nested in cases are required too. \u003ccode\u003e#\u003c/code\u003e and tags are not arguments, apostrophe quoting is read like intl-messageformat does.\u003c/li\u003e\n\u003cli\u003eMF2: \u003ccode\u003e{$name}\u003c/code\u003e takes \u003ccode\u003estring | number\u003c/code\u003e, a variable annotated with \u003ccode\u003e:number\u003c/code\u003e, \u003ccode\u003e:integer\u003c/code\u003e, \u003ccode\u003e:currency\u003c/code\u003e, \u003ccode\u003e:percent\u003c/code\u003e or \u003ccode\u003e:unit\u003c/code\u003e (inline or through \u003ccode\u003e.input\u003c/code\u003e / \u003ccode\u003e.local\u003c/code\u003e) takes \u003ccode\u003enumber\u003c/code\u003e, \u003ccode\u003e:datetime\u003c/code\u003e, \u003ccode\u003e:date\u003c/code\u003e and \u003ccode\u003e:time\u003c/code\u003e take \u003ccode\u003eDate\u003c/code\u003e, \u003ccode\u003e:string\u003c/code\u003e takes \u003ccode\u003estring\u003c/code\u003e, option and markup variables (\u003ccode\u003eminimumFractionDigits=$digits\u003c/code\u003e, \u003ccode\u003e{#link href=$url}\u003c/code\u003e) are required too, \u003ccode\u003e.local\u003c/code\u003e variables are not arguments, and \u003ccode\u003e|quoted literals|\u003c/code\u003e and \u003ccode\u003e\\{\u003c/code\u003e escapes are skipped.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003einterpolationFormatTypeMap\u003c/code\u003e overrides a type by ICU format or MF2 function name, e.g. \u003ccode\u003edate: Date | number\u003c/code\u003e or a custom \u003ccode\u003euppercase: string\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eApplies to \u003ccode\u003et()\u003c/code\u003e, \u003ccode\u003egetFixedT()\u003c/code\u003e, \u003ccode\u003ei18n.t\u003c/code\u003e, key prefixes, namespaces, the selector API and react-i18next's \u003ccode\u003eTrans\u003c/code\u003e \u003ccode\u003evalues\u003c/code\u003e. Messages need literal types, as the resources file from i18next-cli's \u003ccode\u003etypes\u003c/code\u003e command has them.\u003c/li\u003e\n\u003cli\u003eType-check cost with 1,000 messages and one call each: 1.35s instead of 0.86s with \u003ccode\u003efalse\u003c/code\u003e (TypeScript 6), 0.5s instead of 0.26s with TypeScript 7. Messages that no call uses cost nothing.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003efix(types): with the default (non-strict) key checks, an options object with a missing or misspelled interpolation variable now reports the missing variable (\u003ccode\u003eProperty 'name' is missing\u003c/code\u003e) instead of \u003ccode\u003e'{ nmae: string }' is not assignable to type 'string'\u003c/code\u003e from the default-value overload.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e26.4.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eperf: \u003ccode\u003ecloneInstance()\u003c/code\u003e no longer inherits \u003ccode\u003epreload\u003c/code\u003e. \u003ccode\u003eloadResources()\u003c/code\u003e adds every \u003ccode\u003epreload\u003c/code\u003e language to each load, and clones copied \u003ccode\u003epreload\u003c/code\u003e from the parent, so a clone's \u003ccode\u003einit()\u003c/code\u003e and every \u003ccode\u003echangeLanguage()\u003c/code\u003e walked all preloaded languages × all namespaces through \u003ccode\u003equeueLoad()\u003c/code\u003e / \u003ccode\u003ehasResourceBundle()\u003c/code\u003e, although the parent had already loaded them into the shared store. With i18next-http-middleware (one clone + \u003ccode\u003echangeLanguage()\u003c/code\u003e per request), 25 preloaded languages and 20 namespaces, that was most of the per-request CPU: the reproduction from the issue went from ~90 µs to ~10 µs per request, the same as with a single language. A clone now only loads what it uses itself: its \u003ccode\u003echangeLanguage()\u003c/code\u003e no longer waits for parent preload languages that are still loading (the parent's own \u003ccode\u003einit()\u003c/code\u003e still does), and \u003ccode\u003eclone.loadNamespaces()\u003c/code\u003e loads the new namespace for the clone's language and fallbacks instead of every preloaded language. \u003ccode\u003eclone.loadLanguages()\u003c/code\u003e works as before, the parent instance is unchanged, and passing \u003ccode\u003epreload\u003c/code\u003e to \u003ccode\u003ecloneInstance()\u003c/code\u003e keeps the old behavior. Thanks \u003ca href=\"https://github.com/theMostCuriousHomunculus\"\u003e\u003ccode\u003e@​theMostCuriousHomunculus\u003c/code\u003e\u003c/a\u003e for the detailed report (\u003ca href=\"https://redirect.github.com/i18next/i18next/issues/2451\"\u003e#2451\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e26.4.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: a fallback language whose formatted code is already in the hierarchy is no longer added a second time. \u003ccode\u003etoResolveHierarchy()\u003c/code\u003e checked the raw \u003ccode\u003efallbackLng\u003c/code\u003e value against the list, but the list holds formatted codes, so any fallback written differently from its formatted form slipped through: \u003ccode\u003elng: 'de-CH'\u003c/code\u003e with \u003ccode\u003efallbackLng: 'de-ch'\u003c/code\u003e gave \u003ccode\u003elanguages\u003c/code\u003e \u003ccode\u003e['de-CH', 'de', 'de-CH']\u003c/code\u003e, and the same happened with \u003ccode\u003efallbackLng: 'EN'\u003c/code\u003e + \u003ccode\u003ecleanCode\u003c/code\u003e, \u003ccode\u003elowerCaseLng\u003c/code\u003e, and Intl aliases (\u003ccode\u003eiw-IL\u003c/code\u003e → \u003ccode\u003ehe-IL\u003c/code\u003e). Missing keys were looked up in the same language twice. Only exact duplicates are removed; the order is unchanged. Thanks \u003ca href=\"https://github.com/lprnmns\"\u003e\u003ccode\u003e@​lprnmns\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/i18next/i18next/pull/2450\"\u003e#2450\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e26.4.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: \u003ccode\u003ehasLoadedNamespace(ns, { lng })\u003c/code\u003e no longer stays \u003ccode\u003efalse\u003c/code\u003e forever when the passed in \u003ccode\u003elng\u003c/code\u003e is loaded under another code, or not at all. It checked the load state of the raw \u003ccode\u003elng\u003c/code\u003e, but \u003ccode\u003eloadLanguages()\u003c/code\u003e stores a language under its resolved code (\u003ccode\u003ede-ch\u003c/code\u003e → \u003ccode\u003ede-CH\u003c/code\u003e, \u003ccode\u003ede-CH\u003c/code\u003e → \u003ccode\u003ede\u003c/code\u003e with \u003ccode\u003eload: 'languageOnly'\u003c/code\u003e) and skips a \u003ccode\u003elng\u003c/code\u003e outside \u003ccode\u003esupportedLngs\u003c/code\u003e entirely (only the fallback gets loaded), so that state never got set. react-i18next's \u003ccode\u003euseTranslation(ns, { lng })\u003c/code\u003e then never became ready: with \u003ccode\u003euseSuspense\u003c/code\u003e it kept throwing an already resolved promise and React retried forever (100% CPU, SSR never finished), without it the load effect re-rendered in a loop. It now checks the code the language is actually loaded under, and for a \u003ccode\u003elng\u003c/code\u003e outside \u003ccode\u003esupportedLngs\u003c/code\u003e only waits for the fallback, which is also what \u003ccode\u003et()\u003c/code\u003e resolves to. Calls without \u003ccode\u003elng\u003c/code\u003e and the \u003ccode\u003eprecheck\u003c/code\u003e (react-i18next's \u003ccode\u003ebindI18n: 'languageChanging'\u003c/code\u003e) are unchanged (\u003ca href=\"https://redirect.github.com/i18next/react-i18next/issues/1934\"\u003ereact-i18next#1934\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e26.4.4\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/i18next/i18next/commit/82894c159845c3675fb6540db52a4144abbd5d4a\"\u003e\u003ccode\u003e82894c1\u003c/code\u003e\u003c/a\u003e 26.5.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/i18next/i18next/commit/343080da6802c0badb2fe1032139d49af93d9774\"\u003e\u003ccode\u003e343080d\u003c/code\u003e\u003c/a\u003e build\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/i18next/i18next/commit/8e2eebb132aaccfb752990b6cc61cbfd7d835764\"\u003e\u003ccode\u003e8e2eebb\u003c/code\u003e\u003c/a\u003e changelog for 26.5.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/i18next/i18next/commit/822a37bc57f50b4a476aa630f864d3ed1f88a7e9\"\u003e\u003ccode\u003e822a37b\u003c/code\u003e\u003c/a\u003e fix: copy nested resources when cloning with forkResourceStore (\u003ca href=\"https://redirect.github.com/i18next/i18next/issues/2456\"\u003e#2456\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/i18next/i18next/commit/744c5cb41a19f52ae08d1a71c2d9ceca6525dc1d\"\u003e\u003ccode\u003e744c5cb\u003c/code\u003e\u003c/a\u003e 26.5.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/i18next/i18next/commit/de5960eee00d9db2a7c1b452d6ce9231c16b6474\"\u003e\u003ccode\u003ede5960e\u003c/code\u003e\u003c/a\u003e build\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/i18next/i18next/commit/fbe16f3429273f2f9c1fe9736f4590fa2e8253a5\"\u003e\u003ccode\u003efbe16f3\u003c/code\u003e\u003c/a\u003e changelog for 26.5.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/i18next/i18next/commit/67b4ae194ed4a1af083119f77daba48f1c295f1d\"\u003e\u003ccode\u003e67b4ae1\u003c/code\u003e\u003c/a\u003e fix: keep placeholders inside unescaped values literal (\u003ca href=\"https://redirect.github.com/i18next/i18next/issues/2455\"\u003e#2455\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/i18next/i18next/commit/aadd75ba9e88a20b34b7f44798d4e3bd8ec71baa\"\u003e\u003ccode\u003eaadd75b\u003c/code\u003e\u003c/a\u003e 26.5.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/i18next/i18next/commit/a43c43286a381bbae144c04de9f8056f464c7cd9\"\u003e\u003ccode\u003ea43c432\u003c/code\u003e\u003c/a\u003e build\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/i18next/i18next/compare/v26.4.2...v26.5.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `i18next-http-backend` from 4.0.2 to 4.0.4\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/i18next/i18next-http-backend/blob/master/CHANGELOG.md\"\u003ei18next-http-backend's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch3\u003e4.0.4\u003c/h3\u003e\n\u003cp\u003eSecurity release. See advisory \u003ca href=\"https://github.com/i18next/i18next-http-backend/security/advisories/GHSA-3cmx-xjww-583x\"\u003eGHSA-3cmx-xjww-583x\u003c/a\u003e.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003esecurity: also reject \u003ccode\u003e\u0026amp;\u003c/code\u003e, \u003ccode\u003e=\u003c/code\u003e and \u003ccode\u003e;\u003c/code\u003e in \u003ccode\u003elng\u003c/code\u003e and \u003ccode\u003ens\u003c/code\u003e values. With a query-shaped \u003ccode\u003eloadPath\u003c/code\u003e / \u003ccode\u003eaddPath\u003c/code\u003e template such as \u003ccode\u003e/locales/resources.json?lng={{lng}}\u0026amp;ns={{ns}}\u003c/code\u003e (the multiload shape the README documents), a value like \u003ccode\u003ede\u0026amp;ns=private\u0026amp;admin=true\u003c/code\u003e added or overrode query parameters on the request (HTTP parameter pollution). The 3.0.5 fix only rejected \u003ccode\u003e?\u003c/code\u003e, which covers the path position. The default \u003ccode\u003e/locales/{{lng}}/{{ns}}.json\u003c/code\u003e and other path-only templates were not affected. No language code or usable namespace name contains these characters, and \u003ccode\u003e+\u003c/code\u003e-joined multiload values such as \u003ccode\u003ede+en\u003c/code\u003e keep working.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e4.0.3\u003c/h3\u003e\n\u003cp\u003eSecurity release. See advisory \u003ca href=\"https://github.com/i18next/i18next-http-backend/security/advisories/GHSA-9jhj-wvmw-cfx5\"\u003eGHSA-9jhj-wvmw-cfx5\u003c/a\u003e.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003esecurity: refuse a request URL that starts with \u003ccode\u003e//\u003c/code\u003e (or \u003ccode\u003e\\\u003c/code\u003e) when the \u003ccode\u003eloadPath\u003c/code\u003e / \u003ccode\u003eaddPath\u003c/code\u003e template does not. With a template that puts \u003ccode\u003e{{ns}}\u003c/code\u003e directly after a leading \u003ccode\u003e/\u003c/code\u003e (e.g. \u003ccode\u003e/{{ns}}/{{lng}}.json\u003c/code\u003e), an \u003ccode\u003ens\u003c/code\u003e value of \u003ccode\u003e/evil.example\u003c/code\u003e passed the per-value checks, because a single \u003ccode\u003e/\u003c/code\u003e is allowed for nested namespaces, but it joined the template's own \u003ccode\u003e/\u003c/code\u003e into \u003ccode\u003e//evil.example/en.json\u003c/code\u003e, a protocol-relative URL that browsers send to another origin. The 4.0.2 \u003ccode\u003e//\u003c/code\u003e check looked at the value only, so it missed this. The interpolated URL is now checked as a whole. The default \u003ccode\u003e/locales/{{lng}}/{{ns}}.json\u003c/code\u003e, templates with an origin, and protocol-relative CDN templates such as \u003ccode\u003e//cdn.example/{{lng}}/{{ns}}.json\u003c/code\u003e are not affected and keep working.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/i18next/i18next-http-backend/commit/c201e7f095d5f92df723bdc9f4c2bd4aed9439d3\"\u003e\u003ccode\u003ec201e7f\u003c/code\u003e\u003c/a\u003e 4.0.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/i18next/i18next-http-backend/commit/b0eef9efd425055c554787cef7f878de33bbf510\"\u003e\u003ccode\u003eb0eef9e\u003c/code\u003e\u003c/a\u003e security: reject \u003ccode\u003e\u0026amp;\u003c/code\u003e, \u003ccode\u003e=\u003c/code\u003e and \u003ccode\u003e;\u003c/code\u003e in lng/ns to close query-parameter injectio...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/i18next/i18next-http-backend/commit/8eb66469e3a2123f25574bb454c0c2ebc7ab6ab2\"\u003e\u003ccode\u003e8eb6646\u003c/code\u003e\u003c/a\u003e Bump i18next-http-backend from 3.0.5 to 4.0.2 in /example/fallback (\u003ca href=\"https://redirect.github.com/i18next/i18next-http-backend/issues/199\"\u003e#199\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/i18next/i18next-http-backend/commit/5d3fd6c470fb8124506091ce4daaf342d24185a0\"\u003e\u003ccode\u003e5d3fd6c\u003c/code\u003e\u003c/a\u003e Bump i18next-http-backend from 3.0.5 to 4.0.2 in /example/node (\u003ca href=\"https://redirect.github.com/i18next/i18next-http-backend/issues/198\"\u003e#198\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/i18next/i18next-http-backend/commit/e48caf252143a65312aba9efa784de27aa06bb15\"\u003e\u003ccode\u003ee48caf2\u003c/code\u003e\u003c/a\u003e Bump next from 16.3.6 to 16.3.8 in /example/next (\u003ca href=\"https://redirect.github.com/i18next/i18next-http-backend/issues/197\"\u003e#197\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/i18next/i18next-http-backend/commit/772900cd65e786c3f410f2e2705f84aa81c426af\"\u003e\u003ccode\u003e772900c\u003c/code\u003e\u003c/a\u003e Bump i18next-http-backend from 3.0.5 to 4.0.2 in /example/i18next-vue (\u003ca href=\"https://redirect.github.com/i18next/i18next-http-backend/issues/196\"\u003e#196\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/i18next/i18next-http-backend/commit/42e86393fd4b8d2fc34f2ddadfa6c3097bf87238\"\u003e\u003ccode\u003e42e8639\u003c/code\u003e\u003c/a\u003e 4.0.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/i18next/i18next-http-backend/commit/042c3d4e4e9d73b2ae3aa76b22cb45d48f1e35b7\"\u003e\u003ccode\u003e042c3d4\u003c/code\u003e\u003c/a\u003e security: reject interpolated URLs that turn into \u003ccode\u003e//host\u003c/code\u003e (GHSA-9jhj-wvmw-cfx5)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/i18next/i18next-http-backend/commit/9b5f1e2f65365d958f9e6459c6e51d0ac9a028fa\"\u003e\u003ccode\u003e9b5f1e2\u003c/code\u003e\u003c/a\u003e Bump i18next-http-backend from 1.2.6 to 4.0.2 in /example/angular (\u003ca href=\"https://redirect.github.com/i18next/i18next-http-backend/issues/194\"\u003e#194\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/i18next/i18next-http-backend/commit/be8b9a4962a09b4833e630b3cdbd7a380a5b2aff\"\u003e\u003ccode\u003ebe8b9a4\u003c/code\u003e\u003c/a\u003e Bump next from 16.3.3 to 16.3.6 in /example/next (\u003ca href=\"https://redirect.github.com/i18next/i18next-http-backend/issues/193\"\u003e#193\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/i18next/i18next-http-backend/compare/v4.0.2...v4.0.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `jspdf-autotable` from 5.0.8 to 5.0.9\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/simonbengtsson/jsPDF-AutoTable/releases\"\u003ejspdf-autotable's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.0.9\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFeature/text option pass by \u003ca href=\"https://github.com/TimT1919\"\u003e\u003ccode\u003e@​TimT1919\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/simonbengtsson/jsPDF-AutoTable/pull/1114\"\u003esimonbengtsson/jsPDF-AutoTable#1114\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/TimT1919\"\u003e\u003ccode\u003e@​TimT1919\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/simonbengtsson/jsPDF-AutoTable/pull/1114\"\u003esimonbengtsson/jsPDF-AutoTable#1114\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/simonbengtsson/jsPDF-AutoTable/compare/v5.0.8...v5.0.9\"\u003ehttps://github.com/simonbengtsson/jsPDF-AutoTable/compare/v5.0.8...v5.0.9\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/simonbengtsson/jsPDF-AutoTable/commit/af6dd38ff6b2383069407ef352efcea127e2cb82\"\u003e\u003ccode\u003eaf6dd38\u003c/code\u003e\u003c/a\u003e 5.0.9\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/simonbengtsson/jsPDF-AutoTable/commit/bad76df5e1ee9e7bdbca98d80c3970eac1ba3385\"\u003e\u003ccode\u003ebad76df\u003c/code\u003e\u003c/a\u003e test: add test case that textOptions is passed to jspdf.text\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/simonbengtsson/jsPDF-AutoTable/commit/443bb0e41e4808ba1f7601ef415722e6871c29c1\"\u003e\u003ccode\u003e443bb0e\u003c/code\u003e\u003c/a\u003e feat: pass textOptions to autoTableText in printRow\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/simonbengtsson/jsPDF-AutoTable/commit/d66b06b96fc68a008a21602a11d10626aeef7651\"\u003e\u003ccode\u003ed66b06b\u003c/code\u003e\u003c/a\u003e feat: pass textOptions to jspdf.text in autoTableText\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/simonbengtsson/jsPDF-AutoTable/commit/898e2751095c79b7b83f21d3da23087c415ab7b3\"\u003e\u003ccode\u003e898e275\u003c/code\u003e\u003c/a\u003e feat: add textOptions to Styles\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/simonbengtsson/jsPDF-AutoTable/compare/v5.0.8...v5.0.9\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `lucide` from 1.44.0 to 1.61.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/lucide-icons/lucide/releases\"\u003elucide's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eVersion 1.61.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat(icons): added \u003ccode\u003ecircle-chevrons-down\u003c/code\u003e, \u003ccode\u003ecircle-chevrons-left\u003c/code\u003e, \u003ccode\u003ecircle-chevrons-right\u003c/code\u003e and 1 more icons by \u003ca href=\"https://github.com/ypotti\"\u003e\u003ccode\u003e@​ypotti\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/5025\"\u003elucide-icons/lucide#5025\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ypotti\"\u003e\u003ccode\u003e@​ypotti\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/5025\"\u003elucide-icons/lucide#5025\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/lucide-icons/lucide/compare/1.60.0...1.61.0\"\u003ehttps://github.com/lucide-icons/lucide/compare/1.60.0...1.61.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eVersion 1.60.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat(icons): added \u003ccode\u003etombstone\u003c/code\u003e icon by \u003ca href=\"https://github.com/ryck\"\u003e\u003ccode\u003e@​ryck\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4929\"\u003elucide-icons/lucide#4929\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(icons): added \u003ccode\u003esmartphone-user-round\u003c/code\u003e icon by \u003ca href=\"https://github.com/hitanshu-machhi\"\u003e\u003ccode\u003e@​hitanshu-machhi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4586\"\u003elucide-icons/lucide#4586\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(icons): added \u003ccode\u003ebacon\u003c/code\u003e icon by \u003ca href=\"https://github.com/devkamani9313-lab\"\u003e\u003ccode\u003e@​devkamani9313-lab\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4694\"\u003elucide-icons/lucide#4694\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(site): Fix build by \u003ca href=\"https://github.com/ericfennis\"\u003e\u003ccode\u003e@​ericfennis\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/5033\"\u003elucide-icons/lucide#5033\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(docs): Update icon count comparison with Feather Icons by \u003ca href=\"https://github.com/noahweidig\"\u003e\u003ccode\u003e@​noahweidig\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/5022\"\u003elucide-icons/lucide#5022\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(icons): added \u003ccode\u003eletter-spacing\u003c/code\u003e icon by \u003ca href=\"https://github.com/madebyoz\"\u003e\u003ccode\u003e@​madebyoz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/3038\"\u003elucide-icons/lucide#3038\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump the vue-deps group with 2 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/5027\"\u003elucide-icons/lucide#5027\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps-dev): bump react-native from 0.87.1 to 0.88.0 in the react-native-deps group by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/5030\"\u003elucide-icons/lucide#5030\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(icons): added \u003ccode\u003eline-height\u003c/code\u003e icon by \u003ca href=\"https://github.com/madebyoz\"\u003e\u003ccode\u003e@​madebyoz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/3039\"\u003elucide-icons/lucide#3039\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps-dev): bump the svelte-deps group across 1 directory with 2 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode...\n\n_Description has been truncated_","html_url":"https://github.com/Champ-Deep/ChamPDF/pull/107","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Champ-Deep%2FChamPDF/issues/107","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/107/packages"},{"uuid":"6027578098","node_id":"PR_kwDOSe0ezc8AAAABKnUHpA","number":219,"state":"open","title":"chore(deps): bump markdown-it from 15.0.2 to 15.0.3","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-25T18:03:44.000Z","updated_at":"2026-10-25T18:08:17.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"markdown-it","old_version":"15.0.2","new_version":"15.0.3","repository_url":"https://github.com/markdown-it/markdown-it"}],"path":null,"ecosystem":"npm"},"body":"Bumps [markdown-it](https://github.com/markdown-it/markdown-it) from 15.0.2 to 15.0.3.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/markdown-it/markdown-it/blob/master/CHANGELOG.md\"\u003emarkdown-it's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[15.0.3] - 2026-10-16\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEnforce the 999 Unicode code point limit for reference definition labels,\npartially addressing \u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1213\"\u003e#1213\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eRequire whitespace before multiline reference titles.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed quadratic complexity when parsing multiline reference definitions.\u003c/li\u003e\n\u003cli\u003eFixed quadratic complexity when parsing unclosed inline HTML comments,\nprocessing instructions, declarations and CDATA sections.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/a8c00d474ec9b304fad9b71c16d6fa8b4909279e\"\u003e\u003ccode\u003ea8c00d4\u003c/code\u003e\u003c/a\u003e 15.0.3 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/e9504a4f1cb42a09d6f4e53d12d89c96d57ee9d4\"\u003e\u003ccode\u003ee9504a4\u003c/code\u003e\u003c/a\u003e Skip pathological speed tests during coverage collection\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/46d8b52016da1c423f4bdeecaa2d69d51c4156c1\"\u003e\u003ccode\u003e46d8b52\u003c/code\u003e\u003c/a\u003e Deps bump\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/928bc8c11ded60181c0e7fc5aa954eec582e8e79\"\u003e\u003ccode\u003e928bc8c\u003c/code\u003e\u003c/a\u003e Fix quadratic inline HTML parsing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/48fbc465812c440020c663f040ab22deaf8f1eca\"\u003e\u003ccode\u003e48fbc46\u003c/code\u003e\u003c/a\u003e Fix quadratic reference parsing and partially address \u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1213\"\u003e#1213\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/markdown-it/markdown-it/compare/15.0.2...15.0.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=markdown-it\u0026package-manager=npm_and_yarn\u0026previous-version=15.0.2\u0026new-version=15.0.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/XBlueSky/vatt-ghern/pull/219","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/XBlueSky%2Fvatt-ghern/issues/219","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/219/packages"},{"uuid":"6020066058","node_id":"PR_kwDOVDdVMc8AAAABKhe0kQ","number":1,"state":"open","title":"chore(deps-dev): bump markdown-it from 15.0.2 to 15.0.3 in the npm_and_yarn group across 1 directory","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-25T02:31:22.000Z","updated_at":"2026-10-25T02:31:26.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps-dev)","packages":[{"name":"markdown-it","old_version":"15.0.2","new_version":"15.0.3","repository_url":"https://github.com/markdown-it/markdown-it"}],"path":"the npm_and_yarn group across 1 directory","ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 1 update in the / directory: [markdown-it](https://github.com/markdown-it/markdown-it).\n\nUpdates `markdown-it` from 15.0.2 to 15.0.3\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/markdown-it/markdown-it/blob/master/CHANGELOG.md\"\u003emarkdown-it's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[15.0.3] - 2026-10-16\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEnforce the 999 Unicode code point limit for reference definition labels,\npartially addressing \u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1213\"\u003e#1213\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eRequire whitespace before multiline reference titles.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed quadratic complexity when parsing multiline reference definitions.\u003c/li\u003e\n\u003cli\u003eFixed quadratic complexity when parsing unclosed inline HTML comments,\nprocessing instructions, declarations and CDATA sections.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/a8c00d474ec9b304fad9b71c16d6fa8b4909279e\"\u003e\u003ccode\u003ea8c00d4\u003c/code\u003e\u003c/a\u003e 15.0.3 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/e9504a4f1cb42a09d6f4e53d12d89c96d57ee9d4\"\u003e\u003ccode\u003ee9504a4\u003c/code\u003e\u003c/a\u003e Skip pathological speed tests during coverage collection\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/46d8b52016da1c423f4bdeecaa2d69d51c4156c1\"\u003e\u003ccode\u003e46d8b52\u003c/code\u003e\u003c/a\u003e Deps bump\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/928bc8c11ded60181c0e7fc5aa954eec582e8e79\"\u003e\u003ccode\u003e928bc8c\u003c/code\u003e\u003c/a\u003e Fix quadratic inline HTML parsing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/48fbc465812c440020c663f040ab22deaf8f1eca\"\u003e\u003ccode\u003e48fbc46\u003c/code\u003e\u003c/a\u003e Fix quadratic reference parsing and partially address \u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1213\"\u003e#1213\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/markdown-it/markdown-it/compare/15.0.2...15.0.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=markdown-it\u0026package-manager=npm_and_yarn\u0026previous-version=15.0.2\u0026new-version=15.0.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/sn109946/translated-content/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/sn109946/translated-content/pull/1","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/sn109946%2Ftranslated-content/issues/1","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1/packages"},{"uuid":"6019928082","node_id":"PR_kwDOPelOQ88AAAABKhX2Rg","number":662,"state":"closed","title":"Build(deps): bump the npm_and_yarn group across 1 directory with 5 updates","user":"dependabot[bot]","labels":["type: dependencies","dependencies","javascript"],"assignees":[],"locked":false,"comments_count":4,"pull_request":true,"closed_at":"2026-10-25T02:12:58.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-25T02:12:32.000Z","updated_at":"2026-10-25T02:14:23.000Z","time_to_close":26,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Build(deps): bump","group_name":"npm_and_yarn","update_count":5,"packages":[{"name":"@vitest/browser","old_version":"5.0.3","new_version":"5.0.5","repository_url":"https://github.com/vitest-dev/vitest"},{"name":"handlebars","old_version":"4.7.9","new_version":"4.7.10","repository_url":"https://github.com/handlebars-lang/handlebars.js"},{"name":"markdown-it","old_version":"14.3.2","new_version":"14.3.3","repository_url":"https://github.com/markdown-it/markdown-it"},{"name":"source-map-js","old_version":"1.2.1","new_version":"1.2.2","repository_url":"https://github.com/7rulnik/source-map-js"},{"name":"vite","old_version":"8.1.0","new_version":"8.3.5","repository_url":"https://github.com/vitejs/vite"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 5 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [@vitest/browser](https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser) | `5.0.3` | `5.0.5` |\n| [handlebars](https://github.com/handlebars-lang/handlebars.js) | `4.7.9` | `4.7.10` |\n| [markdown-it](https://github.com/markdown-it/markdown-it) | `14.3.2` | `14.3.3` |\n| [source-map-js](https://github.com/7rulnik/source-map-js) | `1.2.1` | `1.2.2` |\n| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.1.0` | `8.3.5` |\n\n\nUpdates `@vitest/browser` from 5.0.3 to 5.0.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vitest-dev/vitest/releases\"\u003e@​vitest/browser's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.0.5\u003c/h2\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eKeep vite default \u003ccode\u003efs.deny\u003c/code\u003e with api token file  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003eHiroshi Ogawa\u003c/strong\u003e and \u003cstrong\u003eClaude Opus 5.5\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11578\"\u003evitest-dev/vitest#11578\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/28dc1edfb\"\u003e\u003c!-- raw HTML omitted --\u003e(28dc1)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHandle quoted file names in \u003ccode\u003e--changed\u003c/code\u003e  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11583\"\u003evitest-dev/vitest#11583\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/14921e962\"\u003e\u003c!-- raw HTML omitted --\u003e(14921)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003edata\u003c/code\u003e to the \u003ccode\u003eimport.meta.hot\u003c/code\u003e stub  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11590\"\u003evitest-dev/vitest#11590\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/3a8289ac3\"\u003e\u003c!-- raw HTML omitted --\u003e(3a828)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSet \u003ccode\u003eskip\u003c/code\u003e in \u003ccode\u003eskipIf\u003c/code\u003e, ignore \u003ccode\u003eundefined\u003c/code\u003e options  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11591\"\u003evitest-dev/vitest#11591\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/d523a15f2\"\u003e\u003c!-- raw HTML omitted --\u003e(d523a)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSkip builtin loading in async leak detector  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11598\"\u003evitest-dev/vitest#11598\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/fe86a64c6\"\u003e\u003c!-- raw HTML omitted --\u003e(fe86a)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eKeep the import frame in native loader errors  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11599\"\u003evitest-dev/vitest#11599\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/9697b3894\"\u003e\u003c!-- raw HTML omitted --\u003e(9697b)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRun hook cleanups when a later hook fails  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11605\"\u003evitest-dev/vitest#11605\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/6c5a44720\"\u003e\u003c!-- raw HTML omitted --\u003e(6c5a4)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease mocks of finished test files  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11607\"\u003evitest-dev/vitest#11607\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/e9c3d72f0\"\u003e\u003c!-- raw HTML omitted --\u003e(e9c3d)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAbort all running tests on cancel  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11606\"\u003evitest-dev/vitest#11606\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/6621a72d6\"\u003e\u003c!-- raw HTML omitted --\u003e(6621a)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebrowser\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eIgnore synthetic pagehide events  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11582\"\u003evitest-dev/vitest#11582\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/ca0813584\"\u003e\u003c!-- raw HTML omitted --\u003e(ca081)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRun plugin buildStart on server creation  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11593\"\u003evitest-dev/vitest#11593\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/ea611e44c\"\u003e\u003c!-- raw HTML omitted --\u003e(ea611)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDrop late connections of closed sessions  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11600\"\u003evitest-dev/vitest#11600\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/f161e6df2\"\u003e\u003c!-- raw HTML omitted --\u003e(f161e)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eWait 30s for the browser to close  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11601\"\u003evitest-dev/vitest#11601\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/6498b666a\"\u003e\u003c!-- raw HTML omitted --\u003e(6498b)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRun global setup once with instances  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11596\"\u003evitest-dev/vitest#11596\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/8dd67c262\"\u003e\u003c!-- raw HTML omitted --\u003e(8dd67)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ereporter\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eEnd reason \u003ccode\u003e\u0026amp;[#39](https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser/issues/39);failed\u0026amp;[#39](https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser/issues/39);\u003c/code\u003e on worker crash  -  by \u003ca href=\"https://github.com/AriPerkkio\"\u003e\u003ccode\u003e@​AriPerkkio\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11568\"\u003evitest-dev/vitest#11568\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/6ae8e89ff\"\u003e\u003c!-- raw HTML omitted --\u003e(6ae8e)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/vitest-dev/vitest/compare/v5.0.4...v5.0.5\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev5.0.4\u003c/h2\u003e\n\u003ch3\u003e   🚀 Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eexperimental\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eTag cache directories with CACHEDIR.TAG  -  by \u003ca href=\"https://github.com/lifeiscontent\"\u003e\u003ccode\u003e@​lifeiscontent\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11461\"\u003evitest-dev/vitest#11461\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/a8ea3c8fd\"\u003e\u003c!-- raw HTML omitted --\u003e(a8ea3)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003etest.ui.theme\u003c/code\u003e option  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11499\"\u003evitest-dev/vitest#11499\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/1da66405d\"\u003e\u003c!-- raw HTML omitted --\u003e(1da66)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHighlight selector multiple matches in trace view  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003eHiroshi Ogawa\u003c/strong\u003e and \u003cstrong\u003eClaude Opus 5.5\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11489\"\u003evitest-dev/vitest#11489\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/5abba1e1b\"\u003e\u003c!-- raw HTML omitted --\u003e(5abba)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePrint how many tests were affected and a total when running \u003ccode\u003e--changed\u003c/code\u003e  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11424\"\u003evitest-dev/vitest#11424\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/a23368585\"\u003e\u003c!-- raw HTML omitted --\u003e(a2336)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd an option to cache dependencies instead of statically parsing them  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11515\"\u003evitest-dev/vitest#11515\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/c06012ac8\"\u003e\u003c!-- raw HTML omitted --\u003e(c0601)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd fit and zoom controls to trace viewer  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003eHiroshi Ogawa\u003c/strong\u003e and \u003cstrong\u003eClaude Opus 5.5\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11490\"\u003evitest-dev/vitest#11490\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/f5dd99ed0\"\u003e\u003c!-- raw HTML omitted --\u003e(f5dd9)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFail the run on git and location filter errors  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11430\"\u003evitest-dev/vitest#11430\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/30d0304d2\"\u003e\u003c!-- raw HTML omitted --\u003e(30d03)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEnable fsModuleCache by default  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11435\"\u003evitest-dev/vitest#11435\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/ad208cc29\"\u003e\u003c!-- raw HTML omitted --\u003e(ad208)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eTrack project files and mocks with --changed  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11432\"\u003evitest-dev/vitest#11432\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/b0f2b3bb9\"\u003e\u003c!-- raw HTML omitted --\u003e(b0f2b)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRefactor caching, fix \u003ccode\u003e:\u003c/code\u003e in project and change the shape of \u003ccode\u003eresults\u003c/code\u003e cache  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11453\"\u003evitest-dev/vitest#11453\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/9673c49a4\"\u003e\u003c!-- raw HTML omitted --\u003e(9673c)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eKeep full \u003ccode\u003e$\u003c/code\u003e string values when \u003ccode\u003etaskTitleValueFormatTruncate\u003c/code\u003e is 0  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003eHiroshi Ogawa\u003c/strong\u003e and \u003cstrong\u003eClaude Opus 5.5\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11485\"\u003evitest-dev/vitest#11485\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/4f7e1799b\"\u003e\u003c!-- raw HTML omitted --\u003e(4f7e1)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eResolve node builtins in client environments  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11417\"\u003evitest-dev/vitest#11417\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/56b319ac6\"\u003e\u003c!-- raw HTML omitted --\u003e(56b31)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix module graph builtin externals after \u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser/issues/11421\"\u003e#11421\u003c/a\u003e  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003eHiroshi Ogawa\u003c/strong\u003e and \u003cstrong\u003eClaude Opus 5.5\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11491\"\u003evitest-dev/vitest#11491\u003c/a\u003e and \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11421\"\u003evitest-dev/vitest#11421\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/008e184cb\"\u003e\u003c!-- raw HTML omitted --\u003e(008e1)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eWrap module mocks during in-source testing  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11505\"\u003evitest-dev/vitest#11505\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/36d19cb00\"\u003e\u003c!-- raw HTML omitted --\u003e(36d19)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHandle line endings in snapshot  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11522\"\u003evitest-dev/vitest#11522\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/4c468aa40\"\u003e\u003c!-- raw HTML omitted --\u003e(4c468)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRespect root in projects  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11521\"\u003evitest-dev/vitest#11521\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/26642f793\"\u003e\u003c!-- raw HTML omitted --\u003e(26642)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eResolve mocks in directories with spaces  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11539\"\u003evitest-dev/vitest#11539\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/caaef9416\"\u003e\u003c!-- raw HTML omitted --\u003e(caaef)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eapi\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003ePublish the api token atomically  -  by \u003ca href=\"https://github.com/umairnawaz333\"\u003e\u003ccode\u003e@​umairnawaz333\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11323\"\u003evitest-dev/vitest#11323\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/6f990fef1\"\u003e\u003c!-- raw HTML omitted --\u003e(6f990)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebrowser\u003c/strong\u003e:\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/7a825db43e2beca0b219d2eadaec334cb81af0c7\"\u003e\u003ccode\u003e7a825db\u003c/code\u003e\u003c/a\u003e chore: release v5.0.5 (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser/issues/11609\"\u003e#11609\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/f161e6df2b3c0bc84982d374094379139e380791\"\u003e\u003ccode\u003ef161e6d\u003c/code\u003e\u003c/a\u003e fix(browser): drop late connections of closed sessions (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser/issues/11600\"\u003e#11600\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/ca081358494a6170b1e4e3f9472243a7f03ad31c\"\u003e\u003ccode\u003eca08135\u003c/code\u003e\u003c/a\u003e fix(browser): ignore synthetic pagehide events (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser/issues/11582\"\u003e#11582\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/6a11cf66f99fa610b7364363d5ca42b66d994f40\"\u003e\u003ccode\u003e6a11cf6\u003c/code\u003e\u003c/a\u003e chore: release v5.0.4 (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser/issues/11554\"\u003e#11554\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/69e6369f64455b4d78a6338521bbfc5fdb909af0\"\u003e\u003ccode\u003e69e6369\u003c/code\u003e\u003c/a\u003e fix(browser): open one cdp session per tester (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser/issues/11542\"\u003e#11542\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/caaef94168ff9fad434bf0470c0a3270860c37b7\"\u003e\u003ccode\u003ecaaef94\u003c/code\u003e\u003c/a\u003e fix: resolve mocks in directories with spaces (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser/issues/11539\"\u003e#11539\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/bf04b9ccc7235949e63490d310cdca00e61b3e4a\"\u003e\u003ccode\u003ebf04b9c\u003c/code\u003e\u003c/a\u003e fix(browser): run browser instances as workers (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser/issues/11525\"\u003e#11525\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/662e8a3637725553b9466f768b22ec844e8d5ea6\"\u003e\u003ccode\u003e662e8a3\u003c/code\u003e\u003c/a\u003e fix(browser): avoid extra scroll outside the iframe (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser/issues/11523\"\u003e#11523\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/b61d1ced3a11fea09e02a95a8b8fbcecbf0944ac\"\u003e\u003ccode\u003eb61d1ce\u003c/code\u003e\u003c/a\u003e fix(browser): wait for setup mocks before importing a test file (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser/issues/11520\"\u003e#11520\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/1da66405d5e979299601a8c7fd13fb0f78e74495\"\u003e\u003ccode\u003e1da6640\u003c/code\u003e\u003c/a\u003e feat: support \u003ccode\u003etest.ui.theme\u003c/code\u003e option (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser/issues/11499\"\u003e#11499\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/browser\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `handlebars` from 4.7.9 to 4.7.10\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/handlebars-lang/handlebars.js/releases\"\u003ehandlebars's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.7.10\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003esecurity: Sanitize the source map URL when minifying - f37c599\u003c/li\u003e\n\u003cli\u003esecurity: Iterate lazily in #each and strip whitespace in linear time - 812c226\u003c/li\u003e\n\u003cli\u003esecurity: Escape \u003ccode\u003e\u0026lt;!--\u003c/code\u003e and \u003ccode\u003e\u0026lt;script\u003c/code\u003e in precompiled output - 609d1b1 GHSA-xw65-4hp5-5hc7\u003c/li\u003e\n\u003cli\u003esecurity: Don't trust special properties on context data - ceec388 GHSA-p8wg-vrv2-v86f\u003c/li\u003e\n\u003cli\u003esecurity: Only compile partials that are template strings - c28ee7a\u003c/li\u003e\n\u003cli\u003esecurity: Only dispatch known node types in the Compiler and Visitor - 7d501a5\u003c/li\u003e\n\u003cli\u003esecurity: Validate AST values in the compiler instead of the parser - 703fdcc GHSA-8r5x-fm3f-whwj\u003c/li\u003e\n\u003cli\u003eClarify that --root does not restrict filesystem access - 0fcf25c\u003c/li\u003e\n\u003cli\u003eBump minimist to ^1.2.8 - ea8ed82\u003c/li\u003e\n\u003cli\u003eFix Ruby component publishing documentation - d069c1c\u003c/li\u003e\n\u003cli\u003eFix Composer component definition - 6714e07\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eCompatibility notes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e{{#each}}\u003c/code\u003e iterates iterables such as \u003ccode\u003eMap\u003c/code\u003e, \u003ccode\u003eSet\u003c/code\u003e and generators lazily, like \u003ccode\u003efor...of\u003c/code\u003e, instead of\ncopying them into an array first. Values added to the iterable while the block renders are now visited too.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/compare/v4.7.9...v4.7.10\"\u003eCommits\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/handlebars-lang/handlebars.js/blob/v4.7.10/release-notes.md\"\u003ehandlebars's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.7.10 - October 5th, 2026\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003esecurity: Sanitize the source map URL when minifying - f37c599\u003c/li\u003e\n\u003cli\u003esecurity: Iterate lazily in #each and strip whitespace in linear time - 812c226\u003c/li\u003e\n\u003cli\u003esecurity: Escape \u003ccode\u003e\u0026lt;!--\u003c/code\u003e and \u003ccode\u003e\u0026lt;script\u003c/code\u003e in precompiled output - 609d1b1 GHSA-xw65-4hp5-5hc7\u003c/li\u003e\n\u003cli\u003esecurity: Don't trust special properties on context data - ceec388 GHSA-p8wg-vrv2-v86f\u003c/li\u003e\n\u003cli\u003esecurity: Only compile partials that are template strings - c28ee7a\u003c/li\u003e\n\u003cli\u003esecurity: Only dispatch known node types in the Compiler and Visitor - 7d501a5\u003c/li\u003e\n\u003cli\u003esecurity: Validate AST values in the compiler instead of the parser - 703fdcc GHSA-8r5x-fm3f-whwj\u003c/li\u003e\n\u003cli\u003eClarify that --root does not restrict filesystem access - 0fcf25c\u003c/li\u003e\n\u003cli\u003eBump minimist to ^1.2.8 - ea8ed82\u003c/li\u003e\n\u003cli\u003eFix Ruby component publishing documentation - d069c1c\u003c/li\u003e\n\u003cli\u003eFix Composer component definition - 6714e07\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eCompatibility notes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e{{#each}}\u003c/code\u003e iterates iterables such as \u003ccode\u003eMap\u003c/code\u003e, \u003ccode\u003eSet\u003c/code\u003e and generators lazily, like \u003ccode\u003efor...of\u003c/code\u003e, instead of\ncopying them into an array first. Values added to the iterable while the block renders are now visited too.