{"id":3378,"name":"moment","ecosystem":"npm","repository_url":"https://github.com/moment/moment","issues_count":1601,"created_at":"2025-06-06T16:30:11.073Z","updated_at":"2025-06-06T16:30:11.073Z","purl":"pkg:npm/moment","metadata":{"id":2029009,"name":"moment","ecosystem":"npm","description":"Parse, validate, manipulate, and display dates","homepage":"https://momentjs.com","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/moment/moment","keywords_array":["moment","date","time","parse","format","validate","i18n","l10n","ender"],"namespace":null,"versions_count":76,"first_release_published_at":"2011-12-06T18:33:55.051Z","latest_release_published_at":"2023-12-27T10:38:43.272Z","latest_release_number":"2.30.1","last_synced_at":"2025-06-06T16:01:56.470Z","created_at":"2022-04-09T19:49:49.329Z","updated_at":"2025-06-06T16:02:46.252Z","registry_url":"https://www.npmjs.com/package/moment","install_command":"npm install moment","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"latest":"2.30.1"}},"repo_metadata":{"id":37979434,"uuid":"1424470","full_name":"moment/moment","owner":"moment","description":"Parse, validate, manipulate, and display dates in javascript.","archived":false,"fork":false,"pushed_at":"2024-08-14T17:12:19.000Z","size":22191,"stargazers_count":48086,"open_issues_count":281,"forks_count":7057,"subscribers_count":858,"default_branch":"develop","last_synced_at":"2025-06-03T16:14:17.243Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"momentjs.com","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/moment.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2011-03-01T02:46:06.000Z","updated_at":"2025-06-01T21:02:26.000Z","dependencies_parsed_at":"2022-07-12T00:01:39.125Z","dependency_job_id":"6f91c8cd-9649-4fe0-a0f3-5d7b63f8438d","html_url":"https://github.com/moment/moment","commit_stats":{"total_commits":3050,"total_committers":695,"mean_commits":4.388489208633094,"dds":0.7672131147540984,"last_synced_commit":"18aba135ab927ffe7f868ee09276979bed6993a6"},"previous_names":["timrwood/moment"],"tags_count":89,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/moment","download_url":"https://codeload.github.com/moment/moment/tar.gz/refs/heads/develop","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":258378991,"owners_count":22691579,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"moment","name":"Moment.js","uuid":"4129662","kind":"organization","description":"","email":null,"website":"http://momentjs.com","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/4129662?v=4","repositories_count":7,"last_synced_at":"2024-03-25T19:45:06.676Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/moment","funding_links":[],"total_stars":66974,"followers":135,"following":0,"created_at":"2022-11-02T16:21:04.625Z","updated_at":"2024-03-25T19:45:12.449Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/moment","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/moment/repositories"},"tags":[{"name":"2.30.0","sha":"ddd680908c23797a3ed22007838634518bb14705","kind":"tag","published_at":"2023-12-27T10:37:53.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.30.0","html_url":"https://github.com/moment/moment/releases/tag/2.30.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.30.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.30.0/manifests"},{"name":"2.30.1","sha":"485d9a7d709bd5f3869a7ad24630cf0746d072dc","kind":"tag","published_at":"2023-12-27T10:37:06.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.30.1","html_url":"https://github.com/moment/moment/releases/tag/2.30.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.30.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.30.1/manifests"},{"name":"2.29.4","sha":"000ac1800e620f770f4eb31b5ae908f6167b0ab2","kind":"tag","published_at":"2022-07-06T16:00:44.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.29.4","html_url":"https://github.com/moment/moment/releases/tag/2.29.4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.29.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.29.4/manifests"},{"name":"2.29.3","sha":"57c90622e402c929504cc6d6f3de4ebe2a9ffc73","kind":"tag","published_at":"2022-04-17T18:26:16.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.29.3","html_url":"https://github.com/moment/moment/releases/tag/2.29.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.29.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.29.3/manifests"},{"name":"2.29.2","sha":"75e2ac573e8cd62086a6bc6dc1b8d271e2804391","kind":"tag","published_at":"2022-04-03T13:17:32.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.29.2","html_url":"https://github.com/moment/moment/releases/tag/2.29.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.29.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.29.2/manifests"},{"name":"2.29.1","sha":"b7ec8e2ec068e03de4f832f28362675bb9e02261","kind":"tag","published_at":"2020-10-06T11:14:41.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.29.1","html_url":"https://github.com/moment/moment/releases/tag/2.29.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.29.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.29.1/manifests"},{"name":"2.29.0","sha":"adfaae8051588fcdb9347f0221e5ac1663f3a95c","kind":"tag","published_at":"2020-09-22T08:27:35.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.29.0","html_url":"https://github.com/moment/moment/releases/tag/2.29.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.29.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.29.0/manifests"},{"name":"2.28.0","sha":"2e91315d5f3b9fc26982d80aed401bbe0445fd43","kind":"tag","published_at":"2020-09-13T11:25:06.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.28.0","html_url":"https://github.com/moment/moment/releases/tag/2.28.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.28.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.28.0/manifests"},{"name":"2.27.0","sha":"3e1a95b5ef0a505fec567c5b2290fd80e1da18f9","kind":"tag","published_at":"2020-06-18T21:59:57.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.27.0","html_url":"https://github.com/moment/moment/releases/tag/2.27.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.27.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.27.0/manifests"},{"name":"2.26.0","sha":"a0f3c74374b638b769d9ab1ae54ba5266ef0976f","kind":"tag","published_at":"2020-05-20T06:43:46.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.26.0","html_url":"https://github.com/moment/moment/releases/tag/2.26.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.26.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.26.0/manifests"},{"name":"2.25.3","sha":"1872bb22ff6cd19c56e7dc30c5765489d48e65f1","kind":"tag","published_at":"2020-05-12T23:30:38.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.25.3","html_url":"https://github.com/moment/moment/releases/tag/2.25.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.25.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.25.3/manifests"},{"name":"2.25.2","sha":"4c1cc80b0d2a6607d6eb9f9bf7dc43eb62ed2544","kind":"tag","published_at":"2020-05-04T12:28:30.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.25.2","html_url":"https://github.com/moment/moment/releases/tag/2.25.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.25.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.25.2/manifests"},{"name":"2.25.1","sha":"475a1e0603aff05329181e1803d0fb85b0a12bf3","kind":"tag","published_at":"2020-05-01T18:50:55.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.25.1","html_url":"https://github.com/moment/moment/releases/tag/2.25.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.25.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.25.1/manifests"},{"name":"2.25.0","sha":"36a817d94eab0f070bbcc7d8431631ee71400b89","kind":"tag","published_at":"2020-05-01T01:17:53.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.25.0","html_url":"https://github.com/moment/moment/releases/tag/2.25.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.25.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.25.0/manifests"},{"name":"2.24.0","sha":"96d0d6791ab495859d09a868803d31a55c917de1","kind":"tag","published_at":"2019-01-21T21:07:51.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.24.0","html_url":"https://github.com/moment/moment/releases/tag/2.24.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.24.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.24.0/manifests"},{"name":"2.23.0","sha":"b8f4fe2bf5bb9022655505d59b62aef12bc540d6","kind":"tag","published_at":"2018-12-13T06:42:19.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.23.0","html_url":"https://github.com/moment/moment/releases/tag/2.23.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.23.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.23.0/manifests"},{"name":"2.22.2","sha":"2e2a5b35439665d4b0200143d808a7c26d6cd30f","kind":"tag","published_at":"2018-06-01T06:50:15.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.22.2","html_url":"https://github.com/moment/moment/releases/tag/2.22.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.22.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.22.2/manifests"},{"name":"2.22.1","sha":"c58511b94eba1000c1d66b23e9a9ff963ff1cc89","kind":"tag","published_at":"2018-04-15T05:56:14.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.22.1","html_url":"https://github.com/moment/moment/releases/tag/2.22.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.22.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.22.1/manifests"},{"name":"2.22.0","sha":"db71a655fc51fe58009675608a400d0d4cd0ca87","kind":"tag","published_at":"2018-03-30T22:05:27.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.22.0","html_url":"https://github.com/moment/moment/releases/tag/2.22.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.22.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.22.0/manifests"},{"name":"2.21.0","sha":"7c4c091bedb86ca6c1a5c5419ad5204ef3926347","kind":"tag","published_at":"2018-03-02T20:39:50.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.21.0","html_url":"https://github.com/moment/moment/releases/tag/2.21.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.21.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.21.0/manifests"},{"name":"2.20.1","sha":"03073778ec18ee38e179208cd1af899e8d1848dc","kind":"tag","published_at":"2017-12-19T04:42:58.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.20.1","html_url":"https://github.com/moment/moment/releases/tag/2.20.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.20.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.20.1/manifests"},{"name":"2.20.0","sha":"0e67426b8e8d200a3ca7dab046040717110e87e6","kind":"tag","published_at":"2017-12-17T01:14:40.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.20.0","html_url":"https://github.com/moment/moment/releases/tag/2.20.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.20.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.20.0/manifests"},{"name":"2.19.4","sha":"fea48bb69eda8c0459915d6aa66a910a4d43a55b","kind":"tag","published_at":"2017-12-11T01:10:01.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.19.4","html_url":"https://github.com/moment/moment/releases/tag/2.19.4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.19.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.19.4/manifests"},{"name":"2.19.3","sha":"4caa268356434f3ae9b5041985d62a0e8c246c78","kind":"tag","published_at":"2017-11-29T16:27:27.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.19.3","html_url":"https://github.com/moment/moment/releases/tag/2.19.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.19.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.19.3/manifests"},{"name":"2.19.2","sha":"328d51e7235b7a2d443bfdf69c1844939c115660","kind":"tag","published_at":"2017-11-11T20:31:22.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.19.2","html_url":"https://github.com/moment/moment/releases/tag/2.19.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.19.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.19.2/manifests"},{"name":"2.19.1","sha":"29afed6631e596fe9b3ff6c61ddc55eee18810e6","kind":"tag","published_at":"2017-10-11T20:58:27.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.19.1","html_url":"https://github.com/moment/moment/releases/tag/2.19.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.19.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.19.1/manifests"},{"name":"2.19.0","sha":"9483e2a49fd8479fb84f1e00d6a854f106abc950","kind":"tag","published_at":"2017-10-10T09:38:06.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.19.0","html_url":"https://github.com/moment/moment/releases/tag/2.19.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.19.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.19.0/manifests"},{"name":"2.18.1","sha":"b8a7fc310eb3625e83fc0c8f1ea2840fa83c7378","kind":"tag","published_at":"2017-03-21T22:58:04.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.18.1","html_url":"https://github.com/moment/moment/releases/tag/2.18.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.18.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.18.1/manifests"},{"name":"2.18.0","sha":"f2af24d53ec8bb2ad61626509e529d339217ff96","kind":"tag","published_at":"2017-03-18T21:14:11.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.18.0","html_url":"https://github.com/moment/moment/releases/tag/2.18.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.18.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.18.0/manifests"},{"name":"2.17.1","sha":"b8a297c1f99b3918f44dd9e3d7bd59379a876ba6","kind":"tag","published_at":"2016-12-04T05:47:52.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.17.1","html_url":"https://github.com/moment/moment/releases/tag/2.17.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.17.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.17.1/manifests"},{"name":"2.17.0","sha":"4710a7935cb347d8b2cf50f5befccfea8180619d","kind":"tag","published_at":"2016-11-22T13:47:16.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.17.0","html_url":"https://github.com/moment/moment/releases/tag/2.17.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.17.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.17.0/manifests"},{"name":"2.16.0","sha":"73f3c91174406b24fe66f19600958a6f43f2acd8","kind":"tag","published_at":"2016-11-10T06:53:43.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.16.0","html_url":"https://github.com/moment/moment/releases/tag/2.16.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.16.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.16.0/manifests"},{"name":"2.15.2","sha":"dc1e659b34365c98896e73e2e858f9efa4b3d5dc","kind":"tag","published_at":"2016-10-24T06:47:09.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.15.2","html_url":"https://github.com/moment/moment/releases/tag/2.15.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.15.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.15.2/manifests"},{"name":"2.15.1","sha":"986dba9497b7c173760d1d7bc85606c574ed2c44","kind":"tag","published_at":"2016-09-21T03:39:06.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.15.1","html_url":"https://github.com/moment/moment/releases/tag/2.15.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.15.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.15.1/manifests"},{"name":"2.15.0","sha":"c587bf0063c18214238ca83f3f9c6170daf25bed","kind":"tag","published_at":"2016-09-12T09:26:03.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.15.0","html_url":"https://github.com/moment/moment/releases/tag/2.15.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.15.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.15.0/manifests"},{"name":"2.14.2","sha":"7798b6757697e9af3ab1358ed0a5e333f3410776","kind":"tag","published_at":"2016-07-05T17:53:39.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.14.2","html_url":"https://github.com/moment/moment/releases/tag/2.14.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.14.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.14.2/manifests"},{"name":"2.14.1","sha":"227746b29044a4c2160ae7c597c7f24aacac2635","kind":"tag","published_at":"2016-07-04T06:42:22.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.14.1","html_url":"https://github.com/moment/moment/releases/tag/2.14.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.14.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.14.1/manifests"},{"name":"2.14.0","sha":"d40760af83da2684cbfed136cafa7c943d397f92","kind":"tag","published_at":"2016-07-04T05:10:12.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.14.0","html_url":"https://github.com/moment/moment/releases/tag/2.14.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.14.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.14.0/manifests"},{"name":"2.13.0","sha":"d6651c21c6131fbb5db891b60971357739015688","kind":"tag","published_at":"2016-04-18T07:39:22.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.13.0","html_url":"https://github.com/moment/moment/releases/tag/2.13.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.13.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.13.0/manifests"},{"name":"2.12.0","sha":"b135bf1a6d58ff94287f0a21455bfa6a1ddc7226","kind":"tag","published_at":"2016-03-07T09:21:11.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.12.0","html_url":"https://github.com/moment/moment/releases/tag/2.12.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.12.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.12.0/manifests"},{"name":"2.11.2","sha":"dd9cff0104c0dc3f114f54107397c59920e764cc","kind":"tag","published_at":"2016-02-03T22:47:15.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.11.2","html_url":"https://github.com/moment/moment/releases/tag/2.11.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.11.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.11.2/manifests"},{"name":"2.11.1","sha":"d731fe7e2678e585ae66cbe86033d1890688ef40","kind":"tag","published_at":"2016-01-09T13:16:16.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.11.1","html_url":"https://github.com/moment/moment/releases/tag/2.11.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.11.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.11.1/manifests"},{"name":"2.11.0","sha":"0eb7101a36d189dee90dad6626c5f5fbabc3666f","kind":"tag","published_at":"2016-01-02T23:37:02.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.11.0","html_url":"https://github.com/moment/moment/releases/tag/2.11.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.11.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.11.0/manifests"},{"name":"2.10.6","sha":"f3fbef9d9875bbff340b527dbe3f1c447a942f69","kind":"tag","published_at":"2015-07-28T04:44:06.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.10.6","html_url":"https://github.com/moment/moment/releases/tag/2.10.6","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.10.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.10.6/manifests"},{"name":"2.10.5","sha":"faaedc36d38d0ecdb6402575c1192f8fc4a25507","kind":"tag","published_at":"2015-07-26T09:29:01.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.10.5","html_url":"https://github.com/moment/moment/releases/tag/2.10.5","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.10.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.10.5/manifests"},{"name":"2.10.3","sha":"25cc720fbaab7323a1016cd0beb6a36e349c41be","kind":"tag","published_at":"2015-05-13T07:52:15.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.10.3","html_url":"https://github.com/moment/moment/releases/tag/2.10.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.10.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.10.3/manifests"},{"name":"2.10.2","sha":"ce233cecf3d07aa15869a1db0fd8a8c43efccfcd","kind":"tag","published_at":"2015-04-09T06:37:30.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.10.2","html_url":"https://github.com/moment/moment/releases/tag/2.10.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.10.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.10.2/manifests"},{"name":"2.9.0","sha":"94ad539f965689289af54b6493abca0a65ab4ce6","kind":"tag","published_at":"2015-01-08T14:47:51.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.9.0","html_url":"https://github.com/moment/moment/releases/tag/2.9.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.9.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.9.0/manifests"},{"name":"2.8.4","sha":"2f9b330eb35a38184fd7239749c7f0feef6c5146","kind":"tag","published_at":"2014-11-19T04:43:46.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.8.4","html_url":"https://github.com/moment/moment/releases/tag/2.8.4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.8.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.8.4/manifests"},{"name":"2.8.3","sha":"d5ff2cfc0000010c37cc5ebe75a5905c943368e4","kind":"tag","published_at":"2014-09-05T07:59:19.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.8.3","html_url":"https://github.com/moment/moment/releases/tag/2.8.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.8.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.8.3/manifests"},{"name":"2.8.2","sha":"c4c47a7793dfc116acd1356f668eb1a182e29d68","kind":"commit","published_at":"2014-08-22T13:32:22.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.8.2","html_url":"https://github.com/moment/moment/releases/tag/2.8.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.8.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.8.2/manifests"},{"name":"2.8.1","sha":"747bb3aecf22417bb6acef197817f7072f1666a1","kind":"tag","published_at":"2014-08-01T17:20:42.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.8.1","html_url":"https://github.com/moment/moment/releases/tag/2.8.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.8.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.8.1/manifests"},{"name":"2.8.0","sha":"a2be05ee3659f17a1bf3571d163c1cacdea0f4b9","kind":"tag","published_at":"2014-07-31T06:14:33.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.8.0","html_url":"https://github.com/moment/moment/releases/tag/2.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.8.0/manifests"},{"name":"2.7.0","sha":"9acd38fcff7c996200ac0e4df49b5ca9737940f0","kind":"tag","published_at":"2014-06-12T07:04:59.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.7.0","html_url":"https://github.com/moment/moment/releases/tag/2.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.7.0/manifests"},{"name":"2.6.0","sha":"37808f3f9dec14e37ad2b5cff45c70f63b021d17","kind":"tag","published_at":"2014-04-12T16:38:21.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.6.0","html_url":"https://github.com/moment/moment/releases/tag/2.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.6.0/manifests"},{"name":"2.5.1","sha":"abc3a14b2ed7c9f4ff420395f3e1f198459528d8","kind":"tag","published_at":"2014-01-22T09:28:19.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.5.1","html_url":"https://github.com/moment/moment/releases/tag/2.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.5.1/manifests"},{"name":"2.5.0","sha":"6d5b000a81abeae1240b8b6ae8c204d77895672c","kind":"tag","published_at":"2013-12-23T21:07:28.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.5.0","html_url":"https://github.com/moment/moment/releases/tag/2.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.5.0/manifests"},{"name":"2.4.0","sha":"604c7942de38749e768ff8e327301ea6917c7c73","kind":"tag","published_at":"2013-10-27T02:25:44.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.4.0","html_url":"https://github.com/moment/moment/releases/tag/2.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.4.0/manifests"},{"name":"2.3.1","sha":"2066382fed5ab6a593ebf40bc066b553508ce7e3","kind":"tag","published_at":"2013-10-09T02:37:54.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.3.1","html_url":"https://github.com/moment/moment/releases/tag/2.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.3.1/manifests"},{"name":"2.3.0","sha":"40801bbc9efd15ce27728a7d4edffcf21d5ee0ac","kind":"tag","published_at":"2013-10-07T08:29:20.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.3.0","html_url":"https://github.com/moment/moment/releases/tag/2.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.3.0/manifests"},{"name":"2.2.1","sha":"d8e1b4875fb3eb58757230d73589db45e21b077d","kind":"tag","published_at":"2013-09-12T08:38:34.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.2.1","html_url":"https://github.com/moment/moment/releases/tag/2.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.2.1/manifests"},{"name":"2.2.0","sha":"f479e066a059f06fede17fb808f46b7d3e928291","kind":"tag","published_at":"2013-09-11T09:43:09.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.2.0","html_url":"https://github.com/moment/moment/releases/tag/2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.2.0/manifests"},{"name":"2.1.0","sha":"05028e20e526b5f38dde3748833e98d7c8e846e8","kind":"commit","published_at":"2013-07-07T19:35:04.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.1.0","html_url":"https://github.com/moment/moment/releases/tag/2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.1.0/manifests"},{"name":"2.0.0","sha":"71c6831f320c96d9f79fcbb56142c9a000a379c2","kind":"tag","published_at":"2013-02-08T19:16:04.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/2.0.0","html_url":"https://github.com/moment/moment/releases/tag/2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/2.0.0/manifests"},{"name":"1.7.2","sha":"ab54ede28105ec7d806a8e0f07a70aa6181737d3","kind":"tag","published_at":"2012-10-02T17:17:45.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/1.7.2","html_url":"https://github.com/moment/moment/releases/tag/1.7.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/1.7.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/1.7.2/manifests"},{"name":"1.7.1","sha":"f253f811dd880107b49b1ea41c87981ff1b6f0ee","kind":"tag","published_at":"2012-10-01T17:39:48.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/1.7.1","html_url":"https://github.com/moment/moment/releases/tag/1.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/1.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/1.7.1/manifests"},{"name":"1.7.0","sha":"0ee19c2e8121d3e6d4d011233bb23271bea308ab","kind":"tag","published_at":"2012-07-25T19:09:21.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/1.7.0","html_url":"https://github.com/moment/moment/releases/tag/1.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/1.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/1.7.0/manifests"},{"name":"1.6.2","sha":"ae013f9035b84ea2d4ae2c991e4608211e9e7b3a","kind":"tag","published_at":"2012-05-04T17:14:04.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/1.6.2","html_url":"https://github.com/moment/moment/releases/tag/1.6.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/1.6.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/1.6.2/manifests"},{"name":"1.6.1","sha":"d15943e3130c450b0f819990643d97a33ee1dbff","kind":"tag","published_at":"2012-04-26T22:35:38.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/1.6.1","html_url":"https://github.com/moment/moment/releases/tag/1.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/1.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/1.6.1/manifests"},{"name":"1.6.0","sha":"dfaa66c11f689b01727230b560e7b7182c8e8538","kind":"tag","published_at":"2012-04-26T16:36:29.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/1.6.0","html_url":"https://github.com/moment/moment/releases/tag/1.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/1.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/1.6.0/manifests"},{"name":"1.5.1","sha":"9820316ca3948dffd94717305354a8025b4be8e6","kind":"tag","published_at":"2012-04-06T02:01:19.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/1.5.1","html_url":"https://github.com/moment/moment/releases/tag/1.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/1.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/1.5.1/manifests"},{"name":"1.5.0","sha":"b9b035a0818fb9a6377dc50f19ad93bfa31fa089","kind":"tag","published_at":"2012-03-19T19:45:06.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/1.5.0","html_url":"https://github.com/moment/moment/releases/tag/1.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/1.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/1.5.0/manifests"},{"name":"1.4.0","sha":"417bbf72342f2e098b3d07683b52e8cb5bd85a64","kind":"tag","published_at":"2012-02-03T19:15:36.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/1.4.0","html_url":"https://github.com/moment/moment/releases/tag/1.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/1.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/1.4.0/manifests"},{"name":"1.3.0","sha":"9115d55edb02afd5d553f2c6beee7b9b5ec598f2","kind":"tag","published_at":"2012-01-05T17:49:50.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/1.3.0","html_url":"https://github.com/moment/moment/releases/tag/1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/1.3.0/manifests"},{"name":"1.2.0","sha":"11324f30af17ac9ec557c4aa8be2f5cc77fa16cd","kind":"commit","published_at":"2011-12-06T18:33:42.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/1.2.0","html_url":"https://github.com/moment/moment/releases/tag/1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/1.2.0/manifests"},{"name":"1.1.2","sha":"f43051df14ec7cb16f9d363c5c024d67687d0355","kind":"tag","published_at":"2011-11-18T01:47:08.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/1.1.2","html_url":"https://github.com/moment/moment/releases/tag/1.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/1.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/1.1.2/manifests"},{"name":"1.1.1","sha":"f3347db884cc1aac7459f23c72744de31047df44","kind":"tag","published_at":"2011-11-12T17:11:23.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/1.1.1","html_url":"https://github.com/moment/moment/releases/tag/1.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/1.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/1.1.1/manifests"},{"name":"1.1.0","sha":"8a3cce781ff81eb928a0133e008a235f9c8e78ec","kind":"tag","published_at":"2011-10-27T23:15:59.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/1.1.0","html_url":"https://github.com/moment/moment/releases/tag/1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/1.1.0/manifests"},{"name":"1.0.1","sha":"a0c5b6e599835acc37f9eeb143a2fba1043ac244","kind":"tag","published_at":"2011-10-18T16:51:51.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/1.0.1","html_url":"https://github.com/moment/moment/releases/tag/1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/1.0.1/manifests"},{"name":"0.6.1","sha":"ae5916e56c58c3568961816914b25440d600fde1","kind":"commit","published_at":"2011-10-11T23:38:22.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/0.6.1","html_url":"https://github.com/moment/moment/releases/tag/0.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/0.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/0.6.1/manifests"},{"name":"0.6.0","sha":"6cb12b8f0003af6b0b14a672cd4e3e4540624f8a","kind":"tag","published_at":"2011-09-21T16:52:23.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/0.6.0","html_url":"https://github.com/moment/moment/releases/tag/0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/0.6.0/manifests"},{"name":"0.5.2","sha":"4e1a51cbc023bf40ad7dfa569f25a3f27537d0e7","kind":"commit","published_at":"2011-07-11T15:50:00.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/0.5.2","html_url":"https://github.com/moment/moment/releases/tag/0.5.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/0.5.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/0.5.2/manifests"},{"name":"0.5.1","sha":"1f3e53125f428400c5fa8e6b7f0df7c2dcb1289e","kind":"commit","published_at":"2011-06-16T19:38:07.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/0.5.1","html_url":"https://github.com/moment/moment/releases/tag/0.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/0.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/0.5.1/manifests"},{"name":"0.5.0","sha":"e16feb73220b3f88fe07fad1668a800d6f70ad78","kind":"commit","published_at":"2011-06-13T16:12:14.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/0.5.0","html_url":"https://github.com/moment/moment/releases/tag/0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/0.5.0/manifests"},{"name":"0.4.1","sha":"08cb3720ba174aeef64918f5a6ce5647b3648a79","kind":"tag","published_at":"2011-05-09T15:43:56.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/0.4.1","html_url":"https://github.com/moment/moment/releases/tag/0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/0.4.1/manifests"},{"name":"0.4.0","sha":"e42b5646948a1c28238084f51ced520637ed0a2e","kind":"tag","published_at":"2011-05-09T15:43:19.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/0.4.0","html_url":"https://github.com/moment/moment/releases/tag/0.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/0.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/0.4.0/manifests"},{"name":"0.3.2","sha":"e3f4d38b420c4c2ffffa7d241bd858f7fc9f419b","kind":"commit","published_at":"2011-04-08T22:33:58.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/0.3.2","html_url":"https://github.com/moment/moment/releases/tag/0.3.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/0.3.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/0.3.2/manifests"},{"name":"0.3.1","sha":"b7b9bc2662cafcaeac987073b39de940bf2ead4c","kind":"tag","published_at":"2011-03-25T16:04:30.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/0.3.1","html_url":"https://github.com/moment/moment/releases/tag/0.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/0.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/0.3.1/manifests"},{"name":"0.3.0","sha":"e2acf070f34a46a82c8312a778c75171c3568f49","kind":"tag","published_at":"2011-03-25T15:43:45.000Z","download_url":"https://codeload.github.com/moment/moment/tar.gz/0.3.0","html_url":"https://github.com/moment/moment/releases/tag/0.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/0.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moment%2Fmoment/tags/0.3.0/manifests"}]},"repo_metadata_updated_at":"2025-06-06T16:02:46.252Z","dependent_packages_count":54055,"downloads":103812550,"downloads_period":"last-month","dependent_repos_count":1006179,"rankings":{"downloads":0.019275398349105938,"dependent_repos_count":0.034033125210140173,"dependent_packages_count":0.0017523089408278125,"stargazers_count":0.15754352571130054,"forks_count":0.41171046161293473,"docker_downloads_count":0.01839924387869203,"average":0.10711901061716687},"purl":"pkg:npm/moment","advisories":[{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTQ0Nm0tbXY4Zi1xMzQ4","url":"https://github.com/advisories/GHSA-446m-mv8f-q348","title":"Regular Expression Denial of Service in moment","description":"Affected versions of `moment` are vulnerable to a low severity regular expression denial of service when parsing dates as strings.\n\n\n## Recommendation\n\nUpdate to version 2.19.3 or later.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2018-03-05T18:35:09.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://nvd.nist.gov/vuln/detail/CVE-2017-18214","https://github.com/moment/moment/issues/4163","https://github.com/moment/moment/pull/4326","https://github.com/advisories/GHSA-446m-mv8f-q348","https://www.npmjs.com/advisories/532","https://www.tenable.com/security/tns-2019-02","https://github.com/moment/moment/commit/69ed9d44957fa6ab12b73d2ae29d286a857b80eb"],"source_kind":"github","identifiers":["GHSA-446m-mv8f-q348","CVE-2017-18214"],"repository_url":"https://github.com/moment/moment","blast_radius":0.0,"packages":[{"versions":[{"first_patched_version":"2.19.3","vulnerable_version_range":"\u003c 2.19.3"}],"ecosystem":"npm","package_name":"moment"}],"created_at":"2022-12-21T16:13:37.402Z","updated_at":"2023-04-14T19:11:28.000Z","epss_percentage":0.00322,"epss_percentile":0.54525},{"uuid":"GSA_kwCzR0hTQS13YzY5LXJoanItaGM5Z84AAtHU","url":"https://github.com/advisories/GHSA-wc69-rhjr-hc9g","title":"Moment.js vulnerable to Inefficient Regular Expression Complexity","description":"### Impact\n\n* using string-to-date parsing in moment (more specifically rfc2822 parsing, which is tried by default) has quadratic (N^2) complexity on specific inputs\n* noticeable slowdown is observed with inputs above 10k characters\n* users who pass user-provided strings without sanity length checks to moment constructor are vulnerable to (Re)DoS attacks\n\n### Patches\nThe problem is patched in 2.29.4, the patch can be applied to all affected versions with minimal tweaking.\n\n### Workarounds\nIn general, given the proliferation of ReDoS attacks, it makes sense to limit the length of the user input to something sane, like 200 characters or less. I haven't seen legitimate cases of date-time strings longer than that, so all moment users who do pass a user-originating string to constructor are encouraged to apply such a rudimentary filter, that would help with this but also most future ReDoS vulnerabilities.\n\n### References\nThere is an excellent writeup of the issue here: https://github.com/moment/moment/pull/6015#issuecomment-1152961973=\n\n### Details\nThe issue is rooted in the code that removes legacy comments (stuff inside parenthesis) from strings during rfc2822 parsing. `moment(\"(\".repeat(500000))` will take a few minutes to process, which is unacceptable.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2022-07-06T18:38:49.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://github.com/moment/moment/security/advisories/GHSA-wc69-rhjr-hc9g","https://github.com/moment/moment/pull/6015#issuecomment-1152961973","https://github.com/moment/moment/commit/9a3b5894f3d5d602948ac8a02e4ee528a49ca3a3","https://nvd.nist.gov/vuln/detail/CVE-2022-31129","https://huntr.dev/bounties/f0952b67-f2ff-44a9-a9cd-99e0a87cb633/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6QIO6YNLTK2T7SPKDS4JEL45FANLNC2Q/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ORJX2LF6KMPIHP6B2P6KZIVKMLE3LVJ5/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IWY24RJA3SBJGA5N4CU4VBPHJPPPJL5O/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZMX5YHELQVCGKKQVFXIYOTBMN23YYSRO/","https://security.netapp.com/advisory/ntap-20221014-0003/","https://lists.debian.org/debian-lts-announce/2023/01/msg00035.html","https://github.com/moment/moment/pull/6015/commits/4bbb9f3ccbe231de40207503f344fe5ce97584f4","https://github.com/moment/moment/pull/6015/commits/bfd4f2375d5c1a2106246721d693a9611dddfbfe","https://github.com/moment/moment/pull/6015/commits/dc0d180e90d8a84f7ff13572363330a22b3ea504","https://github.com/advisories/GHSA-wc69-rhjr-hc9g"],"source_kind":"github","identifiers":["GHSA-wc69-rhjr-hc9g","CVE-2022-31129"],"repository_url":"https://github.com/moment/moment","blast_radius":1.0,"packages":[{"versions":[{"first_patched_version":"2.29.4","vulnerable_version_range":"\u003e= 2.18.0, \u003c 2.29.4"}],"ecosystem":"nuget","package_name":"Moment.js"},{"versions":[{"first_patched_version":"2.29.4","vulnerable_version_range":"\u003e= 2.18.0, \u003c 2.29.4"}],"ecosystem":"npm","package_name":"moment"}],"created_at":"2022-12-21T16:12:13.777Z","updated_at":"2023-11-29T22:02:29.000Z","epss_percentage":0.02808,"epss_percentile":0.85405},{"uuid":"GSA_kwCzR0hTQS04aGZqLWoyNHItOTZjNM04JA","url":"https://github.com/advisories/GHSA-8hfj-j24r-96c4","title":"Path Traversal: 'dir/../../filename' in moment.locale","description":"### Impact\nThis vulnerability impacts npm (server) users of moment.js, especially if user provided locale string, eg `fr` is directly used to switch moment locale.\n\n### Patches\nThis problem is patched in 2.29.2, and the patch can be applied to all affected versions (from 1.0.1 up until 2.29.1, inclusive).\n\n### Workarounds\nSanitize user-provided locale name before passing it to moment.js.\n\n### References\n_Are there any links users can visit to find out more?_\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Open an issue in [moment repo](https://github.com/moment/moment)\n","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2022-04-04T21:25:48.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://github.com/moment/moment/security/advisories/GHSA-8hfj-j24r-96c4","https://nvd.nist.gov/vuln/detail/CVE-2022-24785","https://github.com/moment/moment/commit/4211bfc8f15746be4019bba557e29a7ba83d54c5","https://www.tenable.com/security/tns-2022-09","https://security.netapp.com/advisory/ntap-20220513-0006/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6QIO6YNLTK2T7SPKDS4JEL45FANLNC2Q/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ORJX2LF6KMPIHP6B2P6KZIVKMLE3LVJ5/","https://lists.debian.org/debian-lts-announce/2023/01/msg00035.html","https://github.com/advisories/GHSA-8hfj-j24r-96c4"],"source_kind":"github","identifiers":["GHSA-8hfj-j24r-96c4","CVE-2022-24785"],"repository_url":"https://github.com/moment/moment","blast_radius":1.0,"packages":[{"versions":[{"first_patched_version":"2.29.2","vulnerable_version_range":"\u003c 2.29.2"}],"ecosystem":"nuget","package_name":"Moment.js"},{"versions":[{"first_patched_version":"2.29.2","vulnerable_version_range":"\u003c 2.29.2"}],"ecosystem":"npm","package_name":"moment"}],"created_at":"2022-12-21T16:12:31.059Z","updated_at":"2025-05-27T01:10:09.079Z","epss_percentage":0.00465,"epss_percentile":0.63281},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWh4ZjUtbWc4NC1wajRt","url":"https://github.com/advisories/GHSA-hxf5-mg84-pj4m","title":"Moderate severity vulnerability that affects moment","description":"Withdrawn, accidental duplicate publish.\r\n\r\nThe duration function in the moment package before 2.11.2 for Node.js allows remote attackers to cause a denial of service (CPU consumption) via a long string, aka a \"regular expression Denial of Service (ReDoS).\"","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2018-07-31T23:03:17.000Z","withdrawn_at":"2020-06-17T15:14:53.000Z","classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://nvd.nist.gov/vuln/detail/CVE-2016-4055","https://github.com/advisories/GHSA-hxf5-mg84-pj4m"],"source_kind":"github","identifiers":["GHSA-hxf5-mg84-pj4m"],"repository_url":null,"blast_radius":0.0,"packages":[{"versions":[{"first_patched_version":"2.11.2","vulnerable_version_range":"\u003c 2.11.2"}],"ecosystem":"npm","package_name":"moment"}],"created_at":"2022-12-21T16:13:32.571Z","updated_at":"2023-01-09T05:03:18.000Z","epss_percentage":null,"epss_percentile":null},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTg3dnYtcjlqNi1nNXF2","url":"https://github.com/advisories/GHSA-87vv-r9j6-g5qv","title":"Regular Expression Denial of Service in moment","description":"Versions of `moment` prior to 2.11.2 are affected by a regular expression denial of service vulnerability. The vulnerability is triggered when arbitrary user input is passed into `moment.duration()`.\n\n\n## Proof of concept\n```\nvar moment = require('moment');\n\nvar genstr = function (len, chr) {\n    var result = \"\";\n    for (i=0; i\u003c=len; i++) {\n        result = result + chr;\n    }\n\n    return result;\n}\n\n\nfor (i=20000;i\u003c=10000000;i=i+10000) {\n    console.log(\"COUNT: \" + i);\n    var str = '-' + genstr(i, '1')\n    console.log(\"LENGTH: \" + str.length);\n    var start = process.hrtime();\n    moment.duration(str)\n\n    var end = process.hrtime(start);\n    console.log(end);\n}\n```\n\n### Results\n```\n$ node moment.js\nCOUNT: 20000\nLENGTH: 20002\n[ 0, 618931029 ]\nCOUNT: 30001\nLENGTH: 30003\n[ 1, 401413894 ]\nCOUNT: 40002\nLENGTH: 40004\n[ 2, 437075303 ]\nCOUNT: 50003\nLENGTH: 50005\n[ 3, 824664804 ]\nCOUNT: 60004\nLENGTH: 60006\n[ 5, 651335262 ]\n```\n\n\n## Recommendation\n\nPlease update to version 2.11.2 or later. ","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2017-10-24T18:33:35.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://nvd.nist.gov/vuln/detail/CVE-2016-4055","https://github.com/advisories/GHSA-87vv-r9j6-g5qv","https://www.npmjs.com/advisories/55","https://lists.apache.org/thread.html/10f0f3aefd51444d1198c65f44ffdf2d78ca3359423dbc1c168c9731@%3Cdev.flink.apache.org%3E","https://lists.apache.org/thread.html/17ff53f7999e74fbe3cc0ceb4e1c3b00b180b7c5afec8e978837bc49@%3Cuser.flink.apache.org%3E","https://lists.apache.org/thread.html/52bafac05ad174000ea465fe275fd3cc7bd5c25535a7631c0bc9bfb2@%3Cuser.flink.apache.org%3E","https://lists.apache.org/thread.html/54df3aeb4239b64b50b356f0ca6f986e3c4ca5b84c515dce077c7854@%3Cuser.flink.apache.org%3E","https://www.tenable.com/security/tns-2019-02","http://www.openwall.com/lists/oss-security/2016/04/20/11","http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","http://www.securityfocus.com/bid/95849"],"source_kind":"github","identifiers":["GHSA-87vv-r9j6-g5qv","CVE-2016-4055"],"repository_url":null,"blast_radius":0.0,"packages":[{"versions":[{"first_patched_version":"2.11.2","vulnerable_version_range":"\u003c 2.11.2"}],"ecosystem":"npm","package_name":"moment"}],"created_at":"2022-12-21T16:13:39.364Z","updated_at":"2023-02-03T05:02:30.000Z","epss_percentage":0.03501,"epss_percentile":0.86948}],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/moment","docker_dependents_count":17870,"docker_downloads_count":5606823268,"usage_url":"https://repos.ecosyste.ms/usage/npm/moment","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/moment/dependencies","status":null,"funding_links":[],"critical":true,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/moment/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/moment/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/moment/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/moment/related_packages","maintainers":[{"uuid":"ichernev","login":"ichernev","name":null,"email":"me@iskren.info","url":null,"packages_count":6,"html_url":"https://www.npmjs.com/~ichernev","role":null,"created_at":"2022-11-10T11:07:30.199Z","updated_at":"2022-11-10T11:07:30.199Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ichernev/packages"},{"uuid":"timrwood","login":"timrwood","name":null,"email":"washwithcare@gmail.com","url":null,"packages_count":8,"html_url":"https://www.npmjs.com/~timrwood","role":null,"created_at":"2022-11-10T11:07:30.201Z","updated_at":"2022-11-10T11:07:30.201Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/timrwood/packages"},{"uuid":"mj1856","login":"mj1856","name":null,"email":"mj1856@hotmail.com","url":null,"packages_count":3,"html_url":"https://www.npmjs.com/~mj1856","role":null,"created_at":"2022-11-10T11:07:30.204Z","updated_at":"2022-11-10T11:07:30.204Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/mj1856/packages"},{"uuid":"maggiepint","login":"maggiepint","name":null,"email":"maggiepint@gmail.com","url":null,"packages_count":2,"html_url":"https://www.npmjs.com/~maggiepint","role":null,"created_at":"2022-11-10T11:07:30.206Z","updated_at":"2022-11-10T11:07:30.206Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/maggiepint/packages"},{"uuid":"marwahaha","login":"marwahaha","name":null,"email":"marwahaha@berkeley.edu","url":null,"packages_count":7,"html_url":"https://www.npmjs.com/~marwahaha","role":null,"created_at":"2022-11-10T11:07:30.209Z","updated_at":"2022-11-10T11:07:30.209Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/marwahaha/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5006543,"maintainers_count":1012935,"namespaces_count":295512,"keywords_count":700181,"github":"npm","metadata":{"funded_packages_count":150239},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2025-06-06T05:58:05.971Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},"unique_repositories_count":1283,"unique_repositories_count_past_30_days":109,"recent_issues":[{"uuid":"5995829856","node_id":"PR_kwDOGDW2As8AAAABKOWpMQ","number":79,"state":"open","title":"build(deps): Bump moment from 2.30.1 to 2.31.0","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-23T10:05:29.000Z","updated_at":"2026-10-23T10:06:01.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps): Bump","packages":[{"name":"moment","old_version":"2.30.1","new_version":"2.31.0","repository_url":"https://github.com/moment/moment"}],"path":null,"ecosystem":"npm"},"body":"Bumps [moment](https://github.com/moment/moment) from 2.30.1 to 2.31.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/releases\"\u003emoment's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.31.0\u003c/h2\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/blob/develop/CHANGELOG.md\"\u003emoment's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch3\u003e2.31.0\u003c/h3\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/15b45d48a176312e8f34143c5a800090abf4787f\"\u003e\u003ccode\u003e15b45d4\u003c/code\u003e\u003c/a\u003e [pkg] Build 2.31.0 (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6452\"\u003e#6452\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/631cd81454ee001e1f508e21270eae0b6bb62974\"\u003e\u003ccode\u003e631cd81\u003c/code\u003e\u003c/a\u003e [pkg] Update changelog for upcoming release (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6394\"\u003e#6394\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/6caff9e0d54e85a63a6eb97d7361f1da35bc58f4\"\u003e\u003ccode\u003e6caff9e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/710703b7eac93535ad125cbf4feb3d42afed6fb3\"\u003e\u003ccode\u003e710703b\u003c/code\u003e\u003c/a\u003e [feature] Add internal date-default hook for Moment Timezone (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6451\"\u003e#6451\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/863ed940556e6e63c43de23981a4853036a003ac\"\u003e\u003ccode\u003e863ed94\u003c/code\u003e\u003c/a\u003e [bugfix] Add stack traces to conditional deprecation warnings (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6450\"\u003e#6450\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/2c7abe1c42ee15445d30c2c5d536750a1e43a09a\"\u003e\u003ccode\u003e2c7abe1\u003c/code\u003e\u003c/a\u003e [bugfix] Apply postformat to locale relative time methods (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6448\"\u003e#6448\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/9c45ac38690c649c95e19923276b63da5fe2be26\"\u003e\u003ccode\u003e9c45ac3\u003c/code\u003e\u003c/a\u003e [bugfix] Include metadata in all-locales bundle (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6447\"\u003e#6447\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/f6eefc5fc7b44ceccbd007aeffc48ebc5eac30fa\"\u003e\u003ccode\u003ef6eefc5\u003c/code\u003e\u003c/a\u003e [bugfix] Validate timezone offset range (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6446\"\u003e#6446\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/136b441794a3bb207d593add3b59e9de0e062523\"\u003e\u003ccode\u003e136b441\u003c/code\u003e\u003c/a\u003e [bugfix] Avoid Object.assign in duration.humanize (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6443\"\u003e#6443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/0d1050437b40f66ac47e14b285bb3d09676cf2e0\"\u003e\u003ccode\u003e0d10504\u003c/code\u003e\u003c/a\u003e [bugfix] Fix locale('\u003cstrong\u003eproto\u003c/strong\u003e') corrupting the global locale (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6442\"\u003e#6442\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moment/moment/compare/2.30.1...2.31.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for moment since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=moment\u0026package-manager=npm_and_yarn\u0026previous-version=2.30.1\u0026new-version=2.31.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Dragon1573/Boudoir-of-Sagiri/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/Dragon1573/Boudoir-of-Sagiri/pull/79","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Dragon1573%2FBoudoir-of-Sagiri/issues/79","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/79/packages"},{"uuid":"5954612520","node_id":"PR_kwDOK1EH8s8AAAABJteCbg","number":35,"state":"open","title":"build(deps): bump the npm_and_yarn group across 1 directory with 7 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-21T04:57:58.000Z","updated_at":"2026-10-21T04:58:05.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps): bump","group_name":"npm_and_yarn","update_count":7,"packages":[{"name":"moment","old_version":"2.30.1","new_version":"2.31.0","repository_url":"https://github.com/moment/moment"},{"name":"next","old_version":"16.3.3","new_version":"16.3.8","repository_url":"https://github.com/vercel/next.js"},{"name":"sharp","old_version":"0.35.4","new_version":"0.35.5","repository_url":"https://github.com/lovell/sharp"},{"name":"brace-expansion","old_version":"2.1.4","new_version":"2.1.7","repository_url":"https://github.com/juliangruber/brace-expansion"},{"name":"follow-redirects","old_version":"1.16.0","new_version":"1.16.1","repository_url":"https://github.com/follow-redirects/follow-redirects"},{"name":"http-cache-semantics","old_version":"4.1.1","new_version":"4.3.0","repository_url":"https://github.com/kornelski/http-cache-semantics"},{"name":"source-map-js","old_version":"1.2.1","new_version":"1.2.2","repository_url":"https://github.com/7rulnik/source-map-js"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 7 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [moment](https://github.com/moment/moment) | `2.30.1` | `2.31.0` |\n| [next](https://github.com/vercel/next.js) | `16.3.3` | `16.3.8` |\n| [sharp](https://github.com/lovell/sharp) | `0.35.4` | `0.35.5` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `2.1.4` | `2.1.7` |\n| [follow-redirects](https://github.com/follow-redirects/follow-redirects) | `1.16.0` | `1.16.1` |\n| [http-cache-semantics](https://github.com/kornelski/http-cache-semantics) | `4.1.1` | `4.3.0` |\n| [source-map-js](https://github.com/7rulnik/source-map-js) | `1.2.1` | `1.2.2` |\n\n\nUpdates `moment` from 2.30.1 to 2.31.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/releases\"\u003emoment's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.31.0\u003c/h2\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/blob/develop/CHANGELOG.md\"\u003emoment's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch3\u003e2.31.0\u003c/h3\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/15b45d48a176312e8f34143c5a800090abf4787f\"\u003e\u003ccode\u003e15b45d4\u003c/code\u003e\u003c/a\u003e [pkg] Build 2.31.0 (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6452\"\u003e#6452\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/631cd81454ee001e1f508e21270eae0b6bb62974\"\u003e\u003ccode\u003e631cd81\u003c/code\u003e\u003c/a\u003e [pkg] Update changelog for upcoming release (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6394\"\u003e#6394\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/6caff9e0d54e85a63a6eb97d7361f1da35bc58f4\"\u003e\u003ccode\u003e6caff9e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/710703b7eac93535ad125cbf4feb3d42afed6fb3\"\u003e\u003ccode\u003e710703b\u003c/code\u003e\u003c/a\u003e [feature] Add internal date-default hook for Moment Timezone (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6451\"\u003e#6451\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/863ed940556e6e63c43de23981a4853036a003ac\"\u003e\u003ccode\u003e863ed94\u003c/code\u003e\u003c/a\u003e [bugfix] Add stack traces to conditional deprecation warnings (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6450\"\u003e#6450\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/2c7abe1c42ee15445d30c2c5d536750a1e43a09a\"\u003e\u003ccode\u003e2c7abe1\u003c/code\u003e\u003c/a\u003e [bugfix] Apply postformat to locale relative time methods (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6448\"\u003e#6448\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/9c45ac38690c649c95e19923276b63da5fe2be26\"\u003e\u003ccode\u003e9c45ac3\u003c/code\u003e\u003c/a\u003e [bugfix] Include metadata in all-locales bundle (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6447\"\u003e#6447\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/f6eefc5fc7b44ceccbd007aeffc48ebc5eac30fa\"\u003e\u003ccode\u003ef6eefc5\u003c/code\u003e\u003c/a\u003e [bugfix] Validate timezone offset range (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6446\"\u003e#6446\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/136b441794a3bb207d593add3b59e9de0e062523\"\u003e\u003ccode\u003e136b441\u003c/code\u003e\u003c/a\u003e [bugfix] Avoid Object.assign in duration.humanize (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6443\"\u003e#6443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/0d1050437b40f66ac47e14b285bb3d09676cf2e0\"\u003e\u003ccode\u003e0d10504\u003c/code\u003e\u003c/a\u003e [bugfix] Fix locale('\u003cstrong\u003eproto\u003c/strong\u003e') corrupting the global locale (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6442\"\u003e#6442\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moment/moment/compare/2.30.1...2.31.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for moment since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `next` from 16.3.3 to 16.3.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vercel/next.js/releases\"\u003enext's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev16.3.8\u003c/h2\u003e\n\u003cp\u003eThis release contains security fixes for the following advisories:\u003c/p\u003e\n\u003cp\u003eHigh:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-cjq9-62q9-8jv4\"\u003eServer-Side Request Forgery in Image Optimization\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eMedium:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-f87g-xv8r-7p7x\"\u003eInformation disclosure in Next.js App Router metadata image routes via dynamicParams bypass\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-4jqv-mc3x-m676\"\u003eCache poisoning of SSG and ISR pages in self-hosted Next.js applications\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-mcj8-r9mp-w47p\"\u003eCache poisoning in Next.js SSG/ISR rendering leads to cross-user content substitution and persistent denial of service\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-3w37-wq28-93x7\"\u003ePending \u003ccode\u003euse cache\u003c/code\u003e fill can leak Draft Mode content into regular responses and persisted pages\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-h694-7cp9-m8p3\"\u003eCache leak across root param values in nested 'use cache' functions\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eLow:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-39w2-rjm5-chcv\"\u003eInformation disclosure in the Next.js development server's Model Context Protocol endpoint\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev16.3.7\u003c/h2\u003e\n\u003cblockquote\u003e\n\u003cp\u003e[!NOTE]\nThis release is backporting bug fixes. It does \u003cstrong\u003enot\u003c/strong\u003e include all pending features/changes on canary.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch3\u003eCore Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eturbo-tasks-backend: fix strongly consistent read hanging on a canceled task (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/98931\"\u003e#98931\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCredits\u003c/h3\u003e\n\u003cp\u003eHuge thanks to \u003ca href=\"https://github.com/lukesandberg\"\u003e\u003ccode\u003e@​lukesandberg\u003c/code\u003e\u003c/a\u003e for helping!\u003c/p\u003e\n\u003ch2\u003ev16.3.6\u003c/h2\u003e\n\u003cp\u003eThis release contains a security fix for \u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-vcvr-r3jv-pc5j\"\u003eGHSA-vcvr-r3jv-pc5j: Remote Code Execution in next/og ImageResponse\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev16.3.5\u003c/h2\u003e\n\u003cp\u003eThe following bug fixes have been backported. It does not include all pending features/changes on canary.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003enext/image: Skip 0-byte entries when initializing disk LRU cache (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/98185\"\u003e#98185\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003enext/image: Reject empty images when reading/writing to the disk cache (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/98186\"\u003e#98186\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEmit whole-app server NFTs when \u003ccode\u003eoutput: 'standalone'\u003c/code\u003e is used with an adapter (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/98167\"\u003e#98167\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd CSP nonce to script tags of loading and template files (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/98403\"\u003e#98403\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003euse cache\u003c/code\u003e prerender signal retention (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/98448\"\u003e#98448\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev16.3.4\u003c/h2\u003e\n\u003cp\u003eFollow-up release to \u003ca href=\"https://github.com/vercel/next.js/releases/tag/v16.3.3\"\u003ev16.3.3\u003c/a\u003e re-enabling AVIF Image Optimization (\u003ca href=\"https://redirect.github.com/vercel/next.js/pull/97949\"\u003e#97949\u003c/a\u003e).\u003c/p\u003e\n\u003cp\u003eThe following bug fixes have been backported. It does \u003cstrong\u003enot\u003c/strong\u003e include all pending features/changes on canary.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003etestmode: Fix infinite recursion in testmode passthrough fetch (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/97691\"\u003e#97691\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix build error when aliasing typescript to \u003ccode\u003e@​typescript/typescript6\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/97997\"\u003e#97997\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix unset crossOrigin in Turbopack manifests (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/97930\"\u003e#97930\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCredits\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/b0fad0d45eb4c4430fda5eeeb442e8a5af08a5f6\"\u003e\u003ccode\u003eb0fad0d\u003c/code\u003e\u003c/a\u003e v16.3.8\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/719e4c67d6e92df60246f95e1d96e2dd60789a52\"\u003e\u003ccode\u003e719e4c6\u003c/code\u003e\u003c/a\u003e [lts-active] Scope response cache keys to their source route (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/218\"\u003e#218\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/e92db4536a7f34ae2dbda583cfa1b4e0d06d1865\"\u003e\u003ccode\u003ee92db45\u003c/code\u003e\u003c/a\u003e [lts-active] Fix metadata propagation for deduplicated nested caches (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/223\"\u003e#223\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/40c2ba904289a65ed2fd4633c5dfb1bdc29b52de\"\u003e\u003ccode\u003e40c2ba9\u003c/code\u003e\u003c/a\u003e [lts-active] Match Next data paths case-sensitively (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/196\"\u003e#196\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/2d9f50a409312696145b82b3157aadb6b1fef476\"\u003e\u003ccode\u003e2d9f50a\u003c/code\u003e\u003c/a\u003e [lts-active] Fix MCP middleware DNS rebinding (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/213\"\u003e#213\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/bd9214f9a32854a011bf5fe58e481dffe1bbf598\"\u003e\u003ccode\u003ebd9214f\u003c/code\u003e\u003c/a\u003e [lts-active] Fix draft mode leaks through cross-request \u003ccode\u003e'use cache'\u003c/code\u003e dedupli...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/8db4a627c91e718514406ff5644ea4985dcaaae0\"\u003e\u003ccode\u003e8db4a62\u003c/code\u003e\u003c/a\u003e [lts-active][webpack] Ensure \u003ccode\u003edynamicParams\u003c/code\u003e is respected in `opengraph-image...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/e002ad68bd676bb0ed0c87bb22e3590304763e0b\"\u003e\u003ccode\u003ee002ad6\u003c/code\u003e\u003c/a\u003e [lts-active] fix(next/image): Pin DNS resolution when fetching external image...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/4c20699e29178d444994cf5a31b8a617ca3a2c80\"\u003e\u003ccode\u003e4c20699\u003c/code\u003e\u003c/a\u003e v16.3.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/2521aec5815e7de2121db253d12dae9f13e25361\"\u003e\u003ccode\u003e2521aec\u003c/code\u003e\u003c/a\u003e [backport] turbo-tasks-backend: fix strongly consistent read hanging on a can...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vercel/next.js/compare/v16.3.3...v16.3.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `sharp` from 0.35.4 to 0.35.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/lovell/sharp/releases\"\u003esharp's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.35.5\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/lovell/sharp-libvips/releases/tag/v1.3.4\"\u003ehttps://github.com/lovell/sharp-libvips/releases/tag/v1.3.4\u003c/a\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eAdd upper bounds check on length of \u003ccode\u003elinear\u003c/code\u003e and GIF \u003ccode\u003edelay\u003c/code\u003e arrays.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eImprove error handing when WebAssembly fallback also fails.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/pull/4593\"\u003e#4593\u003c/a\u003e\n\u003ca href=\"https://github.com/lazerg\"\u003e\u003ccode\u003e@​lazerg\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eTypeScript: Allow multi-frame options for JXL output.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/pull/4602\"\u003e#4602\u003c/a\u003e\n\u003ca href=\"https://github.com/ramin-010\"\u003e\u003ccode\u003e@​ramin-010\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eTypeScript: Remove non-existent named export.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4604\"\u003e#4604\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eIncrease accepted dimensions when extending an image.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4605\"\u003e#4605\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eImprove gain map support for \u003ccode\u003eextract\u003c/code\u003e and \u003ccode\u003erotate\u003c/code\u003e operations.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4606\"\u003e#4606\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eTests: Ensure composite tests pass on big endian platforms.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4609\"\u003e#4609\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.35.5-rc.1\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/lovell/sharp-libvips/releases/tag/v1.3.4-rc.1\"\u003ehttps://github.com/lovell/sharp-libvips/releases/tag/v1.3.4-rc.1\u003c/a\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eAdd upper bounds check on length of \u003ccode\u003elinear\u003c/code\u003e and GIF \u003ccode\u003edelay\u003c/code\u003e arrays.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eImprove error handing when WebAssembly fallback also fails.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/pull/4593\"\u003e#4593\u003c/a\u003e\n\u003ca href=\"https://github.com/lazerg\"\u003e\u003ccode\u003e@​lazerg\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eTypeScript: Allow multi-frame options for JXL output.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/pull/4602\"\u003e#4602\u003c/a\u003e\n\u003ca href=\"https://github.com/ramin-010\"\u003e\u003ccode\u003e@​ramin-010\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eTypeScript: Remove non-existent named export.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4604\"\u003e#4604\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eIncrease accepted dimensions when extending an image.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4605\"\u003e#4605\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eImprove gain map support for \u003ccode\u003eextract\u003c/code\u003e operation.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4606\"\u003e#4606\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/51a990faa26ade5586a4934ac9673c98d8893326\"\u003e\u003ccode\u003e51a990f\u003c/code\u003e\u003c/a\u003e Release v0.35.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/96de105d9d36ab04c76c2b78b97255171630d236\"\u003e\u003ccode\u003e96de105\u003c/code\u003e\u003c/a\u003e Upgrade to sharp-libvips v1.3.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/3a61390260e0aa017046af9ad107abd62f3c98c0\"\u003e\u003ccode\u003e3a61390\u003c/code\u003e\u003c/a\u003e CI: Configure Dependabot with all package.json locations\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/4940c500a63a9193b1ad5d3804a2d241ca36995b\"\u003e\u003ccode\u003e4940c50\u003c/code\u003e\u003c/a\u003e Improve gain map support for rotate/flip/flop ops\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/20654aa60eaa85a37369ef69a7ca6506b65f8c85\"\u003e\u003ccode\u003e20654aa\u003c/code\u003e\u003c/a\u003e Prerelease v0.35.5-rc.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/ef4f9348a97053ceddacd23dcb6e39cce5a1fc7d\"\u003e\u003ccode\u003eef4f934\u003c/code\u003e\u003c/a\u003e CI: Upgrade to Ubuntu 26.04\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/358df954c5f58487392e1a9af743e112e8998d67\"\u003e\u003ccode\u003e358df95\u003c/code\u003e\u003c/a\u003e Upgrade to libvips v8.18.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/49f4903d34eddcd68b79872c511c198f124885a3\"\u003e\u003ccode\u003e49f4903\u003c/code\u003e\u003c/a\u003e Improve gain map support for rotate-then-extract \u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4606\"\u003e#4606\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/0e2e55eb3a44da5d602adedd6b51a03e652e3b20\"\u003e\u003ccode\u003e0e2e55e\u003c/code\u003e\u003c/a\u003e Silence a couple of compiler/static analysis warnings\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/cef3b8c467c21f7e84bd51d5e53f2d115669f8d8\"\u003e\u003ccode\u003ecef3b8c\u003c/code\u003e\u003c/a\u003e Improve gain map support for extract operation \u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4606\"\u003e#4606\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/lovell/sharp/compare/v0.35.4...v0.35.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `brace-expansion` from 2.1.4 to 2.1.7\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/714b6228a5878cfc6b07dc319db0eb6376ab2c4d\"\u003e\u003ccode\u003e714b622\u003c/code\u003e\u003c/a\u003e 2.1.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/bdff773f98e5988616b7039cc9b508df5d640b22\"\u003e\u003ccode\u003ebdff773\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/5a5c07b25ea84a899322ebb820336260277cbe90\"\u003e\u003ccode\u003e5a5c07b\u003c/code\u003e\u003c/a\u003e 2.1.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/6463f2fd6a31f97a09c2f827513a7faaf96bde33\"\u003e\u003ccode\u003e6463f2f\u003c/code\u003e\u003c/a\u003e update lockfile\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/1ba3c71f89fb3448c8be6dcf2d17b543c2738f16\"\u003e\u003ccode\u003e1ba3c71\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/aae3387e0d4c551480c963f1241abd3a80a279e6\"\u003e\u003ccode\u003eaae3387\u003c/code\u003e\u003c/a\u003e 2.1.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/5171e681c0922b7ae8bfaf9a331e309107be6edc\"\u003e\u003ccode\u003e5171e68\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v2.1.4...v2.1.7\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `follow-redirects` from 1.16.0 to 1.16.1\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/follow-redirects/follow-redirects/commit/46301256333c90b7faac7aa126effe72ec16d16e\"\u003e\u003ccode\u003e4630125\u003c/code\u003e\u003c/a\u003e Release version 1.16.1 of the npm package.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/follow-redirects/follow-redirects/commit/9865ca45490e4d0f7b6944870318408344570aff\"\u003e\u003ccode\u003e9865ca4\u003c/code\u003e\u003c/a\u003e Support key/value header arrays.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/follow-redirects/follow-redirects/commit/080a76d0e125b37bf81717368a61d5dc37aa56c8\"\u003e\u003ccode\u003e080a76d\u003c/code\u003e\u003c/a\u003e Escape all RegExp modifiers.\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/follow-redirects/follow-redirects/compare/v1.16.0...v1.16.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `http-cache-semantics` from 4.1.1 to 4.3.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/kornelski/http-cache-semantics/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `source-map-js` from 1.2.1 to 1.2.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/7rulnik/source-map-js/releases\"\u003esource-map-js's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.2.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eFix crash when executing in browser with CSP script-src that don't permit unsafe-eval (\u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/29\"\u003e#29\u003c/a\u003e) \u003ca href=\"https://github.com/xfournet\"\u003e\u003ccode\u003e@​xfournet\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eFix denial of service from malicious indexed source maps (CVE-2026-93749) (\u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/79\"\u003e#79\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eReported by \u003ca href=\"https://github.com/waydeshi\"\u003e\u003ccode\u003e@​waydeshi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/issues/76\"\u003e#76\u003c/a\u003e. A fix was also proposed by \u003ca href=\"https://github.com/aniebiet\"\u003e\u003ccode\u003e@​aniebiet\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/78\"\u003e#78\u003c/a\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/7rulnik/source-map-js/blob/main/CHANGELOG.md\"\u003esource-map-js's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.2.