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/compare/v4.7.9...v4.7.10\"\u003eCommits\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/45ce15255e0f430ac6d19742b18e316b7539264e\"\u003e\u003ccode\u003e45ce152\u003c/code\u003e\u003c/a\u003e v4.7.10\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/e47b2365d5656ab5689ae226aef90a485a90c5d8\"\u003e\u003ccode\u003ee47b236\u003c/code\u003e\u003c/a\u003e Update release notes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/f37c599de9187715eb1e9afedcb2d80c175487a0\"\u003e\u003ccode\u003ef37c599\u003c/code\u003e\u003c/a\u003e Sanitize the source map URL when minifying\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/812c2260cb8794ef4ab63a7f1d946431112560ca\"\u003e\u003ccode\u003e812c226\u003c/code\u003e\u003c/a\u003e Iterate lazily in #each and strip whitespace in linear time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/609d1b11c833c9a3e00f56f2f34d22f425446725\"\u003e\u003ccode\u003e609d1b1\u003c/code\u003e\u003c/a\u003e Escape \u003ccode\u003e\u0026lt;!--\u003c/code\u003e and \u003ccode\u003e\u0026lt;script\u003c/code\u003e in precompiled output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/ceec388abe1d1aac8f6369860d5f390fa71ef4fa\"\u003e\u003ccode\u003eceec388\u003c/code\u003e\u003c/a\u003e Don't trust special properties on context data\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/c28ee7adb312308e0fe26f4d435a481be5e1ff98\"\u003e\u003ccode\u003ec28ee7a\u003c/code\u003e\u003c/a\u003e Only compile partials that are template strings\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/7d501a5af2ac3aa9ac788a8889dbe419849e46f1\"\u003e\u003ccode\u003e7d501a5\u003c/code\u003e\u003c/a\u003e Only dispatch known node types in the Compiler and Visitor\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/703fdcc5fd6cc8d1cc0c33cc19de40c467c4b8d2\"\u003e\u003ccode\u003e703fdcc\u003c/code\u003e\u003c/a\u003e Validate AST values in the compiler instead of the parser\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/0fcf25c63038b43e78e17adbf029cf073e80554d\"\u003e\u003ccode\u003e0fcf25c\u003c/code\u003e\u003c/a\u003e Clarify that --root does not restrict filesystem access\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/handlebars-lang/handlebars.js/compare/v4.7.9...v4.7.10\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `markdown-it` from 14.3.2 to 14.3.3\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/markdown-it/markdown-it/blob/14.3.3/CHANGELOG.md\"\u003emarkdown-it's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[14.3.3] - 2026-10-16\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackported 15.0.3 fixes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d372f0d8a68bef0b0acaa68868ce8ae8ba85b384\"\u003e\u003ccode\u003ed372f0d\u003c/code\u003e\u003c/a\u003e 14.3.3 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d99f48839d37af6fd8a2617516c43dab90755503\"\u003e\u003ccode\u003ed99f488\u003c/code\u003e\u003c/a\u003e Backported 15.0.3 fixes\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/markdown-it/markdown-it/compare/14.3.2...14.3.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `source-map-js` from 1.2.1 to 1.2.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/7rulnik/source-map-js/releases\"\u003esource-map-js's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.2.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eFix crash when executing in browser with CSP script-src that don't permit unsafe-eval (\u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/29\"\u003e#29\u003c/a\u003e) \u003ca href=\"https://github.com/xfournet\"\u003e\u003ccode\u003e@​xfournet\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eFix denial of service from malicious indexed source maps (CVE-2026-93749) (\u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/79\"\u003e#79\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eReported by \u003ca href=\"https://github.com/waydeshi\"\u003e\u003ccode\u003e@​waydeshi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/issues/76\"\u003e#76\u003c/a\u003e. A fix was also proposed by \u003ca href=\"https://github.com/aniebiet\"\u003e\u003ccode\u003e@​aniebiet\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/78\"\u003e#78\u003c/a\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/7rulnik/source-map-js/blob/main/CHANGELOG.md\"\u003esource-map-js's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.2.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eFix crash when executing in browser with CSP script-src that don't permit unsafe-eval (\u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/29\"\u003e#29\u003c/a\u003e) \u003ca href=\"https://github.com/xfournet\"\u003e\u003ccode\u003e@​xfournet\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eFix denial of service from malicious indexed source maps (CVE-2026-93749) (\u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/79\"\u003e#79\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eReported by \u003ca href=\"https://github.com/waydeshi\"\u003e\u003ccode\u003e@​waydeshi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/issues/76\"\u003e#76\u003c/a\u003e. A fix was also proposed by \u003ca href=\"https://github.com/aniebiet\"\u003e\u003ccode\u003e@​aniebiet\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/78\"\u003e#78\u003c/a\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/7rulnik/source-map-js/commit/0a1d334fd1e55a47df97fcd60a7915d46df3b08a\"\u003e\u003ccode\u003e0a1d334\u003c/code\u003e\u003c/a\u003e 1.2.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/7rulnik/source-map-js/commit/4c6fa26d77419bd8e48ec92844866cce7d9ae739\"\u003e\u003ccode\u003e4c6fa26\u003c/code\u003e\u003c/a\u003e Update changelog\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/7rulnik/source-map-js/commit/cf7658058ceeaa8619d5ae0ec90be6905209d016\"\u003e\u003ccode\u003ecf76580\u003c/code\u003e\u003c/a\u003e Fix denial of service from malicious indexed source maps (CVE-2026-93749) (\u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/issues/79\"\u003e#79\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/7rulnik/source-map-js/commit/7899a86615c630f4fc220273ff9fe2e8e49a56df\"\u003e\u003ccode\u003e7899a86\u003c/code\u003e\u003c/a\u003e Fix crash when executing browser with CSP script-src that don't permit unsafe...\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/7rulnik/source-map-js/compare/v1.2.1...v1.2.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `vite` from 8.1.0 to 8.3.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vitejs/vite/releases\"\u003evite's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev8.3.5\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ebuild:\u003c/strong\u003e handle missing chunk import maps (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23777\"\u003e#23777\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/8d7623d9b5647714a5b20cbd787a5401ca846229\"\u003e8d7623d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebuild:\u003c/strong\u003e include preload dependencies to chunk import map hashing (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23793\"\u003e#23793\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/4d16e7c14d5e1c361f148238b1e81131238ab8e9\"\u003e4d16e7c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e apply \u003ccode\u003eserver.origin\u003c/code\u003e to asset URLs (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23683\"\u003e#23683\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/52ba877693c8633458d163117504a8259beb3cf5\"\u003e52ba877\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e declare utf-8 charset in fallback page (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23846\"\u003e#23846\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/197daf6c4c7bfdaa005bebcc41dd2ff22fa3a5b6\"\u003e197daf6\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e ignore build.chunkImportMap (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23685\"\u003e#23685\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/cfe917d67d279a13f20ae9449e3befa736b64b07\"\u003ecfe917d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e include user \u003ccode\u003eimport.meta.env.*\u003c/code\u003e defines in the \u003ccode\u003eimport.meta.env\u003c/code\u003e object (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23713\"\u003e#23713\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/6019aa79975465516da7c6f532d568422b019a25\"\u003e6019aa7\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e map forwarded error stacks through the bundle source maps (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23741\"\u003e#23741\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/11fe1e46ff0c136cb90fbe263ba03993bc94df18\"\u003e11fe1e4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e normalize served output files (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23684\"\u003e#23684\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/df4e02cc8317a62f21edefc79a9690571ffed1f3\"\u003edf4e02c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e stop hmr propagation at modules that are no longer imported (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23839\"\u003e#23839\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/7471e8c3b32d3d55243590bb7713e602c9fb0212\"\u003e7471e8c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecss:\u003c/strong\u003e don't fail on a literal \u003ccode\u003e%\u003c/code\u003e in \u003ccode\u003eurl()\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23676\"\u003e#23676\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/50b382d31835b8b4bc8b6964738ac03146e44261\"\u003e50b382d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update all non-major dependencies (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23731\"\u003e#23731\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/cf80aa552cac02eac0293330ccd5fde3c7ae8d29\"\u003ecf80aa5\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update all non-major dependencies (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23826\"\u003e#23826\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/77d8373510da1b26ce057eb2248e570b7f63fde9\"\u003e77d8373\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update rolldown-related dependencies (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23733\"\u003e#23733\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/43f0d052e514c3ad2dea2f7dc44b0720e1f62f48\"\u003e43f0d05\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update rolldown-related dependencies (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23827\"\u003e#23827\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/c2e04187e49aab7ab809989f0537b4906653acab\"\u003ec2e0418\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoptimizer:\u003c/strong\u003e fall back to yarn.lock for lockfile hash (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23667\"\u003e#23667\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/f20609630faa93026924275115d1426fdc08629e\"\u003ef206096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoptimizer:\u003c/strong\u003e scan \u003ccode\u003eoxc.jsxInject\u003c/code\u003e imports (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23758\"\u003e#23758\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/38f3cb45b1490ed24775547ceafa677b91a57714\"\u003e38f3cb4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoptimizer:\u003c/strong\u003e skip patches dir check for yarn.lock fallback (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23725\"\u003e#23725\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/8e890e1ce438bfbc07ea4931ce332e40589940fa\"\u003e8e890e1\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoptimizer:\u003c/strong\u003e skip patches dir hash for nub lockfile (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23761\"\u003e#23761\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/a7d56967ef0050a09c0507e63a18164bc7a0d486\"\u003ea7d5696\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eresolve:\u003c/strong\u003e support subpath imports with multiple \u003ccode\u003e#\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23631\"\u003e#23631\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/0d86b3485fbbd0fcb9a1f70a14adedfcb7a1fff1\"\u003e0d86b34\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eresolve:\u003c/strong\u003e update resolve.exports to 2.0.4 (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23739\"\u003e#23739\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/4ea708a3ae9a324c6aabca59fade4082bf72f3e5\"\u003e4ea708a\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eserver:\u003c/strong\u003e handle socket errors on upgrade requests not taken by the HMR server (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23728\"\u003e#23728\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/c2c9ef4dcd05b3e4d88844ea3a13dc23819ca2a5\"\u003ec2c9ef4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eserver:\u003c/strong\u003e only strip base when path matches a full segment (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23641\"\u003e#23641\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/3dfde87b90a9f80b125d710e3e5d4fc795662db6\"\u003e3dfde87\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePerformance Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003essr:\u003c/strong\u003e extract inline source maps without a regexp (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23775\"\u003e#23775\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/6a0278055d8501bbaf65b8d34ec094722b4e877a\"\u003e6a02780\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMiscellaneous Chores\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003emigrate to Oxlint (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23746\"\u003e#23746\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/5b73935881424ed5919571036dd89d3868590f92\"\u003e5b73935\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCode Refactoring\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e replace \u003ccode\u003e@vercel/detect-agent\u003c/code\u003e with \u003ccode\u003estd-env\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23744\"\u003e#23744\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/ce4293f15cc5cd221c5ed60f5cd64e82ca5cbaf5\"\u003ece4293f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edev:\u003c/strong\u003e consolidate moduleURL to file path utilities (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23828\"\u003e#23828\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/df7b40ee9d691e9f4e2413244f6665ef5482dce3\"\u003edf7b40e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edev:\u003c/strong\u003e separate import resolution from URL conversion (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23791\"\u003e#23791\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/611668983d4b717f5e5e66cf9f7125bd94f92bf7\"\u003e6116689\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edev:\u003c/strong\u003e share ModuleURL and BrowserURL conversions (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23790\"\u003e#23790\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/446954c69c806795c83fe2f97c28ae8f9ef83731\"\u003e446954c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edev:\u003c/strong\u003e use ModuleURLs throughout HTML transforms (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23815\"\u003e#23815\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/a16299092c0f0f3f90e05d4bb5f0168b293c2b52\"\u003ea162990\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev8.3.4\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e support \u003ccode\u003eimport.meta.hot.acceptExports\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23463\"\u003e#23463\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/bc0f21c56a2e003a4d2dd23ccb9da3ec8c706c4e\"\u003ebc0f21c\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eavoid mutating hmr defaults (fix \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23575\"\u003e#23575\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23576\"\u003e#23576\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/574d5e351905fe99891364d03c2440531378f7fd\"\u003e574d5e3\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md\"\u003evite's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://github.com/vitejs/vite/compare/v8.3.4...v8.3.5\"\u003e8.3.5\u003c/a\u003e (2026-10-21)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ebuild:\u003c/strong\u003e handle missing chunk import maps (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23777\"\u003e#23777\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/8d7623d9b5647714a5b20cbd787a5401ca846229\"\u003e8d7623d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebuild:\u003c/strong\u003e include preload dependencies to chunk import map hashing (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23793\"\u003e#23793\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/4d16e7c14d5e1c361f148238b1e81131238ab8e9\"\u003e4d16e7c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e apply \u003ccode\u003eserver.origin\u003c/code\u003e to asset URLs (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23683\"\u003e#23683\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/52ba877693c8633458d163117504a8259beb3cf5\"\u003e52ba877\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e declare utf-8 charset in fallback page (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23846\"\u003e#23846\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/197daf6c4c7bfdaa005bebcc41dd2ff22fa3a5b6\"\u003e197daf6\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e ignore build.chunkImportMap (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23685\"\u003e#23685\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/cfe917d67d279a13f20ae9449e3befa736b64b07\"\u003ecfe917d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e include user \u003ccode\u003eimport.meta.env.*\u003c/code\u003e defines in the \u003ccode\u003eimport.meta.env\u003c/code\u003e object (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23713\"\u003e#23713\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/6019aa79975465516da7c6f532d568422b019a25\"\u003e6019aa7\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e map forwarded error stacks through the bundle source maps (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23741\"\u003e#23741\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/11fe1e46ff0c136cb90fbe263ba03993bc94df18\"\u003e11fe1e4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e normalize served output files (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23684\"\u003e#23684\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/df4e02cc8317a62f21edefc79a9690571ffed1f3\"\u003edf4e02c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e stop hmr propagation at modules that are no longer imported (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23839\"\u003e#23839\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/7471e8c3b32d3d55243590bb7713e602c9fb0212\"\u003e7471e8c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecss:\u003c/strong\u003e don't fail on a literal \u003ccode\u003e%\u003c/code\u003e in \u003ccode\u003eurl()\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23676\"\u003e#23676\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/50b382d31835b8b4bc8b6964738ac03146e44261\"\u003e50b382d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update all non-major dependencies (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23731\"\u003e#23731\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/cf80aa552cac02eac0293330ccd5fde3c7ae8d29\"\u003ecf80aa5\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update all non-major dependencies (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23826\"\u003e#23826\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/77d8373510da1b26ce057eb2248e570b7f63fde9\"\u003e77d8373\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update rolldown-related dependencies (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23733\"\u003e#23733\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/43f0d052e514c3ad2dea2f7dc44b0720e1f62f48\"\u003e43f0d05\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update rolldown-related dependencies (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23827\"\u003e#23827\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/c2e04187e49aab7ab809989f0537b4906653acab\"\u003ec2e0418\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoptimizer:\u003c/strong\u003e fall back to yarn.lock for lockfile hash (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23667\"\u003e#23667\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/f20609630faa93026924275115d1426fdc08629e\"\u003ef206096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoptimizer:\u003c/strong\u003e scan \u003ccode\u003eoxc.jsxInject\u003c/code\u003e imports (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23758\"\u003e#23758\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/38f3cb45b1490ed24775547ceafa677b91a57714\"\u003e38f3cb4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoptimizer:\u003c/strong\u003e skip patches dir check for yarn.lock fallback (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23725\"\u003e#23725\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/8e890e1ce438bfbc07ea4931ce332e40589940fa\"\u003e8e890e1\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoptimizer:\u003c/strong\u003e skip patches dir hash for nub lockfile (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23761\"\u003e#23761\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/a7d56967ef0050a09c0507e63a18164bc7a0d486\"\u003ea7d5696\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eresolve:\u003c/strong\u003e support subpath imports with multiple \u003ccode\u003e#\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23631\"\u003e#23631\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/0d86b3485fbbd0fcb9a1f70a14adedfcb7a1fff1\"\u003e0d86b34\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eresolve:\u003c/strong\u003e update resolve.exports to 2.0.4 (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23739\"\u003e#23739\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/4ea708a3ae9a324c6aabca59fade4082bf72f3e5\"\u003e4ea708a\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eserver:\u003c/strong\u003e handle socket errors on upgrade requests not taken by the HMR server (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23728\"\u003e#23728\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/c2c9ef4dcd05b3e4d88844ea3a13dc23819ca2a5\"\u003ec2c9ef4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eserver:\u003c/strong\u003e only strip base when path matches a full segment (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23641\"\u003e#23641\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/3dfde87b90a9f80b125d710e3e5d4fc795662db6\"\u003e3dfde87\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePerformance Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003essr:\u003c/strong\u003e extract inline source maps without a regexp (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23775\"\u003e#23775\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/6a0278055d8501bbaf65b8d34ec094722b4e877a\"\u003e6a02780\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMiscellaneous Chores\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003emigrate to Oxlint (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23746\"\u003e#23746\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/5b73935881424ed5919571036dd89d3868590f92\"\u003e5b73935\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCode Refactoring\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e replace \u003ccode\u003e@vercel/detect-agent\u003c/code\u003e with \u003ccode\u003estd-env\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23744\"\u003e#23744\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/ce4293f15cc5cd221c5ed60f5cd64e82ca5cbaf5\"\u003ece4293f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edev:\u003c/strong\u003e consolidate moduleURL to file path utilities (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23828\"\u003e#23828\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/df7b40ee9d691e9f4e2413244f6665ef5482dce3\"\u003edf7b40e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edev:\u003c/strong\u003e separate import resolution from URL conversion (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23791\"\u003e#23791\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/611668983d4b717f5e5e66cf9f7125bd94f92bf7\"\u003e6116689\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edev:\u003c/strong\u003e share ModuleURL and BrowserURL conversions (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23790\"\u003e#23790\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/446954c69c806795c83fe2f97c28ae8f9ef83731\"\u003e446954c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edev:\u003c/strong\u003e use ModuleURLs throughout HTML transforms (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23815\"\u003e#23815\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/a16299092c0f0f3f90e05d4bb5f0168b293c2b52\"\u003ea162990\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://github.com/vitejs/vite/compare/v8.3.3...v8.3.4\"\u003e8.3.4\u003c/a\u003e (2026-10-08)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e support \u003ccode\u003eimport.meta.hot.acceptExports\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23463\"\u003e#23463\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/bc0f21c56a2e003a4d2dd23ccb9da3ec8c706c4e\"\u003ebc0f21c\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eavoid mutating hmr defaults (fix \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23575\"\u003e#23575\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23576\"\u003e#23576\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/574d5e351905fe99891364d03c2440531378f7fd\"\u003e574d5e3\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/981f07fa4580fb88b333c4450431e4715d2a0b82\"\u003e\u003ccode\u003e981f07f\u003c/code\u003e\u003c/a\u003e release: v8.3.5 (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23856\"\u003e#23856\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/0d86b3485fbbd0fcb9a1f70a14adedfcb7a1fff1\"\u003e\u003ccode\u003e0d86b34\u003c/code\u003e\u003c/a\u003e fix(resolve): support subpath imports with multiple \u003ccode\u003e#\u003c/code\u003e (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23631\"\u003e#23631\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/6a0278055d8501bbaf65b8d34ec094722b4e877a\"\u003e\u003ccode\u003e6a02780\u003c/code\u003e\u003c/a\u003e perf(ssr): extract inline source maps without a regexp (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23775\"\u003e#23775\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/8e890e1ce438bfbc07ea4931ce332e40589940fa\"\u003e\u003ccode\u003e8e890e1\u003c/code\u003e\u003c/a\u003e fix(optimizer): skip patches dir check for yarn.lock fallback (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23725\"\u003e#23725\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/197daf6c4c7bfdaa005bebcc41dd2ff22fa3a5b6\"\u003e\u003ccode\u003e197daf6\u003c/code\u003e\u003c/a\u003e fix(bundled-dev): declare utf-8 charset in fallback page (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23846\"\u003e#23846\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/4d16e7c14d5e1c361f148238b1e81131238ab8e9\"\u003e\u003ccode\u003e4d16e7c\u003c/code\u003e\u003c/a\u003e fix(build): include preload dependencies to chunk import map hashing (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23793\"\u003e#23793\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/df7b40ee9d691e9f4e2413244f6665ef5482dce3\"\u003e\u003ccode\u003edf7b40e\u003c/code\u003e\u003c/a\u003e refactor(dev): consolidate moduleURL to file path utilities (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23828\"\u003e#23828\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/a16299092c0f0f3f90e05d4bb5f0168b293c2b52\"\u003e\u003ccode\u003ea162990\u003c/code\u003e\u003c/a\u003e refactor(dev): use ModuleURLs throughout HTML transforms (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23815\"\u003e#23815\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/611668983d4b717f5e5e66cf9f7125bd94f92bf7\"\u003e\u003ccode\u003e6116689\u003c/code\u003e\u003c/a\u003e refactor(dev): separate import resolution from URL conversion (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23791\"\u003e#23791\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/446954c69c806795c83fe2f97c28ae8f9ef83731\"\u003e\u003ccode\u003e446954c\u003c/code\u003e\u003c/a\u003e refactor(dev): share ModuleURL and BrowserURL conversions (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23790\"\u003e#23790\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vitejs/vite/commits/v8.3.5/packages/vite\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/CLDMV/slothlet/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/CLDMV/slothlet/pull/662","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/CLDMV%2Fslothlet/issues/662","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/662/packages"},{"uuid":"6013845682","node_id":"PR_kwDOCAiJ0s8AAAABKcrA0w","number":9094,"state":"open","title":"Bump markdown-it from 14.3.1 to 14.3.3","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":["rzhao271"],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-24T14:12:11.000Z","updated_at":"2026-10-24T14:15:17.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"markdown-it","old_version":"14.3.1","new_version":"14.3.3","repository_url":"https://github.com/markdown-it/markdown-it"}],"path":null,"ecosystem":"npm"},"body":"Bumps [markdown-it](https://github.com/markdown-it/markdown-it) from 14.3.1 to 14.3.3.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/markdown-it/markdown-it/blob/14.3.3/CHANGELOG.md\"\u003emarkdown-it's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[14.3.3] - 2026-10-16\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackported 15.0.3 fixes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[14.3.2] - 2026-09-12\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackported 15.0.2 fixes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d372f0d8a68bef0b0acaa68868ce8ae8ba85b384\"\u003e\u003ccode\u003ed372f0d\u003c/code\u003e\u003c/a\u003e 14.3.3 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d99f48839d37af6fd8a2617516c43dab90755503\"\u003e\u003ccode\u003ed99f488\u003c/code\u003e\u003c/a\u003e Backported 15.0.3 fixes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/efb9993124c3eb229eea24dd659c91dcee7f6d60\"\u003e\u003ccode\u003eefb9993\u003c/code\u003e\u003c/a\u003e 14.3.2 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/daf5a3c32303e5d9de01b12eeb725fb5990b8162\"\u003e\u003ccode\u003edaf5a3c\u003c/code\u003e\u003c/a\u003e Backported 15.0.2 fixes\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/markdown-it/markdown-it/compare/14.3.1...14.3.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=markdown-it\u0026package-manager=npm_and_yarn\u0026previous-version=14.3.1\u0026new-version=14.3.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/microsoft/vscode-pull-request-github/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/microsoft/vscode-pull-request-github/pull/9094","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2Fvscode-pull-request-github/issues/9094","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/9094/packages"},{"uuid":"6009201227","node_id":"PR_kwDOT_ZWZ88AAAABKZGclw","number":392,"state":"open","title":"Bump the dependencies group across 1 directory with 6 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-24T04:12:19.000Z","updated_at":"2026-10-24T04:12:29.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"dependencies","update_count":6,"packages":[{"name":"@anthropic-ai/sdk","old_version":"0.133.0","new_version":"0.137.0","repository_url":"https://github.com/anthropics/anthropic-sdk-typescript"},{"name":"@larksuiteoapi/node-sdk","old_version":"1.74.0","new_version":"1.76.0","repository_url":"https://github.com/larksuite/node-sdk"},{"name":"markdown-it","old_version":"15.0.2","new_version":"15.0.3","repository_url":"https://github.com/markdown-it/markdown-it"},{"name":"zod","old_version":"3.25.76","new_version":"4.6.7","repository_url":"https://github.com/colinhacks/zod"},{"name":"electron","old_version":"44.7.0","new_version":"44.9.3","repository_url":"https://github.com/electron/electron"},{"name":"electron-builder","old_version":"26.15.3","new_version":"26.18.0","repository_url":"https://github.com/electron-userland/electron-builder"}],"path":null,"ecosystem":"npm"},"body":"Bumps the dependencies group with 6 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) | `0.133.0` | `0.137.0` |\n| [@larksuiteoapi/node-sdk](https://github.com/larksuite/node-sdk) | `1.74.0` | `1.76.0` |\n| [markdown-it](https://github.com/markdown-it/markdown-it) | `15.0.2` | `15.0.3` |\n| [zod](https://github.com/colinhacks/zod) | `3.25.76` | `4.6.7` |\n| [electron](https://github.com/electron/electron) | `44.7.0` | `44.9.3` |\n| [electron-builder](https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder) | `26.15.3` | `26.18.0` |\n\n\nUpdates `@anthropic-ai/sdk` from 0.133.0 to 0.137.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/anthropics/anthropic-sdk-typescript/releases\"\u003e@​anthropic-ai/sdk's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003esdk-v0.137.0\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e add org webhook endpoints and user profile enforcement events\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChores\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eci:\u003c/strong\u003e run the changelog check on a standard runner\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003etests:\u003c/strong\u003e make credential tests independent of the caller's environment\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003esdk-v0.136.0\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e add data_refreshed_at and has_more to analytics report pages\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e add workspace rate-limit updates to the Admin API\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e make User Profiles generally available\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient:\u003c/strong\u003e yield server-sent events with unrecognized event names\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003etools:\u003c/strong\u003e accept every tool definition field in the tool helpers\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eclient:\u003c/strong\u003e treat x-amz-security-token as a sensitive header\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003etools:\u003c/strong\u003e keep $ sequences literal in memory tool str_replace\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChores\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eci:\u003c/strong\u003e skip the changelog check on draft pull requests\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edocs:\u003c/strong\u003e add credential expiry descriptions to the Managed Agents API reference\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edocs:\u003c/strong\u003e add Messages API request descriptions\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edocs:\u003c/strong\u003e correct plugin manifest_version and reach descriptions\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edocs:\u003c/strong\u003e improve Managed Agents memory store descriptions\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edocs:\u003c/strong\u003e improve Managed Agents vault and credential descriptions\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003einternal:\u003c/strong\u003e bump playwright-core in the browser ecosystem tests\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003etests:\u003c/strong\u003e cover OpenTelemetry failures, propagation and environment variables\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003esdk-v0.135.0\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e add between_tools to thinking types in model capabilities\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e add the speed parameter and usage.speed to Messages\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e return a Console organization's usage-tier spend cap as a read-only spend limit\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eclient:\u003c/strong\u003e close streams dropped without being read to the end\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient:\u003c/strong\u003e keep an unread JSONL response open while it is held\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md\"\u003e@​anthropic-ai/sdk's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/anthropics/anthropic-sdk-typescript/compare/sdk-v0.136.0...sdk-v0.137.0\"\u003e0.137.0\u003c/a\u003e (2026-10-20)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e add org webhook endpoints and user profile enforcement events\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChores\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eci:\u003c/strong\u003e run the changelog check on a standard runner\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003etests:\u003c/strong\u003e make credential tests independent of the caller's environment\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/anthropics/anthropic-sdk-typescript/compare/sdk-v0.135.0...sdk-v0.136.0\"\u003e0.136.0\u003c/a\u003e (2026-10-20)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e add data_refreshed_at and has_more to analytics report pages\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e add workspace rate-limit updates to the Admin API\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e make User Profiles generally available\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient:\u003c/strong\u003e yield server-sent events with unrecognized event names\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003etools:\u003c/strong\u003e accept every tool definition field in the tool helpers\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eclient:\u003c/strong\u003e treat x-amz-security-token as a sensitive header\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003etools:\u003c/strong\u003e keep $ sequences literal in memory tool str_replace\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChores\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eci:\u003c/strong\u003e skip the changelog check on draft pull requests\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edocs:\u003c/strong\u003e add credential expiry descriptions to the Managed Agents API reference\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edocs:\u003c/strong\u003e add Messages API request descriptions\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edocs:\u003c/strong\u003e correct plugin manifest_version and reach descriptions\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edocs:\u003c/strong\u003e improve Managed Agents memory store descriptions\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edocs:\u003c/strong\u003e improve Managed Agents vault and credential descriptions\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003einternal:\u003c/strong\u003e bump playwright-core in the browser ecosystem tests\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003etests:\u003c/strong\u003e cover OpenTelemetry failures, propagation and environment variables\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/anthropics/anthropic-sdk-typescript/compare/sdk-v0.134.0...sdk-v0.135.0\"\u003e0.135.0\u003c/a\u003e (2026-10-15)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e add between_tools to thinking types in model capabilities\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e add the speed parameter and usage.speed to Messages\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e return a Console organization's usage-tier spend cap as a read-only spend limit\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anthropics/anthropic-sdk-typescript/commit/9c6562472002aa451b6f672acafd6d454e31840f\"\u003e\u003ccode\u003e9c65624\u003c/code\u003e\u003c/a\u003e release: 0.137.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anthropics/anthropic-sdk-typescript/commit/04151dbe194842210ee5e54c1f8b17806940bc92\"\u003e\u003ccode\u003e04151db\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/anthropics/anthropic-sdk-typescript/issues/970\"\u003e#970\u003c/a\u003e from anthropics/synced/published\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anthropics/anthropic-sdk-typescript/commit/5aae8cebbb01a89d831d61b56d081002ff7157b2\"\u003e\u003ccode\u003e5aae8ce\u003c/code\u003e\u003c/a\u003e feat(api): add org webhook endpoints and user profile enforcement events\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anthropics/anthropic-sdk-typescript/commit/261ead07e61b409236d54f63254a1cce4f98adc8\"\u003e\u003ccode\u003e261ead0\u003c/code\u003e\u003c/a\u003e codegen metadata\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anthropics/anthropic-sdk-typescript/commit/20d7c14e5a511aed782647fedb84f4bab619d2a6\"\u003e\u003ccode\u003e20d7c14\u003c/code\u003e\u003c/a\u003e codegen metadata\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anthropics/anthropic-sdk-typescript/commit/a7736e616eb03c8d8e1dd28f7adc8bc8177d9e42\"\u003e\u003ccode\u003ea7736e6\u003c/code\u003e\u003c/a\u003e chore(ci): run the changelog check on a standard runner\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anthropics/anthropic-sdk-typescript/commit/48ecaa4c723299fbe8bfa8f55ed87f510c134564\"\u003e\u003ccode\u003e48ecaa4\u003c/code\u003e\u003c/a\u003e Merge branch 'main'\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anthropics/anthropic-sdk-typescript/commit/accbdd899218b49fcb3b5124319e99b64d51de90\"\u003e\u003ccode\u003eaccbdd8\u003c/code\u003e\u003c/a\u003e release: packages/aws-sdk 0.9.0, packages/bedrock-sdk 0.36.0, packages/vertex...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anthropics/anthropic-sdk-typescript/commit/b00aefc99f4ee24bfa6438674249edeee996af63\"\u003e\u003ccode\u003eb00aefc\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/anthropics/anthropic-sdk-typescript/issues/968\"\u003e#968\u003c/a\u003e from anthropics/synced/published\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anthropics/anthropic-sdk-typescript/commit/521ffc1f886a5f7a2dbd0f0734fb508af080ee3a\"\u003e\u003ccode\u003e521ffc1\u003c/code\u003e\u003c/a\u003e Merge branch 'main'\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/anthropics/anthropic-sdk-typescript/compare/sdk-v0.133.0...sdk-v0.137.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@larksuiteoapi/node-sdk` from 1.74.0 to 1.76.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/larksuite/node-sdk/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `markdown-it` from 15.0.2 to 15.0.3\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/markdown-it/markdown-it/blob/master/CHANGELOG.md\"\u003emarkdown-it's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[15.0.3] - 2026-10-16\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEnforce the 999 Unicode code point limit for reference definition labels,\npartially addressing \u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1213\"\u003e#1213\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eRequire whitespace before multiline reference titles.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed quadratic complexity when parsing multiline reference definitions.\u003c/li\u003e\n\u003cli\u003eFixed quadratic complexity when parsing unclosed inline HTML comments,\nprocessing instructions, declarations and CDATA sections.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/a8c00d474ec9b304fad9b71c16d6fa8b4909279e\"\u003e\u003ccode\u003ea8c00d4\u003c/code\u003e\u003c/a\u003e 15.0.3 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/e9504a4f1cb42a09d6f4e53d12d89c96d57ee9d4\"\u003e\u003ccode\u003ee9504a4\u003c/code\u003e\u003c/a\u003e Skip pathological speed tests during coverage collection\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/46d8b52016da1c423f4bdeecaa2d69d51c4156c1\"\u003e\u003ccode\u003e46d8b52\u003c/code\u003e\u003c/a\u003e Deps bump\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/928bc8c11ded60181c0e7fc5aa954eec582e8e79\"\u003e\u003ccode\u003e928bc8c\u003c/code\u003e\u003c/a\u003e Fix quadratic inline HTML parsing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/48fbc465812c440020c663f040ab22deaf8f1eca\"\u003e\u003ccode\u003e48fbc46\u003c/code\u003e\u003c/a\u003e Fix quadratic reference parsing and partially address \u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1213\"\u003e#1213\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/markdown-it/markdown-it/compare/15.0.2...15.0.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `zod` from 3.25.76 to 4.6.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/colinhacks/zod/releases\"\u003ezod's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.6.7\u003c/h2\u003e\n\u003ch2\u003eCommits:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eb500a2ee95134f81d74da7911d7378dd2853d042 4.6.7\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev4.6.6\u003c/h2\u003e\n\u003cblockquote\u003e\n\u003cp\u003eSix malicious commits pushed to \u003ccode\u003emain\u003c/code\u003e on September 21 with a compromised git credential were reverted the same day in \u003ca href=\"https://redirect.github.com/colinhacks/zod/issues/6620\"\u003e#6620\u003c/a\u003e and have since been removed from the history of \u003ccode\u003emain\u003c/code\u003e. None were ever published to npm. The npm provenance for 4.6.6 names 284243fb, the pre-rewrite copy of 9c219833 with identical contents.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch2\u003eCommits:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e0cd3af5e9f50ad11bbcd4407a46a21b8848ba574 docs: load the en locale directly in Zod Mini\u003c/li\u003e\n\u003cli\u003e9d5e60f162997b764b40d45aa02481888db50dea docs: import locales from zod/locales, not z.locales\u003c/li\u003e\n\u003cli\u003e34a626f307871ecbb0123947559328dc52ed5e3e docs: tighten the z.locales tree-shaking note\u003c/li\u003e\n\u003cli\u003e74304ce5b5796b5edb9a88ceb8e170b6ea3e82df release: stage npm versions instead of publishing them (\u003ca href=\"https://redirect.github.com/colinhacks/zod/issues/6622\"\u003e#6622\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eb2ef983e0711ff6517d6020b021071e2e5653efa docs: add Code for Japan to bronze sponsors\u003c/li\u003e\n\u003cli\u003e8fb2faf0584828a6a027d8279db36f6f52784462 docs: crop the Code for Japan logo and list it first in bronze\u003c/li\u003e\n\u003cli\u003ebacad518c41610d654658172d325874bf0ee6290 docs: square the Code for Japan logo to match the other bronze tiles\u003c/li\u003e\n\u003cli\u003ec42596bd1c87e941d7241d10e012c5c196adcc10 release: hold the run on the release-approval environment until the staged versions are approved (\u003ca href=\"https://redirect.github.com/colinhacks/zod/issues/6638\"\u003e#6638\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ea2ba4a67986a3e6b2b131be30084a2f460d9ea67 fix(types): declare record output and input as members, not base type arguments (\u003ca href=\"https://redirect.github.com/colinhacks/zod/issues/6645\"\u003e#6645\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ea0ebf970f2d752e5f58527cd2942ff48be4f46bd fix(v4): check array, set and map size bounds before parsing elements (\u003ca href=\"https://redirect.github.com/colinhacks/zod/issues/6652\"\u003e#6652\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e529f78dd9431b07f49647fee3aa0819b3f8b66b7 4.6.6\u003c/li\u003e\n\u003cli\u003e9c219833c3a3764fa1f1ea9c5ecec8254a63c0b1 ci: stage at verbose so a failed OIDC token exchange says why\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev4.6.5\u003c/h2\u003e\n\u003ch2\u003eCommits:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ed2b135cfb7a3582b9eb515756b9166bcb9521f4a docs: add the 4.6.x patch highlights to the 4.6 post\u003c/li\u003e\n\u003cli\u003ef1448f7cee00df9fe1e9ad84a000aa1828cc8bc1 docs: fold the 4.6.x patch highlights into the 4.6 post's own sections\u003c/li\u003e\n\u003cli\u003ede65a5cb39ed22a507fac935788f718fa88d104f docs: lead the properties section with the check and add a Zod Mini tab (\u003ca href=\"https://redirect.github.com/colinhacks/zod/issues/6598\"\u003e#6598\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e56222cd1532c07bcb91b67df529cab4c0a215330 feat(instanceof): key the .properties() shape off the instance type (\u003ca href=\"https://redirect.github.com/colinhacks/zod/issues/6600\"\u003e#6600\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eca0229a404818290e6cdcfefcd7eb2d04bcbb543 Revert \u0026quot;feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (\u003ca href=\"https://redirect.github.com/colinhacks/zod/issues/6595\"\u003e#6595\u003c/a\u003e)\u0026quot;\u003c/li\u003e\n\u003cli\u003ecc4cd4ee9c52fcaa10964e48cc144541e41a5ed9 Revert \u0026quot;Revert \u0026quot;feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (\u003ca href=\"https://redirect.github.com/colinhacks/zod/issues/6595\"\u003e#6595\u003c/a\u003e)\u0026quot;\u0026quot;\u003c/li\u003e\n\u003cli\u003e0f3f5ee3ca56c7574bf849e54f79e9a6e02562ee 4.6.5\u003c/li\u003e\n\u003cli\u003e59bbc03e10c636b9eb3c393dfeb552819774ec21 chore: re-pin the integration peers to the workspace zod after the 4.6.5 bump\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev4.6.4\u003c/h2\u003e\n\u003cp\u003eA patch on top of \u003ca href=\"https://github.com/colinhacks/zod/releases/tag/v4.6.3\"\u003e4.6.3\u003c/a\u003e.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/d6bc1e30\"\u003e\u003ccode\u003ed6bc1e30\u003c/code\u003e\u003c/a\u003e feat: add \u003ccode\u003ez.currencyCode()\u003c/code\u003e over a vendored ISO 4217 list, refreshed weekly by CI (\u003ca href=\"https://redirect.github.com/colinhacks/zod/pull/6595\"\u003e#6595\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/ad32d751\"\u003e\u003ccode\u003ead32d751\u003c/code\u003e\u003c/a\u003e perf: \u003ccode\u003ez.url()\u003c/code\u003e rejects an invalid URL with \u003ccode\u003eURL.canParse()\u003c/code\u003e instead of a throwing constructor, about 50x faster; fewer allocations on the validation path (\u003ca href=\"https://redirect.github.com/colinhacks/zod/pull/6588\"\u003e#6588\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/2bb08717\"\u003e\u003ccode\u003e2bb08717\u003c/code\u003e\u003c/a\u003e chore: re-pin the integration peers to the workspace zod after the 4.6.4 bump\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/f6e1701a\"\u003e\u003ccode\u003ef6e1701a\u003c/code\u003e\u003c/a\u003e chore(deps): bump next to 15.5.25 and vite to 7.3.6 (\u003ca href=\"https://redirect.github.com/colinhacks/zod/pull/6153\"\u003e#6153\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev4.6.3\u003c/h2\u003e\n\u003cp\u003eA patch on top of \u003ca href=\"https://github.com/colinhacks/zod/releases/tag/v4.6.2\"\u003e4.6.2\u003c/a\u003e.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/413cce9a\"\u003e\u003ccode\u003e413cce9a\u003c/code\u003e\u003c/a\u003e fix(v4): make z.properties() a check again (\u003ca href=\"https://redirect.github.com/colinhacks/zod/pull/6594\"\u003e#6594\u003c/a\u003e) — removes the standalone \u003ccode\u003ez.properties()\u003c/code\u003e schema from 4.6.0; \u003ccode\u003ez.instanceof().properties()\u003c/code\u003e and \u003ccode\u003e.check(...z.properties())\u003c/code\u003e are unchanged\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/75d63ee1\"\u003e\u003ccode\u003e75d63ee1\u003c/code\u003e\u003c/a\u003e docs: show only the \u003ccode\u003e.properties()\u003c/code\u003e method form in the 4.6 post\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/46da9572\"\u003e\u003ccode\u003e46da9572\u003c/code\u003e\u003c/a\u003e docs: match the error-message examples to what the parsers emit\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/b500a2ee95134f81d74da7911d7378dd2853d042\"\u003e\u003ccode\u003eb500a2e\u003c/code\u003e\u003c/a\u003e 4.6.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/9c219833c3a3764fa1f1ea9c5ecec8254a63c0b1\"\u003e\u003ccode\u003e9c21983\u003c/code\u003e\u003c/a\u003e ci: stage at verbose so a failed OIDC token exchange says why\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/529f78dd9431b07f49647fee3aa0819b3f8b66b7\"\u003e\u003ccode\u003e529f78d\u003c/code\u003e\u003c/a\u003e 4.6.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/a0ebf970f2d752e5f58527cd2942ff48be4f46bd\"\u003e\u003ccode\u003ea0ebf97\u003c/code\u003e\u003c/a\u003e fix(v4): check array, set and map size bounds before parsing elements (\u003ca href=\"https://redirect.github.com/colinhacks/zod/issues/6652\"\u003e#6652\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/a2ba4a67986a3e6b2b131be30084a2f460d9ea67\"\u003e\u003ccode\u003ea2ba4a6\u003c/code\u003e\u003c/a\u003e fix(types): declare record output and input as members, not base type argumen...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/c42596bd1c87e941d7241d10e012c5c196adcc10\"\u003e\u003ccode\u003ec42596b\u003c/code\u003e\u003c/a\u003e release: hold the run on the release-approval environment until the staged ve...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/bacad518c41610d654658172d325874bf0ee6290\"\u003e\u003ccode\u003ebacad51\u003c/code\u003e\u003c/a\u003e docs: square the Code for Japan logo to match the other bronze tiles\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/8fb2faf0584828a6a027d8279db36f6f52784462\"\u003e\u003ccode\u003e8fb2faf\u003c/code\u003e\u003c/a\u003e docs: crop the Code for Japan logo and list it first in bronze\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/b2ef983e0711ff6517d6020b021071e2e5653efa\"\u003e\u003ccode\u003eb2ef983\u003c/code\u003e\u003c/a\u003e docs: add Code for Japan to bronze sponsors\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/74304ce5b5796b5edb9a88ceb8e170b6ea3e82df\"\u003e\u003ccode\u003e74304ce\u003c/code\u003e\u003c/a\u003e release: stage npm versions instead of publishing them (\u003ca href=\"https://redirect.github.com/colinhacks/zod/issues/6622\"\u003e#6622\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/colinhacks/zod/compare/v3.25.76...v4.6.7\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for zod since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `electron` from 44.7.0 to 44.9.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/electron/electron/releases\"\u003eelectron's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eelectron v44.9.3\u003c/h2\u003e\n\u003ch1\u003eRelease Notes for v44.9.3\u003c/h1\u003e\n\u003ch2\u003eOther Changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBackported fixes from upstream ANGLE, Chromium, PDFium, Skia and V8. \u003ca href=\"https://redirect.github.com/electron/electron/pull/55149\"\u003e#55149\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eelectron v44.9.2\u003c/h2\u003e\n\u003ch1\u003eRelease Notes for v44.9.2\u003c/h1\u003e\n\u003ch2\u003eelectron v44.9.1\u003c/h2\u003e\n\u003ch1\u003eRelease Notes for v44.9.1\u003c/h1\u003e\n\u003cblockquote\u003e\n\u003cp\u003e[!NOTE]\nThis release contains the fix for \u003ca href=\"https://github.com/electron/electron/security/advisories/GHSA-jr5w-w6x2-84p9\"\u003ehttps://github.com/electron/electron/security/advisories/GHSA-jr5w-w6x2-84p9\u003c/a\u003e, the mitigation for compromised eMudhra intermediate certificates\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch2\u003eelectron v44.9.0\u003c/h2\u003e\n\u003ch1\u003eRelease Notes for v44.9.0\u003c/h1\u003e\n\u003ch2\u003eFeatures\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded app shims on macOS to show windows under another app's Dock icon. \u003ca href=\"https://redirect.github.com/electron/electron/pull/55073\"\u003e#55073\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/55072\"\u003e45\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eFixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed link-opened windows not using the opener's session and \u003ccode\u003ewebPreferences\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/electron/electron/pull/55048\"\u003e#55048\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/55050\"\u003e42\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/55049\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/55051\"\u003e45\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003esetCertificateVerifyProc\u003c/code\u003e occasionally not being applied to a request issued concurrently with the first request to a host. \u003ca href=\"https://redirect.github.com/electron/electron/pull/55046\"\u003e#55046\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/55054\"\u003e42\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/55047\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/55045\"\u003e45\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eelectron v44.8.0\u003c/h2\u003e\n\u003ch1\u003eRelease Notes for v44.8.0\u003c/h1\u003e\n\u003ch2\u003eFeatures\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded support for \u003ccode\u003eNotification\u003c/code\u003e action buttons on Linux. \u003ca href=\"https://redirect.github.com/electron/electron/pull/54890\"\u003e#54890\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/54889\"\u003e45\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eFixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed mouse cursor missing over native dialogs in certain scenarios on Windows. \u003ca href=\"https://redirect.github.com/electron/electron/pull/54987\"\u003e#54987\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003enet.fetch\u003c/code\u003e and \u003ccode\u003esession.fetch\u003c/code\u003e failing permanently with \u003ccode\u003enet::ERR_FAILED\u003c/code\u003e after the Network Service process restarts. \u003ca href=\"https://redirect.github.com/electron/electron/pull/54909\"\u003e#54909\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/54925\"\u003e42\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/54908\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/54910\"\u003e45\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003eutilityProcess\u003c/code\u003e dropping messages posted with \u003ccode\u003eprocess.parentPort.postMessage()\u003c/code\u003e right before the process exits. \u003ca href=\"https://redirect.github.com/electron/electron/pull/54960\"\u003e#54960\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/55000\"\u003e42\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/54962\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/54956\"\u003e45\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003ewin.isFullScreen()\u003c/code\u003e being stale in fullscreen events on Windows. \u003ca href=\"https://redirect.github.com/electron/electron/pull/55009\"\u003e#55009\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/55008\"\u003e45\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eOther Changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBackported fixes from upstream Chromium and V8. \u003ca href=\"https://redirect.github.com/electron/electron/pull/55034\"\u003e#55034\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdated Chromium to 152.0.7977.167. \u003ca href=\"https://redirect.github.com/electron/electron/pull/54928\"\u003e#54928\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdated Node.js to v24.22.0. \u003ca href=\"https://redirect.github.com/electron/electron/pull/55004\"\u003e#55004\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eelectron v44.7.2\u003c/h2\u003e\n\u003ch1\u003eRelease Notes for v44.7.2\u003c/h1\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/c542df1ecbc2c2978e8f53f8c7baf602404d166f\"\u003e\u003ccode\u003ec542df1\u003c/code\u003e\u003c/a\u003e chore: cherry-pick 69 changes from angle, chromium, pdfium, skia and v8 (\u003ca href=\"https://redirect.github.com/electron/electron/issues/55149\"\u003e#55149\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/8fc5329d830f65597038cb4398b375ce2347f964\"\u003e\u003ccode\u003e8fc5329\u003c/code\u003e\u003c/a\u003e test: fix unload-IPC and protocol.handle 'is fast' flakes (\u003ca href=\"https://redirect.github.com/electron/electron/issues/55133\"\u003e#55133\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/093af96cb9a394ab6ac81acc8ac18b2d32abdc53\"\u003e\u003ccode\u003e093af96\u003c/code\u003e\u003c/a\u003e test: wait for the parent's ack before utility children exit (\u003ca href=\"https://redirect.github.com/electron/electron/issues/55124\"\u003e#55124\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/5cfb78c4f8aa4f81939637607e3c265d7b827faf\"\u003e\u003ccode\u003e5cfb78c\u003c/code\u003e\u003c/a\u003e docs: add UIPI note for setIgnoreMouseEvents forward option (\u003ca href=\"https://redirect.github.com/electron/electron/issues/55113\"\u003e#55113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/e02265be96c5e13ae43644ef482b718e1e800499\"\u003e\u003ccode\u003ee02265b\u003c/code\u003e\u003c/a\u003e fix: apply the certificate SPKI blocklist to Node and add entries (44-x-y) (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/0545d89b3fa2d8a1fe548b344f6694736d28eed9\"\u003e\u003ccode\u003e0545d89\u003c/code\u003e\u003c/a\u003e test: replace fix_crypto_tests_to_run_with_bssl.patch with upstream backport ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/0ec830ff79229d00772a039426f63b27148a99d9\"\u003e\u003ccode\u003e0ec830f\u003c/code\u003e\u003c/a\u003e docs: fix code block line highlighting after docs reformats (\u003ca href=\"https://redirect.github.com/electron/electron/issues/55102\"\u003e#55102\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/68ddc646a86e2e7cd8a10cc6dd083e3c39f93112\"\u003e\u003ccode\u003e68ddc64\u003c/code\u003e\u003c/a\u003e test: re-enable Node.js tests that now pass with BoringSSL (\u003ca href=\"https://redirect.github.com/electron/electron/issues/55095\"\u003e#55095\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/cb2bde2455a55ae8dc18b743f099209cda5cf345\"\u003e\u003ccode\u003ecb2bde2\u003c/code\u003e\u003c/a\u003e build: stop overriding node GN declare_args defaults in patch (\u003ca href=\"https://redirect.github.com/electron/electron/issues/55077\"\u003e#55077\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/aa16ac272c2393d5ae16a07cf0d328d570228786\"\u003e\u003ccode\u003eaa16ac2\u003c/code\u003e\u003c/a\u003e build: update PGO profiles (\u003ca href=\"https://redirect.github.com/electron/electron/issues/55090\"\u003e#55090\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/electron/electron/compare/v44.7.0...v44.9.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `electron-builder` from 26.15.3 to 26.18.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/electron-userland/electron-builder/releases\"\u003eelectron-builder's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eelectron-builder@26.18.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(nsis): warn when differentialPackage \u0026quot;store-asar\u0026quot; finds no app.asar (v26 backport of \u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/10246\"\u003e#10246\u003c/a\u003e) by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10249\"\u003eelectron-userland/electron-builder#10249\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest(archive): make stored-member assertions independent of 7-Zip folder order (v26 backport of \u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/10247\"\u003e#10247\u003c/a\u003e) by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10251\"\u003eelectron-userland/electron-builder#10251\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(nsis): keep installer extraction in sync with the payload format when useZip is set (v26 backport of \u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/10248\"\u003e#10248\u003c/a\u003e) by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10252\"\u003eelectron-userland/electron-builder#10252\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(pnpm): read the app's own package.json when its name matches a dependency (v26 backport of \u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/10278\"\u003e#10278\u003c/a\u003e) by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10282\"\u003eelectron-userland/electron-builder#10282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: import blake2b from \u003ccode\u003e@noble/hashes/blake2.js\u003c/code\u003e by \u003ca href=\"https://github.com/mmaietta\"\u003e\u003ccode\u003e@​mmaietta\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10292\"\u003eelectron-userland/electron-builder#10292\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: encode GitLab package path segments (v26 backport of \u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/10140\"\u003e#10140\u003c/a\u003e) by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10299\"\u003eelectron-userland/electron-builder#10299\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(updater): validate cached update filenames (v26 backport of \u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/10115\"\u003e#10115\u003c/a\u003e) by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10300\"\u003eelectron-userland/electron-builder#10300\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: escape Squirrel project URLs in nuspec XML (v26 backport of \u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/10141\"\u003e#10141\u003c/a\u003e) by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10301\"\u003eelectron-userland/electron-builder#10301\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: enforce workspace path boundaries for asar (v26 backport of \u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/10135\"\u003e#10135\u003c/a\u003e) by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10314\"\u003eelectron-userland/electron-builder#10314\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(app-builder-lib): bump \u003ccode\u003e@​electron/rebuild\u003c/code\u003e to 4.2.1 (v26 backport of \u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/10308\"\u003e#10308\u003c/a\u003e) by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10315\"\u003eelectron-userland/electron-builder#10315\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(blockmap): finer content-defined blocks for the stored app.asar region (v26 backport of \u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/10235\"\u003e#10235\u003c/a\u003e) by \u003ca href=\"https://github.com/imlucas\"\u003e\u003ccode\u003e@​imlucas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10309\"\u003eelectron-userland/electron-builder#10309\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(pnpm): collect packages that \u003ccode\u003epnpm list\u003c/code\u003e only prints as deduped stubs by \u003ca href=\"https://github.com/mmaietta\"\u003e\u003ccode\u003e@​mmaietta\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10323\"\u003eelectron-userland/electron-builder#10323\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: contain mapped app file destinations (v26 backport of \u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/10137\"\u003e#10137\u003c/a\u003e) by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10330\"\u003eelectron-userland/electron-builder#10330\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(snap): don't request allow-sandbox by default for core24 (v26 backport of \u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/10294\"\u003e#10294\u003c/a\u003e) by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10331\"\u003eelectron-userland/electron-builder#10331\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(snap): don't delete chrome-sandbox from the shared linux-unpacked dir in template builds (v26 backport of \u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/10327\"\u003e#10327\u003c/a\u003e) by \u003ca href=\"https://github.com/yokomohoyo\"\u003e\u003ccode\u003e@​yokomohoyo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10333\"\u003eelectron-userland/electron-builder#10333\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(forge): make electron-builder makers loadable by current Electron Forge (v26 backport) by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10352\"\u003eelectron-userland/electron-builder#10352\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deploy): Release (v26) by \u003ca href=\"https://github.com/electron-builder-release-bot\"\u003e\u003ccode\u003e@​electron-builder-release-bot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10250\"\u003eelectron-userland/electron-builder#10250\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/electron-userland/electron-builder/compare/electron-builder@26.17.0...electron-builder@26.18.0\"\u003ehttps://github.com/electron-userland/electron-builder/compare/electron-builder@26.17.0...electron-builder@26.18.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eelectron-builder@26.17.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: detect pnpm workspace root on Windows without shelling out to pwd (v26 backport) by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10189\"\u003eelectron-userland/electron-builder#10189\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: pin globTest \u0026quot;failed peer dep\u0026quot; deps via lockfile fixture and update snapshot for moment 2.31.0 (v26 backport of \u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/10197\"\u003e#10197\u003c/a\u003e) by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10198\"\u003eelectron-userland/electron-builder#10198\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(nsis): \u0026quot;store-asar\u0026quot; mode for proportional differential updates (v26 backport) by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10201\"\u003eelectron-userland/electron-builder#10201\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest(v26): bump package manager pins and disable dependency lifecycle scripts in fixture installs (backport \u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/10199\"\u003e#10199\u003c/a\u003e) by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10203\"\u003eelectron-userland/electron-builder#10203\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(app-builder-lib): resolve pnpm deps omitted from deduped list output by declared range (backport \u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/10200\"\u003e#10200\u003c/a\u003e) by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10207\"\u003eelectron-userland/electron-builder#10207\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(pkg): add rootVolumeOnly to \u003c!-- raw HTML omitted --\u003e for macOS 26 Installer prompt (v26 backport of \u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/10193\"\u003e#10193\u003c/a\u003e) by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10211\"\u003eelectron-userland/electron-builder#10211\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(node-module-collector): clear error on empty output and fall back to traversal when a collector throws (v26 backport of \u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/10210\"\u003e#10210\u003c/a\u003e) by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10213\"\u003eelectron-userland/electron-builder#10213\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(electron-updater): keep cached blockmap consistent with cached installer (v26 backport of \u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/10098\"\u003e#10098\u003c/a\u003e) by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10163\"\u003eelectron-userland/electron-builder#10163\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(updater): make multi-range differential downloads work on real servers (v26 backport of \u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/10192\"\u003e#10192\u003c/a\u003e) by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10219\"\u003eelectron-userland/electron-builder#10219\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(flatpak): stop linux.files from corrupting flatpak files (v26 backport of \u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/10209\"\u003e#10209\u003c/a\u003e + \u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/10227\"\u003e#10227\u003c/a\u003e) by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10229\"\u003eelectron-userland/electron-builder#10229\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(pnpm-collector): pick in-range nested deps with pnpm 11 hoisted layout (v26) by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10230\"\u003eelectron-userland/electron-builder#10230\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deploy): Release (v26) by \u003ca href=\"https://github.com/electron-builder-release-bot\"\u003e\u003ccode\u003e@​electron-builder-release-bot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10191\"\u003eelectron-userland/electron-builder#10191\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/electron-userland/electron-builder/compare/electron-builder@26.16.1...electron-builder@26.17.0\"\u003ehttps://github.com/electron-userland/electron-builder/compare/electron-builder@26.16.1...electron-builder@26.17.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eelectron-builder@26.16.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(squirrel): backport elevate.exe appOutDir race fix to v26 (\u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/9852\"\u003e#9852\u003c/a\u003e) by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10157\"\u003eelectron-userland/electron-builder#10157\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(mac): use keychain password for set-key-partition-list (v26 backport of \u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/10101\"\u003e#10101\u003c/a\u003e) by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10172\"\u003eelectron-userland/electron-builder#10172\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(win): only log \u0026quot;signing with signtool.exe\u0026quot; when signing actually runs by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10171\"\u003eelectron-userland/electron-builder#10171\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(CI): auto-label PRs targeting backports to release/v26 (\u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/10158\"\u003e#10158\u003c/a\u003e) by \u003ca href=\"https://github.com/mmaietta\"\u003e\u003ccode\u003e@​mmaietta\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10166\"\u003eelectron-userland/electron-builder#10166\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(mac): Retain Electron and Chromium license files on macOS (v26 backport of \u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/10174\"\u003e#10174\u003c/a\u003e) by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10177\"\u003eelectron-userland/electron-builder#10177\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: prevent infinite recursion in node module collection when a package depends on itself (backport \u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/10070\"\u003e#10070\u003c/a\u003e to v26) by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10180\"\u003eelectron-userland/electron-builder#10180\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deploy): Release (v26) by \u003ca href=\"https://github.com/electron-builder-release-bot\"\u003e\u003ccode\u003e@​electron-builder-release-bot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10165\"\u003eelectron-userland/electron-builder#10165\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/electron-userland/electron-builder/blob/electron-builder@26.18.0/packages/electron-builder/CHANGELOG.md\"\u003eelectron-builder's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e26.18.0\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/electron-userland/electron-builder/commit/206d35dc31bc1e55b39e7b13003c0e384fcae926\"\u003e\u003ccode\u003e206d35d\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/electron-userland/electron-builder/commit/3dc7c902a7cd43eed547808b6a610971b9cd65da\"\u003e\u003ccode\u003e3dc7c90\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/electron-userland/electron-builder/commit/e703212e1a5325be9edbedc71015f130a7d42edc\"\u003e\u003ccode\u003ee703212\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/electron-userland/electron-builder/commit/84f7b463ef71e390dd8d6ca20ef0dbb18d1e8932\"\u003e\u003ccode\u003e84f7b46\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/electron-userland/electron-builder/commit/6202a271c2373eb5721acf2416098cd1dff73f83\"\u003e\u003ccode\u003e6202a27\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/electron-userland/electron-builder/commit/fcd6897810846ee8dc367f0abacf34e4eb5a10fb\"\u003e\u003ccode\u003efcd6897\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/electron-userland/electron-builder/commit/160c3b405ff1e193eadd4d6d76049e23ce334ebd\"\u003e\u003ccode\u003e160c3b4\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/electron-userland/electron-builder/commit/1928adfcceca4414656f6acd65ee1c66c38545ad\"\u003e\u003ccode\u003e1928adf\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/electron-userland/electron-builder/commit/c60987c538598118d89ea9cede383a06dc2743b8\"\u003e\u003ccode\u003ec60987c\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/electron-userland/electron-builder/commit/a92517ae572ee0e17496680a533e836f7772852d\"\u003e\u003ccode\u003ea92517a\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/electron-userland/electron-builder/commit/a1e9db847832c4edf5279903c6958a5f984da83c\"\u003e\u003ccode\u003ea1e9db8\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/electron-userland/electron-builder/commit/4123c2792ac8f43820266cbfab724be852f0fa42\"\u003e\u003ccode\u003e4123c27\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eapp-builder-lib@26.18.0\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003edmg-builder@26.18.0\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003e26.17.0\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/electron-userland/electron-builder/commit/bae1c8bcd138c7aa5f575106ca0f8ea22e7dd2a4\"\u003e\u003ccode\u003ebae1c8b\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/electron-userland/electron-builder/commit/2a2dd22c17006ec80acf4704642ca83378e5fdb1\"\u003e\u003ccode\u003e2a2dd22\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/electron-userland/electron-builder/commit/07c83447d9f6915a18e66b676a378b0786357d80\"\u003e\u003ccode\u003e07c8344\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/electron-userland/electron-builder/commit/07c83447d9f6915a18e66b676a378b0786357d80\"\u003e\u003ccode\u003e07c8344\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/electron-userland/electron-builder/commit/613cd587dfc405344989eb0452ddc9281a9164ba\"\u003e\u003ccode\u003e613cd58\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/electron-userland/electron-builder/commit/d4a4f501fd136cb6f69339040ada56a0cabc74b6\"\u003e\u003ccode\u003ed4a4f50\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/electron-userland/electron-builder/commit/41a027ce590dfff24e935861577fc58a16595e31\"\u003e\u003ccode\u003e41a027c\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/electron-userland/electron-builder/commit/59f63644f80381f018c91246762caee7586ab126\"\u003e\u003ccode\u003e59f6364\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eapp-builder-lib@26.17.0\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003edmg-builder@26.17.0\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003e26.16.1\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/electron-userland/electron-builder/commit/b9b2e8afe5bfb975c8551b19a3cf8a68e58df4a5\"\u003e\u003ccode\u003eb9b2e8a\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/electron-userland/electron-builder/commit/d6d4125ba636ad2edcd7ddb01d74ddf75a855727\"\u003e\u003ccode\u003ed6d4125\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/electron-userland/electron-builder/commit/a4ec75f919b839c0a4afcee3f7fa526681e128d4\"\u003e\u003ccode\u003ea4ec75f\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/electron-userland/electron-builder/commit/5ae5a02f7ce83e7f47e1bfa660b2dc7e95081d24\"\u003e\u003ccode\u003e5ae5a02\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/electron-userland/electron-builder/commit/7c04b358b249841e362f6f71bd20de478c3d86c4\"\u003e\u003ccode\u003e7c04b35\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eapp-builder-lib@26.16.1\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003edmg-builder@26.16.1\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron-userland/electron-builder/commit/e2a8604535bdc626bd068ddf5b6afb67bed45725\"\u003e\u003ccode\u003ee2a8604\u003c/code\u003e\u003c/a\u003e chore(deploy): Release v26.18.0 (electron-updater@6.8.11) (v26) (\u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/10250\"\u003e#10250\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron-userland/electron-builder/commit/5cdf0178759fa9619e47e5a0b3c203e2961b2411\"\u003e\u003ccode\u003e5cdf017\u003c/code\u003e\u003c/a\u003e chore(deploy): Release v26.17.0 (electron-updater@6.8.10) (v26) (\u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/10191\"\u003e#10191\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron-userland/electron-builder/commit/7d3b30f3b15950d19f7c5ff882cf2d161cd3ba2c\"\u003e\u003ccode\u003e7d3b30f\u003c/code\u003e\u003c/a\u003e chore(deploy): Release v26.16.1 (\u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/10165\"\u003e#10165\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron-userland/electron-builder/commit/f4610970f78b6ce223b1f4cee2b5e8f5caa14a48\"\u003e\u003ccode\u003ef461097\u003c/code\u003e\u003c/a\u003e chore(deploy): Release v26.16.0 (\u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/10059\"\u003e#10059\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron-userland/electron-builder/commit/ce825f1283950ca56e2ab345ec755599fa0d470e\"\u003e\u003ccode\u003ece825f1\u003c/code\u003e\u003c/a\u003e chore(deploy): Release v26.15.7 (\u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/10005\"\u003e#10005\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron-userland/electron-builder/commit/026bbdaffbab7aef558e061c46094c6672db33bb\"\u003e\u003ccode\u003e026bbda\u003c/code\u003e\u003c/a\u003e chore(deploy): Release v26.15.6 (\u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/9952\"\u003e#9952\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron-userland/electron-builder/commit/8d4a5784a93cc77cdc91d521a37a10e842c6e021\"\u003e\u003ccode\u003e8d4a578\u003c/code\u003e\u003c/a\u003e chore(deploy): Release v26.15.5 (\u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/9938\"\u003e#9938\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron-userland/electron-builder/commit/3332d51be99eab944809d91ae6cd5fb33c94470e\"\u003e\u003ccode\u003e3332d51\u003c/code\u003e\u003c/a\u003e chore(deploy): Release v26.15.4 (\u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/9919\"\u003e#9919\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/electron-userland/electron-builder/commits/electron-builder@26.18.0/packages/electron-builder\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/fakechris/lumenbox/pull/392","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/fakechris%2Flumenbox/issues/392","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/392/packages"},{"uuid":"6005917973","node_id":"PR_kwDOTDGnhM8AAAABKWgCag","number":412,"state":"open","title":"chore(deps): bump markdown-it from 14.3.2 to 14.3.3","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-23T21:45:39.000Z","updated_at":"2026-10-23T21:46:35.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"markdown-it","old_version":"14.3.2","new_version":"14.3.3","repository_url":"https://github.com/markdown-it/markdown-it"}],"path":null,"ecosystem":"npm"},"body":"Bumps [markdown-it](https://github.com/markdown-it/markdown-it) from 14.3.2 to 14.3.3.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/markdown-it/markdown-it/blob/14.3.3/CHANGELOG.md\"\u003emarkdown-it's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[14.3.3] - 2026-10-16\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackported 15.0.3 fixes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d372f0d8a68bef0b0acaa68868ce8ae8ba85b384\"\u003e\u003ccode\u003ed372f0d\u003c/code\u003e\u003c/a\u003e 14.3.3 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d99f48839d37af6fd8a2617516c43dab90755503\"\u003e\u003ccode\u003ed99f488\u003c/code\u003e\u003c/a\u003e Backported 15.0.3 fixes\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/markdown-it/markdown-it/compare/14.3.2...14.3.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=markdown-it\u0026package-manager=npm_and_yarn\u0026previous-version=14.3.2\u0026new-version=14.3.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/daytona/clients/network/alerts).\n\n\u003c/details\u003e\n\n\u003c!-- This is an auto-generated description by cubic. --\u003e\n---\n## Summary by cubic\nUpdates `markdown-it` from 14.3.2 to 14.3.3 to include security fixes backported from 15.0.3. Only `yarn.lock` changes; no code changes are required.\n\n\u003csup\u003eWritten for commit 1d0c620d0b968d8e23a955a0ee55a3a74f6ae818. Summary will update on new commits.\u003c/sup\u003e\n\n\u003ca href=\"https://cubic.dev/pr/daytona/clients/pull/412?utm_source=github\" target=\"_blank\" rel=\"noopener noreferrer\" data-no-image-dialog=\"true\"\u003e\u003cpicture\u003e\u003csource media=\"(prefers-color-scheme: dark)\" srcset=\"https://www.cubic.dev/buttons/review-in-cubic-dark.svg\"\u003e\u003csource media=\"(prefers-color-scheme: light)\" srcset=\"https://www.cubic.dev/buttons/review-in-cubic-light.svg\"\u003e\u003cimg alt=\"View guided diff\" src=\"https://www.cubic.dev/buttons/review-in-cubic-light.svg\"\u003e\u003c/picture\u003e\u003c/a\u003e \u003ca href=\"https://www.cubic.dev/action/auto-fix/pr/daytona/clients/412?returnTo=https%3A%2F%2Fgithub.com%2Fdaytona%2Fclients%2Fpull%2F412\u0026source=description\" target=\"_blank\" rel=\"noopener noreferrer\" data-no-image-dialog=\"true\"\u003e\u003cpicture\u003e\u003csource media=\"(prefers-color-scheme: dark)\" srcset=\"https://www.cubic.dev/buttons/turn-on-auto-fix-dark.svg\"\u003e\u003csource media=\"(prefers-color-scheme: light)\" srcset=\"https://www.cubic.dev/buttons/turn-on-auto-fix-light.svg\"\u003e\u003cimg alt=\"Turn on auto-fix\" src=\"https://www.cubic.dev/buttons/turn-on-auto-fix-light.svg\"\u003e\u003c/picture\u003e\u003c/a\u003e\n\n\u003c!-- End of auto-generated description by cubic. --\u003e\n\n","html_url":"https://github.com/daytona/clients/pull/412","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/daytona%2Fclients/issues/412","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/412/packages"},{"uuid":"5992775077","node_id":"PR_kwDOB-TIiM8AAAABKL6mgQ","number":1468,"state":"open","title":"chore(deps-dev): bump markdown-it from 14.3.2 to 14.3.3","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":4,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-23T06:00:37.000Z","updated_at":"2026-10-23T06:03:00.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps-dev)","packages":[{"name":"markdown-it","old_version":"14.3.2","new_version":"14.3.3","repository_url":"https://github.com/markdown-it/markdown-it"}],"path":null,"ecosystem":"npm"},"body":"Bumps [markdown-it](https://github.com/markdown-it/markdown-it) from 14.3.2 to 14.3.3.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/markdown-it/markdown-it/blob/14.3.3/CHANGELOG.md\"\u003emarkdown-it's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[14.3.3] - 2026-10-16\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackported 15.0.3 fixes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d372f0d8a68bef0b0acaa68868ce8ae8ba85b384\"\u003e\u003ccode\u003ed372f0d\u003c/code\u003e\u003c/a\u003e 14.3.3 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d99f48839d37af6fd8a2617516c43dab90755503\"\u003e\u003ccode\u003ed99f488\u003c/code\u003e\u003c/a\u003e Backported 15.0.3 fixes\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/markdown-it/markdown-it/compare/14.3.2...14.3.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=markdown-it\u0026package-manager=npm_and_yarn\u0026previous-version=14.3.2\u0026new-version=14.3.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/remeda/remeda/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/remeda/remeda/pull/1468","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/remeda%2Fremeda/issues/1468","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1468/packages"},{"uuid":"5992475498","node_id":"PR_kwDOTK_xp88AAAABKLrWUg","number":14,"state":"open","title":"chore(deps): bump markdown-it from 14.3.1 to 14.3.3","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-23T05:30:48.000Z","updated_at":"2026-10-23T05:31:18.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"markdown-it","old_version":"14.3.1","new_version":"14.3.3","repository_url":"https://github.com/markdown-it/markdown-it"}],"path":null,"ecosystem":"npm"},"body":"Bumps [markdown-it](https://github.com/markdown-it/markdown-it) from 14.3.1 to 14.3.3.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/markdown-it/markdown-it/blob/14.3.3/CHANGELOG.md\"\u003emarkdown-it's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[14.3.3] - 2026-10-16\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackported 15.0.3 fixes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[14.3.2] - 2026-09-12\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackported 15.0.2 fixes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d372f0d8a68bef0b0acaa68868ce8ae8ba85b384\"\u003e\u003ccode\u003ed372f0d\u003c/code\u003e\u003c/a\u003e 14.3.3 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d99f48839d37af6fd8a2617516c43dab90755503\"\u003e\u003ccode\u003ed99f488\u003c/code\u003e\u003c/a\u003e Backported 15.0.3 fixes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/efb9993124c3eb229eea24dd659c91dcee7f6d60\"\u003e\u003ccode\u003eefb9993\u003c/code\u003e\u003c/a\u003e 14.3.2 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/daf5a3c32303e5d9de01b12eeb725fb5990b8162\"\u003e\u003ccode\u003edaf5a3c\u003c/code\u003e\u003c/a\u003e Backported 15.0.2 fixes\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/markdown-it/markdown-it/compare/14.3.1...14.3.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=markdown-it\u0026package-manager=npm_and_yarn\u0026previous-version=14.3.1\u0026new-version=14.3.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/skaniti/compendium/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/skaniti/compendium/pull/14","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/skaniti%2Fcompendium/issues/14","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/14/packages"},{"uuid":"5992214642","node_id":"PR_kwDOSAHfKM8AAAABKLeCvw","number":143,"state":"open","title":"chore(deps): bump markdown-it from 14.3.2 to 14.3.3 in the security group across 1 directory","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-23T05:03:39.000Z","updated_at":"2026-10-23T05:08:42.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"markdown-it","old_version":"14.3.2","new_version":"14.3.3","repository_url":"https://github.com/markdown-it/markdown-it"}],"path":"the security group across 1 directory","ecosystem":"npm"},"body":"Bumps the security group with 1 update in the / directory: [markdown-it](https://github.com/markdown-it/markdown-it).\n\nUpdates `markdown-it` from 14.3.2 to 14.3.3\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/markdown-it/markdown-it/blob/14.3.3/CHANGELOG.md\"\u003emarkdown-it's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[14.3.3] - 2026-10-16\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackported 15.0.3 fixes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d372f0d8a68bef0b0acaa68868ce8ae8ba85b384\"\u003e\u003ccode\u003ed372f0d\u003c/code\u003e\u003c/a\u003e 14.3.3 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d99f48839d37af6fd8a2617516c43dab90755503\"\u003e\u003ccode\u003ed99f488\u003c/code\u003e\u003c/a\u003e Backported 15.0.3 fixes\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/markdown-it/markdown-it/compare/14.3.2...14.3.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=markdown-it\u0026package-manager=npm_and_yarn\u0026previous-version=14.3.2\u0026new-version=14.3.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/qruto/nuxt-backend/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/qruto/nuxt-backend/pull/143","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/qruto%2Fnuxt-backend/issues/143","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/143/packages"},{"uuid":"5992210165","node_id":"PR_kwDOPYHjRs8AAAABKLdz2g","number":229,"state":"open","title":"build(deps): bump markdown-it from 14.3.2 to 14.3.3","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-23T05:03:16.000Z","updated_at":"2026-10-23T05:03:25.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"markdown-it","old_version":"14.3.2","new_version":"14.3.3","repository_url":"https://github.com/markdown-it/markdown-it"}],"path":null,"ecosystem":"npm"},"body":"Bumps [markdown-it](https://github.com/markdown-it/markdown-it) from 14.3.2 to 14.3.3.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/markdown-it/markdown-it/blob/14.3.3/CHANGELOG.md\"\u003emarkdown-it's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[14.3.3] - 2026-10-16\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackported 15.0.3 fixes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d372f0d8a68bef0b0acaa68868ce8ae8ba85b384\"\u003e\u003ccode\u003ed372f0d\u003c/code\u003e\u003c/a\u003e 14.3.3 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d99f48839d37af6fd8a2617516c43dab90755503\"\u003e\u003ccode\u003ed99f488\u003c/code\u003e\u003c/a\u003e Backported 15.0.3 fixes\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/markdown-it/markdown-it/compare/14.3.2...14.3.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=markdown-it\u0026package-manager=npm_and_yarn\u0026previous-version=14.3.2\u0026new-version=14.3.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Keinsleif/sbsp/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/Keinsleif/sbsp/pull/229","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Keinsleif%2Fsbsp/issues/229","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/229/packages"},{"uuid":"5992018768","node_id":"PR_kwDORGYnZs8AAAABKLUGkQ","number":2408,"state":"closed","title":"feat(deps): bump markdown-it from 14.3.2 to 14.3.3","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":4,"pull_request":true,"closed_at":"2026-10-23T04:46:24.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-23T04:42:53.000Z","updated_at":"2026-10-23T04:46:33.000Z","time_to_close":211,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"feat(deps)","packages":[{"name":"markdown-it","old_version":"14.3.2","new_version":"14.3.3","repository_url":"https://github.com/markdown-it/markdown-it"}],"path":null,"ecosystem":"npm"},"body":"Bumps [markdown-it](https://github.com/markdown-it/markdown-it) from 14.3.2 to 14.3.3.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/markdown-it/markdown-it/blob/14.3.3/CHANGELOG.md\"\u003emarkdown-it's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[14.3.3] - 2026-10-16\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackported 15.0.3 fixes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d372f0d8a68bef0b0acaa68868ce8ae8ba85b384\"\u003e\u003ccode\u003ed372f0d\u003c/code\u003e\u003c/a\u003e 14.3.3 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d99f48839d37af6fd8a2617516c43dab90755503\"\u003e\u003ccode\u003ed99f488\u003c/code\u003e\u003c/a\u003e Backported 15.0.3 fixes\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/markdown-it/markdown-it/compare/14.3.2...14.3.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=markdown-it\u0026package-manager=npm_and_yarn\u0026previous-version=14.3.2\u0026new-version=14.3.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/andymai/brepjs/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/andymai/brepjs/pull/2408","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/andymai%2Fbrepjs/issues/2408","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/2408/packages"},{"uuid":"5983583324","node_id":"PR_kwDOMV92088AAAABKEmHYA","number":154,"state":"open","title":"chore(vscode): bump markdown-it from 14.3.2 to 14.3.3 in /editors/vscode","user":"dependabot[bot]","labels":["dependencies"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-22T16:42:14.000Z","updated_at":"2026-10-22T16:42:19.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(vscode)","packages":[{"name":"markdown-it","old_version":"14.3.2","new_version":"14.3.3","repository_url":"https://github.com/markdown-it/markdown-it"}],"path":"/editors/vscode","ecosystem":"npm"},"body":"Bumps [markdown-it](https://github.com/markdown-it/markdown-it) from 14.3.2 to 14.3.3.