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eFix crash when executing in browser with CSP script-src that don't permit unsafe-eval (\u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/29\"\u003e#29\u003c/a\u003e) \u003ca href=\"https://github.com/xfournet\"\u003e\u003ccode\u003e@​xfournet\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eFix denial of service from malicious indexed source maps (CVE-2026-93749) (\u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/79\"\u003e#79\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eReported by \u003ca href=\"https://github.com/waydeshi\"\u003e\u003ccode\u003e@​waydeshi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/issues/76\"\u003e#76\u003c/a\u003e. A fix was also proposed by \u003ca href=\"https://github.com/aniebiet\"\u003e\u003ccode\u003e@​aniebiet\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/78\"\u003e#78\u003c/a\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/7rulnik/source-map-js/commit/0a1d334fd1e55a47df97fcd60a7915d46df3b08a\"\u003e\u003ccode\u003e0a1d334\u003c/code\u003e\u003c/a\u003e 1.2.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/7rulnik/source-map-js/commit/4c6fa26d77419bd8e48ec92844866cce7d9ae739\"\u003e\u003ccode\u003e4c6fa26\u003c/code\u003e\u003c/a\u003e Update changelog\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/7rulnik/source-map-js/commit/cf7658058ceeaa8619d5ae0ec90be6905209d016\"\u003e\u003ccode\u003ecf76580\u003c/code\u003e\u003c/a\u003e Fix denial of service from malicious indexed source maps (CVE-2026-93749) (\u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/issues/79\"\u003e#79\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/7rulnik/source-map-js/commit/7899a86615c630f4fc220273ff9fe2e8e49a56df\"\u003e\u003ccode\u003e7899a86\u003c/code\u003e\u003c/a\u003e Fix crash when executing browser with CSP script-src that don't permit unsafe...\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/7rulnik/source-map-js/compare/v1.2.1...v1.2.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/huuquyet/soroban-crowdfund/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/huuquyet/soroban-crowdfund/pull/35","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/huuquyet%2Fsoroban-crowdfund/issues/35","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/35/packages"},{"uuid":"5912642510","node_id":"PR_kwDOH0IzRM8AAAABJMD4IQ","number":57,"state":"closed","title":"Bump moment from 2.29.4 to 2.31.0","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-10-18T18:20:30.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-18T18:19:11.000Z","updated_at":"2026-10-18T18:21:15.000Z","time_to_close":79,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"moment","old_version":"2.29.4","new_version":"2.31.0","repository_url":"https://github.com/moment/moment"}],"path":null,"ecosystem":"npm"},"body":"Bumps [moment](https://github.com/moment/moment) from 2.29.4 to 2.31.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/releases\"\u003emoment's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.31.0\u003c/h2\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.30.1\u003c/h2\u003e\n\u003cp\u003eNote - this was not a new release, but rather just updating GitHub's \u003ccode\u003elatest\u003c/code\u003e release to indicate the existing version \u003ccode\u003e2.30.1\u003c/code\u003e from Dec 27, 2023.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/blob/develop/CHANGELOG.md\"\u003emoment's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch3\u003e2.31.0\u003c/h3\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e2.30.1\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/15b45d48a176312e8f34143c5a800090abf4787f\"\u003e\u003ccode\u003e15b45d4\u003c/code\u003e\u003c/a\u003e [pkg] Build 2.31.0 (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6452\"\u003e#6452\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/631cd81454ee001e1f508e21270eae0b6bb62974\"\u003e\u003ccode\u003e631cd81\u003c/code\u003e\u003c/a\u003e [pkg] Update changelog for upcoming release (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6394\"\u003e#6394\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/6caff9e0d54e85a63a6eb97d7361f1da35bc58f4\"\u003e\u003ccode\u003e6caff9e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/710703b7eac93535ad125cbf4feb3d42afed6fb3\"\u003e\u003ccode\u003e710703b\u003c/code\u003e\u003c/a\u003e [feature] Add internal date-default hook for Moment Timezone (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6451\"\u003e#6451\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/863ed940556e6e63c43de23981a4853036a003ac\"\u003e\u003ccode\u003e863ed94\u003c/code\u003e\u003c/a\u003e [bugfix] Add stack traces to conditional deprecation warnings (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6450\"\u003e#6450\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/2c7abe1c42ee15445d30c2c5d536750a1e43a09a\"\u003e\u003ccode\u003e2c7abe1\u003c/code\u003e\u003c/a\u003e [bugfix] Apply postformat to locale relative time methods (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6448\"\u003e#6448\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/9c45ac38690c649c95e19923276b63da5fe2be26\"\u003e\u003ccode\u003e9c45ac3\u003c/code\u003e\u003c/a\u003e [bugfix] Include metadata in all-locales bundle (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6447\"\u003e#6447\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/f6eefc5fc7b44ceccbd007aeffc48ebc5eac30fa\"\u003e\u003ccode\u003ef6eefc5\u003c/code\u003e\u003c/a\u003e [bugfix] Validate timezone offset range (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6446\"\u003e#6446\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/136b441794a3bb207d593add3b59e9de0e062523\"\u003e\u003ccode\u003e136b441\u003c/code\u003e\u003c/a\u003e [bugfix] Avoid Object.assign in duration.humanize (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6443\"\u003e#6443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/0d1050437b40f66ac47e14b285bb3d09676cf2e0\"\u003e\u003ccode\u003e0d10504\u003c/code\u003e\u003c/a\u003e [bugfix] Fix locale('\u003cstrong\u003eproto\u003c/strong\u003e') corrupting the global locale (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6442\"\u003e#6442\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moment/moment/compare/2.29.4...2.31.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for moment since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=moment\u0026package-manager=npm_and_yarn\u0026previous-version=2.29.4\u0026new-version=2.31.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/NeoSkin7/neoski.uk/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/NeoSkin7/neoski.uk/pull/57","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/NeoSkin7%2Fneoski.uk/issues/57","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/57/packages"},{"uuid":"5910774544","node_id":"PR_kwDOTziLxc8AAAABJKoAiQ","number":2,"state":"open","title":"build(deps): Bump the npm_and_yarn group across 1 directory with 15 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-18T14:52:06.000Z","updated_at":"2026-10-18T14:52:15.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps): Bump","group_name":"npm_and_yarn","update_count":15,"packages":[{"name":"js-yaml","old_version":"3.14.1","new_version":"3.15.2","repository_url":"https://github.com/nodeca/js-yaml"},{"name":"body-parser","old_version":"1.20.1","new_version":"1.20.8","repository_url":"https://github.com/expressjs/body-parser"},{"name":"brace-expansion","old_version":"1.1.11","new_version":"1.1.21","repository_url":"https://github.com/juliangruber/brace-expansion"},{"name":"browserslist","old_version":"4.21.5","new_version":"4.29.3","repository_url":"https://github.com/browserslist/browserslist"},{"name":"colord","old_version":"2.9.3","new_version":"2.10.0","repository_url":"https://github.com/omgovich/colord"},{"name":"http-cache-semantics","old_version":"4.1.1","new_version":"4.3.0","repository_url":"https://github.com/kornelski/http-cache-semantics"},{"name":"joi","old_version":"17.8.3","new_version":"17.13.8","repository_url":"https://github.com/hapijs/joi"},{"name":"moment","old_version":"2.29.4","new_version":"2.31.0","repository_url":"https://github.com/moment/moment"},{"name":"nanoid","old_version":"3.3.4","new_version":"3.3.20","repository_url":"https://github.com/ai/nanoid"},{"name":"proxy-addr","old_version":"2.0.7","new_version":"2.0.8","repository_url":"https://github.com/jshttp/proxy-addr"},{"name":"qs","old_version":"6.11.0","new_version":"6.16.1","repository_url":"https://github.com/ljharb/qs"},{"name":"shell-quote","old_version":"1.8.0","new_version":"1.12.0","repository_url":"https://github.com/ljharb/shell-quote"},{"name":"socket.io-parser","old_version":"4.2.2","new_version":"4.2.7","repository_url":"https://github.com/socketio/socket.io"},{"name":"source-map-js","old_version":"1.0.2","new_version":"1.2.2","repository_url":"https://github.com/7rulnik/source-map-js"},{"name":"svgo","old_version":"2.8.0","new_version":"2.8.4","repository_url":"https://github.com/svg/svgo"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 15 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.1` | `3.15.2` |\n| [body-parser](https://github.com/expressjs/body-parser) | `1.20.1` | `1.20.8` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.11` | `1.1.21` |\n| [browserslist](https://github.com/browserslist/browserslist) | `4.21.5` | `4.29.3` |\n| [colord](https://github.com/omgovich/colord) | `2.9.3` | `2.10.0` |\n| [http-cache-semantics](https://github.com/kornelski/http-cache-semantics) | `4.1.1` | `4.3.0` |\n| [joi](https://github.com/hapijs/joi) | `17.8.3` | `17.13.8` |\n| [moment](https://github.com/moment/moment) | `2.29.4` | `2.31.0` |\n| [nanoid](https://github.com/ai/nanoid) | `3.3.4` | `3.3.20` |\n| [proxy-addr](https://github.com/jshttp/proxy-addr) | `2.0.7` | `2.0.8` |\n| [qs](https://github.com/ljharb/qs) | `6.11.0` | `6.16.1` |\n| [shell-quote](https://github.com/ljharb/shell-quote) | `1.8.0` | `1.12.0` |\n| [socket.io-parser](https://github.com/socketio/socket.io) | `4.2.2` | `4.2.7` |\n| [source-map-js](https://github.com/7rulnik/source-map-js) | `1.0.2` | `1.2.2` |\n| [svgo](https://github.com/svg/svgo) | `2.8.0` | `2.8.4` |\n\n\nUpdates `js-yaml` from 3.14.1 to 3.15.2\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nodeca/js-yaml/blob/3.15.2/CHANGELOG.md\"\u003ejs-yaml's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e3.15.2 - 2026-08-26\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[backport] Hard-limit merge sequence size to 100.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[backport] Count empty mappings in merge sequences toward \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e\nto limit CPU usage, \u003ca href=\"https://redirect.github.com/nodeca/js-yaml/issues/797\"\u003e#797\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.15.1 - 2026-07-31\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[backport] Remove quadratic complexity from \u003ccode\u003e!!omap\u003c/code\u003e duplicate key detection.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.15.0 - 2026-06-27\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e (10000) loader option to limit the total number of\nkeys processed by YAML merge (\u003ccode\u003e\u0026lt;\u0026lt;\u003c/code\u003e) across one \u003ccode\u003esafeLoad()\u003c/code\u003e / \u003ccode\u003esafeLoadAll()\u003c/code\u003e\ncall.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[3.14.2] - 2025-11-15\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix prototype pollution in merge (\u0026lt;\u0026lt;).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/5c45bd6e960603c13644f5cc8b572ca257723b36\"\u003e\u003ccode\u003e5c45bd6\u003c/code\u003e\u003c/a\u003e 3.15.2 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/5a708f9f4f22e78b87ebe363848cfa4fa4818c0d\"\u003e\u003ccode\u003e5a708f9\u003c/code\u003e\u003c/a\u003e dist rebuild\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/3485bc06ff8a0251505f44a00414d90df2466639\"\u003e\u003ccode\u003e3485bc0\u003c/code\u003e\u003c/a\u003e Backport merge limits from v5.4.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/f34812f1cea794f8c21e0a4e1f3a2584b720f305\"\u003e\u003ccode\u003ef34812f\u003c/code\u003e\u003c/a\u003e Update .gitignore\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/ab85ae2c622bc6d8cdbceccafe9f9b7df80463ed\"\u003e\u003ccode\u003eab85ae2\u003c/code\u003e\u003c/a\u003e 3.15.1 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/30a5e7647a4454f7bac969bfbbe7eac9921a4279\"\u003e\u003ccode\u003e30a5e76\u003c/code\u003e\u003c/a\u003e dist rebuild\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/22a8071ef032117bc6249c330b240ac3aa2d3ded\"\u003e\u003ccode\u003e22a8071\u003c/code\u003e\u003c/a\u003e Backport quadratic complexity fix for !!omap\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/c34b6c40027a769eb0d67958ae615268a1d55f54\"\u003e\u003ccode\u003ec34b6c4\u003c/code\u003e\u003c/a\u003e 3.15.0 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/21e13d363f33501c7ee6ca988b88c29084999f72\"\u003e\u003ccode\u003e21e13d3\u003c/code\u003e\u003c/a\u003e dist rebuild\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/4165c62630d64fe4f25fb0d03139c7e137b24b1c\"\u003e\u003ccode\u003e4165c62\u003c/code\u003e\u003c/a\u003e Add v3-legacy tag for publish\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/nodeca/js-yaml/compare/3.14.1...3.15.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `body-parser` from 1.20.1 to 1.20.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/body-parser/releases\"\u003ebody-parser's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.20.8\u003c/h2\u003e\n\u003ch2\u003eImportant\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eSame code base as \u003ca href=\"https://github.com/expressjs/body-parser/releases/tag/1.20.7\"\u003e1.20.7\u003c/a\u003e. This was created to test the new release process.\u003c/strong\u003e\u003c/p\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eci: backport npm-publish workflow from master by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/769\"\u003eexpressjs/body-parser#769\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e1.20.8 by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/770\"\u003eexpressjs/body-parser#770\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.20.7...1.20.8\"\u003ehttps://github.com/expressjs/body-parser/compare/1.20.7...1.20.8\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e1.20.7\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003edocs: include security fix in 1.20.6 changes by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/747\"\u003eexpressjs/body-parser#747\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edeps: qs@~6.16.0 by \u003ca href=\"https://github.com/krzysdz\"\u003e\u003ccode\u003e@​krzysdz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/761\"\u003eexpressjs/body-parser#761\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e1.20.7 by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/767\"\u003eexpressjs/body-parser#767\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.20.6...1.20.7\"\u003ehttps://github.com/expressjs/body-parser/compare/1.20.6...1.20.7\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e1.20.6\u003c/h2\u003e\n\u003ch2\u003eImportant: Security\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSecurity fix for \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2025-13466\"\u003eCVE-2026-12590\u003c/a\u003e (\u003ca href=\"https://github.com/expressjs/body-parser/security/advisories/GHSA-v422-hmwv-36x6\"\u003eGHSA-v422-hmwv-36x6\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: improve limit option validation by \u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/741\"\u003eexpressjs/body-parser#741\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.20.5...1.20.6\"\u003ehttps://github.com/expressjs/body-parser/compare/1.20.5...1.20.6\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.20.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cp\u003eThe reason for this release is a fix to the extended urlencoded parser returning objects instead of arrays for large array inputs (\u0026gt; 100) on qs@6.14.2+. (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/716\"\u003eexpressjs/body-parser#716\u003c/a\u003e)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003erefactor(json): simplify strict mode error string construction by \u003ca href=\"https://github.com/jonchurch\"\u003e\u003ccode\u003e@​jonchurch\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/692\"\u003eexpressjs/body-parser#692\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: correct off-by-one error in parameterCount by \u003ca href=\"https://github.com/abhu85\"\u003e\u003ccode\u003e@​abhu85\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/716\"\u003eexpressjs/body-parser#716\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edeps(qs): bump qs to 6.15.1 by \u003ca href=\"https://github.com/jonchurch\"\u003e\u003ccode\u003e@​jonchurch\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/722\"\u003eexpressjs/body-parser#722\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease: 1.20.5 by \u003ca href=\"https://github.com/jonchurch\"\u003e\u003ccode\u003e@​jonchurch\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/721\"\u003eexpressjs/body-parser#721\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/abhu85\"\u003e\u003ccode\u003e@​abhu85\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/716\"\u003eexpressjs/body-parser#716\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSpecial thanks to triager \u003ca href=\"https://github.com/krzysdz\"\u003e\u003ccode\u003e@​krzysdz\u003c/code\u003e\u003c/a\u003e for keeping this on our radar and effectively triaging the specific issue!\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.20.4...1.20.5\"\u003ehttps://github.com/expressjs/body-parser/compare/1.20.4...1.20.5\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/body-parser/blob/1.20.8/HISTORY.md\"\u003ebody-parser's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e1.20.8\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eSame code base as 1.20.7. This was created to test the new release process.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.7\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003edeps: qs@~6.16.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.6\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eSecurity fix for \u003ca href=\"https://github.com/expressjs/body-parser/security/advisories/GHSA-v422-hmwv-36x6\"\u003eGHSA-v422-hmwv-36x6\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: improve \u003ccode\u003elimit\u003c/code\u003e option validation (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/698\"\u003e#698\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eInvalid \u003ccode\u003elimit\u003c/code\u003e values (e.g. unparseable strings or \u003ccode\u003eNaN\u003c/code\u003e) now throw instead of being silently ignored, which previously disabled size limit enforcement\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003enull\u003c/code\u003e and \u003ccode\u003eundefined\u003c/code\u003e fall back to the default 100kb limit\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.5\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003erefactor(json): simplify strict mode error string construction\u003c/li\u003e\n\u003cli\u003efix: extended urlencoded parsing of arrays with \u0026gt;100 elements (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/716\"\u003e#716\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edeps: qs@~6.15.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.4\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003edeps: qs@~6.14.0\u003c/li\u003e\n\u003cli\u003edeps: use tilde notation for dependencies\u003c/li\u003e\n\u003cli\u003edeps: http-errors@~2.0.1\u003c/li\u003e\n\u003cli\u003edeps: raw-body@~2.5.3\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.3\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003edeps: qs@6.13.0\u003c/li\u003e\n\u003cli\u003eadd \u003ccode\u003edepth\u003c/code\u003e option to customize the depth level in the parser\u003c/li\u003e\n\u003cli\u003eIMPORTANT: The default \u003ccode\u003edepth\u003c/code\u003e level for parsing URL-encoded data is now \u003ccode\u003e32\u003c/code\u003e (previously was \u003ccode\u003eInfinity\u003c/code\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.2\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix strict json error message on Node.js 19+\u003c/li\u003e\n\u003cli\u003edeps: content-type@~1.0.5\n\u003cul\u003e\n\u003cli\u003eperf: skip value escaping when unnecessary\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003edeps: raw-body@2.5.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/5c08c2008eac79abddb8abfa5095491d02958d56\"\u003e\u003ccode\u003e5c08c20\u003c/code\u003e\u003c/a\u003e 1.20.8 (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/770\"\u003e#770\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/0cea4f42a40996eafac441d0e71084afbe1407d4\"\u003e\u003ccode\u003e0cea4f4\u003c/code\u003e\u003c/a\u003e ci: backport npm-publish workflow from master (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/769\"\u003e#769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/0f0f0d7f96fc7444407aef85a6d1fa363279e654\"\u003e\u003ccode\u003e0f0f0d7\u003c/code\u003e\u003c/a\u003e 1.20.7 (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/767\"\u003e#767\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/355eb04ade7c27f57f93a0e90e26ed6f121becc5\"\u003e\u003ccode\u003e355eb04\u003c/code\u003e\u003c/a\u003e deps: qs@~6.16.0 (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/761\"\u003e#761\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/8be369a5f8b0f4070ebb7a0ae9aca12db9d8f947\"\u003e\u003ccode\u003e8be369a\u003c/code\u003e\u003c/a\u003e docs: include security fix in 1.20.6 changes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/5cc4fb8867c93a3aa4455927e38858c9ab89ff43\"\u003e\u003ccode\u003e5cc4fb8\u003c/code\u003e\u003c/a\u003e 1.20.6 (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/746\"\u003e#746\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/3492672eee593d5c158f239b6e9115498a5dbeac\"\u003e\u003ccode\u003e3492672\u003c/code\u003e\u003c/a\u003e fix: improve limit option validation (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/741\"\u003e#741\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/0defdbe7f95ad0d3bc007d3a7c59c8c0ab9e6575\"\u003e\u003ccode\u003e0defdbe\u003c/code\u003e\u003c/a\u003e release(patch): 1.20.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/cd0e7a000c53e7be7262d303e57a352b6a00db7f\"\u003e\u003ccode\u003ecd0e7a0\u003c/code\u003e\u003c/a\u003e deps(qs): bump qs to 6.15.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/6f24d7e8bcd9860b136920926ce86da1a7dd1d51\"\u003e\u003ccode\u003e6f24d7e\u003c/code\u003e\u003c/a\u003e fix: correct off-by-one error in parameterCount (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/716\"\u003e#716\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.20.1...1.20.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for body-parser since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `brace-expansion` from 1.1.11 to 1.1.21\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/juliangruber/brace-expansion/releases\"\u003ebrace-expansion's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.1.15\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBackport v5.0.6 change to v1 (\u003ca href=\"https://redirect.github.com/juliangruber/brace-expansion/issues/111\"\u003e#111\u003c/a\u003e)  0b09384\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.15\"\u003ehttps://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.15\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.1.12\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003epkg: publish on tag 1.x  c460dbd\u003c/li\u003e\n\u003cli\u003efmt  ccb8ac6\u003c/li\u003e\n\u003cli\u003eFix potential ReDoS Vulnerability or Inefficient Regular Expression (\u003ca href=\"https://redirect.github.com/juliangruber/brace-expansion/issues/65\"\u003e#65\u003c/a\u003e)  c3c73c8\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.11...v1.1.12\"\u003ehttps://github.com/juliangruber/brace-expansion/compare/v1.1.11...v1.1.12\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/8e81e187b6e9c6c723d16c042657c00acefc2483\"\u003e\u003ccode\u003e8e81e18\u003c/code\u003e\u003c/a\u003e 1.1.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/ffdfa3e3806bed17c0874b8f1439b084de354a7e\"\u003e\u003ccode\u003effdfa3e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/c6513ad31e08edb56dc414a629e39cba724b7548\"\u003e\u003ccode\u003ec6513ad\u003c/code\u003e\u003c/a\u003e 1.1.20\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b\"\u003e\u003ccode\u003e1efee7c\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/a34340a053abb475cc226aeb3f71887018e71bd0\"\u003e\u003ccode\u003ea34340a\u003c/code\u003e\u003c/a\u003e 1.1.19\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc\"\u003e\u003ccode\u003e0bcbfc0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/758fcd6d188a95c2342818519c77b8c06794552b\"\u003e\u003ccode\u003e758fcd6\u003c/code\u003e\u003c/a\u003e 1.1.18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/27fbeed22b4fdf2c5f732f66bcf84d43f4a26c6e\"\u003e\u003ccode\u003e27fbeed\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/5c57cc2519dfb067e188b7cb0733fffbd02946bf\"\u003e\u003ccode\u003e5c57cc2\u003c/code\u003e\u003c/a\u003e 1.1.17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/d757f1dde7808bcbcd7a4628ab913e5185ed3d57\"\u003e\u003ccode\u003ed757f1d\u003c/code\u003e\u003c/a\u003e npm ignore \u003ccode\u003e.claude\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/1.1.11...v1.1.21\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `browserslist` from 4.21.5 to 4.29.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/browserslist/browserslist/releases\"\u003ebrowserslist's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.29.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated Firefox ESR.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed ignoring \u003ccode\u003enull\u003c/code\u003e usage in \u003ccode\u003ecover X in Y\u003c/code\u003e query (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed config name loading protection on Windows (by \u003ca href=\"https://github.com/oss-security-shop\"\u003e\u003ccode\u003e@​oss-security-shop\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed case-insensitive negation queries (by \u003ca href=\"https://github.com/jakezwang\"\u003e\u003ccode\u003e@​jakezwang\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed percentage and supports queries case-insensitive (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed old Node.js tests (by \u003ca href=\"https://github.com/aaron-belenky\"\u003e\u003ccode\u003e@​aaron-belenky\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eReduced code (by \u003ca href=\"https://github.com/charmander\"\u003e\u003ccode\u003e@​charmander\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded query continuations across lines and array entries (by \u003ca href=\"https://github.com/fzlzjerry\"\u003e\u003ccode\u003e@​fzlzjerry\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImprove \u003ccode\u003eor\u003c/code\u003e parsing performance (by \u003ca href=\"https://github.com/NotAFlightRisk\"\u003e\u003ccode\u003e@​NotAFlightRisk\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eincluding kaios\u003c/code\u003e in baseline queries (by \u003ca href=\"https://github.com/Jaybhade\"\u003e\u003ccode\u003e@​Jaybhade\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved parsing performance.\u003c/li\u003e\n\u003cli\u003eFixed unbounded memory growth (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed prototype write issue (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Electron version queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003e\u0026gt;\u003c/code\u003e and \u003ccode\u003e\u0026gt;=\u003c/code\u003e queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eSyntaxError\u003c/code\u003e regression of 4.28.3.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed baseline query case-insensitivity (by \u003ca href=\"https://github.com/swwind\"\u003e\u003ccode\u003e@​swwind\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix prototype pollution (by \u003ca href=\"https://github.com/chluo1997\"\u003e\u003ccode\u003e@​chluo1997\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved Baseline warning since we have it own warning.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.27.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003eBROWSERSLIST_TRACE_WARNING\u003c/code\u003e environment variable.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.26.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003ethrowOnMissing\u003c/code\u003e with \u003ccode\u003eextends\u003c/code\u003e query (by \u003ca href=\"https://github.com/alexander-akait\"\u003e\u003ccode\u003e@​alexander-akait\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md\"\u003ebrowserslist's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.29.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated Firefox ESR.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed ignoring \u003ccode\u003enull\u003c/code\u003e usage in \u003ccode\u003ecover X in Y\u003c/code\u003e query (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed config name loading protection on Windows (by \u003ca href=\"https://github.com/oss-security-shop\"\u003e\u003ccode\u003e@​oss-security-shop\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed case-insensitive negation queries (by \u003ca href=\"https://github.com/jakezwang\"\u003e\u003ccode\u003e@​jakezwang\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed percentage and supports queries case-insensitive (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed old Node.js tests (by \u003ca href=\"https://github.com/aaron-belenky\"\u003e\u003ccode\u003e@​aaron-belenky\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eReduced code (by \u003ca href=\"https://github.com/charmander\"\u003e\u003ccode\u003e@​charmander\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded query continuations across lines and array entries (by \u003ca href=\"https://github.com/fzlzjerry\"\u003e\u003ccode\u003e@​fzlzjerry\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved \u003ccode\u003eor\u003c/code\u003e parsing performance (by \u003ca href=\"https://github.com/NotAFlightRisk\"\u003e\u003ccode\u003e@​NotAFlightRisk\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eincluding kaios\u003c/code\u003e in baseline queries (by \u003ca href=\"https://github.com/Jaybhade\"\u003e\u003ccode\u003e@​Jaybhade\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved parsing performance.\u003c/li\u003e\n\u003cli\u003eFixed unbounded memory growth (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed prototype write issue (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Electron version queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003e\u0026gt;\u003c/code\u003e and \u003ccode\u003e\u0026gt;=\u003c/code\u003e queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eSyntaxError\u003c/code\u003e regression of 4.28.3.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed baseline query case-insensitivity (by \u003ca href=\"https://github.com/swwind\"\u003e\u003ccode\u003e@​swwind\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/b4809dd2a2a11fbff492258f968130e9b470067f\"\u003e\u003ccode\u003eb4809dd\u003c/code\u003e\u003c/a\u003e Release 4.29.3 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/9d844f8d09c872e2f22e07daa8566fb53585c190\"\u003e\u003ccode\u003e9d844f8\u003c/code\u003e\u003c/a\u003e Update Firefox ESR\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/0033f344c3be446c935f9e515a366738fc0942a5\"\u003e\u003ccode\u003e0033f34\u003c/code\u003e\u003c/a\u003e Update dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/906d329968d968479474aab97ae2ab712bf18b5f\"\u003e\u003ccode\u003e906d329\u003c/code\u003e\u003c/a\u003e Release 4.29.2 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/ff8c83f72dd22e3331e89404487a19ec4ea6d5fc\"\u003e\u003ccode\u003eff8c83f\u003c/code\u003e\u003c/a\u003e Update dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/067f4a1fa37047e8a53b369cb1fd837399f5d5d5\"\u003e\u003ccode\u003e067f4a1\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/browserslist/browserslist/issues/952\"\u003e#952\u003c/a\u003e from wahidrizka/fix-cover-null-usage\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/f760921db5e420bd8c10e31d0278ab16fdbb9a2d\"\u003e\u003ccode\u003ef760921\u003c/code\u003e\u003c/a\u003e Do not add versions without usage data to cover queries\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/5be63f54fc37cef2db22930bdabfafcb22b6fd46\"\u003e\u003ccode\u003e5be63f5\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/browserslist/browserslist/issues/953\"\u003e#953\u003c/a\u003e from wahidrizka/docs-android-latest-version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/1e5356f16429cb8a30dfa5415c7d0beddff8548f\"\u003e\u003ccode\u003e1e5356f\u003c/code\u003e\u003c/a\u003e Note that Android version queries return only the latest version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/5b7e94169750cedd9e63fdb8d2419542d3aa185f\"\u003e\u003ccode\u003e5b7e941\u003c/code\u003e\u003c/a\u003e Add missed changes to ChangeLog\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/browserslist/browserslist/compare/4.21.5...4.29.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for browserslist since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `colord` from 2.9.3 to 2.10.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/omgovich/colord/releases\"\u003ecolord's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.10 (RGB color mixing)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003emix\u003c/code\u003e, \u003ccode\u003etints\u003c/code\u003e, \u003ccode\u003eshades\u003c/code\u003e and \u003ccode\u003etones\u003c/code\u003e (\u003ccode\u003emix\u003c/code\u003e plugin) now accept an optional interpolation color space. LAB stays the default; pass \u003ccode\u003e\u0026quot;rgb\u0026quot;\u003c/code\u003e to interpolate RGB channels instead — the way browsers and design tools (such as Figma) composite translucent layers.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003eimport { colord, extend } from \u0026quot;colord\u0026quot;;\nimport mixPlugin from \u0026quot;colord/plugins/mix\u0026quot;;\n\u003cp\u003eextend([mixPlugin]);\u003c/p\u003e\n\u003cp\u003ecolord(\u0026quot;#ff0000\u0026quot;).mix(\u0026quot;#ffffff\u0026quot;, 0.5, \u0026quot;rgb\u0026quot;).toHex(); // \u0026quot;#ff8080\u0026quot;\ncolord(\u0026quot;#f0f3f1\u0026quot;).mix(\u0026quot;#007d40\u0026quot;, 0.14, \u0026quot;rgb\u0026quot;).toHex(); // \u0026quot;#cee2d8\u0026quot; — same as compositing rgba(0, 125, 64, 0.14) over #f0f3f1\ncolord(\u0026quot;#ff0000\u0026quot;).tints(3, \u0026quot;rgb\u0026quot;).map((c) =\u0026gt; c.toHex()); // [\u0026quot;#ff0000\u0026quot;, \u0026quot;#ff8080\u0026quot;, \u0026quot;#ffffff\u0026quot;]\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/omgovich/colord/blob/master/CHANGELOG.md\"\u003ecolord's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch3\u003e2.10.0\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImprove \u003ccode\u003emix\u003c/code\u003e plugin by adding an optional \u003ccode\u003e\u0026quot;rgb\u0026quot;\u003c/code\u003e interpolation mode to \u003ccode\u003emix\u003c/code\u003e, \u003ccode\u003etints\u003c/code\u003e, \u003ccode\u003etones\u003c/code\u003e and \u003ccode\u003eshades\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e2.9.7\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eMake HEX parsing and serialization more than 2x faster\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e2.9.6\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix: Rotate the unrounded hue so \u003ccode\u003erotate\u003c/code\u003e and \u003ccode\u003eharmonies\u003c/code\u003e preserve the original color\u003c/li\u003e\n\u003cli\u003eFix: Normalize HWB whiteness + blackness over 100% to gray ❤️ \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e2.9.5\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix: Use adjusted chroma for the CIEDE2000 rotation term ❤️ \u003ca href=\"https://github.com/maximilliangrand\"\u003e\u003ccode\u003e@​maximilliangrand\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix: Keep the hue within \u003ccode\u003e[0, 360)\u003c/code\u003e in every color model ❤️ \u003ca href=\"https://github.com/sarathfrancis90\"\u003e\u003ccode\u003e@​sarathfrancis90\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eBoth fixes change returned numbers for a small set of colors; \u003ccode\u003etoHex()\u003c/code\u003e output is unchanged. Snapshots holding \u003ccode\u003eh: 360\u003c/code\u003e, \u003ccode\u003e\u0026quot;hsl(360, …)\u0026quot;\u003c/code\u003e or a \u003ccode\u003edelta()\u003c/code\u003e value may need updating.\u003c/p\u003e\n\u003ch3\u003e2.9.4\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix: Reject malformed color strings in linear time ❤️ \u003ca href=\"https://github.com/GAP-dev\"\u003e\u003ccode\u003e@​GAP-dev\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/omgovich/colord/commits/v2.10\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `http-cache-semantics` from 4.1.1 to 4.3.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/kornelski/http-cache-semantics/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `joi` from 17.8.3 to 17.13.8\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/4ae6af96f7990fdb336aa8ad7dee5e9f847d084a\"\u003e\u003ccode\u003e4ae6af9\u003c/code\u003e\u003c/a\u003e 17.13.8\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/b3ed6fbdf123f4d77755e6a5df2d6a7af27cd9e8\"\u003e\u003ccode\u003eb3ed6fb\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/hapijs/joi/issues/3153\"\u003e#3153\u003c/a\u003e from hapijs/fix/messages-proto-flat-v17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/1d2001cad9971327a62c9fd8eb1afec20cd784d2\"\u003e\u003ccode\u003e1d2001c\u003c/code\u003e\u003c/a\u003e chore: backport \u003ca href=\"https://redirect.github.com/hapijs/joi/issues/3151\"\u003e#3151\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/ed9d7cdd11ef5f7751fd46886f38dc605c9c3995\"\u003e\u003ccode\u003eed9d7cd\u003c/code\u003e\u003c/a\u003e 17.13.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/f2729f71839c57c94ac500b4be9e4b5b26d4e637\"\u003e\u003ccode\u003ef2729f7\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/hapijs/joi/issues/3145\"\u003e#3145\u003c/a\u003e from hapijs/backport/isodate-timeshift-v17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/c43fc964799c9b5f0c6921bf788162b67066ae81\"\u003e\u003ccode\u003ec43fc96\u003c/code\u003e\u003c/a\u003e chore: add regression test for \u003ca href=\"https://redirect.github.com/hapijs/joi/issues/3143\"\u003e#3143\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/115e7b58d5eaaecc5e9b7093d41899ad6fb053ec\"\u003e\u003ccode\u003e115e7b5\u003c/code\u003e\u003c/a\u003e fix(isoDate): pad a bare-hour timeshift with a colon, not just zeros\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/850be1ee24be8d548bb09359bdb0cf9fe41635ff\"\u003e\u003ccode\u003e850be1e\u003c/code\u003e\u003c/a\u003e 17.13.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/9faeecc48b18ec40e3881467645ae9074f0dfa3c\"\u003e\u003ccode\u003e9faeecc\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/hapijs/joi/issues/3139\"\u003e#3139\u003c/a\u003e from hapijs/chore/backport-messages-proto\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/8d0b808f3e874d28f9078f61b7742290989afb36\"\u003e\u003ccode\u003e8d0b808\u003c/code\u003e\u003c/a\u003e fix: prevent messages proto injection\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/hapijs/joi/compare/v17.8.3...v17.13.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `moment` from 2.29.4 to 2.31.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/releases\"\u003emoment's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.31.0\u003c/h2\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.30.1\u003c/h2\u003e\n\u003cp\u003eNote - this was not a new release, but rather just updating GitHub's \u003ccode\u003elatest\u003c/code\u003e release to indicate the existing version \u003ccode\u003e2.30.1\u003c/code\u003e from Dec 27, 2023.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/blob/develop/CHANGELOG.md\"\u003emoment's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch3\u003e2.31.0\u003c/h3\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e2.30.1\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/15b45d48a176312e8f34143c5a800090abf4787f\"\u003e\u003ccode\u003e15b45d4\u003c/code\u003e\u003c/a\u003e [pkg] Build 2.31.0 (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6452\"\u003e#6452\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/631cd81454ee001e1f508e21270eae0b6bb62974\"\u003e\u003ccode\u003e631cd81\u003c/code\u003e\u003c/a\u003e [pkg] Update changelog for upcoming release (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6394\"\u003e#6394\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/6caff9e0d54e85a63a6eb97d7361f1da35bc58f4\"\u003e\u003ccode\u003e6caff9e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/710703b7eac93535ad125cbf4feb3d42afed6fb3\"\u003e\u003ccode\u003e710703b\u003c/code\u003e\u003c/a\u003e [feature] Add internal date-default hook for Moment Timezone (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6451\"\u003e#6451\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/863ed940556e6e63c43de23981a4853036a003ac\"\u003e\u003ccode\u003e863ed94\u003c/code\u003e\u003c/a\u003e [bugfix] Add stack traces to conditional deprecation warnings (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6450\"\u003e#6450\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/2c7abe1c42ee15445d30c2c5d536750a1e43a09a\"\u003e\u003ccode\u003e2c7abe1\u003c/code\u003e\u003c/a\u003e [bugfix] Apply postformat to locale relative time methods (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6448\"\u003e#6448\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/9c45ac38690c649c95e19923276b63da5fe2be26\"\u003e\u003ccode\u003e9c45ac3\u003c/code\u003e\u003c/a\u003e [bugfix] Include metadata in all-locales bundle (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6447\"\u003e#6447\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/f6eefc5fc7b44ceccbd007aeffc48ebc5eac30fa\"\u003e\u003ccode\u003ef6eefc5\u003c/code\u003e\u003c/a\u003e [bugfix] Validate timezone offset range (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6446\"\u003e#6446\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/136b441794a3bb207d593add3b59e9de0e062523\"\u003e\u003ccode\u003e136b441\u003c/code\u003e\u003c/a\u003e [bugfix] Avoid Object.assign in duration.humanize (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6443\"\u003e#6443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/0d1050437b40f66ac47e14b285bb3d09676cf2e0\"\u003e\u003ccode\u003e0d10504\u003c/code\u003e\u003c/a\u003e [bugfix] Fix locale('\u003cstrong\u003eproto\u003c/strong\u003e') corrupting the global locale (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6442\"\u003e#6442\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moment/moment/compare/2.29.4...2.31.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for moment since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `nanoid` from 3.3.4 to 3.3.20\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ai/nanoid/releases\"\u003enanoid's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e3.3.20\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed types (by \u003ca href=\"https://github.com/johnemau\"\u003e\u003ccode\u003e@​johnemau\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.19\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed killing the app by setting huge user ID.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.18\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed infinite loop on async for React Native (by \u003ca href=\"https://github.com/OvergrowthBeards-JB\"\u003e\u003ccode\u003e@​OvergrowthBeards-JB\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.17\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed infinite loop on zero size.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.16\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed infinite loop on negative size (by \u003ca href=\"https://github.com/greymoth-jp\"\u003e\u003ccode\u003e@​greymoth-jp\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.15\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed npm provenance error.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.14\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed random pool corruption on big ID sizes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.13\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReduced npm package size.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.12\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed breaking Nano ID by requesting big ID.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.11\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed React Native support.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.10\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed React Native support (by \u003ca href=\"https://github.com/steida\"\u003e\u003ccode\u003e@​steida\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReduced npm package size.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ai/nanoid/blob/main/CHANGELOG.md\"\u003enanoid's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e3.3.20\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed types (by \u003ca href=\"https://github.com/johnemau\"\u003e\u003ccode\u003e@​johnemau\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.19\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed killing the app by setting huge user ID (by \u003ca href=\"https://github.com/geoffrey-diederichs\"\u003e\u003ccode\u003e@​geoffrey-diederichs\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.18\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed infinite loop on async for React Native (by \u003ca href=\"https://github.com/OvergrowthBeards-JB\"\u003e\u003ccode\u003e@​OvergrowthBeards-JB\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.17\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed infinite loop on zero size.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.16\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed infinite loop on negative size (by \u003ca href=\"https://github.com/greymoth-jp\"\u003e\u003ccode\u003e@​greymoth-jp\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.15\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed npm provenance error.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.14\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed random pool corruption on big ID sizes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.13\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReduced npm package size.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.12\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed breaking Nano ID by requesting big ID.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.11\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed React Native support.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.10\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed React Native support (by \u003ca href=\"https://github.com/steida\"\u003e\u003ccode\u003e@​steida\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReduced npm package size.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.8\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/d76f633e0201c1299d735a6544c4c4a05c882f0b\"\u003e\u003ccode\u003ed76f633\u003c/code\u003e\u003c/a\u003e Release 3.3.20 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/ac09ff646dd64de1d03827c288ce30bb26c4315c\"\u003e\u003ccode\u003eac09ff6\u003c/code\u003e\u003c/a\u003e Fix: async return types are synchronous in v3 (\u003ca href=\"https://redirect.github.com/ai/nanoid/issues/615\"\u003e#615\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/eb63bd6775188dc35d143bf24868be094f19b5ee\"\u003e\u003ccode\u003eeb63bd6\u003c/code\u003e\u003c/a\u003e Release 3.3.19 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/9067e0361a643ab2c94ddd67606efbf275f6c0dd\"\u003e\u003ccode\u003e9067e03\u003c/code\u003e\u003c/a\u003e Sync CJS and ESM\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/9ad98052b316c5e707f8098ace509d2ae165e54d\"\u003e\u003ccode\u003e9ad9805\u003c/code\u003e\u003c/a\u003e Release 3.3.18 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/55e50a0621ec084b4bb4000ea4e86e1191bd3da8\"\u003e\u003ccode\u003e55e50a0\u003c/code\u003e\u003c/a\u003e Update CI action\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/e10f8d40ce9d1ab47f66d65a16b48086432730d0\"\u003e\u003ccode\u003ee10f8d4\u003c/code\u003e\u003c/a\u003e Update index.native.js (\u003ca href=\"https://redirect.github.com/ai/nanoid/issues/606\"\u003e#606\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/73d67168136b36fd3b644159b0cff149da4905d9\"\u003e\u003ccode\u003e73d6716\u003c/code\u003e\u003c/a\u003e Release 3.3.17 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/f9d13f150847d117877adee3460a46eceb0cf49b\"\u003e\u003ccode\u003ef9d13f1\u003c/code\u003e\u003c/a\u003e Sync 0 size behaviour with PostCSS 5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/9760e112757cf7d46a79abd7a133bc4958757bb8\"\u003e\u003ccode\u003e9760e11\u003c/code\u003e\u003c/a\u003e Release 3.3.16 version\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ai/nanoid/compare/3.3.4...3.3.20\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for nanoid since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `proxy-addr` from 2.0.7 to 2.0.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jshttp/proxy-addr/releases\"\u003eproxy-addr's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.0.8\u003c/h2\u003e\n\u003ch2\u003eImportant\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-90711\"\u003eCVE-2026-90711\u003c/a\u003e (\u003ca href=\"https://github.com/jshttp/proxy-addr/security/advisories/GHSA-jqcg-44mw-7w3h\"\u003eGHSA-jqcg-44mw-7w3h\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd OSSF scorecard action by \u003ca href=\"https://github.com/carpasse\"\u003e\u003ccode\u003e@​carpasse\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/27\"\u003ejshttp/proxy-addr#27\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix ci pipeline and add missing Node.JS versions by \u003ca href=\"https://github.com/carpasse\"\u003e\u003ccode\u003e@​carpasse\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/26\"\u003ejshttp/proxy-addr#26\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[StepSecurity] Apply security best practices by \u003ca href=\"https://github.com/step-security-bot\"\u003e\u003ccode\u003e@​step-security-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/29\"\u003ejshttp/proxy-addr#29\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump coverallsapp/github-action from 1.2.5 to 2.3.6 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/30\"\u003ejshttp/proxy-addr#30\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 2.23.2 to 3.28.18 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/31\"\u003ejshttp/proxy-addr#31\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump eslint-plugin-import from 2.23.4 to 2.31.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/32\"\u003ejshttp/proxy-addr#32\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump ossf/scorecard-action from 2.0.6 to 2.4.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/33\"\u003ejshttp/proxy-addr#33\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 3.1.3 to 4.6.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/35\"\u003ejshttp/proxy-addr#35\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump deep-equal from 1.0.1 to 1.1.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/34\"\u003ejshttp/proxy-addr#34\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump eslint-plugin-markdown from 2.2.0 to 2.2.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/36\"\u003ejshttp/proxy-addr#36\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: add funding to package.json by \u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/40\"\u003ejshttp/proxy-addr#40\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.28.18 to 3.29.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/41\"\u003ejshttp/proxy-addr#41\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.7 to 3.29.11 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/43\"\u003ejshttp/proxy-addr#43\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 3.6.0 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/42\"\u003ejshttp/proxy-addr#42\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/47\"\u003ejshttp/proxy-addr#47\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.11 to 4.31.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/46\"\u003ejshttp/proxy-addr#46\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump coverallsapp/github-action from 2.3.6 to 2.3.7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/50\"\u003ejshttp/proxy-addr#50\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.31.2 to 4.31.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/49\"\u003ejshttp/proxy-addr#49\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 5.0.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/48\"\u003ejshttp/proxy-addr#48\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 6.0.0 to 6.0.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/56\"\u003ejshttp/proxy-addr#56\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.31.5 to 4.32.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/55\"\u003ejshttp/proxy-addr#55\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.32.0 to 4.32.4 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/57\"\u003ejshttp/proxy-addr#57\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 5.0.0 to 7.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/58\"\u003ejshttp/proxy-addr#58\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix \u0026quot;arugment\u0026quot; typo in README by \u003ca href=\"https://github.com/schiwekM\"\u003e\u003ccode\u003e@​schiwekM\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/61\"\u003ejshttp/proxy-addr#61\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.32.4 to 4.36.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/64\"\u003ejshttp/proxy-addr#64\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/63\"\u003ejshttp/proxy-addr#63\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/45\"\u003ejshttp/proxy-addr#45\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump eslint-plugin-import from 2.31.0 to 2.32.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/39\"\u003ejshttp/proxy-addr#39\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(ci): npm-publish via reusable workflows by \u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/54\"\u003ejshttp/proxy-addr#54\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefresh CI by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/69\"\u003ejshttp/proxy-addr#69\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: typo by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/71\"\u003ejshttp/proxy-addr#71\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease: 2.0.8 by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/70\"\u003ejshttp/proxy-addr#70\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/carpasse\"\u003e\u003ccode\u003e@​carpasse\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/27\"\u003ejshttp/proxy-addr#27\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/step-security-bot\"\u003e\u003ccode\u003e@​step-security-bot\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/29\"\u003ejshttp/proxy-addr#29\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/30\"\u003ejshttp/proxy-addr#30\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/40\"\u003ejshttp/proxy-addr#40\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/schiwekM\"\u003e\u003ccode\u003e@​schiwekM\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/61\"\u003ejshttp/proxy-addr#61\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/54\"\u003ejshttp/proxy-addr#54\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8\"\u003ehttps://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jshttp/proxy-addr/blob/master/HISTORY.md\"\u003eproxy-addr's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e2.0.8\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-90711\"\u003eCVE-2026-90711\u003c/a\u003e (\u003ca href=\"https://github.com/jshttp/proxy-addr/security/advisories/GHSA-jqcg-44mw-7w3h\"\u003eGHSA-jqcg-44mw-7w3h\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/a11ad82545698af5c33e59f3ed0b52eab79bf610\"\u003e\u003ccode\u003ea11ad82\u003c/code\u003e\u003c/a\u003e 2.0.8 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/70\"\u003e#70\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/780911d84d18e2c5fa008ed0c0d387631ec11965\"\u003e\u003ccode\u003e780911d\u003c/code\u003e\u003c/a\u003e fix: reject IPv4 trust via mapped IPv6 subnets with a short prefix\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/92e103e3f3ab0467c8846cacea71f27dfc81091d\"\u003e\u003ccode\u003e92e103e\u003c/code\u003e\u003c/a\u003e fix(ci): use publised as release trigger event (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/71\"\u003e#71\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/3e5ac75d275d82606d33d6ac47c0ff43c2eccee9\"\u003e\u003ccode\u003e3e5ac75\u003c/code\u003e\u003c/a\u003e ci: merge coverage via artifacts, disable fail-fast, add Node.js 23-26 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/69\"\u003e#69\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/4b9db8190923840eb732b752a70f3e5ff713768c\"\u003e\u003ccode\u003e4b9db81\u003c/code\u003e\u003c/a\u003e chore(ci): npm-publish via workflows (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/54\"\u003e#54\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/655e8950435ac457c586e8287da4d5993b7d0db5\"\u003e\u003ccode\u003e655e895\u003c/code\u003e\u003c/a\u003e build(deps-dev): bump eslint-plugin-import from 2.31.0 to 2.32.0 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/39\"\u003e#39\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/50ce4d09132a4c34f5485b52740ce879a9223b1f\"\u003e\u003ccode\u003e50ce4d0\u003c/code\u003e\u003c/a\u003e build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/45\"\u003e#45\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/0fd347f5b342e7502da58a512dc998d4a59cea24\"\u003e\u003ccode\u003e0fd347f\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/63\"\u003e#63\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/6a517fa25c741cc107a90019df458b34f580ce55\"\u003e\u003ccode\u003e6a517fa\u003c/code\u003e\u003c/a\u003e build(deps): bump github/codeql-action from 4.32.4 to 4.36.0 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/64\"\u003e#64\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/0d45e2a88e82a2faf1148956b6457e3a6c99ebcd\"\u003e\u003ccode\u003e0d45e2a\u003c/code\u003e\u003c/a\u003e Fix \u0026quot;arugment\u0026quot; typo in README (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/61\"\u003e#61\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for proxy-addr since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `qs` from 6.11.0 to 6.16.1\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ljharb/qs/blob/main/CHANGELOG.md\"\u003eqs's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003cstrong\u003e6.16.1\u003c/strong\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: do not mutate an object input\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: stop re-encoding structural separator dots when \u003ccode\u003eencodeDotInKeys\u003c/code\u003e is set (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/564\"\u003e#564\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: \u003ccode\u003earrayFormat: 'comma'\u003c/code\u003e: pass the full encoder arguments with \u003ccode\u003eencodeValuesOnly\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eutils\u003c/code\u003e: encode \u003ccode\u003e+\u003c/code\u003e as \u003ccode\u003e%2B\u003c/code\u003e in iso-8859-1 mode so values round-trip (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/565\"\u003e#565\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Fix] parse: only convert top-level dots to brackets when allowDots is on (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/621\"\u003e#621\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: ignore inherited array format names (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/622\"\u003e#622\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: \u003ccode\u003earrayFormat: 'comma'\u003c/code\u003e: do not throw on elements with no callable \u003ccode\u003etoString\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eutils\u003c/code\u003e: \u003ccode\u003emerge\u003c/code\u003e: seed an overflow container's index from its own keys, not just the source\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eutils\u003c/code\u003e: \u003ccode\u003emerge\u003c/code\u003e: keep a \u003ccode\u003estrictMerge\u003c/code\u003e conflict container's index and \u003ccode\u003earrayLimit\u003c/code\u003e correct\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: only treat \u003ccode\u003e[]\u003c/code\u003e as array syntax when it ends the key\u003c/li\u003e\n\u003cli\u003e[Perf] \u003ccode\u003edecode\u003c/code\u003e: skip decoders when there is no percent sign (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/583\"\u003e#583\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Robustness] \u003ccode\u003eutils\u003c/code\u003e: \u003ccode\u003emerge\u003c/code\u003e: apply \u003ccode\u003earrayLimit\u003c/code\u003e to the two-element array built for colliding values\u003c/li\u003e\n\u003cli\u003e[Robustness] \u003ccode\u003eparse\u003c/code\u003e: bound the nesting added by repeated \u003ccode\u003estrictMerge\u003c/code\u003e conflicts (credit \u003ca href=\"https://github.com/Yeaseen\"\u003e\u003ccode\u003e@​Yeaseen\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Docs] document that \u003ccode\u003eqs\u003c/code\u003e and flat parsers disagree about parameter names\u003c/li\u003e\n\u003cli\u003e[Docs] clarify that \u003ccode\u003ethrowOnLimitExceeded\u003c/code\u003e limits each array, not the total number of values\u003c/li\u003e\n\u003cli\u003e[Docs] clarify 6.14.1/6.15.2 parse bracket behavior change (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/567\"\u003e#567\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/ljharb/qs/issues/568\"\u003e#568\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[meta] fix changelog indents\u003c/li\u003e\n\u003cli\u003e[actions] set least-privilege \u003ccode\u003ecache-mode\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Tests] \u003ccode\u003eutils\u003c/code\u003e: \u003ccode\u003edecode\u003c/code\u003e: add missing cases\u003c/li\u003e\n\u003cli\u003e[Tests] \u003ccode\u003eparse\u003c/code\u003e: characterize the \u003ccode\u003e]=\u003c/code\u003e split when an \u003ccode\u003e=\u003c/code\u003e precedes any bracket group (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/620\"\u003e#620\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Tests] \u003ccode\u003eparse\u003c/code\u003e: \u003ccode\u003eallowDots\u003c/code\u003e: cover stray close brackets before a dot\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eeslint\u003c/code\u003e, \u003ccode\u003etape\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003cstrong\u003e6.16.0\u003c/strong\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003estringify\u003c/code\u003e: add a \u003ccode\u003edepth\u003c/code\u003e option to bound recursion depth (default \u003ccode\u003eInfinity\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e[Fix] stringify: serialize Date values when a filter is provided\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: enforce \u003ccode\u003earrayLimit\u003c/code\u003e on comma groups under \u003ccode\u003e[]=\u003c/code\u003e when \u003ccode\u003ethrowOnLimitExceeded\u003c/code\u003e is set\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: flatten a collection appended to an overflowed array (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/571\"\u003e#571\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eutils\u003c/code\u003e: \u003ccode\u003eisBuffer\u003c/code\u003e: do not invoke a non-callable \u003ccode\u003econstructor.isBuffer\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: do not let \u003ccode\u003eallowEmptyArrays\u003c/code\u003e skip cycle detection (or drop own keys) on an empty array with own properties\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: encode dots in a top-level key with a primitive value when encodeDotInKeys is set (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/562\"\u003e#562\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Docs] threat model: clarify \u003ccode\u003estringify\u003c/code\u003e deep-nesting DoS is caller-bounded\u003c/li\u003e\n\u003cli\u003e[Docs] clarify \u003ccode\u003earrayLimit\u003c/code\u003e is a representation threshold, not an element-count cap\u003c/li\u003e\n\u003cli\u003e[Tests] \u003ccode\u003eparse\u003c/code\u003e: remove a test that pinned \u003ccode\u003e[]=\u003c/code\u003e comma groups escaping \u003ccode\u003earrayLimit\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Tests] \u003ccode\u003estringify\u003c/code\u003e: pin current \u003ccode\u003eencodeDotInKeys\u003c/code\u003e separator-dot behavior\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eeslint\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003eeslint\u003c/code\u003e, \u003ccode\u003eevalmd\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003cstrong\u003e6.15.3\u003c/strong\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: enforce \u003ccode\u003ethrowOnLimitExceeded\u003c/code\u003e for cumulative array growth via \u003ccode\u003ecombine\u003c/code\u003e/\u003ccode\u003emerge\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eutils\u003c/code\u003e: respect encoding of surrogate pairs across chunks (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/559\"\u003e#559\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Robustness] \u003ccode\u003eparse\u003c/code\u003e: throw the \u003ccode\u003earrayLimit\u003c/code\u003e error before splitting oversized comma values\u003c/li\u003e\n\u003cli\u003e[Robustness] \u003ccode\u003eutils.merge\u003c/code\u003e / \u003ccode\u003eutils.assign\u003c/code\u003e: avoid invoking \u003ccode\u003e__proto__\u003c/code\u003e setter when copying own properties\u003c/li\u003e\n\u003cli\u003e[Robustness] \u003ccode\u003eutils\u003c/code\u003e: enforce \u003ccode\u003earrayLimit\u003c/code\u003e consistently across \u003ccode\u003emerge\u003c/code\u003e's array paths\u003c/li\u003e\n\u003cli\u003e[Perf] \u003ccode\u003eutils\u003c/code\u003e: make \u003ccode\u003ecompact\u003c/code\u003e O(n) via a side-channel visited-set instead of \u003ccode\u003eArray.indexOf\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Deps] update \u003ccode\u003eside-channel\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003eeslint\u003c/code\u003e, \u003ccode\u003emock-property\u003c/code\u003e, \u003ccode\u003etape\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Tests] \u003ccode\u003eparse\u003c/code\u003e: characterize current lenient handling of unbalanced bracket keys (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/558\"\u003e#558\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/2471b66ae696a8a10915c01453ae2c0f139a5adc\"\u003e\u003ccode\u003e2471b66\u003c/code\u003e\u003c/a\u003e v6.16.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/51f736e94b079b8479fa8f668acba84c1e177596\"\u003e\u003ccode\u003e51f736e\u003c/code\u003e\u003c/a\u003e [Docs] document that \u003ccode\u003eqs\u003c/code\u003e and flat parsers disagree about parameter names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/40239f7564e99ab92eb9125defaaf4779a26b03a\"\u003e\u003ccode\u003e40239f7\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003etape\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/d2...\n\n_Description has been truncated_","html_url":"https://github.com/Sawsqr68/nodejs.dev/pull/2","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Sawsqr68%2Fnodejs.dev/issues/2","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/2/packages"},{"uuid":"5910034283","node_id":"PR_kwDOChomAM8AAAABJKDiTg","number":227,"state":"open","title":"build(deps): bump moment from 2.30.1 to 2.31.0","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-18T13:31:00.000Z","updated_at":"2026-10-18T13:32:38.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"moment","old_version":"2.30.1","new_version":"2.31.0","repository_url":"https://github.com/moment/moment"}],"path":null,"ecosystem":"npm"},"body":"Bumps [moment](https://github.com/moment/moment) from 2.30.1 to 2.31.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/releases\"\u003emoment's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.31.0\u003c/h2\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/blob/develop/CHANGELOG.md\"\u003emoment's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch3\u003e2.31.0\u003c/h3\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/15b45d48a176312e8f34143c5a800090abf4787f\"\u003e\u003ccode\u003e15b45d4\u003c/code\u003e\u003c/a\u003e [pkg] Build 2.31.0 (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6452\"\u003e#6452\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/631cd81454ee001e1f508e21270eae0b6bb62974\"\u003e\u003ccode\u003e631cd81\u003c/code\u003e\u003c/a\u003e [pkg] Update changelog for upcoming release (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6394\"\u003e#6394\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/6caff9e0d54e85a63a6eb97d7361f1da35bc58f4\"\u003e\u003ccode\u003e6caff9e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/710703b7eac93535ad125cbf4feb3d42afed6fb3\"\u003e\u003ccode\u003e710703b\u003c/code\u003e\u003c/a\u003e [feature] Add internal date-default hook for Moment Timezone (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6451\"\u003e#6451\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/863ed940556e6e63c43de23981a4853036a003ac\"\u003e\u003ccode\u003e863ed94\u003c/code\u003e\u003c/a\u003e [bugfix] Add stack traces to conditional deprecation warnings (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6450\"\u003e#6450\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/2c7abe1c42ee15445d30c2c5d536750a1e43a09a\"\u003e\u003ccode\u003e2c7abe1\u003c/code\u003e\u003c/a\u003e [bugfix] Apply postformat to locale relative time methods (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6448\"\u003e#6448\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/9c45ac38690c649c95e19923276b63da5fe2be26\"\u003e\u003ccode\u003e9c45ac3\u003c/code\u003e\u003c/a\u003e [bugfix] Include metadata in all-locales bundle (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6447\"\u003e#6447\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/f6eefc5fc7b44ceccbd007aeffc48ebc5eac30fa\"\u003e\u003ccode\u003ef6eefc5\u003c/code\u003e\u003c/a\u003e [bugfix] Validate timezone offset range (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6446\"\u003e#6446\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/136b441794a3bb207d593add3b59e9de0e062523\"\u003e\u003ccode\u003e136b441\u003c/code\u003e\u003c/a\u003e [bugfix] Avoid Object.assign in duration.humanize (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6443\"\u003e#6443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/0d1050437b40f66ac47e14b285bb3d09676cf2e0\"\u003e\u003ccode\u003e0d10504\u003c/code\u003e\u003c/a\u003e [bugfix] Fix locale('\u003cstrong\u003eproto\u003c/strong\u003e') corrupting the global locale (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6442\"\u003e#6442\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moment/moment/compare/2.30.1...2.31.