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/markdown-it/markdown-it/blob/14.3.3/CHANGELOG.md\"\u003emarkdown-it's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[14.3.3] - 2026-10-16\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackported 15.0.3 fixes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d372f0d8a68bef0b0acaa68868ce8ae8ba85b384\"\u003e\u003ccode\u003ed372f0d\u003c/code\u003e\u003c/a\u003e 14.3.3 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d99f48839d37af6fd8a2617516c43dab90755503\"\u003e\u003ccode\u003ed99f488\u003c/code\u003e\u003c/a\u003e Backported 15.0.3 fixes\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/markdown-it/markdown-it/compare/14.3.2...14.3.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=markdown-it\u0026package-manager=npm_and_yarn\u0026previous-version=14.3.2\u0026new-version=14.3.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Cliftonz/jarvy/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/Cliftonz/jarvy/pull/154","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Cliftonz%2Fjarvy/issues/154","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/154/packages"},{"uuid":"5975111503","node_id":"PR_kwDOBpoVaM8AAAABJ927Jg","number":56,"state":"open","title":"build(deps): bump markdown-it from 14.3.2 to 14.3.3 in / csharp/language/abstractions/composition","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-22T07:36:23.000Z","updated_at":"2026-10-22T19:09:26.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"markdown-it","old_version":"14.3.2","new_version":"14.3.3","repository_url":"https://github.com/markdown-it/markdown-it"}],"path":"/ csharp/language/abstractions/composition","ecosystem":"npm"},"body":"Bumps [markdown-it](https://github.com/markdown-it/markdown-it) from 14.3.2 to 14.3.3.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/markdown-it/markdown-it/blob/14.3.3/CHANGELOG.md\"\u003emarkdown-it's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[14.3.3] - 2026-10-16\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackported 15.0.3 fixes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d372f0d8a68bef0b0acaa68868ce8ae8ba85b384\"\u003e\u003ccode\u003ed372f0d\u003c/code\u003e\u003c/a\u003e 14.3.3 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d99f48839d37af6fd8a2617516c43dab90755503\"\u003e\u003ccode\u003ed99f488\u003c/code\u003e\u003c/a\u003e Backported 15.0.3 fixes\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/markdown-it/markdown-it/compare/14.3.2...14.3.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=markdown-it\u0026package-manager=npm_and_yarn\u0026previous-version=14.3.2\u0026new-version=14.3.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/RLittlesII/talks/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/RLittlesII/talks/pull/56","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/RLittlesII%2Ftalks/issues/56","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/56/packages"},{"uuid":"5973779136","node_id":"PR_kwDOBwbS1c8AAAABJ8zNYw","number":247,"state":"open","title":"Bump markdown-it from 14.3.2 to 14.3.3 in /blocks","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-22T05:41:59.000Z","updated_at":"2026-10-22T05:43:04.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"markdown-it","old_version":"14.3.2","new_version":"14.3.3","repository_url":"https://github.com/markdown-it/markdown-it"}],"path":"/blocks","ecosystem":"npm"},"body":"Bumps [markdown-it](https://github.com/markdown-it/markdown-it) from 14.3.2 to 14.3.3.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/markdown-it/markdown-it/blob/14.3.3/CHANGELOG.md\"\u003emarkdown-it's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[14.3.3] - 2026-10-16\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackported 15.0.3 fixes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d372f0d8a68bef0b0acaa68868ce8ae8ba85b384\"\u003e\u003ccode\u003ed372f0d\u003c/code\u003e\u003c/a\u003e 14.3.3 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d99f48839d37af6fd8a2617516c43dab90755503\"\u003e\u003ccode\u003ed99f488\u003c/code\u003e\u003c/a\u003e Backported 15.0.3 fixes\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/markdown-it/markdown-it/compare/14.3.2...14.3.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=markdown-it\u0026package-manager=npm_and_yarn\u0026previous-version=14.3.2\u0026new-version=14.3.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/cardknox/woocommerce-gateway-cardknox/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/cardknox/woocommerce-gateway-cardknox/pull/247","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/cardknox%2Fwoocommerce-gateway-cardknox/issues/247","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/247/packages"},{"uuid":"5973755033","node_id":"PR_kwDOAfawqs8AAAABJ8x-yQ","number":11259,"state":"open","title":"build(deps-dev): bump markdown-it from 14.3.2 to 14.3.3 in /src/api/js","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-22T05:39:32.000Z","updated_at":"2026-10-22T05:42:19.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps-dev)","packages":[{"name":"markdown-it","old_version":"14.3.2","new_version":"14.3.3","repository_url":"https://github.com/markdown-it/markdown-it"}],"path":"/src/api/js","ecosystem":"npm"},"body":"Bumps [markdown-it](https://github.com/markdown-it/markdown-it) from 14.3.2 to 14.3.3.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/markdown-it/markdown-it/blob/14.3.3/CHANGELOG.md\"\u003emarkdown-it's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[14.3.3] - 2026-10-16\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackported 15.0.3 fixes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d372f0d8a68bef0b0acaa68868ce8ae8ba85b384\"\u003e\u003ccode\u003ed372f0d\u003c/code\u003e\u003c/a\u003e 14.3.3 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d99f48839d37af6fd8a2617516c43dab90755503\"\u003e\u003ccode\u003ed99f488\u003c/code\u003e\u003c/a\u003e Backported 15.0.3 fixes\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/markdown-it/markdown-it/compare/14.3.2...14.3.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=markdown-it\u0026package-manager=npm_and_yarn\u0026previous-version=14.3.2\u0026new-version=14.3.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Z3Prover/z3/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/Z3Prover/z3/pull/11259","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Z3Prover%2Fz3/issues/11259","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/11259/packages"},{"uuid":"5973519973","node_id":"PR_kwDOJztUYs8AAAABJ8mGXA","number":1019,"state":"closed","title":"build(deps-dev): bump markdown-it from 14.3.2 to 14.3.3","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-10-22T05:16:52.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-22T05:15:43.000Z","updated_at":"2026-10-22T05:17:20.000Z","time_to_close":69,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps-dev)","packages":[{"name":"markdown-it","old_version":"14.3.2","new_version":"14.3.3","repository_url":"https://github.com/markdown-it/markdown-it"}],"path":null,"ecosystem":"npm"},"body":"Bumps [markdown-it](https://github.com/markdown-it/markdown-it) from 14.3.2 to 14.3.3.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/markdown-it/markdown-it/blob/14.3.3/CHANGELOG.md\"\u003emarkdown-it's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[14.3.3] - 2026-10-16\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackported 15.0.3 fixes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d372f0d8a68bef0b0acaa68868ce8ae8ba85b384\"\u003e\u003ccode\u003ed372f0d\u003c/code\u003e\u003c/a\u003e 14.3.3 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d99f48839d37af6fd8a2617516c43dab90755503\"\u003e\u003ccode\u003ed99f488\u003c/code\u003e\u003c/a\u003e Backported 15.0.3 fixes\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/markdown-it/markdown-it/compare/14.3.2...14.3.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=markdown-it\u0026package-manager=npm_and_yarn\u0026previous-version=14.3.2\u0026new-version=14.3.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/encrypit/file64/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/encrypit/file64/pull/1019","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/encrypit%2Ffile64/issues/1019","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1019/packages"},{"uuid":"5973163112","node_id":"PR_kwDOTa6AWc8AAAABJ8UBjw","number":13,"state":"closed","title":"⬆️ Bump markdown-it from 14.3.2 to 14.3.3 in the npm_and_yarn group across 1 directory","user":"dependabot[bot]","labels":["configuration","dependencies","javascript"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-10-22T04:39:27.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-22T04:39:07.000Z","updated_at":"2026-10-22T04:42:45.000Z","time_to_close":20,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"⬆️ Bump","packages":[{"name":"markdown-it","old_version":"14.3.2","new_version":"14.3.3","repository_url":"https://github.com/markdown-it/markdown-it"}],"path":"the npm_and_yarn group across 1 directory","ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 1 update in the / directory: [markdown-it](https://github.com/markdown-it/markdown-it).\n\nUpdates `markdown-it` from 14.3.2 to 14.3.3\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/markdown-it/markdown-it/blob/14.3.3/CHANGELOG.md\"\u003emarkdown-it's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[14.3.3] - 2026-10-16\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackported 15.0.3 fixes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d372f0d8a68bef0b0acaa68868ce8ae8ba85b384\"\u003e\u003ccode\u003ed372f0d\u003c/code\u003e\u003c/a\u003e 14.3.3 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d99f48839d37af6fd8a2617516c43dab90755503\"\u003e\u003ccode\u003ed99f488\u003c/code\u003e\u003c/a\u003e Backported 15.0.3 fixes\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/markdown-it/markdown-it/compare/14.3.2...14.3.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=markdown-it\u0026package-manager=npm_and_yarn\u0026previous-version=14.3.2\u0026new-version=14.3.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Nick2bad4u/pre-commit-config-nick2bad4u/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/Nick2bad4u/pre-commit-config-nick2bad4u/pull/13","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Nick2bad4u%2Fpre-commit-config-nick2bad4u/issues/13","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/13/packages"},{"uuid":"5972809647","node_id":"PR_kwDOTRDfOc8AAAABJ8CMUg","number":13,"state":"closed","title":"⬆️ Bump markdown-it from 14.3.2 to 14.3.3 in the npm_and_yarn group across 1 directory","user":"dependabot[bot]","labels":["configuration","dependencies","javascript"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-10-22T04:01:54.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-22T04:01:37.000Z","updated_at":"2026-10-22T04:02:42.000Z","time_to_close":17,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"⬆️ Bump","packages":[{"name":"markdown-it","old_version":"14.3.2","new_version":"14.3.3","repository_url":"https://github.com/markdown-it/markdown-it"}],"path":"the npm_and_yarn group across 1 directory","ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 1 update in the / directory: [markdown-it](https://github.com/markdown-it/markdown-it).\n\nUpdates `markdown-it` from 14.3.2 to 14.3.3\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/markdown-it/markdown-it/blob/14.3.3/CHANGELOG.md\"\u003emarkdown-it's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[14.3.3] - 2026-10-16\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackported 15.0.3 fixes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d372f0d8a68bef0b0acaa68868ce8ae8ba85b384\"\u003e\u003ccode\u003ed372f0d\u003c/code\u003e\u003c/a\u003e 14.3.3 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d99f48839d37af6fd8a2617516c43dab90755503\"\u003e\u003ccode\u003ed99f488\u003c/code\u003e\u003c/a\u003e Backported 15.0.3 fixes\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/markdown-it/markdown-it/compare/14.3.2...14.3.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=markdown-it\u0026package-manager=npm_and_yarn\u0026previous-version=14.3.2\u0026new-version=14.3.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Nick2bad4u/nick2bad4u-repo-template/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/Nick2bad4u/nick2bad4u-repo-template/pull/13","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Nick2bad4u%2Fnick2bad4u-repo-template/issues/13","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/13/packages"},{"uuid":"5972774389","node_id":"PR_kwDOADBpFc8AAAABJ8Ab8A","number":2402,"state":"closed","title":"build: bump markdown-it from 14.3.2 to 14.3.3","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-10-22T03:58:32.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-22T03:57:42.000Z","updated_at":"2026-10-22T03:59:50.000Z","time_to_close":50,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build","packages":[{"name":"markdown-it","old_version":"14.3.2","new_version":"14.3.3","repository_url":"https://github.com/markdown-it/markdown-it"}],"path":null,"ecosystem":"npm"},"body":"Bumps [markdown-it](https://github.com/markdown-it/markdown-it) from 14.3.2 to 14.3.3.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/markdown-it/markdown-it/blob/14.3.3/CHANGELOG.md\"\u003emarkdown-it's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[14.3.3] - 2026-10-16\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackported 15.0.3 fixes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d372f0d8a68bef0b0acaa68868ce8ae8ba85b384\"\u003e\u003ccode\u003ed372f0d\u003c/code\u003e\u003c/a\u003e 14.3.3 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d99f48839d37af6fd8a2617516c43dab90755503\"\u003e\u003ccode\u003ed99f488\u003c/code\u003e\u003c/a\u003e Backported 15.0.3 fixes\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/markdown-it/markdown-it/compare/14.3.2...14.3.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=markdown-it\u0026package-manager=npm_and_yarn\u0026previous-version=14.3.2\u0026new-version=14.3.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/fb55/entities/network/alerts).\n\n\u003c/details\u003e\n\n\u003c!-- This is an auto-generated description by cubic. --\u003e\n\u003ca href=\"https://cubic.dev/pr/fb55/entities/pull/2402?utm_source=github\" target=\"_blank\" rel=\"noopener noreferrer\" data-no-image-dialog=\"true\"\u003e\u003cpicture\u003e\u003csource media=\"(prefers-color-scheme: dark)\" srcset=\"https://www.cubic.dev/buttons/review-in-cubic-dark.svg\"\u003e\u003csource media=\"(prefers-color-scheme: light)\" srcset=\"https://www.cubic.dev/buttons/review-in-cubic-light.svg\"\u003e\u003cimg alt=\"View guided diff\" src=\"https://www.cubic.dev/buttons/review-in-cubic-light.svg\"\u003e\u003c/picture\u003e\u003c/a\u003e \u003ca href=\"https://www.cubic.dev/action/auto-fix/pr/fb55/entities/2402?returnTo=https%3A%2F%2Fgithub.com%2Ffb55%2Fentities%2Fpull%2F2402\u0026source=description\" target=\"_blank\" rel=\"noopener noreferrer\" data-no-image-dialog=\"true\"\u003e\u003cpicture\u003e\u003csource media=\"(prefers-color-scheme: dark)\" srcset=\"https://www.cubic.dev/buttons/turn-on-auto-fix-dark.svg\"\u003e\u003csource media=\"(prefers-color-scheme: light)\" srcset=\"https://www.cubic.dev/buttons/turn-on-auto-fix-light.svg\"\u003e\u003cimg alt=\"Turn on auto-fix\" src=\"https://www.cubic.dev/buttons/turn-on-auto-fix-light.svg\"\u003e\u003c/picture\u003e\u003c/a\u003e\n\u003c!-- End of auto-generated description by cubic. --\u003e\n\n","html_url":"https://github.com/fb55/entities/pull/2402","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/fb55%2Fentities/issues/2402","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/2402/packages"}],"issue_packages":[{"old_version":"15.0.2","new_version":"15.0.3","update_type":"patch","path":null,"pr_created_at":"2026-10-26T04:32:14.000Z","version_change":"15.0.2 → 15.0.3","issue":{"uuid":"6033385995","node_id":"PR_kwDOQ7n3x88AAAABKr5i1g","number":107,"state":"open","title":"build(deps): bump the npm-dependencies group across 1 directory with 25 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-26T04:32:14.000Z","updated_at":"2026-10-26T04:32:25.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps): bump","group_name":"npm-dependencies","update_count":25,"packages":[{"name":"@clerk/clerk-js","old_version":"6.31.1","new_version":"6.40.0","repository_url":"https://github.com/clerk/javascript"},{"name":"@kenjiuno/msgreader","old_version":"1.28.0","new_version":"1.29.0","repository_url":"https://github.com/HiraokaHyperTools/msgreader"},{"name":"cropperjs","old_version":"2.2.0","new_version":"2.3.1","repository_url":"https://github.com/fengyuanchen/cropperjs"},{"name":"i18next","old_version":"26.4.2","new_version":"26.5.6","repository_url":"https://github.com/i18next/i18next"},{"name":"i18next-http-backend","old_version":"4.0.2","new_version":"4.0.4","repository_url":"https://github.com/i18next/i18next-http-backend"},{"name":"jspdf-autotable","old_version":"5.0.8","new_version":"5.0.9","repository_url":"https://github.com/simonbengtsson/jsPDF-AutoTable"},{"name":"lucide","old_version":"1.44.0","new_version":"1.61.0","repository_url":"https://github.com/lucide-icons/lucide"},{"name":"markdown-it","old_version":"15.0.2","new_version":"15.0.3","repository_url":"https://github.com/markdown-it/markdown-it"},{"name":"mermaid","old_version":"12.0.0","new_version":"12.2.0","repository_url":"https://github.com/mermaid-js/mermaid"},{"name":"motion","old_version":"13.2.0","new_version":"14.6.0","repository_url":"https://github.com/motiondivision/motion"},{"name":"pdfjs-dist","old_version":"6.3.289","new_version":"6.4.299","repository_url":"https://github.com/mozilla/pdf.js"},{"name":"postal-mime","old_version":"3.0.0","new_version":"4.1.4","repository_url":"https://github.com/postalsys/postal-mime"},{"name":"@testing-library/dom","old_version":"10.4.1","new_version":"10.4.2","repository_url":"https://github.com/testing-library/dom-testing-library"},{"name":"@types/pdfkit","old_version":"0.17.6","new_version":"0.17.7","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"@vitest/coverage-v8","old_version":"5.0.0","new_version":"5.0.5","repository_url":"https://github.com/vitest-dev/vitest"},{"name":"@vitest/ui","old_version":"5.0.0","new_version":"5.0.5","repository_url":"https://github.com/vitest-dev/vitest"},{"name":"eslint","old_version":"10.10.0","new_version":"10.13.0","repository_url":"https://github.com/eslint/eslint"},{"name":"globals","old_version":"17.12.0","new_version":"17.13.0","repository_url":"https://github.com/sindresorhus/globals"},{"name":"jsdom","old_version":"30.0.1","new_version":"30.1.3","repository_url":"https://github.com/jsdom/jsdom"},{"name":"lint-staged","old_version":"17.5.1","new_version":"17.6.0","repository_url":"https://github.com/lint-staged/lint-staged"},{"name":"prettier","old_version":"3.9.6","new_version":"3.9.10","repository_url":"https://github.com/prettier/prettier"},{"name":"typescript-eslint","old_version":"8.70.0","new_version":"8.72.0","repository_url":"https://github.com/typescript-eslint/typescript-eslint"},{"name":"vite","old_version":"8.3.0","new_version":"8.3.5","repository_url":"https://github.com/vitejs/vite"},{"name":"vitest","old_version":"5.0.0","new_version":"5.0.5","repository_url":"https://github.com/vitest-dev/vitest"},{"name":"vue","old_version":"3.5.42","new_version":"3.5.44","repository_url":"https://github.com/vuejs/core"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm-dependencies group with 25 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [@clerk/clerk-js](https://github.com/clerk/javascript/tree/HEAD/packages/clerk-js) | `6.31.1` | `6.40.0` |\n| [@kenjiuno/msgreader](https://github.com/HiraokaHyperTools/msgreader) | `1.28.0` | `1.29.0` |\n| [cropperjs](https://github.com/fengyuanchen/cropperjs/tree/HEAD/packages/cropperjs) | `2.2.0` | `2.3.1` |\n| [i18next](https://github.com/i18next/i18next) | `26.4.2` | `26.5.6` |\n| [i18next-http-backend](https://github.com/i18next/i18next-http-backend) | `4.0.2` | `4.0.4` |\n| [jspdf-autotable](https://github.com/simonbengtsson/jsPDF-AutoTable) | `5.0.8` | `5.0.9` |\n| [lucide](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide) | `1.44.0` | `1.61.0` |\n| [markdown-it](https://github.com/markdown-it/markdown-it) | `15.0.2` | `15.0.3` |\n| [mermaid](https://github.com/mermaid-js/mermaid) | `12.0.0` | `12.2.0` |\n| [motion](https://github.com/motiondivision/motion) | `13.2.0` | `14.6.0` |\n| [pdfjs-dist](https://github.com/mozilla/pdf.js) | `6.3.289` | `6.4.299` |\n| [postal-mime](https://github.com/postalsys/postal-mime) | `3.0.0` | `4.1.4` |\n| [@testing-library/dom](https://github.com/testing-library/dom-testing-library) | `10.4.1` | `10.4.2` |\n| [@types/pdfkit](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/pdfkit) | `0.17.6` | `0.17.7` |\n| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `5.0.0` | `5.0.5` |\n| [@vitest/ui](https://github.com/vitest-dev/vitest/tree/HEAD/packages/ui) | `5.0.0` | `5.0.5` |\n| [eslint](https://github.com/eslint/eslint) | `10.10.0` | `10.13.0` |\n| [globals](https://github.com/sindresorhus/globals) | `17.12.0` | `17.13.0` |\n| [jsdom](https://github.com/jsdom/jsdom) | `30.0.1` | `30.1.3` |\n| [lint-staged](https://github.com/lint-staged/lint-staged) | `17.5.1` | `17.6.0` |\n| [prettier](https://github.com/prettier/prettier) | `3.9.6` | `3.9.10` |\n| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.70.0` | `8.72.0` |\n| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.3.0` | `8.3.5` |\n| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `5.0.0` | `5.0.5` |\n| [vue](https://github.com/vuejs/core) | `3.5.42` | `3.5.44` |\n\n\nUpdates `@clerk/clerk-js` from 6.31.1 to 6.40.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/clerk/javascript/releases\"\u003e@​clerk/clerk-js's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ccode\u003e@​clerk/clerk-js\u003c/code\u003e\u003ca href=\"https://github.com/6\"\u003e\u003ccode\u003e@​6\u003c/code\u003e\u003c/a\u003e.40.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eSupport passkeys as a second factor during sign-in and session reverification. (\u003ca href=\"https://redirect.github.com/clerk/javascript/pull/9127\"\u003e#9127\u003c/a\u003e) by \u003ca href=\"https://github.com/dmoerner\"\u003e\u003ccode\u003e@​dmoerner\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eWhen a user has a passkey, the prebuilt \u003ccode\u003e\u0026lt;SignIn/\u0026gt;\u003c/code\u003e and \u003ccode\u003e\u0026lt;UserVerification/\u0026gt;\u003c/code\u003e\ncomponents preselect it as the second factor, as they already do for the first\nfactor. Other methods stay available under \u0026quot;Use another method\u0026quot;.\u003c/p\u003e\n\u003cp\u003eTo use it, your instance must allow passkeys to satisfy the second factor. This\nis on by default for instances created after 2026-07-08, and can be turned on\nin the Dashboard for older ones. Web apps also need to opt in to the passkey\nsecond factor update in the Dashboard.\u003c/p\u003e\n\u003cp\u003eIf you build a custom flow, \u003ccode\u003esupportedSecondFactors\u003c/code\u003e can now include \u003ccode\u003epasskey\u003c/code\u003e.\nCall \u003ccode\u003esignIn.authenticateWithPasskey()\u003c/code\u003e to complete it.\u003c/p\u003e\n\u003cp\u003ePasskeys are no longer preselected, for either factor, where the SDK reports\nthat WebAuthn is unavailable (for example, Electron apps without passkey\nsupport enabled).\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies [\u003ca href=\"https://github.com/clerk/javascript/commit/e5cfdffc768f99a3be50a10ef247f5dbe8b3ed18\"\u003e\u003ccode\u003ee5cfdff\u003c/code\u003e\u003c/a\u003e]:\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​clerk/shared\u003c/code\u003e\u003ca href=\"https://github.com/4\"\u003e\u003ccode\u003e@​4\u003c/code\u003e\u003c/a\u003e.41.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ccode\u003e@​clerk/clerk-js\u003c/code\u003e\u003ca href=\"https://github.com/6\"\u003e\u003ccode\u003e@​6\u003c/code\u003e\u003c/a\u003e.39.1\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eFix \u003ccode\u003eoidcPrompt\u003c/code\u003e being ignored for OAuth strategies in \u003ccode\u003esignIn.sso()\u003c/code\u003e and \u003ccode\u003esignIn.authenticateWithRedirect()\u003c/code\u003e. The value is now sent when the sign-in is created, so a prompt such as \u003ccode\u003eselect_account\u003c/code\u003e reaches the OAuth provider. (\u003ca href=\"https://redirect.github.com/clerk/javascript/pull/10125\"\u003e#10125\u003c/a\u003e) by \u003ca href=\"https://github.com/wobsoriano\"\u003e\u003ccode\u003e@​wobsoriano\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ccode\u003esession.getToken()\u003c/code\u003e no longer skips the network request when \u003ccode\u003enavigator.onLine\u003c/code\u003e reports \u003ccode\u003efalse\u003c/code\u003e. Some environments, such as Chrome behind certain VPN clients, can report offline while the network works, which caused every token refresh to fail with \u003ccode\u003eclerk_offline\u003c/code\u003e. HTTP errors from the Frontend API, including ones with non-JSON bodies such as a proxy's HTML 502, are now surfaced as-is instead of being relabeled as \u003ccode\u003eClerkOfflineError\u003c/code\u003e. When a resource cache is configured (e.g. Expo), a 5xx response during startup now falls back to the cached resources, and non-JSON 5xx responses no longer clear the Chrome extension's stored development browser token. (\u003ca href=\"https://redirect.github.com/clerk/javascript/pull/10264\"\u003e#10264\u003c/a\u003e) by \u003ca href=\"https://github.com/paulogdm\"\u003e\u003ccode\u003e@​paulogdm\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/clerk/javascript/blob/main/packages/clerk-js/CHANGELOG.md\"\u003e@​clerk/clerk-js's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e6.40.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eSupport passkeys as a second factor during sign-in and session reverification. (\u003ca href=\"https://redirect.github.com/clerk/javascript/pull/9127\"\u003e#9127\u003c/a\u003e) by \u003ca href=\"https://github.com/dmoerner\"\u003e\u003ccode\u003e@​dmoerner\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eWhen a user has a passkey, the prebuilt \u003ccode\u003e\u0026lt;SignIn/\u0026gt;\u003c/code\u003e and \u003ccode\u003e\u0026lt;UserVerification/\u0026gt;\u003c/code\u003e\ncomponents preselect it as the second factor, as they already do for the first\nfactor. Other methods stay available under \u0026quot;Use another method\u0026quot;.\u003c/p\u003e\n\u003cp\u003eTo use it, your instance must allow passkeys to satisfy the second factor. This\nis on by default for instances created after 2026-07-08, and can be turned on\nin the Dashboard for older ones. Web apps also need to opt in to the passkey\nsecond factor update in the Dashboard.\u003c/p\u003e\n\u003cp\u003eIf you build a custom flow, \u003ccode\u003esupportedSecondFactors\u003c/code\u003e can now include \u003ccode\u003epasskey\u003c/code\u003e.\nCall \u003ccode\u003esignIn.authenticateWithPasskey()\u003c/code\u003e to complete it.\u003c/p\u003e\n\u003cp\u003ePasskeys are no longer preselected, for either factor, where the SDK reports\nthat WebAuthn is unavailable (for example, Electron apps without passkey\nsupport enabled).\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies [\u003ca href=\"https://github.com/clerk/javascript/commit/e5cfdffc768f99a3be50a10ef247f5dbe8b3ed18\"\u003e\u003ccode\u003ee5cfdff\u003c/code\u003e\u003c/a\u003e]:\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​clerk/shared\u003c/code\u003e\u003ca href=\"https://github.com/4\"\u003e\u003ccode\u003e@​4\u003c/code\u003e\u003c/a\u003e.41.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e6.39.1\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eFix \u003ccode\u003eoidcPrompt\u003c/code\u003e being ignored for OAuth strategies in \u003ccode\u003esignIn.sso()\u003c/code\u003e and \u003ccode\u003esignIn.authenticateWithRedirect()\u003c/code\u003e. The value is now sent when the sign-in is created, so a prompt such as \u003ccode\u003eselect_account\u003c/code\u003e reaches the OAuth provider. (\u003ca href=\"https://redirect.github.com/clerk/javascript/pull/10125\"\u003e#10125\u003c/a\u003e) by \u003ca href=\"https://github.com/wobsoriano\"\u003e\u003ccode\u003e@​wobsoriano\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ccode\u003esession.getToken()\u003c/code\u003e no longer skips the network request when \u003ccode\u003enavigator.onLine\u003c/code\u003e reports \u003ccode\u003efalse\u003c/code\u003e. Some environments, such as Chrome behind certain VPN clients, can report offline while the network works, which caused every token refresh to fail with \u003ccode\u003eclerk_offline\u003c/code\u003e. HTTP errors from the Frontend API, including ones with non-JSON bodies such as a proxy's HTML 502, are now surfaced as-is instead of being relabeled as \u003ccode\u003eClerkOfflineError\u003c/code\u003e. When a resource cache is configured (e.g. Expo), a 5xx response during startup now falls back to the cached resources, and non-JSON 5xx responses no longer clear the Chrome extension's stored development browser token. (\u003ca href=\"https://redirect.github.com/clerk/javascript/pull/10264\"\u003e#10264\u003c/a\u003e) by \u003ca href=\"https://github.com/paulogdm\"\u003e\u003ccode\u003e@​paulogdm\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e6.39.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd a role mapping step to the self-serve Directory Sync setup in \u003ccode\u003e\u0026lt;OrganizationProfile /\u0026gt;\u003c/code\u003e. Organization admins can now assign an organization role to each directory group their identity provider pushes, set which group wins when a member belongs to several, and turn role syncing on or off. Members in no mapped group keep the organization's default role. The step is read-only for members without the \u003ccode\u003eorg:sys_memberships:manage\u003c/code\u003e permission and while the organization's role set is being migrated. (\u003ca href=\"https://redirect.github.com/clerk/javascript/pull/10081\"\u003e#10081\u003c/a\u003e) by \u003ca href=\"https://github.com/kalafut\"\u003e\u003ccode\u003e@​kalafut\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eAdd an \u003ccode\u003eenterpriseConnectionsUrl\u003c/code\u003e option to \u003ccode\u003ehandleRedirectCallback()\u003c/code\u003e and \u003ccode\u003e\u0026lt;AuthenticateWithRedirectCallback /\u0026gt;\u003c/code\u003e. When the Clerk API asks an OAuth sign-up to choose between several enterprise connections for the same email domain, the callback navigates to this URL, which defaults to the \u003ccode\u003eenterprise-connections\u003c/code\u003e route of your sign-up page. (\u003ca href=\"https://redirect.github.com/clerk/javascript/pull/9947\"\u003e#9947\u003c/a\u003e) by \u003ca href=\"https://github.com/NicolasLopes7\"\u003e\u003ccode\u003e@​NicolasLopes7\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eUpdated dependencies [\u003ca href=\"https://github.com/clerk/javascript/commit/dcb03d3c6d4597b029e39ef3eebc2ec681bb48b1\"\u003e\u003ccode\u003edcb03d3\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/clerk/javascript/commit/31c1930f0d4933cf952133c784692cb5159a7659\"\u003e\u003ccode\u003e31c1930\u003c/code\u003e\u003c/a\u003e]:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​clerk/shared\u003c/code\u003e\u003ca href=\"https://github.com/4\"\u003e\u003ccode\u003e@​4\u003c/code\u003e\u003c/a\u003e.40.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e6.38.1\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/clerk/javascript/commit/ec91b9b1826328a327154d0f56ea928f57c277a7\"\u003e\u003ccode\u003eec91b9b\u003c/code\u003e\u003c/a\u003e ci(repo): Version packages (\u003ca href=\"https://github.com/clerk/javascript/tree/HEAD/packages/clerk-js/issues/10283\"\u003e#10283\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/clerk/javascript/commit/e5cfdffc768f99a3be50a10ef247f5dbe8b3ed18\"\u003e\u003ccode\u003ee5cfdff\u003c/code\u003e\u003c/a\u003e feat(clerk-js,ui,shared,localizations): Support passkey as a second factor (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/clerk/javascript/commit/0c7e63b489a355a75cf87784e8f5f6e1ad28233a\"\u003e\u003ccode\u003e0c7e63b\u003c/code\u003e\u003c/a\u003e ci(repo): Version packages (\u003ca href=\"https://github.com/clerk/javascript/tree/HEAD/packages/clerk-js/issues/10274\"\u003e#10274\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/clerk/javascript/commit/560ff507af494b43210fd2d9a7bd109c4eb6902c\"\u003e\u003ccode\u003e560ff50\u003c/code\u003e\u003c/a\u003e fix(clerk-js): don't trust navigator.onLine to skip token fetches (\u003ca href=\"https://github.com/clerk/javascript/tree/HEAD/packages/clerk-js/issues/10264\"\u003e#10264\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/clerk/javascript/commit/c0ba3bc728d76bd40f80c2c4c506cbfeb5d0807a\"\u003e\u003ccode\u003ec0ba3bc\u003c/code\u003e\u003c/a\u003e fix(clerk-js): send oidcPrompt when creating an OAuth sign-in (\u003ca href=\"https://github.com/clerk/javascript/tree/HEAD/packages/clerk-js/issues/10125\"\u003e#10125\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/clerk/javascript/commit/f9aa91e611a271b0c8e9ebc9cc3075f1d255172c\"\u003e\u003ccode\u003ef9aa91e\u003c/code\u003e\u003c/a\u003e fix(ui): sign in a returning user after a sign-up verification challenge (\u003ca href=\"https://github.com/clerk/javascript/tree/HEAD/packages/clerk-js/issues/10\"\u003e#10\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/clerk/javascript/commit/a0ea2707532f8b4e03df8eae322a936f4ab0d35b\"\u003e\u003ccode\u003ea0ea270\u003c/code\u003e\u003c/a\u003e ci(repo): Version packages (\u003ca href=\"https://github.com/clerk/javascript/tree/HEAD/packages/clerk-js/issues/10155\"\u003e#10155\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/clerk/javascript/commit/dcb03d3c6d4597b029e39ef3eebc2ec681bb48b1\"\u003e\u003ccode\u003edcb03d3\u003c/code\u003e\u003c/a\u003e feat(ui,clerk-js,shared): add a role mapping step to the Directory Sync wizar...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/clerk/javascript/commit/31c1930f0d4933cf952133c784692cb5159a7659\"\u003e\u003ccode\u003e31c1930\u003c/code\u003e\u003c/a\u003e feat(clerk-js): route OAuth callbacks to the enterprise connection chooser (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/clerk/javascript/commit/ff81d5a96232547a73c85a92c3d88822c1d86586\"\u003e\u003ccode\u003eff81d5a\u003c/code\u003e\u003c/a\u003e ci(repo): Version packages (\u003ca href=\"https://github.com/clerk/javascript/tree/HEAD/packages/clerk-js/issues/10074\"\u003e#10074\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/clerk/javascript/commits/@clerk/clerk-js@6.40.0/packages/clerk-js\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@kenjiuno/msgreader` from 1.28.0 to 1.29.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/HiraokaHyperTools/msgreader/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `cropperjs` from 2.2.0 to 2.3.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/fengyuanchen/cropperjs/releases\"\u003ecropperjs's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.3.1\u003c/h2\u003e\n\u003cp\u003eSee \u003ca href=\"https://github.com/fengyuanchen/cropperjs/blob/main/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev2.3.0\u003c/h2\u003e\n\u003cp\u003eSee \u003ca href=\"https://github.com/fengyuanchen/cropperjs/blob/main/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/fengyuanchen/cropperjs/blob/main/CHANGELOG.md\"\u003ecropperjs's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e2.3.1 (2026-10-16)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(cropper-image): fix \u003ccode\u003e\u0026lt;cropper-image\u0026gt;\u003c/code\u003e staying 0×0 when \u003ccode\u003esrc\u003c/code\u003e is set after connect (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/tree/HEAD/packages/cropperjs/issues/1306\"\u003e#1306\u003c/a\u003e) (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/6b53510\"\u003e6b53510\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/fengyuanchen/cropperjs/issues/1306\"\u003e#1306\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs(examples): update Cropper instantiation to use createCropper method (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/9c8828d\"\u003e9c8828d\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.3.0 (2026-10-07)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: release v2.3.0 (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/0344ca3\"\u003e0344ca3\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erefactor(cropper-image): implement fit checking logic in \u003ccode\u003e$exceedsFit\u003c/code\u003e method (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/6a72df9\"\u003e6a72df9\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erefactor(element-viewer): change properties order (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/30cf335\"\u003e30cf335\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(cropper-image): add \u003ccode\u003ezoomAroundCenter\u003c/code\u003e property (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/fea6cac\"\u003efea6cac\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(cropper-image): add the \u003ccode\u003emaxInset\u003c/code\u003e and \u003ccode\u003eminInset\u003c/code\u003e properties (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/58664a8\"\u003e58664a8\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(cropper-selection): add \u003ccode\u003eresizeAroundCenter\u003c/code\u003e property (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/01e5c1a\"\u003e01e5c1a\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/fengyuanchen/cropperjs/issues/1299\"\u003e#1299\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(cropper-selection): add \u003ccode\u003ezoomAroundCenter\u003c/code\u003e property (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/9d3c874\"\u003e9d3c874\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(cropper-selection): add the \u003ccode\u003emaxInset\u003c/code\u003e and \u003ccode\u003eminInset\u003c/code\u003e properties (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/51c984f\"\u003e51c984f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat(cropper-selection): enhance resize handling with initial dimensions tracking (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/f8e5208\"\u003ef8e5208\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/fengyuanchen/cropperjs/issues/1298\"\u003e#1298\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(cropper-selection): enhance selection handling for non-resizable elements (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/6926e84\"\u003e6926e84\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/fengyuanchen/cropperjs/issues/1302\"\u003e#1302\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(cropper-selection): improve selection coverage and boundary handling (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/32112a8\"\u003e32112a8\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/fengyuanchen/cropperjs/issues/1285\"\u003e#1285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(cropper-selection/shade): add border radius support for selection and shade elements (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/75b1cfe\"\u003e75b1cfe\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/fengyuanchen/cropperjs/issues/1238\"\u003e#1238\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(cropperjs): add the \u003ccode\u003ecreateCropper\u003c/code\u003e function for creating a new \u003ccode\u003eCropper\u003c/code\u003e instance (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/0a3cf33\"\u003e0a3cf33\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePreserve explicit selection dimensions on initial coverage (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/tree/HEAD/packages/cropperjs/issues/1304\"\u003e#1304\u003c/a\u003e) (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/2aba2f4\"\u003e2aba2f4\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/fengyuanchen/cropperjs/issues/1304\"\u003e#1304\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: add gzip size badge (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/8a77f71\"\u003e8a77f71\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edocs: add module example (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/26cd677\"\u003e26cd677\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edocs: improve limit boundaries examples (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/31e624e\"\u003e31e624e\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/fengyuanchen/cropperjs/issues/1255\"\u003e#1255\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: standardize section headings in API documentation (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/7af9124\"\u003e7af9124\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edocs: update descriptions and links in API documentation for clarity (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/a6bbf08\"\u003ea6bbf08\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edocs: update examples to include module and script usage (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/fb4b379\"\u003efb4b379\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edocs(cropper-selection): add example for fixed selection while moving or scaling the image (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/31ef548\"\u003e31ef548\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edocs(examples): add example for adding a watermark (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/741892b\"\u003e741892b\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edocs(examples): add example for applying an image filter (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/6a47507\"\u003e6a47507\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edocs(examples): add example for cropping an image drawn on a canvas (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/b2ce7cc\"\u003eb2ce7cc\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edocs(examples): add example for multiple selections and viewers (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/36470ad\"\u003e36470ad\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edocs(examples): add example for redacting part of an image (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/f46bf1c\"\u003ef46bf1c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edocs(examples): add example for uploading a cropped image to a server (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/9ca08e6\"\u003e9ca08e6\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edocs(examples): enhance code highlighting in HTML examples (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/d42436b\"\u003ed42436b\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edocs(guide): update npm package link for cropperjs version badge (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/ae47ba0\"\u003eae47ba0\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix: handle image load event for complete images (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/91bbb5d\"\u003e91bbb5d\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/fengyuanchen/cropperjs/issues/1303\"\u003e#1303\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: enhance tests with keyboard interactions and lifecycle events (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/d19b3a6\"\u003ed19b3a6\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eci: add codecov action to CI workflow for test coverage reporting (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/1dabc83\"\u003e1dabc83\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eci(deploy): add --no-verify flag to git commit command (\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/9ca2a3e\"\u003e9ca2a3e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/d671590f32aa655eba87069b61b1e22ff0a2fb63\"\u003e\u003ccode\u003ed671590\u003c/code\u003e\u003c/a\u003e build: release v2.3.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/0344ca3fbd78d1c1928f8d80e6014f4ab03a6942\"\u003e\u003ccode\u003e0344ca3\u003c/code\u003e\u003c/a\u003e build: release v2.3.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fengyuanchen/cropperjs/commit/0a3cf33310e2159293bb71acc3c918a8880c0ad2\"\u003e\u003ccode\u003e0a3cf33\u003c/code\u003e\u003c/a\u003e feat(cropperjs): add the \u003ccode\u003ecreateCropper\u003c/code\u003e function for creating a new `Cropper...\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/fengyuanchen/cropperjs/commits/v2.3.1/packages/cropperjs\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `i18next` from 26.4.2 to 26.5.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/i18next/i18next/releases\"\u003ei18next's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev26.5.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: \u003ccode\u003ecloneInstance({ forkResourceStore: true })\u003c/code\u003e now copies the resources at every level. It copied them only down to the namespace objects, so nested keys and arrays stayed shared with the original instance: \u003ccode\u003eaddResource()\u003c/code\u003e with a nested key (\u003ccode\u003efork.addResource('en', 'translation', 'greeting.hello', 'Hi')\u003c/code\u003e) or a deep \u003ccode\u003eaddResourceBundle()\u003c/code\u003e on the fork also changed the original instance and every other fork. Flat keys were already isolated. Forking a large store takes a bit longer: with 300k keys in nested groups, about 11 ms instead of 3 ms per fork. Clones without \u003ccode\u003eforkResourceStore\u003c/code\u003e still share the store as before. Thanks \u003ca href=\"https://github.com/nk-batman21\"\u003e\u003ccode\u003e@​nk-batman21\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/i18next/i18next/pull/2456\"\u003e#2456\u003c/a\u003e, follow-up to \u003ca href=\"https://redirect.github.com/i18next/i18next/issues/2270\"\u003e#2270\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev26.5.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: with the default \u003ccode\u003eskipOnVariables: true\u003c/code\u003e, a \u003ccode\u003e{{placeholder}}\u003c/code\u003e inside a value inserted with an unescaped \u003ccode\u003e{{- var}}\u003c/code\u003e now stays literal, as it already did for \u003ccode\u003e{{var}}\u003c/code\u003e. The escape pass ran after the unescaped values were written and scanned them again, so \u003ccode\u003et('{{- a}}', { a: '{{b}}', b: 'c' })\u003c/code\u003e returned \u003ccode\u003e'c'\u003c/code\u003e instead of \u003ccode\u003e'{{b}}'\u003c/code\u003e. With pre-built HTML that carries user text, like \u003ccode\u003et('You may contact {{name}} at {{- emailHTML}}.', { name, emailHTML })\u003c/code\u003e, that text could pull another variable of the same \u003ccode\u003et()\u003c/code\u003e call into the output. Results with \u003ccode\u003eskipOnVariables: false\u003c/code\u003e, and values without placeholders, are unchanged. Compatibility note: a \u003ccode\u003e{{- var}}\u003c/code\u003e value whose placeholders were meant to be filled from the same \u003ccode\u003et()\u003c/code\u003e call now keeps them literally; \u003ccode\u003eskipOnVariables: false\u003c/code\u003e restores the old behavior. Thanks \u003ca href=\"https://github.com/nk-batman21\"\u003e\u003ccode\u003e@​nk-batman21\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/i18next/i18next/pull/2455\"\u003e#2455\u003c/a\u003e, reported in \u003ca href=\"https://redirect.github.com/i18next/i18next/issues/1595#issuecomment-814611747\"\u003e#1595\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev26.5.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: with the default \u003ccode\u003eskipOnVariables: true\u003c/code\u003e, a \u003ccode\u003e{{placeholder}}\u003c/code\u003e inside an interpolated value now stays literal also when the same placeholder appears later in the translation. Each value was written with \u003ccode\u003eString.replace\u003c/code\u003e, which replaces the first copy of the placeholder text, and that could be the copy inside an earlier value: \u003ccode\u003et('{{name}} has {{count}} items', { name: '{{count}}', count: 5 })\u003c/code\u003e returned \u003ccode\u003e'5 has {{count}} items'\u003c/code\u003e instead of \u003ccode\u003e'{{count}} has 5 items'\u003c/code\u003e. The value is now written at the position of the matched placeholder. Results with \u003ccode\u003eskipOnVariables: false\u003c/code\u003e are unchanged. Thanks \u003ca href=\"https://github.com/nk-batman21\"\u003e\u003ccode\u003e@​nk-batman21\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/i18next/i18next/pull/2454\"\u003e#2454\u003c/a\u003e, reported in \u003ca href=\"https://redirect.github.com/i18next/i18next/issues/1595#issuecomment-814609503\"\u003e#1595\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003efix: with \u003ccode\u003euseRawValueToEscape: true\u003c/code\u003e, a non-string value in an unescaped \u003ccode\u003e{{- var}}\u003c/code\u003e placeholder or with \u003ccode\u003eescapeValue: false\u003c/code\u003e no longer throws \u003ccode\u003eval.replace is not a function\u003c/code\u003e; it is converted to a string like any other value.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev26.5.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(types): with the selector API, a plural key now requires \u003ccode\u003ecount\u003c/code\u003e also when the call passes an explicit \u003ccode\u003ens\u003c/code\u003e. \u003ccode\u003et(($) =\u0026gt; $.item)\u003c/code\u003e already failed without \u003ccode\u003ecount\u003c/code\u003e, but \u003ccode\u003et(($) =\u0026gt; $.item, { ns: 'items' })\u003c/code\u003e compiled, although at runtime it looks up \u003ccode\u003eitem\u003c/code\u003e instead of \u003ccode\u003eitem_one\u003c/code\u003e / \u003ccode\u003eitem_other\u003c/code\u003e and returns the key. It now fails the same way, also with \u003ccode\u003eordinal: true\u003c/code\u003e, \u003ccode\u003edefaultValue\u003c/code\u003e, an \u003ccode\u003ens\u003c/code\u003e array, a key prefix and \u003ccode\u003ei18n.t\u003c/code\u003e. Calls with \u003ccode\u003ecount\u003c/code\u003e, \u003ccode\u003econtext\u003c/code\u003e, \u003ccode\u003ereturnObjects: true\u003c/code\u003e and arrays of selectors, as well as return types, are unchanged. Thanks \u003ca href=\"https://github.com/nyarthan\"\u003e\u003ccode\u003e@​nyarthan\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/i18next/i18next/pull/2452\"\u003e#2452\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev26.5.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(types): on TypeScript 7, a \u003ccode\u003et()\u003c/code\u003e call with a missing, misspelled or wrongly typed option now reports that option again (\u003ccode\u003eProperty 'album' is missing\u003c/code\u003e, \u003ccode\u003eType 'string' is not assignable to type 'number'\u003c/code\u003e), as TypeScript 5 and 6 do. TypeScript 7 elaborated the error against the default-value signature instead and ended in \u003ccode\u003e'{ count: 3; albm: \u0026quot;Summer\u0026quot;; }' is not assignable to type 'string'\u003c/code\u003e: on a failed call TypeScript explains the last of the equally matching signatures, and TypeScript 7 sorts the 3-element \u003ccode\u003e[key, defaultValue, options?]\u003c/code\u003e last. It is now written as two signatures, \u003ccode\u003e[key, defaultValue]\u003c/code\u003e and \u003ccode\u003e[key, defaultValue, options]\u003c/code\u003e. This affects the default key checks with i18next \u003ccode\u003e{{name}}\u003c/code\u003e messages as well as \u003ccode\u003eparseInterpolation: 'icu'\u003c/code\u003e and \u003ccode\u003e'mf2'\u003c/code\u003e. Which calls compile, their return types and the error positions are unchanged on TypeScript 5.9, 6 and 7.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev26.5.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eperf(types): type-checking \u003ccode\u003et()\u003c/code\u003e calls against a large namespace is no longer quadratic in the number of keys. TypeScript does not cache \u003ccode\u003ekeyof\u003c/code\u003e of an object type, and the types rebuilt the union of all keys of a namespace once per key while building the key union, and again in every \u003ccode\u003et()\u003c/code\u003e call to look up the return type. Both now use a cached key union, and a literal key is looked up directly instead of being intersected with every key. With 5,000 keys in one namespace and one call per key, the check time went from 14.8s to 1.1s (TypeScript 6); with 1,000 keys from 0.75s to 0.27s. Keys, return types and errors are unchanged.\u003c/li\u003e\n\u003cli\u003eperf(types): the selector API (\u003ccode\u003eenableSelector: true\u003c/code\u003e / \u003ccode\u003e'strict'\u003c/code\u003e) with \u003ccode\u003econtext\u003c/code\u003e is no longer quadratic in the size of an object. To decide which keys a context keeps, the types scanned all keys of the object once for every key, also when TypeScript checks the selector with \u003ccode\u003econtext\u003c/code\u003e widened to \u003ccode\u003estring\u003c/code\u003e. With 1,000 keys plus one context variant each, a namespace took 18.7s and failed with \u0026quot;Type instantiation is excessively deep and possibly infinite\u0026quot; (TS2589); 2,500 and more ran out of memory. The context variants of an object are now collected once, in one pass over its keys: 1,000 keys check in 0.69s, 5,000 in 3.1s. Long keys (whole sentences with \u003ccode\u003ekeySeparator: false\u003c/code\u003e) work as before. Selected values and errors are unchanged.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev26.5.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat(types): \u003ccode\u003eparseInterpolation: 'icu'\u003c/code\u003e and \u003ccode\u003eparseInterpolation: 'mf2'\u003c/code\u003e type \u003ccode\u003et()\u003c/code\u003e options from the message's ICU MessageFormat arguments (i18next-icu) or MessageFormat 2 variables (i18next-mf2), so ICU and MF2 users no longer need \u003ccode\u003eparseInterpolation: false\u003c/code\u003e and lose argument checking. Missing, misspelled and wrongly typed arguments fail, and so does leaving out the options for a message with arguments (\u003ccode\u003et('greeting')\u003c/code\u003e); that error names the missing arguments. Opt-in, default \u003ccode\u003etrue\u003c/code\u003e is unchanged.\n\u003cul\u003e\n\u003cli\u003eICU: \u003ccode\u003e{name}\u003c/code\u003e takes \u003ccode\u003estring | number\u003c/code\u003e, \u003ccode\u003e{n, number}\u003c/code\u003e, \u003ccode\u003eplural\u003c/code\u003e and \u003ccode\u003eselectordinal\u003c/code\u003e take \u003ccode\u003enumber\u003c/code\u003e, \u003ccode\u003e{d, date}\u003c/code\u003e and \u003ccode\u003e{t, time}\u003c/code\u003e take \u003ccode\u003eDate\u003c/code\u003e, \u003ccode\u003eselect\u003c/code\u003e takes its case keys or any string (for \u003ccode\u003eother\u003c/code\u003e), and arguments nested in cases are required too. \u003ccode\u003e#\u003c/code\u003e and tags are not arguments, apostrophe quoting is read like intl-messageformat does.\u003c/li\u003e\n\u003cli\u003eMF2: \u003ccode\u003e{$name}\u003c/code\u003e takes \u003ccode\u003estring | number\u003c/code\u003e, a variable annotated with \u003ccode\u003e:number\u003c/code\u003e, \u003ccode\u003e:integer\u003c/code\u003e, \u003ccode\u003e:currency\u003c/code\u003e, \u003ccode\u003e:percent\u003c/code\u003e or \u003ccode\u003e:unit\u003c/code\u003e (inline or through \u003ccode\u003e.input\u003c/code\u003e / \u003ccode\u003e.local\u003c/code\u003e) takes \u003ccode\u003enumber\u003c/code\u003e, \u003ccode\u003e:datetime\u003c/code\u003e, \u003ccode\u003e:date\u003c/code\u003e and \u003ccode\u003e:time\u003c/code\u003e take \u003ccode\u003eDate\u003c/code\u003e, \u003ccode\u003e:string\u003c/code\u003e takes \u003ccode\u003estring\u003c/code\u003e, option and markup variables (\u003ccode\u003eminimumFractionDigits=$digits\u003c/code\u003e, \u003ccode\u003e{#link href=$url}\u003c/code\u003e) are required too, \u003ccode\u003e.local\u003c/code\u003e variables are not arguments, and \u003ccode\u003e|quoted literals|\u003c/code\u003e and \u003ccode\u003e\\{\u003c/code\u003e escapes are skipped.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003einterpolationFormatTypeMap\u003c/code\u003e overrides a type by ICU format or MF2 function name, e.g. \u003ccode\u003edate: Date | number\u003c/code\u003e or a custom \u003ccode\u003euppercase: string\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eApplies to \u003ccode\u003et()\u003c/code\u003e, \u003ccode\u003egetFixedT()\u003c/code\u003e, \u003ccode\u003ei18n.t\u003c/code\u003e, key prefixes, namespaces, the selector API and react-i18next's \u003ccode\u003eTrans\u003c/code\u003e \u003ccode\u003evalues\u003c/code\u003e. Messages need literal types, as the resources file from i18next-cli's \u003ccode\u003etypes\u003c/code\u003e command has them.\u003c/li\u003e\n\u003cli\u003eType-check cost with 1,000 messages and one call each: 1.35s instead of 0.86s with \u003ccode\u003efalse\u003c/code\u003e (TypeScript 6), 0.5s instead of 0.26s with TypeScript 7. Messages that no call uses cost nothing.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003efix(types): with the default (non-strict) key checks, an options object with a missing or misspelled interpolation variable now reports the missing variable (\u003ccode\u003eProperty 'name' is missing\u003c/code\u003e) instead of \u003ccode\u003e'{ nmae: string }' is not assignable to type 'string'\u003c/code\u003e from the default-value overload.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev26.4.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eperf: \u003ccode\u003ecloneInstance()\u003c/code\u003e no longer inherits \u003ccode\u003epreload\u003c/code\u003e. \u003ccode\u003eloadResources()\u003c/code\u003e adds every \u003ccode\u003epreload\u003c/code\u003e language to each load, and clones copied \u003ccode\u003epreload\u003c/code\u003e from the parent, so a clone's \u003ccode\u003einit()\u003c/code\u003e and every \u003ccode\u003echangeLanguage()\u003c/code\u003e walked all preloaded languages × all namespaces through \u003ccode\u003equeueLoad()\u003c/code\u003e / \u003ccode\u003ehasResourceBundle()\u003c/code\u003e, although the parent had already loaded them into the shared store. With i18next-http-middleware (one clone + \u003ccode\u003echangeLanguage()\u003c/code\u003e per request), 25 preloaded languages and 20 namespaces, that was most of the per-request CPU: the reproduction from the issue went from ~90 µs to ~10 µs per request, the same as with a single language. A clone now only loads what it uses itself: its \u003ccode\u003echangeLanguage()\u003c/code\u003e no longer waits for parent preload languages that are still loading (the parent's own \u003ccode\u003einit()\u003c/code\u003e still does), and \u003ccode\u003eclone.loadNamespaces()\u003c/code\u003e loads the new namespace for the clone's language and fallbacks instead of every preloaded language. \u003ccode\u003eclone.loadLanguages()\u003c/code\u003e works as before, the parent instance is unchanged, and passing \u003ccode\u003epreload\u003c/code\u003e to \u003ccode\u003ecloneInstance()\u003c/code\u003e keeps the old behavior. Thanks \u003ca href=\"https://github.com/theMostCuriousHomunculus\"\u003e\u003ccode\u003e@​theMostCuriousHomunculus\u003c/code\u003e\u003c/a\u003e for the detailed report (\u003ca href=\"https://redirect.github.com/i18next/i18next/issues/2451\"\u003e#2451\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev26.4.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: a fallback language whose formatted code is already in the hierarchy is no longer added a second time. \u003ccode\u003etoResolveHierarchy()\u003c/code\u003e checked the raw \u003ccode\u003efallbackLng\u003c/code\u003e value against the list, but the list holds formatted codes, so any fallback written differently from its formatted form slipped through: \u003ccode\u003elng: 'de-CH'\u003c/code\u003e with \u003ccode\u003efallbackLng: 'de-ch'\u003c/code\u003e gave \u003ccode\u003elanguages\u003c/code\u003e \u003ccode\u003e['de-CH', 'de', 'de-CH']\u003c/code\u003e, and the same happened with \u003ccode\u003efallbackLng: 'EN'\u003c/code\u003e + \u003ccode\u003ecleanCode\u003c/code\u003e, \u003ccode\u003elowerCaseLng\u003c/code\u003e, and Intl aliases (\u003ccode\u003eiw-IL\u003c/code\u003e → \u003ccode\u003ehe-IL\u003c/code\u003e). Missing keys were looked up in the same language twice. Only exact duplicates are removed; the order is unchanged. Thanks \u003ca href=\"https://github.com/lprnmns\"\u003e\u003ccode\u003e@​lprnmns\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/i18next/i18next/pull/2450\"\u003e#2450\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev26.4.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: \u003ccode\u003ehasLoadedNamespace(ns, { lng })\u003c/code\u003e no longer stays \u003ccode\u003efalse\u003c/code\u003e forever when the passed in \u003ccode\u003elng\u003c/code\u003e is loaded under another code, or not at all. It checked the load state of the raw \u003ccode\u003elng\u003c/code\u003e, but \u003ccode\u003eloadLanguages()\u003c/code\u003e stores a language under its resolved code (\u003ccode\u003ede-ch\u003c/code\u003e → \u003ccode\u003ede-CH\u003c/code\u003e, \u003ccode\u003ede-CH\u003c/code\u003e → \u003ccode\u003ede\u003c/code\u003e with \u003ccode\u003eload: 'languageOnly'\u003c/code\u003e) and skips a \u003ccode\u003elng\u003c/code\u003e outside \u003ccode\u003esupportedLngs\u003c/code\u003e entirely (only the fallback gets loaded), so that state never got set. react-i18next's \u003ccode\u003euseTranslation(ns, { lng })\u003c/code\u003e then never became ready: with \u003ccode\u003euseSuspense\u003c/code\u003e it kept throwing an already resolved promise and React retried forever (100% CPU, SSR never finished), without it the load effect re-rendered in a loop. It now checks the code the language is actually loaded under, and for a \u003ccode\u003elng\u003c/code\u003e outside \u003ccode\u003esupportedLngs\u003c/code\u003e only waits for the fallback, which is also what \u003ccode\u003et()\u003c/code\u003e resolves to. Calls without \u003ccode\u003elng\u003c/code\u003e and the \u003ccode\u003eprecheck\u003c/code\u003e (react-i18next's \u003ccode\u003ebindI18n: 'languageChanging'\u003c/code\u003e) are unchanged (\u003ca href=\"https://redirect.github.com/i18next/react-i18next/issues/1934\"\u003ereact-i18next#1934\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev26.4.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(security): the nesting regexp no longer backtracks exponentially (ReDoS) on an unclosed \u003ccode\u003e$t(\u003c/code\u003e. Its repeated group had overlapping alternatives (\u003ccode\u003e[^()\u0026quot;']+\u003c/code\u003e inside \u003ccode\u003e(?:...)*?\u003c/code\u003e, and inside parentheses \u003ccode\u003e[^()]\u003c/code\u003e also matched quotes), so a string containing \u003ccode\u003e$t(\u003c/code\u003e without a closing \u003ccode\u003e)\u003c/code\u003e made the engine try every way to split the text: about 2x the runtime per extra character, and a ~25 character value hung \u003ccode\u003et()\u003c/code\u003e for minutes. With the default config this was reachable through any interpolated value (\u003ccode\u003et('greet', { name: '$t(aaaaaaaaaaaaaaaaaaaaaaaa' })\u003c/code\u003e): escaping does not touch \u003ccode\u003e$\u003c/code\u003e, \u003ccode\u003et\u003c/code\u003e or \u003ccode\u003e(\u003c/code\u003e, and the \u003ccode\u003eskipOnVariables\u003c/code\u003e check runs the regexp on the interpolated result, so \u003ccode\u003enest: false\u003c/code\u003e did not help either. Every alternative now starts with a different character (plain char, \u003ccode\u003e\u0026quot;\u003c/code\u003e, \u003ccode\u003e'\u003c/code\u003e or \u003ccode\u003e(\u003c/code\u003e), so there is only one way to match and the cost is linear. Quoted strings and one level of parentheses in nesting options keep working (\u003ca href=\"https://redirect.github.com/i18next/i18next/issues/2336\"\u003e#2336\u003c/a\u003e). The only difference: a lone \u003ccode\u003e\u0026quot;\u003c/code\u003e or \u003ccode\u003e'\u003c/code\u003e inside unquoted parentheses within \u003ccode\u003e$t(...)\u003c/code\u003e is no longer matched. Affects 25.3.3 to 26.4.3. Thanks to Anisetti Chaitanya Eshwar Prasad for the responsible disclosure.\u003c/li\u003e\n\u003cli\u003efix(security): \u003ccode\u003enest()\u003c/code\u003e now resolves \u003ccode\u003e$t(...)\u003c/code\u003e in a single pass and no longer nests text that came out of a resolved value. Every nested lookup reset the shared nesting regexp, so the loop started over from the beginning of the string after each match. That had two effects. First, a \u003ccode\u003e$t(...)\u003c/code\u003e inside a variable that the nested lookup deliberately kept literal (default \u003ccode\u003eskipOnVariables: true\u003c/code\u003e) was resolved anyway by the outer loop: with \u003ccode\u003eouter: 'A $t(inner) B'\u003c/code\u003e and \u003ccode\u003einner: 'Hi {{name}}'\u003c/code\u003e, \u003ccode\u003et('outer', { name: '$t(secret)' })\u003c/code\u003e rendered the \u003ccode\u003esecret\u003c/code\u003e translation. It now stays \u003ccode\u003eA Hi $t(secret) B\u003c/code\u003e, the same as without the outer nesting; with \u003ccode\u003eskipOnVariables: false\u003c/code\u003e it is still resolved. Second, the cost was quadratic when an unclosed \u003ccode\u003e$t(\u003c/code\u003e preceded many nestings, which matters when an app passes untrusted input as the key itself (\u003ccode\u003et(userInput)\u003c/code\u003e): 20,000 nestings took ~1.4 s, now ~25 ms. The resolved value is now sliced into the result instead of going through \u003ccode\u003eString.replace\u003c/code\u003e, so \u003ccode\u003e$\u0026amp;\u003c/code\u003e, \u003ccode\u003e$`\u003c/code\u003e, \u003ccode\u003e$'\u003c/code\u003e and \u003ccode\u003e$$\u003c/code\u003e stay literal as before (26.4.2).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev26.4.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eperf: \u003ccode\u003eResourceStore.hasLanguageSomeTranslations()\u003c/code\u003e no longer enumerates every key of a large bundle on each call. It ran \u003ccode\u003eObject.keys()\u003c/code\u003e on the whole bundle just to learn whether it had at least one key, and \u003ccode\u003einit()\u003c/code\u003e / \u003ccode\u003echangeLanguage()\u003c/code\u003e reach it three times per instance (once while picking the language, twice via \u003ccode\u003esetResolvedLanguage()\u003c/code\u003e). With large flat bundles and one i18next instance per SSR request reusing the same resources, that showed up as measurable CPU work before any \u003ccode\u003et()\u003c/code\u003e call. Bundle objects already found non-empty are now remembered in a \u003ccode\u003eWeakSet\u003c/code\u003e shared across instances, so later checks are O(1): 2,000 inits with a 6,800-key bundle went from ~750 ms to ~20 ms, the same as a one-key bundle. Only the non-empty result is cached. No API removes single keys from a bundle, so a non-empty bundle stays non-empty, and empty bundles are re-checked every time, so keys added later (backend loads, \u003ccode\u003eaddResource\u003c/code\u003e, \u003ccode\u003eaddResourceBundle\u003c/code\u003e, direct or silent changes) count right away. The only edge case: a bundle emptied by hand with \u003ccode\u003edelete\u003c/code\u003e on every key while it is still in the store keeps counting as having translations; use \u003ccode\u003eremoveResourceBundle()\u003c/code\u003e for that. Thanks \u003ca href=\"https://github.com/dmchoi77\"\u003e\u003ccode\u003e@​dmchoi77\u003c/code\u003e\u003c/a\u003e for the detailed report (\u003ca href=\"https://redirect.github.com/i18next/i18next/issues/2449\"\u003e#2449\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/i18next/i18next/blob/master/CHANGELOG.md\"\u003ei18next's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e26.5.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: \u003ccode\u003ecloneInstance({ forkResourceStore: true })\u003c/code\u003e now copies the resources at every level. It copied them only down to the namespace objects, so nested keys and arrays stayed shared with the original instance: \u003ccode\u003eaddResource()\u003c/code\u003e with a nested key (\u003ccode\u003efork.addResource('en', 'translation', 'greeting.hello', 'Hi')\u003c/code\u003e) or a deep \u003ccode\u003eaddResourceBundle()\u003c/code\u003e on the fork also changed the original instance and every other fork. Flat keys were already isolated. Forking a large store takes a bit longer: with 300k keys in nested groups, about 11 ms instead of 3 ms per fork. Clones without \u003ccode\u003eforkResourceStore\u003c/code\u003e still share the store as before. Thanks \u003ca href=\"https://github.com/nk-batman21\"\u003e\u003ccode\u003e@​nk-batman21\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/i18next/i18next/pull/2456\"\u003e#2456\u003c/a\u003e, follow-up to \u003ca href=\"https://redirect.github.com/i18next/i18next/issues/2270\"\u003e#2270\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e26.5.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: with the default \u003ccode\u003eskipOnVariables: true\u003c/code\u003e, a \u003ccode\u003e{{placeholder}}\u003c/code\u003e inside a value inserted with an unescaped \u003ccode\u003e{{- var}}\u003c/code\u003e now stays literal, as it already did for \u003ccode\u003e{{var}}\u003c/code\u003e. The escape pass ran after the unescaped values were written and scanned them again, so \u003ccode\u003et('{{- a}}', { a: '{{b}}', b: 'c' })\u003c/code\u003e returned \u003ccode\u003e'c'\u003c/code\u003e instead of \u003ccode\u003e'{{b}}'\u003c/code\u003e. With pre-built HTML that carries user text, like \u003ccode\u003et('You may contact {{name}} at {{- emailHTML}}.', { name, emailHTML })\u003c/code\u003e, that text could pull another variable of the same \u003ccode\u003et()\u003c/code\u003e call into the output. Results with \u003ccode\u003eskipOnVariables: false\u003c/code\u003e, and values without placeholders, are unchanged. Compatibility note: a \u003ccode\u003e{{- var}}\u003c/code\u003e value whose placeholders were meant to be filled from the same \u003ccode\u003et()\u003c/code\u003e call now keeps them literally; \u003ccode\u003eskipOnVariables: false\u003c/code\u003e restores the old behavior. Thanks \u003ca href=\"https://github.com/nk-batman21\"\u003e\u003ccode\u003e@​nk-batman21\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/i18next/i18next/pull/2455\"\u003e#2455\u003c/a\u003e, reported in \u003ca href=\"https://redirect.github.com/i18next/i18next/issues/1595#issuecomment-814611747\"\u003e#1595\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e26.5.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: with the default \u003ccode\u003eskipOnVariables: true\u003c/code\u003e, a \u003ccode\u003e{{placeholder}}\u003c/code\u003e inside an interpolated value now stays literal also when the same placeholder appears later in the translation. Each value was written with \u003ccode\u003eString.replace\u003c/code\u003e, which replaces the first copy of the placeholder text, and that could be the copy inside an earlier value: \u003ccode\u003et('{{name}} has {{count}} items', { name: '{{count}}', count: 5 })\u003c/code\u003e returned \u003ccode\u003e'5 has {{count}} items'\u003c/code\u003e instead of \u003ccode\u003e'{{count}} has 5 items'\u003c/code\u003e. The value is now written at the position of the matched placeholder. Results with \u003ccode\u003eskipOnVariables: false\u003c/code\u003e are unchanged. Thanks \u003ca href=\"https://github.com/nk-batman21\"\u003e\u003ccode\u003e@​nk-batman21\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/i18next/i18next/pull/2454\"\u003e#2454\u003c/a\u003e, reported in \u003ca href=\"https://redirect.github.com/i18next/i18next/issues/1595#issuecomment-814609503\"\u003e#1595\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003efix: with \u003ccode\u003euseRawValueToEscape: true\u003c/code\u003e, a non-string value in an unescaped \u003ccode\u003e{{- var}}\u003c/code\u003e placeholder or with \u003ccode\u003eescapeValue: false\u003c/code\u003e no longer throws \u003ccode\u003eval.replace is not a function\u003c/code\u003e; it is converted to a string like any other value.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e26.5.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(types): with the selector API, a plural key now requires \u003ccode\u003ecount\u003c/code\u003e also when the call passes an explicit \u003ccode\u003ens\u003c/code\u003e. \u003ccode\u003et(($) =\u0026gt; $.item)\u003c/code\u003e already failed without \u003ccode\u003ecount\u003c/code\u003e, but \u003ccode\u003et(($) =\u0026gt; $.item, { ns: 'items' })\u003c/code\u003e compiled, although at runtime it looks up \u003ccode\u003eitem\u003c/code\u003e instead of \u003ccode\u003eitem_one\u003c/code\u003e / \u003ccode\u003eitem_other\u003c/code\u003e and returns the key. It now fails the same way, also with \u003ccode\u003eordinal: true\u003c/code\u003e, \u003ccode\u003edefaultValue\u003c/code\u003e, an \u003ccode\u003ens\u003c/code\u003e array, a key prefix and \u003ccode\u003ei18n.t\u003c/code\u003e. Calls with \u003ccode\u003ecount\u003c/code\u003e, \u003ccode\u003econtext\u003c/code\u003e, \u003ccode\u003ereturnObjects: true\u003c/code\u003e and arrays of selectors, as well as return types, are unchanged. Thanks \u003ca href=\"https://github.com/nyarthan\"\u003e\u003ccode\u003e@​nyarthan\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/i18next/i18next/pull/2452\"\u003e#2452\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e26.5.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(types): on TypeScript 7, a \u003ccode\u003et()\u003c/code\u003e call with a missing, misspelled or wrongly typed option now reports that option again (\u003ccode\u003eProperty 'album' is missing\u003c/code\u003e, \u003ccode\u003eType 'string' is not assignable to type 'number'\u003c/code\u003e), as TypeScript 5 and 6 do. TypeScript 7 elaborated the error against the default-value signature instead and ended in \u003ccode\u003e'{ count: 3; albm: \u0026quot;Summer\u0026quot;; }' is not assignable to type 'string'\u003c/code\u003e: on a failed call TypeScript explains the last of the equally matching signatures, and TypeScript 7 sorts the 3-element \u003ccode\u003e[key, defaultValue, options?]\u003c/code\u003e last. It is now written as two signatures, \u003ccode\u003e[key, defaultValue]\u003c/code\u003e and \u003ccode\u003e[key, defaultValue, options]\u003c/code\u003e. This affects the default key checks with i18next \u003ccode\u003e{{name}}\u003c/code\u003e messages as well as \u003ccode\u003eparseInterpolation: 'icu'\u003c/code\u003e and \u003ccode\u003e'mf2'\u003c/code\u003e. Which calls compile, their return types and the error positions are unchanged on TypeScript 5.9, 6 and 7.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e26.5.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eperf(types): type-checking \u003ccode\u003et()\u003c/code\u003e calls against a large namespace is no longer quadratic in the number of keys. TypeScript does not cache \u003ccode\u003ekeyof\u003c/code\u003e of an object type, and the types rebuilt the union of all keys of a namespace once per key while building the key union, and again in every \u003ccode\u003et()\u003c/code\u003e call to look up the return type. Both now use a cached key union, and a literal key is looked up directly instead of being intersected with every key. With 5,000 keys in one namespace and one call per key, the check time went from 14.8s to 1.1s (TypeScript 6); with 1,000 keys from 0.75s to 0.27s. Keys, return types and errors are unchanged.\u003c/li\u003e\n\u003cli\u003eperf(types): the selector API (\u003ccode\u003eenableSelector: true\u003c/code\u003e / \u003ccode\u003e'strict'\u003c/code\u003e) with \u003ccode\u003econtext\u003c/code\u003e is no longer quadratic in the size of an object. To decide which keys a context keeps, the types scanned all keys of the object once for every key, also when TypeScript checks the selector with \u003ccode\u003econtext\u003c/code\u003e widened to \u003ccode\u003estring\u003c/code\u003e. With 1,000 keys plus one context variant each, a namespace took 18.7s and failed with \u0026quot;Type instantiation is excessively deep and possibly infinite\u0026quot; (TS2589); 2,500 and more ran out of memory. The context variants of an object are now collected once, in one pass over its keys: 1,000 keys check in 0.69s, 5,000 in 3.1s. Long keys (whole sentences with \u003ccode\u003ekeySeparator: false\u003c/code\u003e) work as before. Selected values and errors are unchanged.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e26.5.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat(types): \u003ccode\u003eparseInterpolation: 'icu'\u003c/code\u003e and \u003ccode\u003eparseInterpolation: 'mf2'\u003c/code\u003e type \u003ccode\u003et()\u003c/code\u003e options from the message's ICU MessageFormat arguments (i18next-icu) or MessageFormat 2 variables (i18next-mf2), so ICU and MF2 users no longer need \u003ccode\u003eparseInterpolation: false\u003c/code\u003e and lose argument checking. Missing, misspelled and wrongly typed arguments fail, and so does leaving out the options for a message with arguments (\u003ccode\u003et('greeting')\u003c/code\u003e); that error names the missing arguments. Opt-in, default \u003ccode\u003etrue\u003c/code\u003e is unchanged.\n\u003cul\u003e\n\u003cli\u003eICU: \u003ccode\u003e{name}\u003c/code\u003e takes \u003ccode\u003estring | number\u003c/code\u003e, \u003ccode\u003e{n, number}\u003c/code\u003e, \u003ccode\u003eplural\u003c/code\u003e and \u003ccode\u003eselectordinal\u003c/code\u003e take \u003ccode\u003enumber\u003c/code\u003e, \u003ccode\u003e{d, date}\u003c/code\u003e and \u003ccode\u003e{t, time}\u003c/code\u003e take \u003ccode\u003eDate\u003c/code\u003e, \u003ccode\u003eselect\u003c/code\u003e takes its case keys or any string (for \u003ccode\u003eother\u003c/code\u003e), and arguments nested in cases are required too. \u003ccode\u003e#\u003c/code\u003e and tags are not arguments, apostrophe quoting is read like intl-messageformat does.\u003c/li\u003e\n\u003cli\u003eMF2: \u003ccode\u003e{$name}\u003c/code\u003e takes \u003ccode\u003estring | number\u003c/code\u003e, a variable annotated with \u003ccode\u003e:number\u003c/code\u003e, \u003ccode\u003e:integer\u003c/code\u003e, \u003ccode\u003e:currency\u003c/code\u003e, \u003ccode\u003e:percent\u003c/code\u003e or \u003ccode\u003e:unit\u003c/code\u003e (inline or through \u003ccode\u003e.input\u003c/code\u003e / \u003ccode\u003e.local\u003c/code\u003e) takes \u003ccode\u003enumber\u003c/code\u003e, \u003ccode\u003e:datetime\u003c/code\u003e, \u003ccode\u003e:date\u003c/code\u003e and \u003ccode\u003e:time\u003c/code\u003e take \u003ccode\u003eDate\u003c/code\u003e, \u003ccode\u003e:string\u003c/code\u003e takes \u003ccode\u003estring\u003c/code\u003e, option and markup variables (\u003ccode\u003eminimumFractionDigits=$digits\u003c/code\u003e, \u003ccode\u003e{#link href=$url}\u003c/code\u003e) are required too, \u003ccode\u003e.local\u003c/code\u003e variables are not arguments, and \u003ccode\u003e|quoted literals|\u003c/code\u003e and \u003ccode\u003e\\{\u003c/code\u003e escapes are skipped.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003einterpolationFormatTypeMap\u003c/code\u003e overrides a type by ICU format or MF2 function name, e.g. \u003ccode\u003edate: Date | number\u003c/code\u003e or a custom \u003ccode\u003euppercase: string\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eApplies to \u003ccode\u003et()\u003c/code\u003e, \u003ccode\u003egetFixedT()\u003c/code\u003e, \u003ccode\u003ei18n.t\u003c/code\u003e, key prefixes, namespaces, the selector API and react-i18next's \u003ccode\u003eTrans\u003c/code\u003e \u003ccode\u003evalues\u003c/code\u003e. Messages need literal types, as the resources file from i18next-cli's \u003ccode\u003etypes\u003c/code\u003e command has them.\u003c/li\u003e\n\u003cli\u003eType-check cost with 1,000 messages and one call each: 1.35s instead of 0.86s with \u003ccode\u003efalse\u003c/code\u003e (TypeScript 6), 0.5s instead of 0.26s with TypeScript 7. Messages that no call uses cost nothing.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003efix(types): with the default (non-strict) key checks, an options object with a missing or misspelled interpolation variable now reports the missing variable (\u003ccode\u003eProperty 'name' is missing\u003c/code\u003e) instead of \u003ccode\u003e'{ nmae: string }' is not assignable to type 'string'\u003c/code\u003e from the default-value overload.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e26.4.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eperf: \u003ccode\u003ecloneInstance()\u003c/code\u003e no longer inherits \u003ccode\u003epreload\u003c/code\u003e. \u003ccode\u003eloadResources()\u003c/code\u003e adds every \u003ccode\u003epreload\u003c/code\u003e language to each load, and clones copied \u003ccode\u003epreload\u003c/code\u003e from the parent, so a clone's \u003ccode\u003einit()\u003c/code\u003e and every \u003ccode\u003echangeLanguage()\u003c/code\u003e walked all preloaded languages × all namespaces through \u003ccode\u003equeueLoad()\u003c/code\u003e / \u003ccode\u003ehasResourceBundle()\u003c/code\u003e, although the parent had already loaded them into the shared store. With i18next-http-middleware (one clone + \u003ccode\u003echangeLanguage()\u003c/code\u003e per request), 25 preloaded languages and 20 namespaces, that was most of the per-request CPU: the reproduction from the issue went from ~90 µs to ~10 µs per request, the same as with a single language. A clone now only loads what it uses itself: its \u003ccode\u003echangeLanguage()\u003c/code\u003e no longer waits for parent preload languages that are still loading (the parent's own \u003ccode\u003einit()\u003c/code\u003e still does), and \u003ccode\u003eclone.loadNamespaces()\u003c/code\u003e loads the new namespace for the clone's language and fallbacks instead of every preloaded language. \u003ccode\u003eclone.loadLanguages()\u003c/code\u003e works as before, the parent instance is unchanged, and passing \u003ccode\u003epreload\u003c/code\u003e to \u003ccode\u003ecloneInstance()\u003c/code\u003e keeps the old behavior. Thanks \u003ca href=\"https://github.com/theMostCuriousHomunculus\"\u003e\u003ccode\u003e@​theMostCuriousHomunculus\u003c/code\u003e\u003c/a\u003e for the detailed report (\u003ca href=\"https://redirect.github.com/i18next/i18next/issues/2451\"\u003e#2451\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e26.4.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: a fallback language whose formatted code is already in the hierarchy is no longer added a second time. \u003ccode\u003etoResolveHierarchy()\u003c/code\u003e checked the raw \u003ccode\u003efallbackLng\u003c/code\u003e value against the list, but the list holds formatted codes, so any fallback written differently from its formatted form slipped through: \u003ccode\u003elng: 'de-CH'\u003c/code\u003e with \u003ccode\u003efallbackLng: 'de-ch'\u003c/code\u003e gave \u003ccode\u003elanguages\u003c/code\u003e \u003ccode\u003e['de-CH', 'de', 'de-CH']\u003c/code\u003e, and the same happened with \u003ccode\u003efallbackLng: 'EN'\u003c/code\u003e + \u003ccode\u003ecleanCode\u003c/code\u003e, \u003ccode\u003elowerCaseLng\u003c/code\u003e, and Intl aliases (\u003ccode\u003eiw-IL\u003c/code\u003e → \u003ccode\u003ehe-IL\u003c/code\u003e). Missing keys were looked up in the same language twice. Only exact duplicates are removed; the order is unchanged. Thanks \u003ca href=\"https://github.com/lprnmns\"\u003e\u003ccode\u003e@​lprnmns\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/i18next/i18next/pull/2450\"\u003e#2450\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e26.4.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: \u003ccode\u003ehasLoadedNamespace(ns, { lng })\u003c/code\u003e no longer stays \u003ccode\u003efalse\u003c/code\u003e forever when the passed in \u003ccode\u003elng\u003c/code\u003e is loaded under another code, or not at all. It checked the load state of the raw \u003ccode\u003elng\u003c/code\u003e, but \u003ccode\u003eloadLanguages()\u003c/code\u003e stores a language under its resolved code (\u003ccode\u003ede-ch\u003c/code\u003e → \u003ccode\u003ede-CH\u003c/code\u003e, \u003ccode\u003ede-CH\u003c/code\u003e → \u003ccode\u003ede\u003c/code\u003e with \u003ccode\u003eload: 'languageOnly'\u003c/code\u003e) and skips a \u003ccode\u003elng\u003c/code\u003e outside \u003ccode\u003esupportedLngs\u003c/code\u003e entirely (only the fallback gets loaded), so that state never got set. react-i18next's \u003ccode\u003euseTranslation(ns, { lng })\u003c/code\u003e then never became ready: with \u003ccode\u003euseSuspense\u003c/code\u003e it kept throwing an already resolved promise and React retried forever (100% CPU, SSR never finished), without it the load effect re-rendered in a loop. It now checks the code the language is actually loaded under, and for a \u003ccode\u003elng\u003c/code\u003e outside \u003ccode\u003esupportedLngs\u003c/code\u003e only waits for the fallback, which is also what \u003ccode\u003et()\u003c/code\u003e resolves to. Calls without \u003ccode\u003elng\u003c/code\u003e and the \u003ccode\u003eprecheck\u003c/code\u003e (react-i18next's \u003ccode\u003ebindI18n: 'languageChanging'\u003c/code\u003e) are unchanged (\u003ca href=\"https://redirect.github.com/i18next/react-i18next/issues/1934\"\u003ereact-i18next#1934\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e26.4.4\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/i18next/i18next/commit/82894c159845c3675fb6540db52a4144abbd5d4a\"\u003e\u003ccode\u003e82894c1\u003c/code\u003e\u003c/a\u003e 26.5.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/i18next/i18next/commit/343080da6802c0badb2fe1032139d49af93d9774\"\u003e\u003ccode\u003e343080d\u003c/code\u003e\u003c/a\u003e build\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/i18next/i18next/commit/8e2eebb132aaccfb752990b6cc61cbfd7d835764\"\u003e\u003ccode\u003e8e2eebb\u003c/code\u003e\u003c/a\u003e changelog for 26.5.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/i18next/i18next/commit/822a37bc57f50b4a476aa630f864d3ed1f88a7e9\"\u003e\u003ccode\u003e822a37b\u003c/code\u003e\u003c/a\u003e fix: copy nested resources when cloning with forkResourceStore (\u003ca href=\"https://redirect.github.com/i18next/i18next/issues/2456\"\u003e#2456\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/i18next/i18next/commit/744c5cb41a19f52ae08d1a71c2d9ceca6525dc1d\"\u003e\u003ccode\u003e744c5cb\u003c/code\u003e\u003c/a\u003e 26.5.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/i18next/i18next/commit/de5960eee00d9db2a7c1b452d6ce9231c16b6474\"\u003e\u003ccode\u003ede5960e\u003c/code\u003e\u003c/a\u003e build\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/i18next/i18next/commit/fbe16f3429273f2f9c1fe9736f4590fa2e8253a5\"\u003e\u003ccode\u003efbe16f3\u003c/code\u003e\u003c/a\u003e changelog for 26.5.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/i18next/i18next/commit/67b4ae194ed4a1af083119f77daba48f1c295f1d\"\u003e\u003ccode\u003e67b4ae1\u003c/code\u003e\u003c/a\u003e fix: keep placeholders inside unescaped values literal (\u003ca href=\"https://redirect.github.com/i18next/i18next/issues/2455\"\u003e#2455\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/i18next/i18next/commit/aadd75ba9e88a20b34b7f44798d4e3bd8ec71baa\"\u003e\u003ccode\u003eaadd75b\u003c/code\u003e\u003c/a\u003e 26.5.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/i18next/i18next/commit/a43c43286a381bbae144c04de9f8056f464c7cd9\"\u003e\u003ccode\u003ea43c432\u003c/code\u003e\u003c/a\u003e build\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/i18next/i18next/compare/v26.4.2...v26.5.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `i18next-http-backend` from 4.0.2 to 4.0.4\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/i18next/i18next-http-backend/blob/master/CHANGELOG.md\"\u003ei18next-http-backend's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch3\u003e4.0.4\u003c/h3\u003e\n\u003cp\u003eSecurity release. See advisory \u003ca href=\"https://github.com/i18next/i18next-http-backend/security/advisories/GHSA-3cmx-xjww-583x\"\u003eGHSA-3cmx-xjww-583x\u003c/a\u003e.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003esecurity: also reject \u003ccode\u003e\u0026amp;\u003c/code\u003e, \u003ccode\u003e=\u003c/code\u003e and \u003ccode\u003e;\u003c/code\u003e in \u003ccode\u003elng\u003c/code\u003e and \u003ccode\u003ens\u003c/code\u003e values. With a query-shaped \u003ccode\u003eloadPath\u003c/code\u003e / \u003ccode\u003eaddPath\u003c/code\u003e template such as \u003ccode\u003e/locales/resources.json?lng={{lng}}\u0026amp;ns={{ns}}\u003c/code\u003e (the multiload shape the README documents), a value like \u003ccode\u003ede\u0026amp;ns=private\u0026amp;admin=true\u003c/code\u003e added or overrode query parameters on the request (HTTP parameter pollution). The 3.0.5 fix only rejected \u003ccode\u003e?\u003c/code\u003e, which covers the path position. The default \u003ccode\u003e/locales/{{lng}}/{{ns}}.json\u003c/code\u003e and other path-only templates were not affected. No language code or usable namespace name contains these characters, and \u003ccode\u003e+\u003c/code\u003e-joined multiload values such as \u003ccode\u003ede+en\u003c/code\u003e keep working.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e4.0.3\u003c/h3\u003e\n\u003cp\u003eSecurity release. See advisory \u003ca href=\"https://github.com/i18next/i18next-http-backend/security/advisories/GHSA-9jhj-wvmw-cfx5\"\u003eGHSA-9jhj-wvmw-cfx5\u003c/a\u003e.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003esecurity: refuse a request URL that starts with \u003ccode\u003e//\u003c/code\u003e (or \u003ccode\u003e\\\u003c/code\u003e) when the \u003ccode\u003eloadPath\u003c/code\u003e / \u003ccode\u003eaddPath\u003c/code\u003e template does not. With a template that puts \u003ccode\u003e{{ns}}\u003c/code\u003e directly after a leading \u003ccode\u003e/\u003c/code\u003e (e.g. \u003ccode\u003e/{{ns}}/{{lng}}.json\u003c/code\u003e), an \u003ccode\u003ens\u003c/code\u003e value of \u003ccode\u003e/evil.example\u003c/code\u003e passed the per-value checks, because a single \u003ccode\u003e/\u003c/code\u003e is allowed for nested namespaces, but it joined the template's own \u003ccode\u003e/\u003c/code\u003e into \u003ccode\u003e//evil.example/en.json\u003c/code\u003e, a protocol-relative URL that browsers send to another origin. The 4.0.2 \u003ccode\u003e//\u003c/code\u003e check looked at the value only, so it missed this. The interpolated URL is now checked as a whole. The default \u003ccode\u003e/locales/{{lng}}/{{ns}}.json\u003c/code\u003e, templates with an origin, and protocol-relative CDN templates such as \u003ccode\u003e//cdn.example/{{lng}}/{{ns}}.json\u003c/code\u003e are not affected and keep working.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/i18next/i18next-http-backend/commit/c201e7f095d5f92df723bdc9f4c2bd4aed9439d3\"\u003e\u003ccode\u003ec201e7f\u003c/code\u003e\u003c/a\u003e 4.0.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/i18next/i18next-http-backend/commit/b0eef9efd425055c554787cef7f878de33bbf510\"\u003e\u003ccode\u003eb0eef9e\u003c/code\u003e\u003c/a\u003e security: reject \u003ccode\u003e\u0026amp;\u003c/code\u003e, \u003ccode\u003e=\u003c/code\u003e and \u003ccode\u003e;\u003c/code\u003e in lng/ns to close query-parameter injectio...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/i18next/i18next-http-backend/commit/8eb66469e3a2123f25574bb454c0c2ebc7ab6ab2\"\u003e\u003ccode\u003e8eb6646\u003c/code\u003e\u003c/a\u003e Bump i18next-http-backend from 3.0.5 to 4.0.2 in /example/fallback (\u003ca href=\"https://redirect.github.com/i18next/i18next-http-backend/issues/199\"\u003e#199\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/i18next/i18next-http-backend/commit/5d3fd6c470fb8124506091ce4daaf342d24185a0\"\u003e\u003ccode\u003e5d3fd6c\u003c/code\u003e\u003c/a\u003e Bump i18next-http-backend from 3.0.5 to 4.0.2 in /example/node (\u003ca href=\"https://redirect.github.com/i18next/i18next-http-backend/issues/198\"\u003e#198\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/i18next/i18next-http-backend/commit/e48caf252143a65312aba9efa784de27aa06bb15\"\u003e\u003ccode\u003ee48caf2\u003c/code\u003e\u003c/a\u003e Bump next from 16.3.6 to 16.3.8 in /example/next (\u003ca href=\"https://redirect.github.com/i18next/i18next-http-backend/issues/197\"\u003e#197\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/i18next/i18next-http-backend/commit/772900cd65e786c3f410f2e2705f84aa81c426af\"\u003e\u003ccode\u003e772900c\u003c/code\u003e\u003c/a\u003e Bump i18next-http-backend from 3.0.5 to 4.0.2 in /example/i18next-vue (\u003ca href=\"https://redirect.github.com/i18next/i18next-http-backend/issues/196\"\u003e#196\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/i18next/i18next-http-backend/commit/42e86393fd4b8d2fc34f2ddadfa6c3097bf87238\"\u003e\u003ccode\u003e42e8639\u003c/code\u003e\u003c/a\u003e 4.0.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/i18next/i18next-http-backend/commit/042c3d4e4e9d73b2ae3aa76b22cb45d48f1e35b7\"\u003e\u003ccode\u003e042c3d4\u003c/code\u003e\u003c/a\u003e security: reject interpolated URLs that turn into \u003ccode\u003e//host\u003c/code\u003e (GHSA-9jhj-wvmw-cfx5)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/i18next/i18next-http-backend/commit/9b5f1e2f65365d958f9e6459c6e51d0ac9a028fa\"\u003e\u003ccode\u003e9b5f1e2\u003c/code\u003e\u003c/a\u003e Bump i18next-http-backend from 1.2.6 to 4.0.2 in /example/angular (\u003ca href=\"https://redirect.github.com/i18next/i18next-http-backend/issues/194\"\u003e#194\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/i18next/i18next-http-backend/commit/be8b9a4962a09b4833e630b3cdbd7a380a5b2aff\"\u003e\u003ccode\u003ebe8b9a4\u003c/code\u003e\u003c/a\u003e Bump next from 16.3.3 to 16.3.6 in /example/next (\u003ca href=\"https://redirect.github.com/i18next/i18next-http-backend/issues/193\"\u003e#193\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/i18next/i18next-http-backend/compare/v4.0.2...v4.0.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `jspdf-autotable` from 5.0.8 to 5.0.9\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/simonbengtsson/jsPDF-AutoTable/releases\"\u003ejspdf-autotable's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.0.9\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFeature/text option pass by \u003ca href=\"https://github.com/TimT1919\"\u003e\u003ccode\u003e@​TimT1919\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/simonbengtsson/jsPDF-AutoTable/pull/1114\"\u003esimonbengtsson/jsPDF-AutoTable#1114\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/TimT1919\"\u003e\u003ccode\u003e@​TimT1919\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/simonbengtsson/jsPDF-AutoTable/pull/1114\"\u003esimonbengtsson/jsPDF-AutoTable#1114\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/simonbengtsson/jsPDF-AutoTable/compare/v5.0.8...v5.0.9\"\u003ehttps://github.com/simonbengtsson/jsPDF-AutoTable/compare/v5.0.8...v5.0.9\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/simonbengtsson/jsPDF-AutoTable/commit/af6dd38ff6b2383069407ef352efcea127e2cb82\"\u003e\u003ccode\u003eaf6dd38\u003c/code\u003e\u003c/a\u003e 5.0.9\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/simonbengtsson/jsPDF-AutoTable/commit/bad76df5e1ee9e7bdbca98d80c3970eac1ba3385\"\u003e\u003ccode\u003ebad76df\u003c/code\u003e\u003c/a\u003e test: add test case that textOptions is passed to jspdf.text\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/simonbengtsson/jsPDF-AutoTable/commit/443bb0e41e4808ba1f7601ef415722e6871c29c1\"\u003e\u003ccode\u003e443bb0e\u003c/code\u003e\u003c/a\u003e feat: pass textOptions to autoTableText in printRow\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/simonbengtsson/jsPDF-AutoTable/commit/d66b06b96fc68a008a21602a11d10626aeef7651\"\u003e\u003ccode\u003ed66b06b\u003c/code\u003e\u003c/a\u003e feat: pass textOptions to jspdf.text in autoTableText\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/simonbengtsson/jsPDF-AutoTable/commit/898e2751095c79b7b83f21d3da23087c415ab7b3\"\u003e\u003ccode\u003e898e275\u003c/code\u003e\u003c/a\u003e feat: add textOptions to Styles\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/simonbengtsson/jsPDF-AutoTable/compare/v5.0.8...v5.0.9\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `lucide` from 1.44.0 to 1.61.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/lucide-icons/lucide/releases\"\u003elucide's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eVersion 1.61.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat(icons): added \u003ccode\u003ecircle-chevrons-down\u003c/code\u003e, \u003ccode\u003ecircle-chevrons-left\u003c/code\u003e, \u003ccode\u003ecircle-chevrons-right\u003c/code\u003e and 1 more icons by \u003ca href=\"https://github.com/ypotti\"\u003e\u003ccode\u003e@​ypotti\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/5025\"\u003elucide-icons/lucide#5025\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ypotti\"\u003e\u003ccode\u003e@​ypotti\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/5025\"\u003elucide-icons/lucide#5025\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/lucide-icons/lucide/compare/1.60.0...1.61.0\"\u003ehttps://github.com/lucide-icons/lucide/compare/1.60.0...1.61.