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for moment since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=moment\u0026package-manager=npm_and_yarn\u0026previous-version=2.30.1\u0026new-version=2.31.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/mat3ra/wave.js/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/mat3ra/wave.js/pull/227","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/mat3ra%2Fwave.js/issues/227","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/227/packages"},{"uuid":"5909251488","node_id":"PR_kwDOTurCD88AAAABJJdZyQ","number":20,"state":"closed","title":"Bump the minor-and-patch group across 1 directory with 27 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-10-21T23:25:58.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-18T11:54:14.000Z","updated_at":"2026-10-21T23:26:00.000Z","time_to_close":300704,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"minor-and-patch","update_count":27,"packages":[{"name":"moment","old_version":"2.30.1","new_version":"2.31.0","repository_url":"https://github.com/moment/moment"},{"name":"moment-timezone","old_version":"0.6.3","new_version":"0.6.5","repository_url":"https://github.com/moment/moment-timezone"},{"name":"socket.io-client","old_version":"4.8.3","new_version":"4.8.4","repository_url":"https://github.com/socketio/socket.io"},{"name":"vue","old_version":"3.5.42","new_version":"3.5.44","repository_url":"https://github.com/vuejs/core"},{"name":"sass","old_version":"1.103.1","new_version":"1.105.1","repository_url":"https://github.com/sass/dart-sass"},{"name":"vue-tsc","old_version":"3.3.11","new_version":"3.3.13","repository_url":"https://github.com/vuejs/language-tools"},{"name":"@nestjs/common","old_version":"12.0.1","new_version":"12.1.3","repository_url":"https://github.com/nestjs/nest"},{"name":"@nestjs/core","old_version":"12.0.1","new_version":"12.1.3","repository_url":"https://github.com/nestjs/nest"},{"name":"@nestjs/schedule","old_version":"12.0.1","new_version":"12.0.2","repository_url":"https://github.com/nestjs/schedule"},{"name":"@types/lodash","old_version":"4.17.25","new_version":"4.17.26","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"@nestjs/axios","old_version":"12.0.0","new_version":"12.0.1","repository_url":"https://github.com/nestjs/axios"},{"name":"@nestjs/cache-manager","old_version":"12.0.0","new_version":"12.0.1","repository_url":"https://github.com/nestjs/cache-manager"},{"name":"@nestjs/jwt","old_version":"12.0.1","new_version":"12.0.3","repository_url":"https://github.com/nestjs/jwt"},{"name":"@nestjs/platform-express","old_version":"12.0.1","new_version":"12.1.3","repository_url":"https://github.com/nestjs/nest"},{"name":"@nestjs/platform-socket.io","old_version":"12.0.1","new_version":"12.1.3","repository_url":"https://github.com/nestjs/nest"},{"name":"@nestjs/swagger","old_version":"12.0.1","new_version":"12.0.2","repository_url":"https://github.com/nestjs/swagger"},{"name":"@nestjs/typeorm","old_version":"12.0.1","new_version":"12.0.2","repository_url":"https://github.com/nestjs/typeorm"},{"name":"@nestjs/websockets","old_version":"12.0.1","new_version":"12.1.3","repository_url":"https://github.com/nestjs/nest"},{"name":"@node-rs/argon2","old_version":"2.2.0","new_version":"2.2.2","repository_url":"https://github.com/napi-rs/node-rs"},{"name":"jszip","old_version":"3.10.1","new_version":"3.10.2","repository_url":"https://github.com/Stuk/jszip"},{"name":"multer","old_version":"2.3.0","new_version":"2.4.0","repository_url":"https://github.com/expressjs/multer"},{"name":"@types/multer","old_version":"2.2.0","new_version":"2.3.0","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"mysql2","old_version":"3.24.2","new_version":"3.24.6","repository_url":"https://github.com/sidorares/node-mysql2"},{"name":"otpauth","old_version":"9.5.1","new_version":"9.5.2","repository_url":"https://github.com/hectorm/otpauth"},{"name":"sanitize-html","old_version":"2.17.7","new_version":"2.18.1","repository_url":"https://github.com/apostrophecms/apostrophe"},{"name":"@types/sanitize-html","old_version":"2.16.1","new_version":"2.16.2","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"@types/multer","old_version":"2.2.0","new_version":"2.3.0","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"@types/sanitize-html","old_version":"2.16.1","new_version":"2.16.2","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"webpack","old_version":"5.110.2","new_version":"5.111.1","repository_url":"https://github.com/webpack/webpack"}],"path":null,"ecosystem":"npm"},"body":"Bumps the minor-and-patch group with 27 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [moment](https://github.com/moment/moment) | `2.30.1` | `2.31.0` |\n| [moment-timezone](https://github.com/moment/moment-timezone) | `0.6.3` | `0.6.5` |\n| [socket.io-client](https://github.com/socketio/socket.io) | `4.8.3` | `4.8.4` |\n| [vue](https://github.com/vuejs/core) | `3.5.42` | `3.5.44` |\n| [sass](https://github.com/sass/dart-sass) | `1.103.1` | `1.105.1` |\n| [vue-tsc](https://github.com/vuejs/language-tools/tree/HEAD/packages/tsc) | `3.3.11` | `3.3.13` |\n| [@nestjs/common](https://github.com/nestjs/nest/tree/HEAD/packages/common) | `12.0.1` | `12.1.3` |\n| [@nestjs/core](https://github.com/nestjs/nest/tree/HEAD/packages/core) | `12.0.1` | `12.1.3` |\n| [@nestjs/schedule](https://github.com/nestjs/schedule) | `12.0.1` | `12.0.2` |\n| [@types/lodash](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/lodash) | `4.17.25` | `4.17.26` |\n| [@nestjs/axios](https://github.com/nestjs/axios) | `12.0.0` | `12.0.1` |\n| [@nestjs/cache-manager](https://github.com/nestjs/cache-manager) | `12.0.0` | `12.0.1` |\n| [@nestjs/jwt](https://github.com/nestjs/jwt) | `12.0.1` | `12.0.3` |\n| [@nestjs/platform-express](https://github.com/nestjs/nest/tree/HEAD/packages/platform-express) | `12.0.1` | `12.1.3` |\n| [@nestjs/platform-socket.io](https://github.com/nestjs/nest/tree/HEAD/packages/platform-socket.io) | `12.0.1` | `12.1.3` |\n| [@nestjs/swagger](https://github.com/nestjs/swagger) | `12.0.1` | `12.0.2` |\n| [@nestjs/typeorm](https://github.com/nestjs/typeorm) | `12.0.1` | `12.0.2` |\n| [@nestjs/websockets](https://github.com/nestjs/nest/tree/HEAD/packages/websockets) | `12.0.1` | `12.1.3` |\n| [@node-rs/argon2](https://github.com/napi-rs/node-rs) | `2.2.0` | `2.2.2` |\n| [jszip](https://github.com/Stuk/jszip) | `3.10.1` | `3.10.2` |\n| [multer](https://github.com/expressjs/multer) | `2.3.0` | `2.4.0` |\n| [@types/multer](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/multer) | `2.2.0` | `2.3.0` |\n| [mysql2](https://github.com/sidorares/node-mysql2) | `3.24.2` | `3.24.6` |\n| [otpauth](https://github.com/hectorm/otpauth) | `9.5.1` | `9.5.2` |\n| [sanitize-html](https://github.com/apostrophecms/apostrophe/tree/HEAD/packages/sanitize-html) | `2.17.7` | `2.18.1` |\n| [@types/sanitize-html](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/sanitize-html) | `2.16.1` | `2.16.2` |\n| [@types/multer](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/multer) | `2.2.0` | `2.3.0` |\n| [@types/sanitize-html](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/sanitize-html) | `2.16.1` | `2.16.2` |\n| [webpack](https://github.com/webpack/webpack) | `5.110.2` | `5.111.1` |\n\n\nUpdates `moment` from 2.30.1 to 2.31.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/releases\"\u003emoment's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.31.0\u003c/h2\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/blob/develop/CHANGELOG.md\"\u003emoment's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch3\u003e2.31.0\u003c/h3\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/15b45d48a176312e8f34143c5a800090abf4787f\"\u003e\u003ccode\u003e15b45d4\u003c/code\u003e\u003c/a\u003e [pkg] Build 2.31.0 (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6452\"\u003e#6452\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/631cd81454ee001e1f508e21270eae0b6bb62974\"\u003e\u003ccode\u003e631cd81\u003c/code\u003e\u003c/a\u003e [pkg] Update changelog for upcoming release (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6394\"\u003e#6394\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/6caff9e0d54e85a63a6eb97d7361f1da35bc58f4\"\u003e\u003ccode\u003e6caff9e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/710703b7eac93535ad125cbf4feb3d42afed6fb3\"\u003e\u003ccode\u003e710703b\u003c/code\u003e\u003c/a\u003e [feature] Add internal date-default hook for Moment Timezone (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6451\"\u003e#6451\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/863ed940556e6e63c43de23981a4853036a003ac\"\u003e\u003ccode\u003e863ed94\u003c/code\u003e\u003c/a\u003e [bugfix] Add stack traces to conditional deprecation warnings (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6450\"\u003e#6450\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/2c7abe1c42ee15445d30c2c5d536750a1e43a09a\"\u003e\u003ccode\u003e2c7abe1\u003c/code\u003e\u003c/a\u003e [bugfix] Apply postformat to locale relative time methods (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6448\"\u003e#6448\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/9c45ac38690c649c95e19923276b63da5fe2be26\"\u003e\u003ccode\u003e9c45ac3\u003c/code\u003e\u003c/a\u003e [bugfix] Include metadata in all-locales bundle (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6447\"\u003e#6447\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/f6eefc5fc7b44ceccbd007aeffc48ebc5eac30fa\"\u003e\u003ccode\u003ef6eefc5\u003c/code\u003e\u003c/a\u003e [bugfix] Validate timezone offset range (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6446\"\u003e#6446\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/136b441794a3bb207d593add3b59e9de0e062523\"\u003e\u003ccode\u003e136b441\u003c/code\u003e\u003c/a\u003e [bugfix] Avoid Object.assign in duration.humanize (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6443\"\u003e#6443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/0d1050437b40f66ac47e14b285bb3d09676cf2e0\"\u003e\u003ccode\u003e0d10504\u003c/code\u003e\u003c/a\u003e [bugfix] Fix locale('\u003cstrong\u003eproto\u003c/strong\u003e') corrupting the global locale (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6442\"\u003e#6442\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moment/moment/compare/2.30.1...2.31.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for moment since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `moment-timezone` from 0.6.3 to 0.6.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment-timezone/releases\"\u003emoment-timezone's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease 0.6.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated data to IANA TZDB \u003ccode\u003e2026e\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/moment/moment-timezone/issues/1165\"\u003e#1165\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 0.6.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated data to IANA TZDB \u003ccode\u003e2026d\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/moment/moment-timezone/pull/1157\"\u003e#1157\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed calendar arithmetic around time zone gaps. \u003ca href=\"https://redirect.github.com/moment/moment-timezone/pull/1151\"\u003e#1151\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed default date selection when creating a zoned Moment with only time fields.\n\u003cul\u003e\n\u003cli\u003eObject inputs (e.g. \u003ccode\u003emoment.tz({ hour: 9 }, zoneName)\u003c/code\u003e). \u003ca href=\"https://redirect.github.com/moment/moment-timezone/pull/1156\"\u003e#1156\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eString inputs (e.g. \u003ccode\u003emoment.tz('09:00', 'HH:mm', zoneName)\u003c/code\u003e). \u003ca href=\"https://redirect.github.com/moment/moment-timezone/pull/1159\"\u003e#1159\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUsing un-zoned \u003ccode\u003emoment()\u003c/code\u003e when there is also a zone set with \u003ccode\u003emoment.tz.setDefault(zoneName)\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/moment/moment-timezone/pull/1161\"\u003e#1161\u003c/a\u003e\n\u003cul\u003e\n\u003cli\u003eNOTE: This specific fix only works when also using core \u003ccode\u003emoment\u003c/code\u003e version \u003ccode\u003e2.31.0\u003c/code\u003e or higher.\nAll other fixes in this release work with all supported versions of \u003ccode\u003emoment\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment-timezone/blob/develop/changelog.md\"\u003emoment-timezone's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch3\u003e\u003ccode\u003e0.6.5\u003c/code\u003e \u003cem\u003e2026-10-02\u003c/em\u003e\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated data to IANA TZDB \u003ccode\u003e2026e\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/moment/moment-timezone/pull/1165\"\u003e#1165\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e\u003ccode\u003e0.6.4\u003c/code\u003e \u003cem\u003e2026-09-15\u003c/em\u003e\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated data to IANA TZDB \u003ccode\u003e2026d\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/moment/moment-timezone/pull/1157\"\u003e#1157\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed calendar arithmetic around time zone gaps. \u003ca href=\"https://redirect.github.com/moment/moment-timezone/pull/1151\"\u003e#1151\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed default date selection when creating a zoned Moment with only time fields.\n\u003cul\u003e\n\u003cli\u003eObject inputs (e.g. \u003ccode\u003emoment.tz({ hour: 9 }, zoneName)\u003c/code\u003e). \u003ca href=\"https://redirect.github.com/moment/moment-timezone/pull/1156\"\u003e#1156\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eString inputs (e.g. \u003ccode\u003emoment.tz('09:00', 'HH:mm', zoneName)\u003c/code\u003e). \u003ca href=\"https://redirect.github.com/moment/moment-timezone/pull/1159\"\u003e#1159\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUsing un-zoned \u003ccode\u003emoment()\u003c/code\u003e when there is also a zone set with \u003ccode\u003emoment.tz.setDefault(zoneName)\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/moment/moment-timezone/pull/1161\"\u003e#1161\u003c/a\u003e\n\u003cul\u003e\n\u003cli\u003eNOTE: This specific fix only works when also using core \u003ccode\u003emoment\u003c/code\u003e version \u003ccode\u003e2.31.0\u003c/code\u003e or higher.\nAll other fixes in this release work with all supported versions of \u003ccode\u003emoment\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment-timezone/commit/fe4e8522a78d167aba3e38b4c72c057152e85e17\"\u003e\u003ccode\u003efe4e852\u003c/code\u003e\u003c/a\u003e Bump version and build moment-timezone 0.6.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment-timezone/commit/b48d24ad898bf130fa8f21289bc6323271ce5961\"\u003e\u003ccode\u003eb48d24a\u003c/code\u003e\u003c/a\u003e build(deps): bump package-lock moment from 2.29.4 to 2.31.0 (\u003ca href=\"https://redirect.github.com/moment/moment-timezone/issues/1166\"\u003e#1166\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment-timezone/commit/88edd547159c9ba63c00e7de50fa2487487dc861\"\u003e\u003ccode\u003e88edd54\u003c/code\u003e\u003c/a\u003e build(deps): bump brace-expansion (\u003ca href=\"https://redirect.github.com/moment/moment-timezone/issues/1164\"\u003e#1164\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment-timezone/commit/a973518b3b51372cfa59bef9cbeba33f6f5feef3\"\u003e\u003ccode\u003ea973518\u003c/code\u003e\u003c/a\u003e data: Add 2026e (\u003ca href=\"https://redirect.github.com/moment/moment-timezone/issues/1165\"\u003e#1165\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment-timezone/commit/3722a7dfb32107d66ea95b0d0c6fd7128c28002f\"\u003e\u003ccode\u003e3722a7d\u003c/code\u003e\u003c/a\u003e Bump version and build moment-timezone 0.6.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment-timezone/commit/70b06e93a5f3a1574a00a74161ff8a6f5d1e09a2\"\u003e\u003ccode\u003e70b06e9\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moment/moment-timezone/issues/1161\"\u003e#1161\u003c/a\u003e from moment/mjp/fix-default-zone-date-defaults\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment-timezone/commit/afac5bd7b4fedc59df623d357b3d2310ce8f3342\"\u003e\u003ccode\u003eafac5bd\u003c/code\u003e\u003c/a\u003e [bugfix] Apply default zone to omitted date fields\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment-timezone/commit/114242a3e3eed4a1ce1f26244eb696917681402b\"\u003e\u003ccode\u003e114242a\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moment/moment-timezone/issues/1159\"\u003e#1159\u003c/a\u003e from moment/mjp/fix-119\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment-timezone/commit/0662d8bf20dea5f62b90416813e62d10d3b0ce7d\"\u003e\u003ccode\u003e0662d8b\u003c/code\u003e\u003c/a\u003e [bugfix] Use target zone for string date defaults\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment-timezone/commit/9da68c43a8609ca256655d4a09050b2ad81150a7\"\u003e\u003ccode\u003e9da68c4\u003c/code\u003e\u003c/a\u003e data: Add 2026d (\u003ca href=\"https://redirect.github.com/moment/moment-timezone/issues/1157\"\u003e#1157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moment/moment-timezone/compare/0.6.3...0.6.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `socket.io-client` from 4.8.3 to 4.8.4\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/socketio/socket.io/releases\"\u003esocket.io-client's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003esocket.io-client@4.8.4\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003etypes:\u003c/strong\u003e export ExtendedError for connect_error event (\u003ca href=\"https://redirect.github.com/socketio/socket.io/issues/5548\"\u003e#5548\u003c/a\u003e) (\u003ca href=\"https://github.com/socketio/socket.io/commit/c0d54509fbe7dafd3ed8b5a2f3f74a12810da4a3\"\u003ec0d5450\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003etypes:\u003c/strong\u003e export reserved event interfaces (\u003ca href=\"https://redirect.github.com/socketio/socket.io/issues/5533\"\u003e#5533\u003c/a\u003e) (\u003ca href=\"https://github.com/socketio/socket.io/commit/03945df6b750dfa6379305ef29ea4235a424ca47\"\u003e03945df\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependencies\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/socketio/socket.io/releases/tag/engine.io-client%406.6.7\"\u003e\u003ccode\u003eengine.io-client@~6.6.1\u003c/code\u003e\u003c/a\u003e (no change)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/websockets/ws/releases/tag/8.21.0\"\u003e\u003ccode\u003ews@~8.21.0\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://github.com/websockets/ws/compare/8.18.3...8.21.0\"\u003ediff\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/socketio/socket.io/commit/11a6f561a757264c3231c3383c4cdbf37bcf52de\"\u003e\u003ccode\u003e11a6f56\u003c/code\u003e\u003c/a\u003e chore(release): socket.io-client@4.8.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/socketio/socket.io/commit/00e4e73a68505ff0c93d7d9ca8db5dd510428cf4\"\u003e\u003ccode\u003e00e4e73\u003c/code\u003e\u003c/a\u003e chore(release): engine.io-client@6.6.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/socketio/socket.io/commit/e387ab116f6904537ccef872ef570a6ef7936e9d\"\u003e\u003ccode\u003ee387ab1\u003c/code\u003e\u003c/a\u003e chore: use \u003ccode\u003e@​rollup/plugin-terser\u003c/code\u003e instead of rollup-plugin-terser\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/socketio/socket.io/commit/973833304c7c195c2d0d99b72e4ac9f149e3ca94\"\u003e\u003ccode\u003e9738333\u003c/code\u003e\u003c/a\u003e chore(release): engine.io@6.6.11\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/socketio/socket.io/commit/fc9dd90e2ff26aa358d0cd27bc59ddc93458ae44\"\u003e\u003ccode\u003efc9dd90\u003c/code\u003e\u003c/a\u003e docs(eio): rework README\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/socketio/socket.io/commit/da008a514ded71e3058a964c831c69abe417b2f5\"\u003e\u003ccode\u003eda008a5\u003c/code\u003e\u003c/a\u003e fix(eio): refresh ping timeout on incoming packets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/socketio/socket.io/commit/3df3fed075fd2312e84481786235aa14d08b8fe7\"\u003e\u003ccode\u003e3df3fed\u003c/code\u003e\u003c/a\u003e fix(eio-client): restore default transport resolution\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/socketio/socket.io/commit/aaf2af36ec8ad05910f357a788e0e358bad32738\"\u003e\u003ccode\u003eaaf2af3\u003c/code\u003e\u003c/a\u003e test: upgrade WebdriverIO to v9\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/socketio/socket.io/commit/b5da079228666fcabd97166486d5f6a110826bc8\"\u003e\u003ccode\u003eb5da079\u003c/code\u003e\u003c/a\u003e refactor(sio): simplify packet handling switch\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/socketio/socket.io/commit/45873ca93e6e25ac55dc1ba5c9b87853bf19ffba\"\u003e\u003ccode\u003e45873ca\u003c/code\u003e\u003c/a\u003e docs(protocol): clarify namespace comma restriction for built-in parser (\u003ca href=\"https://redirect.github.com/socketio/socket.io/issues/5545\"\u003e#5545\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/socketio/socket.io/compare/socket.io-client@4.8.3...socket.io-client@4.8.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `vue` from 3.5.42 to 3.5.44\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vuejs/core/releases\"\u003evue's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.5.44\u003c/h2\u003e\n\u003cp\u003eFor stable releases, please refer to \u003ca href=\"https://github.com/vuejs/core/blob/main/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\nFor pre-releases, please refer to \u003ca href=\"https://github.com/vuejs/core/blob/minor/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e of the \u003ccode\u003eminor\u003c/code\u003e branch.\u003c/p\u003e\n\u003ch2\u003ev3.5.43\u003c/h2\u003e\n\u003cp\u003eFor stable releases, please refer to \u003ca href=\"https://github.com/vuejs/core/blob/main/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\nFor pre-releases, please refer to \u003ca href=\"https://github.com/vuejs/core/blob/minor/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e of the \u003ccode\u003eminor\u003c/code\u003e branch.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vuejs/core/blob/main/CHANGELOG.md\"\u003evue's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/vuejs/core/compare/v3.5.43...v3.5.44\"\u003e3.5.44\u003c/a\u003e (2026-10-13)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ecompat:\u003c/strong\u003e expose _setupProxy for Vue 2.7 compiled script setup (fix \u003ca href=\"https://redirect.github.com/vuejs/core/issues/11164\"\u003e#11164\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15618\"\u003e#15618\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/f08059d0ca8cf28b8258a6095f8760fa1804d333\"\u003ef08059d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecompiler-core:\u003c/strong\u003e parenthesise v-for key in v-memo cache guard (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15724\"\u003e#15724\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/d084b904903a7710ea19b7256b7c681e838eb63e\"\u003ed084b90\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vuejs/core/issues/15723\"\u003e#15723\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecompiler-dom:\u003c/strong\u003e correctly stringify \u003ccode\u003e0\u003c/code\u003e and \u003ccode\u003efalse\u003c/code\u003e in \u003ccode\u003ev-html\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15571\"\u003e#15571\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/9f3b4377c4bb5ff32b35ff08ce7670f6be6f5dbb\"\u003e9f3b437\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecompiler-dom:\u003c/strong\u003e inject transition persisted for v-show in production (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15783\"\u003e#15783\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/89cb2724bf3423fc38dca68af3139d736e6b4833\"\u003e89cb272\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecompiler-sfc:\u003c/strong\u003e error when defineModel prop options reference a destructured prop (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15604\"\u003e#15604\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/38012a5ad90a41c228e153774d089cba9515cf2d\"\u003e38012a5\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vuejs/core/issues/15602\"\u003e#15602\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecustom-element:\u003c/strong\u003e skip mounting an async custom element removed while its component loads (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15777\"\u003e#15777\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/0f8e7b40175059e262e0db232ae0c08b427486b5\"\u003e0f8e7b4\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vuejs/core/issues/15775\"\u003e#15775\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ehydration:\u003c/strong\u003e observe children of a display: contents root in hydrateOnVisible (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15773\"\u003e#15773\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/7f688e84745558d95b836c0aac25c3ca3257e943\"\u003e7f688e8\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eKeepAlive:\u003c/strong\u003e unmount pruned current component when its vnode was cloned on mount (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15711\"\u003e#15711\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/92798ac0a8810283055478dab1e54569f3e94c23\"\u003e92798ac\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vuejs/core/issues/15710\"\u003e#15710\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ereactivity:\u003c/strong\u003e avoid mutating native array iterators (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15703\"\u003e#15703\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/7f9d45d15bd10b6b9b136eb2b3a8879b449fec0d\"\u003e7f9d45d\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vuejs/core/issues/15643\"\u003e#15643\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ereactivity:\u003c/strong\u003e do not track deps in watcher callbacks run inside another effect (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15782\"\u003e#15782\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/db00fe9819eb17f0a5bde7e1fcfafe5984e267a3\"\u003edb00fe9\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vuejs/core/issues/5009\"\u003e#5009\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ereactivity:\u003c/strong\u003e once watcher should stop when its callback throws (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15755\"\u003e#15755\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/ae4bd94b6e5675f991696236dcc76a11d0597535\"\u003eae4bd94\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ereactivity:\u003c/strong\u003e preserve shallow collection semantics (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15793\"\u003e#15793\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/b600466135e0910d142d14f56ffec933c1c420a2\"\u003eb600466\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vuejs/core/issues/15792\"\u003e#15792\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eruntime-core:\u003c/strong\u003e detect new prop keys when comparing full props (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15634\"\u003e#15634\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/702fa61be9344852989bcd178681adec13264469\"\u003e702fa61\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vuejs/core/issues/15632\"\u003e#15632\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eruntime-core:\u003c/strong\u003e keep async placeholder for block patching and pending component updates (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15554\"\u003e#15554\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/05ec25f835cc65058bac7a85e4a5eb8075ed3151\"\u003e05ec25f\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vuejs/core/issues/15551\"\u003e#15551\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eruntime-core:\u003c/strong\u003e only flush jobs queued by the root render itself (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15757\"\u003e#15757\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/0bea14b962f1f6e27d2d994132efc2269945ab0f\"\u003e0bea14b\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vuejs/core/issues/6728\"\u003e#6728\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eruntime-core:\u003c/strong\u003e render nothing for an invalid v-for range in production (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15742\"\u003e#15742\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/ad19e7da3d58b772513ba3c2ded731eedb7d227d\"\u003ead19e7d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eruntime-dom:\u003c/strong\u003e preserve v-show display for unchanged style strings (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15794\"\u003e#15794\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/c0a6d3f2bbf80cf930f4c837409dbee95a149271\"\u003ec0a6d3f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eruntime-dom:\u003c/strong\u003e treat playsinline as a boolean attribute (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15627\"\u003e#15627\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/a084e4486f1c4dc118518d43a1c7547031c53a5c\"\u003ea084e44\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eserver-renderer:\u003c/strong\u003e propagate async setup errors (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15857\"\u003e#15857\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/693037486f38b3d3acf4cdf7b9850917c44cf9cb\"\u003e6930374\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vuejs/core/issues/15716\"\u003e#15716\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003essr:\u003c/strong\u003e honor falsy vnode content overrides (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15769\"\u003e#15769\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/c11c5c8f07c8527b537b9ce6d801f80bbdd12129\"\u003ec11c5c8\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003esuspense:\u003c/strong\u003e mount resolved async component with its own namespace (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15640\"\u003e#15640\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/2a086a2bee33abc30e20f8a3b0a2be418ae48967\"\u003e2a086a2\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vuejs/core/issues/15639\"\u003e#15639\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003esuspense:\u003c/strong\u003e skip rendering async components unmounted while pending (\u003ca href=\"https://github.com/vuejs/core/commit/4ab865a848a1da3d10fb674f857e5fff13094644\"\u003e4ab865a\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eteleport:\u003c/strong\u003e move targetStart and keep children before targetAnchor (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15818\"\u003e#15818\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/d3c6e02e7405b9dafa75b1007ca45fb376d45729\"\u003ed3c6e02\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vuejs/core/issues/15817\"\u003e#15817\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003etransition-group:\u003c/strong\u003e measure nested groups against their moving outer item (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15848\"\u003e#15848\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/1936c8791b61374fd21a99c99f450ee2b057b33e\"\u003e1936c87\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vuejs/core/issues/5385\"\u003e#5385\u003c/a\u003e \u003ca href=\"https://redirect.github.com/vuejs/core/issues/1531\"\u003e#1531\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003etransition:\u003c/strong\u003e handle comment-wrapped component roots (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15853\"\u003e#15853\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/ff3501429d4970c37194708b055492a56d9e5be5\"\u003eff35014\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vuejs/core/issues/6080\"\u003e#6080\u003c/a\u003e \u003ca href=\"https://redirect.github.com/vuejs/core/issues/5500\"\u003e#5500\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/vuejs/core/compare/v3.5.42...v3.5.43\"\u003e3.5.43\u003c/a\u003e (2026-09-17)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ecompiler-sfc:\u003c/strong\u003e ignore comment delimiters inside strings and url() when parsing css vars (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15548\"\u003e#15548\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/2fde3239ca3cdb9b152870f695cd3401fcaada94\"\u003e2fde323\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecompiler-sfc:\u003c/strong\u003e prepend semicolon for await in switch case (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15498\"\u003e#15498\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/9a1df69b63fecd743919af89a419783dd030b9f7\"\u003e9a1df69\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vuejs/core/issues/15495\"\u003e#15495\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecompiler-sfc:\u003c/strong\u003e restore await scope when leaving nested blocks (\u003ca href=\"https://github.com/vuejs/core/commit/54097087a0918b98f16c84599b1a6d654e952ca7\"\u003e5409708\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vuejs/core/issues/15465\"\u003e#15465\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecompiler-sfc:\u003c/strong\u003e reuse parsed parent configs across tsconfig walks (fix \u003ca href=\"https://redirect.github.com/vuejs/core/issues/15478\"\u003e#15478\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15480\"\u003e#15480\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/d6febaab8c0d95a6320e7e37276c00e8159e9cb2\"\u003ed6febaa\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ehydration:\u003c/strong\u003e run leave hooks for hydration placeholders (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15431\"\u003e#15431\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/5dda192082afa4985951d90e229324d522e25c22\"\u003e5dda192\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ereactivity:\u003c/strong\u003e preserve readonly wrappers in array copy methods (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15469\"\u003e#15469\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/599f35bbb21f3d78b7aa0818342ab4f27442a333\"\u003e599f35b\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eruntime-core:\u003c/strong\u003e unmount v-once children after parent rerenders (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15435\"\u003e#15435\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/d720338d5d29c1fac82abbe6f7066fe703ce624d\"\u003ed720338\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eshared:\u003c/strong\u003e handle circular references in looseEqual (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15499\"\u003e#15499\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/718f782b14c7e0165d20b6f4dd8664f78054b62c\"\u003e718f782\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vuejs/core/issues/15496\"\u003e#15496\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eshared:\u003c/strong\u003e preserve comment-like text in style values (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15471\"\u003e#15471\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/b9456cb40db714a6f573a1713d92e96d4c9e9533\"\u003eb9456cb\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003esuspense:\u003c/strong\u003e don't drop nested suspense patches during hydration (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15429\"\u003e#15429\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/76d42dc1874e82e62e9650debd68a53472d810e0\"\u003e76d42dc\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003esuspense:\u003c/strong\u003e keep the boundary pending while its branch is patched (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15411\"\u003e#15411\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/bfcfe9e4d0254f85af452544a058291ef88dce1a\"\u003ebfcfe9e\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vuejs/core/issues/7506\"\u003e#7506\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003esuspense:\u003c/strong\u003e patch a hydrating boundary's pending branch in place (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15432\"\u003e#15432\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/2cde6f754cb3e4695a21fb5719e0c75ee2fc5c61\"\u003e2cde6f7\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003esuspense:\u003c/strong\u003e unmount the DOM an interrupted async component claimed (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15430\"\u003e#15430\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/fb9b45ce780f656a23fcb374eb8ea9f7abadc594\"\u003efb9b45c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003etypes:\u003c/strong\u003e keep optional props when a runtime prop uses a generic PropType (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15523\"\u003e#15523\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/243aabccf05fefb3760f2dab1c2d75aa424baad7\"\u003e243aabc\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vuejs/core/issues/9546\"\u003e#9546\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vuejs/core/commit/bf5f0dd877dd3c23ce85c2cbc1dd771567e84c8c\"\u003e\u003ccode\u003ebf5f0dd\u003c/code\u003e\u003c/a\u003e release: v3.5.44\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vuejs/core/commit/693037486f38b3d3acf4cdf7b9850917c44cf9cb\"\u003e\u003ccode\u003e6930374\u003c/code\u003e\u003c/a\u003e fix(server-renderer): propagate async setup errors (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15857\"\u003e#15857\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vuejs/core/commit/8e8c54756f057a47d46ad4bfe32cf1409476ed3c\"\u003e\u003ccode\u003e8e8c547\u003c/code\u003e\u003c/a\u003e chore(deps): update all non-major dependencies (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15585\"\u003e#15585\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vuejs/core/commit/4cb0ca8e207fa1c7fe029fe15e75bb518cc912a7\"\u003e\u003ccode\u003e4cb0ca8\u003c/code\u003e\u003c/a\u003e chore(deps): update playground (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15685\"\u003e#15685\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vuejs/core/commit/e38478f5b36a377d2a465fb40c882a61b1910df2\"\u003e\u003ccode\u003ee38478f\u003c/code\u003e\u003c/a\u003e chore(deps): update dawidd6/action-download-artifact action to v27 (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15768\"\u003e#15768\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vuejs/core/commit/1caed5ab1b8e9821926402621f7364205b44e559\"\u003e\u003ccode\u003e1caed5a\u003c/code\u003e\u003c/a\u003e chore(deps): update compiler (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15586\"\u003e#15586\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vuejs/core/commit/a49f451851d4ec4be1a5353960c4e328afd13367\"\u003e\u003ccode\u003ea49f451\u003c/code\u003e\u003c/a\u003e chore(deps): update lint (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15680\"\u003e#15680\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vuejs/core/commit/219b85809996bc57e275ba2d4a2b2c4da025da96\"\u003e\u003ccode\u003e219b858\u003c/code\u003e\u003c/a\u003e chore(deps): update build (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15679\"\u003e#15679\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vuejs/core/commit/ff3501429d4970c37194708b055492a56d9e5be5\"\u003e\u003ccode\u003eff35014\u003c/code\u003e\u003c/a\u003e fix(transition): handle comment-wrapped component roots (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15853\"\u003e#15853\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vuejs/core/commit/d084b904903a7710ea19b7256b7c681e838eb63e\"\u003e\u003ccode\u003ed084b90\u003c/code\u003e\u003c/a\u003e fix(compiler-core): parenthesise v-for key in v-memo cache guard (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15724\"\u003e#15724\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vuejs/core/compare/v3.5.42...v3.5.44\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `sass` from 1.103.1 to 1.105.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/sass/dart-sass/releases\"\u003esass's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eDart Sass 1.105.1\u003c/h2\u003e\n\u003cp\u003eTo install Sass 1.105.1, download one of the packages below and \u003ca href=\"https://katiek2.github.io/path-doc/\"\u003eadd it to your PATH\u003c/a\u003e, or see \u003ca href=\"https://sass-lang.com/install\"\u003ethe Sass website\u003c/a\u003e for full installation instructions.\u003c/p\u003e\n\u003ch1\u003eChanges\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eImprove error messages for \u003ccode\u003e@extend\u003c/code\u003es across different media queries.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSee the \u003ca href=\"https://github.com/sass/dart-sass/blob/master/CHANGELOG.md#11051\"\u003efull changelog\u003c/a\u003e for changes in earlier releases.\u003c/p\u003e\n\u003ch2\u003eDart Sass 1.105.0\u003c/h2\u003e\n\u003cp\u003eTo install Sass 1.105.0, download one of the packages below and \u003ca href=\"https://katiek2.github.io/path-doc/\"\u003eadd it to your PATH\u003c/a\u003e, or see \u003ca href=\"https://sass-lang.com/install\"\u003ethe Sass website\u003c/a\u003e for full installation instructions.\u003c/p\u003e\n\u003ch1\u003eChanges\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eAdd support for first-class modules. These can be accessed using the new \u003ccode\u003emeta.load()\u003c/code\u003e and \u003ccode\u003emeta.get-module()\u003c/code\u003e functions, and may be passed as the \u003ccode\u003e$module\u003c/code\u003e argument to numerous eisting \u003ccode\u003esass:meta\u003c/code\u003e functions.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eAdd the \u003ccode\u003emeta.css()\u003c/code\u003e mixin, which includes CSS from a first-class module.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eJS API\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd a \u003ccode\u003eSassModule\u003c/code\u003e class and a corresponding \u003ccode\u003eValue.assertModule()\u003c/code\u003e method.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDart API\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd a \u003ccode\u003eSassModule\u003c/code\u003e class and a corresponding \u003ccode\u003eValue.assertModule()\u003c/code\u003e method.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSee the \u003ca href=\"https://github.com/sass/dart-sass/blob/master/CHANGELOG.md#11050\"\u003efull changelog\u003c/a\u003e for changes in earlier releases.\u003c/p\u003e\n\u003ch2\u003eDart Sass 1.104.1\u003c/h2\u003e\n\u003cp\u003eTo install Sass 1.104.1, download one of the packages below and \u003ca href=\"https://katiek2.github.io/path-doc/\"\u003eadd it to your PATH\u003c/a\u003e, or see \u003ca href=\"https://sass-lang.com/install\"\u003ethe Sass website\u003c/a\u003e for full installation instructions.\u003c/p\u003e\n\u003ch1\u003eChanges\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eFix a bug where loud comments before \u003ccode\u003e@use\u003c/code\u003e rules could be emitted multiple times under certain circumstances.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eFix a bug in which an invalid selector at the end of an indented syntax stylesheet would cause the parser to crash instead of emitting a useful error message.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommand Line Interface\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eMany-to-many compilations no longer compile any files that appear in the output directory if the output directory is also within the source directory. This fixes a bug where \u003ccode\u003e--watch\u003c/code\u003e mode could enter an infinite loop recompiling the same CSS file over and over.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/sass/dart-sass/blob/main/CHANGELOG.md\"\u003esass's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.105.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImprove error messages for \u003ccode\u003e@extend\u003c/code\u003es across different media queries.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.105.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eAdd support for first-class modules. These can be accessed using the new\n\u003ccode\u003emeta.load()\u003c/code\u003e and \u003ccode\u003emeta.get-module()\u003c/code\u003e functions, and may be passed as the\n\u003ccode\u003e$module\u003c/code\u003e argument to numerous eisting \u003ccode\u003esass:meta\u003c/code\u003e functions.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eAdd the \u003ccode\u003emeta.css()\u003c/code\u003e mixin, which includes CSS from a first-class module.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eJS API\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd a \u003ccode\u003eSassModule\u003c/code\u003e class and a corresponding \u003ccode\u003eValue.assertModule()\u003c/code\u003e method.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDart API\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd a \u003ccode\u003eSassModule\u003c/code\u003e class and a corresponding \u003ccode\u003eValue.assertModule()\u003c/code\u003e method.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.104.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eFix a bug where loud comments before \u003ccode\u003e@use\u003c/code\u003e rules could be emitted multiple\ntimes under certain circumstances.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eFix a bug in which an invalid selector at the end of an indented syntax\nstylesheet would cause the parser to crash instead of emitting a useful error\nmessage.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommand Line Interface\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eMany-to-many compilations no longer compile any files that appear in the\noutput directory if the output directory is also within the source directory.\nThis fixes a bug where \u003ccode\u003e--watch\u003c/code\u003e mode could enter an infinite loop recompiling\nthe same CSS file over and over.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSass now sets the modification time of output files to the time compilation\n\u003cem\u003estarted\u003c/em\u003e rather than the time it \u003cem\u003eended\u003c/em\u003e. This ensures that, if a source file\nis modified during compilation, \u003ccode\u003e--watch\u003c/code\u003e and \u003ccode\u003e--update\u003c/code\u003e mode will recompile\nthe outputs to include the new source file contents.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.104.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003ePotentially breaking compatibility fix:\u003c/strong\u003e Colors now convert the special\nvalues NaN and negative zero, as well as infinity and negative infinity for\npolar-hue channels, to 0 as per the CSS spec.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eThe special value negative zero is now serialized as \u003ccode\u003e-0\u003c/code\u003e instead of \u003ccode\u003e0\u003c/code\u003e for\ngreater compatibility when using it in CSS calculations.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sass/dart-sass/commit/db3c666fd8adedce310295580694ae05a01a00cf\"\u003e\u003ccode\u003edb3c666\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/sass/dart-sass/issues/2869\"\u003e#2869\u003c/a\u003e from sass/extend-media-errors\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sass/dart-sass/commit/2ac45157135726623bf010d75559cd659a953737\"\u003e\u003ccode\u003e2ac4515\u003c/code\u003e\u003c/a\u003e Improve span boundaries for media queries and selectors\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sass/dart-sass/commit/706cfbf3cc8726f57cbbe82c0c355fec6708f974\"\u003e\u003ccode\u003e706cfbf\u003c/code\u003e\u003c/a\u003e Fix \u003ccode\u003eInterpolationMap._expandInterpolationSpanRight()\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sass/dart-sass/commit/792a948d6fb02d81f57baedb0dedb882ba29a652\"\u003e\u003ccode\u003e792a948\u003c/code\u003e\u003c/a\u003e Bump bufbuild/buf-action from 1.5.0 to 1.6.0 in /.github/util/initialize (\u003ca href=\"https://redirect.github.com/sass/dart-sass/issues/2870\"\u003e#2870\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sass/dart-sass/commit/61ab7025b90012161540afa7cf5757b88633aeb2\"\u003e\u003ccode\u003e61ab702\u003c/code\u003e\u003c/a\u003e Improve errors for \u003ccode\u003e@extend\u003c/code\u003e across media queries\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sass/dart-sass/commit/288d4e202501ea1b943525c88e1d5e5cd225de62\"\u003e\u003ccode\u003e288d4e2\u003c/code\u003e\u003c/a\u003e Auto-merge dependabot PRs as the Sass bot account (\u003ca href=\"https://redirect.github.com/sass/dart-sass/issues/2866\"\u003e#2866\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sass/dart-sass/commit/4bf2b92404be16adc0fde90bd18abf462ccfcb44\"\u003e\u003ccode\u003e4bf2b92\u003c/code\u003e\u003c/a\u003e Bump zizmorcore/zizmor-action from 0.6.3 to 0.6.4 (\u003ca href=\"https://redirect.github.com/sass/dart-sass/issues/2865\"\u003e#2865\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sass/dart-sass/commit/850d57ef92a3212f144c3589cd99aec5f110a5d1\"\u003e\u003ccode\u003e850d57e\u003c/code\u003e\u003c/a\u003e [meta.load] Add support for \u003ccode\u003emeta.load()\u003c/code\u003e and related features (\u003ca href=\"https://redirect.github.com/sass/dart-sass/issues/2861\"\u003e#2861\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sass/dart-sass/commit/6180be0e2fce9b99142302822221ad74ba787bc0\"\u003e\u003ccode\u003e6180be0\u003c/code\u003e\u003c/a\u003e Bump postcss from 8.5.26 to 8.5.28 in /pkg/sass-parser (\u003ca href=\"https://redirect.github.com/sass/dart-sass/issues/2863\"\u003e#2863\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sass/dart-sass/commit/da84fb52f6b7576cc9516e12312bc33f93ac7596\"\u003e\u003ccode\u003eda84fb5\u003c/code\u003e\u003c/a\u003e Fix \u003ccode\u003e--watch\u003c/code\u003e not recompiling sources modified during a compilation (\u003ca href=\"https://redirect.github.com/sass/dart-sass/issues/2850\"\u003e#2850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/sass/dart-sass/compare/1.103.1...1.105.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `vue-tsc` from 3.3.11 to 3.3.13\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vuejs/language-tools/releases\"\u003evue-tsc's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.3.12\u003c/h2\u003e\n\u003ch3\u003elanguage-core\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003esecurity:\u003c/strong\u003e improved handling of untrusted Vue files (\u003ca href=\"https://github.com/vuejs/language-tools/commit/cea069882606d62b31199a75a3013b99d3db7144\"\u003ecea0698\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003efeat:\u003c/strong\u003e infer first parameter type of default factory for \u003ccode\u003edefineModel\u003c/code\u003e (\u003ca href=\"https://github.com/vuejs/language-tools/commit/1be73b8f944fc4b571e2122255403f1f9b8fdad2\"\u003e1be73b8\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003efeat:\u003c/strong\u003e report duplicate CSS module names, including non-identifier names (\u003ca href=\"https://github.com/vuejs/language-tools/commit/d41d919b003c541a3af26982d9509162d01b0997\"\u003ed41d919\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/language-tools/commit/ffb85e57723d4a1a5107d43c0a09408814c4608a\"\u003effb85e5\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003efix:\u003c/strong\u003e keep union props when using withDefaults (\u003ca href=\"https://github.com/vuejs/language-tools/commit/084f30f6b764d4da97d4bc3be9ff3020d74e42d5\"\u003e084f30f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003efix:\u003c/strong\u003e keep inference-only props string single-line with block comments (\u003ca href=\"https://github.com/vuejs/language-tools/commit/55ca36fa864f60a6bf0d1113e1070a5469956014\"\u003e55ca36f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003efix:\u003c/strong\u003e support calling template bindings without \u003ccode\u003e.value\u003c/code\u003e (\u003ca href=\"https://github.com/vuejs/language-tools/commit/7ad4a94196d856d105f57ba91683c3c54a3dbe9c\"\u003e7ad4a94\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003efix:\u003c/strong\u003e avoid type guards missing from the tsc bundle in template binding analysis (\u003ca href=\"https://github.com/vuejs/language-tools/commit/e743e80e127400bbf57f829f880bd433756e4882\"\u003ee743e80\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003efix:\u003c/strong\u003e pad directive hook signatures to check short-arity directive bindings (\u003ca href=\"https://github.com/vuejs/language-tools/commit/94052b85199f8d1ea5458c02ce70c3ce99a871ee\"\u003e94052b8\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003efix:\u003c/strong\u003e \u003ccode\u003evueCompilerOptions.plugins\u003c/code\u003e now overrides the inherited list instead of being deduplicated on resolve (\u003ca href=\"https://github.com/vuejs/language-tools/commit/4fa9e9784e4b5028c23b180839c2302d15e8a4a7\"\u003e4fa9e97\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/language-tools/commit/c0e5d2ed78a01e83af648c655381b12b405860dd\"\u003ec0e5d2e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003efix:\u003c/strong\u003e eliminate synthesized ignore comments across codegen, scoped class aliases and compound event handlers (\u003ca href=\"https://github.com/vuejs/language-tools/commit/dbcb7de7ad569057fe77d49f1d1b3ac8b4ec53d4\"\u003edbcb7de\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/language-tools/commit/eccb74a5d9af138dd585f678456fb0590052e5f3\"\u003eeccb74a\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/language-tools/commit/612ae323e3cd835d32dbcfadb720e8349d073361\"\u003e612ae32\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003efix:\u003c/strong\u003e correct template mapping boundaries and eliminate unmapped diagnostics (\u003ca href=\"https://github.com/vuejs/language-tools/commit/04954ddb380b459be3d3cd593b092511bb6531af\"\u003e04954dd\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/language-tools/commit/8c85e38870010ee69246ff9f88e38d9973aadd15\"\u003e8c85e38\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/language-tools/commit/af7a1944462e5dbfce254f0102a0ee281291452c\"\u003eaf7a194\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/language-tools/commit/90f82073b666cce5c7480689eecb398979b973aa\"\u003e90f8207\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003efix:\u003c/strong\u003e stop typedef JSDoc from leaking into emitted dts (\u003ca href=\"https://github.com/vuejs/language-tools/commit/d4d41393fa9a5e626b65633518bb5fa5647b7224\"\u003ed4d4139\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eperf:\u003c/strong\u003e precompile attribute glob matchers (\u003ca href=\"https://github.com/vuejs/language-tools/commit/7d2e6030c61180096ad1b8f49923fdf77d740abf\"\u003e7d2e603\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ecomponent-meta\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003efix:\u003c/strong\u003e stop checking JS Vue files as TS (\u003ca href=\"https://github.com/vuejs/language-tools/commit/045a6a7eb5afa987b09a85a483eef118cbdcaaf3\"\u003e045a6a7\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003etypescript-plugin\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003efix:\u003c/strong\u003e don't abort reference span fix-up at style-less files (\u003ca href=\"https://github.com/vuejs/language-tools/commit/e46126c95682751ed2702355794563550a270edf\"\u003ee46126c\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003etsc\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003efix:\u003c/strong\u003e prevent watch mode crash on incremental build (\u003ca href=\"https://github.com/vuejs/language-tools/commit/a59da367002ffeb530edd8371493539d5387ea33\"\u003ea59da36\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003evscode\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eperf:\u003c/strong\u003e reduce focus mode overhead (\u003ca href=\"https://github.com/vuejs/language-tools/commit/b0936d1c77b68dcc5d888dfd670fe527c5c8ce0d\"\u003eb0936d1\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eContributors: \u003ca href=\"https://github.com/johnsoncodehk\"\u003e\u003ccode\u003e@​johnsoncodehk\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/serkodev\"\u003e\u003ccode\u003e@​serkodev\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/KazariEX\"\u003e\u003ccode\u003e@​KazariEX\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/00200200\"\u003e\u003ccode\u003e@​00200200\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/camonunez\"\u003e\u003ccode\u003e@​camonunez\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/Cherry\"\u003e\u003ccode\u003e@​Cherry\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/hungateJoseph\"\u003e\u003ccode\u003e@​hungateJoseph\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/uturnr\"\u003e\u003ccode\u003e@​uturnr\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/ValentinYoushkevich\"\u003e\u003ccode\u003e@​ValentinYoushkevich\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/xia-chao\"\u003e\u003ccode\u003e@​xia-chao\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vuejs/language-tools/blob/master/CHANGELOG.md\"\u003evue-tsc's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e3.3.13 (2026-10-10)\u003c/h2\u003e\n\u003ch3\u003elanguage-core\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003efix:\u003c/strong\u003e generate setup macros without static imports (\u003ca href=\"https://github.com/vuejs/language-tools/commit/85f665e9397b028c48d3ddd6ecd9a46e3fadeb94\"\u003e85f665e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003evscode\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003efix:\u003c/strong\u003e avoid \u003ccode\u003eregisterHooks\u003c/code\u003e on buggy Node versions (\u003ca href=\"https://github.com/vuejs/language-tools/commit/7e0d6c4c62d3e0a356968593c34e4aae8e9b9cd5\"\u003e7e0d6c4\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eContributors: \u003ca href=\"https://github.com/KazariEX\"\u003e\u003ccode\u003e@​KazariEX\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/serkodev\"\u003e\u003ccode\u003e@​serkodev\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e3.3.12 (2026-10-02)\u003c/h2\u003e\n\u003ch3\u003elanguage-core\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003esecurity:\u003c/strong\u003e improved handling of untrusted Vue files (\u003ca href=\"https://github.com/vuejs/language-tools/commit/cea069882606d62b31199a75a3013b99d3db7144\"\u003ecea0698\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003efeat:\u003c/strong\u003e infer first parameter type of default factory for \u003ccode\u003edefineModel\u003c/code\u003e (\u003ca href=\"https://github.com/vuejs/language-tools/commit/1be73b8f944fc4b571e2122255403f1f9b8fdad2\"\u003e1be73b8\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003efeat:\u003c/strong\u003e report duplicate CSS module names, including non-identifier names (\u003ca href=\"https://github.com/vuejs/language-tools/commit/d41d919b003c541a3af26982d9509162d01b0997\"\u003ed41d919\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/language-tools/commit/ffb85e57723d4a1a5107d43c0a09408814c4608a\"\u003effb85e5\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003efix:\u003c/strong\u003e keep union props when using withDefaults (\u003ca href=\"https://github.com/vuejs/language-tools/commit/084f30f6b764d4da97d4bc3be9ff3020d74e42d5\"\u003e084f30f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003efix:\u003c/strong\u003e keep inference-only props string single-line with block comments (\u003ca href=\"https://github.com/vuejs/language-tools/commit/55ca36fa864f60a6bf0d1113e1070a5469956014\"\u003e55ca36f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003efix:\u003c/strong\u003e support calling template bindings without \u003ccode\u003e.value\u003c/code\u003e (\u003ca href=\"https://github.com/vuejs/language-tools/commit/7ad4a94196d856d105f57ba91683c3c54a3dbe9c\"\u003e7ad4a94\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003efix:\u003c/strong\u003e avoid type guards missing from the tsc bundle in template binding analysis (\u003ca href=\"https://github.com/vuejs/language-tools/commit/e743e80e127400bbf57f829f880bd433756e4882\"\u003ee743e80\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003efix:\u003c/strong\u003e pad directive hook signatures to check short-arity directive bindings (\u003ca href=\"https://github.com/vuejs/language-tools/commit/94052b85199f8d1ea5458c02ce70c3ce99a871ee\"\u003e94052b8\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003efix:\u003c/strong\u003e \u003ccode\u003evueCompilerOptions.plugins\u003c/code\u003e now overrides the inherited list instead of being deduplicated on resolve (\u003ca href=\"https://github.com/vuejs/language-tools/commit/4fa9e9784e4b5028c23b180839c2302d15e8a4a7\"\u003e4fa9e97\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/language-tools/commit/c0e5d2ed78a01e83af648c655381b12b405860dd\"\u003ec0e5d2e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003efix:\u003c/strong\u003e eliminate synthesized ignore comments across codegen, scoped class aliases and compound event handlers (\u003ca href=\"https://github.com/vuejs/language-tools/commit/dbcb7de7ad569057fe77d49f1d1b3ac8b4ec53d4\"\u003edbcb7de\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/language-tools/commit/eccb74a5d9af138dd585f678456fb0590052e5f3\"\u003eeccb74a\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/language-tools/commit/612ae323e3cd835d32dbcfadb720e8349d073361\"\u003e612ae32\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003efix:\u003c/strong\u003e correct template mapping boundaries and eliminate unmapped diagnostics (\u003ca href=\"https://github.com/vuejs/language-tools/commit/04954ddb380b459be3d3cd593b092511bb6531af\"\u003e04954dd\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/language-tools/commit/8c85e38870010ee69246ff9f88e38d9973aadd15\"\u003e8c85e38\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/language-tools/commit/af7a1944462e5dbfce254f0102a0ee281291452c\"\u003eaf7a194\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/language-tools/commit/90f82073b666cce5c7480689eecb398979b973aa\"\u003e90f8207\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003efix:\u003c/strong\u003e stop typedef JSDoc from leaking into emitted dts (\u003ca href=\"https://github.com/vuejs/language-tools/commit/d4d41393fa9a5e626b65633518bb5fa5647b7224\"\u003ed4d4139\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eperf:\u003c/strong\u003e precompile attribute glob matchers (\u003ca href=\"https://github.com/vuejs/language-tools/commit/7d2e6030c61180096ad1b8f49923fdf77d740abf\"\u003e7d2e603\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ecomponent-meta\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003efix:\u003c/strong\u003e stop checking JS Vue files as TS (\u003ca href=\"https://github.com/vuejs/language-tools/commit/045a6a7eb5afa987b09a85a483eef118cbdcaaf3\"\u003e045a6a7\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003etypescript-plugin\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003efix:\u003c/strong\u003e don't abort reference span fix-up at style-less files (\u003ca href=\"https://github.com/vuejs/language-tools/commit/e46126c95682751ed2702355794563550a270edf\"\u003ee46126c\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003etsc\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003efix:\u003c/strong\u003e prevent watch mode crash on incremental build (\u003ca href=\"https://github.com/vuejs/language-tools/commit/a59da367002ffeb530edd8371493539d5387ea33\"\u003ea59da36\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003evscode\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eperf:\u003c/strong\u003e reduce focus mode overhead (\u003ca href=\"https://github.com/vuejs/language-tools/commit/b0936d1c77b68dcc5d888dfd670fe527c5c8ce0d\"\u003eb0936d1\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eContributors: \u003ca href=\"https://github.com/johnsoncodehk\"\u003e\u003ccode\u003e@​johnsoncodehk\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/serkodev\"\u003e\u003ccode\u003e@​serkodev\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/KazariEX\"\u003e\u003ccode\u003e@​KazariEX\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/00200200\"\u003e\u003ccode\u003e@​00200200\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/camonunez\"\u003e\u003ccode\u003e@​camonunez\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/Cherry\"\u003e\u003ccode\u003e@​Cherry\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/hungateJoseph\"\u003e\u003ccode\u003e@​hungateJoseph\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/uturnr\"\u003e\u003ccode\u003e@​uturnr\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/ValentinYoushkevich\"\u003e\u003ccode\u003e@​ValentinYoushkevich\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/xia-chao\"\u003e\u003ccode\u003e@​xia-chao\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vuejs/language-tools/commit/f2d92d3f1cb5513268fff358993f163e78d4821a\"\u003e\u003ccode\u003ef2d92d3\u003c/code\u003e\u003c/a\u003e v3.3.13 (\u003ca href=\"https://github.com/vuejs/language-tools/tree/HEAD/packages/tsc/issues/6263\"\u003e#6263\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vuejs/language-tools/commit/cea069882606d62b31199a75a3013b99d3db7144\"\u003e\u003ccode\u003ecea0698\u003c/code\u003e\u003c/a\u003e v3.3.12 (\u003ca href=\"https://github.com/vuejs/language-tools/tree/HEAD/packages/tsc/issues/6234\"\u003e#6234\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vuejs/language-tools/commit/d4d41393fa9a5e626b65633518bb5fa5647b7224\"\u003e\u003ccode\u003ed4d4139\u003c/code\u003e\u003c/a\u003e fix(language-core): stop typedef jsdoc from leaking into emitted dts\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vuejs/language-tools/commit/045a6a7eb5afa987b09a85a483eef118cbdcaaf3\"\u003e\u003ccode\u003e045a6a7\u003c/code\u003e\u003c/a\u003e fix(component-meta): stop checking JS Vue files as TS (\u003ca href=\"https://github.com/vuejs/language-tools/tree/HEAD/packages/tsc/issues/6231\"\u003e#6231\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vuejs/language-tools/commit/a59da367002ffeb530edd8371493539d5387ea33\"\u003e\u003ccode\u003ea59da36\u003c/code\u003e\u003c/a\u003e fix(tsc): prevent watch mode crash on incremental build (\u003ca href=\"https://github.com/vuejs/language-tools/tree/HEAD/packages/tsc/issues/6213\"\u003e#6213\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vuejs/language-tools/commit/94052b85199f8d1ea5458c02ce70c3ce99a871ee\"\u003e\u003ccode\u003e94052b8\u003c/code\u003e\u003c/a\u003e fix(language-core): pad directive hook signatures to check short-arity direct...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vuejs/language-tools/commit/ffb85e57723d4a1a5107d43c0a09408814c4608a\"\u003e\u003ccode\u003effb85e5\u003c/code\u003e\u003c/a\u003e fix(language-core): report duplicate non-identifier CSS module names (\u003ca href=\"https://github.com/vuejs/language-tools/tree/HEAD/packages/tsc/issues/6199\"\u003e#6199\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vuejs/language-tools/commit/d41d919b003c541a3af26982d9509162d01b0997\"\u003e\u003ccode\u003ed41d919\u003c/code\u003e\u003c/a\u003e feat(language-core): report duplicate CSS module names (\u003ca href=\"https://github.com/vuejs/language-tools/tree/HEAD/packages/tsc/issues/6198\"\u003e#6198\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vuejs/language-tools/commit/3167acfd69b98d1442e9cd21df8ba3c13f054451\"\u003e\u003ccode\u003e3167acf\u003c/code\u003e\u003c/a\u003e test(tsc): assert emitted declarations are self-contained and add jsxSlots te...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vuejs/language-tools/commit/d797f44e6e1a0a778c34db3ca7314ca75199f29c\"\u003e\u003ccode\u003ed797f44\u003c/code\u003e\u003c/a\u003e chore(deps): upgrade Vue to 3.6.0-rc.6 (\u003ca href=\"https://github.com/vuejs/language-tools/tree/HEAD/packages/tsc/issues/6189\"\u003e#6189\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vuejs/language-tools/commits/v3.3.13/packages/tsc\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@nestjs/common` from 12.0.1 to 12.1.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nestjs/nest/releases\"\u003e@​nestjs/common's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev12.1.3 (2026-10-12)\u003c/h2\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ecore\u003c/code\u003e, \u003ccode\u003emicroservices\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/18111\"\u003e#18111\u003c/a\u003e fix(core,microservices): flush buffered logs when initialization fails (\u003ca href=\"https://github.com/thekhegay\"\u003e\u003ccode\u003e@​thekhegay\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/17993\"\u003e#17993\u003c/a\u003e fix(core,microservices): run transient global enhancers on controllers (\u003ca href=\"https://github.com/johnnyhuirilef\"\u003e\u003ccode\u003e@​johnnyhuirilef\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eplatform-express\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/18110\"\u003e#18110\u003c/a\u003e fix(express): guard async request hook completion (\u003ca href=\"https://github.com/GiHoon1123\"\u003e\u003ccode\u003e@​GiHoon1123\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/17973\"\u003e#17973\u003c/a\u003e fix(express): destroy the \u003ccode\u003eStreamableFile\u003c/code\u003e source on client disconnect (\u003ca href=\"https://github.com/maxymlyskov\"\u003e\u003ccode\u003e@​maxymlyskov\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/17942\"\u003e#17942\u003c/a\u003e fix(express): run wildcard middleware on the bare global prefix path (\u003ca href=\"https://github.com/Chaoqi31\"\u003e\u003ccode\u003e@​Chaoqi31\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ecore\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/18104\"\u003e#18104\u003c/a\u003e fix(core): fail at startup for request-scoped class global enhancers (\u003ca href=\"https://github.com/thekhegay\"\u003e\u003ccode\u003e@​thekhegay\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/18066\"\u003e#18066\u003c/a\u003e fix(core): stop silently dropping request-scoped global enhancers (\u003ca href=\"https://github.com/OmBhandwaldar\"\u003e\u003ccode\u003e@​OmBhandwaldar\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/18072\"\u003e#18072\u003c/a\u003e fix(core): resolve uri versioned exclusions for the not-found handler (\u003ca href=\"https://github.com/basteez\"\u003e\u003ccode\u003e@​basteez\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/18075\"\u003e#18075\u003c/a\u003e fix(core): normalize slashes when mapping controllers for middleware (\u003ca href=\"https://github.com/basteez\"\u003e\u003ccode\u003e@​basteez\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/18086\"\u003e#18086\u003c/a\u003e fix(core): do not mutate the message when assigning an sse event id (\u003ca href=\"https://github.com/Metehan-Bicer\"\u003e\u003ccode\u003e@​Metehan-Bicer\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/18025\"\u003e#18025\u003c/a\u003e fix(core): end sse streams whose event data cannot be serialized (\u003ca href=\"https://github.com/OmBhandwaldar\"\u003e\u003ccode\u003e@​OmBhandwaldar\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/18011\"\u003e#18011\u003c/a\u003e fix(core): send status and headers set by handlers on sse responses (\u003ca href=\"https://github.com/johnnyhuirilef\"\u003e\u003ccode\u003e@​johnnyhuirilef\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/18021\"\u003e#18021\u003c/a\u003e fix(core): honor a shutdown signal received while close() is in flight (\u003ca href=\"https://github.com/maxymlyskov\"\u003e\u003ccode\u003e@​maxymlyskov\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/17987\"\u003e#17987\u003c/a\u003e fix(core): settle SSE lifecycle on early disconnect (\u003ca href=\"https://github.com/jackie-cqz\"\u003e\u003ccode\u003e@​jackie-cqz\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/17986\"\u003e#17986\u003c/a\u003e fix(core): commit SSE headers for empty streams (\u003ca href=\"https://github.com/jackie-cqz\"\u003e\u003ccode\u003e@​jackie-cqz\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/17978\"\u003e#17978\u003c/a\u003e fix...\n\n_Description has been truncated_","html_url":"https://github.com/MCXTeam/UnicoreCMS/pull/20","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/MCXTeam%2FUnicoreCMS/issues/20","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/20/packages"},{"uuid":"5876348599","node_id":"PR_kwDOVA41Rs8AAAABIvsltw","number":61,"state":"closed","title":"Bump the all-prod group across 1 directory with 7 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-10-20T21:16:15.