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eVersion 1.60.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat(icons): added \u003ccode\u003etombstone\u003c/code\u003e icon by \u003ca href=\"https://github.com/ryck\"\u003e\u003ccode\u003e@​ryck\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4929\"\u003elucide-icons/lucide#4929\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(icons): added \u003ccode\u003esmartphone-user-round\u003c/code\u003e icon by \u003ca href=\"https://github.com/hitanshu-machhi\"\u003e\u003ccode\u003e@​hitanshu-machhi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4586\"\u003elucide-icons/lucide#4586\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(icons): added \u003ccode\u003ebacon\u003c/code\u003e icon by \u003ca href=\"https://github.com/devkamani9313-lab\"\u003e\u003ccode\u003e@​devkamani9313-lab\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4694\"\u003elucide-icons/lucide#4694\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(site): Fix build by \u003ca href=\"https://github.com/ericfennis\"\u003e\u003ccode\u003e@​ericfennis\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/5033\"\u003elucide-icons/lucide#5033\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(docs): Update icon count comparison with Feather Icons by \u003ca href=\"https://github.com/noahweidig\"\u003e\u003ccode\u003e@​noahweidig\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/5022\"\u003elucide-icons/lucide#5022\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(icons): added \u003ccode\u003eletter-spacing\u003c/code\u003e icon by \u003ca href=\"https://github.com/madebyoz\"\u003e\u003ccode\u003e@​madebyoz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/3038\"\u003elucide-icons/lucide#3038\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump the vue-deps group with 2 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/5027\"\u003elucide-icons/lucide#5027\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps-dev): bump react-native from 0.87.1 to 0.88.0 in the react-native-deps group by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/5030\"\u003elucide-icons/lucide#5030\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(icons): added \u003ccode\u003eline-height\u003c/code\u003e icon by \u003ca href=\"https://github.com/madebyoz\"\u003e\u003ccode\u003e@​madebyoz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/3039\"\u003elucide-icons/lucide#3039\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps-dev): bump the svelte-deps group across 1 directory with 2 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode...\n\n_Description has been truncated_","html_url":"https://github.com/Champ-Deep/ChamPDF/pull/107","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Champ-Deep%2FChamPDF/issues/107","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/107/packages"}},{"old_version":"15.0.2","new_version":"15.0.3","update_type":"patch","path":null,"pr_created_at":"2026-10-25T18:03:44.000Z","version_change":"15.0.2 → 15.0.3","issue":{"uuid":"6027578098","node_id":"PR_kwDOSe0ezc8AAAABKnUHpA","number":219,"state":"open","title":"chore(deps): bump markdown-it from 15.0.2 to 15.0.3","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-25T18:03:44.000Z","updated_at":"2026-10-25T18:08:17.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"markdown-it","old_version":"15.0.2","new_version":"15.0.3","repository_url":"https://github.com/markdown-it/markdown-it"}],"path":null,"ecosystem":"npm"},"body":"Bumps [markdown-it](https://github.com/markdown-it/markdown-it) from 15.0.2 to 15.0.3.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/markdown-it/markdown-it/blob/master/CHANGELOG.md\"\u003emarkdown-it's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[15.0.3] - 2026-10-16\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEnforce the 999 Unicode code point limit for reference definition labels,\npartially addressing \u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1213\"\u003e#1213\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eRequire whitespace before multiline reference titles.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed quadratic complexity when parsing multiline reference definitions.\u003c/li\u003e\n\u003cli\u003eFixed quadratic complexity when parsing unclosed inline HTML comments,\nprocessing instructions, declarations and CDATA sections.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/a8c00d474ec9b304fad9b71c16d6fa8b4909279e\"\u003e\u003ccode\u003ea8c00d4\u003c/code\u003e\u003c/a\u003e 15.0.3 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/e9504a4f1cb42a09d6f4e53d12d89c96d57ee9d4\"\u003e\u003ccode\u003ee9504a4\u003c/code\u003e\u003c/a\u003e Skip pathological speed tests during coverage collection\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/46d8b52016da1c423f4bdeecaa2d69d51c4156c1\"\u003e\u003ccode\u003e46d8b52\u003c/code\u003e\u003c/a\u003e Deps bump\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/928bc8c11ded60181c0e7fc5aa954eec582e8e79\"\u003e\u003ccode\u003e928bc8c\u003c/code\u003e\u003c/a\u003e Fix quadratic inline HTML parsing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/48fbc465812c440020c663f040ab22deaf8f1eca\"\u003e\u003ccode\u003e48fbc46\u003c/code\u003e\u003c/a\u003e Fix quadratic reference parsing and partially address \u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1213\"\u003e#1213\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/markdown-it/markdown-it/compare/15.0.2...15.0.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=markdown-it\u0026package-manager=npm_and_yarn\u0026previous-version=15.0.2\u0026new-version=15.0.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/XBlueSky/vatt-ghern/pull/219","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/XBlueSky%2Fvatt-ghern/issues/219","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/219/packages"}},{"old_version":"15.0.2","new_version":"15.0.3","update_type":"patch","path":"the npm_and_yarn group across 1 directory","pr_created_at":"2026-10-25T02:31:22.000Z","version_change":"15.0.2 → 15.0.3","issue":{"uuid":"6020066058","node_id":"PR_kwDOVDdVMc8AAAABKhe0kQ","number":1,"state":"open","title":"chore(deps-dev): bump markdown-it from 15.0.2 to 15.0.3 in the npm_and_yarn group across 1 directory","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-25T02:31:22.000Z","updated_at":"2026-10-25T02:31:26.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps-dev)","packages":[{"name":"markdown-it","old_version":"15.0.2","new_version":"15.0.3","repository_url":"https://github.com/markdown-it/markdown-it"}],"path":"the npm_and_yarn group across 1 directory","ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 1 update in the / directory: [markdown-it](https://github.com/markdown-it/markdown-it).\n\nUpdates `markdown-it` from 15.0.2 to 15.0.3\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/markdown-it/markdown-it/blob/master/CHANGELOG.md\"\u003emarkdown-it's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[15.0.3] - 2026-10-16\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEnforce the 999 Unicode code point limit for reference definition labels,\npartially addressing \u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1213\"\u003e#1213\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eRequire whitespace before multiline reference titles.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed quadratic complexity when parsing multiline reference definitions.\u003c/li\u003e\n\u003cli\u003eFixed quadratic complexity when parsing unclosed inline HTML comments,\nprocessing instructions, declarations and CDATA sections.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/a8c00d474ec9b304fad9b71c16d6fa8b4909279e\"\u003e\u003ccode\u003ea8c00d4\u003c/code\u003e\u003c/a\u003e 15.0.3 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/e9504a4f1cb42a09d6f4e53d12d89c96d57ee9d4\"\u003e\u003ccode\u003ee9504a4\u003c/code\u003e\u003c/a\u003e Skip pathological speed tests during coverage collection\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/46d8b52016da1c423f4bdeecaa2d69d51c4156c1\"\u003e\u003ccode\u003e46d8b52\u003c/code\u003e\u003c/a\u003e Deps bump\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/928bc8c11ded60181c0e7fc5aa954eec582e8e79\"\u003e\u003ccode\u003e928bc8c\u003c/code\u003e\u003c/a\u003e Fix quadratic inline HTML parsing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/48fbc465812c440020c663f040ab22deaf8f1eca\"\u003e\u003ccode\u003e48fbc46\u003c/code\u003e\u003c/a\u003e Fix quadratic reference parsing and partially address \u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1213\"\u003e#1213\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/markdown-it/markdown-it/compare/15.0.2...15.0.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=markdown-it\u0026package-manager=npm_and_yarn\u0026previous-version=15.0.2\u0026new-version=15.0.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/sn109946/translated-content/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/sn109946/translated-content/pull/1","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/sn109946%2Ftranslated-content/issues/1","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1/packages"}},{"old_version":"14.3.2","new_version":"14.3.3","update_type":"patch","path":null,"pr_created_at":"2026-10-25T02:12:32.000Z","version_change":"14.3.2 → 14.3.3","issue":{"uuid":"6019928082","node_id":"PR_kwDOPelOQ88AAAABKhX2Rg","number":662,"state":"closed","title":"Build(deps): bump the npm_and_yarn group across 1 directory with 5 updates","user":"dependabot[bot]","labels":["type: dependencies","dependencies","javascript"],"assignees":[],"locked":false,"comments_count":4,"pull_request":true,"closed_at":"2026-10-25T02:12:58.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-25T02:12:32.000Z","updated_at":"2026-10-25T02:14:23.000Z","time_to_close":26,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Build(deps): bump","group_name":"npm_and_yarn","update_count":5,"packages":[{"name":"@vitest/browser","old_version":"5.0.3","new_version":"5.0.5","repository_url":"https://github.com/vitest-dev/vitest"},{"name":"handlebars","old_version":"4.7.9","new_version":"4.7.10","repository_url":"https://github.com/handlebars-lang/handlebars.js"},{"name":"markdown-it","old_version":"14.3.2","new_version":"14.3.3","repository_url":"https://github.com/markdown-it/markdown-it"},{"name":"source-map-js","old_version":"1.2.1","new_version":"1.2.2","repository_url":"https://github.com/7rulnik/source-map-js"},{"name":"vite","old_version":"8.1.0","new_version":"8.3.5","repository_url":"https://github.com/vitejs/vite"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 5 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [@vitest/browser](https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser) | `5.0.3` | `5.0.5` |\n| [handlebars](https://github.com/handlebars-lang/handlebars.js) | `4.7.9` | `4.7.10` |\n| [markdown-it](https://github.com/markdown-it/markdown-it) | `14.3.2` | `14.3.3` |\n| [source-map-js](https://github.com/7rulnik/source-map-js) | `1.2.1` | `1.2.2` |\n| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.1.0` | `8.3.5` |\n\n\nUpdates `@vitest/browser` from 5.0.3 to 5.0.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vitest-dev/vitest/releases\"\u003e@​vitest/browser's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.0.5\u003c/h2\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eKeep vite default \u003ccode\u003efs.deny\u003c/code\u003e with api token file  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003eHiroshi Ogawa\u003c/strong\u003e and \u003cstrong\u003eClaude Opus 5.5\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11578\"\u003evitest-dev/vitest#11578\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/28dc1edfb\"\u003e\u003c!-- raw HTML omitted --\u003e(28dc1)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHandle quoted file names in \u003ccode\u003e--changed\u003c/code\u003e  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11583\"\u003evitest-dev/vitest#11583\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/14921e962\"\u003e\u003c!-- raw HTML omitted --\u003e(14921)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003edata\u003c/code\u003e to the \u003ccode\u003eimport.meta.hot\u003c/code\u003e stub  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11590\"\u003evitest-dev/vitest#11590\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/3a8289ac3\"\u003e\u003c!-- raw HTML omitted --\u003e(3a828)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSet \u003ccode\u003eskip\u003c/code\u003e in \u003ccode\u003eskipIf\u003c/code\u003e, ignore \u003ccode\u003eundefined\u003c/code\u003e options  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11591\"\u003evitest-dev/vitest#11591\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/d523a15f2\"\u003e\u003c!-- raw HTML omitted --\u003e(d523a)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSkip builtin loading in async leak detector  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11598\"\u003evitest-dev/vitest#11598\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/fe86a64c6\"\u003e\u003c!-- raw HTML omitted --\u003e(fe86a)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eKeep the import frame in native loader errors  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11599\"\u003evitest-dev/vitest#11599\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/9697b3894\"\u003e\u003c!-- raw HTML omitted --\u003e(9697b)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRun hook cleanups when a later hook fails  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11605\"\u003evitest-dev/vitest#11605\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/6c5a44720\"\u003e\u003c!-- raw HTML omitted --\u003e(6c5a4)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease mocks of finished test files  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11607\"\u003evitest-dev/vitest#11607\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/e9c3d72f0\"\u003e\u003c!-- raw HTML omitted --\u003e(e9c3d)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAbort all running tests on cancel  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11606\"\u003evitest-dev/vitest#11606\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/6621a72d6\"\u003e\u003c!-- raw HTML omitted --\u003e(6621a)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebrowser\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eIgnore synthetic pagehide events  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11582\"\u003evitest-dev/vitest#11582\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/ca0813584\"\u003e\u003c!-- raw HTML omitted --\u003e(ca081)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRun plugin buildStart on server creation  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11593\"\u003evitest-dev/vitest#11593\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/ea611e44c\"\u003e\u003c!-- raw HTML omitted --\u003e(ea611)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDrop late connections of closed sessions  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11600\"\u003evitest-dev/vitest#11600\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/f161e6df2\"\u003e\u003c!-- raw HTML omitted --\u003e(f161e)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eWait 30s for the browser to close  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11601\"\u003evitest-dev/vitest#11601\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/6498b666a\"\u003e\u003c!-- raw HTML omitted --\u003e(6498b)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRun global setup once with instances  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11596\"\u003evitest-dev/vitest#11596\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/8dd67c262\"\u003e\u003c!-- raw HTML omitted --\u003e(8dd67)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ereporter\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eEnd reason \u003ccode\u003e\u0026amp;[#39](https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser/issues/39);failed\u0026amp;[#39](https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser/issues/39);\u003c/code\u003e on worker crash  -  by \u003ca href=\"https://github.com/AriPerkkio\"\u003e\u003ccode\u003e@​AriPerkkio\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11568\"\u003evitest-dev/vitest#11568\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/6ae8e89ff\"\u003e\u003c!-- raw HTML omitted --\u003e(6ae8e)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/vitest-dev/vitest/compare/v5.0.4...v5.0.5\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev5.0.4\u003c/h2\u003e\n\u003ch3\u003e   🚀 Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eexperimental\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eTag cache directories with CACHEDIR.TAG  -  by \u003ca href=\"https://github.com/lifeiscontent\"\u003e\u003ccode\u003e@​lifeiscontent\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11461\"\u003evitest-dev/vitest#11461\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/a8ea3c8fd\"\u003e\u003c!-- raw HTML omitted --\u003e(a8ea3)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003etest.ui.theme\u003c/code\u003e option  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11499\"\u003evitest-dev/vitest#11499\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/1da66405d\"\u003e\u003c!-- raw HTML omitted --\u003e(1da66)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHighlight selector multiple matches in trace view  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003eHiroshi Ogawa\u003c/strong\u003e and \u003cstrong\u003eClaude Opus 5.5\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11489\"\u003evitest-dev/vitest#11489\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/5abba1e1b\"\u003e\u003c!-- raw HTML omitted --\u003e(5abba)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePrint how many tests were affected and a total when running \u003ccode\u003e--changed\u003c/code\u003e  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11424\"\u003evitest-dev/vitest#11424\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/a23368585\"\u003e\u003c!-- raw HTML omitted --\u003e(a2336)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd an option to cache dependencies instead of statically parsing them  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11515\"\u003evitest-dev/vitest#11515\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/c06012ac8\"\u003e\u003c!-- raw HTML omitted --\u003e(c0601)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd fit and zoom controls to trace viewer  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003eHiroshi Ogawa\u003c/strong\u003e and \u003cstrong\u003eClaude Opus 5.5\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11490\"\u003evitest-dev/vitest#11490\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/f5dd99ed0\"\u003e\u003c!-- raw HTML omitted --\u003e(f5dd9)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFail the run on git and location filter errors  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11430\"\u003evitest-dev/vitest#11430\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/30d0304d2\"\u003e\u003c!-- raw HTML omitted --\u003e(30d03)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEnable fsModuleCache by default  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11435\"\u003evitest-dev/vitest#11435\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/ad208cc29\"\u003e\u003c!-- raw HTML omitted --\u003e(ad208)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eTrack project files and mocks with --changed  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11432\"\u003evitest-dev/vitest#11432\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/b0f2b3bb9\"\u003e\u003c!-- raw HTML omitted --\u003e(b0f2b)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRefactor caching, fix \u003ccode\u003e:\u003c/code\u003e in project and change the shape of \u003ccode\u003eresults\u003c/code\u003e cache  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11453\"\u003evitest-dev/vitest#11453\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/9673c49a4\"\u003e\u003c!-- raw HTML omitted --\u003e(9673c)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eKeep full \u003ccode\u003e$\u003c/code\u003e string values when \u003ccode\u003etaskTitleValueFormatTruncate\u003c/code\u003e is 0  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003eHiroshi Ogawa\u003c/strong\u003e and \u003cstrong\u003eClaude Opus 5.5\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11485\"\u003evitest-dev/vitest#11485\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/4f7e1799b\"\u003e\u003c!-- raw HTML omitted --\u003e(4f7e1)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eResolve node builtins in client environments  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11417\"\u003evitest-dev/vitest#11417\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/56b319ac6\"\u003e\u003c!-- raw HTML omitted --\u003e(56b31)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix module graph builtin externals after \u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser/issues/11421\"\u003e#11421\u003c/a\u003e  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003eHiroshi Ogawa\u003c/strong\u003e and \u003cstrong\u003eClaude Opus 5.5\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11491\"\u003evitest-dev/vitest#11491\u003c/a\u003e and \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11421\"\u003evitest-dev/vitest#11421\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/008e184cb\"\u003e\u003c!-- raw HTML omitted --\u003e(008e1)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eWrap module mocks during in-source testing  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11505\"\u003evitest-dev/vitest#11505\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/36d19cb00\"\u003e\u003c!-- raw HTML omitted --\u003e(36d19)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHandle line endings in snapshot  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11522\"\u003evitest-dev/vitest#11522\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/4c468aa40\"\u003e\u003c!-- raw HTML omitted --\u003e(4c468)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRespect root in projects  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11521\"\u003evitest-dev/vitest#11521\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/26642f793\"\u003e\u003c!-- raw HTML omitted --\u003e(26642)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eResolve mocks in directories with spaces  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11539\"\u003evitest-dev/vitest#11539\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/caaef9416\"\u003e\u003c!-- raw HTML omitted --\u003e(caaef)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eapi\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003ePublish the api token atomically  -  by \u003ca href=\"https://github.com/umairnawaz333\"\u003e\u003ccode\u003e@​umairnawaz333\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11323\"\u003evitest-dev/vitest#11323\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/6f990fef1\"\u003e\u003c!-- raw HTML omitted --\u003e(6f990)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebrowser\u003c/strong\u003e:\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/7a825db43e2beca0b219d2eadaec334cb81af0c7\"\u003e\u003ccode\u003e7a825db\u003c/code\u003e\u003c/a\u003e chore: release v5.0.5 (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser/issues/11609\"\u003e#11609\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/f161e6df2b3c0bc84982d374094379139e380791\"\u003e\u003ccode\u003ef161e6d\u003c/code\u003e\u003c/a\u003e fix(browser): drop late connections of closed sessions (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser/issues/11600\"\u003e#11600\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/ca081358494a6170b1e4e3f9472243a7f03ad31c\"\u003e\u003ccode\u003eca08135\u003c/code\u003e\u003c/a\u003e fix(browser): ignore synthetic pagehide events (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser/issues/11582\"\u003e#11582\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/6a11cf66f99fa610b7364363d5ca42b66d994f40\"\u003e\u003ccode\u003e6a11cf6\u003c/code\u003e\u003c/a\u003e chore: release v5.0.4 (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser/issues/11554\"\u003e#11554\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/69e6369f64455b4d78a6338521bbfc5fdb909af0\"\u003e\u003ccode\u003e69e6369\u003c/code\u003e\u003c/a\u003e fix(browser): open one cdp session per tester (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser/issues/11542\"\u003e#11542\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/caaef94168ff9fad434bf0470c0a3270860c37b7\"\u003e\u003ccode\u003ecaaef94\u003c/code\u003e\u003c/a\u003e fix: resolve mocks in directories with spaces (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser/issues/11539\"\u003e#11539\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/bf04b9ccc7235949e63490d310cdca00e61b3e4a\"\u003e\u003ccode\u003ebf04b9c\u003c/code\u003e\u003c/a\u003e fix(browser): run browser instances as workers (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser/issues/11525\"\u003e#11525\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/662e8a3637725553b9466f768b22ec844e8d5ea6\"\u003e\u003ccode\u003e662e8a3\u003c/code\u003e\u003c/a\u003e fix(browser): avoid extra scroll outside the iframe (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser/issues/11523\"\u003e#11523\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/b61d1ced3a11fea09e02a95a8b8fbcecbf0944ac\"\u003e\u003ccode\u003eb61d1ce\u003c/code\u003e\u003c/a\u003e fix(browser): wait for setup mocks before importing a test file (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser/issues/11520\"\u003e#11520\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/1da66405d5e979299601a8c7fd13fb0f78e74495\"\u003e\u003ccode\u003e1da6640\u003c/code\u003e\u003c/a\u003e feat: support \u003ccode\u003etest.ui.theme\u003c/code\u003e option (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser/issues/11499\"\u003e#11499\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/browser\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `handlebars` from 4.7.9 to 4.7.10\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/handlebars-lang/handlebars.js/releases\"\u003ehandlebars's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.7.10\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003esecurity: Sanitize the source map URL when minifying - f37c599\u003c/li\u003e\n\u003cli\u003esecurity: Iterate lazily in #each and strip whitespace in linear time - 812c226\u003c/li\u003e\n\u003cli\u003esecurity: Escape \u003ccode\u003e\u0026lt;!--\u003c/code\u003e and \u003ccode\u003e\u0026lt;script\u003c/code\u003e in precompiled output - 609d1b1 GHSA-xw65-4hp5-5hc7\u003c/li\u003e\n\u003cli\u003esecurity: Don't trust special properties on context data - ceec388 GHSA-p8wg-vrv2-v86f\u003c/li\u003e\n\u003cli\u003esecurity: Only compile partials that are template strings - c28ee7a\u003c/li\u003e\n\u003cli\u003esecurity: Only dispatch known node types in the Compiler and Visitor - 7d501a5\u003c/li\u003e\n\u003cli\u003esecurity: Validate AST values in the compiler instead of the parser - 703fdcc GHSA-8r5x-fm3f-whwj\u003c/li\u003e\n\u003cli\u003eClarify that --root does not restrict filesystem access - 0fcf25c\u003c/li\u003e\n\u003cli\u003eBump minimist to ^1.2.8 - ea8ed82\u003c/li\u003e\n\u003cli\u003eFix Ruby component publishing documentation - d069c1c\u003c/li\u003e\n\u003cli\u003eFix Composer component definition - 6714e07\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eCompatibility notes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e{{#each}}\u003c/code\u003e iterates iterables such as \u003ccode\u003eMap\u003c/code\u003e, \u003ccode\u003eSet\u003c/code\u003e and generators lazily, like \u003ccode\u003efor...of\u003c/code\u003e, instead of\ncopying them into an array first. Values added to the iterable while the block renders are now visited too.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/compare/v4.7.9...v4.7.10\"\u003eCommits\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/handlebars-lang/handlebars.js/blob/v4.7.10/release-notes.md\"\u003ehandlebars's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.7.10 - October 5th, 2026\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003esecurity: Sanitize the source map URL when minifying - f37c599\u003c/li\u003e\n\u003cli\u003esecurity: Iterate lazily in #each and strip whitespace in linear time - 812c226\u003c/li\u003e\n\u003cli\u003esecurity: Escape \u003ccode\u003e\u0026lt;!--\u003c/code\u003e and \u003ccode\u003e\u0026lt;script\u003c/code\u003e in precompiled output - 609d1b1 GHSA-xw65-4hp5-5hc7\u003c/li\u003e\n\u003cli\u003esecurity: Don't trust special properties on context data - ceec388 GHSA-p8wg-vrv2-v86f\u003c/li\u003e\n\u003cli\u003esecurity: Only compile partials that are template strings - c28ee7a\u003c/li\u003e\n\u003cli\u003esecurity: Only dispatch known node types in the Compiler and Visitor - 7d501a5\u003c/li\u003e\n\u003cli\u003esecurity: Validate AST values in the compiler instead of the parser - 703fdcc GHSA-8r5x-fm3f-whwj\u003c/li\u003e\n\u003cli\u003eClarify that --root does not restrict filesystem access - 0fcf25c\u003c/li\u003e\n\u003cli\u003eBump minimist to ^1.2.8 - ea8ed82\u003c/li\u003e\n\u003cli\u003eFix Ruby component publishing documentation - d069c1c\u003c/li\u003e\n\u003cli\u003eFix Composer component definition - 6714e07\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eCompatibility notes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e{{#each}}\u003c/code\u003e iterates iterables such as \u003ccode\u003eMap\u003c/code\u003e, \u003ccode\u003eSet\u003c/code\u003e and generators lazily, like \u003ccode\u003efor...of\u003c/code\u003e, instead of\ncopying them into an array first. Values added to the iterable while the block renders are now visited too.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/compare/v4.7.9...v4.7.10\"\u003eCommits\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/45ce15255e0f430ac6d19742b18e316b7539264e\"\u003e\u003ccode\u003e45ce152\u003c/code\u003e\u003c/a\u003e v4.7.10\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/e47b2365d5656ab5689ae226aef90a485a90c5d8\"\u003e\u003ccode\u003ee47b236\u003c/code\u003e\u003c/a\u003e Update release notes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/f37c599de9187715eb1e9afedcb2d80c175487a0\"\u003e\u003ccode\u003ef37c599\u003c/code\u003e\u003c/a\u003e Sanitize the source map URL when minifying\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/812c2260cb8794ef4ab63a7f1d946431112560ca\"\u003e\u003ccode\u003e812c226\u003c/code\u003e\u003c/a\u003e Iterate lazily in #each and strip whitespace in linear time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/609d1b11c833c9a3e00f56f2f34d22f425446725\"\u003e\u003ccode\u003e609d1b1\u003c/code\u003e\u003c/a\u003e Escape \u003ccode\u003e\u0026lt;!--\u003c/code\u003e and \u003ccode\u003e\u0026lt;script\u003c/code\u003e in precompiled output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/ceec388abe1d1aac8f6369860d5f390fa71ef4fa\"\u003e\u003ccode\u003eceec388\u003c/code\u003e\u003c/a\u003e Don't trust special properties on context data\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/c28ee7adb312308e0fe26f4d435a481be5e1ff98\"\u003e\u003ccode\u003ec28ee7a\u003c/code\u003e\u003c/a\u003e Only compile partials that are template strings\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/7d501a5af2ac3aa9ac788a8889dbe419849e46f1\"\u003e\u003ccode\u003e7d501a5\u003c/code\u003e\u003c/a\u003e Only dispatch known node types in the Compiler and Visitor\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/703fdcc5fd6cc8d1cc0c33cc19de40c467c4b8d2\"\u003e\u003ccode\u003e703fdcc\u003c/code\u003e\u003c/a\u003e Validate AST values in the compiler instead of the parser\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/0fcf25c63038b43e78e17adbf029cf073e80554d\"\u003e\u003ccode\u003e0fcf25c\u003c/code\u003e\u003c/a\u003e Clarify that --root does not restrict filesystem access\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/handlebars-lang/handlebars.js/compare/v4.7.9...v4.7.10\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `markdown-it` from 14.3.2 to 14.3.3\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/markdown-it/markdown-it/blob/14.3.3/CHANGELOG.md\"\u003emarkdown-it's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[14.3.3] - 2026-10-16\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackported 15.0.3 fixes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d372f0d8a68bef0b0acaa68868ce8ae8ba85b384\"\u003e\u003ccode\u003ed372f0d\u003c/code\u003e\u003c/a\u003e 14.3.3 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d99f48839d37af6fd8a2617516c43dab90755503\"\u003e\u003ccode\u003ed99f488\u003c/code\u003e\u003c/a\u003e Backported 15.0.3 fixes\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/markdown-it/markdown-it/compare/14.3.2...14.3.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `source-map-js` from 1.2.1 to 1.2.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/7rulnik/source-map-js/releases\"\u003esource-map-js's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.2.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eFix crash when executing in browser with CSP script-src that don't permit unsafe-eval (\u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/29\"\u003e#29\u003c/a\u003e) \u003ca href=\"https://github.com/xfournet\"\u003e\u003ccode\u003e@​xfournet\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eFix denial of service from malicious indexed source maps (CVE-2026-93749) (\u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/79\"\u003e#79\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eReported by \u003ca href=\"https://github.com/waydeshi\"\u003e\u003ccode\u003e@​waydeshi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/issues/76\"\u003e#76\u003c/a\u003e. A fix was also proposed by \u003ca href=\"https://github.com/aniebiet\"\u003e\u003ccode\u003e@​aniebiet\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/78\"\u003e#78\u003c/a\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/7rulnik/source-map-js/blob/main/CHANGELOG.md\"\u003esource-map-js's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.2.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eFix crash when executing in browser with CSP script-src that don't permit unsafe-eval (\u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/29\"\u003e#29\u003c/a\u003e) \u003ca href=\"https://github.com/xfournet\"\u003e\u003ccode\u003e@​xfournet\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eFix denial of service from malicious indexed source maps (CVE-2026-93749) (\u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/79\"\u003e#79\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eReported by \u003ca href=\"https://github.com/waydeshi\"\u003e\u003ccode\u003e@​waydeshi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/issues/76\"\u003e#76\u003c/a\u003e. A fix was also proposed by \u003ca href=\"https://github.com/aniebiet\"\u003e\u003ccode\u003e@​aniebiet\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/78\"\u003e#78\u003c/a\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/7rulnik/source-map-js/commit/0a1d334fd1e55a47df97fcd60a7915d46df3b08a\"\u003e\u003ccode\u003e0a1d334\u003c/code\u003e\u003c/a\u003e 1.2.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/7rulnik/source-map-js/commit/4c6fa26d77419bd8e48ec92844866cce7d9ae739\"\u003e\u003ccode\u003e4c6fa26\u003c/code\u003e\u003c/a\u003e Update changelog\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/7rulnik/source-map-js/commit/cf7658058ceeaa8619d5ae0ec90be6905209d016\"\u003e\u003ccode\u003ecf76580\u003c/code\u003e\u003c/a\u003e Fix denial of service from malicious indexed source maps (CVE-2026-93749) (\u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/issues/79\"\u003e#79\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/7rulnik/source-map-js/commit/7899a86615c630f4fc220273ff9fe2e8e49a56df\"\u003e\u003ccode\u003e7899a86\u003c/code\u003e\u003c/a\u003e Fix crash when executing browser with CSP script-src that don't permit unsafe...\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/7rulnik/source-map-js/compare/v1.2.1...v1.2.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `vite` from 8.1.0 to 8.3.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vitejs/vite/releases\"\u003evite's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev8.3.5\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ebuild:\u003c/strong\u003e handle missing chunk import maps (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23777\"\u003e#23777\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/8d7623d9b5647714a5b20cbd787a5401ca846229\"\u003e8d7623d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebuild:\u003c/strong\u003e include preload dependencies to chunk import map hashing (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23793\"\u003e#23793\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/4d16e7c14d5e1c361f148238b1e81131238ab8e9\"\u003e4d16e7c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e apply \u003ccode\u003eserver.origin\u003c/code\u003e to asset URLs (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23683\"\u003e#23683\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/52ba877693c8633458d163117504a8259beb3cf5\"\u003e52ba877\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e declare utf-8 charset in fallback page (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23846\"\u003e#23846\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/197daf6c4c7bfdaa005bebcc41dd2ff22fa3a5b6\"\u003e197daf6\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e ignore build.chunkImportMap (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23685\"\u003e#23685\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/cfe917d67d279a13f20ae9449e3befa736b64b07\"\u003ecfe917d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e include user \u003ccode\u003eimport.meta.env.*\u003c/code\u003e defines in the \u003ccode\u003eimport.meta.env\u003c/code\u003e object (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23713\"\u003e#23713\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/6019aa79975465516da7c6f532d568422b019a25\"\u003e6019aa7\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e map forwarded error stacks through the bundle source maps (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23741\"\u003e#23741\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/11fe1e46ff0c136cb90fbe263ba03993bc94df18\"\u003e11fe1e4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e normalize served output files (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23684\"\u003e#23684\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/df4e02cc8317a62f21edefc79a9690571ffed1f3\"\u003edf4e02c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e stop hmr propagation at modules that are no longer imported (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23839\"\u003e#23839\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/7471e8c3b32d3d55243590bb7713e602c9fb0212\"\u003e7471e8c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecss:\u003c/strong\u003e don't fail on a literal \u003ccode\u003e%\u003c/code\u003e in \u003ccode\u003eurl()\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23676\"\u003e#23676\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/50b382d31835b8b4bc8b6964738ac03146e44261\"\u003e50b382d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update all non-major dependencies (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23731\"\u003e#23731\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/cf80aa552cac02eac0293330ccd5fde3c7ae8d29\"\u003ecf80aa5\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update all non-major dependencies (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23826\"\u003e#23826\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/77d8373510da1b26ce057eb2248e570b7f63fde9\"\u003e77d8373\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update rolldown-related dependencies (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23733\"\u003e#23733\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/43f0d052e514c3ad2dea2f7dc44b0720e1f62f48\"\u003e43f0d05\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update rolldown-related dependencies (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23827\"\u003e#23827\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/c2e04187e49aab7ab809989f0537b4906653acab\"\u003ec2e0418\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoptimizer:\u003c/strong\u003e fall back to yarn.lock for lockfile hash (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23667\"\u003e#23667\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/f20609630faa93026924275115d1426fdc08629e\"\u003ef206096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoptimizer:\u003c/strong\u003e scan \u003ccode\u003eoxc.jsxInject\u003c/code\u003e imports (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23758\"\u003e#23758\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/38f3cb45b1490ed24775547ceafa677b91a57714\"\u003e38f3cb4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoptimizer:\u003c/strong\u003e skip patches dir check for yarn.lock fallback (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23725\"\u003e#23725\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/8e890e1ce438bfbc07ea4931ce332e40589940fa\"\u003e8e890e1\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoptimizer:\u003c/strong\u003e skip patches dir hash for nub lockfile (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23761\"\u003e#23761\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/a7d56967ef0050a09c0507e63a18164bc7a0d486\"\u003ea7d5696\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eresolve:\u003c/strong\u003e support subpath imports with multiple \u003ccode\u003e#\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23631\"\u003e#23631\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/0d86b3485fbbd0fcb9a1f70a14adedfcb7a1fff1\"\u003e0d86b34\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eresolve:\u003c/strong\u003e update resolve.exports to 2.0.4 (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23739\"\u003e#23739\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/4ea708a3ae9a324c6aabca59fade4082bf72f3e5\"\u003e4ea708a\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eserver:\u003c/strong\u003e handle socket errors on upgrade requests not taken by the HMR server (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23728\"\u003e#23728\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/c2c9ef4dcd05b3e4d88844ea3a13dc23819ca2a5\"\u003ec2c9ef4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eserver:\u003c/strong\u003e only strip base when path matches a full segment (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23641\"\u003e#23641\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/3dfde87b90a9f80b125d710e3e5d4fc795662db6\"\u003e3dfde87\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePerformance Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003essr:\u003c/strong\u003e extract inline source maps without a regexp (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23775\"\u003e#23775\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/6a0278055d8501bbaf65b8d34ec094722b4e877a\"\u003e6a02780\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMiscellaneous Chores\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003emigrate to Oxlint (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23746\"\u003e#23746\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/5b73935881424ed5919571036dd89d3868590f92\"\u003e5b73935\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCode Refactoring\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e replace \u003ccode\u003e@vercel/detect-agent\u003c/code\u003e with \u003ccode\u003estd-env\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23744\"\u003e#23744\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/ce4293f15cc5cd221c5ed60f5cd64e82ca5cbaf5\"\u003ece4293f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edev:\u003c/strong\u003e consolidate moduleURL to file path utilities (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23828\"\u003e#23828\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/df7b40ee9d691e9f4e2413244f6665ef5482dce3\"\u003edf7b40e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edev:\u003c/strong\u003e separate import resolution from URL conversion (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23791\"\u003e#23791\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/611668983d4b717f5e5e66cf9f7125bd94f92bf7\"\u003e6116689\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edev:\u003c/strong\u003e share ModuleURL and BrowserURL conversions (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23790\"\u003e#23790\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/446954c69c806795c83fe2f97c28ae8f9ef83731\"\u003e446954c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edev:\u003c/strong\u003e use ModuleURLs throughout HTML transforms (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23815\"\u003e#23815\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/a16299092c0f0f3f90e05d4bb5f0168b293c2b52\"\u003ea162990\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev8.3.4\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e support \u003ccode\u003eimport.meta.hot.acceptExports\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23463\"\u003e#23463\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/bc0f21c56a2e003a4d2dd23ccb9da3ec8c706c4e\"\u003ebc0f21c\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eavoid mutating hmr defaults (fix \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23575\"\u003e#23575\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23576\"\u003e#23576\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/574d5e351905fe99891364d03c2440531378f7fd\"\u003e574d5e3\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md\"\u003evite's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://github.com/vitejs/vite/compare/v8.3.4...v8.3.5\"\u003e8.3.5\u003c/a\u003e (2026-10-21)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ebuild:\u003c/strong\u003e handle missing chunk import maps (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23777\"\u003e#23777\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/8d7623d9b5647714a5b20cbd787a5401ca846229\"\u003e8d7623d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebuild:\u003c/strong\u003e include preload dependencies to chunk import map hashing (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23793\"\u003e#23793\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/4d16e7c14d5e1c361f148238b1e81131238ab8e9\"\u003e4d16e7c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e apply \u003ccode\u003eserver.origin\u003c/code\u003e to asset URLs (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23683\"\u003e#23683\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/52ba877693c8633458d163117504a8259beb3cf5\"\u003e52ba877\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e declare utf-8 charset in fallback page (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23846\"\u003e#23846\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/197daf6c4c7bfdaa005bebcc41dd2ff22fa3a5b6\"\u003e197daf6\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e ignore build.chunkImportMap (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23685\"\u003e#23685\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/cfe917d67d279a13f20ae9449e3befa736b64b07\"\u003ecfe917d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e include user \u003ccode\u003eimport.meta.env.