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-16T00:56:06.000Z","updated_at":"2026-10-20T21:16:18.000Z","time_to_close":418809,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"all-prod","update_count":7,"packages":[{"name":"@rooks/use-window-size","old_version":"4.6.1","new_version":"4.11.2","repository_url":"https://github.com/imbhargav5/rooks"},{"name":"lodash","old_version":"4.17.11","new_version":"4.18.1","repository_url":"https://github.com/lodash/lodash"},{"name":"@types/lodash","old_version":"4.14.153","new_version":"4.17.26","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"moment","old_version":"2.26.0","new_version":"2.31.0","repository_url":"https://github.com/moment/moment"},{"name":"redux-devtools-extension","old_version":"2.13.8","new_version":"2.13.9","repository_url":"https://github.com/zalmoxisus/redux-devtools-extension"},{"name":"voca","old_version":"1.4.0","new_version":"1.4.1","repository_url":"https://github.com/panzerdp/voca"},{"name":"@types/voca","old_version":"1.4.0","new_version":"1.4.6","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"}],"path":null,"ecosystem":"npm"},"body":"Bumps the all-prod group with 7 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [@rooks/use-window-size](https://github.com/imbhargav5/rooks/tree/HEAD/packages/window-size) | `4.6.1` | `4.11.2` |\n| [lodash](https://github.com/lodash/lodash) | `4.17.11` | `4.18.1` |\n| [@types/lodash](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/lodash) | `4.14.153` | `4.17.26` |\n| [moment](https://github.com/moment/moment) | `2.26.0` | `2.31.0` |\n| [redux-devtools-extension](https://github.com/zalmoxisus/redux-devtools-extension) | `2.13.8` | `2.13.9` |\n| [voca](https://github.com/panzerdp/voca) | `1.4.0` | `1.4.1` |\n| [@types/voca](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/voca) | `1.4.0` | `1.4.6` |\n\n\nUpdates `@rooks/use-window-size` from 4.6.1 to 4.11.2\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/imbhargav5/rooks/commit/06505ee4cb6785a3edc51ccf99cb6401823a5171\"\u003e\u003ccode\u003e06505ee\u003c/code\u003e\u003c/a\u003e v4.11.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/imbhargav5/rooks/commit/333dac254010f1a9eb04bd846d1089bcf7a75fea\"\u003e\u003ccode\u003e333dac2\u003c/code\u003e\u003c/a\u003e update readme images\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/imbhargav5/rooks/commit/0f163c1b47a40459f8070239dfbf9ebde4d155b8\"\u003e\u003ccode\u003e0f163c1\u003c/code\u003e\u003c/a\u003e v4.11.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/imbhargav5/rooks/commit/a84cb3b10e24b8c088ad75fb6f0106aff4f172ac\"\u003e\u003ccode\u003ea84cb3b\u003c/code\u003e\u003c/a\u003e update readme\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/imbhargav5/rooks/commit/91a8a1d3598527b916a247d370612f9af6d40594\"\u003e\u003ccode\u003e91a8a1d\u003c/code\u003e\u003c/a\u003e v4.11.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/imbhargav5/rooks/commit/c24b903fe26de2a6e881790749a291552a4395cd\"\u003e\u003ccode\u003ec24b903\u003c/code\u003e\u003c/a\u003e v4.10.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/imbhargav5/rooks/commit/88d2b9eb6e408ad2458a39e0ed3c8fa2b1664ce9\"\u003e\u003ccode\u003e88d2b9e\u003c/code\u003e\u003c/a\u003e v4.10.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/imbhargav5/rooks/commit/b71eb75f82f653d8d6ccc88034220a0743959743\"\u003e\u003ccode\u003eb71eb75\u003c/code\u003e\u003c/a\u003e v4.9.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/imbhargav5/rooks/commit/d1a9b493367d81d3822326acdc9d23718671cfa4\"\u003e\u003ccode\u003ed1a9b49\u003c/code\u003e\u003c/a\u003e v4.9.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/imbhargav5/rooks/commit/23c70566e0f6d85534d3da21692415e473e1240c\"\u003e\u003ccode\u003e23c7056\u003c/code\u003e\u003c/a\u003e Reduce npm bundle size (\u003ca href=\"https://github.com/imbhargav5/rooks/tree/HEAD/packages/window-size/issues/378\"\u003e#378\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/imbhargav5/rooks/commits/v4.11.2/packages/window-size\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `lodash` from 4.17.11 to 4.18.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/lodash/lodash/releases\"\u003elodash's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.18.1\u003c/h2\u003e\n\u003ch2\u003eBugs\u003c/h2\u003e\n\u003cp\u003eFixes a \u003ccode\u003eReferenceError\u003c/code\u003e issue in \u003ccode\u003elodash\u003c/code\u003e \u003ccode\u003elodash-es\u003c/code\u003e \u003ccode\u003elodash-amd\u003c/code\u003e and \u003ccode\u003elodash.template\u003c/code\u003e when using the \u003ccode\u003etemplate\u003c/code\u003e and \u003ccode\u003efromPairs\u003c/code\u003e functions from the modular builds. See \u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6167#issuecomment-4165269769\"\u003elodash/lodash#6167\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eThese defects were related to how lodash distributions are built from the main branch using \u003ca href=\"https://github.com/lodash-archive/lodash-cli\"\u003ehttps://github.com/lodash-archive/lodash-cli\u003c/a\u003e. When internal dependencies change inside lodash functions, equivalent updates need to be made to a mapping in the lodash-cli. (hey, it was ahead of its time once upon a time!). We know this, but we missed it in the last release. It's the kind of thing that passes in CI, but fails bc the build is not the same thing you tested.\u003c/p\u003e\n\u003cp\u003eThere is no diff on main for this, but you can see the diffs for each of the npm packages on their respective branches:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003elodash\u003c/code\u003e: \u003ca href=\"https://github.com/lodash/lodash/compare/4.18.0-npm...4.18.1-npm\"\u003ehttps://github.com/lodash/lodash/compare/4.18.0-npm...4.18.1-npm\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003elodash-es\u003c/code\u003e: \u003ca href=\"https://github.com/lodash/lodash/compare/4.18.0-es...4.18.1-es\"\u003ehttps://github.com/lodash/lodash/compare/4.18.0-es...4.18.1-es\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003elodash-amd\u003c/code\u003e: \u003ca href=\"https://github.com/lodash/lodash/compare/4.18.0-amd...4.18.1-amd\"\u003ehttps://github.com/lodash/lodash/compare/4.18.0-amd...4.18.1-amd\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003elodash.template\u003c/code\u003e\u003ca href=\"https://github.com/lodash/lodash/compare/4.18.0-npm-packages...4.18.1-npm-packages\"\u003ehttps://github.com/lodash/lodash/compare/4.18.0-npm-packages...4.18.1-npm-packages\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.18.0\u003c/h2\u003e\n\u003ch2\u003ev4.18.0\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/lodash/lodash/compare/4.17.23...4.18.0\"\u003ehttps://github.com/lodash/lodash/compare/4.17.23...4.18.0\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cp\u003e\u003cstrong\u003e\u003ccode\u003e_.unset\u003c/code\u003e / \u003ccode\u003e_.omit\u003c/code\u003e\u003c/strong\u003e: Fixed prototype pollution via \u003ccode\u003econstructor\u003c/code\u003e/\u003ccode\u003eprototype\u003c/code\u003e path traversal (\u003ca href=\"https://github.com/lodash/lodash/security/advisories/GHSA-f23m-r3pf-42rh\"\u003eGHSA-f23m-r3pf-42rh\u003c/a\u003e, \u003ca href=\"https://github.com/lodash/lodash/commit/fe8d32eda854377349a4f922ab7655c8e5df9a0b\"\u003efe8d32e\u003c/a\u003e). Previously, array-wrapped path segments and primitive roots could bypass the existing guards, allowing deletion of properties from built-in prototypes. Now \u003ccode\u003econstructor\u003c/code\u003e and \u003ccode\u003eprototype\u003c/code\u003e are blocked unconditionally as non-terminal path keys, matching \u003ccode\u003ebaseSet\u003c/code\u003e. Calls that previously returned \u003ccode\u003etrue\u003c/code\u003e and deleted the property now return \u003ccode\u003efalse\u003c/code\u003e and leave the target untouched.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e\u003ccode\u003e_.template\u003c/code\u003e\u003c/strong\u003e: Fixed code injection via \u003ccode\u003eimports\u003c/code\u003e keys (\u003ca href=\"https://github.com/lodash/lodash/security/advisories/GHSA-r5fr-rjxr-66jc\"\u003eGHSA-r5fr-rjxr-66jc\u003c/a\u003e, CVE-2026-4800, \u003ca href=\"https://github.com/lodash/lodash/commit/879aaa93132d78c2f8d20c60279da9f8b21576d6\"\u003e879aaa9\u003c/a\u003e). Fixes an incomplete patch for CVE-2021-23337. The \u003ccode\u003evariable\u003c/code\u003e option was validated against \u003ccode\u003ereForbiddenIdentifierChars\u003c/code\u003e but \u003ccode\u003eimportsKeys\u003c/code\u003e was left unguarded, allowing code injection via the same \u003ccode\u003eFunction()\u003c/code\u003e constructor sink. \u003ccode\u003eimports\u003c/code\u003e keys containing forbidden identifier characters now throw \u003ccode\u003e\u0026quot;Invalid imports option passed into _.template\u0026quot;\u003c/code\u003e.\u003c/p\u003e\n\u003ch3\u003eDocs\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd security notice for \u003ccode\u003e_.template\u003c/code\u003e in threat model and API docs (\u003ca href=\"https://redirect.github.com/lodash/lodash/pull/6099\"\u003e#6099\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocument \u003ccode\u003elower \u0026gt; upper\u003c/code\u003e behavior in \u003ccode\u003e_.random\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/lodash/lodash/pull/6115\"\u003e#6115\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix quotes in \u003ccode\u003e_.compact\u003c/code\u003e jsdoc (\u003ca href=\"https://redirect.github.com/lodash/lodash/pull/6090\"\u003e#6090\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e\u003ccode\u003elodash.*\u003c/code\u003e modular packages\u003c/h3\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/lodash/lodash/pull/6157\"\u003eDiff\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eWe have also regenerated and published a select number of the \u003ccode\u003elodash.*\u003c/code\u003e modular packages.\u003c/p\u003e\n\u003cp\u003eThese modular packages had fallen out of sync significantly from the minor/patch updates to lodash. Specifically, we have brought the following packages up to parity w/ the latest lodash release because they have had CVEs on them in the past:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.orderby\"\u003elodash.orderby\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.tonumber\"\u003elodash.tonumber\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.trim\"\u003elodash.trim\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.trimend\"\u003elodash.trimend\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.sortedindexby\"\u003elodash.sortedindexby\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.zipobjectdeep\"\u003elodash.zipobjectdeep\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.unset\"\u003elodash.unset\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.omit\"\u003elodash.omit\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.template\"\u003elodash.template\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/cb0b9b9212521c08e3eafe7c8cb0af1b42b6649e\"\u003e\u003ccode\u003ecb0b9b9\u003c/code\u003e\u003c/a\u003e release(patch): bump main to 4.18.1 (\u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6177\"\u003e#6177\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/75535f57883b7225adb96de1cfc1cd4169cfcb51\"\u003e\u003ccode\u003e75535f5\u003c/code\u003e\u003c/a\u003e chore: prune stale advisory refs (\u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6170\"\u003e#6170\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/62e91bc6a39c98d85b9ada8c44d40593deaf82a4\"\u003e\u003ccode\u003e62e91bc\u003c/code\u003e\u003c/a\u003e docs: remove n_ Node.js \u0026lt; 6 REPL note from README (\u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6165\"\u003e#6165\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/59be2de61f8aa9461c7856533b51d31b7d8babc4\"\u003e\u003ccode\u003e59be2de\u003c/code\u003e\u003c/a\u003e release(minor): bump to 4.18.0 (\u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6161\"\u003e#6161\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/af634573030f979194871da7c68f79420992f53d\"\u003e\u003ccode\u003eaf63457\u003c/code\u003e\u003c/a\u003e fix: broken tests for _.template 879aaa9\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/1073a7693e1727e0cf3641e5f71f75ddcf8de7c0\"\u003e\u003ccode\u003e1073a76\u003c/code\u003e\u003c/a\u003e fix: linting issues\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/879aaa93132d78c2f8d20c60279da9f8b21576d6\"\u003e\u003ccode\u003e879aaa9\u003c/code\u003e\u003c/a\u003e fix: validate imports keys in _.template\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/fe8d32eda854377349a4f922ab7655c8e5df9a0b\"\u003e\u003ccode\u003efe8d32e\u003c/code\u003e\u003c/a\u003e fix: block prototype pollution in baseUnset via constructor/prototype traversal\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/18ba0a32f42fd02117f096b032f89c984173462d\"\u003e\u003ccode\u003e18ba0a3\u003c/code\u003e\u003c/a\u003e refactor(fromPairs): use baseAssignValue for consistent assignment (\u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6153\"\u003e#6153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/b8190803d48d60b8c80ad45d39125f32fa618cb2\"\u003e\u003ccode\u003eb819080\u003c/code\u003e\u003c/a\u003e ci: add dist sync validation workflow (\u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6137\"\u003e#6137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/lodash/lodash/compare/4.17.11...4.18.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@types/lodash` from 4.14.153 to 4.17.26\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/lodash\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `moment` from 2.26.0 to 2.31.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/releases\"\u003emoment's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.31.0\u003c/h2\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.30.1\u003c/h2\u003e\n\u003cp\u003eNote - this was not a new release, but rather just updating GitHub's \u003ccode\u003elatest\u003c/code\u003e release to indicate the existing version \u003ccode\u003e2.30.1\u003c/code\u003e from Dec 27, 2023.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/blob/develop/CHANGELOG.md\"\u003emoment's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch3\u003e2.31.0\u003c/h3\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e2.30.1\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/15b45d48a176312e8f34143c5a800090abf4787f\"\u003e\u003ccode\u003e15b45d4\u003c/code\u003e\u003c/a\u003e [pkg] Build 2.31.0 (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6452\"\u003e#6452\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/631cd81454ee001e1f508e21270eae0b6bb62974\"\u003e\u003ccode\u003e631cd81\u003c/code\u003e\u003c/a\u003e [pkg] Update changelog for upcoming release (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6394\"\u003e#6394\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/6caff9e0d54e85a63a6eb97d7361f1da35bc58f4\"\u003e\u003ccode\u003e6caff9e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/710703b7eac93535ad125cbf4feb3d42afed6fb3\"\u003e\u003ccode\u003e710703b\u003c/code\u003e\u003c/a\u003e [feature] Add internal date-default hook for Moment Timezone (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6451\"\u003e#6451\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/863ed940556e6e63c43de23981a4853036a003ac\"\u003e\u003ccode\u003e863ed94\u003c/code\u003e\u003c/a\u003e [bugfix] Add stack traces to conditional deprecation warnings (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6450\"\u003e#6450\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/2c7abe1c42ee15445d30c2c5d536750a1e43a09a\"\u003e\u003ccode\u003e2c7abe1\u003c/code\u003e\u003c/a\u003e [bugfix] Apply postformat to locale relative time methods (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6448\"\u003e#6448\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/9c45ac38690c649c95e19923276b63da5fe2be26\"\u003e\u003ccode\u003e9c45ac3\u003c/code\u003e\u003c/a\u003e [bugfix] Include metadata in all-locales bundle (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6447\"\u003e#6447\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/f6eefc5fc7b44ceccbd007aeffc48ebc5eac30fa\"\u003e\u003ccode\u003ef6eefc5\u003c/code\u003e\u003c/a\u003e [bugfix] Validate timezone offset range (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6446\"\u003e#6446\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/136b441794a3bb207d593add3b59e9de0e062523\"\u003e\u003ccode\u003e136b441\u003c/code\u003e\u003c/a\u003e [bugfix] Avoid Object.assign in duration.humanize (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6443\"\u003e#6443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/0d1050437b40f66ac47e14b285bb3d09676cf2e0\"\u003e\u003ccode\u003e0d10504\u003c/code\u003e\u003c/a\u003e [bugfix] Fix locale('\u003cstrong\u003eproto\u003c/strong\u003e') corrupting the global locale (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6442\"\u003e#6442\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moment/moment/compare/2.26.0...2.31.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for moment since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `redux-devtools-extension` from 2.13.8 to 2.13.9\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/zalmoxisus/redux-devtools-extension/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `voca` from 1.4.0 to 1.4.1\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/panzerdp/voca/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@types/voca` from 1.4.0 to 1.4.6\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/voca\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/midst-press/midst-web/pull/61","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/midst-press%2Fmidst-web/issues/61","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/61/packages"},{"uuid":"5834356709","node_id":"PR_kwDOC8t2HM8AAAABIOHL8A","number":5668,"state":"open","title":"chore(deps): bump moment from 2.30.1 to 2.31.0","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":6,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-13T16:58:02.000Z","updated_at":"2026-10-22T12:03:29.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"moment","old_version":"2.30.1","new_version":"2.31.0","repository_url":"https://github.com/moment/moment"}],"path":null,"ecosystem":"npm"},"body":"Bumps [moment](https://github.com/moment/moment) from 2.30.1 to 2.31.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/releases\"\u003emoment's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.31.0\u003c/h2\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/blob/develop/CHANGELOG.md\"\u003emoment's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch3\u003e2.31.0\u003c/h3\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/15b45d48a176312e8f34143c5a800090abf4787f\"\u003e\u003ccode\u003e15b45d4\u003c/code\u003e\u003c/a\u003e [pkg] Build 2.31.0 (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6452\"\u003e#6452\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/631cd81454ee001e1f508e21270eae0b6bb62974\"\u003e\u003ccode\u003e631cd81\u003c/code\u003e\u003c/a\u003e [pkg] Update changelog for upcoming release (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6394\"\u003e#6394\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/6caff9e0d54e85a63a6eb97d7361f1da35bc58f4\"\u003e\u003ccode\u003e6caff9e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/710703b7eac93535ad125cbf4feb3d42afed6fb3\"\u003e\u003ccode\u003e710703b\u003c/code\u003e\u003c/a\u003e [feature] Add internal date-default hook for Moment Timezone (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6451\"\u003e#6451\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/863ed940556e6e63c43de23981a4853036a003ac\"\u003e\u003ccode\u003e863ed94\u003c/code\u003e\u003c/a\u003e [bugfix] Add stack traces to conditional deprecation warnings (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6450\"\u003e#6450\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/2c7abe1c42ee15445d30c2c5d536750a1e43a09a\"\u003e\u003ccode\u003e2c7abe1\u003c/code\u003e\u003c/a\u003e [bugfix] Apply postformat to locale relative time methods (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6448\"\u003e#6448\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/9c45ac38690c649c95e19923276b63da5fe2be26\"\u003e\u003ccode\u003e9c45ac3\u003c/code\u003e\u003c/a\u003e [bugfix] Include metadata in all-locales bundle (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6447\"\u003e#6447\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/f6eefc5fc7b44ceccbd007aeffc48ebc5eac30fa\"\u003e\u003ccode\u003ef6eefc5\u003c/code\u003e\u003c/a\u003e [bugfix] Validate timezone offset range (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6446\"\u003e#6446\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/136b441794a3bb207d593add3b59e9de0e062523\"\u003e\u003ccode\u003e136b441\u003c/code\u003e\u003c/a\u003e [bugfix] Avoid Object.assign in duration.humanize (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6443\"\u003e#6443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/0d1050437b40f66ac47e14b285bb3d09676cf2e0\"\u003e\u003ccode\u003e0d10504\u003c/code\u003e\u003c/a\u003e [bugfix] Fix locale('\u003cstrong\u003eproto\u003c/strong\u003e') corrupting the global locale (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6442\"\u003e#6442\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moment/moment/compare/2.30.1...2.31.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for moment since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n","html_url":"https://github.com/rudderlabs/rudder-transformer/pull/5668","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/rudderlabs%2Frudder-transformer/issues/5668","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/5668/packages"},{"uuid":"5799225961","node_id":"PR_kwDODLSLdM8AAAABHyaMPQ","number":929,"state":"closed","title":"Bump moment from 2.30.1 to 2.31.0","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-10-11T08:08:44.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-11T08:02:13.000Z","updated_at":"2026-10-11T08:08:53.000Z","time_to_close":391,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"moment","old_version":"2.30.1","new_version":"2.31.0","repository_url":"https://github.com/moment/moment"}],"path":null,"ecosystem":"npm"},"body":"Bumps [moment](https://github.com/moment/moment) from 2.30.1 to 2.31.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/releases\"\u003emoment's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.31.0\u003c/h2\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/blob/develop/CHANGELOG.md\"\u003emoment's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch3\u003e2.31.0\u003c/h3\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/15b45d48a176312e8f34143c5a800090abf4787f\"\u003e\u003ccode\u003e15b45d4\u003c/code\u003e\u003c/a\u003e [pkg] Build 2.31.0 (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6452\"\u003e#6452\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/631cd81454ee001e1f508e21270eae0b6bb62974\"\u003e\u003ccode\u003e631cd81\u003c/code\u003e\u003c/a\u003e [pkg] Update changelog for upcoming release (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6394\"\u003e#6394\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/6caff9e0d54e85a63a6eb97d7361f1da35bc58f4\"\u003e\u003ccode\u003e6caff9e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/710703b7eac93535ad125cbf4feb3d42afed6fb3\"\u003e\u003ccode\u003e710703b\u003c/code\u003e\u003c/a\u003e [feature] Add internal date-default hook for Moment Timezone (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6451\"\u003e#6451\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/863ed940556e6e63c43de23981a4853036a003ac\"\u003e\u003ccode\u003e863ed94\u003c/code\u003e\u003c/a\u003e [bugfix] Add stack traces to conditional deprecation warnings (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6450\"\u003e#6450\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/2c7abe1c42ee15445d30c2c5d536750a1e43a09a\"\u003e\u003ccode\u003e2c7abe1\u003c/code\u003e\u003c/a\u003e [bugfix] Apply postformat to locale relative time methods (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6448\"\u003e#6448\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/9c45ac38690c649c95e19923276b63da5fe2be26\"\u003e\u003ccode\u003e9c45ac3\u003c/code\u003e\u003c/a\u003e [bugfix] Include metadata in all-locales bundle (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6447\"\u003e#6447\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/f6eefc5fc7b44ceccbd007aeffc48ebc5eac30fa\"\u003e\u003ccode\u003ef6eefc5\u003c/code\u003e\u003c/a\u003e [bugfix] Validate timezone offset range (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6446\"\u003e#6446\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/136b441794a3bb207d593add3b59e9de0e062523\"\u003e\u003ccode\u003e136b441\u003c/code\u003e\u003c/a\u003e [bugfix] Avoid Object.assign in duration.humanize (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6443\"\u003e#6443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/0d1050437b40f66ac47e14b285bb3d09676cf2e0\"\u003e\u003ccode\u003e0d10504\u003c/code\u003e\u003c/a\u003e [bugfix] Fix locale('\u003cstrong\u003eproto\u003c/strong\u003e') corrupting the global locale (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6442\"\u003e#6442\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moment/moment/compare/2.30.1...2.31.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for moment since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=moment\u0026package-manager=npm_and_yarn\u0026previous-version=2.30.1\u0026new-version=2.31.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/DrozmotiX/ioBroker.vedirect/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/DrozmotiX/ioBroker.vedirect/pull/929","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/DrozmotiX%2FioBroker.vedirect/issues/929","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/929/packages"},{"uuid":"5777457520","node_id":"PR_kwDOUvKxIM8AAAABHhhI1Q","number":42,"state":"open","title":"chore(deps): bump the production-dependencies group across 1 directory with 56 updates","user":"dependabot[bot]","labels":["dependencies","backend","frontend","size/xl"],"assignees":[],"locked":false,"comments_count":4,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-09T11:37:43.000Z","updated_at":"2026-10-09T11:41:10.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"production-dependencies","update_count":56,"packages":[{"name":"@tanstack/react-query","old_version":"5.90.12","new_version":"5.104.1","repository_url":"https://github.com/TanStack/query"},{"name":"express-rate-limit","old_version":"8.2.1","new_version":"8.7.1","repository_url":"https://github.com/express-rate-limit/express-rate-limit"},{"name":"react-joyride","old_version":"3.0.0-7","new_version":"3.2.0","repository_url":"https://github.com/gilbarbara/react-joyride"},{"name":"react-native-reanimated","old_version":"4.2.0","new_version":"4.7.1","repository_url":"https://github.com/software-mansion/react-native-reanimated"},{"name":"react-native-worklets","old_version":"0.7.1","new_version":"0.13.0","repository_url":"https://github.com/software-mansion/react-native-reanimated"},{"name":"resend","old_version":"6.5.2","new_version":"6.32.0","repository_url":"https://github.com/resend/resend-node"},{"name":"swagger-jsdoc","old_version":"6.2.8","new_version":"6.3.0","repository_url":"https://github.com/Surnet/swagger-jsdoc"},{"name":"react","old_version":"19.2.1","new_version":"19.3.0","repository_url":"https://github.com/react/react"},{"name":"react-dom","old_version":"19.2.1","new_version":"19.3.0","repository_url":"https://github.com/react/react"},{"name":"@esbuild/linux-x64","old_version":"0.27.1","new_version":"0.28.2","repository_url":"https://github.com/evanw/esbuild"},{"name":"@rollup/rollup-linux-x64-gnu","old_version":"4.53.3","new_version":"4.64.0","repository_url":"https://github.com/rollup/rollup"},{"name":"@tailwindcss/oxide-linux-x64-gnu","old_version":"4.1.17","new_version":"4.3.3","repository_url":"https://github.com/tailwindlabs/tailwindcss"},{"name":"lightningcss-linux-x64-gnu","old_version":"1.30.2","new_version":"1.33.0","repository_url":"https://github.com/parcel-bundler/lightningcss"},{"name":"cors","old_version":"2.8.5","new_version":"2.8.6","repository_url":"https://github.com/expressjs/cors"},{"name":"helmet","old_version":"8.1.0","new_version":"8.3.0","repository_url":"https://github.com/helmetjs/helmet"},{"name":"morgan","old_version":"1.10.1","new_version":"1.12.1","repository_url":"https://github.com/expressjs/morgan"},{"name":"multer","old_version":"2.0.2","new_version":"2.4.0","repository_url":"https://github.com/expressjs/multer"},{"name":"@types/multer","old_version":"2.0.0","new_version":"2.3.0","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"papaparse","old_version":"5.5.3","new_version":"5.7.0","repository_url":"https://github.com/mholt/PapaParse"},{"name":"@types/papaparse","old_version":"5.5.1","new_version":"5.5.2","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"zod","old_version":"4.0.17","new_version":"3.25.76","repository_url":"https://github.com/colinhacks/zod"},{"name":"@opentelemetry/api","old_version":"1.9.0","new_version":"1.9.1","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@opentelemetry/core","old_version":"2.2.0","new_version":"2.11.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@opentelemetry/instrumentation","old_version":"0.208.0","new_version":"0.222.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@opentelemetry/instrumentation-http","old_version":"0.208.0","new_version":"0.222.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@opentelemetry/semantic-conventions","old_version":"1.38.0","new_version":"1.43.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@anthropic-ai/sdk","old_version":"0.52.0","new_version":"0.131.0","repository_url":"https://github.com/anthropics/anthropic-sdk-typescript"},{"name":"date-fns","old_version":"4.1.0","new_version":"4.4.0","repository_url":"https://github.com/date-fns/date-fns"},{"name":"knex","old_version":"3.1.0","new_version":"3.3.0","repository_url":"https://github.com/knex/knex"},{"name":"pg","old_version":"8.16.3","new_version":"8.23.1","repository_url":"https://github.com/brianc/node-postgres"},{"name":"pino","old_version":"10.1.0","new_version":"10.4.0","repository_url":"https://github.com/pinojs/pino"},{"name":"pino-pretty","old_version":"13.1.3","new_version":"13.2.0","repository_url":"https://github.com/pinojs/pino-pretty"},{"name":"sanitize-html","old_version":"2.17.0","new_version":"2.18.0","repository_url":"https://github.com/apostrophecms/apostrophe"},{"name":"@react-navigation/bottom-tabs","old_version":"7.8.12","new_version":"7.20.0","repository_url":"https://github.com/react-navigation/react-navigation"},{"name":"@react-navigation/native","old_version":"7.1.25","new_version":"7.5.0","repository_url":"https://github.com/react-navigation/react-navigation"},{"name":"@react-navigation/native-stack","old_version":"7.8.6","new_version":"7.20.0","repository_url":"https://github.com/react-navigation/react-navigation"},{"name":"react-native-maps","old_version":"1.26.20","new_version":"1.29.11","repository_url":"https://github.com/react-native-maps/react-native-maps"},{"name":"react-native-paper","old_version":"5.14.5","new_version":"5.15.3","repository_url":"https://github.com/callstack/react-native-paper"},{"name":"react-native-safe-area-context","old_version":"5.6.2","new_version":"5.10.1","repository_url":"https://github.com/appandflow/react-native-safe-area-context"},{"name":"react-native-screens","old_version":"4.18.0","new_version":"4.28.0","repository_url":"https://github.com/software-mansion/react-native-screens"},{"name":"react-native-signature-canvas","old_version":"5.0.1","new_version":"5.1.1","repository_url":"https://github.com/YanYuanFE/react-native-signature-canvas"},{"name":"react-native-web","old_version":"0.21.2","new_version":"0.21.3","repository_url":"https://github.com/necolas/react-native-web"},{"name":"zustand","old_version":"5.0.9","new_version":"5.0.15","repository_url":"https://github.com/pmndrs/zustand"},{"name":"@headlessui/react","old_version":"2.2.9","new_version":"2.2.10","repository_url":"https://github.com/tailwindlabs/headlessui"},{"name":"@hookform/resolvers","old_version":"5.2.2","new_version":"5.9.1","repository_url":"https://github.com/react-hook-form/resolvers"},{"name":"moment","old_version":"2.30.1","new_version":"2.31.0","repository_url":"https://github.com/moment/moment"},{"name":"react-big-calendar","old_version":"1.19.4","new_version":"1.20.0","repository_url":"https://github.com/bigcalendar/react-big-calendar"},{"name":"react-hook-form","old_version":"7.68.0","new_version":"7.89.0","repository_url":"https://github.com/react-hook-form/react-hook-form"},{"name":"react-hot-toast","old_version":"2.6.0","new_version":"2.6.1","repository_url":"https://github.com/timolins/react-hot-toast"},{"name":"react-is","old_version":"19.2.1","new_version":"19.3.0","repository_url":"https://github.com/react/react"},{"name":"react-router-dom","old_version":"7.10.1","new_version":"7.18.4","repository_url":"https://github.com/remix-run/react-router"},{"name":"recharts","old_version":"3.5.1","new_version":"3.10.1","repository_url":"https://github.com/recharts/recharts"},{"name":"jspdf-autotable","old_version":"5.0.2","new_version":"5.0.8","repository_url":"https://github.com/simonbengtsson/jsPDF-AutoTable"},{"name":"pdfkit","old_version":"0.17.2","new_version":"0.20.2","repository_url":"https://github.com/foliojs/pdfkit"},{"name":"axios","old_version":"1.13.2","new_version":"1.20.0","repository_url":"https://github.com/axios/axios"},{"name":"driver.js","old_version":"1.4.0","new_version":"1.9.0","repository_url":"https://github.com/nilbuild/driver.js"}],"path":null,"ecosystem":"npm"},"body":"Bumps the production-dependencies group with 56 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.90.12` | `5.104.1` |\n| [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit) | `8.2.1` | `8.7.1` |\n| [react-joyride](https://github.com/gilbarbara/react-joyride) | `3.0.0-7` | `3.2.0` |\n| [react-native-reanimated](https://github.com/software-mansion/react-native-reanimated/tree/HEAD/packages/react-native-reanimated) | `4.2.0` | `4.7.1` |\n| [react-native-worklets](https://github.com/software-mansion/react-native-reanimated/tree/HEAD/packages/react-native-worklets) | `0.7.1` | `0.13.0` |\n| [resend](https://github.com/resend/resend-node) | `6.5.2` | `6.32.0` |\n| [swagger-jsdoc](https://github.com/Surnet/swagger-jsdoc) | `6.2.8` | `6.3.0` |\n| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.1` | `19.3.0` |\n| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.1` | `19.3.0` |\n| [@esbuild/linux-x64](https://github.com/evanw/esbuild) | `0.27.1` | `0.28.2` |\n| [@rollup/rollup-linux-x64-gnu](https://github.com/rollup/rollup) | `4.53.3` | `4.64.0` |\n| [@tailwindcss/oxide-linux-x64-gnu](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/crates/node/npm/linux-x64-gnu) | `4.1.17` | `4.3.3` |\n| [lightningcss-linux-x64-gnu](https://github.com/parcel-bundler/lightningcss) | `1.30.2` | `1.33.0` |\n| [cors](https://github.com/expressjs/cors) | `2.8.5` | `2.8.6` |\n| [helmet](https://github.com/helmetjs/helmet) | `8.1.0` | `8.3.0` |\n| [morgan](https://github.com/expressjs/morgan) | `1.10.1` | `1.12.1` |\n| [multer](https://github.com/expressjs/multer) | `2.0.2` | `2.4.0` |\n| [@types/multer](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/multer) | `2.0.0` | `2.3.0` |\n| [papaparse](https://github.com/mholt/PapaParse) | `5.5.3` | `5.7.0` |\n| [@types/papaparse](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/papaparse) | `5.5.1` | `5.5.2` |\n| [zod](https://github.com/colinhacks/zod) | `4.0.17` | `3.25.76` |\n| [@opentelemetry/api](https://github.com/open-telemetry/opentelemetry-js) | `1.9.0` | `1.9.1` |\n| [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) | `2.2.0` | `2.11.0` |\n| [@opentelemetry/instrumentation](https://github.com/open-telemetry/opentelemetry-js) | `0.208.0` | `0.222.0` |\n| [@opentelemetry/instrumentation-http](https://github.com/open-telemetry/opentelemetry-js) | `0.208.0` | `0.222.0` |\n| [@opentelemetry/semantic-conventions](https://github.com/open-telemetry/opentelemetry-js) | `1.38.0` | `1.43.0` |\n| [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) | `0.52.0` | `0.131.0` |\n| [date-fns](https://github.com/date-fns/date-fns) | `4.1.0` | `4.4.0` |\n| [knex](https://github.com/knex/knex) | `3.1.0` | `3.3.0` |\n| [pg](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg) | `8.16.3` | `8.23.1` |\n| [pino](https://github.com/pinojs/pino) | `10.1.0` | `10.4.0` |\n| [pino-pretty](https://github.com/pinojs/pino-pretty) | `13.1.3` | `13.2.0` |\n| [sanitize-html](https://github.com/apostrophecms/apostrophe/tree/HEAD/packages/sanitize-html) | `2.17.0` | `2.18.0` |\n| [@react-navigation/bottom-tabs](https://github.com/react-navigation/react-navigation/tree/HEAD/packages/bottom-tabs) | `7.8.12` | `7.20.0` |\n| [@react-navigation/native](https://github.com/react-navigation/react-navigation/tree/HEAD/packages/native) | `7.1.25` | `7.5.0` |\n| [@react-navigation/native-stack](https://github.com/react-navigation/react-navigation/tree/HEAD/packages/native-stack) | `7.8.6` | `7.20.0` |\n| [react-native-maps](https://github.com/react-native-maps/react-native-maps) | `1.26.20` | `1.29.11` |\n| [react-native-paper](https://github.com/callstack/react-native-paper) | `5.14.5` | `5.15.3` |\n| [react-native-safe-area-context](https://github.com/appandflow/react-native-safe-area-context) | `5.6.2` | `5.10.1` |\n| [react-native-screens](https://github.com/software-mansion/react-native-screens) | `4.18.0` | `4.28.0` |\n| [react-native-signature-canvas](https://github.com/YanYuanFE/react-native-signature-canvas) | `5.0.1` | `5.1.1` |\n| [react-native-web](https://github.com/necolas/react-native-web) | `0.21.2` | `0.21.3` |\n| [zustand](https://github.com/pmndrs/zustand) | `5.0.9` | `5.0.15` |\n| [@headlessui/react](https://github.com/tailwindlabs/headlessui/tree/HEAD/packages/@headlessui-react) | `2.2.9` | `2.2.10` |\n| [@hookform/resolvers](https://github.com/react-hook-form/resolvers) | `5.2.2` | `5.9.1` |\n| [moment](https://github.com/moment/moment) | `2.30.1` | `2.31.0` |\n| [react-big-calendar](https://github.com/bigcalendar/react-big-calendar) | `1.19.4` | `1.20.0` |\n| [react-hook-form](https://github.com/react-hook-form/react-hook-form) | `7.68.0` | `7.89.0` |\n| [react-hot-toast](https://github.com/timolins/react-hot-toast) | `2.6.0` | `2.6.1` |\n| [react-is](https://github.com/react/react/tree/HEAD/packages/react-is) | `19.2.1` | `19.3.0` |\n| [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `7.10.1` | `7.18.4` |\n| [recharts](https://github.com/recharts/recharts) | `3.5.1` | `3.10.1` |\n| [jspdf-autotable](https://github.com/simonbengtsson/jsPDF-AutoTable) | `5.0.2` | `5.0.8` |\n| [pdfkit](https://github.com/foliojs/pdfkit) | `0.17.2` | `0.20.2` |\n| [axios](https://github.com/axios/axios) | `1.13.2` | `1.20.0` |\n| [driver.js](https://github.com/nilbuild/driver.js/tree/HEAD/packages/driver) | `1.4.0` | `1.9.0` |\n\n\nUpdates `@tanstack/react-query` from 5.90.12 to 5.104.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/TanStack/query/releases\"\u003e@​tanstack/react-query's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ccode\u003e@​tanstack/react-query-devtools\u003c/code\u003e\u003ca href=\"https://github.com/5\"\u003e\u003ccode\u003e@​5\u003c/code\u003e\u003c/a\u003e.104.1\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies [\u003ca href=\"https://github.com/TanStack/query/commit/ec060b6f74b2e51f4b0c78932beec656ef6f6878\"\u003e\u003ccode\u003eec060b6\u003c/code\u003e\u003c/a\u003e]:\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/query-devtools\u003c/code\u003e\u003ca href=\"https://github.com/5\"\u003e\u003ccode\u003e@​5\u003c/code\u003e\u003c/a\u003e.104.1\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/react-query\u003c/code\u003e\u003ca href=\"https://github.com/5\"\u003e\u003ccode\u003e@​5\u003c/code\u003e\u003c/a\u003e.104.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ccode\u003e@​tanstack/react-query-next-experimental\u003c/code\u003e\u003ca href=\"https://github.com/5\"\u003e\u003ccode\u003e@​5\u003c/code\u003e\u003c/a\u003e.104.1\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies []:\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/react-query\u003c/code\u003e\u003ca href=\"https://github.com/5\"\u003e\u003ccode\u003e@​5\u003c/code\u003e\u003c/a\u003e.104.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ccode\u003e@​tanstack/react-query-persist-client\u003c/code\u003e\u003ca href=\"https://github.com/5\"\u003e\u003ccode\u003e@​5\u003c/code\u003e\u003c/a\u003e.104.1\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies []:\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/query-persist-client-core\u003c/code\u003e\u003ca href=\"https://github.com/5\"\u003e\u003ccode\u003e@​5\u003c/code\u003e\u003c/a\u003e.104.1\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/react-query\u003c/code\u003e\u003ca href=\"https://github.com/5\"\u003e\u003ccode\u003e@​5\u003c/code\u003e\u003c/a\u003e.104.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ccode\u003e@​tanstack/react-query\u003c/code\u003e\u003ca href=\"https://github.com/5\"\u003e\u003ccode\u003e@​5\u003c/code\u003e\u003c/a\u003e.104.1\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies []:\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/query-core\u003c/code\u003e\u003ca href=\"https://github.com/5\"\u003e\u003ccode\u003e@​5\u003c/code\u003e\u003c/a\u003e.104.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ccode\u003e@​tanstack/react-query-devtools\u003c/code\u003e\u003ca href=\"https://github.com/5\"\u003e\u003ccode\u003e@​5\u003c/code\u003e\u003c/a\u003e.104.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/TanStack/query/pull/11650\"\u003e#11650\u003c/a\u003e \u003ca href=\"https://github.com/TanStack/query/commit/5279b05211223dd719803ca22a9d1fa46c98638e\"\u003e\u003ccode\u003e5279b05\u003c/code\u003e\u003c/a\u003e - Build projects with Vite 8\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies [\u003ca href=\"https://github.com/TanStack/query/commit/5279b05211223dd719803ca22a9d1fa46c98638e\"\u003e\u003ccode\u003e5279b05\u003c/code\u003e\u003c/a\u003e]:\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/query-devtools\u003c/code\u003e\u003ca href=\"https://github.com/5\"\u003e\u003ccode\u003e@​5\u003c/code\u003e\u003c/a\u003e.104.0\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/react-query\u003c/code\u003e\u003ca href=\"https://github.com/5\"\u003e\u003ccode\u003e@​5\u003c/code\u003e\u003c/a\u003e.104.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ccode\u003e@​tanstack/react-query-next-experimental\u003c/code\u003e\u003ca href=\"https://github.com/5\"\u003e\u003ccode\u003e@​5\u003c/code\u003e\u003c/a\u003e.104.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/TanStack/query/pull/11650\"\u003e#11650\u003c/a\u003e \u003ca href=\"https://github.com/TanStack/query/commit/5279b05211223dd719803ca22a9d1fa46c98638e\"\u003e\u003ccode\u003e5279b05\u003c/code\u003e\u003c/a\u003e - Build projects with Vite 8\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies [\u003ca href=\"https://github.com/TanStack/query/commit/5279b05211223dd719803ca22a9d1fa46c98638e\"\u003e\u003ccode\u003e5279b05\u003c/code\u003e\u003c/a\u003e]:\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/react-query\u003c/code\u003e\u003ca href=\"https://github.com/5\"\u003e\u003ccode\u003e@​5\u003c/code\u003e\u003c/a\u003e.104.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ccode\u003e@​tanstack/react-query-persist-client\u003c/code\u003e\u003ca href=\"https://github.com/5\"\u003e\u003ccode\u003e@​5\u003c/code\u003e\u003c/a\u003e.104.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md\"\u003e@​tanstack/react-query's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e5.104.1\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies []:\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/query-core\u003c/code\u003e\u003ca href=\"https://github.com/5\"\u003e\u003ccode\u003e@​5\u003c/code\u003e\u003c/a\u003e.104.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.104.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/TanStack/query/pull/11650\"\u003e#11650\u003c/a\u003e \u003ca href=\"https://github.com/TanStack/query/commit/5279b05211223dd719803ca22a9d1fa46c98638e\"\u003e\u003ccode\u003e5279b05\u003c/code\u003e\u003c/a\u003e - Build projects with Vite 8\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies [\u003ca href=\"https://github.com/TanStack/query/commit/5279b05211223dd719803ca22a9d1fa46c98638e\"\u003e\u003ccode\u003e5279b05\u003c/code\u003e\u003c/a\u003e]:\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/query-core\u003c/code\u003e\u003ca href=\"https://github.com/5\"\u003e\u003ccode\u003e@​5\u003c/code\u003e\u003c/a\u003e.104.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.103.3\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/TanStack/query/pull/11647\"\u003e#11647\u003c/a\u003e \u003ca href=\"https://github.com/TanStack/query/commit/1c9693eac75495a04ae4328a35818b1fdf264978\"\u003e\u003ccode\u003e1c9693e\u003c/code\u003e\u003c/a\u003e - fix(codemods): avoid copying unnecessary files from codemods project\u003c/li\u003e\n\u003cli\u003eUpdated dependencies []:\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/query-core\u003c/code\u003e\u003ca href=\"https://github.com/5\"\u003e\u003ccode\u003e@​5\u003c/code\u003e\u003c/a\u003e.103.3\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.103.2\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies [\u003ca href=\"https://github.com/TanStack/query/commit/8a28904aaccb6bc26398b751400a181c0f6d7f0e\"\u003e\u003ccode\u003e8a28904\u003c/code\u003e\u003c/a\u003e]:\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/query-core\u003c/code\u003e\u003ca href=\"https://github.com/5\"\u003e\u003ccode\u003e@​5\u003c/code\u003e\u003c/a\u003e.103.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.103.1\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies [\u003ca href=\"https://github.com/TanStack/query/commit/8330b2f2d431f226d7bb95eb727c637be9d4c6d8\"\u003e\u003ccode\u003e8330b2f\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/TanStack/query/commit/3212966a3681e02d14eb79e9cce0d3265b046877\"\u003e\u003ccode\u003e3212966\u003c/code\u003e\u003c/a\u003e]:\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/query-core\u003c/code\u003e\u003ca href=\"https://github.com/5\"\u003e\u003ccode\u003e@​5\u003c/code\u003e\u003c/a\u003e.103.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.103.0\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies [\u003ca href=\"https://github.com/TanStack/query/commit/e57f8163b18ab3abfe52ad69cdbdda4d31453393\"\u003e\u003ccode\u003ee57f816\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/TanStack/query/commit/fdae2ce4e5382af7326c7c38ce5d5a12751ada12\"\u003e\u003ccode\u003efdae2ce\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/TanStack/query/commit/a1119e5a3ffa52534de7390f17c7183d17658051\"\u003e\u003ccode\u003ea1119e5\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/TanStack/query/commit/cbf77bf8e1a9ce09caef0cdd9a8ed10fef57edf0\"\u003e\u003ccode\u003ecbf77bf\u003c/code\u003e\u003c/a\u003e]:\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/query-core\u003c/code\u003e\u003ca href=\"https://github.com/5\"\u003e\u003ccode\u003e@​5\u003c/code\u003e\u003c/a\u003e.103.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.102.8\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/TanStack/query/commit/29859ae60c8dca0a5cdbf8abccc775b655cf43e2\"\u003e\u003ccode\u003e29859ae\u003c/code\u003e\u003c/a\u003e ci: Version Packages (\u003ca href=\"https://github.com/TanStack/query/tree/HEAD/packages/react-query/issues/11806\"\u003e#11806\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/TanStack/query/commit/339e09f4e50f5e693e7d9d35b25ecac43f818cd0\"\u003e\u003ccode\u003e339e09f\u003c/code\u003e\u003c/a\u003e chore(*): manage 'react' eslint plugins with pnpm 'catalog' (\u003ca href=\"https://github.com/TanStack/query/tree/HEAD/packages/react-query/issues/11781\"\u003e#11781\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/TanStack/query/commit/0a5727935a56db69e720222730e28523400c8f30\"\u003e\u003ccode\u003e0a57279\u003c/code\u003e\u003c/a\u003e test({react,preact,solid,angular}-query/mutationOptions): fix 'mutationOpt1' ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/TanStack/query/commit/c51bb623bb3999aa28aa7afde404d054689d2ee0\"\u003e\u003ccode\u003ec51bb62\u003c/code\u003e\u003c/a\u003e chore(*): declare '\u003ccode\u003e@​eslint-react/eslint-plugin\u003c/code\u003e' in the react packages and exa...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/TanStack/query/commit/a91461326bd6708601104b2cfdb27af72c59dc7a\"\u003e\u003ccode\u003ea914613\u003c/code\u003e\u003c/a\u003e chore(*): declare 'eslint-plugin-react-hooks' in the react packages that use ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/TanStack/query/commit/d99c84b6b55775ce8ef4eca41f24ee90aefc578e\"\u003e\u003ccode\u003ed99c84b\u003c/code\u003e\u003c/a\u003e chore(*): update '\u003ccode\u003e@​eslint-react/eslint-plugin\u003c/code\u003e' to v5 and apply its 'recommend...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/TanStack/query/commit/fd96529f3e0b748874be4655516caecc5d6a0521\"\u003e\u003ccode\u003efd96529\u003c/code\u003e\u003c/a\u003e chore(*): update 'eslint-plugin-react-hooks' to v7 and use its stable 'recomm...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/TanStack/query/commit/e878990b869da186ade549145193cfc718ca3330\"\u003e\u003ccode\u003ee878990\u003c/code\u003e\u003c/a\u003e chore(*): manage 'react' packages with pnpm 'catalog' (\u003ca href=\"https://github.com/TanStack/query/tree/HEAD/packages/react-query/issues/11712\"\u003e#11712\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/TanStack/query/commit/2e1ad64b525f6ff2034f169ab9c2f48f82f17296\"\u003e\u003ccode\u003e2e1ad64\u003c/code\u003e\u003c/a\u003e chore(*): declare 'npm-run-all2' once in the root 'package.json' like other s...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/TanStack/query/commit/c1de23a80e8c2b69299101c9fb6b22bc7c17552f\"\u003e\u003ccode\u003ec1de23a\u003c/code\u003e\u003c/a\u003e chore(*): manage 'typescript' with pnpm 'catalog' and declare it in each pack...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/TanStack/query/commits/@tanstack/react-query@5.104.1/packages/react-query\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for \u003ccode\u003e@​tanstack/react-query\u003c/code\u003e since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `express-rate-limit` from 8.2.1 to 8.7.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/express-rate-limit/express-rate-limit/releases\"\u003eexpress-rate-limit's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev8.7.1\u003c/h2\u003e\n\u003cp\u003eYou can view the changelog \u003ca href=\"https://express-rate-limit.mintlify.app/reference/changelog\"\u003ehere\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003ev8.7.0\u003c/h2\u003e\n\u003cp\u003eYou can view the changelog \u003ca href=\"https://express-rate-limit.mintlify.app/reference/changelog\"\u003ehere\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003ev8.6.2\u003c/h2\u003e\n\u003cp\u003eYou can view the changelog \u003ca href=\"https://express-rate-limit.mintlify.app/reference/changelog\"\u003ehere\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003ev8.6.1\u003c/h2\u003e\n\u003cp\u003eYou can view the changelog \u003ca href=\"https://express-rate-limit.mintlify.app/reference/changelog\"\u003ehere\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003ev8.6.0\u003c/h2\u003e\n\u003cp\u003eYou can view the changelog \u003ca href=\"https://express-rate-limit.mintlify.app/reference/changelog\"\u003ehere\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003ev8.5.2\u003c/h2\u003e\n\u003cp\u003eYou can view the changelog \u003ca href=\"https://express-rate-limit.mintlify.app/reference/changelog\"\u003ehere\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003ev8.5.1\u003c/h2\u003e\n\u003cp\u003eYou can view the changelog \u003ca href=\"https://express-rate-limit.mintlify.app/reference/changelog\"\u003ehere\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003ev8.5.0\u003c/h2\u003e\n\u003cp\u003eYou can view the changelog \u003ca href=\"https://express-rate-limit.mintlify.app/reference/changelog\"\u003ehere\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003ev8.4.1\u003c/h2\u003e\n\u003cp\u003eYou can view the changelog \u003ca href=\"https://express-rate-limit.mintlify.app/reference/changelog\"\u003ehere\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003ev8.4.0\u003c/h2\u003e\n\u003cp\u003eYou can view the changelog \u003ca href=\"https://express-rate-limit.mintlify.app/reference/changelog\"\u003ehere\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003ev8.3.2\u003c/h2\u003e\n\u003cp\u003eYou can view the changelog \u003ca href=\"https://express-rate-limit.mintlify.app/reference/changelog\"\u003ehere\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003ev8.3.1\u003c/h2\u003e\n\u003cp\u003eYou can view the changelog \u003ca href=\"https://express-rate-limit.mintlify.app/reference/changelog\"\u003ehere\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003ev8.3.0\u003c/h2\u003e\n\u003cp\u003eYou can view the changelog \u003ca href=\"https://express-rate-limit.mintlify.app/reference/changelog\"\u003ehere\u003c/a\u003e.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/express-rate-limit/express-rate-limit/commit/c2e30b340189e287123cf5bfd89526dd2ea07d3f\"\u003e\u003ccode\u003ec2e30b3\u003c/code\u003e\u003c/a\u003e 8.7.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/express-rate-limit/express-rate-limit/commit/b40a390170d984b20f6257b15acf31dbad4f0180\"\u003e\u003ccode\u003eb40a390\u003c/code\u003e\u003c/a\u003e v8.7.1 changelog\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/express-rate-limit/express-rate-limit/commit/ccbee88b60845c6ef07fdbc3ac3615c4445f8f92\"\u003e\u003ccode\u003eccbee88\u003c/code\u003e\u003c/a\u003e fix: correct es2020/es2022 version mismatch between tsconfig and esbuild comm...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/express-rate-limit/express-rate-limit/commit/11a143a56eb18678766bdc3ba4557ead10ca89d1\"\u003e\u003ccode\u003e11a143a\u003c/code\u003e\u003c/a\u003e chore: fix duplicate entries in pnpm-lockfile.yaml (\u003ca href=\"https://redirect.github.com/express-rate-limit/express-rate-limit/issues/685\"\u003e#685\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/express-rate-limit/express-rate-limit/commit/92f685d7a6ddf5423e96662295805e8d3452fd3d\"\u003e\u003ccode\u003e92f685d\u003c/code\u003e\u003c/a\u003e chore(deps): bump softprops/action-gh-release from 1 to 3 (\u003ca href=\"https://redirect.github.com/express-rate-limit/express-rate-limit/issues/692\"\u003e#692\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/express-rate-limit/express-rate-limit/commit/0c7c0663f4a8072ef13cd6374651837da0094415\"\u003e\u003ccode\u003e0c7c066\u003c/code\u003e\u003c/a\u003e chore(deps): bump actions/checkout from 4.4.0 to 7.0.1 (\u003ca href=\"https://redirect.github.com/express-rate-limit/express-rate-limit/issues/694\"\u003e#694\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/express-rate-limit/express-rate-limit/commit/9735b69649f20e462b6260e9cef856a57b7c4033\"\u003e\u003ccode\u003e9735b69\u003c/code\u003e\u003c/a\u003e chore(deps): bump pnpm/action-setup from 3.0.0 to 6.1.0 (\u003ca href=\"https://redirect.github.com/express-rate-limit/express-rate-limit/issues/695\"\u003e#695\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/express-rate-limit/express-rate-limit/commit/7f401b76504ebfe25ab97c2291d1de27a8d31d73\"\u003e\u003ccode\u003e7f401b7\u003c/code\u003e\u003c/a\u003e chore(deps): bump actions/setup-node from 4.4.0 to 7.0.0 (\u003ca href=\"https://redirect.github.com/express-rate-limit/express-rate-limit/issues/693\"\u003e#693\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/express-rate-limit/express-rate-limit/commit/7a49bb0d4bc1a1a1bc4f4ef42e0ddcc26f222b07\"\u003e\u003ccode\u003e7a49bb0\u003c/code\u003e\u003c/a\u003e ci: add guard that fails the build on unpinned GitHub Actions (companion to #...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/express-rate-limit/express-rate-limit/commit/784c447798bac552e2dad4a1a818092765cc6b9b\"\u003e\u003ccode\u003e784c447\u003c/code\u003e\u003c/a\u003e ci: pin GitHub Actions to immutable commit SHAs (\u003ca href=\"https://redirect.github.com/express-rate-limit/express-rate-limit/issues/690\"\u003e#690\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/express-rate-limit/express-rate-limit/compare/v8.2.1...v8.7.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for express-rate-limit since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `react-joyride` from 3.0.0-7 to 3.2.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/gilbarbara/react-joyride/releases\"\u003ereact-joyride's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e3.2.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade dependencies: a519b010525d63cfe58cf7d88a9556815d67ad6f\u003c/li\u003e\n\u003cli\u003eUpdate playwright config: 146f421583aa9b38fbeef7d99ed50e0c0484398e\u003c/li\u003e\n\u003cli\u003eWebsite: Upgrade dependencies: 27bc889f1e79dc23afbd8c68ba2152aaa05d7066\u003c/li\u003e\n\u003cli\u003eWebsite: refactor dev setup: 16dc0fc06264df9b3924c9bdf5915b261dd66147\u003c/li\u003e\n\u003cli\u003eDemos: fix Overview step: 6c52a07fdb2358046c1d3d395e3a312a6445808e\u003c/li\u003e\n\u003cli\u003eDemos: update color picker and styles: c66147c991218cc00474a85d337bd2799d637f54\u003c/li\u003e\n\u003cli\u003eRefactor spotlight positioning: 4dd0fcab17a3c25f20eaf4e8ed73df410dadaf6e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.1.0\u003c/h2\u003e\n\u003ch2\u003eFeatures\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003econtrols.replay(origin?)\u003c/code\u003e\u003c/strong\u003e — re-run current step. Re-emits \u003ccode\u003estep:after\u003c/code\u003e → \u003ccode\u003estep:before\u003c/code\u003e, re-runs \u003ccode\u003ebefore\u003c/code\u003e/\u003ccode\u003eafter\u003c/code\u003e hooks, index unchanged. Only valid from \u003ccode\u003eRUNNING + TOOLTIP\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eNew \u003ccode\u003e'replay'\u003c/code\u003e value\u003c/strong\u003e for \u003ccode\u003ecloseButtonAction\u003c/code\u003e, \u003ccode\u003edismissKeyAction\u003c/code\u003e, \u003ccode\u003eoverlayClickAction\u003c/code\u003e. Dismiss tooltip → show beacon on same step (resolves \u003ca href=\"https://redirect.github.com/gilbarbara/react-joyride/issues/1205\"\u003e#1205\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eNew \u003ccode\u003eACTIONS.REPLAY\u003c/code\u003e literal.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eInternal\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFloater zIndex offset reduced (\u003ccode\u003e+100\u003c/code\u003e → \u003ccode\u003e+1\u003c/code\u003e). Relative stacking with overlay unchanged.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eControlled-mode note\u003c/h2\u003e\n\u003cp\u003eParent \u003ccode\u003eonEvent\u003c/code\u003e must skip index increment on \u003ccode\u003eSTEP_AFTER + ACTIONS.REPLAY\u003c/code\u003e:\u003c/p\u003e\n\u003cpre lang=\"tsx\"\u003e\u003ccode\u003eif (type === EVENTS.STEP_AFTER \u0026amp;\u0026amp; action === ACTIONS.REPLAY) return;\r\n\u003c/code\u003e\u003c/pre\u003e\n\u003ch2\u003eDocs\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eNew recipe: \u003cstrong\u003eConditional / Dynamic Steps\u003c/strong\u003e — use \u003ccode\u003ebefore\u003c/code\u003e hooks, not \u003ccode\u003euseEffect\u003c/code\u003e-driven \u003ccode\u003estepIndex\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eControlled mode: \u0026quot;use sparingly\u0026quot; guidance.\u003c/li\u003e\n\u003cli\u003eUpdated \u003ccode\u003eControlsTable\u003c/code\u003e, \u003ccode\u003eOptionsTable\u003c/code\u003e, \u003ccode\u003eexports\u003c/code\u003e reference, and architecture doc.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/gilbarbara/react-joyride/compare/v3.0.2...v3.1.0\"\u003ehttps://github.com/gilbarbara/react-joyride/compare/v3.0.2...v3.1.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e3.0.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix React 18 aggressive batching: 79a7ef0d9e8f0e1a96631a34275c59a07ed5fcc7\u003c/li\u003e\n\u003cli\u003eRe-organize modules: 324b5c92c91387288c108deac0cdbcb0a98d8de9\u003c/li\u003e\n\u003cli\u003ePropagate origin through all UI-triggered control methods: ee6aad34a01e4b50c0608a12ec16f08132a6cc9c\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.0.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade dependencies: 2199f9eebb76f128858260a9258fdeeabf08539e\u003c/li\u003e\n\u003cli\u003eAdd support to spotlight styles (SVGPath): 40e6faae78117a65350f6823b8070ce9249d12d6\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.0.0\u003c/h2\u003e\n\u003cp\u003eV3 is a complete rewrite focused on modern React patterns, smaller bundle size, and a more intuitive API.\u003c/p\u003e\n\u003ch3\u003eHighlights\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003euseJoyride\u003c/code\u003e hook\u003c/strong\u003e — replaces \u003ccode\u003egetHelpers\u003c/code\u003e with a proper hook returning controls, state, current step, failures, and event subscriptions\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eNew event system\u003c/strong\u003e — discriminated event types (\u003ccode\u003etour:start\u003c/code\u003e, \u003ccode\u003estep:before\u003c/code\u003e, \u003ccode\u003etooltip\u003c/code\u003e, etc.) with \u003ccode\u003eonEvent(data, controls)\u003c/code\u003e and selective subscription via \u003ccode\u003eon()\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eStep hooks\u003c/strong\u003e — async \u003ccode\u003ebefore\u003c/code\u003e/\u003ccode\u003eafter\u003c/code\u003e callbacks for per-step logic\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eFloating UI\u003c/strong\u003e — replaced Popper.js/react-floater with direct \u003ccode\u003e@floating-ui/react-dom\u003c/code\u003e integration\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/gilbarbara/react-joyride/commits/v3.2.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for react-joyride since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version adds \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `react-native-reanimated` from 4.2.0 to 4.7.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/software-mansion/react-native-reanimated/releases\"\u003ereact-native-reanimated's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eReanimated - 4.7.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cp\u003eThis release includes stability fixes for Layout Animations and Shared Element Transitions, fixes several crashes on Android, and stops synchronously updated props from going back to old values.\u003c/p\u003e\n\u003ch3\u003e🐛 Bug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix a reset of synchronously updated props to old values when a commit moves a view to another position in its parent, for example after a \u003ccode\u003ezIndex\u003c/code\u003e change of a sibling, on iOS and on Android with \u003ccode\u003eenableAccumulatedUpdatesInRawPropsAndroid\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10800\"\u003e#10800\u003c/a\u003e by \u003ca href=\"https://github.com/pawicao\"\u003e\u003ccode\u003e@​pawicao\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix an Android crash with \u003ccode\u003e[Reanimated] Unknown sensor type.\u003c/code\u003e in \u003ccode\u003euseAnimatedSensor\u003c/code\u003e on devices that deliver sensor events labeled with a sensor other than the registered one. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10792\"\u003e#10792\u003c/a\u003e by \u003ca href=\"https://github.com/pawicao\"\u003e\u003ccode\u003e@​pawicao\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix an Android crash with \u003ccode\u003ereact-native-screens\u003c/code\u003e before 4.27 when a native stack screen that holds a nested stack with header buttons is removed. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10754\"\u003e#10754\u003c/a\u003e by \u003ca href=\"https://github.com/bartlomiejbloniarz\"\u003e\u003ccode\u003e@​bartlomiejbloniarz\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix shared element transitions casting the props of a nested \u003ccode\u003e\u0026lt;Text\u0026gt;\u003c/code\u003e with a \u003ccode\u003esharedTransitionTag\u003c/code\u003e on Android to view props. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10741\"\u003e#10741\u003c/a\u003e by \u003ca href=\"https://github.com/bartlomiejbloniarz\"\u003e\u003ccode\u003e@​bartlomiejbloniarz\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix a native crash on Android caused by reading \u003ccode\u003eopacity\u003c/code\u003e from the props of a \u003ccode\u003e\u0026lt;Text\u0026gt;\u003c/code\u003e nested in another \u003ccode\u003e\u0026lt;Text\u0026gt;\u003c/code\u003e as if they were view props. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10732\"\u003e#10732\u003c/a\u003e by \u003ca href=\"https://github.com/hirvesh\"\u003e\u003ccode\u003e@​hirvesh\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003ewithTiming\u003c/code\u003e extrapolating its easing when the first frame reports a timestamp earlier than the animation's \u003ccode\u003estartTime\u003c/code\u003e, which happens when the animation is started outside a frame flush. With an easing whose first control point is \u003ccode\u003ex1 = 0\u003c/code\u003e the Newton-Raphson solver in \u003ccode\u003eEasing.bezier\u003c/code\u003e diverges just outside its domain, so the animated value could land orders of magnitude out of range for a single frame. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10720\"\u003e#10720\u003c/a\u003e by \u003ca href=\"https://github.com/piaskowyk\"\u003e\u003ccode\u003e@​piaskowyk\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFlush completed exiting view removals in the legacy layout animations proxy when Android's mounting coordinator pull model is enabled. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10704\"\u003e#10704\u003c/a\u003e by \u003ca href=\"https://github.com/piaskowyk\"\u003e\u003ccode\u003e@​piaskowyk\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix exiting Layout Animations leaking their views on Android under the mounting coordinator pull model, where the structural cleanup of a finished animation was never flushed. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10682\"\u003e#10682\u003c/a\u003e by \u003ca href=\"https://github.com/piaskowyk\"\u003e\u003ccode\u003e@​piaskowyk\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix a crash of the Layout Animations proxy (\u003ccode\u003eshadowIndex is out of range\u003c/code\u003e, \u003ccode\u003eIndices are wrong in Remove mutation\u003c/code\u003e, or memory corruption in release builds) when a view flattens in the same commit in which its parent unflattens. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10676\"\u003e#10676\u003c/a\u003e by \u003ca href=\"https://github.com/bartlomiejbloniarz\"\u003e\u003ccode\u003e@​bartlomiejbloniarz\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix an Android crash in \u003ccode\u003eperformOperations\u003c/code\u003e when the React host is torn down while a CSS or layout animation runs in the background, for example on an \u003ccode\u003eexpo-updates\u003c/code\u003e restart. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10661\"\u003e#10661\u003c/a\u003e by \u003ca href=\"https://github.com/bartlomiejbloniarz\"\u003e\u003ccode\u003e@​bartlomiejbloniarz\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix an animated view that showed an older value for one frame when a React commit mounted over a newer synchronous write, with \u003ccode\u003eANDROID_SYNCHRONOUSLY_UPDATE_UI_PROPS\u003c/code\u003e or \u003ccode\u003eIOS_SYNCHRONOUSLY_UPDATE_UI_PROPS\u003c/code\u003e on. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10631\"\u003e#10631\u003c/a\u003e by \u003ca href=\"https://github.com/pawicao\"\u003e\u003ccode\u003e@​pawicao\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix a crash in \u003ccode\u003euseAnimatedKeyboard\u003c/code\u003e on iOS when the app delegate does not declare \u003ccode\u003ewindow\u003c/code\u003e, as in apps that use the UIScene lifecycle. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10587\"\u003e#10587\u003c/a\u003e by \u003ca href=\"https://github.com/CAMOBAP\"\u003e\u003ccode\u003e@​CAMOBAP\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSkip synchronous Android prop updates for unmounted views to avoid throwing and logging mounting-layer exceptions on the UI thread. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10435\"\u003e#10435\u003c/a\u003e by \u003ca href=\"https://github.com/ryan-saffer\"\u003e\u003ccode\u003e@​ryan-saffer\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e💡 Others\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eInitialize the layout animations light tree root from the committed root shadow node. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10737\"\u003e#10737\u003c/a\u003e by \u003ca href=\"https://github.com/bartlomiejbloniarz\"\u003e\u003ccode\u003e@​bartlomiejbloniarz\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSimplify the light tree based Layout Animations proxy so that every view React deletes waits for one decision of how it exits, and name the states of a light node after what they mean. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10677\"\u003e#10677\u003c/a\u003e by \u003ca href=\"https://github.com/bartlomiejbloniarz\"\u003e\u003ccode\u003e@​bartlomiejbloniarz\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRename the \u003ccode\u003eDEAD\u003c/code\u003e exiting state of the light tree based Layout Animations proxy to \u003ccode\u003eCOMPLETED\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10629\"\u003e#10629\u003c/a\u003e by \u003ca href=\"https://github.com/bartlomiejbloniarz\"\u003e\u003ccode\u003e@​bartlomiejbloniarz\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/software-mansion/react-native-reanimated/compare/4.7.0...4.7.1\"\u003ehttps://github.com/software-mansion/react-native-reanimated/compare/4.7.0...4.7.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eReanimated - 4.7.0\u003c/h2\u003e\n\u003ch2\u003eKey changes\u003c/h2\u003e\n\u003ch3\u003eNew layout animations engine is the default\u003c/h3\u003e\n\u003cp\u003eLayout animations now run on the new engine by default.\u003c/p\u003e\n\u003cp\u003eIf the new engine causes a regression in your app, enable the \u003ca href=\"https://docs.swmansion.com/react-native-reanimated/docs/guides/feature-flags#use_legacy_layout_animations_proxy\"\u003e\u003ccode\u003eUSE_LEGACY_LAYOUT_ANIMATIONS_PROXY\u003c/code\u003e feature flag\u003c/a\u003e to go back to the previous engine, and please report an issue. The previous engine does not support shared element transitions, so you cannot enable this flag together with \u003ccode\u003eENABLE_SHARED_ELEMENT_TRANSITIONS\u003c/code\u003e.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003efeat(Reanimated): make light-tree based layout animations proxy default by \u003ca href=\"https://github.com/pawicao\"\u003e\u003ccode\u003e@​pawicao\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10423\"\u003esoftware-mansion/react-native-reanimated#10423\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(Reanimated): carry registry values in Reanimated commits by \u003ca href=\"https://github.com/pawicao\"\u003e\u003ccode\u003e@​pawicao\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10416\"\u003esoftware-mansion/react-native-reanimated#10416\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor(LayoutAnimations): use one proxy instance per surface by \u003ca href=\"https://github.com/bartlomiejbloniarz\"\u003e\u003ccode\u003e@​bartlomiejbloniarz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10368\"\u003esoftware-mansion/react-native-reanimated#10368\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor(LayoutAnimations): centralize animation lifecycle and UI operations by \u003ca href=\"https://github.com/bartlomiejbloniarz\"\u003e\u003ccode\u003e@​bartlomiejbloniarz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10369\"\u003esoftware-mansion/react-native-reanimated#10369\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor(LayoutAnimations): make shared container ownership explicit by \u003ca href=\"https://github.com/bartlomiejbloniarz\"\u003e\u003ccode\u003e@​bartlomiejbloniarz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10370\"\u003esoftware-mansion/react-native-reanimated#10370\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(LayoutAnimations): separate progress transition states by \u003ca href=\"https://github.com/bartlomiejbloniarz\"\u003e\u003ccode\u003e@​bartlomiejbloniarz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10371\"\u003esoftware-mansion/react-native-reanimated#10371\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(LayoutAnimations): update Android view hierarchy only during JS pulls by \u003ca href=\"https://github.com/bartlomiejbloniarz\"\u003e\u003ccode\u003e@​bartlomiejbloniarz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10372\"\u003esoftware-mansion/react-native-reanimated#10372\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(LayoutAnimations): serialize config updates with pullTransaction by \u003ca href=\"https://github.com/bartlomiejbloniarz\"\u003e\u003ccode\u003e@​bartlomiejbloniarz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10373\"\u003esoftware-mansion/react-native-reanimated#10373\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(Reanimated): keep exiting views at their host position in experimental LA proxy by \u003ca href=\"https://github.com/pawicao\"\u003e\u003ccode\u003e@​pawicao\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10392\"\u003esoftware-mansion/react-native-reanimated#10392\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(reanimated): skip preserveMountedTags_ on pull model by \u003ca href=\"https://github.com/piaskowyk\"\u003e\u003ccode\u003e@​piaskowyk\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10481\"\u003esoftware-mansion/react-native-reanimated#10481\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(LayoutAnimations): keep animated views on their final layout after config or order changes by \u003ca href=\"https://github.com/bartlomiejbloniarz\"\u003e\u003ccode\u003e@​bartlomiejbloniarz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10537\"\u003esoftware-mansion/react-native-reanimated#10537\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(LayoutAnimations): properly animate reparented views by \u003ca href=\"https://github.com/bartlomiejbloniarz\"\u003e\u003ccode\u003e@​bartlomiejbloniarz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10538\"\u003esoftware-mansion/react-native-reanimated#10538\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/software-mansion/react-native-reanimated/blob/4.7.1/packages/react-native-reanimated/CHANGELOG.md\"\u003ereact-native-reanimated's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.7.1 — 2026-10-02\u003c/h2\u003e\n\u003ch3\u003e🐛 Bug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix a reset of synchronously updated props to old values when a commit moves a view to another position in its parent, for example after a \u003ccode\u003ezIndex\u003c/code\u003e change of a sibling, on iOS and on Android with \u003ccode\u003eenableAccumulatedUpdatesInRawPropsAndroid\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10800\"\u003e#10800\u003c/a\u003e by \u003ca href=\"https://github.com/pawicao\"\u003e\u003ccode\u003e@​pawicao\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix an Android crash with \u003ccode\u003e[Reanimated] Unknown sensor type.\u003c/code\u003e in \u003ccode\u003euseAnimatedSensor\u003c/code\u003e on devices that deliver sensor events labeled with a sensor other than the registered one. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10792\"\u003e#10792\u003c/a\u003e by \u003ca href=\"https://github.com/pawicao\"\u003e\u003ccode\u003e@​pawicao\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix an Android crash with \u003ccode\u003ereact-native-screens\u003c/code\u003e before 4.27 when a native stack screen that holds a nested stack with header buttons is removed. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10754\"\u003e#10754\u003c/a\u003e by \u003ca href=\"https://github.com/bartlomiejbloniarz\"\u003e\u003ccode\u003e@​bartlomiejbloniarz\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix shared element transitions casting the props of a nested \u003ccode\u003e\u0026lt;Text\u0026gt;\u003c/code\u003e with a \u003ccode\u003esharedTransitionTag\u003c/code\u003e on Android to view props. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10741\"\u003e#10741\u003c/a\u003e by \u003ca href=\"https://github.com/bartlomiejbloniarz\"\u003e\u003ccode\u003e@​bartlomiejbloniarz\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix a native crash on Android caused by reading \u003ccode\u003eopacity\u003c/code\u003e from the props of a \u003ccode\u003e\u0026lt;Text\u0026gt;\u003c/code\u003e nested in another \u003ccode\u003e\u0026lt;Text\u0026gt;\u003c/code\u003e as if they were view props. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10732\"\u003e#10732\u003c/a\u003e by \u003ca href=\"https://github.com/hirvesh\"\u003e\u003ccode\u003e@​hirvesh\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003ewithTiming\u003c/code\u003e extrapolating its easing when the first frame reports a timestamp earlier than the animation's \u003ccode\u003estartTime\u003c/code\u003e, which happens when the animation is started outside a frame flush. With an easing whose first control point is \u003ccode\u003ex1 = 0\u003c/code\u003e the Newton-Raphson solver in \u003ccode\u003eEasing.bezier\u003c/code\u003e diverges just outside its domain, so the animated value could land orders of magnitude out of range for a single frame. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10720\"\u003e#10720\u003c/a\u003e by \u003ca href=\"https://github.com/piaskowyk\"\u003e\u003ccode\u003e@​piaskowyk\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFlush completed exiting view removals in the legacy layout animations proxy when Android's mounting coordinator pull model is enabled. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10704\"\u003e#10704\u003c/a\u003e by \u003ca href=\"https://github.com/piaskowyk\"\u003e\u003ccode\u003e@​piaskowyk\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix exiting Layout Animations leaking their views on Android under the mounting coordinator pull model, where the structural cleanup of a finished animation was never flushed. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10682\"\u003e#10682\u003c/a\u003e by \u003ca href=\"https://github.com/piaskowyk\"\u003e\u003ccode\u003e@​piaskowyk\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix a crash of the Layout Animations proxy (\u003ccode\u003eshadowIndex is out of range\u003c/code\u003e, \u003ccode\u003eIndices are wrong in Remove mutation\u003c/code\u003e, or memory corruption in release builds) when a view flattens in the same commit in which its parent unflattens. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10676\"\u003e#10676\u003c/a\u003e by \u003ca href=\"https://github.com/bartlomiejbloniarz\"\u003e\u003ccode\u003e@​bartlomiejbloniarz\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix an Android crash in \u003ccode\u003eperformOperations\u003c/code\u003e when the React host is torn down while a CSS or layout animation runs in the background, for example on an \u003ccode\u003eexpo-updates\u003c/code\u003e restart. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10661\"\u003e#10661\u003c/a\u003e by \u003ca href=\"https://github.com/bartlomiejbloniarz\"\u003e\u003ccode\u003e@​bartlomiejbloniarz\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix an animated view that showed an older value for one frame when a React commit mounted over a newer synchronous write, with \u003ccode\u003eANDROID_SYNCHRONOUSLY_UPDATE_UI_PROPS\u003c/code\u003e or \u003ccode\u003eIOS_SYNCHRONOUSLY_UPDATE_UI_PROPS\u003c/code\u003e on. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10631\"\u003e#10631\u003c/a\u003e by \u003ca href=\"https://github.com/pawicao\"\u003e\u003ccode\u003e@​pawicao\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix a crash in \u003ccode\u003euseAnimatedKeyboard\u003c/code\u003e on iOS when the app delegate does not declare \u003ccode\u003ewindow\u003c/code\u003e, as in apps that use the UIScene lifecycle. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10587\"\u003e#10587\u003c/a\u003e by \u003ca href=\"https://github.com/CAMOBAP\"\u003e\u003ccode\u003e@​CAMOBAP\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSkip synchronous Android prop updates for unmounted views to avoid throwing and logging mounting-layer exceptions on the UI thread. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10435\"\u003e#10435\u003c/a\u003e by \u003ca href=\"https://github.com/ryan-saffer\"\u003e\u003ccode\u003e@​ryan-saffer\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e💡 Others\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eInitialize the layout animations light tree root from the committed root shadow node. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10737\"\u003e#10737\u003c/a\u003e by \u003ca href=\"https://github.com/bartlomiejbloniarz\"\u003e\u003ccode\u003e@​bartlomiejbloniarz\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSimplify the light tree based Layout Animations proxy so that every view React deletes waits for one decision of how it exits, and name the states of a light node after what they mean. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10677\"\u003e#10677\u003c/a\u003e by \u003ca href=\"https://github.com/bartlomiejbloniarz\"\u003e\u003ccode\u003e@​bartlomiejbloniarz\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRename the \u003ccode\u003eDEAD\u003c/code\u003e exiting state of the light tree based Layout Animations proxy to \u003ccode\u003eCOMPLETED\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10629\"\u003e#10629\u003c/a\u003e by \u003ca href=\"https://github.com/bartlomiejbloniarz\"\u003e\u003ccode\u003e@​bartlomiejbloniarz\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.7.0 — 2026-09-18\u003c/h2\u003e\n\u003ch3\u003e🛠 Breaking changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eAnimatedRefOnUI\u003c/code\u003e is now a \u003ccode\u003eShareableHost\u0026lt;ShadowNodeWrapper | null\u0026gt;\u003c/code\u003e read with \u003ccode\u003e.value\u003c/code\u003e instead of a callable, and \u003ccode\u003eAnimatedRefOnJS\u003c/code\u003e was renamed to \u003ccode\u003eAnimatedRefOnRN\u003c/code\u003e. \u003ccode\u003emeasure\u003c/code\u003e on an unmounted ref now returns \u003ccode\u003enull\u003c/code\u003e and warns instead of calling into \u003ccode\u003e_measure\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10413\"\u003e#10413\u003c/a\u003e by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRemove the \u003ccode\u003eUSE_SYNCHRONIZABLE_FOR_MUTABLES\u003c/code\u003e feature flag. Mutables always use Synchronizable state now. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10298\"\u003e#10298\u003c/a\u003e by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMake the light-tree layout animations proxy the default. Enable the new \u003ccode\u003eUSE_LEGACY_LAYOUT_ANIMATIONS_PROXY\u003c/code\u003e feature flag to roll back to the previous implementation. The legacy proxy does not support Shared Element Transitions, so \u003ccode\u003eENABLE_SHARED_ELEMENT_TRANSITIONS\u003c/code\u003e must be off when you enable it. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10423\"\u003e#10423\u003c/a\u003e by \u003ca href=\"https://github.com/pawicao\"\u003e\u003ccode\u003e@​pawicao\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e🎉 New features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRun \u003ccode\u003eshadowColor\u003c/code\u003e CSS transitions on the Android platform animation path on Android 9 and newer. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10547\"\u003e#10547\u003c/a\u003e by \u003ca href=\"https://github.com/MatiPl01\"\u003e\u003ccode\u003e@​MatiPl01\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRun CSS transitions for \u003ccode\u003ebackgroundColor\u003c/code\u003e, \u003ccode\u003eborderColor\u003c/code\u003e, and numeric \u003ccode\u003eborderRadius\u003c/code\u003e on the Android platform animation path. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10310\"\u003e#10310\u003c/a\u003e by \u003ca href=\"https://github.com/MatiPl01\"\u003e\u003ccode\u003e@​MatiPl01\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003ebackgroundImage\u003c/code\u003e support to animated styles. Linear and radial gradients are accepted as objects or CSS strings and processed on the UI thread. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10486\"\u003e#10486\u003c/a\u003e by \u003ca href=\"https://github.com/tshmieldev\"\u003e\u003ccode\u003e@​tshmieldev\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd iOS Swift Package Manager support via \u003ccode\u003ePackage.swift\u003c/code\u003e and SPM integration metadata in \u003ccode\u003ereact-native.config.js\u003c/code\u003e, with a dependency on \u003ccode\u003eRNWorklets\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10472\"\u003e#10472\u003c/a\u003e by \u003ca href=\"https://github.com/kacperzolkiewski\"\u003e\u003ccode\u003e@​kacperzolkiewski\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd an optional \u003ccode\u003eonLog\u003c/code\u003e callback as a second argument to \u003ccode\u003econfigureReanimatedLogger\u003c/code\u003e, invoked for every warning and error that passes the \u003ccode\u003elevel\u003c/code\u003e and \u003ccode\u003estrict\u003c/code\u003e filters, in addition to the default console output. On native, logs raised on the UI runtime are delivered asynchronously on the React Native Runtime. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10482\"\u003e#10482\u003c/a\u003e by \u003ca href=\"https://github.com/douglowder\"\u003e\u003ccode\u003e@​douglowder\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e🐛 Bug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix a property removed from \u003ccode\u003etransitionProperty\u003c/code\u003e while it transitions to or from \u003ccode\u003eundefined\u003c/code\u003e (its style key was just removed or added) finishing the transition instead of snapping to the committed value. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10613\"\u003e#10613\u003c/a\u003e by \u003ca href=\"https://github.com/MatiPl01\"\u003e\u003ccode\u003e@​MatiPl01\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix a property removed from \u003ccode\u003etransitionProperty\u003c/code\u003e mid-transition reverting to the interpolator default (for example \u003ccode\u003eborderRadius: 0\u003c/code\u003e) instead of the committed style on Android. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10614\"\u003e#10614\u003c/a\u003e by \u003ca href=\"https://github.com/MatiPl01\"\u003e\u003ccode\u003e@​MatiPl01\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReject a \u003ccode\u003ebackgroundImage\u003c/code\u003e gradient given as an object when a transition hint is not placed between two color stops, and reject gradients with fewer than two color stops in both the object and the string form; React Native crashes on iOS or Android when such values reach the renderer. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10589\"\u003e#10589\u003c/a\u003e by \u003ca href=\"https://github.com/matipl01\"\u003e\u003ccode\u003e@​matipl01\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix a crash in the light tree based Layout Animations proxy when a view is flattened while one of its children is removed in the same commit. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10628\"\u003e#10628\u003c/a\u003e by \u003ca href=\"https://github.com/bartlomiejbloniarz\"\u003e\u003ccode\u003e@​bartlomiejbloniarz\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRemove \u003ccode\u003ezIndex\u003c/code\u003e from the synchronous props. No platform applies \u003ccode\u003ezIndex\u003c/code\u003e to a mounted view, so with \u003ccode\u003eIOS_SYNCHRONOUSLY_UPDATE_UI_PROPS\u003c/code\u003e on, an animated style with only \u003ccode\u003ezIndex\u003c/code\u003e and \u003ccode\u003eelevation\u003c/code\u003e never reached the shadow tree commit and the views did not reorder until a later React render. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10602\"\u003e#10602\u003c/a\u003e by \u003ca href=\"https://github.com/pawicao\"\u003e\u003ccode\u003e@​pawicao\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eStop passing \u003ccode\u003eforwardedRef\u003c/code\u003e and \u003ccode\u003enativeID\u003c/code\u003e to the wrapped component on web, which React Strict DOM reported as invalid props. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10605\"\u003e#10605\u003c/a\u003e by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePreserve Android color and other prop updates when hiding and restoring shared transition views. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10601\"\u003e#10601\u003c/a\u003e by \u003ca href=\"https://github.com/bartlomiejbloniarz\"\u003e\u003ccode\u003e@​bartlomiejbloniarz\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePrevent Shared Transition Boundaries from intercepting touches intended for sibling views while keeping their children interactive. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10600\"\u003e#10600\u003c/a\u003e by \u003ca href=\"https://github.com/bartlomiejbloniarz\"\u003e\u003ccode\u003e@​bartlomiejbloniarz\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/software-mansion/react-native-reanimated/commit/5fd93c32624c64c4020fb089171afde88a511d92\"\u003e\u003ccode\u003e5fd93c3\u003c/code\u003e\u003c/a\u003e release(Reanimated): 4.7.1 (\u003ca href=\"https://github.com/software-mansion/react-native-reanimated/tree/HEAD/packages/react-native-reanimated/issues/10797\"\u003e#10797\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/software-mansion/react-native-reanimated/commit/d9cd48b1ef123baafdfa8ed0b0ff4326817ee7ae\"\u003e\u003ccode\u003ed9cd48b\u003c/code\u003e\u003c/a\u003e cherry-pick(4.7-stable): Keep synchronously updated props when a mount insert...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/software-mansion/react-native-reanimated/commit/3b08cb1d0cfaa031002a5c73d449cb4c4b9b4fdc\"\u003e\u003ccode\u003e3b08cb1\u003c/code\u003e\u003c/a\u003e cherry-pick(4.7-stable): Stop crashing when the React host is torn down durin...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/software-mansion/react-native-reanimated/commit/0eaa8a5e016cc0dfaa03495c224ab19c32ef097d\"\u003e\u003ccode\u003e0eaa8a5\u003c/code\u003e\u003c/a\u003e cherry-pick(4.7-stable): Write synchronous props again after a React commit m...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/software-mansion/react-native-reanimated/commit/36b61af405c0f39b8dd3df9ce2ce29c8feef3c13\"\u003e\u003ccode\u003e36b61af\u003c/code\u003e\u003c/a\u003e cherry-pick(4.7-stable): Remove a view's children before the view, as React d...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/software-mansion/react-native-reanimated/commit/e1367a4854feb0c1b255c5d717c574c4ee995590\"\u003e\u003ccode\u003ee1367a4\u003c/code\u003e\u003c/a\u003e cherry-pick(4.7-stable): Don't read ViewProps opacity from nested Text props ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/software-mansion/react-native-reanimated/commit/11ae0e7058283d3f154478c3781208e54998a7d1\"\u003e\u003ccode\u003e11ae0e7\u003c/code\u003e\u003c/a\u003e cherry-pick(4.7-stable): Give every view React deletes the same lifecycle in ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/software-mansion/react-native-reanimated/commit/6bafff64a32ebe1be7c8553243dc592b75fa3f02\"\u003e\u003ccode\u003e6bafff6\u003c/code\u003e\u003c/a\u003e cherry-pick(4.7-stable): Don't crash when a view flattens in the same commit ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/software-mansion/react-native-reanimated/commit/e5191e4d5eccd3b915539bec802df6a4979b56ed\"\u003e\u003ccode\u003ee5191e4\u003c/code\u003e\u003c/a\u003e cherry-pick(4.7-stable): Skip shared element transitions for nested Text (\u003ca href=\"https://github.com/software-mansion/react-native-reanimated/tree/HEAD/packages/react-native-reanimated/issues/10\"\u003e#10\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/software-mansion/react-native-reanimated/commit/404b8891363139d22ec44421ffb6a38d79ebb5a1\"\u003e\u003ccode\u003e404b889\u003c/code\u003e\u003c/a\u003e cherry-pick(4.7-stable): Crash in useAnimatedSensor on events labeled with an...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/software-mansion/react-native-reanimated/commits/4.7.1/packages/react-native-reanimated\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `react-native-worklets` from 0.7.1 to 0.13.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/software-mansion/react-native-reanimated/releases\"\u003ereact-native-worklets's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eWorklets - 0.13.0\u003c/h2\u003e\n\u003ch2\u003eKey changes\u003c/h2\u003e\n\u003ch3\u003eNetworking on Worklet Runtimes in Bundle Mode\u003c/h3\u003e\n\u003cp\u003eWorklet Runtimes created in Bundle Mode now ship a standalone networking module: \u003ccode\u003eXMLHttpRequest\u003c/code\u003e, \u003ccode\u003eBlob\u003c/code\u003e, \u003ccode\u003eFileReader\u003c/code\u003e, \u003ccode\u003efetch\u003c/code\u003e (whatwg), \u003ccode\u003eHeaders\u003c/code\u003e, \u003ccode\u003eRequest\u003c/code\u003e, \u003ccode\u003eResponse\u003c/code\u003e, \u003ccode\u003eFormData\u003c/code\u003e, \u003ccode\u003eAbortController\u003c/code\u003e and \u003ccode\u003eAbortSignal\u003c/code\u003e. It replaces the earlier networking preview and its \u003ccode\u003eFETCH_PREVIEW_ENABLED\u003c/code\u003e feature flag. \u003ccode\u003ecreateWorkletRuntime\u003c/code\u003e accepts a new \u003ccode\u003eenableNetworking\u003c/code\u003e option, which defaults to \u003ccode\u003etrue\u003c/code\u003e and is forced off on runtimes without the Event Loop.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003erefactor(Worklets): remove the networking preview by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10250\"\u003esoftware-mansion/react-native-reanimated#10250\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(Worklets): networking module with XMLHttpRequest by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10493\"\u003esoftware-mansion/react-native-reanimated#10493\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(Worklets): add Blob and FileReader to the networking module by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10494\"\u003esoftware-mansion/react-native-reanimated#10494\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(Worklets): add fetch to the networking module by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10495\"\u003esoftware-mansion/react-native-reanimated#10495\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(Worklets): add FormData to the networking module by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10496\"\u003esoftware-mansion/react-native-reanimated#10496\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(Worklets): add AbortController to the networking module by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10497\"\u003esoftware-mansion/react-native-reanimated#10497\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(Worklets): add the enableNetworking runtime option by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10498\"\u003esoftware-mansion/react-native-reanimated#10498\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eOXC port of the Worklets Babel plugin\u003c/h3\u003e\n\u003cp\u003eThe Worklets Babel plugin has a Rust port built on OXC for Bundle Mode. It is available as \u003ccode\u003ereact-native-worklets/plugin-oxc/babel\u003c/code\u003e, with prebuilt binaries for macOS, Linux and Windows on x64 and arm64.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003efeat(Worklets): port babel plugin to oxc by \u003ca href=\"https://github.com/tshmieldev\"\u003e\u003ccode\u003e@​tshmieldev\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/9518\"\u003esoftware-mansion/react-native-reanimated#9518\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(Worklets): publishing oxc plugin binaries by \u003ca href=\"https://github.com/tshmieldev\"\u003e\u003ccode\u003e@​tshmieldev\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10608\"\u003esoftware-mansion/react-native-reanimated#10608\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed-type Synchronizable\u003c/h3\u003e\n\u003cp\u003e\u003ccode\u003ecreateSynchronizable\u003c/code\u003e accepts a new \u003ccode\u003efixedType\u003c/code\u003e option. A fixed-type Synchronizable holds a number or a boolean without serialization and exposes \u003ccode\u003esetDirty\u003c/code\u003e, a non-exclusive write that doesn't wait for other \u003ccode\u003esetDirty\u003c/code\u003e calls. On the C++ side \u003ccode\u003eSynchronizable\u003c/code\u003e is now an interface over \u003ccode\u003estd::variant\u003c/code\u003e values with a \u003ccode\u003eSynchronizableDynamic\u003c/code\u003e implementation, and several races on exotic architectors and lock leaks in the dynamic implementation are fixed.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003efeat(Worklets): fixed-type Synchronizable by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10296\"\u003esoftware-mansion/react-native-reanimated#10296\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(Worklets): add setDirty to the Synchronizable interface by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10295\"\u003esoftware-mansion/react-native-reanimated#10295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor(Worklets): operate on variant values in Synchronizable by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10294\"\u003esoftware-mansion/react-native-reanimated#10294\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor(Worklets): extract SynchronizableDynamic from Synchronizable by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10293\"\u003esoftware-mansion/react-native-reanimated#10293\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(Worklets): make Synchronizable value access atomic by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10292\"\u003esoftware-mansion/react-native-reanimated#10292\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(Worklets): release the Synchronizable lock when a setter throws by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10331\"\u003esoftware-mansion/react-native-reanimated#10331\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor(Worklets): identify the Synchronizable lock owner with std::thread::id by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10349\"\u003esoftware-mansion/react-native-reanimated#10349\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs(Worklets): document fixed-type Synchronizable by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10297\"\u003esoftware-mansion/react-native-reanimated#10297\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFaster startup\u003c/h3\u003e\n\u003cp\u003eThe native side of \u003ccode\u003eWorkletsModule\u003c/code\u003e is created on a background thread as soon as the module is created, so \u003ccode\u003einstallTurboModule\u003c/code\u003e only attaches it to the RN Runtime. In Bundle Mode the bundle is evaluated on the UI Worklet Runtime on a background thread while the RN Runtime evaluates it, instead of on the JS thread in \u003ccode\u003estart\u003c/code\u003e.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003efeat(Worklets): initialize the native module ahead of time by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10489\"\u003esoftware-mansion/react-native-reanimated#10489\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(Worklets): start the UI runtime in Bundle Mode ahead of time by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10490\"\u003esoftware-mansion/react-native-reanimated#10490\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eHermes microtask queue on Worklet Runtimes\u003c/h3\u003e\n\u003cp\u003eWorklet Runtimes use the built-in Hermes microtask queue instead of a custom JS implementation.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003erefactor: migrate to Hermes microtaskQueue by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10199\"\u003esoftware-mansion/react-native-reanimated#10199\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor: intertwine RAF queue with microtasks by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10237\"\u003esoftware-mansion/react-native-reanimated#10237\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eRemoved SerializableInitializer (SerializableHandle)\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/software-mansion/react-native-reanimated/blob/main/packages/react-native-worklets/CHANGELOG.md\"\u003ereact-native-worklets's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e0.13.0 — 2026-09-18\u003c/h2\u003e\n\u003ch3\u003e🛠 Breaking changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eOmit empty worklet closures and export closure-free worklets directly in Bundle Mode without factory wrappers. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10517\"\u003e#10517\u003c/a\u003e by \u003ca href=\"https://github.com/tshmieldev\"\u003e\u003ccode\u003e@​tshmieldev\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eStore worklet closures as arrays instead of objects. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10506\"\u003e#10506\u003c/a\u003e by \u003ca href=\"https://github.com/tshmieldev\"\u003e\u003ccode\u003e@​tshmieldev\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRemoved the networking preview together with its \u003ccode\u003eFETCH_PREVIEW_ENABLED\u003c/code\u003e feature flag. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10250\"\u003e#10250\u003c/a\u003e by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRemove the Serializable handle - \u003ccode\u003eSerializableInitializer\u003c/code\u003e, \u003ccode\u003ecreateSerializableInitializer\u003c/code\u003e and the \u003ccode\u003e__init\u003c/code\u003e clone path are gone. \u003ccode\u003eSerializable::ValueType::HandleType\u003c/code\u003e stays in the Compat Stable API enum for ABI compatibility and \u003ccode\u003eextractSerializable\u003c/code\u003e throws for it. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10414\"\u003e#10414\u003c/a\u003e by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003emakeShareable\u003c/code\u003e now serializes its value eagerly into a retaining Serializable instead of rebuilding it lazily on each runtime through a handle. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10412\"\u003e#10412\u003c/a\u003e by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRemove worklet context objects from the Babel plugin. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10411\"\u003e#10411\u003c/a\u003e by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eChange the C++ \u003ccode\u003eSynchronizable\u003c/code\u003e interface to operate on \u003ccode\u003estd::variant\u003c/code\u003e values. Getters return a \u003ccode\u003eSerializable\u003c/code\u003e, a \u003ccode\u003edouble\u003c/code\u003e or a \u003ccode\u003ebool\u003c/code\u003e, and \u003ccode\u003esetBlocking\u003c/code\u003e takes either a \u003ccode\u003eSerializable\u003c/code\u003e or a plain value. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10294\"\u003e#10294\u003c/a\u003e by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd virtual \u003ccode\u003esetDirty\u003c/code\u003e to the C++ \u003ccode\u003eSynchronizable\u003c/code\u003e interface. \u003ccode\u003eSynchronizableDynamic\u003c/code\u003e throws from it. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10295\"\u003e#10295\u003c/a\u003e by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e🎉 New features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd iOS Swift Package Manager support via \u003ccode\u003ePackage.swift\u003c/code\u003e and SPM integration metadata in \u003ccode\u003ereact-native.config.js\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10472\"\u003e#10472\u003c/a\u003e by \u003ca href=\"https://github.com/kacperzolkiewski\"\u003e\u003ccode\u003e@​kacperzolkiewski\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd a standalone networking module for Worklet Runtimes in Bundle Mode, with \u003ccode\u003eXMLHttpRequest\u003c/code\u003e for text and \u003ccode\u003earraybuffer\u003c/code\u003e responses. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10493\"\u003e#10493\u003c/a\u003e by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eBlob\u003c/code\u003e and \u003ccode\u003eFileReader\u003c/code\u003e to the Worklets networking module, and \u003ccode\u003eblob\u003c/code\u003e and \u003ccode\u003earraybuffer\u003c/code\u003e response types to \u003ccode\u003eXMLHttpRequest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10494\"\u003e#10494\u003c/a\u003e by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003efetch\u003c/code\u003e, \u003ccode\u003eHeaders\u003c/code\u003e, \u003ccode\u003eRequest\u003c/code\u003e and \u003ccode\u003eResponse\u003c/code\u003e to the Worklets networking module, backed by \u003ccode\u003ewhatwg-fetch\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10495\"\u003e#10495\u003c/a\u003e by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eFormData\u003c/code\u003e to the Worklets networking module, with multipart encoding done in JavaScript. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10496\"\u003e#10496\u003c/a\u003e by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eAbortController\u003c/code\u003e and \u003ccode\u003eAbortSignal\u003c/code\u003e to the Worklets networking module. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10497\"\u003e#10497\u003c/a\u003e by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd the \u003ccode\u003eenableNetworking\u003c/code\u003e option to \u003ccode\u003ecreateWorkletRuntime\u003c/code\u003e. It defaults to \u003ccode\u003etrue\u003c/code\u003e and is forced off on runtimes without the Event Loop. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10498\"\u003e#10498\u003c/a\u003e by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePer-runtime caching for \u003ccode\u003eRetainingSerializable\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10264\"\u003e#10264\u003c/a\u003e by \u003ca href=\"https://github.com/tshmieldev\"\u003e\u003ccode\u003e@​tshmieldev\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eisOnUIThread\u003c/code\u003e to the Worklets Stable API. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10265\"\u003e#10265\u003c/a\u003e by \u003ca href=\"https://github.com/bartlomiejbloniarz\"\u003e\u003ccode\u003e@​bartlomiejbloniarz\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd the fast-path \u003ccode\u003efixedType\u003c/code\u003e option to \u003ccode\u003ecreateSynchronizable\u003c/code\u003e. A fixed-type Synchronizable holds a number or a boolean without serialization and exposes \u003ccode\u003esetDirty\u003c/code\u003e, a non-exclusive write that doesn't wait fo...\n\n_Description has been truncated_","html_url":"https://github.com/markjsjordan/folk-care/pull/42","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/markjsjordan%2Ffolk-care/issues/42","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/42/packages"},{"uuid":"5774543829","node_id":"PR_kwDOAfS9pM8AAAABHfNFMA","number":568,"state":"closed","title":"chore(deps): bump moment from 2.29.4 to 2.31.0","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-10-09T12:23:49.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-09T07:28:13.000Z","updated_at":"2026-10-09T12:23:53.000Z","time_to_close":17736,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"moment","old_version":"2.29.4","new_version":"2.31.0","repository_url":"https://github.com/moment/moment"}],"path":null,"ecosystem":"npm"},"body":"Bumps [moment](https://github.com/moment/moment) from 2.29.4 to 2.31.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/releases\"\u003emoment's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.31.0\u003c/h2\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.30.1\u003c/h2\u003e\n\u003cp\u003eNote - this was not a new release, but rather just updating GitHub's \u003ccode\u003elatest\u003c/code\u003e release to indicate the existing version \u003ccode\u003e2.30.1\u003c/code\u003e from Dec 27, 2023.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/blob/develop/CHANGELOG.md\"\u003emoment's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch3\u003e2.31.0\u003c/h3\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e2.30.1\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/15b45d48a176312e8f34143c5a800090abf4787f\"\u003e\u003ccode\u003e15b45d4\u003c/code\u003e\u003c/a\u003e [pkg] Build 2.31.0 (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6452\"\u003e#6452\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/631cd81454ee001e1f508e21270eae0b6bb62974\"\u003e\u003ccode\u003e631cd81\u003c/code\u003e\u003c/a\u003e [pkg] Update changelog for upcoming release (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6394\"\u003e#6394\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/6caff9e0d54e85a63a6eb97d7361f1da35bc58f4\"\u003e\u003ccode\u003e6caff9e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/710703b7eac93535ad125cbf4feb3d42afed6fb3\"\u003e\u003ccode\u003e710703b\u003c/code\u003e\u003c/a\u003e [feature] Add internal date-default hook for Moment Timezone (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6451\"\u003e#6451\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/863ed940556e6e63c43de23981a4853036a003ac\"\u003e\u003ccode\u003e863ed94\u003c/code\u003e\u003c/a\u003e [bugfix] Add stack traces to conditional deprecation warnings (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6450\"\u003e#6450\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/2c7abe1c42ee15445d30c2c5d536750a1e43a09a\"\u003e\u003ccode\u003e2c7abe1\u003c/code\u003e\u003c/a\u003e [bugfix] Apply postformat to locale relative time methods (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6448\"\u003e#6448\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/9c45ac38690c649c95e19923276b63da5fe2be26\"\u003e\u003ccode\u003e9c45ac3\u003c/code\u003e\u003c/a\u003e [bugfix] Include metadata in all-locales bundle (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6447\"\u003e#6447\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/f6eefc5fc7b44ceccbd007aeffc48ebc5eac30fa\"\u003e\u003ccode\u003ef6eefc5\u003c/code\u003e\u003c/a\u003e [bugfix] Validate timezone offset range (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6446\"\u003e#6446\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/136b441794a3bb207d593add3b59e9de0e062523\"\u003e\u003ccode\u003e136b441\u003c/code\u003e\u003c/a\u003e [bugfix] Avoid Object.assign in duration.humanize (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6443\"\u003e#6443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/0d1050437b40f66ac47e14b285bb3d09676cf2e0\"\u003e\u003ccode\u003e0d10504\u003c/code\u003e\u003c/a\u003e [bugfix] Fix locale('\u003cstrong\u003eproto\u003c/strong\u003e') corrupting the global locale (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6442\"\u003e#6442\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moment/moment/compare/2.29.4...2.31.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for moment since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=moment\u0026package-manager=npm_and_yarn\u0026previous-version=2.29.4\u0026new-version=2.31.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/BeWelcome/rox/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/BeWelcome/rox/pull/568","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/BeWelcome%2Frox/issues/568","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/568/packages"},{"uuid":"5774153204","node_id":"PR_kwDOLxoDjM8AAAABHe5SUw","number":109,"state":"closed","title":"chore(deps): bump moment from 2.30.1 to 2.31.0","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":3,"pull_request":true,"closed_at":"2026-10-09T06:58:10.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-09T06:53:27.000Z","updated_at":"2026-10-09T06:58:13.000Z","time_to_close":283,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"moment","old_version":"2.30.1","new_version":"2.31.0","repository_url":"https://github.com/moment/moment"}],"path":null,"ecosystem":"npm"},"body":"Bumps [moment](https://github.com/moment/moment) from 2.30.1 to 2.31.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/releases\"\u003emoment's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.31.0\u003c/h2\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/blob/develop/CHANGELOG.md\"\u003emoment's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch3\u003e2.31.0\u003c/h3\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/15b45d48a176312e8f34143c5a800090abf4787f\"\u003e\u003ccode\u003e15b45d4\u003c/code\u003e\u003c/a\u003e [pkg] Build 2.31.0 (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6452\"\u003e#6452\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/631cd81454ee001e1f508e21270eae0b6bb62974\"\u003e\u003ccode\u003e631cd81\u003c/code\u003e\u003c/a\u003e [pkg] Update changelog for upcoming release (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6394\"\u003e#6394\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/6caff9e0d54e85a63a6eb97d7361f1da35bc58f4\"\u003e\u003ccode\u003e6caff9e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/710703b7eac93535ad125cbf4feb3d42afed6fb3\"\u003e\u003ccode\u003e710703b\u003c/code\u003e\u003c/a\u003e [feature] Add internal date-default hook for Moment Timezone (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6451\"\u003e#6451\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/863ed940556e6e63c43de23981a4853036a003ac\"\u003e\u003ccode\u003e863ed94\u003c/code\u003e\u003c/a\u003e [bugfix] Add stack traces to conditional deprecation warnings (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6450\"\u003e#6450\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/2c7abe1c42ee15445d30c2c5d536750a1e43a09a\"\u003e\u003ccode\u003e2c7abe1\u003c/code\u003e\u003c/a\u003e [bugfix] Apply postformat to locale relative time methods (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6448\"\u003e#6448\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/9c45ac38690c649c95e19923276b63da5fe2be26\"\u003e\u003ccode\u003e9c45ac3\u003c/code\u003e\u003c/a\u003e [bugfix] Include metadata in all-locales bundle (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6447\"\u003e#6447\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/f6eefc5fc7b44ceccbd007aeffc48ebc5eac30fa\"\u003e\u003ccode\u003ef6eefc5\u003c/code\u003e\u003c/a\u003e [bugfix] Validate timezone offset range (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6446\"\u003e#6446\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/136b441794a3bb207d593add3b59e9de0e062523\"\u003e\u003ccode\u003e136b441\u003c/code\u003e\u003c/a\u003e [bugfix] Avoid Object.assign in duration.humanize (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6443\"\u003e#6443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/0d1050437b40f66ac47e14b285bb3d09676cf2e0\"\u003e\u003ccode\u003e0d10504\u003c/code\u003e\u003c/a\u003e [bugfix] Fix locale('\u003cstrong\u003eproto\u003c/strong\u003e') corrupting the global locale (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6442\"\u003e#6442\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moment/moment/compare/2.30.1...2.31.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for moment since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=moment\u0026package-manager=npm_and_yarn\u0026previous-version=2.30.1\u0026new-version=2.31.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/droidconKE/flutterconKE2024Web/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/droidconKE/flutterconKE2024Web/pull/109","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/droidconKE%2FflutterconKE2024Web/issues/109","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/109/packages"},{"uuid":"5770977798","node_id":"PR_kwDOMbEDbc8AAAABHcZvbg","number":591,"state":"open","title":"chore(deps): bump moment from 2.30.1 to 2.31.0","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-09T00:42:30.000Z","updated_at":"2026-10-09T00:44:24.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"moment","old_version":"2.30.1","new_version":"2.31.0","repository_url":"https://github.com/moment/moment"}],"path":null,"ecosystem":"npm"},"body":"Bumps [moment](https://github.com/moment/moment) from 2.30.1 to 2.31.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/releases\"\u003emoment's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.31.0\u003c/h2\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/blob/develop/CHANGELOG.md\"\u003emoment's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch3\u003e2.31.0\u003c/h3\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/15b45d48a176312e8f34143c5a800090abf4787f\"\u003e\u003ccode\u003e15b45d4\u003c/code\u003e\u003c/a\u003e [pkg] Build 2.31.0 (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6452\"\u003e#6452\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/631cd81454ee001e1f508e21270eae0b6bb62974\"\u003e\u003ccode\u003e631cd81\u003c/code\u003e\u003c/a\u003e [pkg] Update changelog for upcoming release (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6394\"\u003e#6394\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/6caff9e0d54e85a63a6eb97d7361f1da35bc58f4\"\u003e\u003ccode\u003e6caff9e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/710703b7eac93535ad125cbf4feb3d42afed6fb3\"\u003e\u003ccode\u003e710703b\u003c/code\u003e\u003c/a\u003e [feature] Add internal date-default hook for Moment Timezone (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6451\"\u003e#6451\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/863ed940556e6e63c43de23981a4853036a003ac\"\u003e\u003ccode\u003e863ed94\u003c/code\u003e\u003c/a\u003e [bugfix] Add stack traces to conditional deprecation warnings (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6450\"\u003e#6450\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/2c7abe1c42ee15445d30c2c5d536750a1e43a09a\"\u003e\u003ccode\u003e2c7abe1\u003c/code\u003e\u003c/a\u003e [bugfix] Apply postformat to locale relative time methods (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6448\"\u003e#6448\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/9c45ac38690c649c95e19923276b63da5fe2be26\"\u003e\u003ccode\u003e9c45ac3\u003c/code\u003e\u003c/a\u003e [bugfix] Include metadata in all-locales bundle (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6447\"\u003e#6447\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/f6eefc5fc7b44ceccbd007aeffc48ebc5eac30fa\"\u003e\u003ccode\u003ef6eefc5\u003c/code\u003e\u003c/a\u003e [bugfix] Validate timezone offset range (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6446\"\u003e#6446\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/136b441794a3bb207d593add3b59e9de0e062523\"\u003e\u003ccode\u003e136b441\u003c/code\u003e\u003c/a\u003e [bugfix] Avoid Object.assign in duration.humanize (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6443\"\u003e#6443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/0d1050437b40f66ac47e14b285bb3d09676cf2e0\"\u003e\u003ccode\u003e0d10504\u003c/code\u003e\u003c/a\u003e [bugfix] Fix locale('\u003cstrong\u003eproto\u003c/strong\u003e') corrupting the global locale (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6442\"\u003e#6442\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moment/moment/compare/2.30.1...2.31.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for moment since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=moment\u0026package-manager=npm_and_yarn\u0026previous-version=2.30.1\u0026new-version=2.31.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/DEFRA/forms-submission-api/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/DEFRA/forms-submission-api/pull/591","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/DEFRA%2Fforms-submission-api/issues/591","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/591/packages"},{"uuid":"5747895823","node_id":"PR_kwDOL8QT2c8AAAABHJ6Y-w","number":492,"state":"open","title":"chore(deps): bump moment from 2.30.1 to 2.31.0 in /worklenz-frontend","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-07T15:55:50.000Z","updated_at":"2026-10-07T15:55:59.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"moment","old_version":"2.30.1","new_version":"2.31.0","repository_url":"https://github.com/moment/moment"}],"path":"/worklenz-frontend","ecosystem":"npm"},"body":"Bumps [moment](https://github.com/moment/moment) from 2.30.1 to 2.31.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/releases\"\u003emoment's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.31.0\u003c/h2\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/blob/develop/CHANGELOG.md\"\u003emoment's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch3\u003e2.31.0\u003c/h3\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/15b45d48a176312e8f34143c5a800090abf4787f\"\u003e\u003ccode\u003e15b45d4\u003c/code\u003e\u003c/a\u003e [pkg] Build 2.31.0 (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6452\"\u003e#6452\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/631cd81454ee001e1f508e21270eae0b6bb62974\"\u003e\u003ccode\u003e631cd81\u003c/code\u003e\u003c/a\u003e [pkg] Update changelog for upcoming release (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6394\"\u003e#6394\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/6caff9e0d54e85a63a6eb97d7361f1da35bc58f4\"\u003e\u003ccode\u003e6caff9e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/710703b7eac93535ad125cbf4feb3d42afed6fb3\"\u003e\u003ccode\u003e710703b\u003c/code\u003e\u003c/a\u003e [feature] Add internal date-default hook for Moment Timezone (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6451\"\u003e#6451\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/863ed940556e6e63c43de23981a4853036a003ac\"\u003e\u003ccode\u003e863ed94\u003c/code\u003e\u003c/a\u003e [bugfix] Add stack traces to conditional deprecation warnings (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6450\"\u003e#6450\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/2c7abe1c42ee15445d30c2c5d536750a1e43a09a\"\u003e\u003ccode\u003e2c7abe1\u003c/code\u003e\u003c/a\u003e [bugfix] Apply postformat to locale relative time methods (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6448\"\u003e#6448\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/9c45ac38690c649c95e19923276b63da5fe2be26\"\u003e\u003ccode\u003e9c45ac3\u003c/code\u003e\u003c/a\u003e [bugfix] Include metadata in all-locales bundle (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6447\"\u003e#6447\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/f6eefc5fc7b44ceccbd007aeffc48ebc5eac30fa\"\u003e\u003ccode\u003ef6eefc5\u003c/code\u003e\u003c/a\u003e [bugfix] Validate timezone offset range (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6446\"\u003e#6446\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/136b441794a3bb207d593add3b59e9de0e062523\"\u003e\u003ccode\u003e136b441\u003c/code\u003e\u003c/a\u003e [bugfix] Avoid Object.assign in duration.humanize (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6443\"\u003e#6443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/0d1050437b40f66ac47e14b285bb3d09676cf2e0\"\u003e\u003ccode\u003e0d10504\u003c/code\u003e\u003c/a\u003e [bugfix] Fix locale('\u003cstrong\u003eproto\u003c/strong\u003e') corrupting the global locale (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6442\"\u003e#6442\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moment/moment/compare/2.30.1...2.31.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for moment since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=moment\u0026package-manager=npm_and_yarn\u0026previous-version=2.30.1\u0026new-version=2.31.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Worklenz/worklenz/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/Worklenz/worklenz/pull/492","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Worklenz%2Fworklenz/issues/492","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/492/packages"},{"uuid":"5738742055","node_id":"PR_kwDOSEc7Gs8AAAABHCkPTQ","number":372,"state":"closed","title":"Bump the npm_and_yarn group across 14 directories with 11 updates","user":"dependabot[bot]","labels":["dependencies","javascript","auto-closed: invalid-title"],"assignees":[],"locked":false,"comments_count":3,"pull_request":true,"closed_at":"2026-10-07T03:10:02.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-07T03:09:49.000Z","updated_at":"2026-10-07T03:10:12.000Z","time_to_close":13,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"npm_and_yarn","update_count":11,"packages":[{"name":"electron","old_version":"42.3.0","new_version":"42.10.0","repository_url":"https://github.com/electron/electron"},{"name":"markdown-it","old_version":"13.0.2","new_version":"14.3.1","repository_url":"https://github.com/markdown-it/markdown-it"},{"name":"moment","old_version":"2.30.1","new_version":"2.31.0","repository_url":"https://github.com/moment/moment"},{"name":"undici","old_version":"8.10.0","new_version":"8.10.2","repository_url":"https://github.com/nodejs/undici"},{"name":"adm-zip","old_version":"0.5.18","new_version":"0.6.1","repository_url":"https://github.com/cthackers/adm-zip"},{"name":"nanoid","old_version":"3.3.11","new_version":"3.3.12","repository_url":"https://github.com/ai/nanoid"},{"name":"nodemailer","old_version":"6.10.1","new_version":"10.0.9","repository_url":"https://github.com/nodemailer/nodemailer"},{"name":"fast-uri","old_version":"3.1.3","new_version":"3.1.8","repository_url":"https://github.com/fastify/fast-uri"},{"name":"joi","old_version":"17.5.0","new_version":"17.13.8","repository_url":"https://github.com/hapijs/joi"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 9 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [electron](https://github.com/electron/electron) | `42.3.0` | `42.10.0` |\n| [markdown-it](https://github.com/markdown-it/markdown-it) | `13.0.2` | `14.3.1` |\n| [moment](https://github.com/moment/moment) | `2.30.1` | `2.31.0` |\n| [undici](https://github.com/nodejs/undici) | `8.10.0` | `8.10.2` |\n| [adm-zip](https://github.com/cthackers/adm-zip) | `0.5.18` | `0.6.1` |\n| [nanoid](https://github.com/ai/nanoid) | `3.3.11` | `3.3.12` |\n| [nodemailer](https://github.com/nodemailer/nodemailer) | `6.10.1` | `10.0.9` |\n| [fast-uri](https://github.com/fastify/fast-uri) | `3.1.3` | `3.1.8` |\n| [joi](https://github.com/hapijs/joi) | `17.5.0` | `17.13.8` |\n\nBumps the npm_and_yarn group with 1 update in the /Assets/TinyMCE/JoplinLists directory: [brace-expansion](https://github.com/juliangruber/brace-expansion).\nBumps the npm_and_yarn group with 2 updates in the /packages/app-cli/tests/support/plugins/ai_chat directory: [brace-expansion](https://github.com/juliangruber/brace-expansion) and [fast-uri](https://github.com/fastify/fast-uri).\nBumps the npm_and_yarn group with 2 updates in the /packages/app-cli/tests/support/plugins/ai_search directory: [brace-expansion](https://github.com/juliangruber/brace-expansion) and [fast-uri](https://github.com/fastify/fast-uri).\nBumps the npm_and_yarn group with 4 updates in the /packages/app-cli/tests/support/plugins/codemirror5-and-codemirror6 directory: [moment](https://github.com/moment/moment), [nanoid](https://github.com/ai/nanoid), [brace-expansion](https://github.com/juliangruber/brace-expansion) and [ip-address](https://github.com/beaugunderson/ip-address).\nBumps the npm_and_yarn group with 2 updates in the /packages/app-cli/tests/support/plugins/codemirror6 directory: [nanoid](https://github.com/ai/nanoid) and [brace-expansion](https://github.com/juliangruber/brace-expansion).\nBumps the npm_and_yarn group with 2 updates in the /packages/app-cli/tests/support/plugins/menu directory: [brace-expansion](https://github.com/juliangruber/brace-expansion) and [fast-uri](https://github.com/fastify/fast-uri).\nBumps the npm_and_yarn group with 3 updates in the /packages/app-cli/tests/support/plugins/note_list_renderer directory: [moment](https://github.com/moment/moment), [nanoid](https://github.com/ai/nanoid) and [brace-expansion](https://github.com/juliangruber/brace-expansion).\nBumps the npm_and_yarn group with 4 updates in the /packages/app-desktop directory: [electron](https://github.com/electron/electron), [markdown-it](https://github.com/markdown-it/markdown-it), [moment](https://github.com/moment/moment) and [undici](https://github.com/nodejs/undici).\nBumps the npm_and_yarn group with 5 updates in the /packages/lib directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [markdown-it](https://github.com/markdown-it/markdown-it) | `13.0.2` | `14.3.1` |\n| [moment](https://github.com/moment/moment) | `2.30.1` | `2.31.0` |\n| [undici](https://github.com/nodejs/undici) | `8.10.0` | `8.10.2` |\n| [adm-zip](https://github.com/cthackers/adm-zip) | `0.5.18` | `0.6.1` |\n| [nanoid](https://github.com/ai/nanoid) | `3.3.11` | `3.3.12` |\n\nBumps the npm_and_yarn group with 1 update in the /packages/renderer directory: [markdown-it](https://github.com/markdown-it/markdown-it).\nBumps the npm_and_yarn group with 2 updates in the /packages/server directory: [markdown-it](https://github.com/markdown-it/markdown-it) and [nodemailer](https://github.com/nodemailer/nodemailer).\nBumps the npm_and_yarn group with 2 updates in the /packages/tools directory: [markdown-it](https://github.com/markdown-it/markdown-it) and [moment](https://github.com/moment/moment).\nBumps the npm_and_yarn group with 2 updates in the /packages/utils directory: [markdown-it](https://github.com/markdown-it/markdown-it) and [moment](https://github.com/moment/moment).\n\nUpdates `electron` from 42.3.0 to 42.10.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/electron/electron/releases\"\u003eelectron's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eelectron v42.10.0\u003c/h2\u003e\n\u003ch1\u003eRelease Notes for v42.10.0\u003c/h1\u003e\n\u003ch2\u003eFeatures\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed contentTracing module to capture Node.js trace categories. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52973\"\u003e#52973\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eFixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed DevTools device metrics overrides persisting indefinitely when a remote debugging client disconnected without clearing them. \u003ca href=\"https://redirect.github.com/electron/electron/pull/53133\"\u003e#53133\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52946\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52930\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed DevTools popup and context menus not appearing when DevTools is hosted in a custom window via \u003ccode\u003ewebContents.setDevToolsWebContents()\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52981\"\u003e#52981\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52937\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52434\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003eBrowserWindow.unmaximize()\u003c/code\u003e and \u003ccode\u003erestore()\u003c/code\u003e having no effect on Wayland when the window was maximized immediately after creation. \u003ca href=\"https://redirect.github.com/electron/electron/pull/53126\"\u003e#53126\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/53124\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003eUncaught illegal access\u003c/code\u003e errors and possible renderer crashes after closing a same-process child window or removing an iframe with \u003ccode\u003enodeIntegrationInSubFrames\u003c/code\u003e enabled. \u003ca href=\"https://redirect.github.com/electron/electron/pull/53042\"\u003e#53042\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/53040\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003edialog.showOpenDialog\u003c/code\u003e/\u003ccode\u003edialog.showSaveDialog\u003c/code\u003e opening at an unusable location on Linux when \u003ccode\u003edefaultPath\u003c/code\u003e is a bare filename without a directory. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52980\"\u003e#52980\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52401\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52402\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed a crash on Linux when the D-Bus session bus disconnected while the app was running, such as at logout or when dbus is restarted. \u003ca href=\"https://redirect.github.com/electron/electron/pull/53094\"\u003e#53094\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/53095\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/53096\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed a crash on Windows when V8 posted a delayed worker task during shutdown. \u003ca href=\"https://redirect.github.com/electron/electron/pull/53014\"\u003e#53014\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/53013\"\u003e43\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed a crash with \u003ccode\u003eapp.setLoginItemSettings\u003c/code\u003e if a non-UTF8 service name is used. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52989\"\u003e#52989\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52944\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52801\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed a possible crash (SIGABRT) during process exit when the process had loaded \u003ccode\u003etls\u003c/code\u003e/\u003ccode\u003ehttps\u003c/code\u003e shortly before exiting, affecting \u003ccode\u003eapp.exit()\u003c/code\u003e before \u003ccode\u003eready\u003c/code\u003e and short-lived \u003ccode\u003eELECTRON_RUN_AS_NODE\u003c/code\u003e / \u003ccode\u003echild_process.fork()\u003c/code\u003e scripts. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52992\"\u003e#52992\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52870\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52871\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed a possible main process crash at quit when a session was created from JavaScript that runs during shutdown. \u003ca href=\"https://redirect.github.com/electron/electron/pull/53132\"\u003e#53132\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52925\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52924\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed a rare crash in the main process when DevTools were opened and a garbage collection ran before the DevTools frontend finished loading. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52994\"\u003e#52994\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52903\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52904\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed a renderer crash when a page calls \u003ccode\u003eSpeechRecognition.available()\u003c/code\u003e or \u003ccode\u003eSpeechRecognition.install()\u003c/code\u003e with \u003ccode\u003eprocessLocally\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/electron/electron/pull/53016\"\u003e#53016\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/53015\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/53021\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed an issue on Linux where the system theme color appeared at the top edge of frameless windows. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52978\"\u003e#52978\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/53006\"\u003e41\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52179\"\u003e43\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed an issue where some values passed into \u003ccode\u003erequestSingleInstanceLock\u003c/code\u003e could result in a crash. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52982\"\u003e#52982\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52471\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52470\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed crash in sharedTexture module when GPU context becomes unavailable. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52983\"\u003e#52983\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52938\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52926\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed document title updates when using back/forward navigation using the same document without utilizing \u003ccode\u003ebrowserWindow.setTitle()\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/electron/electron/pull/53099\"\u003e#53099\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/53023\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52968\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed the built-in PDF viewer not rendering documents in in-memory sessions (partitions without the \u003ccode\u003epersist:\u003c/code\u003e prefix). \u003ca href=\"https://redirect.github.com/electron/electron/pull/52990\"\u003e#52990\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52835\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52834\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed titleBarOverlay.color set to \u003ccode\u003ergba(0,0,0,0)\u003c/code\u003e failing back to default frame color. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52976\"\u003e#52976\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/53004\"\u003e41\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52010\"\u003e43\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed utility process crashes at exit on Windows 11 24H2 and later. \u003ca href=\"https://redirect.github.com/electron/electron/pull/53091\"\u003e#53091\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/53092\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/53093\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eOther Changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBackported fixes from upstream Chromium and V8. \u003ca href=\"https://redirect.github.com/electron/electron/pull/53060\"\u003e#53060\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a 1-in-200 chance per renderer process on Windows of scripts on the first page load being compiled without their V8 code cache. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52988\"\u003e#52988\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52943\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52792\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed a Windows x64 renderer performance regression introduced in 42.8.1 that made style/layout work (and app startup) noticeably slower. \u003ca href=\"https://redirect.github.com/electron/electron/pull/53064\"\u003e#53064\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a stall of tens of milliseconds while creating the first \u003ccode\u003eBrowserWindow\u003c/code\u003e on Linux.\n\u003cul\u003e\n\u003cli\u003eImproved the performance of file lookups inside ASAR archives and of large files served from them to the renderer.\u003c/li\u003e\n\u003cli\u003eImproved the performance of calls through \u003ccode\u003econtextBridge\u003c/code\u003e-exposed APIs.\u003c/li\u003e\n\u003cli\u003eReduced the main-thread cost of sending large values through \u003ccode\u003eipcRenderer\u003c/code\u003e, \u003ccode\u003eipcMain\u003c/code\u003e handlers and \u003ccode\u003ewebContents.send\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/electron/electron/pull/53019\"\u003e#53019\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/53018\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/53017\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eImproved startup time of \u003ccode\u003eutilityProcess.fork()\u003c/code\u003e, \u003ccode\u003echild_process.fork()\u003c/code\u003e / \u003ccode\u003eELECTRON_RUN_AS_NODE\u003c/code\u003e child processes and Node.js-enabled renderers. \u003ca href=\"https://redirect.github.com/electron/electron/pull/53136\"\u003e#53136\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/53135\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/53134\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eLinux arm64, Windows arm64 and macOS x64 builds now start the main process from the embedded Node.js startup snapshot like the other platforms, improving startup time. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52880\"\u003e#52880\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52881\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52879\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eelectron v42.9.3\u003c/h2\u003e\n\u003ch1\u003eRelease Notes for v42.9.3\u003c/h1\u003e\n\u003ch2\u003eFixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a graphical glitch on Linux where thin borders appeared past the drop shadows on frameless windows when multiple windows were created. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52772\"\u003e#52772\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52607\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52606\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed a memory leak when creating BrowserWindows. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52893\"\u003e#52893\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52892\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52894\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed an issue on Windows where the app process could fail to exit after \u003ccode\u003eapp.quit()\u003c/code\u003e while a \u003ccode\u003eshell.openExternal()\u003c/code\u003e or \u003ccode\u003eshell.openPath()\u003c/code\u003e call was still waiting on a system \u0026quot;Open with\u0026quot; dialog. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52900\"\u003e#52900\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52899\"\u003e41\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52897\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52898\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed custom V8 snapshots (\u003ccode\u003eelectron-mksnapshot\u003c/code\u003e, and the \u003ccode\u003eloadBrowserProcessSpecificV8Snapshot\u003c/code\u003e fuse) having no effect in the main process on macOS arm64, Linux x64 and Windows x64. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52876\"\u003e#52876\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52877\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52878\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eOther Changes\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/9f0109679540320c5dc5b7bef0aa94733058e8c2\"\u003e\u003ccode\u003e9f01096\u003c/code\u003e\u003c/a\u003e fix: window stuck maximized on Wayland after early maximize() (\u003ca href=\"https://redirect.github.com/electron/electron/issues/53126\"\u003e#53126\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/c411b7ccad8d71964428aad52da738359cf70fec\"\u003e\u003ccode\u003ec411b7c\u003c/code\u003e\u003c/a\u003e perf: boot every Node.js-hosting process from the Node snapshot / code cache ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/5751bc5fefb180e7b2fef48a3afc350f1f1f6d46\"\u003e\u003ccode\u003e5751bc5\u003c/code\u003e\u003c/a\u003e fix: clear device metrics overrides when a DevTools client disconnects (\u003ca href=\"https://redirect.github.com/electron/electron/issues/53133\"\u003e#53133\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/277efdf2cdee0e289f127c99570706e2d4589f02\"\u003e\u003ccode\u003e277efdf\u003c/code\u003e\u003c/a\u003e fix: crash in gin::PerIsolateData::NotifyDisposed when a session is created d...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/d054052a752ea88556b13b5d322f398907319a04\"\u003e\u003ccode\u003ed054052\u003c/code\u003e\u003c/a\u003e chore: iwyu commonly-included headers in shell/ (\u003ca href=\"https://redirect.github.com/electron/electron/issues/52972\"\u003e#52972\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/1645b087103c7401be3ff202be3bbf61cfca73c6\"\u003e\u003ccode\u003e1645b08\u003c/code\u003e\u003c/a\u003e build: update PGO profiles (\u003ca href=\"https://redirect.github.com/electron/electron/issues/53119\"\u003e#53119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/e4ea00f761c6970a4181fc0932251a44d943e2d7\"\u003e\u003ccode\u003ee4ea00f\u003c/code\u003e\u003c/a\u003e build: update PGO profiles (\u003ca href=\"https://redirect.github.com/electron/electron/issues/53113\"\u003e#53113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/b5c236f24546a8c53664525cbd26dbcf5c34c549\"\u003e\u003ccode\u003eb5c236f\u003c/code\u003e\u003c/a\u003e fix: update document title on back or forward navigation (\u003ca href=\"https://redirect.github.com/electron/electron/issues/53099\"\u003e#53099\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/569c64a6e9ff893d2bdd9c7914a22ee0023598ac\"\u003e\u003ccode\u003e569c64a\u003c/code\u003e\u003c/a\u003e build: skip linux-arm in PGO profile generation (\u003ca href=\"https://redirect.github.com/electron/electron/issues/53111\"\u003e#53111\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/d13ae9f14b56f4fb0730cf9e582956ddf986e2f4\"\u003e\u003ccode\u003ed13ae9f\u003c/code\u003e\u003c/a\u003e fix: illegal access errors when a same-process child window or subframe close...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/electron/electron/compare/v42.3.0...v42.10.