*\u003c/code\u003e defines in the \u003ccode\u003eimport.meta.env\u003c/code\u003e object (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23713\"\u003e#23713\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/6019aa79975465516da7c6f532d568422b019a25\"\u003e6019aa7\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e map forwarded error stacks through the bundle source maps (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23741\"\u003e#23741\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/11fe1e46ff0c136cb90fbe263ba03993bc94df18\"\u003e11fe1e4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e normalize served output files (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23684\"\u003e#23684\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/df4e02cc8317a62f21edefc79a9690571ffed1f3\"\u003edf4e02c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e stop hmr propagation at modules that are no longer imported (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23839\"\u003e#23839\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/7471e8c3b32d3d55243590bb7713e602c9fb0212\"\u003e7471e8c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecss:\u003c/strong\u003e don't fail on a literal \u003ccode\u003e%\u003c/code\u003e in \u003ccode\u003eurl()\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23676\"\u003e#23676\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/50b382d31835b8b4bc8b6964738ac03146e44261\"\u003e50b382d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update all non-major dependencies (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23731\"\u003e#23731\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/cf80aa552cac02eac0293330ccd5fde3c7ae8d29\"\u003ecf80aa5\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update all non-major dependencies (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23826\"\u003e#23826\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/77d8373510da1b26ce057eb2248e570b7f63fde9\"\u003e77d8373\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update rolldown-related dependencies (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23733\"\u003e#23733\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/43f0d052e514c3ad2dea2f7dc44b0720e1f62f48\"\u003e43f0d05\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update rolldown-related dependencies (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23827\"\u003e#23827\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/c2e04187e49aab7ab809989f0537b4906653acab\"\u003ec2e0418\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoptimizer:\u003c/strong\u003e fall back to yarn.lock for lockfile hash (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23667\"\u003e#23667\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/f20609630faa93026924275115d1426fdc08629e\"\u003ef206096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoptimizer:\u003c/strong\u003e scan \u003ccode\u003eoxc.jsxInject\u003c/code\u003e imports (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23758\"\u003e#23758\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/38f3cb45b1490ed24775547ceafa677b91a57714\"\u003e38f3cb4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoptimizer:\u003c/strong\u003e skip patches dir check for yarn.lock fallback (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23725\"\u003e#23725\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/8e890e1ce438bfbc07ea4931ce332e40589940fa\"\u003e8e890e1\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoptimizer:\u003c/strong\u003e skip patches dir hash for nub lockfile (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23761\"\u003e#23761\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/a7d56967ef0050a09c0507e63a18164bc7a0d486\"\u003ea7d5696\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eresolve:\u003c/strong\u003e support subpath imports with multiple \u003ccode\u003e#\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23631\"\u003e#23631\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/0d86b3485fbbd0fcb9a1f70a14adedfcb7a1fff1\"\u003e0d86b34\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eresolve:\u003c/strong\u003e update resolve.exports to 2.0.4 (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23739\"\u003e#23739\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/4ea708a3ae9a324c6aabca59fade4082bf72f3e5\"\u003e4ea708a\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eserver:\u003c/strong\u003e handle socket errors on upgrade requests not taken by the HMR server (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23728\"\u003e#23728\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/c2c9ef4dcd05b3e4d88844ea3a13dc23819ca2a5\"\u003ec2c9ef4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eserver:\u003c/strong\u003e only strip base when path matches a full segment (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23641\"\u003e#23641\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/3dfde87b90a9f80b125d710e3e5d4fc795662db6\"\u003e3dfde87\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePerformance Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003essr:\u003c/strong\u003e extract inline source maps without a regexp (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23775\"\u003e#23775\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/6a0278055d8501bbaf65b8d34ec094722b4e877a\"\u003e6a02780\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMiscellaneous Chores\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003emigrate to Oxlint (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23746\"\u003e#23746\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/5b73935881424ed5919571036dd89d3868590f92\"\u003e5b73935\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCode Refactoring\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e replace \u003ccode\u003e@vercel/detect-agent\u003c/code\u003e with \u003ccode\u003estd-env\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23744\"\u003e#23744\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/ce4293f15cc5cd221c5ed60f5cd64e82ca5cbaf5\"\u003ece4293f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edev:\u003c/strong\u003e consolidate moduleURL to file path utilities (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23828\"\u003e#23828\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/df7b40ee9d691e9f4e2413244f6665ef5482dce3\"\u003edf7b40e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edev:\u003c/strong\u003e separate import resolution from URL conversion (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23791\"\u003e#23791\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/611668983d4b717f5e5e66cf9f7125bd94f92bf7\"\u003e6116689\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edev:\u003c/strong\u003e share ModuleURL and BrowserURL conversions (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23790\"\u003e#23790\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/446954c69c806795c83fe2f97c28ae8f9ef83731\"\u003e446954c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edev:\u003c/strong\u003e use ModuleURLs throughout HTML transforms (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23815\"\u003e#23815\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/a16299092c0f0f3f90e05d4bb5f0168b293c2b52\"\u003ea162990\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://github.com/vitejs/vite/compare/v8.3.3...v8.3.4\"\u003e8.3.4\u003c/a\u003e (2026-10-08)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e support \u003ccode\u003eimport.meta.hot.acceptExports\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23463\"\u003e#23463\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/bc0f21c56a2e003a4d2dd23ccb9da3ec8c706c4e\"\u003ebc0f21c\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eavoid mutating hmr defaults (fix \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23575\"\u003e#23575\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23576\"\u003e#23576\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/574d5e351905fe99891364d03c2440531378f7fd\"\u003e574d5e3\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/981f07fa4580fb88b333c4450431e4715d2a0b82\"\u003e\u003ccode\u003e981f07f\u003c/code\u003e\u003c/a\u003e release: v8.3.5 (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23856\"\u003e#23856\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/0d86b3485fbbd0fcb9a1f70a14adedfcb7a1fff1\"\u003e\u003ccode\u003e0d86b34\u003c/code\u003e\u003c/a\u003e fix(resolve): support subpath imports with multiple \u003ccode\u003e#\u003c/code\u003e (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23631\"\u003e#23631\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/6a0278055d8501bbaf65b8d34ec094722b4e877a\"\u003e\u003ccode\u003e6a02780\u003c/code\u003e\u003c/a\u003e perf(ssr): extract inline source maps without a regexp (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23775\"\u003e#23775\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/8e890e1ce438bfbc07ea4931ce332e40589940fa\"\u003e\u003ccode\u003e8e890e1\u003c/code\u003e\u003c/a\u003e fix(optimizer): skip patches dir check for yarn.lock fallback (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23725\"\u003e#23725\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/197daf6c4c7bfdaa005bebcc41dd2ff22fa3a5b6\"\u003e\u003ccode\u003e197daf6\u003c/code\u003e\u003c/a\u003e fix(bundled-dev): declare utf-8 charset in fallback page (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23846\"\u003e#23846\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/4d16e7c14d5e1c361f148238b1e81131238ab8e9\"\u003e\u003ccode\u003e4d16e7c\u003c/code\u003e\u003c/a\u003e fix(build): include preload dependencies to chunk import map hashing (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23793\"\u003e#23793\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/df7b40ee9d691e9f4e2413244f6665ef5482dce3\"\u003e\u003ccode\u003edf7b40e\u003c/code\u003e\u003c/a\u003e refactor(dev): consolidate moduleURL to file path utilities (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23828\"\u003e#23828\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/a16299092c0f0f3f90e05d4bb5f0168b293c2b52\"\u003e\u003ccode\u003ea162990\u003c/code\u003e\u003c/a\u003e refactor(dev): use ModuleURLs throughout HTML transforms (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23815\"\u003e#23815\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/611668983d4b717f5e5e66cf9f7125bd94f92bf7\"\u003e\u003ccode\u003e6116689\u003c/code\u003e\u003c/a\u003e refactor(dev): separate import resolution from URL conversion (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23791\"\u003e#23791\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/446954c69c806795c83fe2f97c28ae8f9ef83731\"\u003e\u003ccode\u003e446954c\u003c/code\u003e\u003c/a\u003e refactor(dev): share ModuleURL and BrowserURL conversions (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23790\"\u003e#23790\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vitejs/vite/commits/v8.3.5/packages/vite\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/CLDMV/slothlet/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/CLDMV/slothlet/pull/662","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/CLDMV%2Fslothlet/issues/662","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/662/packages"}},{"old_version":"14.3.1","new_version":"14.3.3","update_type":"patch","path":null,"pr_created_at":"2026-10-24T14:12:11.000Z","version_change":"14.3.1 → 14.3.3","issue":{"uuid":"6013845682","node_id":"PR_kwDOCAiJ0s8AAAABKcrA0w","number":9094,"state":"open","title":"Bump markdown-it from 14.3.1 to 14.3.3","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":["rzhao271"],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-24T14:12:11.000Z","updated_at":"2026-10-24T14:15:17.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"markdown-it","old_version":"14.3.1","new_version":"14.3.3","repository_url":"https://github.com/markdown-it/markdown-it"}],"path":null,"ecosystem":"npm"},"body":"Bumps [markdown-it](https://github.com/markdown-it/markdown-it) from 14.3.1 to 14.3.3.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/markdown-it/markdown-it/blob/14.3.3/CHANGELOG.md\"\u003emarkdown-it's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[14.3.3] - 2026-10-16\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackported 15.0.3 fixes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[14.3.2] - 2026-09-12\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackported 15.0.2 fixes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d372f0d8a68bef0b0acaa68868ce8ae8ba85b384\"\u003e\u003ccode\u003ed372f0d\u003c/code\u003e\u003c/a\u003e 14.3.3 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d99f48839d37af6fd8a2617516c43dab90755503\"\u003e\u003ccode\u003ed99f488\u003c/code\u003e\u003c/a\u003e Backported 15.0.3 fixes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/efb9993124c3eb229eea24dd659c91dcee7f6d60\"\u003e\u003ccode\u003eefb9993\u003c/code\u003e\u003c/a\u003e 14.3.2 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/daf5a3c32303e5d9de01b12eeb725fb5990b8162\"\u003e\u003ccode\u003edaf5a3c\u003c/code\u003e\u003c/a\u003e Backported 15.0.2 fixes\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/markdown-it/markdown-it/compare/14.3.1...14.3.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=markdown-it\u0026package-manager=npm_and_yarn\u0026previous-version=14.3.1\u0026new-version=14.3.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/microsoft/vscode-pull-request-github/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/microsoft/vscode-pull-request-github/pull/9094","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2Fvscode-pull-request-github/issues/9094","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/9094/packages"}},{"old_version":"15.0.2","new_version":"15.0.3","update_type":"patch","path":null,"pr_created_at":"2026-10-24T04:12:19.000Z","version_change":"15.0.2 → 15.0.3","issue":{"uuid":"6009201227","node_id":"PR_kwDOT_ZWZ88AAAABKZGclw","number":392,"state":"open","title":"Bump the dependencies group across 1 directory with 6 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-24T04:12:19.000Z","updated_at":"2026-10-24T04:12:29.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"dependencies","update_count":6,"packages":[{"name":"@anthropic-ai/sdk","old_version":"0.133.0","new_version":"0.137.0","repository_url":"https://github.com/anthropics/anthropic-sdk-typescript"},{"name":"@larksuiteoapi/node-sdk","old_version":"1.74.0","new_version":"1.76.0","repository_url":"https://github.com/larksuite/node-sdk"},{"name":"markdown-it","old_version":"15.0.2","new_version":"15.0.3","repository_url":"https://github.com/markdown-it/markdown-it"},{"name":"zod","old_version":"3.25.76","new_version":"4.6.7","repository_url":"https://github.com/colinhacks/zod"},{"name":"electron","old_version":"44.7.0","new_version":"44.9.3","repository_url":"https://github.com/electron/electron"},{"name":"electron-builder","old_version":"26.15.3","new_version":"26.18.0","repository_url":"https://github.com/electron-userland/electron-builder"}],"path":null,"ecosystem":"npm"},"body":"Bumps the dependencies group with 6 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) | `0.133.0` | `0.137.0` |\n| [@larksuiteoapi/node-sdk](https://github.com/larksuite/node-sdk) | `1.74.0` | `1.76.0` |\n| [markdown-it](https://github.com/markdown-it/markdown-it) | `15.0.2` | `15.0.3` |\n| [zod](https://github.com/colinhacks/zod) | `3.25.76` | `4.6.7` |\n| [electron](https://github.com/electron/electron) | `44.7.0` | `44.9.3` |\n| [electron-builder](https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder) | `26.15.3` | `26.18.0` |\n\n\nUpdates `@anthropic-ai/sdk` from 0.133.0 to 0.137.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/anthropics/anthropic-sdk-typescript/releases\"\u003e@​anthropic-ai/sdk's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003esdk-v0.137.0\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e add org webhook endpoints and user profile enforcement events\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChores\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eci:\u003c/strong\u003e run the changelog check on a standard runner\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003etests:\u003c/strong\u003e make credential tests independent of the caller's environment\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003esdk-v0.136.0\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e add data_refreshed_at and has_more to analytics report pages\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e add workspace rate-limit updates to the Admin API\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e make User Profiles generally available\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient:\u003c/strong\u003e yield server-sent events with unrecognized event names\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003etools:\u003c/strong\u003e accept every tool definition field in the tool helpers\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eclient:\u003c/strong\u003e treat x-amz-security-token as a sensitive header\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003etools:\u003c/strong\u003e keep $ sequences literal in memory tool str_replace\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChores\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eci:\u003c/strong\u003e skip the changelog check on draft pull requests\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edocs:\u003c/strong\u003e add credential expiry descriptions to the Managed Agents API reference\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edocs:\u003c/strong\u003e add Messages API request descriptions\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edocs:\u003c/strong\u003e correct plugin manifest_version and reach descriptions\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edocs:\u003c/strong\u003e improve Managed Agents memory store descriptions\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edocs:\u003c/strong\u003e improve Managed Agents vault and credential descriptions\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003einternal:\u003c/strong\u003e bump playwright-core in the browser ecosystem tests\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003etests:\u003c/strong\u003e cover OpenTelemetry failures, propagation and environment variables\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003esdk-v0.135.0\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e add between_tools to thinking types in model capabilities\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e add the speed parameter and usage.speed to Messages\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e return a Console organization's usage-tier spend cap as a read-only spend limit\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eclient:\u003c/strong\u003e close streams dropped without being read to the end\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient:\u003c/strong\u003e keep an unread JSONL response open while it is held\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md\"\u003e@​anthropic-ai/sdk's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/anthropics/anthropic-sdk-typescript/compare/sdk-v0.136.0...sdk-v0.137.0\"\u003e0.137.0\u003c/a\u003e (2026-10-20)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e add org webhook endpoints and user profile enforcement events\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChores\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eci:\u003c/strong\u003e run the changelog check on a standard runner\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003etests:\u003c/strong\u003e make credential tests independent of the caller's environment\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/anthropics/anthropic-sdk-typescript/compare/sdk-v0.135.0...sdk-v0.136.0\"\u003e0.136.0\u003c/a\u003e (2026-10-20)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e add data_refreshed_at and has_more to analytics report pages\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e add workspace rate-limit updates to the Admin API\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e make User Profiles generally available\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient:\u003c/strong\u003e yield server-sent events with unrecognized event names\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003etools:\u003c/strong\u003e accept every tool definition field in the tool helpers\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eclient:\u003c/strong\u003e treat x-amz-security-token as a sensitive header\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003etools:\u003c/strong\u003e keep $ sequences literal in memory tool str_replace\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChores\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eci:\u003c/strong\u003e skip the changelog check on draft pull requests\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edocs:\u003c/strong\u003e add credential expiry descriptions to the Managed Agents API reference\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edocs:\u003c/strong\u003e add Messages API request descriptions\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edocs:\u003c/strong\u003e correct plugin manifest_version and reach descriptions\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edocs:\u003c/strong\u003e improve Managed Agents memory store descriptions\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edocs:\u003c/strong\u003e improve Managed Agents vault and credential descriptions\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003einternal:\u003c/strong\u003e bump playwright-core in the browser ecosystem tests\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003etests:\u003c/strong\u003e cover OpenTelemetry failures, propagation and environment variables\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/anthropics/anthropic-sdk-typescript/compare/sdk-v0.134.0...sdk-v0.135.0\"\u003e0.135.0\u003c/a\u003e (2026-10-15)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e add between_tools to thinking types in model capabilities\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e add the speed parameter and usage.speed to Messages\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e return a Console organization's usage-tier spend cap as a read-only spend limit\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anthropics/anthropic-sdk-typescript/commit/9c6562472002aa451b6f672acafd6d454e31840f\"\u003e\u003ccode\u003e9c65624\u003c/code\u003e\u003c/a\u003e release: 0.137.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anthropics/anthropic-sdk-typescript/commit/04151dbe194842210ee5e54c1f8b17806940bc92\"\u003e\u003ccode\u003e04151db\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/anthropics/anthropic-sdk-typescript/issues/970\"\u003e#970\u003c/a\u003e from anthropics/synced/published\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anthropics/anthropic-sdk-typescript/commit/5aae8cebbb01a89d831d61b56d081002ff7157b2\"\u003e\u003ccode\u003e5aae8ce\u003c/code\u003e\u003c/a\u003e feat(api): add org webhook endpoints and user profile enforcement events\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anthropics/anthropic-sdk-typescript/commit/261ead07e61b409236d54f63254a1cce4f98adc8\"\u003e\u003ccode\u003e261ead0\u003c/code\u003e\u003c/a\u003e codegen metadata\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anthropics/anthropic-sdk-typescript/commit/20d7c14e5a511aed782647fedb84f4bab619d2a6\"\u003e\u003ccode\u003e20d7c14\u003c/code\u003e\u003c/a\u003e codegen metadata\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anthropics/anthropic-sdk-typescript/commit/a7736e616eb03c8d8e1dd28f7adc8bc8177d9e42\"\u003e\u003ccode\u003ea7736e6\u003c/code\u003e\u003c/a\u003e chore(ci): run the changelog check on a standard runner\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anthropics/anthropic-sdk-typescript/commit/48ecaa4c723299fbe8bfa8f55ed87f510c134564\"\u003e\u003ccode\u003e48ecaa4\u003c/code\u003e\u003c/a\u003e Merge branch 'main'\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anthropics/anthropic-sdk-typescript/commit/accbdd899218b49fcb3b5124319e99b64d51de90\"\u003e\u003ccode\u003eaccbdd8\u003c/code\u003e\u003c/a\u003e release: packages/aws-sdk 0.9.0, packages/bedrock-sdk 0.36.0, packages/vertex...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anthropics/anthropic-sdk-typescript/commit/b00aefc99f4ee24bfa6438674249edeee996af63\"\u003e\u003ccode\u003eb00aefc\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/anthropics/anthropic-sdk-typescript/issues/968\"\u003e#968\u003c/a\u003e from anthropics/synced/published\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anthropics/anthropic-sdk-typescript/commit/521ffc1f886a5f7a2dbd0f0734fb508af080ee3a\"\u003e\u003ccode\u003e521ffc1\u003c/code\u003e\u003c/a\u003e Merge branch 'main'\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/anthropics/anthropic-sdk-typescript/compare/sdk-v0.133.0...sdk-v0.137.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@larksuiteoapi/node-sdk` from 1.74.0 to 1.76.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/larksuite/node-sdk/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `markdown-it` from 15.0.2 to 15.0.3\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/markdown-it/markdown-it/blob/master/CHANGELOG.md\"\u003emarkdown-it's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[15.0.3] - 2026-10-16\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEnforce the 999 Unicode code point limit for reference definition labels,\npartially addressing \u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1213\"\u003e#1213\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eRequire whitespace before multiline reference titles.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed quadratic complexity when parsing multiline reference definitions.\u003c/li\u003e\n\u003cli\u003eFixed quadratic complexity when parsing unclosed inline HTML comments,\nprocessing instructions, declarations and CDATA sections.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/a8c00d474ec9b304fad9b71c16d6fa8b4909279e\"\u003e\u003ccode\u003ea8c00d4\u003c/code\u003e\u003c/a\u003e 15.0.3 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/e9504a4f1cb42a09d6f4e53d12d89c96d57ee9d4\"\u003e\u003ccode\u003ee9504a4\u003c/code\u003e\u003c/a\u003e Skip pathological speed tests during coverage collection\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/46d8b52016da1c423f4bdeecaa2d69d51c4156c1\"\u003e\u003ccode\u003e46d8b52\u003c/code\u003e\u003c/a\u003e Deps bump\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/928bc8c11ded60181c0e7fc5aa954eec582e8e79\"\u003e\u003ccode\u003e928bc8c\u003c/code\u003e\u003c/a\u003e Fix quadratic inline HTML parsing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/48fbc465812c440020c663f040ab22deaf8f1eca\"\u003e\u003ccode\u003e48fbc46\u003c/code\u003e\u003c/a\u003e Fix quadratic reference parsing and partially address \u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1213\"\u003e#1213\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/markdown-it/markdown-it/compare/15.0.2...15.0.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `zod` from 3.25.76 to 4.6.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/colinhacks/zod/releases\"\u003ezod's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.6.7\u003c/h2\u003e\n\u003ch2\u003eCommits:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eb500a2ee95134f81d74da7911d7378dd2853d042 4.6.7\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev4.6.6\u003c/h2\u003e\n\u003cblockquote\u003e\n\u003cp\u003eSix malicious commits pushed to \u003ccode\u003emain\u003c/code\u003e on September 21 with a compromised git credential were reverted the same day in \u003ca href=\"https://redirect.github.com/colinhacks/zod/issues/6620\"\u003e#6620\u003c/a\u003e and have since been removed from the history of \u003ccode\u003emain\u003c/code\u003e. None were ever published to npm. The npm provenance for 4.6.6 names 284243fb, the pre-rewrite copy of 9c219833 with identical contents.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch2\u003eCommits:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e0cd3af5e9f50ad11bbcd4407a46a21b8848ba574 docs: load the en locale directly in Zod Mini\u003c/li\u003e\n\u003cli\u003e9d5e60f162997b764b40d45aa02481888db50dea docs: import locales from zod/locales, not z.locales\u003c/li\u003e\n\u003cli\u003e34a626f307871ecbb0123947559328dc52ed5e3e docs: tighten the z.locales tree-shaking note\u003c/li\u003e\n\u003cli\u003e74304ce5b5796b5edb9a88ceb8e170b6ea3e82df release: stage npm versions instead of publishing them (\u003ca href=\"https://redirect.github.com/colinhacks/zod/issues/6622\"\u003e#6622\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eb2ef983e0711ff6517d6020b021071e2e5653efa docs: add Code for Japan to bronze sponsors\u003c/li\u003e\n\u003cli\u003e8fb2faf0584828a6a027d8279db36f6f52784462 docs: crop the Code for Japan logo and list it first in bronze\u003c/li\u003e\n\u003cli\u003ebacad518c41610d654658172d325874bf0ee6290 docs: square the Code for Japan logo to match the other bronze tiles\u003c/li\u003e\n\u003cli\u003ec42596bd1c87e941d7241d10e012c5c196adcc10 release: hold the run on the release-approval environment until the staged versions are approved (\u003ca href=\"https://redirect.github.com/colinhacks/zod/issues/6638\"\u003e#6638\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ea2ba4a67986a3e6b2b131be30084a2f460d9ea67 fix(types): declare record output and input as members, not base type arguments (\u003ca href=\"https://redirect.github.com/colinhacks/zod/issues/6645\"\u003e#6645\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ea0ebf970f2d752e5f58527cd2942ff48be4f46bd fix(v4): check array, set and map size bounds before parsing elements (\u003ca href=\"https://redirect.github.com/colinhacks/zod/issues/6652\"\u003e#6652\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e529f78dd9431b07f49647fee3aa0819b3f8b66b7 4.6.6\u003c/li\u003e\n\u003cli\u003e9c219833c3a3764fa1f1ea9c5ecec8254a63c0b1 ci: stage at verbose so a failed OIDC token exchange says why\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev4.6.5\u003c/h2\u003e\n\u003ch2\u003eCommits:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ed2b135cfb7a3582b9eb515756b9166bcb9521f4a docs: add the 4.6.x patch highlights to the 4.6 post\u003c/li\u003e\n\u003cli\u003ef1448f7cee00df9fe1e9ad84a000aa1828cc8bc1 docs: fold the 4.6.x patch highlights into the 4.6 post's own sections\u003c/li\u003e\n\u003cli\u003ede65a5cb39ed22a507fac935788f718fa88d104f docs: lead the properties section with the check and add a Zod Mini tab (\u003ca href=\"https://redirect.github.com/colinhacks/zod/issues/6598\"\u003e#6598\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e56222cd1532c07bcb91b67df529cab4c0a215330 feat(instanceof): key the .properties() shape off the instance type (\u003ca href=\"https://redirect.github.com/colinhacks/zod/issues/6600\"\u003e#6600\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eca0229a404818290e6cdcfefcd7eb2d04bcbb543 Revert \u0026quot;feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (\u003ca href=\"https://redirect.github.com/colinhacks/zod/issues/6595\"\u003e#6595\u003c/a\u003e)\u0026quot;\u003c/li\u003e\n\u003cli\u003ecc4cd4ee9c52fcaa10964e48cc144541e41a5ed9 Revert \u0026quot;Revert \u0026quot;feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (\u003ca href=\"https://redirect.github.com/colinhacks/zod/issues/6595\"\u003e#6595\u003c/a\u003e)\u0026quot;\u0026quot;\u003c/li\u003e\n\u003cli\u003e0f3f5ee3ca56c7574bf849e54f79e9a6e02562ee 4.6.5\u003c/li\u003e\n\u003cli\u003e59bbc03e10c636b9eb3c393dfeb552819774ec21 chore: re-pin the integration peers to the workspace zod after the 4.6.5 bump\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev4.6.4\u003c/h2\u003e\n\u003cp\u003eA patch on top of \u003ca href=\"https://github.com/colinhacks/zod/releases/tag/v4.6.3\"\u003e4.6.3\u003c/a\u003e.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/d6bc1e30\"\u003e\u003ccode\u003ed6bc1e30\u003c/code\u003e\u003c/a\u003e feat: add \u003ccode\u003ez.currencyCode()\u003c/code\u003e over a vendored ISO 4217 list, refreshed weekly by CI (\u003ca href=\"https://redirect.github.com/colinhacks/zod/pull/6595\"\u003e#6595\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/ad32d751\"\u003e\u003ccode\u003ead32d751\u003c/code\u003e\u003c/a\u003e perf: \u003ccode\u003ez.url()\u003c/code\u003e rejects an invalid URL with \u003ccode\u003eURL.canParse()\u003c/code\u003e instead of a throwing constructor, about 50x faster; fewer allocations on the validation path (\u003ca href=\"https://redirect.github.com/colinhacks/zod/pull/6588\"\u003e#6588\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/2bb08717\"\u003e\u003ccode\u003e2bb08717\u003c/code\u003e\u003c/a\u003e chore: re-pin the integration peers to the workspace zod after the 4.6.4 bump\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/f6e1701a\"\u003e\u003ccode\u003ef6e1701a\u003c/code\u003e\u003c/a\u003e chore(deps): bump next to 15.5.25 and vite to 7.3.6 (\u003ca href=\"https://redirect.github.com/colinhacks/zod/pull/6153\"\u003e#6153\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev4.6.3\u003c/h2\u003e\n\u003cp\u003eA patch on top of \u003ca href=\"https://github.com/colinhacks/zod/releases/tag/v4.6.2\"\u003e4.6.2\u003c/a\u003e.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/413cce9a\"\u003e\u003ccode\u003e413cce9a\u003c/code\u003e\u003c/a\u003e fix(v4): make z.properties() a check again (\u003ca href=\"https://redirect.github.com/colinhacks/zod/pull/6594\"\u003e#6594\u003c/a\u003e) — removes the standalone \u003ccode\u003ez.properties()\u003c/code\u003e schema from 4.6.0; \u003ccode\u003ez.instanceof().properties()\u003c/code\u003e and \u003ccode\u003e.check(...z.properties())\u003c/code\u003e are unchanged\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/75d63ee1\"\u003e\u003ccode\u003e75d63ee1\u003c/code\u003e\u003c/a\u003e docs: show only the \u003ccode\u003e.properties()\u003c/code\u003e method form in the 4.6 post\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/46da9572\"\u003e\u003ccode\u003e46da9572\u003c/code\u003e\u003c/a\u003e docs: match the error-message examples to what the parsers emit\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/b500a2ee95134f81d74da7911d7378dd2853d042\"\u003e\u003ccode\u003eb500a2e\u003c/code\u003e\u003c/a\u003e 4.6.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/9c219833c3a3764fa1f1ea9c5ecec8254a63c0b1\"\u003e\u003ccode\u003e9c21983\u003c/code\u003e\u003c/a\u003e ci: stage at verbose so a failed OIDC token exchange says why\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/529f78dd9431b07f49647fee3aa0819b3f8b66b7\"\u003e\u003ccode\u003e529f78d\u003c/code\u003e\u003c/a\u003e 4.6.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/a0ebf970f2d752e5f58527cd2942ff48be4f46bd\"\u003e\u003ccode\u003ea0ebf97\u003c/code\u003e\u003c/a\u003e fix(v4): check array, set and map size bounds before parsing elements (\u003ca href=\"https://redirect.github.com/colinhacks/zod/issues/6652\"\u003e#6652\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/a2ba4a67986a3e6b2b131be30084a2f460d9ea67\"\u003e\u003ccode\u003ea2ba4a6\u003c/code\u003e\u003c/a\u003e fix(types): declare record output and input as members, not base type argumen...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/c42596bd1c87e941d7241d10e012c5c196adcc10\"\u003e\u003ccode\u003ec42596b\u003c/code\u003e\u003c/a\u003e release: hold the run on the release-approval environment until the staged ve...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/bacad518c41610d654658172d325874bf0ee6290\"\u003e\u003ccode\u003ebacad51\u003c/code\u003e\u003c/a\u003e docs: square the Code for Japan logo to match the other bronze tiles\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/8fb2faf0584828a6a027d8279db36f6f52784462\"\u003e\u003ccode\u003e8fb2faf\u003c/code\u003e\u003c/a\u003e docs: crop the Code for Japan logo and list it first in bronze\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/b2ef983e0711ff6517d6020b021071e2e5653efa\"\u003e\u003ccode\u003eb2ef983\u003c/code\u003e\u003c/a\u003e docs: add Code for Japan to bronze sponsors\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/74304ce5b5796b5edb9a88ceb8e170b6ea3e82df\"\u003e\u003ccode\u003e74304ce\u003c/code\u003e\u003c/a\u003e release: stage npm versions instead of publishing them (\u003ca href=\"https://redirect.github.com/colinhacks/zod/issues/6622\"\u003e#6622\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/colinhacks/zod/compare/v3.25.76...v4.6.7\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for zod since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `electron` from 44.7.0 to 44.9.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/electron/electron/releases\"\u003eelectron's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eelectron v44.9.3\u003c/h2\u003e\n\u003ch1\u003eRelease Notes for v44.9.3\u003c/h1\u003e\n\u003ch2\u003eOther Changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBackported fixes from upstream ANGLE, Chromium, PDFium, Skia and V8. \u003ca href=\"https://redirect.github.com/electron/electron/pull/55149\"\u003e#55149\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eelectron v44.9.2\u003c/h2\u003e\n\u003ch1\u003eRelease Notes for v44.9.2\u003c/h1\u003e\n\u003ch2\u003eelectron v44.9.1\u003c/h2\u003e\n\u003ch1\u003eRelease Notes for v44.9.1\u003c/h1\u003e\n\u003cblockquote\u003e\n\u003cp\u003e[!NOTE]\nThis release contains the fix for \u003ca href=\"https://github.com/electron/electron/security/advisories/GHSA-jr5w-w6x2-84p9\"\u003ehttps://github.com/electron/electron/security/advisories/GHSA-jr5w-w6x2-84p9\u003c/a\u003e, the mitigation for compromised eMudhra intermediate certificates\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch2\u003eelectron v44.9.0\u003c/h2\u003e\n\u003ch1\u003eRelease Notes for v44.9.0\u003c/h1\u003e\n\u003ch2\u003eFeatures\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded app shims on macOS to show windows under another app's Dock icon. \u003ca href=\"https://redirect.github.com/electron/electron/pull/55073\"\u003e#55073\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/55072\"\u003e45\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eFixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed link-opened windows not using the opener's session and \u003ccode\u003ewebPreferences\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/electron/electron/pull/55048\"\u003e#55048\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/55050\"\u003e42\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/55049\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/55051\"\u003e45\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003esetCertificateVerifyProc\u003c/code\u003e occasionally not being applied to a request issued concurrently with the first request to a host. \u003ca href=\"https://redirect.github.com/electron/electron/pull/55046\"\u003e#55046\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/55054\"\u003e42\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/55047\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/55045\"\u003e45\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eelectron v44.8.0\u003c/h2\u003e\n\u003ch1\u003eRelease Notes for v44.8.0\u003c/h1\u003e\n\u003ch2\u003eFeatures\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded support for \u003ccode\u003eNotification\u003c/code\u003e action buttons on Linux. \u003ca href=\"https://redirect.github.com/electron/electron/pull/54890\"\u003e#54890\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/54889\"\u003e45\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eFixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed mouse cursor missing over native dialogs in certain scenarios on Windows. \u003ca href=\"https://redirect.github.com/electron/electron/pull/54987\"\u003e#54987\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003enet.fetch\u003c/code\u003e and \u003ccode\u003esession.fetch\u003c/code\u003e failing permanently with \u003ccode\u003enet::ERR_FAILED\u003c/code\u003e after the Network Service process restarts. \u003ca href=\"https://redirect.github.com/electron/electron/pull/54909\"\u003e#54909\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/54925\"\u003e42\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/54908\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/54910\"\u003e45\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003eutilityProcess\u003c/code\u003e dropping messages posted with \u003ccode\u003eprocess.parentPort.postMessage()\u003c/code\u003e right before the process exits. \u003ca href=\"https://redirect.github.com/electron/electron/pull/54960\"\u003e#54960\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/55000\"\u003e42\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/54962\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/54956\"\u003e45\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003ewin.isFullScreen()\u003c/code\u003e being stale in fullscreen events on Windows. \u003ca href=\"https://redirect.github.com/electron/electron/pull/55009\"\u003e#55009\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/55008\"\u003e45\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eOther Changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBackported fixes from upstream Chromium and V8. \u003ca href=\"https://redirect.github.com/electron/electron/pull/55034\"\u003e#55034\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdated Chromium to 152.0.7977.167. \u003ca href=\"https://redirect.github.com/electron/electron/pull/54928\"\u003e#54928\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdated Node.js to v24.22.0. \u003ca href=\"https://redirect.github.com/electron/electron/pull/55004\"\u003e#55004\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eelectron v44.7.2\u003c/h2\u003e\n\u003ch1\u003eRelease Notes for v44.7.2\u003c/h1\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/c542df1ecbc2c2978e8f53f8c7baf602404d166f\"\u003e\u003ccode\u003ec542df1\u003c/code\u003e\u003c/a\u003e chore: cherry-pick 69 changes from angle, chromium, pdfium, skia and v8 (\u003ca href=\"https://redirect.github.com/electron/electron/issues/55149\"\u003e#55149\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/8fc5329d830f65597038cb4398b375ce2347f964\"\u003e\u003ccode\u003e8fc5329\u003c/code\u003e\u003c/a\u003e test: fix unload-IPC and protocol.handle 'is fast' flakes (\u003ca href=\"https://redirect.github.com/electron/electron/issues/55133\"\u003e#55133\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/093af96cb9a394ab6ac81acc8ac18b2d32abdc53\"\u003e\u003ccode\u003e093af96\u003c/code\u003e\u003c/a\u003e test: wait for the parent's ack before utility children exit (\u003ca href=\"https://redirect.github.com/electron/electron/issues/55124\"\u003e#55124\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/5cfb78c4f8aa4f81939637607e3c265d7b827faf\"\u003e\u003ccode\u003e5cfb78c\u003c/code\u003e\u003c/a\u003e docs: add UIPI note for setIgnoreMouseEvents forward option (\u003ca href=\"https://redirect.github.com/electron/electron/issues/55113\"\u003e#55113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/e02265be96c5e13ae43644ef482b718e1e800499\"\u003e\u003ccode\u003ee02265b\u003c/code\u003e\u003c/a\u003e fix: apply the certificate SPKI blocklist to Node and add entries (44-x-y) (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/0545d89b3fa2d8a1fe548b344f6694736d28eed9\"\u003e\u003ccode\u003e0545d89\u003c/code\u003e\u003c/a\u003e test: replace fix_crypto_tests_to_run_with_bssl.patch with upstream backport ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/0ec830ff79229d00772a039426f63b27148a99d9\"\u003e\u003ccode\u003e0ec830f\u003c/code\u003e\u003c/a\u003e docs: fix code block line highlighting after docs reformats (\u003ca href=\"https://redirect.github.com/electron/electron/issues/55102\"\u003e#55102\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/68ddc646a86e2e7cd8a10cc6dd083e3c39f93112\"\u003e\u003ccode\u003e68ddc64\u003c/code\u003e\u003c/a\u003e test: re-enable Node.js tests that now pass with BoringSSL (\u003ca href=\"https://redirect.github.com/electron/electron/issues/55095\"\u003e#55095\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/cb2bde2455a55ae8dc18b743f099209cda5cf345\"\u003e\u003ccode\u003ecb2bde2\u003c/code\u003e\u003c/a\u003e build: stop overriding node GN declare_args defaults in patch (\u003ca href=\"https://redirect.github.com/electron/electron/issues/55077\"\u003e#55077\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/aa16ac272c2393d5ae16a07cf0d328d570228786\"\u003e\u003ccode\u003eaa16ac2\u003c/code\u003e\u003c/a\u003e build: update PGO profiles (\u003ca href=\"https://redirect.github.com/electron/electron/issues/55090\"\u003e#55090\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/electron/electron/compare/v44.7.0...v44.9.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `electron-builder` from 26.15.3 to 26.18.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/electron-userland/electron-builder/releases\"\u003eelectron-builder's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eelectron-builder@26.18.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(nsis): warn when differentialPackage \u0026quot;store-asar\u0026quot; finds no app.asar (v26 backport of \u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/10246\"\u003e#10246\u003c/a\u003e) by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10249\"\u003eelectron-userland/electron-builder#10249\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest(archive): make stored-member assertions independent of 7-Zip folder order (v26 backport of \u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/10247\"\u003e#10247\u003c/a\u003e) by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10251\"\u003eelectron-userland/electron-builder#10251\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(nsis): keep installer extraction in sync with the payload format when useZip is set (v26 backport of \u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/10248\"\u003e#10248\u003c/a\u003e) by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10252\"\u003eelectron-userland/electron-builder#10252\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(pnpm): read the app's own package.json when its name matches a dependency (v26 backport of \u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/10278\"\u003e#10278\u003c/a\u003e) by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10282\"\u003eelectron-userland/electron-builder#10282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: import blake2b from \u003ccode\u003e@noble/hashes/blake2.js\u003c/code\u003e by \u003ca href=\"https://github.com/mmaietta\"\u003e\u003ccode\u003e@​mmaietta\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10292\"\u003eelectron-userland/electron-builder#10292\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: encode GitLab package path segments (v26 backport of \u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/10140\"\u003e#10140\u003c/a\u003e) by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10299\"\u003eelectron-userland/electron-builder#10299\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(updater): validate cached update filenames (v26 backport of \u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/10115\"\u003e#10115\u003c/a\u003e) by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10300\"\u003eelectron-userland/electron-builder#10300\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: escape Squirrel project URLs in nuspec XML (v26 backport of \u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/10141\"\u003e#10141\u003c/a\u003e) by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10301\"\u003eelectron-userland/electron-builder#10301\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: enforce workspace path boundaries for asar (v26 backport of \u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/10135\"\u003e#10135\u003c/a\u003e) by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10314\"\u003eelectron-userland/electron-builder#10314\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(app-builder-lib): bump \u003ccode\u003e@​electron/rebuild\u003c/code\u003e to 4.2.1 (v26 backport of \u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/10308\"\u003e#10308\u003c/a\u003e) by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10315\"\u003eelectron-userland/electron-builder#10315\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(blockmap): finer content-defined blocks for the stored app.asar region (v26 backport of \u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/10235\"\u003e#10235\u003c/a\u003e) by \u003ca href=\"https://github.com/imlucas\"\u003e\u003ccode\u003e@​imlucas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10309\"\u003eelectron-userland/electron-builder#10309\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(pnpm): collect packages that \u003ccode\u003epnpm list\u003c/code\u003e only prints as deduped stubs by \u003ca href=\"https://github.com/mmaietta\"\u003e\u003ccode\u003e@​mmaietta\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10323\"\u003eelectron-userland/electron-builder#10323\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: contain mapped app file destinations (v26 backport of \u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/10137\"\u003e#10137\u003c/a\u003e) by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10330\"\u003eelectron-userland/electron-builder#10330\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(snap): don't request allow-sandbox by default for core24 (v26 backport of \u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/10294\"\u003e#10294\u003c/a\u003e) by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10331\"\u003eelectron-userland/electron-builder#10331\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(snap): don't delete chrome-sandbox from the shared linux-unpacked dir in template builds (v26 backport of \u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/10327\"\u003e#10327\u003c/a\u003e) by \u003ca href=\"https://github.com/yokomohoyo\"\u003e\u003ccode\u003e@​yokomohoyo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10333\"\u003eelectron-userland/electron-builder#10333\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(forge): make electron-builder makers loadable by current Electron Forge (v26 backport) by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10352\"\u003eelectron-userland/electron-builder#10352\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deploy): Release (v26) by \u003ca href=\"https://github.com/electron-builder-release-bot\"\u003e\u003ccode\u003e@​electron-builder-release-bot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10250\"\u003eelectron-userland/electron-builder#10250\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/electron-userland/electron-builder/compare/electron-builder@26.17.0...electron-builder@26.18.0\"\u003ehttps://github.com/electron-userland/electron-builder/compare/electron-builder@26.17.0...electron-builder@26.18.