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `markdown-it` from 13.0.2 to 14.3.1\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/markdown-it/markdown-it/blob/14.3.1/CHANGELOG.md\"\u003emarkdown-it's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[14.3.1] - 2026-08-27\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackported 15.0.1 fixes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[14.3.0] - 2026-07-02\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReworked build pipeline \u0026amp; tools.\u003c/li\u003e\n\u003cli\u003eAdded source maps.\u003c/li\u003e\n\u003cli\u003eBumped \u003ccode\u003elinkify-it\u003c/code\u003e to 5.0.2.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePreserve backslash-space hard line breaks, matching CommonMark 6.7, \u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1185\"\u003e#1185\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[14.2.0] - 2026-05-24\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eisPunctCharCode\u003c/code\u003e to utilities.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDon't end HTML comment blocks on a blank line, \u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1155\"\u003e#1155\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eProperly recognize astral chars (surrogates) in delimiter scans for\nemphasis-like markers, \u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1072\"\u003e#1072\u003c/a\u003e. Big thanks to \u003ca href=\"https://github.com/tats-u\"\u003e\u003ccode\u003e@​tats-u\u003c/code\u003e\u003c/a\u003e for his global efforts\nwith improving CJK support.\u003c/li\u003e\n\u003cli\u003ePreserve unicode whitespaces when trimm headings/paragraphs, \u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1074\"\u003e#1074\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eMore strict entities decode to avoid false positives \u003ccode\u003e;\u003c/code\u003e, \u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1096\"\u003e#1096\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eRestore block parser state on fail in \u003ccode\u003elheading\u003c/code\u003e rule, \u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1131\"\u003e#1131\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed poor smartquotes perfomance on \u0026gt; 70k quotes in single block\u003c/li\u003e\n\u003cli\u003eBumped linkify-it to 5.0.1 with fixed potential perfomance issues.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[14.1.1] - 2026-01-11\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed regression from v13 in linkify inline rule. Specific patterns could\ncause high CPU use. Thanks to \u003ca href=\"https://github.com/ltduc147\"\u003e\u003ccode\u003e@​ltduc147\u003c/code\u003e\u003c/a\u003e for report.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[14.1.0] - 2024-03-19\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated CM spec compatibility to 0.31.2, \u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1009\"\u003e#1009\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed quadratic complexity when parsing references, \u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/996\"\u003e#996\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eFixed quadratic output size with pathological user input in tables, \u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1000\"\u003e#1000\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/a855f10b1b796ca42178952b4b83b9c8b677ddb8\"\u003e\u003ccode\u003ea855f10\u003c/code\u003e\u003c/a\u003e 14.3.1 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/ad70f6b7cff64bee10e42a774147112480ca0d49\"\u003e\u003ccode\u003ead70f6b\u003c/code\u003e\u003c/a\u003e Backported 15.0.1 fixes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/b407f3b0667c9491cc52c6550736ee5a31721baa\"\u003e\u003ccode\u003eb407f3b\u003c/code\u003e\u003c/a\u003e Ignore generated API docs in lint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/bf025adb983e90af426761a08cc76e4e41ab0239\"\u003e\u003ccode\u003ebf025ad\u003c/code\u003e\u003c/a\u003e Prepare package.json for v14 backports\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/2d9bbea7df2ab1a48caecfafc39cb8599f193d3c\"\u003e\u003ccode\u003e2d9bbea\u003c/code\u003e\u003c/a\u003e fix: recognize lowercase declarations as HTML blocks (CommonMark 4.6) (\u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1189\"\u003e#1189\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/a311cfbeb7dcdb86d001a21facaf60190414ca4d\"\u003e\u003ccode\u003ea311cfb\u003c/code\u003e\u003c/a\u003e fix: keep literal backslash before space in link destination (CommonMark 6.3)...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/ff0ee084fc6b0d10fac049fa562bc2925b5cc723\"\u003e\u003ccode\u003eff0ee08\u003c/code\u003e\u003c/a\u003e 14.3.0 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/52e2749ab25aaf841bf74b50560929aa93b8e14d\"\u003e\u003ccode\u003e52e2749\u003c/code\u003e\u003c/a\u003e Bump linkify-it / vite deps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/56c2404e6d3e78632ce7b37a95f289fc04330c76\"\u003e\u003ccode\u003e56c2404\u003c/code\u003e\u003c/a\u003e fix: keep backslash-space hard line break (CommonMark 6.7) (\u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1185\"\u003e#1185\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/0fbb18b23145158a39255f7476c781dbce320a16\"\u003e\u003ccode\u003e0fbb18b\u003c/code\u003e\u003c/a\u003e Bump vite from 8.0.14 to 8.0.16 (\u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1181\"\u003e#1181\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/markdown-it/markdown-it/compare/13.0.2...14.3.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `moment` from 2.30.1 to 2.31.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/releases\"\u003emoment's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.31.0\u003c/h2\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/blob/develop/CHANGELOG.md\"\u003emoment's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch3\u003e2.31.0\u003c/h3\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/15b45d48a176312e8f34143c5a800090abf4787f\"\u003e\u003ccode\u003e15b45d4\u003c/code\u003e\u003c/a\u003e [pkg] Build 2.31.0 (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6452\"\u003e#6452\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/631cd81454ee001e1f508e21270eae0b6bb62974\"\u003e\u003ccode\u003e631cd81\u003c/code\u003e\u003c/a\u003e [pkg] Update changelog for upcoming release (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6394\"\u003e#6394\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/6caff9e0d54e85a63a6eb97d7361f1da35bc58f4\"\u003e\u003ccode\u003e6caff9e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/710703b7eac93535ad125cbf4feb3d42afed6fb3\"\u003e\u003ccode\u003e710703b\u003c/code\u003e\u003c/a\u003e [feature] Add internal date-default hook for Moment Timezone (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6451\"\u003e#6451\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/863ed940556e6e63c43de23981a4853036a003ac\"\u003e\u003ccode\u003e863ed94\u003c/code\u003e\u003c/a\u003e [bugfix] Add stack traces to conditional deprecation warnings (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6450\"\u003e#6450\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/2c7abe1c42ee15445d30c2c5d536750a1e43a09a\"\u003e\u003ccode\u003e2c7abe1\u003c/code\u003e\u003c/a\u003e [bugfix] Apply postformat to locale relative time methods (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6448\"\u003e#6448\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/9c45ac38690c649c95e19923276b63da5fe2be26\"\u003e\u003ccode\u003e9c45ac3\u003c/code\u003e\u003c/a\u003e [bugfix] Include metadata in all-locales bundle (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6447\"\u003e#6447\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/f6eefc5fc7b44ceccbd007aeffc48ebc5eac30fa\"\u003e\u003ccode\u003ef6eefc5\u003c/code\u003e\u003c/a\u003e [bugfix] Validate timezone offset range (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6446\"\u003e#6446\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/136b441794a3bb207d593add3b59e9de0e062523\"\u003e\u003ccode\u003e136b441\u003c/code\u003e\u003c/a\u003e [bugfix] Avoid Object.assign in duration.humanize (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6443\"\u003e#6443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/0d1050437b40f66ac47e14b285bb3d09676cf2e0\"\u003e\u003ccode\u003e0d10504\u003c/code\u003e\u003c/a\u003e [bugfix] Fix locale('\u003cstrong\u003eproto\u003c/strong\u003e') corrupting the global locale (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6442\"\u003e#6442\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moment/moment/compare/2.30.1...2.31.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for moment since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `undici` from 8.10.0 to 8.10.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nodejs/undici/releases\"\u003eundici's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev8.10.2\u003c/h2\u003e\n\u003ch2\u003e⚠️ Security fixes\u003c/h2\u003e\n\u003ch3\u003eHigh severity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-vp8m-p9jh-q5pm\"\u003eGHSA-vp8m-p9jh-q5pm\u003c/a\u003e: cache and deduplication interceptors could use caller-controlled request metadata instead of the authoritative dispatcher origin, enabling cross-origin cache poisoning and data disclosure. Undici now derives interceptor identities from the dispatcher origin and bypasses origin-dependent interceptors when no authoritative origin exists. Fixed by \u003ca href=\"https://github.com/nodejs/undici/commit/caf6194d3dae989b731ed87ab85f182befe5eb80\"\u003ecaf6194d\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-w293-vg96-wgc3\"\u003eGHSA-w293-vg96-wgc3\u003c/a\u003e: \u003ccode\u003eBalancedPool\u003c/code\u003e could drop function-valued connection options while cloning its configuration, including custom TLS certificate validation callbacks. Undici now preserves \u003ccode\u003econnect\u003c/code\u003e and legacy \u003ccode\u003etls\u003c/code\u003e options when creating upstreams. Fixed by \u003ca href=\"https://github.com/nodejs/undici/commit/8f5868fbdbc8f1146dfc1bcd1f2d117790141390\"\u003e8f5868fb\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-rfgv-xxqx-mfg5\"\u003eGHSA-rfgv-xxqx-mfg5\u003c/a\u003e: a WebSocket server could select a subprotocol when none was requested, causing an uncaught \u003ccode\u003eTypeError\u003c/code\u003e that could terminate the process. Undici now rejects the handshake with protocol error 1002. Fixed by \u003ca href=\"https://github.com/nodejs/undici/commit/66e12816064cf3068f63bd134748b7fc4e779bad\"\u003e66e12816\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMedium severity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-3wwx-pv8p-q78v\"\u003eGHSA-3wwx-pv8p-q78v\u003c/a\u003e: a malformed permessage-deflate payload exceeding the configured decompression limit could emit an unhandled zlib error and terminate the process. Undici now destroys the inflater after reaching the limit. Fixed by \u003ca href=\"https://github.com/nodejs/undici/commit/4411a238a98e8791da5fff10cc9e3578a7668ed6\"\u003e4411a238\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-rx4f-c7p8-82vq\"\u003eGHSA-rx4f-c7p8-82vq\u003c/a\u003e: an unclean \u003ccode\u003eWebSocketStream\u003c/code\u003e close could create an unobserved rejected promise when its writable stream was locked, potentially terminating the process. Undici now propagates the failure through the retained writable stream controller. Fixed by \u003ca href=\"https://github.com/nodejs/undici/commit/662d0ea671fe64139e79533c913fce412765e1d7\"\u003e662d0ea6\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-2jfj-6hjv-fm6j\"\u003eGHSA-2jfj-6hjv-fm6j\u003c/a\u003e: shared caches could store and replay responses containing \u003ccode\u003eSet-Cookie\u003c/code\u003e, disclosing one user's cookies to another caller. Undici now excludes these responses from shared caches, including existing entries and revalidation paths. Fixed by \u003ca href=\"https://github.com/nodejs/undici/commit/cb75bbb34224a968b4ad80cab8b7aba5e0b3b28a\"\u003ecb75bbb3\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-3xpg-4rpp-hhhm\"\u003eGHSA-3xpg-4rpp-hhhm\u003c/a\u003e: the decompression interceptor did not bound decoded output, allowing compressed responses to consume excessive memory. Undici now limits every decompression stage to 64 MiB by default and supports a configurable \u003ccode\u003emaxSize\u003c/code\u003e. Fixed by \u003ca href=\"https://github.com/nodejs/undici/commit/7aac7f12f757844763c8b8f1ab6e305e80d55838\"\u003e7aac7f12\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-pmjh-fq2x-6v4x\"\u003eGHSA-pmjh-fq2x-6v4x\u003c/a\u003e: a terminal retry failure after response headers were exposed could orphan the original response body, causing consumers to hang indefinitely. Undici now propagates the terminal error to the exposed body. Fixed by \u003ca href=\"https://github.com/nodejs/undici/commit/e905b5b87e6953bcc542af90557b2fee5b7b5974\"\u003ee905b5b8\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eLow severity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-8436-99hf-9mmv\"\u003eGHSA-8436-99hf-9mmv\u003c/a\u003e: cache interceptors could store and replay responses to unsafe HTTP methods such as \u003ccode\u003ePOST\u003c/code\u003e or \u003ccode\u003eDELETE\u003c/code\u003e. Undici now restricts cache reads and writes to safe methods while preserving invalidation by successful unsafe requests. Fixed by \u003ca href=\"https://github.com/nodejs/undici/commit/2be07bf97b3022e0324142d31f99f6e019d815e3\"\u003e2be07bf9\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-2gqq-gqf2-x968\"\u003eGHSA-2gqq-gqf2-x968\u003c/a\u003e: the dump interceptor could treat an oversized chunked response as successfully truncated when no \u003ccode\u003eContent-Length\u003c/code\u003e was present. Undici now enforces \u003ccode\u003emaxSize\u003c/code\u003e against received bytes and aborts oversized responses. Fixed by \u003ca href=\"https://github.com/nodejs/undici/commit/6d583124e7cf60b640097d64144ed633cc450584\"\u003e6d583124\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-r53p-7pc4-xj5r\"\u003eGHSA-r53p-7pc4-xj5r\u003c/a\u003e: the retry interceptor could concatenate a resumed response with inconsistent framing into downstream output, enabling response splitting or corruption. Undici now validates \u003ccode\u003eContent-Range\u003c/code\u003e against the original response framing before resuming. Fixed by \u003ca href=\"https://github.com/nodejs/undici/commit/0160a719063fb0a77f4fdf9500b9166b91e14329\"\u003e0160a719\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild(deps-dev): bump undici from 6.27.0 to 6.28.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5653\"\u003enodejs/undici#5653\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump jest from 30.4.2 to 30.5.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5750\"\u003enodejs/undici#5750\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action/analyze from 4.37.3 to 4.37.9 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5752\"\u003enodejs/undici#5752\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action/upload-sarif from 4.36.2 to 4.37.9 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5754\"\u003enodejs/undici#5754\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest(h2): cover stream reset with NGHTTP2_INTERNAL_ERROR by \u003ca href=\"https://github.com/zeexzeex\"\u003e\u003ccode\u003e@​zeexzeex\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5725\"\u003enodejs/undici#5725\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(retry): reject invalid resumed responses by \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5724\"\u003enodejs/undici#5724\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: make stale-while-revalidate cache update test deterministic by \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5722\"\u003enodejs/undici#5722\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: avoid unbounded recursion in Set-Cookie attribute parser by \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5757\"\u003enodejs/undici#5757\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: honor SOCKS5 connection timeout by \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5733\"\u003enodejs/undici#5733\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(eventsource): validate Last-Event-ID on reconnect by \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5746\"\u003enodejs/undici#5746\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: avoid duplicate release attempts by \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5745\"\u003enodejs/undici#5745\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(cache): refetch when 304 adds vary fields by \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5732\"\u003enodejs/undici#5732\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etypes: expose PendingInterceptor and PendingInterceptorsFormatter on the MockAgent namespace by \u003ca href=\"https://github.com/RaphaelFakhri\"\u003e\u003ccode\u003e@​RaphaelFakhri\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5721\"\u003enodejs/undici#5721\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci(codeql): align CodeQL action versions to v4.37.9 by \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5759\"\u003enodejs/undici#5759\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump \u003ccode\u003e@​humanfs/node\u003c/code\u003e from 0.16.7 to 0.16.8 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5760\"\u003enodejs/undici#5760\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(proxy-agent): guard Proxy-Authorization in iterable header containers by \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5758\"\u003enodejs/undici#5758\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: name the parameters these two blocks describe by \u003ca href=\"https://github.com/darkdi\"\u003e\u003ccode\u003e@​darkdi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5735\"\u003enodejs/undici#5735\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(websocket): fail the connection on a non-200 h2 extended CONNECT response by \u003ca href=\"https://github.com/kjsik11\"\u003e\u003ccode\u003e@​kjsik11\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5751\"\u003enodejs/undici#5751\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest(node-fetch): re-enable the set-cookie header combining test by \u003ca href=\"https://github.com/pacocartones\"\u003e\u003ccode\u003e@​pacocartones\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5730\"\u003enodejs/undici#5730\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(retry): forward rawHeaders writes through RetryController by \u003ca href=\"https://github.com/official-burak\"\u003e\u003ccode\u003e@​official-burak\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5727\"\u003enodejs/undici#5727\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(fetch): only send Sec-Fetch-Mode to potentially trustworthy URLs by \u003ca href=\"https://github.com/kjsik11\"\u003e\u003ccode\u003e@​kjsik11\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5738\"\u003enodejs/undici#5738\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/darkdi\"\u003e\u003ccode\u003e@​darkdi\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5735\"\u003enodejs/undici#5735\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kjsik11\"\u003e\u003ccode\u003e@​kjsik11\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5751\"\u003enodejs/undici#5751\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/5e541e0b9df7563e5766bbd469fbfe383d9ae6ca\"\u003e\u003ccode\u003e5e541e0\u003c/code\u003e\u003c/a\u003e Bumped v8.10.2 (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5771\"\u003e#5771\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/eb04cc39954e63e9b46bdf824e6efad9fff2e7b5\"\u003e\u003ccode\u003eeb04cc3\u003c/code\u003e\u003c/a\u003e fix(fetch): only send Sec-Fetch-Mode to potentially trustworthy URLs (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5738\"\u003e#5738\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/e905b5b87e6953bcc542af90557b2fee5b7b5974\"\u003e\u003ccode\u003ee905b5b\u003c/code\u003e\u003c/a\u003e fix(retry): settle exposed body on terminal failure\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/0160a719063fb0a77f4fdf9500b9166b91e14329\"\u003e\u003ccode\u003e0160a71\u003c/code\u003e\u003c/a\u003e fix(retry): validate resumed response framing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/66e12816064cf3068f63bd134748b7fc4e779bad\"\u003e\u003ccode\u003e66e1281\u003c/code\u003e\u003c/a\u003e fix(websocket): reject unrequested subprotocols\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/7aac7f12f757844763c8b8f1ab6e305e80d55838\"\u003e\u003ccode\u003e7aac7f1\u003c/code\u003e\u003c/a\u003e fix(decompress): limit decompressed response size\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/cb75bbb34224a968b4ad80cab8b7aba5e0b3b28a\"\u003e\u003ccode\u003ecb75bbb\u003c/code\u003e\u003c/a\u003e fix(cache): do not cache Set-Cookie in shared caches\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/6d583124e7cf60b640097d64144ed633cc450584\"\u003e\u003ccode\u003e6d58312\u003c/code\u003e\u003c/a\u003e fix(interceptor/dump): abort oversized chunked responses\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/8f5868fbdbc8f1146dfc1bcd1f2d117790141390\"\u003e\u003ccode\u003e8f5868f\u003c/code\u003e\u003c/a\u003e fix: preserve BalancedPool connection options\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/2be07bf97b3022e0324142d31f99f6e019d815e3\"\u003e\u003ccode\u003e2be07bf\u003c/code\u003e\u003c/a\u003e fix(cache): reject unsafe method response caching\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/nodejs/undici/compare/v8.10.0...v8.10.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `adm-zip` from 0.5.18 to 0.6.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cthackers/adm-zip/releases\"\u003eadm-zip's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.6.1\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cthackers/adm-zip/compare/v0.6.0...v0.6.1\"\u003ehttps://github.com/cthackers/adm-zip/compare/v0.6.0...v0.6.1\u003c/a\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dev dependencies\u003c/li\u003e\n\u003cli\u003eFixed uncaught crash in async decompression on malformed DEFLATE data\u003c/li\u003e\n\u003cli\u003eFixed addLocalFolder following symlinks out of the archived folder\u003c/li\u003e\n\u003cli\u003eStripped setuid/setgid/sticky bits from extracted file permissions\u003c/li\u003e\n\u003cli\u003eEnforced the decompression size cap on the async path and for size 0\u003c/li\u003e\n\u003cli\u003eRejected archives with duplicate entry names\u003c/li\u003e\n\u003cli\u003eBlocked extraction from writing through symlinks inside the target\u003c/li\u003e\n\u003cli\u003eRouted malformed-header parse errors through the async callback\u003c/li\u003e\n\u003cli\u003eRejected zip entries whose declared data extent runs past the buffer\u003c/li\u003e\n\u003cli\u003eFixed addLocalFolderPromise hanging on empty folders and swallowing errors\u003c/li\u003e\n\u003cli\u003eFixed addLocalFolderAsync2 mangling local paths on Windows\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.6.0\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cthackers/adm-zip/compare/v0.5.18...v0.6.0\"\u003ehttps://github.com/cthackers/adm-zip/compare/v0.5.18...v0.6.0\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eThis release fixes a security vulnerability (CVE-2026-39244), resolves several long-standing bugs, ships built-in TypeScript types, and includes two behavior changes worth reading before you upgrade.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eextractEntryTo(dirEntry, target, maintainEntryPath = false) now preserves subdirectories instead of flattening files into the target folder by basename (which also silently overwrote same-named files). (\u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/306\"\u003e#306\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eExtraction no longer fails when the modification time can't be set — utimes is now best-effort. (\u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/379\"\u003e#379\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMinimum Node.js is now 14 (the code already required it; engines was incorrectly \u0026gt;=12).\u003c/li\u003e\n\u003cli\u003eCVE-2026-39244 — a crafted archive declaring a huge uncompressed size could force an unbounded Buffer.alloc and OOM the process; allocation is now bounded by the data actually present. Reported by Daniel Púa (devploit), Anh Hong, and José Antonio Zamudio Amaya. (\u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/568\"\u003e#568\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHardened entry-name lookup against object injection (\u003cstrong\u003eproto\u003c/strong\u003e names). Prototype-less table.\u003c/li\u003e\n\u003cli\u003eData-descriptor regression rejecting valid archives (\u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/548\"\u003e#548\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/533\"\u003e#533\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/554\"\u003e#554\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDirectory permissions not restored on extract (\u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/530\"\u003e#530\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eInfinite recursion on symlink loops in addLocalFolder (\u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/541\"\u003e#541\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUncaught process crash in writeFileToAsync on write failure (\u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/470\"\u003e#470\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/459\"\u003e#459\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/402\"\u003e#402\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEmpty name on directory entries (\u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/466\"\u003e#466\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest() always returned false for archives with files\u003c/li\u003e\n\u003cli\u003e~6× faster entry sorting for large archives\u003c/li\u003e\n\u003cli\u003eBuilt-in TypeScript definitions (types.d.ts) — you can drop \u003ccode\u003e@​types/adm-zip\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cthackers/adm-zip/blob/master/history.md\"\u003eadm-zip's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e0.6.0 / 2026-07-10\u003c/h1\u003e\n\u003cp\u003eSecurity\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eFixed CVE-2026-39244: a crafted archive declaring a huge uncompressed size could force an unbounded \u003ccode\u003eBuffer.alloc\u003c/code\u003e (memory exhaustion / DoS) before any validation. Allocation is now bounded by the data actually present — STORED output is sized from the real bytes, DEFLATED output is grown by the inflater and capped at the declared size (\u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/568\"\u003e#568\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHardened the internal entry-name lookup table against object injection: entry names come from untrusted archives, and a name such as \u003ccode\u003e__proto__\u003c/code\u003e previously resolved to \u003ccode\u003eObject.prototype\u003c/code\u003e, crashing \u003ccode\u003eaddFile\u003c/code\u003e and hiding the entry from \u003ccode\u003egetEntry\u003c/code\u003e/\u003ccode\u003ereadFile\u003c/code\u003e. The table is now prototype-less\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eBug fixes\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a regression (0.5.15) that rejected valid archives using a data descriptor (general-purpose bit 3). The payload is now validated against the authoritative central-directory CRC instead of requiring/parsing the trailing descriptor (\u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/548\"\u003e#548\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/533\"\u003e#533\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/554\"\u003e#554\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003eextractAllTo\u003c/code\u003e/\u003ccode\u003eextractAllToAsync\u003c/code\u003e not restoring directory permissions with \u003ccode\u003ekeepOriginalPermission\u003c/code\u003e; directory modes are applied after their contents are written, deepest path first, and no longer lock the extractor out of a restrictive directory (\u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/530\"\u003e#530\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFixed infinite recursion in \u003ccode\u003eaddLocalFolder\u003c/code\u003e when a folder contains a symlink pointing back to an ancestor (e.g. workspace \u003ccode\u003enode_modules\u003c/code\u003e); the walk now tracks resolved real paths and skips already-visited directories (\u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/541\"\u003e#541\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFixed an uncaught exception (\u003ccode\u003eERR_INVALID_ARG_TYPE\u003c/code\u003e) that crashed the process when \u003ccode\u003ewriteFileToAsync\u003c/code\u003e could not open the target file (bad permissions, invalid filename, exhausted file descriptors); write failures are now reported through the callback and write errors are no longer silently swallowed (\u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/470\"\u003e#470\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/459\"\u003e#459\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/402\"\u003e#402\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFixed directory entries reporting an empty \u003ccode\u003ename\u003c/code\u003e (e.g. \u003ccode\u003ea/b/c/\u003c/code\u003e now returns \u003ccode\u003ec\u003c/code\u003e) (\u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/466\"\u003e#466\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003eextractEntryTo\u003c/code\u003e flattening subdirectories when \u003ccode\u003emaintainEntryPath\u003c/code\u003e is false; the structure below the extracted directory is now preserved instead of collapsing (and overwriting) files by basename (\u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/306\"\u003e#306\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFixed a failed \u003ccode\u003eutimes\u003c/code\u003e aborting extraction; setting the modification time is now best-effort and never fails extraction of already-written content (\u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/379\"\u003e#379\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003etest()\u003c/code\u003e always returning false for any archive containing a file (it indexed the entries array with an entry object instead of reading the entry); it now correctly verifies each entry's CRC\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003ePerformance\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eFaster entry sorting when writing archives with many entries: names are decoded once instead of on every comparison (about 6× faster sort for large archives)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eAdded\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eBundled TypeScript type definitions (\u003ccode\u003etypes.d.ts\u003c/code\u003e), so \u003ccode\u003e@types/adm-zip\u003c/code\u003e is no longer required\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eNotes\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eBehavior change: \u003ccode\u003eextractEntryTo(dir, target, /* maintainEntryPath */ false)\u003c/code\u003e now preserves subdirectories beneath the extracted directory rather than flattening them\u003c/li\u003e\n\u003cli\u003eBehavior change: extraction no longer fails when the modification time cannot be set\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e0.5.4 / 2021-03-08\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFixed relative paths\u003c/li\u003e\n\u003cli\u003eAdded zipcrypto encryption\u003c/li\u003e\n\u003cli\u003eLower verMade for macOS when generating zip file\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e0.5.3 / 2021-02-07\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFixed filemode when unzipping\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e0.5.2 / 2021-01-27\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFixed path traversal issue (GHSL-2020-198)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e0.5.1 / 2020-11-27\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eIncremented version (cthackers)\u003c/li\u003e\n\u003cli\u003eFixed outFileName (cthackers)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e0.5.0 / 2020-11-19\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eAdded extra parameter to extractEntryTo so target filename can be renamed (cthackers)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cthackers/adm-zip/commit/cb2cf9ba4c7c865db426e2de1997cb41194d9872\"\u003e\u003ccode\u003ecb2cf9b\u003c/code\u003e\u003c/a\u003e Fixed addLocalFolderAsync2 mangling local paths on Windows\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cthackers/adm-zip/commit/54902b60f0f1d6d6e8157e81e0f18c5001941ccc\"\u003e\u003ccode\u003e54902b6\u003c/code\u003e\u003c/a\u003e Fixed addLocalFolderPromise hanging on empty folders and swallowing errors\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cthackers/adm-zip/commit/73131bdce50fa6ed201c48b468082ef456894f2e\"\u003e\u003ccode\u003e73131bd\u003c/code\u003e\u003c/a\u003e Fixed CI\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cthackers/adm-zip/commit/758898d71508e8a016691d5843b5f7ce2d1b208a\"\u003e\u003ccode\u003e758898d\u003c/code\u003e\u003c/a\u003e Rejected zip entries whose declared data extent runs past the buffer\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cthackers/adm-zip/commit/74b6e9f402c4c7cde4e33f3c87ff8f15ddcd6121\"\u003e\u003ccode\u003e74b6e9f\u003c/code\u003e\u003c/a\u003e Routed malformed-header parse errors through the async callback\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cthackers/adm-zip/commit/eaa35fa73df6108a3d6ebc9b9073371740735265\"\u003e\u003ccode\u003eeaa35fa\u003c/code\u003e\u003c/a\u003e Blocked extraction from writing through symlinks inside the target\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cthackers/adm-zip/commit/1e015e3e713aee426bf3d5c1bc1b555c90f4f3e6\"\u003e\u003ccode\u003e1e015e3\u003c/code\u003e\u003c/a\u003e Increment version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cthackers/adm-zip/commit/05101d47b3b983b705cc3e66fc34366118ba7b99\"\u003e\u003ccode\u003e05101d4\u003c/code\u003e\u003c/a\u003e Rejected archives with duplicate entry names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cthackers/adm-zip/commit/491600683dacb6cb9fe0718a0eeb9cb5eb49afa6\"\u003e\u003ccode\u003e4916006\u003c/code\u003e\u003c/a\u003e Enforced the decompression size cap on the async path and for size 0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cthackers/adm-zip/commit/6a63c339b83c52915483efacda517660a7a7bf87\"\u003e\u003ccode\u003e6a63c33\u003c/code\u003e\u003c/a\u003e Stripped setuid/setgid/sticky bits from extracted file permissions\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/cthackers/adm-zip/compare/v0.5.18...v0.6.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `nanoid` from 3.3.11 to 3.3.12\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ai/nanoid/releases\"\u003enanoid's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e3.3.12\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed breaking Nano ID by requesting big ID.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ai/nanoid/blob/main/CHANGELOG.md\"\u003enanoid's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e3.3.12\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed breaking Nano ID by requesting big ID.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/aa9c399f6915fb8aaf957ac9290321be932ac252\"\u003e\u003ccode\u003eaa9c399\u003c/code\u003e\u003c/a\u003e Release 3.3.12 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/b0036ed60dc9facd7f1191a50dfb3076500202ac\"\u003e\u003ccode\u003eb0036ed\u003c/code\u003e\u003c/a\u003e Backport fix to CommonJS version too\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/08a19a4c82ca6ea920c9f5898e22f4841d167605\"\u003e\u003ccode\u003e08a19a4\u003c/code\u003e\u003c/a\u003e Update test\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/821dfed7b5db7f88e92f56c60eef32c8135077c3\"\u003e\u003ccode\u003e821dfed\u003c/code\u003e\u003c/a\u003e Backport pool breaking fix\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/609646c6441c8fcabf01b65cd5d0dba806ccc22e\"\u003e\u003ccode\u003e609646c\u003c/code\u003e\u003c/a\u003e Fix CI\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/ai/nanoid/compare/3.3.11...3.3.12\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `nodemailer` from 6.10.1 to 10.0.9\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nodemailer/nodemailer/releases\"\u003enodemailer's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev10.0.9\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v10.0.8...v10.0.9\"\u003e10.0.9\u003c/a\u003e (2026-09-12)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eaddressparser:\u003c/strong\u003e bound the '@' probe to the run being scanned (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/1465c3f5ff74a7c4fbbe9853bd01448bb92bf5b7\"\u003e1465c3f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eaddressparser:\u003c/strong\u003e keep the text after a comment out of a quoted local part address (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/2f36eb1aa1dd33e312411dc9b888548e14db54ee\"\u003e2f36eb1\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev10.0.8\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v10.0.7...v10.0.8\"\u003e10.0.8\u003c/a\u003e (2026-09-11)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003emime-node:\u003c/strong\u003e clean the boundary where it is written, not only where it is built (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/e14278d2dae9427280c79450605a27b1c5d2c355\"\u003ee14278d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003emime-node:\u003c/strong\u003e drop every control character from multipart boundary material (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/a82a35554848a2e07485ff81f80aefe2736e5a04\"\u003ea82a355\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev10.0.7\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v10.0.6...v10.0.7\"\u003e10.0.7\u003c/a\u003e (2026-09-11)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003emime-funcs:\u003c/strong\u003e do not double encode Buffer input when chunking base64 mime words (\u003ca href=\"https://redirect.github.com/nodemailer/nodemailer/issues/1865\"\u003e#1865\u003c/a\u003e) (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/4327a59939748a7f9394b0a029495fd476f68f30\"\u003e4327a59\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003emime-node:\u003c/strong\u003e keep a boundary that is only line breaks from stripping to empty (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/ec46800cdcab734d9aa79e1278e819962b3b8f09\"\u003eec46800\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003emime-node:\u003c/strong\u003e strip line breaks from multipart boundary material (\u003ca href=\"https://redirect.github.com/nodemailer/nodemailer/issues/1867\"\u003e#1867\u003c/a\u003e) (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/03c1a5c48b6828d9392983d8718fdb1fd583a06c\"\u003e03c1a5c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003esmtp-pool:\u003c/strong\u003e release rate-limited connections on close (\u003ca href=\"https://redirect.github.com/nodemailer/nodemailer/issues/1866\"\u003e#1866\u003c/a\u003e) (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/7f5c7a46b61da9f5c5feaffd921c55b9d5892ee5\"\u003e7f5c7a4\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev10.0.6\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v10.0.5...v10.0.6\"\u003e10.0.6\u003c/a\u003e (2026-09-11)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eaddressparser:\u003c/strong\u003e scan free text for an address in linear time (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/437d7fc47403df176bc39271641541b7a9bce102\"\u003e437d7fc\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev10.0.5\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v10.0.4...v10.0.5\"\u003e10.0.5\u003c/a\u003e (2026-09-11)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eaddressparser:\u003c/strong\u003e parse comment-joined addresses in linear time (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/c07f17518d25aca8ab2ad66968dcbca538c24b89\"\u003ec07f175\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev10.0.4\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/com...\n\n_Description has been truncated_","html_url":"https://github.com/sigma7863/joplin/pull/372","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/sigma7863%2Fjoplin/issues/372","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/372/packages"},{"uuid":"5738357118","node_id":"PR_kwDODTtS988AAAABHCQxSg","number":245,"state":"open","title":"build(deps): bump moment from 2.29.4 to 2.31.0","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-07T02:25:55.000Z","updated_at":"2026-10-07T02:30:33.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"moment","old_version":"2.29.4","new_version":"2.31.0","repository_url":"https://github.com/moment/moment"}],"path":null,"ecosystem":"npm"},"body":"Bumps [moment](https://github.com/moment/moment) from 2.29.4 to 2.31.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/releases\"\u003emoment's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.31.0\u003c/h2\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.30.1\u003c/h2\u003e\n\u003cp\u003eNote - this was not a new release, but rather just updating GitHub's \u003ccode\u003elatest\u003c/code\u003e release to indicate the existing version \u003ccode\u003e2.30.1\u003c/code\u003e from Dec 27, 2023.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/blob/develop/CHANGELOG.md\"\u003emoment's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch3\u003e2.31.0\u003c/h3\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e2.30.1\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/15b45d48a176312e8f34143c5a800090abf4787f\"\u003e\u003ccode\u003e15b45d4\u003c/code\u003e\u003c/a\u003e [pkg] Build 2.31.0 (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6452\"\u003e#6452\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/631cd81454ee001e1f508e21270eae0b6bb62974\"\u003e\u003ccode\u003e631cd81\u003c/code\u003e\u003c/a\u003e [pkg] Update changelog for upcoming release (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6394\"\u003e#6394\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/6caff9e0d54e85a63a6eb97d7361f1da35bc58f4\"\u003e\u003ccode\u003e6caff9e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/710703b7eac93535ad125cbf4feb3d42afed6fb3\"\u003e\u003ccode\u003e710703b\u003c/code\u003e\u003c/a\u003e [feature] Add internal date-default hook for Moment Timezone (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6451\"\u003e#6451\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/863ed940556e6e63c43de23981a4853036a003ac\"\u003e\u003ccode\u003e863ed94\u003c/code\u003e\u003c/a\u003e [bugfix] Add stack traces to conditional deprecation warnings (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6450\"\u003e#6450\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/2c7abe1c42ee15445d30c2c5d536750a1e43a09a\"\u003e\u003ccode\u003e2c7abe1\u003c/code\u003e\u003c/a\u003e [bugfix] Apply postformat to locale relative time methods (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6448\"\u003e#6448\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/9c45ac38690c649c95e19923276b63da5fe2be26\"\u003e\u003ccode\u003e9c45ac3\u003c/code\u003e\u003c/a\u003e [bugfix] Include metadata in all-locales bundle (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6447\"\u003e#6447\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/f6eefc5fc7b44ceccbd007aeffc48ebc5eac30fa\"\u003e\u003ccode\u003ef6eefc5\u003c/code\u003e\u003c/a\u003e [bugfix] Validate timezone offset range (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6446\"\u003e#6446\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/136b441794a3bb207d593add3b59e9de0e062523\"\u003e\u003ccode\u003e136b441\u003c/code\u003e\u003c/a\u003e [bugfix] Avoid Object.assign in duration.humanize (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6443\"\u003e#6443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/0d1050437b40f66ac47e14b285bb3d09676cf2e0\"\u003e\u003ccode\u003e0d10504\u003c/code\u003e\u003c/a\u003e [bugfix] Fix locale('\u003cstrong\u003eproto\u003c/strong\u003e') corrupting the global locale (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6442\"\u003e#6442\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moment/moment/compare/2.29.4...2.31.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for moment since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=moment\u0026package-manager=npm_and_yarn\u0026previous-version=2.29.4\u0026new-version=2.31.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/kristw/encodable/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/kristw/encodable/pull/245","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/kristw%2Fencodable/issues/245","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/245/packages"},{"uuid":"5733392850","node_id":"PR_kwDOTJYz_s8AAAABG-TrRg","number":131,"state":"closed","title":"chore(deps): bump the npm_and_yarn group across 1 directory with 3 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-10-06T18:26:01.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-06T18:23:45.000Z","updated_at":"2026-10-06T18:26:01.000Z","time_to_close":136,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"npm_and_yarn","update_count":3,"packages":[{"name":"source-map-js","old_version":"1.2.1","new_version":"1.2.2","repository_url":"https://github.com/7rulnik/source-map-js"},{"name":"compression","old_version":"1.8.1","new_version":"1.8.2","repository_url":"https://github.com/expressjs/compression"},{"name":"moment","old_version":"2.30.1","new_version":"2.31.0","repository_url":"https://github.com/moment/moment"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 3 updates in the /artifacts/aurora-mobile directory: [source-map-js](https://github.com/7rulnik/source-map-js), [compression](https://github.com/expressjs/compression) and [moment](https://github.com/moment/moment).\n\nUpdates `source-map-js` from 1.2.1 to 1.2.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/7rulnik/source-map-js/releases\"\u003esource-map-js's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.2.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eFix crash when executing in browser with CSP script-src that don't permit unsafe-eval (\u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/29\"\u003e#29\u003c/a\u003e) \u003ca href=\"https://github.com/xfournet\"\u003e\u003ccode\u003e@​xfournet\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eFix denial of service from malicious indexed source maps (CVE-2026-93749) (\u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/79\"\u003e#79\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eReported by \u003ca href=\"https://github.com/waydeshi\"\u003e\u003ccode\u003e@​waydeshi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/issues/76\"\u003e#76\u003c/a\u003e. A fix was also proposed by \u003ca href=\"https://github.com/aniebiet\"\u003e\u003ccode\u003e@​aniebiet\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/78\"\u003e#78\u003c/a\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/7rulnik/source-map-js/blob/main/CHANGELOG.md\"\u003esource-map-js's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.2.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eFix crash when executing in browser with CSP script-src that don't permit unsafe-eval (\u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/29\"\u003e#29\u003c/a\u003e) \u003ca href=\"https://github.com/xfournet\"\u003e\u003ccode\u003e@​xfournet\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eFix denial of service from malicious indexed source maps (CVE-2026-93749) (\u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/79\"\u003e#79\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eReported by \u003ca href=\"https://github.com/waydeshi\"\u003e\u003ccode\u003e@​waydeshi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/issues/76\"\u003e#76\u003c/a\u003e. A fix was also proposed by \u003ca href=\"https://github.com/aniebiet\"\u003e\u003ccode\u003e@​aniebiet\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/78\"\u003e#78\u003c/a\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/7rulnik/source-map-js/commit/0a1d334fd1e55a47df97fcd60a7915d46df3b08a\"\u003e\u003ccode\u003e0a1d334\u003c/code\u003e\u003c/a\u003e 1.2.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/7rulnik/source-map-js/commit/4c6fa26d77419bd8e48ec92844866cce7d9ae739\"\u003e\u003ccode\u003e4c6fa26\u003c/code\u003e\u003c/a\u003e Update changelog\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/7rulnik/source-map-js/commit/cf7658058ceeaa8619d5ae0ec90be6905209d016\"\u003e\u003ccode\u003ecf76580\u003c/code\u003e\u003c/a\u003e Fix denial of service from malicious indexed source maps (CVE-2026-93749) (\u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/issues/79\"\u003e#79\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/7rulnik/source-map-js/commit/7899a86615c630f4fc220273ff9fe2e8e49a56df\"\u003e\u003ccode\u003e7899a86\u003c/code\u003e\u003c/a\u003e Fix crash when executing browser with CSP script-src that don't permit unsafe...\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/7rulnik/source-map-js/compare/v1.2.1...v1.2.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `compression` from 1.8.1 to 1.8.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/compression/releases\"\u003ecompression's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.8.2\u003c/h2\u003e\n\u003ch2\u003eImportant\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-87776\"\u003eCVE-2026-87776\u003c/a\u003e (\u003ca href=\"https://github.com/expressjs/compression/security/advisories/GHSA-vc2v-76pw-4v95\"\u003eGHSA-vc2v-76pw-4v95\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore: add funding to package.json by \u003ca href=\"https://github.com/bjohansebas\"\u003e\u003ccode\u003e@​bjohansebas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/248\"\u003eexpressjs/compression#248\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.2 to 3.29.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/249\"\u003eexpressjs/compression#249\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 4.2.2 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/253\"\u003eexpressjs/compression#253\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.7 to 3.29.11 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/252\"\u003eexpressjs/compression#252\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/download-artifact from 4.3.0 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/251\"\u003eexpressjs/compression#251\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-node from 4.4.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/261\"\u003eexpressjs/compression#261\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.11 to 4.31.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/260\"\u003eexpressjs/compression#260\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/259\"\u003eexpressjs/compression#259\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/download-artifact from 5.0.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/258\"\u003eexpressjs/compression#258\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump coverallsapp/github-action from 2.3.6 to 2.3.7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/264\"\u003eexpressjs/compression#264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 5.0.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/263\"\u003eexpressjs/compression#263\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.31.2 to 4.31.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/262\"\u003eexpressjs/compression#262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: up node version to 25.x in CI by \u003ca href=\"https://github.com/imangas\"\u003e\u003ccode\u003e@​imangas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/272\"\u003eexpressjs/compression#272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edoc(package): remove history.md and add readme.md to published files by \u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/270\"\u003eexpressjs/compression#270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate link to CONTRIBUTING.md by \u003ca href=\"https://github.com/krzysdz\"\u003e\u003ccode\u003e@​krzysdz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/281\"\u003eexpressjs/compression#281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: run CI on Windows and macOS by \u003ca href=\"https://github.com/kilisamemarisaaa\"\u003e\u003ccode\u003e@​kilisamemarisaaa\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/283\"\u003eexpressjs/compression#283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/257\"\u003eexpressjs/compression#257\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/download-artifact from 6.0.0 to 7.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/268\"\u003eexpressjs/compression#268\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.31.5 to 4.31.9 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/265\"\u003eexpressjs/compression#265\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-node from 6.0.0 to 6.1.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/266\"\u003eexpressjs/compression#266\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/267\"\u003eexpressjs/compression#267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(ci): npm-publish via reusable workflows by \u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/269\"\u003eexpressjs/compression#269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: update outdated Brotli note and fix npm install docs URL by \u003ca href=\"https://github.com/Vansh1811\"\u003e\u003ccode\u003e@​Vansh1811\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/276\"\u003eexpressjs/compression#276\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: match Cache-Control no-transform directive case-insensitively by \u003ca href=\"https://github.com/vaibhavmashal\"\u003e\u003ccode\u003e@​vaibhavmashal\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/286\"\u003eexpressjs/compression#286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e1.8.2 by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/287\"\u003eexpressjs/compression#287\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/imangas\"\u003e\u003ccode\u003e@​imangas\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/272\"\u003eexpressjs/compression#272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/270\"\u003eexpressjs/compression#270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/krzysdz\"\u003e\u003ccode\u003e@​krzysdz\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/281\"\u003eexpressjs/compression#281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kilisamemarisaaa\"\u003e\u003ccode\u003e@​kilisamemarisaaa\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/283\"\u003eexpressjs/compression#283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Vansh1811\"\u003e\u003ccode\u003e@​Vansh1811\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/276\"\u003eexpressjs/compression#276\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vaibhavmashal\"\u003e\u003ccode\u003e@​vaibhavmashal\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/286\"\u003eexpressjs/compression#286\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/compression/compare/v1.8.1...v1.8.2\"\u003ehttps://github.com/expressjs/compression/compare/v1.8.1...v1.8.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/compression/blob/master/HISTORY.md\"\u003ecompression's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e1.8.2\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-87776\"\u003eCVE-2026-87776\u003c/a\u003e (\u003ca href=\"https://github.com/expressjs/compression/security/advisories/GHSA-vc2v-76pw-4v95\"\u003eGHSA-vc2v-76pw-4v95\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edeps: add destroy@1.2.0\u003c/li\u003e\n\u003cli\u003eMatch \u003ccode\u003eCache-Control: no-transform\u003c/code\u003e directive case-insensitively\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/0f9707417bd53d41a319fce8bdb80dfa08b435c8\"\u003e\u003ccode\u003e0f97074\u003c/code\u003e\u003c/a\u003e 1.8.2 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/287\"\u003e#287\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/151f63e91e1b64f8fb0b064e19321a4f28db6bff\"\u003e\u003ccode\u003e151f63e\u003c/code\u003e\u003c/a\u003e fix: destroy compression stream on response close\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/0a764956691bede2b62c711598ee65ea643d3b1e\"\u003e\u003ccode\u003e0a76495\u003c/code\u003e\u003c/a\u003e fix: match Cache-Control no-transform directive case-insensitively (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/286\"\u003e#286\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/c17b6e58ac914c84d9e3a64130dcc428e0e26887\"\u003e\u003ccode\u003ec17b6e5\u003c/code\u003e\u003c/a\u003e docs: update outdated Brotli note and fix npm install docs URL (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/276\"\u003e#276\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/112911abc46e0d8fa6c9793ef5005ca1d53ccb7c\"\u003e\u003ccode\u003e112911a\u003c/code\u003e\u003c/a\u003e chore(ci): npm-publish via reusable workflows (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/269\"\u003e#269\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/1bf5eb0b5eaf5001af9782ade18c6cca690ccaad\"\u003e\u003ccode\u003e1bf5eb0\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/267\"\u003e#267\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/d8fe64d50081d4a13a8ea5c25a852ca27fde0b7b\"\u003e\u003ccode\u003ed8fe64d\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/setup-node from 6.0.0 to 6.1.0 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/266\"\u003e#266\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/b218ff54eb8e211100d8a6697d13cdc73fdb13b3\"\u003e\u003ccode\u003eb218ff5\u003c/code\u003e\u003c/a\u003e build(deps): bump github/codeql-action from 4.31.5 to 4.31.9 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/265\"\u003e#265\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/8a1cf8ecf948c28ffd3d29f942c9a310bc36e5c1\"\u003e\u003ccode\u003e8a1cf8e\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/download-artifact from 6.0.0 to 7.0.0 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/268\"\u003e#268\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/4a19855442b7ebfcea4f95caf491968108dc15b8\"\u003e\u003ccode\u003e4a19855\u003c/code\u003e\u003c/a\u003e build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/257\"\u003e#257\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/expressjs/compression/compare/v1.8.1...v1.8.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for compression since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `moment` from 2.30.1 to 2.31.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/releases\"\u003emoment's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.31.0\u003c/h2\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/blob/develop/CHANGELOG.md\"\u003emoment's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch3\u003e2.31.0\u003c/h3\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/15b45d48a176312e8f34143c5a800090abf4787f\"\u003e\u003ccode\u003e15b45d4\u003c/code\u003e\u003c/a\u003e [pkg] Build 2.31.0 (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6452\"\u003e#6452\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/631cd81454ee001e1f508e21270eae0b6bb62974\"\u003e\u003ccode\u003e631cd81\u003c/code\u003e\u003c/a\u003e [pkg] Update changelog for upcoming release (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6394\"\u003e#6394\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/6caff9e0d54e85a63a6eb97d7361f1da35bc58f4\"\u003e\u003ccode\u003e6caff9e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/710703b7eac93535ad125cbf4feb3d42afed6fb3\"\u003e\u003ccode\u003e710703b\u003c/code\u003e\u003c/a\u003e [feature] Add internal date-default hook for Moment Timezone (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6451\"\u003e#6451\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/863ed940556e6e63c43de23981a4853036a003ac\"\u003e\u003ccode\u003e863ed94\u003c/code\u003e\u003c/a\u003e [bugfix] Add stack traces to conditional deprecation warnings (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6450\"\u003e#6450\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/2c7abe1c42ee15445d30c2c5d536750a1e43a09a\"\u003e\u003ccode\u003e2c7abe1\u003c/code\u003e\u003c/a\u003e [bugfix] Apply postformat to locale relative time methods (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6448\"\u003e#6448\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/9c45ac38690c649c95e19923276b63da5fe2be26\"\u003e\u003ccode\u003e9c45ac3\u003c/code\u003e\u003c/a\u003e [bugfix] Include metadata in all-locales bundle (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6447\"\u003e#6447\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/f6eefc5fc7b44ceccbd007aeffc48ebc5eac30fa\"\u003e\u003ccode\u003ef6eefc5\u003c/code\u003e\u003c/a\u003e [bugfix] Validate timezone offset range (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6446\"\u003e#6446\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/136b441794a3bb207d593add3b59e9de0e062523\"\u003e\u003ccode\u003e136b441\u003c/code\u003e\u003c/a\u003e [bugfix] Avoid Object.assign in duration.humanize (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6443\"\u003e#6443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/0d1050437b40f66ac47e14b285bb3d09676cf2e0\"\u003e\u003ccode\u003e0d10504\u003c/code\u003e\u003c/a\u003e [bugfix] Fix locale('\u003cstrong\u003eproto\u003c/strong\u003e') corrupting the global locale (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6442\"\u003e#6442\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moment/moment/compare/2.30.1...2.31.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for moment since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/josephcrown920/Auroraglobal/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/josephcrown920/Auroraglobal/pull/131","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/josephcrown920%2FAuroraglobal/issues/131","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/131/packages"},{"uuid":"5726160690","node_id":"PR_kwDOQxCN4s8AAAABG4d0vg","number":7,"state":"closed","title":"chore(deps): bump the npm_and_yarn group across 1 directory with 5 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-10-06T09:34:15.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-06T09:31:29.000Z","updated_at":"2026-10-06T09:34:17.000Z","time_to_close":166,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"npm_and_yarn","update_count":5,"packages":[{"name":"smol-toml","old_version":"1.7.1","new_version":"1.9.0","repository_url":"https://github.com/squirrelchat/smol-toml"},{"name":"dompurify","old_version":"3.4.2","new_version":"3.4.16","repository_url":"https://github.com/cure53/DOMPurify"},{"name":"moment","old_version":"2.30.1","new_version":"2.31.0","repository_url":"https://github.com/moment/moment"},{"name":"undici","old_version":"7.25.0","new_version":"7.30.0","repository_url":"https://github.com/nodejs/undici"},{"name":"ws","old_version":"8.20.0","new_version":"8.22.0","repository_url":"https://github.com/websockets/ws"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 5 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [smol-toml](https://github.com/squirrelchat/smol-toml) | `1.7.1` | `1.9.0` |\n| [dompurify](https://github.com/cure53/DOMPurify) | `3.4.2` | `3.4.16` |\n| [moment](https://github.com/moment/moment) | `2.30.1` | `2.31.0` |\n| [undici](https://github.com/nodejs/undici) | `7.25.0` | `7.30.0` |\n| [ws](https://github.com/websockets/ws) | `8.20.0` | `8.22.0` |\n\n\nUpdates `smol-toml` from 1.7.1 to 1.9.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/squirrelchat/smol-toml/releases\"\u003esmol-toml's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.9.0\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eHuge update\u003c/strong\u003e!!! This is most likely the largest update the library received since its release, with lots of new features and improvements.\u003c/p\u003e\n\u003ch3\u003ePerformance improvements\u003c/h3\u003e\n\u003cp\u003eSignificant parts of the internal parse logic have been rewritten, improving performance by \u003cstrong\u003e1.5x-2x\u003c/strong\u003e. The library was already comfortably ahead of the others, but it is now faster than ever, sitting at \u003cstrong\u003e4x faster parse performance\u003c/strong\u003e than the closest maintained implementation.\u003c/p\u003e\n\u003cp\u003eProblematic code paths have also been replaced by safer implementations, solving potential DoS vectors. See GHSA-r4xh-jqrq-34v2.\u003c/p\u003e\n\u003cp\u003eNote: the objects returned by the library now have a \u003cem\u003enull prototype\u003c/em\u003e. This is a transparent change for 99.9% of users, and is one of the most significant contributors to the major performance gains in this version.\u003c/p\u003e\n\u003ch3\u003eFull Temporal support\u003c/h3\u003e\n\u003cp\u003eVersion 1.8.0 brought support for Temporal in \u003ccode\u003estringify\u003c/code\u003e; now the library is also able to emit Temporal objects instead of its own ad-hoc \u003ccode\u003eTomlDate\u003c/code\u003e object. It is not enabled by default, but it will become the default in v2. Enable by setting \u003ccode\u003euseLegacyDate: false\u003c/code\u003e in the parser's options.\u003c/p\u003e\n\u003ch4\u003eBetter Temporal support in stringify\u003c/h4\u003e\n\u003cp\u003eTemporal support has been improved since it released: Temporal objects that cannot be represented (such as \u003ccode\u003eTemporal.PlainMonthDay\u003c/code\u003e) now throw an error (instead of silently emitting a bogus object).\u003c/p\u003e\n\u003cp\u003eA new option has been added to \u003ccode\u003estringify\u003c/code\u003e to disallow Temporal objects that cannot be fully represented in TOML. This includes \u003ccode\u003eZonedDateTime\u003c/code\u003e objects with a IANA timezone attached instead of a plain offset, and dates with a specific calendar value set. Enable by setting \u003ccode\u003estrictTemporal: true\u003c/code\u003e in the options.\u003c/p\u003e\n\u003ch3\u003eHandling of unsafe keys\u003c/h3\u003e\n\u003cp\u003eSince its release the library has been protected against prototype pollution attacks, setting properties like \u003ccode\u003e__proto__\u003c/code\u003e using safe mechanisms that do not trigger prototype pollution. However, while the returned objects are safe on their own, they may become problematic if used carelessly.\u003c/p\u003e\n\u003cp\u003eInspired by \u003ccode\u003esecure-json-parse\u003c/code\u003e, the library now offers a way to either drop unsafe properties from the returned object, or to throw an error and reject documents altogether. By default, these potentially unsafe keys are preserved and returned.\u003c/p\u003e\n\u003ch3\u003eMiscellaneous updates\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUnicode BOM is now gracefully accepted and ignored.\u003c/li\u003e\n\u003cli\u003eTable array headers are now properly checked again. Reported in \u003ca href=\"https://redirect.github.com/squirrelchat/smol-toml/issues/65\"\u003e#65\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eClosed certain gaps where invalid whitespace would be accepted. Reported in \u003ca href=\"https://redirect.github.com/squirrelchat/smol-toml/issues/61\"\u003e#61\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eBogus local date and local time values with a UTC offset are no longer accepted.\u003c/li\u003e\n\u003cli\u003eCertain error messages are more accurate and handle errors at line boundaries better.\u003c/li\u003e\n\u003cli\u003eThe default export of the lib is now formally deprecated; use a \u003ccode\u003eimport *\u003c/code\u003e instead. Proposed in \u003ca href=\"https://redirect.github.com/squirrelchat/smol-toml/issues/50\"\u003e#50\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eOn Node 20+, strings that contain lone surrogates are now normalised to well-formed strings.\u003c/li\u003e\n\u003cli\u003eOn Node 20+, keys that contain lone surrogates are now rejected.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/squirrelchat/smol-toml/compare/v1.8.0...v1.9.0\"\u003ehttps://github.com/squirrelchat/smol-toml/compare/v1.8.0...v1.9.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.8.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat: stringify temporal objects by \u003ca href=\"https://github.com/Gouvernathor\"\u003e\u003ccode\u003e@​Gouvernathor\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/cyyynthia\"\u003e\u003ccode\u003e@​cyyynthia\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/squirrelchat/smol-toml/compare/v1.7.2...v1.8.0\"\u003ehttps://github.com/squirrelchat/smol-toml/compare/v1.7.2...v1.8.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.7.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003erefactor: improve performance of the parser by \u003ca href=\"https://github.com/cyyynthia\"\u003e\u003ccode\u003e@​cyyynthia\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: revert sourcemap publishing by \u003ca href=\"https://github.com/cyyynthia\"\u003e\u003ccode\u003e@​cyyynthia\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/squirrelchat/smol-toml/commit/6f9739a5ab481f57c3112024bc4947534b580b58\"\u003e\u003ccode\u003e6f9739a\u003c/code\u003e\u003c/a\u003e fix: gate \u003ccode\u003e[is|to]WellFormed\u003c/code\u003e (Node 18 compat)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/squirrelchat/smol-toml/commit/a73ca32c7c9237f744c880d900ad15307a0cef56\"\u003e\u003ccode\u003ea73ca32\u003c/code\u003e\u003c/a\u003e fix: no Temporal with toml-test when Node \u0026lt; 26\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/squirrelchat/smol-toml/commit/7727890604580bd3fc2d7d2f79ad6e67b745ebe7\"\u003e\u003ccode\u003e7727890\u003c/code\u003e\u003c/a\u003e chore: version bump\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/squirrelchat/smol-toml/commit/641903d60d47900080602b6a83e919d2a526547f\"\u003e\u003ccode\u003e641903d\u003c/code\u003e\u003c/a\u003e chore: rewrite README.md\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/squirrelchat/smol-toml/commit/2df14c57945fec5a3737bc0cdce06a436bf9a77e\"\u003e\u003ccode\u003e2df14c5\u003c/code\u003e\u003c/a\u003e fix(types): make it work if Temporal doesn't exist\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/squirrelchat/smol-toml/commit/3eaa44ef54b859990969935664b12023b26d0eae\"\u003e\u003ccode\u003e3eaa44e\u003c/code\u003e\u003c/a\u003e chore: update benchmark harness\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/squirrelchat/smol-toml/commit/cd3ba6021a59bff0ac57dc059ca2e194365caedd\"\u003e\u003ccode\u003ecd3ba60\u003c/code\u003e\u003c/a\u003e feat: safety option for dangerous properties\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/squirrelchat/smol-toml/commit/6746a7f3ec066109ef8ba69126489fd84b6d3b73\"\u003e\u003ccode\u003e6746a7f\u003c/code\u003e\u003c/a\u003e perf: refactor TomlDate to avoid regex path\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/squirrelchat/smol-toml/commit/16fa64fc5efad895e8657d70e5a1855a16f58ace\"\u003e\u003ccode\u003e16fa64f\u003c/code\u003e\u003c/a\u003e chore: move benchmarks and test harness under 0BSD\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/squirrelchat/smol-toml/commit/bbd14b154b603068ad25ad54b4a3e7f53adeedc0\"\u003e\u003ccode\u003ebbd14b1\u003c/code\u003e\u003c/a\u003e fix: correct sign for single-char numbers\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/squirrelchat/smol-toml/compare/v1.7.1...v1.9.