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eelectron-builder@26.17.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: detect pnpm workspace root on Windows without shelling out to pwd (v26 backport) by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10189\"\u003eelectron-userland/electron-builder#10189\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: pin globTest \u0026quot;failed peer dep\u0026quot; deps via lockfile fixture and update snapshot for moment 2.31.0 (v26 backport of \u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/10197\"\u003e#10197\u003c/a\u003e) by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10198\"\u003eelectron-userland/electron-builder#10198\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(nsis): \u0026quot;store-asar\u0026quot; mode for proportional differential updates (v26 backport) by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10201\"\u003eelectron-userland/electron-builder#10201\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest(v26): bump package manager pins and disable dependency lifecycle scripts in fixture installs (backport \u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/10199\"\u003e#10199\u003c/a\u003e) by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10203\"\u003eelectron-userland/electron-builder#10203\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(app-builder-lib): resolve pnpm deps omitted from deduped list output by declared range (backport \u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/10200\"\u003e#10200\u003c/a\u003e) by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10207\"\u003eelectron-userland/electron-builder#10207\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(pkg): add rootVolumeOnly to \u003c!-- raw HTML omitted --\u003e for macOS 26 Installer prompt (v26 backport of \u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/10193\"\u003e#10193\u003c/a\u003e) by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10211\"\u003eelectron-userland/electron-builder#10211\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(node-module-collector): clear error on empty output and fall back to traversal when a collector throws (v26 backport of \u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/10210\"\u003e#10210\u003c/a\u003e) by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10213\"\u003eelectron-userland/electron-builder#10213\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(electron-updater): keep cached blockmap consistent with cached installer (v26 backport of \u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/10098\"\u003e#10098\u003c/a\u003e) by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10163\"\u003eelectron-userland/electron-builder#10163\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(updater): make multi-range differential downloads work on real servers (v26 backport of \u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/10192\"\u003e#10192\u003c/a\u003e) by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10219\"\u003eelectron-userland/electron-builder#10219\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(flatpak): stop linux.files from corrupting flatpak files (v26 backport of \u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/10209\"\u003e#10209\u003c/a\u003e + \u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/10227\"\u003e#10227\u003c/a\u003e) by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10229\"\u003eelectron-userland/electron-builder#10229\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(pnpm-collector): pick in-range nested deps with pnpm 11 hoisted layout (v26) by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10230\"\u003eelectron-userland/electron-builder#10230\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deploy): Release (v26) by \u003ca href=\"https://github.com/electron-builder-release-bot\"\u003e\u003ccode\u003e@​electron-builder-release-bot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10191\"\u003eelectron-userland/electron-builder#10191\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/electron-userland/electron-builder/compare/electron-builder@26.16.1...electron-builder@26.17.0\"\u003ehttps://github.com/electron-userland/electron-builder/compare/electron-builder@26.16.1...electron-builder@26.17.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eelectron-builder@26.16.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(squirrel): backport elevate.exe appOutDir race fix to v26 (\u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/9852\"\u003e#9852\u003c/a\u003e) by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10157\"\u003eelectron-userland/electron-builder#10157\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(mac): use keychain password for set-key-partition-list (v26 backport of \u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/10101\"\u003e#10101\u003c/a\u003e) by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10172\"\u003eelectron-userland/electron-builder#10172\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(win): only log \u0026quot;signing with signtool.exe\u0026quot; when signing actually runs by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10171\"\u003eelectron-userland/electron-builder#10171\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(CI): auto-label PRs targeting backports to release/v26 (\u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/10158\"\u003e#10158\u003c/a\u003e) by \u003ca href=\"https://github.com/mmaietta\"\u003e\u003ccode\u003e@​mmaietta\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10166\"\u003eelectron-userland/electron-builder#10166\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(mac): Retain Electron and Chromium license files on macOS (v26 backport of \u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/10174\"\u003e#10174\u003c/a\u003e) by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10177\"\u003eelectron-userland/electron-builder#10177\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: prevent infinite recursion in node module collection when a package depends on itself (backport \u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/10070\"\u003e#10070\u003c/a\u003e to v26) by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10180\"\u003eelectron-userland/electron-builder#10180\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deploy): Release (v26) by \u003ca href=\"https://github.com/electron-builder-release-bot\"\u003e\u003ccode\u003e@​electron-builder-release-bot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/electron-userland/electron-builder/pull/10165\"\u003eelectron-userland/electron-builder#10165\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/electron-userland/electron-builder/blob/electron-builder@26.18.0/packages/electron-builder/CHANGELOG.md\"\u003eelectron-builder's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e26.18.0\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/electron-userland/electron-builder/commit/206d35dc31bc1e55b39e7b13003c0e384fcae926\"\u003e\u003ccode\u003e206d35d\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/electron-userland/electron-builder/commit/3dc7c902a7cd43eed547808b6a610971b9cd65da\"\u003e\u003ccode\u003e3dc7c90\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/electron-userland/electron-builder/commit/e703212e1a5325be9edbedc71015f130a7d42edc\"\u003e\u003ccode\u003ee703212\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/electron-userland/electron-builder/commit/84f7b463ef71e390dd8d6ca20ef0dbb18d1e8932\"\u003e\u003ccode\u003e84f7b46\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/electron-userland/electron-builder/commit/6202a271c2373eb5721acf2416098cd1dff73f83\"\u003e\u003ccode\u003e6202a27\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/electron-userland/electron-builder/commit/fcd6897810846ee8dc367f0abacf34e4eb5a10fb\"\u003e\u003ccode\u003efcd6897\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/electron-userland/electron-builder/commit/160c3b405ff1e193eadd4d6d76049e23ce334ebd\"\u003e\u003ccode\u003e160c3b4\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/electron-userland/electron-builder/commit/1928adfcceca4414656f6acd65ee1c66c38545ad\"\u003e\u003ccode\u003e1928adf\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/electron-userland/electron-builder/commit/c60987c538598118d89ea9cede383a06dc2743b8\"\u003e\u003ccode\u003ec60987c\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/electron-userland/electron-builder/commit/a92517ae572ee0e17496680a533e836f7772852d\"\u003e\u003ccode\u003ea92517a\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/electron-userland/electron-builder/commit/a1e9db847832c4edf5279903c6958a5f984da83c\"\u003e\u003ccode\u003ea1e9db8\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/electron-userland/electron-builder/commit/4123c2792ac8f43820266cbfab724be852f0fa42\"\u003e\u003ccode\u003e4123c27\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eapp-builder-lib@26.18.0\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003edmg-builder@26.18.0\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003e26.17.0\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/electron-userland/electron-builder/commit/bae1c8bcd138c7aa5f575106ca0f8ea22e7dd2a4\"\u003e\u003ccode\u003ebae1c8b\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/electron-userland/electron-builder/commit/2a2dd22c17006ec80acf4704642ca83378e5fdb1\"\u003e\u003ccode\u003e2a2dd22\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/electron-userland/electron-builder/commit/07c83447d9f6915a18e66b676a378b0786357d80\"\u003e\u003ccode\u003e07c8344\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/electron-userland/electron-builder/commit/07c83447d9f6915a18e66b676a378b0786357d80\"\u003e\u003ccode\u003e07c8344\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/electron-userland/electron-builder/commit/613cd587dfc405344989eb0452ddc9281a9164ba\"\u003e\u003ccode\u003e613cd58\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/electron-userland/electron-builder/commit/d4a4f501fd136cb6f69339040ada56a0cabc74b6\"\u003e\u003ccode\u003ed4a4f50\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/electron-userland/electron-builder/commit/41a027ce590dfff24e935861577fc58a16595e31\"\u003e\u003ccode\u003e41a027c\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/electron-userland/electron-builder/commit/59f63644f80381f018c91246762caee7586ab126\"\u003e\u003ccode\u003e59f6364\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eapp-builder-lib@26.17.0\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003edmg-builder@26.17.0\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003e26.16.1\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/electron-userland/electron-builder/commit/b9b2e8afe5bfb975c8551b19a3cf8a68e58df4a5\"\u003e\u003ccode\u003eb9b2e8a\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/electron-userland/electron-builder/commit/d6d4125ba636ad2edcd7ddb01d74ddf75a855727\"\u003e\u003ccode\u003ed6d4125\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/electron-userland/electron-builder/commit/a4ec75f919b839c0a4afcee3f7fa526681e128d4\"\u003e\u003ccode\u003ea4ec75f\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/electron-userland/electron-builder/commit/5ae5a02f7ce83e7f47e1bfa660b2dc7e95081d24\"\u003e\u003ccode\u003e5ae5a02\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/electron-userland/electron-builder/commit/7c04b358b249841e362f6f71bd20de478c3d86c4\"\u003e\u003ccode\u003e7c04b35\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eapp-builder-lib@26.16.1\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003edmg-builder@26.16.1\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron-userland/electron-builder/commit/e2a8604535bdc626bd068ddf5b6afb67bed45725\"\u003e\u003ccode\u003ee2a8604\u003c/code\u003e\u003c/a\u003e chore(deploy): Release v26.18.0 (electron-updater@6.8.11) (v26) (\u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/10250\"\u003e#10250\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron-userland/electron-builder/commit/5cdf0178759fa9619e47e5a0b3c203e2961b2411\"\u003e\u003ccode\u003e5cdf017\u003c/code\u003e\u003c/a\u003e chore(deploy): Release v26.17.0 (electron-updater@6.8.10) (v26) (\u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/10191\"\u003e#10191\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron-userland/electron-builder/commit/7d3b30f3b15950d19f7c5ff882cf2d161cd3ba2c\"\u003e\u003ccode\u003e7d3b30f\u003c/code\u003e\u003c/a\u003e chore(deploy): Release v26.16.1 (\u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/10165\"\u003e#10165\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron-userland/electron-builder/commit/f4610970f78b6ce223b1f4cee2b5e8f5caa14a48\"\u003e\u003ccode\u003ef461097\u003c/code\u003e\u003c/a\u003e chore(deploy): Release v26.16.0 (\u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/10059\"\u003e#10059\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron-userland/electron-builder/commit/ce825f1283950ca56e2ab345ec755599fa0d470e\"\u003e\u003ccode\u003ece825f1\u003c/code\u003e\u003c/a\u003e chore(deploy): Release v26.15.7 (\u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/10005\"\u003e#10005\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron-userland/electron-builder/commit/026bbdaffbab7aef558e061c46094c6672db33bb\"\u003e\u003ccode\u003e026bbda\u003c/code\u003e\u003c/a\u003e chore(deploy): Release v26.15.6 (\u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/9952\"\u003e#9952\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron-userland/electron-builder/commit/8d4a5784a93cc77cdc91d521a37a10e842c6e021\"\u003e\u003ccode\u003e8d4a578\u003c/code\u003e\u003c/a\u003e chore(deploy): Release v26.15.5 (\u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/9938\"\u003e#9938\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron-userland/electron-builder/commit/3332d51be99eab944809d91ae6cd5fb33c94470e\"\u003e\u003ccode\u003e3332d51\u003c/code\u003e\u003c/a\u003e chore(deploy): Release v26.15.4 (\u003ca href=\"https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder/issues/9919\"\u003e#9919\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/electron-userland/electron-builder/commits/electron-builder@26.18.0/packages/electron-builder\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/fakechris/lumenbox/pull/392","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/fakechris%2Flumenbox/issues/392","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/392/packages"}},{"old_version":"14.3.2","new_version":"14.3.3","update_type":"patch","path":null,"pr_created_at":"2026-10-23T21:45:39.000Z","version_change":"14.3.2 → 14.3.3","issue":{"uuid":"6005917973","node_id":"PR_kwDOTDGnhM8AAAABKWgCag","number":412,"state":"open","title":"chore(deps): bump markdown-it from 14.3.2 to 14.3.3","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-23T21:45:39.000Z","updated_at":"2026-10-23T21:46:35.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"markdown-it","old_version":"14.3.2","new_version":"14.3.3","repository_url":"https://github.com/markdown-it/markdown-it"}],"path":null,"ecosystem":"npm"},"body":"Bumps [markdown-it](https://github.com/markdown-it/markdown-it) from 14.3.2 to 14.3.3.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/markdown-it/markdown-it/blob/14.3.3/CHANGELOG.md\"\u003emarkdown-it's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[14.3.3] - 2026-10-16\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackported 15.0.3 fixes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d372f0d8a68bef0b0acaa68868ce8ae8ba85b384\"\u003e\u003ccode\u003ed372f0d\u003c/code\u003e\u003c/a\u003e 14.3.3 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d99f48839d37af6fd8a2617516c43dab90755503\"\u003e\u003ccode\u003ed99f488\u003c/code\u003e\u003c/a\u003e Backported 15.0.3 fixes\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/markdown-it/markdown-it/compare/14.3.2...14.3.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=markdown-it\u0026package-manager=npm_and_yarn\u0026previous-version=14.3.2\u0026new-version=14.3.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/daytona/clients/network/alerts).\n\n\u003c/details\u003e\n\n\u003c!-- This is an auto-generated description by cubic. --\u003e\n---\n## Summary by cubic\nUpdates `markdown-it` from 14.3.2 to 14.3.3 to include security fixes backported from 15.0.3. Only `yarn.lock` changes; no code changes are required.\n\n\u003csup\u003eWritten for commit 1d0c620d0b968d8e23a955a0ee55a3a74f6ae818. Summary will update on new commits.\u003c/sup\u003e\n\n\u003ca href=\"https://cubic.dev/pr/daytona/clients/pull/412?utm_source=github\" target=\"_blank\" rel=\"noopener noreferrer\" data-no-image-dialog=\"true\"\u003e\u003cpicture\u003e\u003csource media=\"(prefers-color-scheme: dark)\" srcset=\"https://www.cubic.dev/buttons/review-in-cubic-dark.svg\"\u003e\u003csource media=\"(prefers-color-scheme: light)\" srcset=\"https://www.cubic.dev/buttons/review-in-cubic-light.svg\"\u003e\u003cimg alt=\"View guided diff\" src=\"https://www.cubic.dev/buttons/review-in-cubic-light.svg\"\u003e\u003c/picture\u003e\u003c/a\u003e \u003ca href=\"https://www.cubic.dev/action/auto-fix/pr/daytona/clients/412?returnTo=https%3A%2F%2Fgithub.com%2Fdaytona%2Fclients%2Fpull%2F412\u0026source=description\" target=\"_blank\" rel=\"noopener noreferrer\" data-no-image-dialog=\"true\"\u003e\u003cpicture\u003e\u003csource media=\"(prefers-color-scheme: dark)\" srcset=\"https://www.cubic.dev/buttons/turn-on-auto-fix-dark.svg\"\u003e\u003csource media=\"(prefers-color-scheme: light)\" srcset=\"https://www.cubic.dev/buttons/turn-on-auto-fix-light.svg\"\u003e\u003cimg alt=\"Turn on auto-fix\" src=\"https://www.cubic.dev/buttons/turn-on-auto-fix-light.svg\"\u003e\u003c/picture\u003e\u003c/a\u003e\n\n\u003c!-- End of auto-generated description by cubic. --\u003e\n\n","html_url":"https://github.com/daytona/clients/pull/412","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/daytona%2Fclients/issues/412","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/412/packages"}},{"old_version":"14.3.2","new_version":"14.3.3","update_type":"patch","path":null,"pr_created_at":"2026-10-23T06:00:37.000Z","version_change":"14.3.2 → 14.3.3","issue":{"uuid":"5992775077","node_id":"PR_kwDOB-TIiM8AAAABKL6mgQ","number":1468,"state":"open","title":"chore(deps-dev): bump markdown-it from 14.3.2 to 14.3.3","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":4,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-23T06:00:37.000Z","updated_at":"2026-10-23T06:03:00.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps-dev)","packages":[{"name":"markdown-it","old_version":"14.3.2","new_version":"14.3.3","repository_url":"https://github.com/markdown-it/markdown-it"}],"path":null,"ecosystem":"npm"},"body":"Bumps [markdown-it](https://github.com/markdown-it/markdown-it) from 14.3.2 to 14.3.3.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/markdown-it/markdown-it/blob/14.3.3/CHANGELOG.md\"\u003emarkdown-it's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[14.3.3] - 2026-10-16\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackported 15.0.3 fixes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d372f0d8a68bef0b0acaa68868ce8ae8ba85b384\"\u003e\u003ccode\u003ed372f0d\u003c/code\u003e\u003c/a\u003e 14.3.3 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d99f48839d37af6fd8a2617516c43dab90755503\"\u003e\u003ccode\u003ed99f488\u003c/code\u003e\u003c/a\u003e Backported 15.0.3 fixes\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/markdown-it/markdown-it/compare/14.3.2...14.3.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=markdown-it\u0026package-manager=npm_and_yarn\u0026previous-version=14.3.2\u0026new-version=14.3.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/remeda/remeda/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/remeda/remeda/pull/1468","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/remeda%2Fremeda/issues/1468","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1468/packages"}},{"old_version":"14.3.1","new_version":"14.3.3","update_type":"patch","path":null,"pr_created_at":"2026-10-23T05:30:48.000Z","version_change":"14.3.1 → 14.3.3","issue":{"uuid":"5992475498","node_id":"PR_kwDOTK_xp88AAAABKLrWUg","number":14,"state":"open","title":"chore(deps): bump markdown-it from 14.3.1 to 14.3.3","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-23T05:30:48.000Z","updated_at":"2026-10-23T05:31:18.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"markdown-it","old_version":"14.3.1","new_version":"14.3.3","repository_url":"https://github.com/markdown-it/markdown-it"}],"path":null,"ecosystem":"npm"},"body":"Bumps [markdown-it](https://github.com/markdown-it/markdown-it) from 14.3.1 to 14.3.3.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/markdown-it/markdown-it/blob/14.3.3/CHANGELOG.md\"\u003emarkdown-it's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[14.3.3] - 2026-10-16\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackported 15.0.3 fixes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[14.3.2] - 2026-09-12\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackported 15.0.2 fixes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d372f0d8a68bef0b0acaa68868ce8ae8ba85b384\"\u003e\u003ccode\u003ed372f0d\u003c/code\u003e\u003c/a\u003e 14.3.3 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d99f48839d37af6fd8a2617516c43dab90755503\"\u003e\u003ccode\u003ed99f488\u003c/code\u003e\u003c/a\u003e Backported 15.0.3 fixes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/efb9993124c3eb229eea24dd659c91dcee7f6d60\"\u003e\u003ccode\u003eefb9993\u003c/code\u003e\u003c/a\u003e 14.3.2 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/daf5a3c32303e5d9de01b12eeb725fb5990b8162\"\u003e\u003ccode\u003edaf5a3c\u003c/code\u003e\u003c/a\u003e Backported 15.0.2 fixes\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/markdown-it/markdown-it/compare/14.3.1...14.3.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=markdown-it\u0026package-manager=npm_and_yarn\u0026previous-version=14.3.1\u0026new-version=14.3.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/skaniti/compendium/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/skaniti/compendium/pull/14","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/skaniti%2Fcompendium/issues/14","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/14/packages"}},{"old_version":"14.3.2","new_version":"14.3.3","update_type":"patch","path":"the security group across 1 directory","pr_created_at":"2026-10-23T05:03:39.000Z","version_change":"14.3.2 → 14.3.3","issue":{"uuid":"5992214642","node_id":"PR_kwDOSAHfKM8AAAABKLeCvw","number":143,"state":"open","title":"chore(deps): bump markdown-it from 14.3.2 to 14.3.3 in the security group across 1 directory","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-23T05:03:39.000Z","updated_at":"2026-10-23T05:08:42.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"markdown-it","old_version":"14.3.2","new_version":"14.3.3","repository_url":"https://github.com/markdown-it/markdown-it"}],"path":"the security group across 1 directory","ecosystem":"npm"},"body":"Bumps the security group with 1 update in the / directory: [markdown-it](https://github.com/markdown-it/markdown-it).\n\nUpdates `markdown-it` from 14.3.2 to 14.3.3\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/markdown-it/markdown-it/blob/14.3.3/CHANGELOG.md\"\u003emarkdown-it's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[14.3.3] - 2026-10-16\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackported 15.0.3 fixes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d372f0d8a68bef0b0acaa68868ce8ae8ba85b384\"\u003e\u003ccode\u003ed372f0d\u003c/code\u003e\u003c/a\u003e 14.3.3 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d99f48839d37af6fd8a2617516c43dab90755503\"\u003e\u003ccode\u003ed99f488\u003c/code\u003e\u003c/a\u003e Backported 15.0.3 fixes\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/markdown-it/markdown-it/compare/14.3.2...14.3.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=markdown-it\u0026package-manager=npm_and_yarn\u0026previous-version=14.3.2\u0026new-version=14.3.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/qruto/nuxt-backend/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/qruto/nuxt-backend/pull/143","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/qruto%2Fnuxt-backend/issues/143","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/143/packages"}},{"old_version":"14.3.2","new_version":"14.3.3","update_type":"patch","path":null,"pr_created_at":"2026-10-23T05:03:16.000Z","version_change":"14.3.2 → 14.3.3","issue":{"uuid":"5992210165","node_id":"PR_kwDOPYHjRs8AAAABKLdz2g","number":229,"state":"open","title":"build(deps): bump markdown-it from 14.3.2 to 14.3.3","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-23T05:03:16.000Z","updated_at":"2026-10-23T05:03:25.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"markdown-it","old_version":"14.3.2","new_version":"14.3.3","repository_url":"https://github.com/markdown-it/markdown-it"}],"path":null,"ecosystem":"npm"},"body":"Bumps [markdown-it](https://github.com/markdown-it/markdown-it) from 14.3.2 to 14.3.3.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/markdown-it/markdown-it/blob/14.3.3/CHANGELOG.md\"\u003emarkdown-it's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[14.3.3] - 2026-10-16\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackported 15.0.3 fixes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d372f0d8a68bef0b0acaa68868ce8ae8ba85b384\"\u003e\u003ccode\u003ed372f0d\u003c/code\u003e\u003c/a\u003e 14.3.3 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d99f48839d37af6fd8a2617516c43dab90755503\"\u003e\u003ccode\u003ed99f488\u003c/code\u003e\u003c/a\u003e Backported 15.0.3 fixes\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/markdown-it/markdown-it/compare/14.3.2...14.3.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=markdown-it\u0026package-manager=npm_and_yarn\u0026previous-version=14.3.2\u0026new-version=14.3.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Keinsleif/sbsp/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/Keinsleif/sbsp/pull/229","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Keinsleif%2Fsbsp/issues/229","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/229/packages"}},{"old_version":"14.3.2","new_version":"14.3.3","update_type":"patch","path":null,"pr_created_at":"2026-10-23T04:42:53.000Z","version_change":"14.3.2 → 14.3.3","issue":{"uuid":"5992018768","node_id":"PR_kwDORGYnZs8AAAABKLUGkQ","number":2408,"state":"closed","title":"feat(deps): bump markdown-it from 14.3.2 to 14.3.3","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":4,"pull_request":true,"closed_at":"2026-10-23T04:46:24.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-23T04:42:53.000Z","updated_at":"2026-10-23T04:46:33.000Z","time_to_close":211,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"feat(deps)","packages":[{"name":"markdown-it","old_version":"14.3.2","new_version":"14.3.3","repository_url":"https://github.com/markdown-it/markdown-it"}],"path":null,"ecosystem":"npm"},"body":"Bumps [markdown-it](https://github.com/markdown-it/markdown-it) from 14.3.2 to 14.3.3.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/markdown-it/markdown-it/blob/14.3.3/CHANGELOG.md\"\u003emarkdown-it's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[14.3.3] - 2026-10-16\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackported 15.0.3 fixes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d372f0d8a68bef0b0acaa68868ce8ae8ba85b384\"\u003e\u003ccode\u003ed372f0d\u003c/code\u003e\u003c/a\u003e 14.3.3 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d99f48839d37af6fd8a2617516c43dab90755503\"\u003e\u003ccode\u003ed99f488\u003c/code\u003e\u003c/a\u003e Backported 15.0.3 fixes\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/markdown-it/markdown-it/compare/14.3.2...14.3.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=markdown-it\u0026package-manager=npm_and_yarn\u0026previous-version=14.3.2\u0026new-version=14.3.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/andymai/brepjs/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/andymai/brepjs/pull/2408","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/andymai%2Fbrepjs/issues/2408","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/2408/packages"}},{"old_version":"14.3.2","new_version":"14.3.3","update_type":"patch","path":"/editors/vscode","pr_created_at":"2026-10-22T16:42:14.000Z","version_change":"14.3.2 → 14.3.3","issue":{"uuid":"5983583324","node_id":"PR_kwDOMV92088AAAABKEmHYA","number":154,"state":"open","title":"chore(vscode): bump markdown-it from 14.3.2 to 14.3.3 in /editors/vscode","user":"dependabot[bot]","labels":["dependencies"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-22T16:42:14.000Z","updated_at":"2026-10-22T16:42:19.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(vscode)","packages":[{"name":"markdown-it","old_version":"14.3.2","new_version":"14.3.3","repository_url":"https://github.com/markdown-it/markdown-it"}],"path":"/editors/vscode","ecosystem":"npm"},"body":"Bumps [markdown-it](https://github.com/markdown-it/markdown-it) from 14.3.2 to 14.3.3.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/markdown-it/markdown-it/blob/14.3.3/CHANGELOG.md\"\u003emarkdown-it's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[14.3.3] - 2026-10-16\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackported 15.0.3 fixes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d372f0d8a68bef0b0acaa68868ce8ae8ba85b384\"\u003e\u003ccode\u003ed372f0d\u003c/code\u003e\u003c/a\u003e 14.3.3 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d99f48839d37af6fd8a2617516c43dab90755503\"\u003e\u003ccode\u003ed99f488\u003c/code\u003e\u003c/a\u003e Backported 15.0.3 fixes\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/markdown-it/markdown-it/compare/14.3.2...14.3.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=markdown-it\u0026package-manager=npm_and_yarn\u0026previous-version=14.3.2\u0026new-version=14.3.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Cliftonz/jarvy/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/Cliftonz/jarvy/pull/154","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Cliftonz%2Fjarvy/issues/154","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/154/packages"}},{"old_version":"14.3.2","new_version":"14.3.3","update_type":"patch","path":"/ csharp/language/abstractions/composition","pr_created_at":"2026-10-22T07:36:23.000Z","version_change":"14.3.2 → 14.3.3","issue":{"uuid":"5975111503","node_id":"PR_kwDOBpoVaM8AAAABJ927Jg","number":56,"state":"open","title":"build(deps): bump markdown-it from 14.3.2 to 14.3.3 in / csharp/language/abstractions/composition","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-22T07:36:23.000Z","updated_at":"2026-10-22T19:09:26.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"markdown-it","old_version":"14.3.2","new_version":"14.3.3","repository_url":"https://github.com/markdown-it/markdown-it"}],"path":"/ csharp/language/abstractions/composition","ecosystem":"npm"},"body":"Bumps [markdown-it](https://github.com/markdown-it/markdown-it) from 14.3.2 to 14.3.3.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/markdown-it/markdown-it/blob/14.3.3/CHANGELOG.md\"\u003emarkdown-it's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[14.3.3] - 2026-10-16\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackported 15.0.3 fixes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d372f0d8a68bef0b0acaa68868ce8ae8ba85b384\"\u003e\u003ccode\u003ed372f0d\u003c/code\u003e\u003c/a\u003e 14.3.3 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d99f48839d37af6fd8a2617516c43dab90755503\"\u003e\u003ccode\u003ed99f488\u003c/code\u003e\u003c/a\u003e Backported 15.0.3 fixes\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/markdown-it/markdown-it/compare/14.3.2...14.3.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=markdown-it\u0026package-manager=npm_and_yarn\u0026previous-version=14.3.2\u0026new-version=14.3.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/RLittlesII/talks/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/RLittlesII/talks/pull/56","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/RLittlesII%2Ftalks/issues/56","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/56/packages"}},{"old_version":"14.3.2","new_version":"14.3.3","update_type":"patch","path":"/blocks","pr_created_at":"2026-10-22T05:41:59.000Z","version_change":"14.3.2 → 14.3.3","issue":{"uuid":"5973779136","node_id":"PR_kwDOBwbS1c8AAAABJ8zNYw","number":247,"state":"open","title":"Bump markdown-it from 14.3.2 to 14.3.3 in /blocks","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-22T05:41:59.000Z","updated_at":"2026-10-22T05:43:04.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"markdown-it","old_version":"14.3.2","new_version":"14.3.3","repository_url":"https://github.com/markdown-it/markdown-it"}],"path":"/blocks","ecosystem":"npm"},"body":"Bumps [markdown-it](https://github.com/markdown-it/markdown-it) from 14.3.2 to 14.3.3.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/markdown-it/markdown-it/blob/14.3.3/CHANGELOG.md\"\u003emarkdown-it's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[14.3.3] - 2026-10-16\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackported 15.0.3 fixes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d372f0d8a68bef0b0acaa68868ce8ae8ba85b384\"\u003e\u003ccode\u003ed372f0d\u003c/code\u003e\u003c/a\u003e 14.3.3 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d99f48839d37af6fd8a2617516c43dab90755503\"\u003e\u003ccode\u003ed99f488\u003c/code\u003e\u003c/a\u003e Backported 15.0.3 fixes\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/markdown-it/markdown-it/compare/14.3.2...14.3.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=markdown-it\u0026package-manager=npm_and_yarn\u0026previous-version=14.3.2\u0026new-version=14.3.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/cardknox/woocommerce-gateway-cardknox/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/cardknox/woocommerce-gateway-cardknox/pull/247","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/cardknox%2Fwoocommerce-gateway-cardknox/issues/247","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/247/packages"}},{"old_version":"14.3.2","new_version":"14.3.3","update_type":"patch","path":"/src/api/js","pr_created_at":"2026-10-22T05:39:32.000Z","version_change":"14.3.2 → 14.3.3","issue":{"uuid":"5973755033","node_id":"PR_kwDOAfawqs8AAAABJ8x-yQ","number":11259,"state":"open","title":"build(deps-dev): bump markdown-it from 14.3.2 to 14.3.3 in /src/api/js","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-22T05:39:32.000Z","updated_at":"2026-10-22T05:42:19.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps-dev)","packages":[{"name":"markdown-it","old_version":"14.3.2","new_version":"14.3.3","repository_url":"https://github.com/markdown-it/markdown-it"}],"path":"/src/api/js","ecosystem":"npm"},"body":"Bumps [markdown-it](https://github.com/markdown-it/markdown-it) from 14.3.2 to 14.3.3.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/markdown-it/markdown-it/blob/14.3.3/CHANGELOG.md\"\u003emarkdown-it's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[14.3.3] - 2026-10-16\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackported 15.0.3 fixes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d372f0d8a68bef0b0acaa68868ce8ae8ba85b384\"\u003e\u003ccode\u003ed372f0d\u003c/code\u003e\u003c/a\u003e 14.3.3 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d99f48839d37af6fd8a2617516c43dab90755503\"\u003e\u003ccode\u003ed99f488\u003c/code\u003e\u003c/a\u003e Backported 15.0.3 fixes\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/markdown-it/markdown-it/compare/14.3.2...14.3.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=markdown-it\u0026package-manager=npm_and_yarn\u0026previous-version=14.3.2\u0026new-version=14.3.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Z3Prover/z3/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/Z3Prover/z3/pull/11259","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Z3Prover%2Fz3/issues/11259","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/11259/packages"}},{"old_version":"14.3.2","new_version":"14.3.3","update_type":"patch","path":null,"pr_created_at":"2026-10-22T05:15:43.000Z","version_change":"14.3.2 → 14.3.3","issue":{"uuid":"5973519973","node_id":"PR_kwDOJztUYs8AAAABJ8mGXA","number":1019,"state":"closed","title":"build(deps-dev): bump markdown-it from 14.3.2 to 14.3.3","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-10-22T05:16:52.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-22T05:15:43.000Z","updated_at":"2026-10-22T05:17:20.000Z","time_to_close":69,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps-dev)","packages":[{"name":"markdown-it","old_version":"14.3.2","new_version":"14.3.3","repository_url":"https://github.com/markdown-it/markdown-it"}],"path":null,"ecosystem":"npm"},"body":"Bumps [markdown-it](https://github.com/markdown-it/markdown-it) from 14.3.2 to 14.3.3.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/markdown-it/markdown-it/blob/14.3.3/CHANGELOG.md\"\u003emarkdown-it's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[14.3.3] - 2026-10-16\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackported 15.0.3 fixes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d372f0d8a68bef0b0acaa68868ce8ae8ba85b384\"\u003e\u003ccode\u003ed372f0d\u003c/code\u003e\u003c/a\u003e 14.3.3 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d99f48839d37af6fd8a2617516c43dab90755503\"\u003e\u003ccode\u003ed99f488\u003c/code\u003e\u003c/a\u003e Backported 15.0.3 fixes\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/markdown-it/markdown-it/compare/14.3.2...14.3.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=markdown-it\u0026package-manager=npm_and_yarn\u0026previous-version=14.3.2\u0026new-version=14.3.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/encrypit/file64/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/encrypit/file64/pull/1019","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/encrypit%2Ffile64/issues/1019","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1019/packages"}},{"old_version":"14.3.2","new_version":"14.3.3","update_type":"patch","path":"the npm_and_yarn group across 1 directory","pr_created_at":"2026-10-22T04:39:07.000Z","version_change":"14.3.2 → 14.3.3","issue":{"uuid":"5973163112","node_id":"PR_kwDOTa6AWc8AAAABJ8UBjw","number":13,"state":"closed","title":"⬆️ Bump markdown-it from 14.3.2 to 14.3.3 in the npm_and_yarn group across 1 directory","user":"dependabot[bot]","labels":["configuration","dependencies","javascript"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-10-22T04:39:27.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-22T04:39:07.000Z","updated_at":"2026-10-22T04:42:45.000Z","time_to_close":20,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"⬆️ Bump","packages":[{"name":"markdown-it","old_version":"14.3.2","new_version":"14.3.3","repository_url":"https://github.com/markdown-it/markdown-it"}],"path":"the npm_and_yarn group across 1 directory","ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 1 update in the / directory: [markdown-it](https://github.com/markdown-it/markdown-it).\n\nUpdates `markdown-it` from 14.3.2 to 14.3.3\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/markdown-it/markdown-it/blob/14.3.3/CHANGELOG.md\"\u003emarkdown-it's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[14.3.3] - 2026-10-16\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackported 15.0.3 fixes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d372f0d8a68bef0b0acaa68868ce8ae8ba85b384\"\u003e\u003ccode\u003ed372f0d\u003c/code\u003e\u003c/a\u003e 14.3.3 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d99f48839d37af6fd8a2617516c43dab90755503\"\u003e\u003ccode\u003ed99f488\u003c/code\u003e\u003c/a\u003e Backported 15.0.3 fixes\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/markdown-it/markdown-it/compare/14.3.2...14.3.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=markdown-it\u0026package-manager=npm_and_yarn\u0026previous-version=14.3.2\u0026new-version=14.3.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Nick2bad4u/pre-commit-config-nick2bad4u/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/Nick2bad4u/pre-commit-config-nick2bad4u/pull/13","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Nick2bad4u%2Fpre-commit-config-nick2bad4u/issues/13","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/13/packages"}},{"old_version":"14.3.2","new_version":"14.3.3","update_type":"patch","path":"the npm_and_yarn group across 1 directory","pr_created_at":"2026-10-22T04:01:37.000Z","version_change":"14.3.2 → 14.3.3","issue":{"uuid":"5972809647","node_id":"PR_kwDOTRDfOc8AAAABJ8CMUg","number":13,"state":"closed","title":"⬆️ Bump markdown-it from 14.3.2 to 14.3.3 in the npm_and_yarn group across 1 directory","user":"dependabot[bot]","labels":["configuration","dependencies","javascript"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-10-22T04:01:54.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-22T04:01:37.000Z","updated_at":"2026-10-22T04:02:42.000Z","time_to_close":17,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"⬆️ Bump","packages":[{"name":"markdown-it","old_version":"14.3.2","new_version":"14.3.3","repository_url":"https://github.com/markdown-it/markdown-it"}],"path":"the npm_and_yarn group across 1 directory","ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 1 update in the / directory: [markdown-it](https://github.com/markdown-it/markdown-it).\n\nUpdates `markdown-it` from 14.3.2 to 14.3.3\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/markdown-it/markdown-it/blob/14.3.3/CHANGELOG.md\"\u003emarkdown-it's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[14.3.3] - 2026-10-16\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackported 15.0.3 fixes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d372f0d8a68bef0b0acaa68868ce8ae8ba85b384\"\u003e\u003ccode\u003ed372f0d\u003c/code\u003e\u003c/a\u003e 14.3.3 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d99f48839d37af6fd8a2617516c43dab90755503\"\u003e\u003ccode\u003ed99f488\u003c/code\u003e\u003c/a\u003e Backported 15.0.3 fixes\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/markdown-it/markdown-it/compare/14.3.2...14.3.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=markdown-it\u0026package-manager=npm_and_yarn\u0026previous-version=14.3.2\u0026new-version=14.3.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Nick2bad4u/nick2bad4u-repo-template/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/Nick2bad4u/nick2bad4u-repo-template/pull/13","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Nick2bad4u%2Fnick2bad4u-repo-template/issues/13","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/13/packages"}},{"old_version":"14.3.2","new_version":"14.3.3","update_type":"patch","path":null,"pr_created_at":"2026-10-22T03:57:42.000Z","version_change":"14.3.2 → 14.3.3","issue":{"uuid":"5972774389","node_id":"PR_kwDOADBpFc8AAAABJ8Ab8A","number":2402,"state":"closed","title":"build: bump markdown-it from 14.3.2 to 14.3.3","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-10-22T03:58:32.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-22T03:57:42.000Z","updated_at":"2026-10-22T03:59:50.000Z","time_to_close":50,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build","packages":[{"name":"markdown-it","old_version":"14.3.2","new_version":"14.3.3","repository_url":"https://github.com/markdown-it/markdown-it"}],"path":null,"ecosystem":"npm"},"body":"Bumps [markdown-it](https://github.com/markdown-it/markdown-it) from 14.3.2 to 14.3.3.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/markdown-it/markdown-it/blob/14.3.3/CHANGELOG.md\"\u003emarkdown-it's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[14.3.3] - 2026-10-16\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackported 15.0.3 fixes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d372f0d8a68bef0b0acaa68868ce8ae8ba85b384\"\u003e\u003ccode\u003ed372f0d\u003c/code\u003e\u003c/a\u003e 14.3.3 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d99f48839d37af6fd8a2617516c43dab90755503\"\u003e\u003ccode\u003ed99f488\u003c/code\u003e\u003c/a\u003e Backported 15.0.3 fixes\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/markdown-it/markdown-it/compare/14.3.2...14.3.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=markdown-it\u0026package-manager=npm_and_yarn\u0026previous-version=14.3.2\u0026new-version=14.3.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/fb55/entities/network/alerts).\n\n\u003c/details\u003e\n\n\u003c!-- This is an auto-generated description by cubic. --\u003e\n\u003ca href=\"https://cubic.dev/pr/fb55/entities/pull/2402?utm_source=github\" target=\"_blank\" rel=\"noopener noreferrer\" data-no-image-dialog=\"true\"\u003e\u003cpicture\u003e\u003csource media=\"(prefers-color-scheme: dark)\" srcset=\"https://www.cubic.dev/buttons/review-in-cubic-dark.svg\"\u003e\u003csource media=\"(prefers-color-scheme: light)\" srcset=\"https://www.cubic.dev/buttons/review-in-cubic-light.svg\"\u003e\u003cimg alt=\"View guided diff\" src=\"https://www.cubic.dev/buttons/review-in-cubic-light.svg\"\u003e\u003c/picture\u003e\u003c/a\u003e \u003ca href=\"https://www.cubic.dev/action/auto-fix/pr/fb55/entities/2402?returnTo=https%3A%2F%2Fgithub.com%2Ffb55%2Fentities%2Fpull%2F2402\u0026source=description\" target=\"_blank\" rel=\"noopener noreferrer\" data-no-image-dialog=\"true\"\u003e\u003cpicture\u003e\u003csource media=\"(prefers-color-scheme: dark)\" srcset=\"https://www.cubic.dev/buttons/turn-on-auto-fix-dark.svg\"\u003e\u003csource media=\"(prefers-color-scheme: light)\" srcset=\"https://www.cubic.dev/buttons/turn-on-auto-fix-light.svg\"\u003e\u003cimg alt=\"Turn on auto-fix\" src=\"https://www.cubic.dev/buttons/turn-on-auto-fix-light.svg\"\u003e\u003c/picture\u003e\u003c/a\u003e\n\u003c!-- End of auto-generated description by cubic. --\u003e\n\n","html_url":"https://github.com/fb55/entities/pull/2402","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/fb55%2Fentities/issues/2402","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/2402/packages"}}]}