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `dompurify` from 3.4.2 to 3.4.16\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cure53/DOMPurify/releases\"\u003edompurify's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eDOMPurify 3.4.16\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a problem with \u003ccode\u003eIN_PLACE\u003c/code\u003e node removal when working with hooks, thanks \u003ca href=\"https://github.com/manus-pi\"\u003e\u003ccode\u003e@​manus-pi\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a problem with \u003ccode\u003eIN_PLACE\u003c/code\u003e sanitization and raw-text roots, thanks \u003ca href=\"https://github.com/h-t-m\"\u003e\u003ccode\u003e@​h-t-m\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a problem with ESM default exports landing in CommonJS declarations, thanks \u003ca href=\"https://github.com/ssi02014\"\u003e\u003ccode\u003e@​ssi02014\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMigrated from \u003ccode\u003erollup\u003c/code\u003e to \u003ccode\u003erolldown\u003c/code\u003e because performance, thanks \u003ca href=\"https://github.com/ssi02014\"\u003e\u003ccode\u003e@​ssi02014\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBumped several dependencies where possible\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eDOMPurify 3.4.15\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded better clobbering hardening when XML content is involved, thanks \u003ca href=\"https://github.com/gnyselcuk\"\u003e\u003ccode\u003e@​gnyselcuk\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdded several smaller hardening and edge-case improvements, thanks \u003ca href=\"https://github.com/leechristensen\"\u003e\u003ccode\u003e@​leechristensen\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBumped several dependencies where possible\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eDOMPurify 3.4.14\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed an issue with possible bypasses when risky tags are allow-listed, thanks \u003ca href=\"https://github.com/AlirezaRouhbakhsh\"\u003e\u003ccode\u003e@​AlirezaRouhbakhsh\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a couple of edge cases with mixed document contexts, thanks \u003ca href=\"https://github.com/fishjojo1\"\u003e\u003ccode\u003e@​fishjojo1\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdded the SVG \u003ccode\u003epointer-events\u003c/code\u003e and \u003ccode\u003evector-effect\u003c/code\u003e presentation attributes to the allow-list, thanks \u003ca href=\"https://github.com/Jaybhade\"\u003e\u003ccode\u003e@​Jaybhade\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eConducted another refactoring run, removed dead branches and duplicated logic, flattened attribute validation\u003c/li\u003e\n\u003cli\u003eUpdated the documentation in several spots, README, wiki, etc., thanks \u003ca href=\"https://github.com/Akokonunes\"\u003e\u003ccode\u003e@​Akokonunes\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdated several development dependencies and CI workflow actions\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eDOMPurify 3.4.13\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed an issue with hook removal during \u003ccode\u003eIN_PLACE\u003c/code\u003e sanitization, thanks \u003ca href=\"https://github.com/koyokr\"\u003e\u003ccode\u003e@​koyokr\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed an issue with hooks potentially bypassing the clone guard, thanks \u003ca href=\"https://github.com/AkshayjainG\"\u003e\u003ccode\u003e@​AkshayjainG\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed an issue with DOM clobbering via \u003ccode\u003eownerDocument\u003c/code\u003e during \u003ccode\u003eIN_PLACE\u003c/code\u003e, thanks \u003ca href=\"https://github.com/AkshayjainG\"\u003e\u003ccode\u003e@​AkshayjainG\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBumped several dependencies where possible\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eDOMPurify 3.4.12\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed an issue where a hook would not get called for custom elements, thanks \u003ca href=\"https://github.com/Rikuxx0\"\u003e\u003ccode\u003e@​Rikuxx0\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHardened the handling of hooks removing elements, \u003ca href=\"https://github.com/mkrause-bee360\"\u003e\u003ccode\u003e@​mkrause-bee360\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdded support for a few new SVG attributes, thanks \u003ca href=\"https://github.com/cbn-falias\"\u003e\u003ccode\u003e@​cbn-falias\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/Develop-KIM\"\u003e\u003ccode\u003e@​Develop-KIM\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHardened the handling of declarative partial updates\u003c/li\u003e\n\u003cli\u003eUpdated the documentation is several spots, README, wiki, etc.\u003c/li\u003e\n\u003cli\u003eBumped several dependencies where possible\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eDOMPurify 3.4.11\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed an issue with a leaky config for hooks via \u003ccode\u003esetConfig\u003c/code\u003e, thanks \u003ca href=\"https://github.com/trace37labs\"\u003e\u003ccode\u003e@​trace37labs\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBumped vulnerable development dependencies to arrive at plain 0 with \u003ccode\u003enpm audit\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eUpdated the \u003ccode\u003eosv-scanner\u003c/code\u003e suppression list as no vulnerable dependencies are left for now\u003c/li\u003e\n\u003cli\u003eUpdated up the linting tool-chain and removed now-redundant lint directives\u003c/li\u003e\n\u003cli\u003eUpdated the documentation is several spots, README, wiki, etc.\u003c/li\u003e\n\u003cli\u003eBumped several dependencies where possible\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eDOMPurify 3.4.10\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRefactored codebase for clarity: extracted the public type declarations into \u003ccode\u003etypes.ts\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eDecomposed the three largest sanitizer functions into focused helpers\u003c/li\u003e\n\u003cli\u003eRemoved duplicated defaults and dead branches, consolidated \u003ccode\u003eSAFE_FOR_TEMPLATES\u003c/code\u003e scrubbing into single shared path\u003c/li\u003e\n\u003cli\u003eImproved per-node performance by hoisting the mXSS probe regexes and testing \u003ccode\u003etextContent\u003c/code\u003e before \u003ccode\u003einnerHTML\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdded a deterministic micro-benchmark harness (\u003ccode\u003enpm run bench\u003c/code\u003e) with a \u003ccode\u003e--compare\u003c/code\u003e mode\u003c/li\u003e\n\u003cli\u003eReduced CI cost by running the full three-engine browser suite once per PR\u003c/li\u003e\n\u003cli\u003eRefreshed the \u003ccode\u003edemos/\u003c/code\u003e folder so every demo runs again, and added a SVG-via-\u003ccode\u003e\u0026lt;img\u0026gt;\u003c/code\u003e demo\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cure53/DOMPurify/commit/b9b9d80f7e401771c2ccaef5f45def7eec8f27d7\"\u003e\u003ccode\u003eb9b9d80\u003c/code\u003e\u003c/a\u003e release: 3.4.16 (\u003ca href=\"https://redirect.github.com/cure53/DOMPurify/issues/1636\"\u003e#1636\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cure53/DOMPurify/commit/1d7460c4f8a27be825c11b1c9d346d79db32c1e5\"\u003e\u003ccode\u003e1d7460c\u003c/code\u003e\u003c/a\u003e release: 3.4.15 (\u003ca href=\"https://redirect.github.com/cure53/DOMPurify/issues/1609\"\u003e#1609\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cure53/DOMPurify/commit/4e6fe24173f1a85eafacd95e3c82966e29d34d49\"\u003e\u003ccode\u003e4e6fe24\u003c/code\u003e\u003c/a\u003e release: 3.4.14 (\u003ca href=\"https://redirect.github.com/cure53/DOMPurify/issues/1587\"\u003e#1587\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cure53/DOMPurify/commit/3067f774676975de12306effd6db6ad7a9a8c17f\"\u003e\u003ccode\u003e3067f77\u003c/code\u003e\u003c/a\u003e release: 3.4.13 (\u003ca href=\"https://redirect.github.com/cure53/DOMPurify/issues/1562\"\u003e#1562\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cure53/DOMPurify/commit/a9ca1e537422319a557a9a2aa61f003b23b4a197\"\u003e\u003ccode\u003ea9ca1e5\u003c/code\u003e\u003c/a\u003e release: 3.4.12 (\u003ca href=\"https://redirect.github.com/cure53/DOMPurify/issues/1537\"\u003e#1537\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cure53/DOMPurify/commit/0cae5187403132f96a6d357649e4b15633fc210a\"\u003e\u003ccode\u003e0cae518\u003c/code\u003e\u003c/a\u003e release: 3.4.11 (\u003ca href=\"https://redirect.github.com/cure53/DOMPurify/issues/1494\"\u003e#1494\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cure53/DOMPurify/commit/6ee5716f8336989753611beeca364957c0eb0c3e\"\u003e\u003ccode\u003e6ee5716\u003c/code\u003e\u003c/a\u003e release: 3.4.10 (\u003ca href=\"https://redirect.github.com/cure53/DOMPurify/issues/1478\"\u003e#1478\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cure53/DOMPurify/commit/52102472d46035857c52df19e44285f8a1e102fc\"\u003e\u003ccode\u003e5210247\u003c/code\u003e\u003c/a\u003e release: 3.4.9 (\u003ca href=\"https://redirect.github.com/cure53/DOMPurify/issues/1459\"\u003e#1459\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cure53/DOMPurify/commit/bcdd8285412dc9c4c149652aed2d712e790d6ccf\"\u003e\u003ccode\u003ebcdd828\u003c/code\u003e\u003c/a\u003e release: 3.4.8 (\u003ca href=\"https://redirect.github.com/cure53/DOMPurify/issues/1439\"\u003e#1439\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cure53/DOMPurify/commit/ca30f070c360df162a3e3848e80e6fd3c9e74bff\"\u003e\u003ccode\u003eca30f07\u003c/code\u003e\u003c/a\u003e release: 3.4.7 (\u003ca href=\"https://redirect.github.com/cure53/DOMPurify/issues/1414\"\u003e#1414\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/cure53/DOMPurify/compare/3.4.2...3.4.16\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `moment` from 2.30.1 to 2.31.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/releases\"\u003emoment's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.31.0\u003c/h2\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/blob/develop/CHANGELOG.md\"\u003emoment's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch3\u003e2.31.0\u003c/h3\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/15b45d48a176312e8f34143c5a800090abf4787f\"\u003e\u003ccode\u003e15b45d4\u003c/code\u003e\u003c/a\u003e [pkg] Build 2.31.0 (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6452\"\u003e#6452\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/631cd81454ee001e1f508e21270eae0b6bb62974\"\u003e\u003ccode\u003e631cd81\u003c/code\u003e\u003c/a\u003e [pkg] Update changelog for upcoming release (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6394\"\u003e#6394\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/6caff9e0d54e85a63a6eb97d7361f1da35bc58f4\"\u003e\u003ccode\u003e6caff9e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/710703b7eac93535ad125cbf4feb3d42afed6fb3\"\u003e\u003ccode\u003e710703b\u003c/code\u003e\u003c/a\u003e [feature] Add internal date-default hook for Moment Timezone (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6451\"\u003e#6451\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/863ed940556e6e63c43de23981a4853036a003ac\"\u003e\u003ccode\u003e863ed94\u003c/code\u003e\u003c/a\u003e [bugfix] Add stack traces to conditional deprecation warnings (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6450\"\u003e#6450\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/2c7abe1c42ee15445d30c2c5d536750a1e43a09a\"\u003e\u003ccode\u003e2c7abe1\u003c/code\u003e\u003c/a\u003e [bugfix] Apply postformat to locale relative time methods (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6448\"\u003e#6448\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/9c45ac38690c649c95e19923276b63da5fe2be26\"\u003e\u003ccode\u003e9c45ac3\u003c/code\u003e\u003c/a\u003e [bugfix] Include metadata in all-locales bundle (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6447\"\u003e#6447\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/f6eefc5fc7b44ceccbd007aeffc48ebc5eac30fa\"\u003e\u003ccode\u003ef6eefc5\u003c/code\u003e\u003c/a\u003e [bugfix] Validate timezone offset range (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6446\"\u003e#6446\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/136b441794a3bb207d593add3b59e9de0e062523\"\u003e\u003ccode\u003e136b441\u003c/code\u003e\u003c/a\u003e [bugfix] Avoid Object.assign in duration.humanize (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6443\"\u003e#6443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/0d1050437b40f66ac47e14b285bb3d09676cf2e0\"\u003e\u003ccode\u003e0d10504\u003c/code\u003e\u003c/a\u003e [bugfix] Fix locale('\u003cstrong\u003eproto\u003c/strong\u003e') corrupting the global locale (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6442\"\u003e#6442\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moment/moment/compare/2.30.1...2.31.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for moment since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `undici` from 7.25.0 to 7.30.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nodejs/undici/releases\"\u003eundici's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev7.30.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[Backport v7.x] fix: selectively re-enable SIMD for ppc64 by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5794\"\u003enodejs/undici#5794\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport upgrade diagnostics lifecycle fixes to v7.x by \u003ca href=\"https://github.com/BridgeAR\"\u003e\u003ccode\u003e@​BridgeAR\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5783\"\u003enodejs/undici#5783\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Backport v7.x] fix: honor backpressure in decompression interceptor by \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5837\"\u003enodejs/undici#5837\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: close rejected HTTP/2 WebSocket streams on v7.x by \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5876\"\u003enodejs/undici#5876\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest(fetch): make pull-dont-push exceed any socket buffer by \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5889\"\u003enodejs/undici#5889\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/nodejs/undici/compare/v7.29.1...v7.30.0\"\u003ehttps://github.com/nodejs/undici/compare/v7.29.1...v7.30.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.29.1\u003c/h2\u003e\n\u003ch2\u003e⚠️ Security fixes\u003c/h2\u003e\n\u003ch3\u003eHigh severity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-w293-vg96-wgc3\"\u003eGHSA-w293-vg96-wgc3\u003c/a\u003e: \u003ccode\u003eBalancedPool\u003c/code\u003e could drop function-valued connection options while cloning its configuration, including custom TLS certificate validation callbacks. Undici now preserves \u003ccode\u003econnect\u003c/code\u003e and legacy \u003ccode\u003etls\u003c/code\u003e options when creating upstreams. Fixed by \u003ca href=\"https://github.com/nodejs/undici/commit/f690157d728508652fef14673630c71515123e96\"\u003ef690157d\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-rfgv-xxqx-mfg5\"\u003eGHSA-rfgv-xxqx-mfg5\u003c/a\u003e: a WebSocket server could select a subprotocol when none was requested, causing an uncaught \u003ccode\u003eTypeError\u003c/code\u003e that could terminate the process. Undici now rejects the handshake with protocol error 1002. Fixed by \u003ca href=\"https://github.com/nodejs/undici/commit/6615e0175e9b635bcd2e3e87a47daa82f6f5b728\"\u003e6615e017\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMedium severity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-3wwx-pv8p-q78v\"\u003eGHSA-3wwx-pv8p-q78v\u003c/a\u003e: a malformed permessage-deflate payload exceeding the configured decompression limit could emit an unhandled zlib error and terminate the process. Undici now destroys the inflater after reaching the limit. Fixed by \u003ca href=\"https://github.com/nodejs/undici/commit/63cf698b611fecc6ee0a17b185b930051e4b982f\"\u003e63cf698b\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-rx4f-c7p8-82vq\"\u003eGHSA-rx4f-c7p8-82vq\u003c/a\u003e: an unclean \u003ccode\u003eWebSocketStream\u003c/code\u003e close could create an unobserved rejected promise when its writable stream was locked, potentially terminating the process. Undici now propagates the failure through the retained writable stream controller. Fixed by \u003ca href=\"https://github.com/nodejs/undici/commit/1858656ebb1e919311c1f31613dfd581b7214349\"\u003e1858656e\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-2jfj-6hjv-fm6j\"\u003eGHSA-2jfj-6hjv-fm6j\u003c/a\u003e: shared caches could store and replay responses containing \u003ccode\u003eSet-Cookie\u003c/code\u003e, disclosing one user's cookies to another caller. Undici now excludes these responses from shared caches, including existing entries and revalidation paths. Fixed by \u003ca href=\"https://github.com/nodejs/undici/commit/b6c5a00252c37da9dd2db9bead053bb843e1f988\"\u003eb6c5a002\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-3xpg-4rpp-hhhm\"\u003eGHSA-3xpg-4rpp-hhhm\u003c/a\u003e: the decompression interceptor did not bound decoded output, allowing compressed responses to consume excessive memory. Undici now limits every decompression stage to 64 MiB by default and supports a configurable \u003ccode\u003emaxSize\u003c/code\u003e. Fixed by \u003ca href=\"https://github.com/nodejs/undici/commit/2c7d7e1227043c644c4c32cfd1e276f4fd4fcb11\"\u003e2c7d7e12\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-pmjh-fq2x-6v4x\"\u003eGHSA-pmjh-fq2x-6v4x\u003c/a\u003e: a terminal retry failure after response headers were exposed could orphan the original response body, causing consumers to hang indefinitely. Undici now propagates the terminal error to the exposed body. Fixed by \u003ca href=\"https://github.com/nodejs/undici/commit/3c6726599cea8646384dde846c97d630da472a74\"\u003e3c672659\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eLow severity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-8436-99hf-9mmv\"\u003eGHSA-8436-99hf-9mmv\u003c/a\u003e: cache interceptors could store and replay responses to unsafe HTTP methods such as \u003ccode\u003ePOST\u003c/code\u003e or \u003ccode\u003eDELETE\u003c/code\u003e. Undici now restricts cache reads and writes to safe methods while preserving invalidation by successful unsafe requests. Fixed by \u003ca href=\"https://github.com/nodejs/undici/commit/b61d9432bac7caac51273ad209862e4c0bf935ae\"\u003eb61d9432\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-2gqq-gqf2-x968\"\u003eGHSA-2gqq-gqf2-x968\u003c/a\u003e: the dump interceptor could treat an oversized chunked response as successfully truncated when no \u003ccode\u003eContent-Length\u003c/code\u003e was present. Undici now enforces \u003ccode\u003emaxSize\u003c/code\u003e against received bytes and aborts oversized responses. Fixed by \u003ca href=\"https://github.com/nodejs/undici/commit/21693f406f0142f3504192e9f9b022dcf84782ae\"\u003e21693f40\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-r53p-7pc4-xj5r\"\u003eGHSA-r53p-7pc4-xj5r\u003c/a\u003e: the retry interceptor could concatenate a resumed response with inconsistent framing into downstream output, enabling response splitting or corruption. Undici now validates \u003ccode\u003eContent-Range\u003c/code\u003e against the original response framing before resuming. Fixed by \u003ca href=\"https://github.com/nodejs/undici/commit/cd8af90b38ae33c2838d54a2d629774122effe95\"\u003ecd8af90b\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[v7.x] drop: remove Node.js 26 from shared-builtin CI build by \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5592\"\u003enodejs/undici#5592\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(h2): honour headersTimeout by \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5604\"\u003enodejs/undici#5604\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(h2): keep the connection ref'd while requests are outstanding by \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5605\"\u003enodejs/undici#5605\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: increase Windows workflow timeout on v7.x by \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5621\"\u003enodejs/undici#5621\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(h2): retire the request that completed, not the head of the queue by \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5618\"\u003enodejs/undici#5618\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(h2): settle a request whose stream is cancelled by \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5607\"\u003enodejs/undici#5607\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: reduce EventSourceStream parser allocations (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5032\"\u003e#5032\u003c/a\u003e) by \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5646\"\u003enodejs/undici#5646\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(h2): handle GOAWAY for CONNECT streams by \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5640\"\u003enodejs/undici#5640\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v7.x] perf(h1): drop idle-socket timer floor with a ref'd setImmediate (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5707\"\u003e#5707\u003c/a\u003e) by \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5769\"\u003enodejs/undici#5769\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/nodejs/undici/compare/v7.29.0...v7.29.1\"\u003ehttps://github.com/nodejs/undici/compare/v7.29.0...v7.29.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.29.0\u003c/h2\u003e\n\u003ch2\u003e⚠️ Security fixes\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/6741f66e62c3f4ca81fa4ecaa84d3fd668a54686\"\u003e\u003ccode\u003e6741f66\u003c/code\u003e\u003c/a\u003e Bumped v7.30.0 (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5887\"\u003e#5887\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/8d2f2f00ac3db6e3586f87577cea1ebe19d0780c\"\u003e\u003ccode\u003e8d2f2f0\u003c/code\u003e\u003c/a\u003e test(fetch): make pull-dont-push exceed any socket buffer (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5889\"\u003e#5889\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/fad98ae7c2cb68563a265bee9b3127d3045e77c3\"\u003e\u003ccode\u003efad98ae\u003c/code\u003e\u003c/a\u003e fix: close rejected HTTP/2 WebSocket streams on v7.x (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5876\"\u003e#5876\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/369058e52ad07f9e4251e694e084c9c973af5fcc\"\u003e\u003ccode\u003e369058e\u003c/code\u003e\u003c/a\u003e fix: honor backpressure in decompression interceptor (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5829\"\u003e#5829\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5837\"\u003e#5837\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/a7914e5c9b0be89c7d0ac5e52feb950a8278d383\"\u003e\u003ccode\u003ea7914e5\u003c/code\u003e\u003c/a\u003e Backport upgrade diagnostics lifecycle fixes to v7.x (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5783\"\u003e#5783\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/48367af35eea84980ddbf81aa82117c2322413bb\"\u003e\u003ccode\u003e48367af\u003c/code\u003e\u003c/a\u003e fix: selectively re-enable SIMD for ppc64 (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5776\"\u003e#5776\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5794\"\u003e#5794\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/d39a83e7b0d631590c3b85b5cc0dbeab66c3a1d8\"\u003e\u003ccode\u003ed39a83e\u003c/code\u003e\u003c/a\u003e Bumped v7.29.1 (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5772\"\u003e#5772\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/0d88464876d02bdb9cf27015d9d66500a8aaa782\"\u003e\u003ccode\u003e0d88464\u003c/code\u003e\u003c/a\u003e fix(test): remove unused EventEmitter import\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/f57411b894d45b89964252971497507500c32bc1\"\u003e\u003ccode\u003ef57411b\u003c/code\u003e\u003c/a\u003e perf(h1): drop idle-socket timer floor with a ref'd setImmediate (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5707\"\u003e#5707\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5769\"\u003e#5769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/3c6726599cea8646384dde846c97d630da472a74\"\u003e\u003ccode\u003e3c67265\u003c/code\u003e\u003c/a\u003e fix(retry): settle exposed body on terminal failure\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/nodejs/undici/compare/v7.25.0...v7.30.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `ws` from 8.20.0 to 8.22.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/websockets/ws/releases\"\u003ews's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e8.22.0\u003c/h2\u003e\n\u003ch1\u003eFeatures\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduced the \u003ccode\u003eprotocols\u003c/code\u003e option (8b918b01).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBug fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eCalling \u003ccode\u003ewebsocket.close()\u003c/code\u003e with invalid arguments no longer transitions the\nstate to \u003ccode\u003eWebSocket.CLOSING\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/websockets/ws/issues/2337\"\u003e#2337\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.21.3\u003c/h2\u003e\n\u003ch1\u003eBug fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eThe server now correctly rejects permessage-deflate offers if the incoming\n\u003ccode\u003eclient_max_window_bits\u003c/code\u003e parameter value is smaller than its configured\n\u003ccode\u003eclientMaxWindowBits\u003c/code\u003e (e97a20ea).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.21.2\u003c/h2\u003e\n\u003ch1\u003eBug fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a test for \u003ca href=\"https://github.com/nodejs/citgm\"\u003eCITGM\u003c/a\u003e (2eb3be0b).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.21.1\u003c/h2\u003e\n\u003ch1\u003eBug fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eEmpty fragments are now counted toward the limit (a2f4e7c0).\u003c/li\u003e\n\u003cli\u003eThe default values of the \u003ccode\u003emaxBufferedChunks\u003c/code\u003e and \u003ccode\u003emaxFragments\u003c/code\u003e options have\nbeen reduced (f197ac65).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.21.0\u003c/h2\u003e\n\u003ch1\u003eFeatures\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduced the \u003ccode\u003emaxBufferedChunks\u003c/code\u003e and \u003ccode\u003emaxFragments\u003c/code\u003e options (2b2abd45).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBug fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a remote memory exhaustion DoS vulnerability (2b2abd45).\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eA high volume of tiny fragments and data chunks could be sent by a peer, using\nmodest network traffic, to crash a \u003ccode\u003ews\u003c/code\u003e server or client due to OOM.\u003c/p\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003eimport { WebSocket, WebSocketServer } from 'ws';\r\n\u003cp\u003econst wss = new WebSocketServer({ port: 0 }, function () {\nconst data = Buffer.alloc(1);\nconst options = { fin: false };\nconst { port } = wss.address();\n\u0026lt;/tr\u0026gt;\u0026lt;/table\u0026gt;\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/websockets/ws/commit/297202cdae9b0590629821373b3b679c407f3431\"\u003e\u003ccode\u003e297202c\u003c/code\u003e\u003c/a\u003e [dist] 8.22.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/websockets/ws/commit/8b918b01c149c6e4ccb8051bace7f322db94ed8b\"\u003e\u003ccode\u003e8b918b0\u003c/code\u003e\u003c/a\u003e [feature] Introduce the \u003ccode\u003eprotocols\u003c/code\u003e option\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/websockets/ws/commit/73e03eb35b1a84a3b28f906bab6a359231660695\"\u003e\u003ccode\u003e73e03eb\u003c/code\u003e\u003c/a\u003e [ci] Update actions/setup-node action to v7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/websockets/ws/commit/d9b89544e627f2a260fb85a6f42c8ecba98d7615\"\u003e\u003ccode\u003ed9b8954\u003c/code\u003e\u003c/a\u003e [fix] Change the ready state after validating the arguments (\u003ca href=\"https://redirect.github.com/websockets/ws/issues/2337\"\u003e#2337\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/websockets/ws/commit/c791e707eab3c13dd9a261d2479c3cc4a49a6fed\"\u003e\u003ccode\u003ec791e70\u003c/code\u003e\u003c/a\u003e [dist] 8.21.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/websockets/ws/commit/e97a20eaa6f2ad7969419eed732a506453251eb9\"\u003e\u003ccode\u003ee97a20e\u003c/code\u003e\u003c/a\u003e [fix] Reject offers with \u003ccode\u003eclient_max_window_bits\u003c/code\u003e below config\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/websockets/ws/commit/787ebf22ce3d091fb6f931d20b4c7e914ba7cf85\"\u003e\u003ccode\u003e787ebf2\u003c/code\u003e\u003c/a\u003e [dist] 8.21.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/websockets/ws/commit/b4d62ebad40c3b925c84ff305a47975406015422\"\u003e\u003ccode\u003eb4d62eb\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;[ci] Trust Coveralls Homebrew tap\u0026quot;\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/websockets/ws/commit/e4bb883723a0c18452eea10a74139901ae33c61d\"\u003e\u003ccode\u003ee4bb883\u003c/code\u003e\u003c/a\u003e [security] Use GitHub PVR as main reporting channel\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/websockets/ws/commit/2eb3be0bff2453e2654b1315c5872e8d5d424a50\"\u003e\u003ccode\u003e2eb3be0\u003c/code\u003e\u003c/a\u003e [test] Skip test on Node.js versions where it does not apply\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/websockets/ws/compare/8.20.0...8.22.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/datisthq/fairspec-cardealer/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/datisthq/fairspec-cardealer/pull/7","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/datisthq%2Ffairspec-cardealer/issues/7","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/7/packages"},{"uuid":"5724856305","node_id":"PR_kwDOQl8VYM8AAAABG3bD2A","number":64,"state":"closed","title":"Bump moment from 2.30.1 to 2.31.0","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-10-07T05:02:26.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-06T07:44:03.000Z","updated_at":"2026-10-07T05:02:35.000Z","time_to_close":76703,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"moment","old_version":"2.30.1","new_version":"2.31.0","repository_url":"https://github.com/moment/moment"}],"path":null,"ecosystem":"npm"},"body":"Bumps [moment](https://github.com/moment/moment) from 2.30.1 to 2.31.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/releases\"\u003emoment's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.31.0\u003c/h2\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/blob/develop/CHANGELOG.md\"\u003emoment's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch3\u003e2.31.0\u003c/h3\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/15b45d48a176312e8f34143c5a800090abf4787f\"\u003e\u003ccode\u003e15b45d4\u003c/code\u003e\u003c/a\u003e [pkg] Build 2.31.0 (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6452\"\u003e#6452\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/631cd81454ee001e1f508e21270eae0b6bb62974\"\u003e\u003ccode\u003e631cd81\u003c/code\u003e\u003c/a\u003e [pkg] Update changelog for upcoming release (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6394\"\u003e#6394\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/6caff9e0d54e85a63a6eb97d7361f1da35bc58f4\"\u003e\u003ccode\u003e6caff9e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/710703b7eac93535ad125cbf4feb3d42afed6fb3\"\u003e\u003ccode\u003e710703b\u003c/code\u003e\u003c/a\u003e [feature] Add internal date-default hook for Moment Timezone (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6451\"\u003e#6451\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/863ed940556e6e63c43de23981a4853036a003ac\"\u003e\u003ccode\u003e863ed94\u003c/code\u003e\u003c/a\u003e [bugfix] Add stack traces to conditional deprecation warnings (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6450\"\u003e#6450\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/2c7abe1c42ee15445d30c2c5d536750a1e43a09a\"\u003e\u003ccode\u003e2c7abe1\u003c/code\u003e\u003c/a\u003e [bugfix] Apply postformat to locale relative time methods (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6448\"\u003e#6448\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/9c45ac38690c649c95e19923276b63da5fe2be26\"\u003e\u003ccode\u003e9c45ac3\u003c/code\u003e\u003c/a\u003e [bugfix] Include metadata in all-locales bundle (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6447\"\u003e#6447\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/f6eefc5fc7b44ceccbd007aeffc48ebc5eac30fa\"\u003e\u003ccode\u003ef6eefc5\u003c/code\u003e\u003c/a\u003e [bugfix] Validate timezone offset range (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6446\"\u003e#6446\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/136b441794a3bb207d593add3b59e9de0e062523\"\u003e\u003ccode\u003e136b441\u003c/code\u003e\u003c/a\u003e [bugfix] Avoid Object.assign in duration.humanize (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6443\"\u003e#6443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/0d1050437b40f66ac47e14b285bb3d09676cf2e0\"\u003e\u003ccode\u003e0d10504\u003c/code\u003e\u003c/a\u003e [bugfix] Fix locale('\u003cstrong\u003eproto\u003c/strong\u003e') corrupting the global locale (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6442\"\u003e#6442\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moment/moment/compare/2.30.1...2.31.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for moment since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=moment\u0026package-manager=npm_and_yarn\u0026previous-version=2.30.1\u0026new-version=2.31.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/FSDTeam-SAA/claude-dashboard/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/FSDTeam-SAA/claude-dashboard/pull/64","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/FSDTeam-SAA%2Fclaude-dashboard/issues/64","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/64/packages"},{"uuid":"5721573230","node_id":"PR_kwDOI6Sfdc8AAAABG00wXw","number":186,"state":"closed","title":"Bump the npm_and_yarn group across 19 directories with 16 updates","user":"dependabot[bot]","labels":["dependencies","javascript","auto-closed: invalid-title"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-10-06T01:43:35.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-06T01:43:24.000Z","updated_at":"2026-10-06T01:43:44.000Z","time_to_close":11,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"npm_and_yarn","update_count":16,"packages":[{"name":"sharp","old_version":"0.34.5","new_version":"0.35.4","repository_url":"https://github.com/lovell/sharp"},{"name":"axios","old_version":"1.16.1","new_version":"1.20.0","repository_url":"https://github.com/axios/axios"},{"name":"electron","old_version":"42.3.0","new_version":"42.10.0","repository_url":"https://github.com/electron/electron"},{"name":"markdown-it","old_version":"13.0.2","new_version":"14.3.1","repository_url":"https://github.com/markdown-it/markdown-it"},{"name":"moment","old_version":"2.30.1","new_version":"2.31.0","repository_url":"https://github.com/moment/moment"},{"name":"adm-zip","old_version":"0.5.17","new_version":"0.6.1","repository_url":"https://github.com/cthackers/adm-zip"},{"name":"js-yaml","old_version":"4.1.1","new_version":"4.3.2","repository_url":"https://github.com/nodeca/js-yaml"},{"name":"nodemailer","old_version":"6.10.1","new_version":"10.0.9","repository_url":"https://github.com/nodemailer/nodemailer"},{"name":"baseline-browser-mapping","old_version":"2.9.13","new_version":"2.11.26","repository_url":"https://github.com/web-platform-dx/baseline-browser-mapping"},{"name":"brace-expansion","old_version":"1.1.11","new_version":"1.1.21","repository_url":"https://github.com/juliangruber/brace-expansion"},{"name":"joi","old_version":"17.5.0","new_version":"17.13.8","repository_url":"https://github.com/hapijs/joi"},{"name":"svgo","old_version":"2.8.0","new_version":"2.8.4","repository_url":"https://github.com/svg/svgo"},{"name":"undici","old_version":"6.21.2","new_version":"6.29.0","repository_url":"https://github.com/nodejs/undici"},{"name":"webpack-dev-middleware","old_version":"5.3.3","new_version":"5.3.4","repository_url":"https://github.com/webpack/webpack-dev-middleware"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 14 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [sharp](https://github.com/lovell/sharp) | `0.34.5` | `0.35.4` |\n| [axios](https://github.com/axios/axios) | `1.16.1` | `1.20.0` |\n| [electron](https://github.com/electron/electron) | `42.3.0` | `42.10.0` |\n| [markdown-it](https://github.com/markdown-it/markdown-it) | `13.0.2` | `14.3.1` |\n| [moment](https://github.com/moment/moment) | `2.30.1` | `2.31.0` |\n| [adm-zip](https://github.com/cthackers/adm-zip) | `0.5.17` | `0.6.1` |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `4.1.1` | `4.3.2` |\n| [nodemailer](https://github.com/nodemailer/nodemailer) | `6.10.1` | `10.0.9` |\n| [baseline-browser-mapping](https://github.com/web-platform-dx/baseline-browser-mapping) | `2.9.13` | `2.11.26` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.11` | `1.1.21` |\n| [joi](https://github.com/hapijs/joi) | `17.5.0` | `17.13.8` |\n| [svgo](https://github.com/svg/svgo) | `2.8.0` | `2.8.4` |\n| [undici](https://github.com/nodejs/undici) | `6.21.2` | `6.29.0` |\n| [webpack-dev-middleware](https://github.com/webpack/webpack-dev-middleware) | `5.3.3` | `5.3.4` |\n\nBumps the npm_and_yarn group with 3 updates in the /Assets/TinyMCE/IconPack directory: [js-yaml](https://github.com/nodeca/js-yaml), [brace-expansion](https://github.com/juliangruber/brace-expansion) and [svgo](https://github.com/svg/svgo).\nBumps the npm_and_yarn group with 1 update in the /Assets/TinyMCE/JoplinLists directory: [brace-expansion](https://github.com/juliangruber/brace-expansion).\nBumps the npm_and_yarn group with 1 update in the /packages/app-cli directory: [sharp](https://github.com/lovell/sharp).\nBumps the npm_and_yarn group with 3 updates in the /packages/app-cli/tests/support/plugins/ai_chat directory: [baseline-browser-mapping](https://github.com/web-platform-dx/baseline-browser-mapping), [brace-expansion](https://github.com/juliangruber/brace-expansion) and [fast-uri](https://github.com/fastify/fast-uri).\nBumps the npm_and_yarn group with 3 updates in the /packages/app-cli/tests/support/plugins/ai_search directory: [baseline-browser-mapping](https://github.com/web-platform-dx/baseline-browser-mapping), [brace-expansion](https://github.com/juliangruber/brace-expansion) and [fast-uri](https://github.com/fastify/fast-uri).\nBumps the npm_and_yarn group with 4 updates in the /packages/app-cli/tests/support/plugins/codemirror5-and-codemirror6 directory: [moment](https://github.com/moment/moment), [js-yaml](https://github.com/nodeca/js-yaml), [brace-expansion](https://github.com/juliangruber/brace-expansion) and [ip-address](https://github.com/beaugunderson/ip-address).\nBumps the npm_and_yarn group with 2 updates in the /packages/app-cli/tests/support/plugins/codemirror6 directory: [js-yaml](https://github.com/nodeca/js-yaml) and [brace-expansion](https://github.com/juliangruber/brace-expansion).\nBumps the npm_and_yarn group with 3 updates in the /packages/app-cli/tests/support/plugins/menu directory: [baseline-browser-mapping](https://github.com/web-platform-dx/baseline-browser-mapping), [brace-expansion](https://github.com/juliangruber/brace-expansion) and [fast-uri](https://github.com/fastify/fast-uri).\nBumps the npm_and_yarn group with 3 updates in the /packages/app-cli/tests/support/plugins/note_list_renderer directory: [moment](https://github.com/moment/moment), [js-yaml](https://github.com/nodeca/js-yaml) and [brace-expansion](https://github.com/juliangruber/brace-expansion).\nBumps the npm_and_yarn group with 1 update in the /packages/app-cli/tests/support/plugins/worker directory: [brace-expansion](https://github.com/juliangruber/brace-expansion).\nBumps the npm_and_yarn group with 3 updates in the /packages/app-desktop directory: [electron](https://github.com/electron/electron), [markdown-it](https://github.com/markdown-it/markdown-it) and [moment](https://github.com/moment/moment).\nBumps the npm_and_yarn group with 1 update in the /packages/app-mobile directory: [sharp](https://github.com/lovell/sharp).\nBumps the npm_and_yarn group with 5 updates in the /packages/lib directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [sharp](https://github.com/lovell/sharp) | `0.34.5` | `0.35.4` |\n| [markdown-it](https://github.com/markdown-it/markdown-it) | `13.0.2` | `14.3.1` |\n| [moment](https://github.com/moment/moment) | `2.30.1` | `2.31.0` |\n| [adm-zip](https://github.com/cthackers/adm-zip) | `0.5.17` | `0.6.1` |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `4.1.1` | `4.3.2` |\n\nBumps the npm_and_yarn group with 1 update in the /packages/renderer directory: [markdown-it](https://github.com/markdown-it/markdown-it).\nBumps the npm_and_yarn group with 2 updates in the /packages/server directory: [markdown-it](https://github.com/markdown-it/markdown-it) and [nodemailer](https://github.com/nodemailer/nodemailer).\nBumps the npm_and_yarn group with 4 updates in the /packages/tools directory: [sharp](https://github.com/lovell/sharp), [markdown-it](https://github.com/markdown-it/markdown-it), [moment](https://github.com/moment/moment) and [js-yaml](https://github.com/nodeca/js-yaml).\nBumps the npm_and_yarn group with 1 update in the /packages/transcribe directory: [sharp](https://github.com/lovell/sharp).\nBumps the npm_and_yarn group with 2 updates in the /packages/utils directory: [markdown-it](https://github.com/markdown-it/markdown-it) and [moment](https://github.com/moment/moment).\n\nUpdates `sharp` from 0.34.5 to 0.35.4\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/lovell/sharp/releases\"\u003esharp's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.35.4\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/lovell/sharp-libvips/releases/tag/v1.3.3\"\u003ehttps://github.com/lovell/sharp-libvips/releases/tag/v1.3.3\u003c/a\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eBound resize dimensions to coordinate limit.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eBound composite left and top to coordinate limit.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/pull/4564\"\u003e#4564\u003c/a\u003e\n\u003ca href=\"https://github.com/metsw24-max\"\u003e\u003ccode\u003e@​metsw24-max\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eRound palette bit depth up for png and gif colours.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/pull/4569\"\u003e#4569\u003c/a\u003e\n\u003ca href=\"https://github.com/metsw24-max\"\u003e\u003ccode\u003e@​metsw24-max\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eEnsure tiff.subifd input option is used.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/pull/4572\"\u003e#4572\u003c/a\u003e\n\u003ca href=\"https://github.com/metsw24-max\"\u003e\u003ccode\u003e@​metsw24-max\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eEnsure \u003ccode\u003einfo.pages\u003c/code\u003e is correct when limiting input page range.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/pull/4578\"\u003e#4578\u003c/a\u003e\n\u003ca href=\"https://github.com/metsw24-max\"\u003e\u003ccode\u003e@​metsw24-max\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eImprove support for input Streams finishing before output is requested.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/pull/4584\"\u003e#4584\u003c/a\u003e\n\u003ca href=\"https://github.com/Jaybhade\"\u003e\u003ccode\u003e@​Jaybhade\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.35.4-rc.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eUpgrade to libvips v8.18.6 for upstream bug fixes.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eBound resize dimensions to coordinate limit.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eBound composite left and top to coordinate limit.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/pull/4564\"\u003e#4564\u003c/a\u003e\n\u003ca href=\"https://github.com/metsw24-max\"\u003e\u003ccode\u003e@​metsw24-max\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eRound palette bit depth up for png and gif colours.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/pull/4569\"\u003e#4569\u003c/a\u003e\n\u003ca href=\"https://github.com/metsw24-max\"\u003e\u003ccode\u003e@​metsw24-max\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eEnsure tiff.subifd input option is used.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/pull/4572\"\u003e#4572\u003c/a\u003e\n\u003ca href=\"https://github.com/metsw24-max\"\u003e\u003ccode\u003e@​metsw24-max\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eEnsure \u003ccode\u003einfo.pages\u003c/code\u003e is correct when limiting input page range.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/pull/4578\"\u003e#4578\u003c/a\u003e\n\u003ca href=\"https://github.com/metsw24-max\"\u003e\u003ccode\u003e@​metsw24-max\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eImprove support for input Streams finishing before output is requested.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/pull/4584\"\u003e#4584\u003c/a\u003e\n\u003ca href=\"https://github.com/Jaybhade\"\u003e\u003ccode\u003e@​Jaybhade\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/7f1a0a22cc285fe180766f4935d50b55af6e8432\"\u003e\u003ccode\u003e7f1a0a2\u003c/code\u003e\u003c/a\u003e Release v0.35.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/f927818924bc5a9493d822a4e8b23ec5857c52e1\"\u003e\u003ccode\u003ef927818\u003c/code\u003e\u003c/a\u003e Upgrade to sharp-libvips v1.3.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/e80209240d005c71e1173a50dd9cd4db4ce2a9e6\"\u003e\u003ccode\u003ee802092\u003c/code\u003e\u003c/a\u003e Prerelease v0.35.4-rc.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/e13eb2f97a0a22f1ef726e8d0cd33f7c56835945\"\u003e\u003ccode\u003ee13eb2f\u003c/code\u003e\u003c/a\u003e CI: Fix wasm32 build (\u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4589\"\u003e#4589\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/a82a0b3d58bc25854ad1e925e6eb0a50725d1489\"\u003e\u003ccode\u003ea82a0b3\u003c/code\u003e\u003c/a\u003e Upgrade to libvips v8.18.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/8044fe43e36d0ea7f8beb89f79a37bb0f3342e84\"\u003e\u003ccode\u003e8044fe4\u003c/code\u003e\u003c/a\u003e Bound resize dimensions to coordinate limit\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/147f8591a153bc4a1e199c3fe3150fac2931b30c\"\u003e\u003ccode\u003e147f859\u003c/code\u003e\u003c/a\u003e Docs: changelog entries for \u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4578\"\u003e#4578\u003c/a\u003e \u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4584\"\u003e#4584\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/ee5bfb853de75a611c64381783b04032a3a897d8\"\u003e\u003ccode\u003eee5bfb8\u003c/code\u003e\u003c/a\u003e Tests: use yauzl directly rather than via extract-zip wrapper\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/7a7788928f8a2a429f45039010a87cee35401694\"\u003e\u003ccode\u003e7a77889\u003c/code\u003e\u003c/a\u003e Bump uraimo/run-on-arch-action from 3.1.0 to 3.2.0 (\u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4588\"\u003e#4588\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/ea5bef24c187b2c7ee3fe3cad3b45c8cb67a46fd\"\u003e\u003ccode\u003eea5bef2\u003c/code\u003e\u003c/a\u003e Improve support for input Streams finishing before output is requested (\u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4584\"\u003e#4584\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/lovell/sharp/compare/v0.34.5...v0.35.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `axios` from 1.16.1 to 1.20.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.20.0 — August 19, 2026\u003c/h2\u003e\n\u003cp\u003eThis release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.\u003c/p\u003e\n\u003ch2\u003e⚠️ Breaking Changes \u0026amp; Deprecations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRuntime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInterceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11087\"\u003e#11087\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRequest Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eXHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNode.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCore Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and corrected the timeoutErrorMessage merge strategy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated fast-uri, postcss, js-yaml, mocha, development-tooling groups, and GitHub Actions dependencies. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11092\"\u003e#11092\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11098\"\u003e#11098\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11099\"\u003e#11099\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11106\"\u003e#11106\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11107\"\u003e#11107\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11122\"\u003e#11122\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11123\"\u003e#11123\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11126\"\u003e#11126\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11127\"\u003e#11127\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11144\"\u003e#11144\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Applied the v1.19.0 documentation updates, added the missing fs import to the README stream example, introduced localized global search, and repaired the interceptor test link. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11101\"\u003e#11101\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSponsorship: Updated sponsorship links and data and added ScrapingBee as a sponsor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11124\"\u003e#11124\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11136\"\u003e#11136\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCI and Release: Switched ESM smoke tests to locked dependencies and synchronized package and runtime version metadata for v1.20.0. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11128\"\u003e#11128\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yens1\"\u003e\u003ccode\u003e@​yens1\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Sasireddy001\"\u003e\u003ccode\u003e@​Sasireddy001\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ari-token-security\"\u003e\u003ccode\u003e@​ari-token-security\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timothyokooboh\"\u003e\u003ccode\u003e@​timothyokooboh\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gi9439041-png\"\u003e\u003ccode\u003e@​gi9439041-png\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Hashim1999164\"\u003e\u003ccode\u003e@​Hashim1999164\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/v-dev-cl\"\u003e\u003ccode\u003e@​v-dev-cl\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/r0h1tb\"\u003e\u003ccode\u003e@​r0h1tb\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ostapondo\"\u003e\u003ccode\u003e@​ostapondo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog (\u003ca href=\"https://github.com/axios/axios/compare/v1.19.0...v1.20.0\"\u003ehttps://github.com/axios/axios/compare/v1.19.0...v1.20.0\u003c/a\u003e)\u003c/p\u003e\n\u003ch2\u003ev1.19.0 - July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/blob/v1.x/CHANGELOG.md\"\u003eaxios's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003ev1.19.0 — July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🚀 New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eConfiguration Extensibility: Preserved own-enumerable symbol-keyed fields through mergeConfig and added a generic params type across public TypeScript declarations, responses, errors,\nadapters, and serializers. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11081\"\u003e#11081\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHeader Parameter Parsing: Added the opt-in AxiosHeaders.parseParameters() parser for quote-aware, RFC-style HTTP parameter parsing while preserving legacy parsing behavior. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11051\"\u003e#11051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHTTP Status Codes: Added the missing Cloudflare 520 WebServerReturnsAnUnknownError status and matching ESM/CJS declarations. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11067\"\u003e#11067\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eForm Data Conversion: Limited formDataToJSON path splitting to dot and bracket notation, preserving literal punctuation in keys, and removed browser-facing Buffer.from usage from toFormData to avoid unnecessary polyfills. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11018\"\u003e#11018\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProxy Bypass: Canonicalized IPv4 shorthand, octal, and hexadecimal forms during NO_PROXY matching and honored * entries within comma- or space-separated bypass lists. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11053\"\u003e#11053\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eCancellation: Propagated already-aborted input signals immediately when composing abort signals. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eHeader Handling: Preserved empty first values for duplicate singleton headers and made AxiosHeaders#getSetCookie() consistently return arrays for present values. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11036\"\u003e#11036\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11037\"\u003e#11037\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eURL Handling: Included normalized, safely redacted offending URLs in malformed-protocol errors and removed repeated trailing slashes when combining base URLs. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11008\"\u003e#11008\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11038\"\u003e#11038\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProgress Events: Clamped malformed negative progress values to zero and ensured final Node.js download progress events are delivered before streamed responses close. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11039\"\u003e#11039\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11040\"\u003e#11040\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eError and JSON Serialization: Serialized Set values as arrays in JSON-compatible snapshots and synthesized useful AxiosError messages from otherwise-empty AggregateError instances. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11044\"\u003e#11044\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11059\"\u003e#11059\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eContent-Length Enforcement: Corrected base64 data: URL size estimation so maxContentLength is enforced consistently by the HTTP and Fetch adapters. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11061\"\u003e#11061\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSynchronous Interceptors: Prevented requests from being dispatched after synchronous request interceptors fail unless their paired rejection handler resolves successfully. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11071\"\u003e#11071\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated development and test tooling, the docs fixture's Axios version, and GitHub Actions integrations including Checkout, Setup Node, Setup Deno, and Zizmor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11031\"\u003e#11031\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11055\"\u003e#11055\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11056\"\u003e#11056\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11058\"\u003e#11058\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11079\"\u003e#11079\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11080\"\u003e#11080\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11088\"\u003e#11088\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11089\"\u003e#11089\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11090\"\u003e#11090\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBuild Outputs: Limited sourcemap generation to published minified bundles, removing broken map references from non-minified builds. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eForm Data Internals: Centralized FormData header handling and made the Node.js adapter tolerate getHeaders() returning undefined under the content-only policy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11062\"\u003e#11062\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDeveloper Experience: Ignored common local AI-tooling directories and fixed a constant-reassignment crash when the development sandbox serves its root path. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11032\"\u003e#11032\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11073\"\u003e#11073\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Updated sponsor information, clarified that baseURL is not a path-security boundary, scoped provenance claims to attested releases, and corrected the configuration-defaults documentation. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11041\"\u003e#11041\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11068\"\u003e#11068\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11076\"\u003e#11076\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11078\"\u003e#11078\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePublishing: Simplified v1 publishing to use the npm version bundled with Node.js 26 and updated package metadata for the 1.19.0 release. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11083\"\u003e#11083\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11095\"\u003e#11095\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve Axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/afonsojramos\"\u003e\u003ccode\u003e@​afonsojramos\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yassertawfik4\"\u003e\u003ccode\u003e@​yassertawfik4\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11024\"\u003e#11024\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AnandSundar\"\u003e\u003ccode\u003e@​AnandSundar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lin-hongkuan\"\u003e\u003ccode\u003e@​lin-hongkuan\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Wali007-lab\"\u003e\u003ccode\u003e@​Wali007-lab\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/magicdawn\"\u003e\u003ccode\u003e@​magicdawn\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/84a9f3b9a4f3244b8c8e818f557d64c7b964fb25\"\u003e\u003ccode\u003e84a9f3b\u003c/code\u003e\u003c/a\u003e chore(release): prepare release 1.20.0 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e6824eec5fcf9da467a9792724396badc490c469\"\u003e\u003ccode\u003ee6824ee\u003c/code\u003e\u003c/a\u003e fix: core methodList, HTTP adapter errors, and add tests (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d8a919fd81403d59058c0e9dbefc540407dee83f\"\u003e\u003ccode\u003ed8a919f\u003c/code\u003e\u003c/a\u003e fix(xhr): flush final progress during the live loadend dispatch (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2d2a21af8a433089474a2149781799c93acbcf3c\"\u003e\u003ccode\u003e2d2a21a\u003c/code\u003e\u003c/a\u003e fix(interceptors): tolerate nullish handlers in syncHandlerEntries (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a\"\u003e\u003ccode\u003ed19040b\u003c/code\u003e\u003c/a\u003e fix: harden runtime option handling (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e0a02dd16671deabe2b809334d4c2ebede29a233\"\u003e\u003ccode\u003ee0a02dd\u003c/code\u003e\u003c/a\u003e chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 in the github-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d10cb3aa3cda1d78721ddf96be590478df26cd81\"\u003e\u003ccode\u003ed10cb3a\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump the development_dependencies group with 4 updates (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2c94646eb7cb7ab9dcb2aefdb04ab1b040c28e16\"\u003e\u003ccode\u003e2c94646\u003c/code\u003e\u003c/a\u003e chore(deps): bump js-yaml and mocha in /tests/smoke/cjs (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/76c12bce5a4fe9a45bef9a5bf2baaf599d7d382e\"\u003e\u003ccode\u003e76c12bc\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/ba98559a7f5a18e531b5762387e5957bd281af3d\"\u003e\u003ccode\u003eba98559\u003c/code\u003e\u003c/a\u003e docs: add ScrapingBee sponsor (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/axios/axios/compare/v1.16.1...v1.20.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `electron` from 42.3.0 to 42.10.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/electron/electron/releases\"\u003eelectron's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eelectron v42.10.0\u003c/h2\u003e\n\u003ch1\u003eRelease Notes for v42.10.0\u003c/h1\u003e\n\u003ch2\u003eFeatures\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed contentTracing module to capture Node.js trace categories. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52973\"\u003e#52973\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eFixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed DevTools device metrics overrides persisting indefinitely when a remote debugging client disconnected without clearing them. \u003ca href=\"https://redirect.github.com/electron/electron/pull/53133\"\u003e#53133\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52946\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52930\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed DevTools popup and context menus not appearing when DevTools is hosted in a custom window via \u003ccode\u003ewebContents.setDevToolsWebContents()\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52981\"\u003e#52981\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52937\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52434\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003eBrowserWindow.unmaximize()\u003c/code\u003e and \u003ccode\u003erestore()\u003c/code\u003e having no effect on Wayland when the window was maximized immediately after creation. \u003ca href=\"https://redirect.github.com/electron/electron/pull/53126\"\u003e#53126\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/53124\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003eUncaught illegal access\u003c/code\u003e errors and possible renderer crashes after closing a same-process child window or removing an iframe with \u003ccode\u003enodeIntegrationInSubFrames\u003c/code\u003e enabled. \u003ca href=\"https://redirect.github.com/electron/electron/pull/53042\"\u003e#53042\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/53040\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003edialog.showOpenDialog\u003c/code\u003e/\u003ccode\u003edialog.showSaveDialog\u003c/code\u003e opening at an unusable location on Linux when \u003ccode\u003edefaultPath\u003c/code\u003e is a bare filename without a directory. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52980\"\u003e#52980\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52401\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52402\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed a crash on Linux when the D-Bus session bus disconnected while the app was running, such as at logout or when dbus is restarted. \u003ca href=\"https://redirect.github.com/electron/electron/pull/53094\"\u003e#53094\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/53095\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/53096\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed a crash on Windows when V8 posted a delayed worker task during shutdown. \u003ca href=\"https://redirect.github.com/electron/electron/pull/53014\"\u003e#53014\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/53013\"\u003e43\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed a crash with \u003ccode\u003eapp.setLoginItemSettings\u003c/code\u003e if a non-UTF8 service name is used. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52989\"\u003e#52989\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52944\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52801\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed a possible crash (SIGABRT) during process exit when the process had loaded \u003ccode\u003etls\u003c/code\u003e/\u003ccode\u003ehttps\u003c/code\u003e shortly before exiting, affecting \u003ccode\u003eapp.exit()\u003c/code\u003e before \u003ccode\u003eready\u003c/code\u003e and short-lived \u003ccode\u003eELECTRON_RUN_AS_NODE\u003c/code\u003e / \u003ccode\u003echild_process.fork()\u003c/code\u003e scripts. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52992\"\u003e#52992\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52870\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52871\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed a possible main process crash at quit when a session was created from JavaScript that runs during shutdown. \u003ca href=\"https://redirect.github.com/electron/electron/pull/53132\"\u003e#53132\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52925\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52924\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed a rare crash in the main process when DevTools were opened and a garbage collection ran before the DevTools frontend finished loading. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52994\"\u003e#52994\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52903\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52904\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed a renderer crash when a page calls \u003ccode\u003eSpeechRecognition.available()\u003c/code\u003e or \u003ccode\u003eSpeechRecognition.install()\u003c/code\u003e with \u003ccode\u003eprocessLocally\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/electron/electron/pull/53016\"\u003e#53016\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/53015\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/53021\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed an issue on Linux where the system theme color appeared at the top edge of frameless windows. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52978\"\u003e#52978\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/53006\"\u003e41\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52179\"\u003e43\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed an issue where some values passed into \u003ccode\u003erequestSingleInstanceLock\u003c/code\u003e could result in a crash. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52982\"\u003e#52982\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52471\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52470\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed crash in sharedTexture module when GPU context becomes unavailable. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52983\"\u003e#52983\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52938\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52926\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed document title updates when using back/forward navigation using the same document without utilizing \u003ccode\u003ebrowserWindow.setTitle()\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/electron/electron/pull/53099\"\u003e#53099\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/53023\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52968\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed the built-in PDF viewer not rendering documents in in-memory sessions (partitions without the \u003ccode\u003epersist:\u003c/code\u003e prefix). \u003ca href=\"https://redirect.github.com/electron/electron/pull/52990\"\u003e#52990\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52835\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52834\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed titleBarOverlay.color set to \u003ccode\u003ergba(0,0,0,0)\u003c/code\u003e failing back to default frame color. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52976\"\u003e#52976\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/53004\"\u003e41\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52010\"\u003e43\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed utility process crashes at exit on Windows 11 24H2 and later. \u003ca href=\"https://redirect.github.com/electron/electron/pull/53091\"\u003e#53091\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/53092\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/53093\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eOther Changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBackported fixes from upstream Chromium and V8. \u003ca href=\"https://redirect.github.com/electron/electron/pull/53060\"\u003e#53060\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a 1-in-200 chance per renderer process on Windows of scripts on the first page load being compiled without their V8 code cache. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52988\"\u003e#52988\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52943\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52792\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed a Windows x64 renderer performance regression introduced in 42.8.1 that made style/layout work (and app startup) noticeably slower. \u003ca href=\"https://redirect.github.com/electron/electron/pull/53064\"\u003e#53064\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a stall of tens of milliseconds while creating the first \u003ccode\u003eBrowserWindow\u003c/code\u003e on Linux.\n\u003cul\u003e\n\u003cli\u003eImproved the performance of file lookups inside ASAR archives and of large files served from them to the renderer.\u003c/li\u003e\n\u003cli\u003eImproved the performance of calls through \u003ccode\u003econtextBridge\u003c/code\u003e-exposed APIs.\u003c/li\u003e\n\u003cli\u003eReduced the main-thread cost of sending large values through \u003ccode\u003eipcRenderer\u003c/code\u003e, \u003ccode\u003eipcMain\u003c/code\u003e handlers and \u003ccode\u003ewebContents.send\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/electron/electron/pull/53019\"\u003e#53019\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/53018\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/53017\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eImproved startup time of \u003ccode\u003eutilityProcess.fork()\u003c/code\u003e, \u003ccode\u003echild_process.fork()\u003c/code\u003e / \u003ccode\u003eELECTRON_RUN_AS_NODE\u003c/code\u003e child processes and Node.js-enabled renderers. \u003ca href=\"https://redirect.github.com/electron/electron/pull/53136\"\u003e#53136\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/53135\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/53134\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eLinux arm64, Windows arm64 and macOS x64 builds now start the main process from the embedded Node.js startup snapshot like the other platforms, improving startup time. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52880\"\u003e#52880\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52881\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52879\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eelectron v42.9.3\u003c/h2\u003e\n\u003ch1\u003eRelease Notes for v42.9.3\u003c/h1\u003e\n\u003ch2\u003eFixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a graphical glitch on Linux where thin borders appeared past the drop shadows on frameless windows when multiple windows were created. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52772\"\u003e#52772\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52607\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52606\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed a memory leak when creating BrowserWindows. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52893\"\u003e#52893\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52892\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52894\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed an issue on Windows where the app process could fail to exit after \u003ccode\u003eapp.quit()\u003c/code\u003e while a \u003ccode\u003eshell.openExternal()\u003c/code\u003e or \u003ccode\u003eshell.openPath()\u003c/code\u003e call was still waiting on a system \u0026quot;Open with\u0026quot; dialog. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52900\"\u003e#52900\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52899\"\u003e41\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52897\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52898\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed custom V8 snapshots (\u003ccode\u003eelectron-mksnapshot\u003c/code\u003e, and the \u003ccode\u003eloadBrowserProcessSpecificV8Snapshot\u003c/code\u003e fuse) having no effect in the main process on macOS arm64, Linux x64 and Windows x64. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52876\"\u003e#52876\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52877\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52878\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eOther Changes\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/9f0109679540320c5dc5b7bef0aa94733058e8c2\"\u003e\u003ccode\u003e9f01096\u003c/code\u003e\u003c/a\u003e fix: window stuck maximized on Wayland after early maximize() (\u003ca href=\"https://redirect.github.com/electron/electron/issues/53126\"\u003e#53126\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/c411b7ccad8d71964428aad52da738359cf70fec\"\u003e\u003ccode\u003ec411b7c\u003c/code\u003e\u003c/a\u003e perf: boot every Node.js-hosting process from the Node snapshot / code cache ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/5751bc5fefb180e7b2fef48a3afc350f1f1f6d46\"\u003e\u003ccode\u003e5751bc5\u003c/code\u003e\u003c/a\u003e fix: clear device metrics overrides when a DevTools client disconnects (\u003ca href=\"https://redirect.github.com/electron/electron/issues/53133\"\u003e#53133\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/277efdf2cdee0e289f127c99570706e2d4589f02\"\u003e\u003ccode\u003e277efdf\u003c/code\u003e\u003c/a\u003e fix: crash in gin::PerIsolateData::NotifyDisposed when a session is created d...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/d054052a752ea88556b13b5d322f398907319a04\"\u003e\u003ccode\u003ed054052\u003c/code\u003e\u003c/a\u003e chore: iwyu commonly-included headers in shell/ (\u003ca href=\"https://redirect.github.com/electron/electron/issues/52972\"\u003e#52972\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/1645b087103c7401be3ff202be3bbf61cfca73c6\"\u003e\u003ccode\u003e1645b08\u003c/code\u003e\u003c/a\u003e build: update PGO profiles (\u003ca href=\"https://redirect.github.com/electron/electron/issues/53119\"\u003e#53119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/e4ea00f761c6970a4181fc0932251a44d943e2d7\"\u003e\u003ccode\u003ee4ea00f\u003c/code\u003e\u003c/a\u003e build: update PGO profiles (\u003ca href=\"https://redirect.github.com/electron/electron/issues/53113\"\u003e#53113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/b5c236f24546a8c53664525cbd26dbcf5c34c549\"\u003e\u003ccode\u003eb5c236f\u003c/code\u003e\u003c/a\u003e fix: update document title on back or forward navigation (\u003ca href=\"https://redirect.github.com/electron/electron/issues/53099\"\u003e#53099\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/569c64a6e9ff893d2bdd9c7914a22ee0023598ac\"\u003e\u003ccode\u003e569c64a\u003c/code\u003e\u003c/a\u003e build: skip linux-arm in PGO profile generation (\u003ca href=\"https://redirect.github.com/electron/electron/issues/53111\"\u003e#53111\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/d13ae9f14b56f4fb0730cf9e582956ddf986e2f4\"\u003e\u003ccode\u003ed13ae9f\u003c/code\u003e\u003c/a\u003e fix: illegal access errors when a same-process child window or subframe close...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/electron/electron/compare/v42.3.0...v42.10.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `markdown-it` from 13.0.2 to 14.3.1\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/markdown-it/markdown-it/blob/14.3.1/CHANGELOG.md\"\u003emarkdown-it's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[14.3.1] - 2026-08-27\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackported 15.0.1 fixes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[14.3.0] - 2026-07-02\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReworked build pipeline \u0026amp; tools.\u003c/li\u003e\n\u003cli\u003eAdded source maps.\u003c/li\u003e\n\u003cli\u003eBumped \u003ccode\u003elinkify-it\u003c/code\u003e to 5.0.2.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePreserve backslash-space hard line breaks, matching CommonMark 6.7, \u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1185\"\u003e#1185\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[14.2.0] - 2026-05-24\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eisPunctCharCode\u003c/code\u003e to utilities.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDon't end HTML comment blocks on a blank line, \u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1155\"\u003e#1155\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eProperly recognize astral chars (surrogates) in delimiter scans for\nemphasis-like markers, \u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1072\"\u003e#1072\u003c/a\u003e. Big thanks to \u003ca href=\"https://github.com/tats-u\"\u003e\u003ccode\u003e@​tats-u\u003c/code\u003e\u003c/a\u003e for his global efforts\nwith improving CJK support.\u003c/li\u003e\n\u003cli\u003ePreserve unicode whitespaces when trimm headings/paragraphs, \u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1074\"\u003e#1074\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eMore strict entities decode to avoid false positives \u003ccode\u003e;\u003c/code\u003e, \u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1096\"\u003e#1096\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eRestore block parser state on fail in \u003ccode\u003elheading\u003c/code\u003e rule, \u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1131\"\u003e#1131\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed poor smartquotes perfomance on \u0026gt; 70k quotes in single block\u003c/li\u003e\n\u003cli\u003eBumped linkify-it to 5.0.1 with fixed potential perfomance issues.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[14.1.1] - 2026-01-11\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed regression from v13 in linkify inline rule. Specific patterns could\ncause high CPU use. Thanks to \u003ca href=\"https://github.com/ltduc147\"\u003e\u003ccode\u003e@​ltduc147\u003c/code\u003e\u003c/a\u003e for report.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[14.1.0] - 2024-03-19\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated CM spec compatibility to 0.31.2, \u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1009\"\u003e#1009\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed quadratic complexity when parsing references, \u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/996\"\u003e#996\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eFixed quadratic output size with pathological user input in tables, \u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1000\"\u003e#1000\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/a855f10b1b796ca42178952b4b83b9c8b677ddb8\"\u003e\u003ccode\u003ea855f10\u003c/code\u003e\u003c/a\u003e 14.3.1 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/ad70f6b7cff64bee10e42a774147112480ca0d49\"\u003e\u003ccode\u003ead70f6b\u003c/code\u003e\u003c/a\u003e Backported 15.0.1 fixes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/b407f3b0667c9491cc52c6550736ee5a31721baa\"\u003e\u003ccode\u003eb407f3b\u003c/code\u003e\u003c/a\u003e Ignore generated API docs in lint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/bf025adb983e90af426761a08cc76e4e41ab0239\"\u003e\u003ccode\u003ebf025ad\u003c/code\u003e\u003c/a\u003e Prepare package.json for v14 backports\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/2d9bbea7df2ab1a48caecfafc39cb8599f193d3c\"\u003e\u003ccode\u003e2d9bbea\u003c/code\u003e\u003c/a\u003e fix: recognize lowercase declarations as HTML blocks (CommonMark 4.6) (\u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1189\"\u003e#1189\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/a311cfbeb7dcdb86d001a21facaf60190414ca4d\"\u003e\u003ccode\u003ea311cfb\u003c/code\u003e\u003c/a\u003e fix: keep literal backslash before space in link destination (CommonMark 6.3)...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/ff0ee084fc6b0d10fac049fa562bc2925b5cc723\"\u003e\u003ccode\u003eff0ee08\u003c/code\u003e\u003c/a\u003e 14.3.0 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/52e2749ab25aaf841bf74b50560929aa93b8e14d\"\u003e\u003ccode\u003e52e2749\u003c/code\u003e\u003c/a\u003e Bump linkify-it / vite deps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/56c2404e6d3e78632ce7b37a95f289fc04330c76\"\u003e\u003ccode\u003e56c2404\u003c/code\u003e\u003c/a\u003e fix: keep backslash-space hard line break (CommonMark 6.7) (\u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1185\"\u003e#1185\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/0fbb18b23145158a39255f7476c781dbce320a16\"\u003e\u003ccode\u003e0fbb18b\u003c/code\u003e\u003c/a\u003e Bump vite from 8.0.14 to 8.0.16 (\u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1181\"\u003e#1181\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/markdown-it/markdown-it/compare/13.0.2...14.3.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `moment` from 2.30.1 to 2.31.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/releases\"\u003emoment's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.31.0\u003c/h2\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/blob/develop/CHANGELOG.md\"\u003emoment's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch3\u003e2.31.0\u003c/h3\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/15b45d48a176312e8f34143c5a800090abf4787f\"\u003e\u003ccode\u003e15b45d4\u003c/code\u003e\u003c/a\u003e [pkg] Build 2.31.0 (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6452\"\u003e#6452\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/631cd81454ee001e1f508e21270eae0b6bb62974\"\u003e\u003ccode\u003e631cd81\u003c/code\u003e\u003c/a\u003e [pkg] Update changelog for upcoming release (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6394\"\u003e#6394\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/6caff9e0d54e85a63a6eb97d7361f1da35bc58f4\"\u003e\u003ccode\u003e6caff9e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/710703b7eac93535ad125cbf4feb3d42afed6fb3\"\u003e\u003ccode\u003e710703b\u003c/code\u003e\u003c/a\u003e [feature] Add internal date-default hook for Moment Timezone (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6451\"\u003e#6451\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/863ed940556e6e63c43de23981a4853036a003ac\"\u003e\u003ccode\u003e863ed94\u003c/code\u003e\u003c/a\u003e [bugfix] Add stack traces to conditional deprecation warnings (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6450\"\u003e#6450\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/2c7abe1c42ee15445d30c2c5d536750a1e43a09a\"\u003e\u003ccode\u003e2c7abe1\u003c/code\u003e\u003c/a\u003e [bugfix] Apply postformat to locale relative time methods (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6448\"\u003e#6448\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/9c45ac38690c649c95e19923276b63da5fe2be26\"\u003e\u003ccode\u003e9c45ac3\u003c/code\u003e\u003c/a\u003e [bugfix] Include metadata in all-locales bundle (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6447\"\u003e#6447\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/f6eefc5fc7b44ceccbd007aeffc48ebc5eac30fa\"\u003e\u003ccode\u003ef6eefc5\u003c/code\u003e\u003c/a\u003e [bugfix] Validate timezone offset range (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6446\"\u003e#6446\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/136b441794a3bb207d593add3b59e9de0e062523\"\u003e\u003ccode\u003e136b441\u003c/code\u003e\u003c/a\u003e [bugfix] Avoid Object.assign in duration.humanize (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6443\"\u003e#6443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/0d1050437b40f66ac47e14b285bb3d09676cf2e0\"\u003e\u003ccode\u003e0d10504\u003c/code\u003e\u003c/a\u003e [bugfix] Fix locale('\u003cstrong\u003eproto\u003c/strong\u003e') corrupting the global locale (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6442\"\u003e#6442\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moment/moment/compare/2.30.1...2.31.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for moment since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `adm-zip` from 0.5.17 to 0.6.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cthackers/adm-zip/releases\"\u003eadm-zip's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.6.1\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cthackers/adm-zip/compare/v0.6.0...v0.6.1\"\u003ehttps://github.com/cthackers/adm-zip/compare/v0.6.0...v0.6.1\u003c/a\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dev dependencies\u003c/li\u003e\n\u003cli\u003eFixed uncaught crash in async decompression on malformed DEFLATE data\u003c/li\u003e\n\u003cli\u003eFixed addLocalFolder following symlinks out of the archived folder\u003c/li\u003e\n\u003cli\u003eStripped setuid/setgid/sticky bits from extracted file permissions\u003c/li\u003e\n\u003cli\u003eEnforced the decompression size cap on the async path and for size 0\u003c/li\u003e\n\u003cli\u003eRejected archives with duplicate entry names\u003c/li\u003e\n\u003cli\u003eBlocked extraction from writing through symlinks inside the target\u003c/li\u003e\n\u003cli\u003eRouted malformed-header parse errors through the async callback\u003c/li\u003e\n\u003cli\u003eRejected zip entries whose declared data extent runs past the buffer\u003c/li\u003e\n\u003cli\u003eFixed addLocalFolderPromise hanging on empty folders and swallowing errors\u003c/li\u003e\n\u003cli\u003eFixed addLocalFolderAsync2 mangling local paths on Windows\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.6.0\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cthackers/adm-zip/compare/v0.5.18...v0.6.0\"\u003ehttps://github.com/cthackers/adm-zip/compare/v0.5.18...v0.6.0\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eThis release fixes a security vulnerability (CVE-2026-39244), resolves several long-standing bugs, ships built-in TypeScript types, and includes two behavior changes worth reading before you upgrade.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eextractEntryTo(dirEntry, target, maintainEntryPath = false) now preserves subdirectories instead of flattening files into the target folder by basename (which also silently overwrote same-named files). (\u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/306\"\u003e#306\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eExtraction no longer fails when the modification time can't be set — utimes is now best-effort. (\u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/379\"\u003e#379\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMinimum Node.js is now 14 (the code already required it; engines was incorrectly \u0026gt;=12).\u003c/li\u003e\n\u003cli\u003eCVE-2026-39244 — a crafted archive declaring a huge uncompressed size could force an unbounded Buffer.alloc and OOM the process; allocation is now bounded by the data actually present. Reported by Daniel Púa (devploit), Anh Hong, and José Antonio Zamudio Amaya. (\u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/568\"\u003e#568\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHardened entry-name lookup against object injection (\u003cstrong\u003eproto\u003c/strong\u003e names). Prototype-less table.\u003c/li\u003e\n\u003cli\u003eData-descriptor regression rejecting valid archives (\u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/548\"\u003e#548\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/533\"\u003e#533\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/554\"\u003e#554\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDirectory permissions not restored on extract (\u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/530\"\u003e#530\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eInfinite recursion on symlink loops in addLocalFolder (\u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/541\"\u003e#541\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUncaught process crash in writeFileToAsync on write failure (\u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/470\"\u003e#470\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/459\"\u003e#459\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/402\"\u003e#402\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEmpty name on directory entries (\u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/466\"\u003e#466\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest() alway...\n\n_Description has been truncated_","html_url":"https://github.com/alexis-opolka/joplin/pull/186","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexis-opolka%2Fjoplin/issues/186","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/186/packages"}],"issue_packages":[{"old_version":"2.30.1","new_version":"2.31.0","update_type":"minor","path":null,"pr_created_at":"2026-10-23T10:05:29.000Z","version_change":"2.30.1 → 2.31.0","issue":{"uuid":"5995829856","node_id":"PR_kwDOGDW2As8AAAABKOWpMQ","number":79,"state":"open","title":"build(deps): Bump moment from 2.30.1 to 2.31.0","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-23T10:05:29.000Z","updated_at":"2026-10-23T10:06:01.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps): Bump","packages":[{"name":"moment","old_version":"2.30.1","new_version":"2.31.0","repository_url":"https://github.com/moment/moment"}],"path":null,"ecosystem":"npm"},"body":"Bumps [moment](https://github.com/moment/moment) from 2.30.1 to 2.31.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/releases\"\u003emoment's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.31.0\u003c/h2\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/blob/develop/CHANGELOG.md\"\u003emoment's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch3\u003e2.31.0\u003c/h3\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/15b45d48a176312e8f34143c5a800090abf4787f\"\u003e\u003ccode\u003e15b45d4\u003c/code\u003e\u003c/a\u003e [pkg] Build 2.31.0 (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6452\"\u003e#6452\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/631cd81454ee001e1f508e21270eae0b6bb62974\"\u003e\u003ccode\u003e631cd81\u003c/code\u003e\u003c/a\u003e [pkg] Update changelog for upcoming release (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6394\"\u003e#6394\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/6caff9e0d54e85a63a6eb97d7361f1da35bc58f4\"\u003e\u003ccode\u003e6caff9e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/710703b7eac93535ad125cbf4feb3d42afed6fb3\"\u003e\u003ccode\u003e710703b\u003c/code\u003e\u003c/a\u003e [feature] Add internal date-default hook for Moment Timezone (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6451\"\u003e#6451\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/863ed940556e6e63c43de23981a4853036a003ac\"\u003e\u003ccode\u003e863ed94\u003c/code\u003e\u003c/a\u003e [bugfix] Add stack traces to conditional deprecation warnings (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6450\"\u003e#6450\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/2c7abe1c42ee15445d30c2c5d536750a1e43a09a\"\u003e\u003ccode\u003e2c7abe1\u003c/code\u003e\u003c/a\u003e [bugfix] Apply postformat to locale relative time methods (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6448\"\u003e#6448\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/9c45ac38690c649c95e19923276b63da5fe2be26\"\u003e\u003ccode\u003e9c45ac3\u003c/code\u003e\u003c/a\u003e [bugfix] Include metadata in all-locales bundle (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6447\"\u003e#6447\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/f6eefc5fc7b44ceccbd007aeffc48ebc5eac30fa\"\u003e\u003ccode\u003ef6eefc5\u003c/code\u003e\u003c/a\u003e [bugfix] Validate timezone offset range (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6446\"\u003e#6446\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/136b441794a3bb207d593add3b59e9de0e062523\"\u003e\u003ccode\u003e136b441\u003c/code\u003e\u003c/a\u003e [bugfix] Avoid Object.assign in duration.humanize (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6443\"\u003e#6443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/0d1050437b40f66ac47e14b285bb3d09676cf2e0\"\u003e\u003ccode\u003e0d10504\u003c/code\u003e\u003c/a\u003e [bugfix] Fix locale('\u003cstrong\u003eproto\u003c/strong\u003e') corrupting the global locale (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6442\"\u003e#6442\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moment/moment/compare/2.30.1...2.31.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for moment since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=moment\u0026package-manager=npm_and_yarn\u0026previous-version=2.30.1\u0026new-version=2.31.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Dragon1573/Boudoir-of-Sagiri/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/Dragon1573/Boudoir-of-Sagiri/pull/79","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Dragon1573%2FBoudoir-of-Sagiri/issues/79","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/79/packages"}},{"old_version":"2.30.1","new_version":"2.31.0","update_type":"minor","path":null,"pr_created_at":"2026-10-21T04:57:58.000Z","version_change":"2.30.1 → 2.31.0","issue":{"uuid":"5954612520","node_id":"PR_kwDOK1EH8s8AAAABJteCbg","number":35,"state":"open","title":"build(deps): bump the npm_and_yarn group across 1 directory with 7 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-21T04:57:58.000Z","updated_at":"2026-10-21T04:58:05.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps): bump","group_name":"npm_and_yarn","update_count":7,"packages":[{"name":"moment","old_version":"2.30.1","new_version":"2.31.0","repository_url":"https://github.com/moment/moment"},{"name":"next","old_version":"16.3.3","new_version":"16.3.8","repository_url":"https://github.com/vercel/next.js"},{"name":"sharp","old_version":"0.35.4","new_version":"0.35.5","repository_url":"https://github.com/lovell/sharp"},{"name":"brace-expansion","old_version":"2.1.4","new_version":"2.1.7","repository_url":"https://github.com/juliangruber/brace-expansion"},{"name":"follow-redirects","old_version":"1.16.0","new_version":"1.16.1","repository_url":"https://github.com/follow-redirects/follow-redirects"},{"name":"http-cache-semantics","old_version":"4.1.1","new_version":"4.3.0","repository_url":"https://github.com/kornelski/http-cache-semantics"},{"name":"source-map-js","old_version":"1.2.1","new_version":"1.2.2","repository_url":"https://github.com/7rulnik/source-map-js"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 7 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [moment](https://github.com/moment/moment) | `2.30.1` | `2.31.0` |\n| [next](https://github.com/vercel/next.js) | `16.3.3` | `16.3.8` |\n| [sharp](https://github.com/lovell/sharp) | `0.35.4` | `0.35.5` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `2.1.4` | `2.1.7` |\n| [follow-redirects](https://github.com/follow-redirects/follow-redirects) | `1.16.0` | `1.16.1` |\n| [http-cache-semantics](https://github.com/kornelski/http-cache-semantics) | `4.1.1` | `4.3.0` |\n| [source-map-js](https://github.com/7rulnik/source-map-js) | `1.2.1` | `1.2.2` |\n\n\nUpdates `moment` from 2.30.1 to 2.31.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/releases\"\u003emoment's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.31.0\u003c/h2\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/blob/develop/CHANGELOG.md\"\u003emoment's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch3\u003e2.31.0\u003c/h3\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/15b45d48a176312e8f34143c5a800090abf4787f\"\u003e\u003ccode\u003e15b45d4\u003c/code\u003e\u003c/a\u003e [pkg] Build 2.31.0 (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6452\"\u003e#6452\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/631cd81454ee001e1f508e21270eae0b6bb62974\"\u003e\u003ccode\u003e631cd81\u003c/code\u003e\u003c/a\u003e [pkg] Update changelog for upcoming release (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6394\"\u003e#6394\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/6caff9e0d54e85a63a6eb97d7361f1da35bc58f4\"\u003e\u003ccode\u003e6caff9e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/710703b7eac93535ad125cbf4feb3d42afed6fb3\"\u003e\u003ccode\u003e710703b\u003c/code\u003e\u003c/a\u003e [feature] Add internal date-default hook for Moment Timezone (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6451\"\u003e#6451\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/863ed940556e6e63c43de23981a4853036a003ac\"\u003e\u003ccode\u003e863ed94\u003c/code\u003e\u003c/a\u003e [bugfix] Add stack traces to conditional deprecation warnings (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6450\"\u003e#6450\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/2c7abe1c42ee15445d30c2c5d536750a1e43a09a\"\u003e\u003ccode\u003e2c7abe1\u003c/code\u003e\u003c/a\u003e [bugfix] Apply postformat to locale relative time methods (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6448\"\u003e#6448\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/9c45ac38690c649c95e19923276b63da5fe2be26\"\u003e\u003ccode\u003e9c45ac3\u003c/code\u003e\u003c/a\u003e [bugfix] Include metadata in all-locales bundle (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6447\"\u003e#6447\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/f6eefc5fc7b44ceccbd007aeffc48ebc5eac30fa\"\u003e\u003ccode\u003ef6eefc5\u003c/code\u003e\u003c/a\u003e [bugfix] Validate timezone offset range (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6446\"\u003e#6446\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/136b441794a3bb207d593add3b59e9de0e062523\"\u003e\u003ccode\u003e136b441\u003c/code\u003e\u003c/a\u003e [bugfix] Avoid Object.assign in duration.humanize (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6443\"\u003e#6443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/0d1050437b40f66ac47e14b285bb3d09676cf2e0\"\u003e\u003ccode\u003e0d10504\u003c/code\u003e\u003c/a\u003e [bugfix] Fix locale('\u003cstrong\u003eproto\u003c/strong\u003e') corrupting the global locale (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6442\"\u003e#6442\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moment/moment/compare/2.30.1...2.31.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for moment since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `next` from 16.3.3 to 16.3.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vercel/next.js/releases\"\u003enext's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev16.3.8\u003c/h2\u003e\n\u003cp\u003eThis release contains security fixes for the following advisories:\u003c/p\u003e\n\u003cp\u003eHigh:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-cjq9-62q9-8jv4\"\u003eServer-Side Request Forgery in Image Optimization\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eMedium:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-f87g-xv8r-7p7x\"\u003eInformation disclosure in Next.js App Router metadata image routes via dynamicParams bypass\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-4jqv-mc3x-m676\"\u003eCache poisoning of SSG and ISR pages in self-hosted Next.js applications\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-mcj8-r9mp-w47p\"\u003eCache poisoning in Next.js SSG/ISR rendering leads to cross-user content substitution and persistent denial of service\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-3w37-wq28-93x7\"\u003ePending \u003ccode\u003euse cache\u003c/code\u003e fill can leak Draft Mode content into regular responses and persisted pages\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-h694-7cp9-m8p3\"\u003eCache leak across root param values in nested 'use cache' functions\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eLow:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-39w2-rjm5-chcv\"\u003eInformation disclosure in the Next.js development server's Model Context Protocol endpoint\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev16.3.7\u003c/h2\u003e\n\u003cblockquote\u003e\n\u003cp\u003e[!NOTE]\nThis release is backporting bug fixes. It does \u003cstrong\u003enot\u003c/strong\u003e include all pending features/changes on canary.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch3\u003eCore Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eturbo-tasks-backend: fix strongly consistent read hanging on a canceled task (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/98931\"\u003e#98931\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCredits\u003c/h3\u003e\n\u003cp\u003eHuge thanks to \u003ca href=\"https://github.com/lukesandberg\"\u003e\u003ccode\u003e@​lukesandberg\u003c/code\u003e\u003c/a\u003e for helping!\u003c/p\u003e\n\u003ch2\u003ev16.3.6\u003c/h2\u003e\n\u003cp\u003eThis release contains a security fix for \u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-vcvr-r3jv-pc5j\"\u003eGHSA-vcvr-r3jv-pc5j: Remote Code Execution in next/og ImageResponse\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev16.3.5\u003c/h2\u003e\n\u003cp\u003eThe following bug fixes have been backported. It does not include all pending features/changes on canary.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003enext/image: Skip 0-byte entries when initializing disk LRU cache (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/98185\"\u003e#98185\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003enext/image: Reject empty images when reading/writing to the disk cache (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/98186\"\u003e#98186\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEmit whole-app server NFTs when \u003ccode\u003eoutput: 'standalone'\u003c/code\u003e is used with an adapter (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/98167\"\u003e#98167\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd CSP nonce to script tags of loading and template files (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/98403\"\u003e#98403\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003euse cache\u003c/code\u003e prerender signal retention (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/98448\"\u003e#98448\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev16.3.4\u003c/h2\u003e\n\u003cp\u003eFollow-up release to \u003ca href=\"https://github.com/vercel/next.js/releases/tag/v16.3.3\"\u003ev16.3.3\u003c/a\u003e re-enabling AVIF Image Optimization (\u003ca href=\"https://redirect.github.com/vercel/next.js/pull/97949\"\u003e#97949\u003c/a\u003e).\u003c/p\u003e\n\u003cp\u003eThe following bug fixes have been backported. It does \u003cstrong\u003enot\u003c/strong\u003e include all pending features/changes on canary.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003etestmode: Fix infinite recursion in testmode passthrough fetch (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/97691\"\u003e#97691\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix build error when aliasing typescript to \u003ccode\u003e@​typescript/typescript6\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/97997\"\u003e#97997\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix unset crossOrigin in Turbopack manifests (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/97930\"\u003e#97930\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCredits\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/b0fad0d45eb4c4430fda5eeeb442e8a5af08a5f6\"\u003e\u003ccode\u003eb0fad0d\u003c/code\u003e\u003c/a\u003e v16.3.8\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/719e4c67d6e92df60246f95e1d96e2dd60789a52\"\u003e\u003ccode\u003e719e4c6\u003c/code\u003e\u003c/a\u003e [lts-active] Scope response cache keys to their source route (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/218\"\u003e#218\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/e92db4536a7f34ae2dbda583cfa1b4e0d06d1865\"\u003e\u003ccode\u003ee92db45\u003c/code\u003e\u003c/a\u003e [lts-active] Fix metadata propagation for deduplicated nested caches (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/223\"\u003e#223\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/40c2ba904289a65ed2fd4633c5dfb1bdc29b52de\"\u003e\u003ccode\u003e40c2ba9\u003c/code\u003e\u003c/a\u003e [lts-active] Match Next data paths case-sensitively (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/196\"\u003e#196\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/2d9f50a409312696145b82b3157aadb6b1fef476\"\u003e\u003ccode\u003e2d9f50a\u003c/code\u003e\u003c/a\u003e [lts-active] Fix MCP middleware DNS rebinding (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/213\"\u003e#213\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/bd9214f9a32854a011bf5fe58e481dffe1bbf598\"\u003e\u003ccode\u003ebd9214f\u003c/code\u003e\u003c/a\u003e [lts-active] Fix draft mode leaks through cross-request \u003ccode\u003e'use cache'\u003c/code\u003e dedupli...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/8db4a627c91e718514406ff5644ea4985dcaaae0\"\u003e\u003ccode\u003e8db4a62\u003c/code\u003e\u003c/a\u003e [lts-active][webpack] Ensure \u003ccode\u003edynamicParams\u003c/code\u003e is respected in `opengraph-image...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/e002ad68bd676bb0ed0c87bb22e3590304763e0b\"\u003e\u003ccode\u003ee002ad6\u003c/code\u003e\u003c/a\u003e [lts-active] fix(next/image): Pin DNS resolution when fetching external image...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/4c20699e29178d444994cf5a31b8a617ca3a2c80\"\u003e\u003ccode\u003e4c20699\u003c/code\u003e\u003c/a\u003e v16.3.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/2521aec5815e7de2121db253d12dae9f13e25361\"\u003e\u003ccode\u003e2521aec\u003c/code\u003e\u003c/a\u003e [backport] turbo-tasks-backend: fix strongly consistent read hanging on a can...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vercel/next.js/compare/v16.3.3...v16.3.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `sharp` from 0.35.4 to 0.35.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/lovell/sharp/releases\"\u003esharp's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.35.5\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/lovell/sharp-libvips/releases/tag/v1.3.4\"\u003ehttps://github.com/lovell/sharp-libvips/releases/tag/v1.3.4\u003c/a\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eAdd upper bounds check on length of \u003ccode\u003elinear\u003c/code\u003e and GIF \u003ccode\u003edelay\u003c/code\u003e arrays.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eImprove error handing when WebAssembly fallback also fails.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/pull/4593\"\u003e#4593\u003c/a\u003e\n\u003ca href=\"https://github.com/lazerg\"\u003e\u003ccode\u003e@​lazerg\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eTypeScript: Allow multi-frame options for JXL output.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/pull/4602\"\u003e#4602\u003c/a\u003e\n\u003ca href=\"https://github.com/ramin-010\"\u003e\u003ccode\u003e@​ramin-010\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eTypeScript: Remove non-existent named export.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4604\"\u003e#4604\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eIncrease accepted dimensions when extending an image.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4605\"\u003e#4605\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eImprove gain map support for \u003ccode\u003eextract\u003c/code\u003e and \u003ccode\u003erotate\u003c/code\u003e operations.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4606\"\u003e#4606\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eTests: Ensure composite tests pass on big endian platforms.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4609\"\u003e#4609\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.35.5-rc.1\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/lovell/sharp-libvips/releases/tag/v1.3.4-rc.1\"\u003ehttps://github.com/lovell/sharp-libvips/releases/tag/v1.3.4-rc.1\u003c/a\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eAdd upper bounds check on length of \u003ccode\u003elinear\u003c/code\u003e and GIF \u003ccode\u003edelay\u003c/code\u003e arrays.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eImprove error handing when WebAssembly fallback also fails.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/pull/4593\"\u003e#4593\u003c/a\u003e\n\u003ca href=\"https://github.com/lazerg\"\u003e\u003ccode\u003e@​lazerg\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eTypeScript: Allow multi-frame options for JXL output.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/pull/4602\"\u003e#4602\u003c/a\u003e\n\u003ca href=\"https://github.com/ramin-010\"\u003e\u003ccode\u003e@​ramin-010\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eTypeScript: Remove non-existent named export.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4604\"\u003e#4604\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eIncrease accepted dimensions when extending an image.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4605\"\u003e#4605\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eImprove gain map support for \u003ccode\u003eextract\u003c/code\u003e operation.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4606\"\u003e#4606\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/51a990faa26ade5586a4934ac9673c98d8893326\"\u003e\u003ccode\u003e51a990f\u003c/code\u003e\u003c/a\u003e Release v0.35.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/96de105d9d36ab04c76c2b78b97255171630d236\"\u003e\u003ccode\u003e96de105\u003c/code\u003e\u003c/a\u003e Upgrade to sharp-libvips v1.3.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/3a61390260e0aa017046af9ad107abd62f3c98c0\"\u003e\u003ccode\u003e3a61390\u003c/code\u003e\u003c/a\u003e CI: Configure Dependabot with all package.json locations\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/4940c500a63a9193b1ad5d3804a2d241ca36995b\"\u003e\u003ccode\u003e4940c50\u003c/code\u003e\u003c/a\u003e Improve gain map support for rotate/flip/flop ops\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/20654aa60eaa85a37369ef69a7ca6506b65f8c85\"\u003e\u003ccode\u003e20654aa\u003c/code\u003e\u003c/a\u003e Prerelease v0.35.5-rc.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/ef4f9348a97053ceddacd23dcb6e39cce5a1fc7d\"\u003e\u003ccode\u003eef4f934\u003c/code\u003e\u003c/a\u003e CI: Upgrade to Ubuntu 26.04\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/358df954c5f58487392e1a9af743e112e8998d67\"\u003e\u003ccode\u003e358df95\u003c/code\u003e\u003c/a\u003e Upgrade to libvips v8.18.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/49f4903d34eddcd68b79872c511c198f124885a3\"\u003e\u003ccode\u003e49f4903\u003c/code\u003e\u003c/a\u003e Improve gain map support for rotate-then-extract \u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4606\"\u003e#4606\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/0e2e55eb3a44da5d602adedd6b51a03e652e3b20\"\u003e\u003ccode\u003e0e2e55e\u003c/code\u003e\u003c/a\u003e Silence a couple of compiler/static analysis warnings\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/cef3b8c467c21f7e84bd51d5e53f2d115669f8d8\"\u003e\u003ccode\u003ecef3b8c\u003c/code\u003e\u003c/a\u003e Improve gain map support for extract operation \u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4606\"\u003e#4606\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/lovell/sharp/compare/v0.35.4...v0.35.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `brace-expansion` from 2.1.4 to 2.1.7\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/714b6228a5878cfc6b07dc319db0eb6376ab2c4d\"\u003e\u003ccode\u003e714b622\u003c/code\u003e\u003c/a\u003e 2.1.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/bdff773f98e5988616b7039cc9b508df5d640b22\"\u003e\u003ccode\u003ebdff773\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/5a5c07b25ea84a899322ebb820336260277cbe90\"\u003e\u003ccode\u003e5a5c07b\u003c/code\u003e\u003c/a\u003e 2.1.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/6463f2fd6a31f97a09c2f827513a7faaf96bde33\"\u003e\u003ccode\u003e6463f2f\u003c/code\u003e\u003c/a\u003e update lockfile\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/1ba3c71f89fb3448c8be6dcf2d17b543c2738f16\"\u003e\u003ccode\u003e1ba3c71\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/aae3387e0d4c551480c963f1241abd3a80a279e6\"\u003e\u003ccode\u003eaae3387\u003c/code\u003e\u003c/a\u003e 2.1.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/5171e681c0922b7ae8bfaf9a331e309107be6edc\"\u003e\u003ccode\u003e5171e68\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v2.1.4...v2.1.7\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `follow-redirects` from 1.16.0 to 1.16.1\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/follow-redirects/follow-redirects/commit/46301256333c90b7faac7aa126effe72ec16d16e\"\u003e\u003ccode\u003e4630125\u003c/code\u003e\u003c/a\u003e Release version 1.16.1 of the npm package.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/follow-redirects/follow-redirects/commit/9865ca45490e4d0f7b6944870318408344570aff\"\u003e\u003ccode\u003e9865ca4\u003c/code\u003e\u003c/a\u003e Support key/value header arrays.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/follow-redirects/follow-redirects/commit/080a76d0e125b37bf81717368a61d5dc37aa56c8\"\u003e\u003ccode\u003e080a76d\u003c/code\u003e\u003c/a\u003e Escape all RegExp modifiers.\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/follow-redirects/follow-redirects/compare/v1.16.0...v1.16.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `http-cache-semantics` from 4.1.1 to 4.3.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/kornelski/http-cache-semantics/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `source-map-js` from 1.2.1 to 1.2.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/7rulnik/source-map-js/releases\"\u003esource-map-js's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.2.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eFix crash when executing in browser with CSP script-src that don't permit unsafe-eval (\u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/29\"\u003e#29\u003c/a\u003e) \u003ca href=\"https://github.com/xfournet\"\u003e\u003ccode\u003e@​xfournet\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eFix denial of service from malicious indexed source maps (CVE-2026-93749) (\u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/79\"\u003e#79\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eReported by \u003ca href=\"https://github.com/waydeshi\"\u003e\u003ccode\u003e@​waydeshi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/issues/76\"\u003e#76\u003c/a\u003e. A fix was also proposed by \u003ca href=\"https://github.com/aniebiet\"\u003e\u003ccode\u003e@​aniebiet\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/78\"\u003e#78\u003c/a\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/7rulnik/source-map-js/blob/main/CHANGELOG.md\"\u003esource-map-js's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.2.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eFix crash when executing in browser with CSP script-src that don't permit unsafe-eval (\u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/29\"\u003e#29\u003c/a\u003e) \u003ca href=\"https://github.com/xfournet\"\u003e\u003ccode\u003e@​xfournet\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eFix denial of service from malicious indexed source maps (CVE-2026-93749) (\u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/79\"\u003e#79\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eReported by \u003ca href=\"https://github.com/waydeshi\"\u003e\u003ccode\u003e@​waydeshi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/issues/76\"\u003e#76\u003c/a\u003e. A fix was also proposed by \u003ca href=\"https://github.com/aniebiet\"\u003e\u003ccode\u003e@​aniebiet\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/78\"\u003e#78\u003c/a\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/7rulnik/source-map-js/commit/0a1d334fd1e55a47df97fcd60a7915d46df3b08a\"\u003e\u003ccode\u003e0a1d334\u003c/code\u003e\u003c/a\u003e 1.2.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/7rulnik/source-map-js/commit/4c6fa26d77419bd8e48ec92844866cce7d9ae739\"\u003e\u003ccode\u003e4c6fa26\u003c/code\u003e\u003c/a\u003e Update changelog\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/7rulnik/source-map-js/commit/cf7658058ceeaa8619d5ae0ec90be6905209d016\"\u003e\u003ccode\u003ecf76580\u003c/code\u003e\u003c/a\u003e Fix denial of service from malicious indexed source maps (CVE-2026-93749) (\u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/issues/79\"\u003e#79\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/7rulnik/source-map-js/commit/7899a86615c630f4fc220273ff9fe2e8e49a56df\"\u003e\u003ccode\u003e7899a86\u003c/code\u003e\u003c/a\u003e Fix crash when executing browser with CSP script-src that don't permit unsafe...\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/7rulnik/source-map-js/compare/v1.2.1...v1.2.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/huuquyet/soroban-crowdfund/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/huuquyet/soroban-crowdfund/pull/35","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/huuquyet%2Fsoroban-crowdfund/issues/35","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/35/packages"}},{"old_version":"2.29.4","new_version":"2.31.0","update_type":"minor","path":null,"pr_created_at":"2026-10-18T18:19:11.000Z","version_change":"2.29.4 → 2.31.0","issue":{"uuid":"5912642510","node_id":"PR_kwDOH0IzRM8AAAABJMD4IQ","number":57,"state":"closed","title":"Bump moment from 2.29.4 to 2.31.0","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-10-18T18:20:30.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-18T18:19:11.000Z","updated_at":"2026-10-18T18:21:15.000Z","time_to_close":79,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"moment","old_version":"2.29.4","new_version":"2.31.0","repository_url":"https://github.com/moment/moment"}],"path":null,"ecosystem":"npm"},"body":"Bumps [moment](https://github.com/moment/moment) from 2.29.4 to 2.31.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/releases\"\u003emoment's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.31.0\u003c/h2\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.30.1\u003c/h2\u003e\n\u003cp\u003eNote - this was not a new release, but rather just updating GitHub's \u003ccode\u003elatest\u003c/code\u003e release to indicate the existing version \u003ccode\u003e2.30.1\u003c/code\u003e from Dec 27, 2023.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/blob/develop/CHANGELOG.md\"\u003emoment's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch3\u003e2.31.0\u003c/h3\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e2.30.1\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/15b45d48a176312e8f34143c5a800090abf4787f\"\u003e\u003ccode\u003e15b45d4\u003c/code\u003e\u003c/a\u003e [pkg] Build 2.31.0 (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6452\"\u003e#6452\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/631cd81454ee001e1f508e21270eae0b6bb62974\"\u003e\u003ccode\u003e631cd81\u003c/code\u003e\u003c/a\u003e [pkg] Update changelog for upcoming release (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6394\"\u003e#6394\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/6caff9e0d54e85a63a6eb97d7361f1da35bc58f4\"\u003e\u003ccode\u003e6caff9e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/710703b7eac93535ad125cbf4feb3d42afed6fb3\"\u003e\u003ccode\u003e710703b\u003c/code\u003e\u003c/a\u003e [feature] Add internal date-default hook for Moment Timezone (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6451\"\u003e#6451\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/863ed940556e6e63c43de23981a4853036a003ac\"\u003e\u003ccode\u003e863ed94\u003c/code\u003e\u003c/a\u003e [bugfix] Add stack traces to conditional deprecation warnings (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6450\"\u003e#6450\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/2c7abe1c42ee15445d30c2c5d536750a1e43a09a\"\u003e\u003ccode\u003e2c7abe1\u003c/code\u003e\u003c/a\u003e [bugfix] Apply postformat to locale relative time methods (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6448\"\u003e#6448\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/9c45ac38690c649c95e19923276b63da5fe2be26\"\u003e\u003ccode\u003e9c45ac3\u003c/code\u003e\u003c/a\u003e [bugfix] Include metadata in all-locales bundle (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6447\"\u003e#6447\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/f6eefc5fc7b44ceccbd007aeffc48ebc5eac30fa\"\u003e\u003ccode\u003ef6eefc5\u003c/code\u003e\u003c/a\u003e [bugfix] Validate timezone offset range (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6446\"\u003e#6446\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/136b441794a3bb207d593add3b59e9de0e062523\"\u003e\u003ccode\u003e136b441\u003c/code\u003e\u003c/a\u003e [bugfix] Avoid Object.assign in duration.humanize (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6443\"\u003e#6443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/0d1050437b40f66ac47e14b285bb3d09676cf2e0\"\u003e\u003ccode\u003e0d10504\u003c/code\u003e\u003c/a\u003e [bugfix] Fix locale('\u003cstrong\u003eproto\u003c/strong\u003e') corrupting the global locale (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6442\"\u003e#6442\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moment/moment/compare/2.29.4...2.31.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for moment since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=moment\u0026package-manager=npm_and_yarn\u0026previous-version=2.29.4\u0026new-version=2.31.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/NeoSkin7/neoski.uk/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/NeoSkin7/neoski.uk/pull/57","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/NeoSkin7%2Fneoski.uk/issues/57","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/57/packages"}},{"old_version":"2.29.4","new_version":"2.31.0","update_type":"minor","path":null,"pr_created_at":"2026-10-18T14:52:06.000Z","version_change":"2.29.4 → 2.31.0","issue":{"uuid":"5910774544","node_id":"PR_kwDOTziLxc8AAAABJKoAiQ","number":2,"state":"open","title":"build(deps): Bump the npm_and_yarn group across 1 directory with 15 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-18T14:52:06.000Z","updated_at":"2026-10-18T14:52:15.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps): Bump","group_name":"npm_and_yarn","update_count":15,"packages":[{"name":"js-yaml","old_version":"3.14.1","new_version":"3.15.2","repository_url":"https://github.com/nodeca/js-yaml"},{"name":"body-parser","old_version":"1.20.1","new_version":"1.20.8","repository_url":"https://github.com/expressjs/body-parser"},{"name":"brace-expansion","old_version":"1.1.11","new_version":"1.1.21","repository_url":"https://github.com/juliangruber/brace-expansion"},{"name":"browserslist","old_version":"4.21.5","new_version":"4.29.3","repository_url":"https://github.com/browserslist/browserslist"},{"name":"colord","old_version":"2.9.3","new_version":"2.10.0","repository_url":"https://github.com/omgovich/colord"},{"name":"http-cache-semantics","old_version":"4.1.1","new_version":"4.3.0","repository_url":"https://github.com/kornelski/http-cache-semantics"},{"name":"joi","old_version":"17.8.3","new_version":"17.13.8","repository_url":"https://github.com/hapijs/joi"},{"name":"moment","old_version":"2.29.4","new_version":"2.31.0","repository_url":"https://github.com/moment/moment"},{"name":"nanoid","old_version":"3.3.4","new_version":"3.3.20","repository_url":"https://github.com/ai/nanoid"},{"name":"proxy-addr","old_version":"2.0.7","new_version":"2.0.8","repository_url":"https://github.com/jshttp/proxy-addr"},{"name":"qs","old_version":"6.11.0","new_version":"6.16.1","repository_url":"https://github.com/ljharb/qs"},{"name":"shell-quote","old_version":"1.8.0","new_version":"1.12.0","repository_url":"https://github.com/ljharb/shell-quote"},{"name":"socket.io-parser","old_version":"4.2.2","new_version":"4.2.7","repository_url":"https://github.com/socketio/socket.io"},{"name":"source-map-js","old_version":"1.0.2","new_version":"1.2.2","repository_url":"https://github.com/7rulnik/source-map-js"},{"name":"svgo","old_version":"2.8.0","new_version":"2.8.4","repository_url":"https://github.com/svg/svgo"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 15 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.1` | `3.15.2` |\n| [body-parser](https://github.com/expressjs/body-parser) | `1.20.1` | `1.20.8` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.11` | `1.1.21` |\n| [browserslist](https://github.com/browserslist/browserslist) | `4.21.5` | `4.29.3` |\n| [colord](https://github.com/omgovich/colord) | `2.9.3` | `2.10.0` |\n| [http-cache-semantics](https://github.com/kornelski/http-cache-semantics) | `4.1.1` | `4.3.0` |\n| [joi](https://github.com/hapijs/joi) | `17.8.3` | `17.13.8` |\n| [moment](https://github.com/moment/moment) | `2.29.4` | `2.31.0` |\n| [nanoid](https://github.com/ai/nanoid) | `3.3.4` | `3.3.20` |\n| [proxy-addr](https://github.com/jshttp/proxy-addr) | `2.0.7` | `2.0.8` |\n| [qs](https://github.com/ljharb/qs) | `6.11.0` | `6.16.1` |\n| [shell-quote](https://github.com/ljharb/shell-quote) | `1.8.0` | `1.12.0` |\n| [socket.io-parser](https://github.com/socketio/socket.io) | `4.2.2` | `4.2.7` |\n| [source-map-js](https://github.com/7rulnik/source-map-js) | `1.0.2` | `1.2.2` |\n| [svgo](https://github.com/svg/svgo) | `2.8.0` | `2.8.4` |\n\n\nUpdates `js-yaml` from 3.14.1 to 3.15.2\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nodeca/js-yaml/blob/3.15.2/CHANGELOG.md\"\u003ejs-yaml's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e3.15.2 - 2026-08-26\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[backport] Hard-limit merge sequence size to 100.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[backport] Count empty mappings in merge sequences toward \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e\nto limit CPU usage, \u003ca href=\"https://redirect.github.com/nodeca/js-yaml/issues/797\"\u003e#797\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.15.1 - 2026-07-31\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[backport] Remove quadratic complexity from \u003ccode\u003e!!omap\u003c/code\u003e duplicate key detection.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.15.0 - 2026-06-27\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e (10000) loader option to limit the total number of\nkeys processed by YAML merge (\u003ccode\u003e\u0026lt;\u0026lt;\u003c/code\u003e) across one \u003ccode\u003esafeLoad()\u003c/code\u003e / \u003ccode\u003esafeLoadAll()\u003c/code\u003e\ncall.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[3.14.2] - 2025-11-15\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix prototype pollution in merge (\u0026lt;\u0026lt;).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/5c45bd6e960603c13644f5cc8b572ca257723b36\"\u003e\u003ccode\u003e5c45bd6\u003c/code\u003e\u003c/a\u003e 3.15.2 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/5a708f9f4f22e78b87ebe363848cfa4fa4818c0d\"\u003e\u003ccode\u003e5a708f9\u003c/code\u003e\u003c/a\u003e dist rebuild\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/3485bc06ff8a0251505f44a00414d90df2466639\"\u003e\u003ccode\u003e3485bc0\u003c/code\u003e\u003c/a\u003e Backport merge limits from v5.4.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/f34812f1cea794f8c21e0a4e1f3a2584b720f305\"\u003e\u003ccode\u003ef34812f\u003c/code\u003e\u003c/a\u003e Update .gitignore\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/ab85ae2c622bc6d8cdbceccafe9f9b7df80463ed\"\u003e\u003ccode\u003eab85ae2\u003c/code\u003e\u003c/a\u003e 3.15.1 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/30a5e7647a4454f7bac969bfbbe7eac9921a4279\"\u003e\u003ccode\u003e30a5e76\u003c/code\u003e\u003c/a\u003e dist rebuild\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/22a8071ef032117bc6249c330b240ac3aa2d3ded\"\u003e\u003ccode\u003e22a8071\u003c/code\u003e\u003c/a\u003e Backport quadratic complexity fix for !!omap\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/c34b6c40027a769eb0d67958ae615268a1d55f54\"\u003e\u003ccode\u003ec34b6c4\u003c/code\u003e\u003c/a\u003e 3.15.0 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/21e13d363f33501c7ee6ca988b88c29084999f72\"\u003e\u003ccode\u003e21e13d3\u003c/code\u003e\u003c/a\u003e dist rebuild\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/4165c62630d64fe4f25fb0d03139c7e137b24b1c\"\u003e\u003ccode\u003e4165c62\u003c/code\u003e\u003c/a\u003e Add v3-legacy tag for publish\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/nodeca/js-yaml/compare/3.14.1...3.15.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `body-parser` from 1.20.1 to 1.20.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/body-parser/releases\"\u003ebody-parser's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.20.8\u003c/h2\u003e\n\u003ch2\u003eImportant\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eSame code base as \u003ca href=\"https://github.com/expressjs/body-parser/releases/tag/1.20.7\"\u003e1.20.7\u003c/a\u003e. This was created to test the new release process.\u003c/strong\u003e\u003c/p\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eci: backport npm-publish workflow from master by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/769\"\u003eexpressjs/body-parser#769\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e1.20.8 by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/770\"\u003eexpressjs/body-parser#770\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.20.7...1.20.8\"\u003ehttps://github.com/expressjs/body-parser/compare/1.20.7...1.20.8\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e1.20.7\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003edocs: include security fix in 1.20.6 changes by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/747\"\u003eexpressjs/body-parser#747\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edeps: qs@~6.16.0 by \u003ca href=\"https://github.com/krzysdz\"\u003e\u003ccode\u003e@​krzysdz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/761\"\u003eexpressjs/body-parser#761\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e1.20.7 by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/767\"\u003eexpressjs/body-parser#767\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.20.6...1.20.7\"\u003ehttps://github.com/expressjs/body-parser/compare/1.20.6...1.20.7\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e1.20.6\u003c/h2\u003e\n\u003ch2\u003eImportant: Security\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSecurity fix for \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2025-13466\"\u003eCVE-2026-12590\u003c/a\u003e (\u003ca href=\"https://github.com/expressjs/body-parser/security/advisories/GHSA-v422-hmwv-36x6\"\u003eGHSA-v422-hmwv-36x6\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: improve limit option validation by \u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/741\"\u003eexpressjs/body-parser#741\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.20.5...1.20.6\"\u003ehttps://github.com/expressjs/body-parser/compare/1.20.5...1.20.6\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.20.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cp\u003eThe reason for this release is a fix to the extended urlencoded parser returning objects instead of arrays for large array inputs (\u0026gt; 100) on qs@6.14.2+. (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/716\"\u003eexpressjs/body-parser#716\u003c/a\u003e)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003erefactor(json): simplify strict mode error string construction by \u003ca href=\"https://github.com/jonchurch\"\u003e\u003ccode\u003e@​jonchurch\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/692\"\u003eexpressjs/body-parser#692\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: correct off-by-one error in parameterCount by \u003ca href=\"https://github.com/abhu85\"\u003e\u003ccode\u003e@​abhu85\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/716\"\u003eexpressjs/body-parser#716\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edeps(qs): bump qs to 6.15.1 by \u003ca href=\"https://github.com/jonchurch\"\u003e\u003ccode\u003e@​jonchurch\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/722\"\u003eexpressjs/body-parser#722\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease: 1.20.5 by \u003ca href=\"https://github.com/jonchurch\"\u003e\u003ccode\u003e@​jonchurch\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/721\"\u003eexpressjs/body-parser#721\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/abhu85\"\u003e\u003ccode\u003e@​abhu85\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/716\"\u003eexpressjs/body-parser#716\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSpecial thanks to triager \u003ca href=\"https://github.com/krzysdz\"\u003e\u003ccode\u003e@​krzysdz\u003c/code\u003e\u003c/a\u003e for keeping this on our radar and effectively triaging the specific issue!\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.20.4...1.20.5\"\u003ehttps://github.com/expressjs/body-parser/compare/1.20.4...1.20.5\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/body-parser/blob/1.20.8/HISTORY.md\"\u003ebody-parser's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e1.20.8\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eSame code base as 1.20.7. This was created to test the new release process.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.7\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003edeps: qs@~6.16.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.6\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eSecurity fix for \u003ca href=\"https://github.com/expressjs/body-parser/security/advisories/GHSA-v422-hmwv-36x6\"\u003eGHSA-v422-hmwv-36x6\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: improve \u003ccode\u003elimit\u003c/code\u003e option validation (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/698\"\u003e#698\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eInvalid \u003ccode\u003elimit\u003c/code\u003e values (e.g. unparseable strings or \u003ccode\u003eNaN\u003c/code\u003e) now throw instead of being silently ignored, which previously disabled size limit enforcement\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003enull\u003c/code\u003e and \u003ccode\u003eundefined\u003c/code\u003e fall back to the default 100kb limit\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.5\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003erefactor(json): simplify strict mode error string construction\u003c/li\u003e\n\u003cli\u003efix: extended urlencoded parsing of arrays with \u0026gt;100 elements (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/716\"\u003e#716\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edeps: qs@~6.15.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.4\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003edeps: qs@~6.14.0\u003c/li\u003e\n\u003cli\u003edeps: use tilde notation for dependencies\u003c/li\u003e\n\u003cli\u003edeps: http-errors@~2.0.1\u003c/li\u003e\n\u003cli\u003edeps: raw-body@~2.5.3\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.3\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003edeps: qs@6.13.0\u003c/li\u003e\n\u003cli\u003eadd \u003ccode\u003edepth\u003c/code\u003e option to customize the depth level in the parser\u003c/li\u003e\n\u003cli\u003eIMPORTANT: The default \u003ccode\u003edepth\u003c/code\u003e level for parsing URL-encoded data is now \u003ccode\u003e32\u003c/code\u003e (previously was \u003ccode\u003eInfinity\u003c/code\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.2\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix strict json error message on Node.js 19+\u003c/li\u003e\n\u003cli\u003edeps: content-type@~1.0.5\n\u003cul\u003e\n\u003cli\u003eperf: skip value escaping when unnecessary\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003edeps: raw-body@2.5.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/5c08c2008eac79abddb8abfa5095491d02958d56\"\u003e\u003ccode\u003e5c08c20\u003c/code\u003e\u003c/a\u003e 1.20.8 (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/770\"\u003e#770\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/0cea4f42a40996eafac441d0e71084afbe1407d4\"\u003e\u003ccode\u003e0cea4f4\u003c/code\u003e\u003c/a\u003e ci: backport npm-publish workflow from master (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/769\"\u003e#769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/0f0f0d7f96fc7444407aef85a6d1fa363279e654\"\u003e\u003ccode\u003e0f0f0d7\u003c/code\u003e\u003c/a\u003e 1.20.7 (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/767\"\u003e#767\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/355eb04ade7c27f57f93a0e90e26ed6f121becc5\"\u003e\u003ccode\u003e355eb04\u003c/code\u003e\u003c/a\u003e deps: qs@~6.16.0 (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/761\"\u003e#761\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/8be369a5f8b0f4070ebb7a0ae9aca12db9d8f947\"\u003e\u003ccode\u003e8be369a\u003c/code\u003e\u003c/a\u003e docs: include security fix in 1.20.6 changes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/5cc4fb8867c93a3aa4455927e38858c9ab89ff43\"\u003e\u003ccode\u003e5cc4fb8\u003c/code\u003e\u003c/a\u003e 1.20.6 (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/746\"\u003e#746\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/3492672eee593d5c158f239b6e9115498a5dbeac\"\u003e\u003ccode\u003e3492672\u003c/code\u003e\u003c/a\u003e fix: improve limit option validation (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/741\"\u003e#741\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/0defdbe7f95ad0d3bc007d3a7c59c8c0ab9e6575\"\u003e\u003ccode\u003e0defdbe\u003c/code\u003e\u003c/a\u003e release(patch): 1.20.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/cd0e7a000c53e7be7262d303e57a352b6a00db7f\"\u003e\u003ccode\u003ecd0e7a0\u003c/code\u003e\u003c/a\u003e deps(qs): bump qs to 6.15.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/6f24d7e8bcd9860b136920926ce86da1a7dd1d51\"\u003e\u003ccode\u003e6f24d7e\u003c/code\u003e\u003c/a\u003e fix: correct off-by-one error in parameterCount (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/716\"\u003e#716\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.20.1...1.20.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for body-parser since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `brace-expansion` from 1.1.11 to 1.1.21\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/juliangruber/brace-expansion/releases\"\u003ebrace-expansion's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.1.15\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBackport v5.0.6 change to v1 (\u003ca href=\"https://redirect.github.com/juliangruber/brace-expansion/issues/111\"\u003e#111\u003c/a\u003e)  0b09384\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.15\"\u003ehttps://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.15\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.1.12\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003epkg: publish on tag 1.x  c460dbd\u003c/li\u003e\n\u003cli\u003efmt  ccb8ac6\u003c/li\u003e\n\u003cli\u003eFix potential ReDoS Vulnerability or Inefficient Regular Expression (\u003ca href=\"https://redirect.github.com/juliangruber/brace-expansion/issues/65\"\u003e#65\u003c/a\u003e)  c3c73c8\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.11...v1.1.12\"\u003ehttps://github.com/juliangruber/brace-expansion/compare/v1.1.11...v1.1.12\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/8e81e187b6e9c6c723d16c042657c00acefc2483\"\u003e\u003ccode\u003e8e81e18\u003c/code\u003e\u003c/a\u003e 1.1.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/ffdfa3e3806bed17c0874b8f1439b084de354a7e\"\u003e\u003ccode\u003effdfa3e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/c6513ad31e08edb56dc414a629e39cba724b7548\"\u003e\u003ccode\u003ec6513ad\u003c/code\u003e\u003c/a\u003e 1.1.20\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b\"\u003e\u003ccode\u003e1efee7c\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/a34340a053abb475cc226aeb3f71887018e71bd0\"\u003e\u003ccode\u003ea34340a\u003c/code\u003e\u003c/a\u003e 1.1.19\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc\"\u003e\u003ccode\u003e0bcbfc0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/758fcd6d188a95c2342818519c77b8c06794552b\"\u003e\u003ccode\u003e758fcd6\u003c/code\u003e\u003c/a\u003e 1.1.18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/27fbeed22b4fdf2c5f732f66bcf84d43f4a26c6e\"\u003e\u003ccode\u003e27fbeed\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/5c57cc2519dfb067e188b7cb0733fffbd02946bf\"\u003e\u003ccode\u003e5c57cc2\u003c/code\u003e\u003c/a\u003e 1.1.17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/d757f1dde7808bcbcd7a4628ab913e5185ed3d57\"\u003e\u003ccode\u003ed757f1d\u003c/code\u003e\u003c/a\u003e npm ignore \u003ccode\u003e.claude\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/1.1.11...v1.1.21\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `browserslist` from 4.21.5 to 4.29.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/browserslist/browserslist/releases\"\u003ebrowserslist's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.29.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated Firefox ESR.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed ignoring \u003ccode\u003enull\u003c/code\u003e usage in \u003ccode\u003ecover X in Y\u003c/code\u003e query (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed config name loading protection on Windows (by \u003ca href=\"https://github.com/oss-security-shop\"\u003e\u003ccode\u003e@​oss-security-shop\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed case-insensitive negation queries (by \u003ca href=\"https://github.com/jakezwang\"\u003e\u003ccode\u003e@​jakezwang\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed percentage and supports queries case-insensitive (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed old Node.js tests (by \u003ca href=\"https://github.com/aaron-belenky\"\u003e\u003ccode\u003e@​aaron-belenky\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eReduced code (by \u003ca href=\"https://github.com/charmander\"\u003e\u003ccode\u003e@​charmander\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded query continuations across lines and array entries (by \u003ca href=\"https://github.com/fzlzjerry\"\u003e\u003ccode\u003e@​fzlzjerry\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImprove \u003ccode\u003eor\u003c/code\u003e parsing performance (by \u003ca href=\"https://github.com/NotAFlightRisk\"\u003e\u003ccode\u003e@​NotAFlightRisk\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eincluding kaios\u003c/code\u003e in baseline queries (by \u003ca href=\"https://github.com/Jaybhade\"\u003e\u003ccode\u003e@​Jaybhade\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved parsing performance.\u003c/li\u003e\n\u003cli\u003eFixed unbounded memory growth (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed prototype write issue (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Electron version queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003e\u0026gt;\u003c/code\u003e and \u003ccode\u003e\u0026gt;=\u003c/code\u003e queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eSyntaxError\u003c/code\u003e regression of 4.28.3.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed baseline query case-insensitivity (by \u003ca href=\"https://github.com/swwind\"\u003e\u003ccode\u003e@​swwind\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix prototype pollution (by \u003ca href=\"https://github.com/chluo1997\"\u003e\u003ccode\u003e@​chluo1997\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved Baseline warning since we have it own warning.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.27.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003eBROWSERSLIST_TRACE_WARNING\u003c/code\u003e environment variable.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.26.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003ethrowOnMissing\u003c/code\u003e with \u003ccode\u003eextends\u003c/code\u003e query (by \u003ca href=\"https://github.com/alexander-akait\"\u003e\u003ccode\u003e@​alexander-akait\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md\"\u003ebrowserslist's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.29.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated Firefox ESR.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed ignoring \u003ccode\u003enull\u003c/code\u003e usage in \u003ccode\u003ecover X in Y\u003c/code\u003e query (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed config name loading protection on Windows (by \u003ca href=\"https://github.com/oss-security-shop\"\u003e\u003ccode\u003e@​oss-security-shop\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed case-insensitive negation queries (by \u003ca href=\"https://github.com/jakezwang\"\u003e\u003ccode\u003e@​jakezwang\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed percentage and supports queries case-insensitive (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed old Node.js tests (by \u003ca href=\"https://github.com/aaron-belenky\"\u003e\u003ccode\u003e@​aaron-belenky\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eReduced code (by \u003ca href=\"https://github.com/charmander\"\u003e\u003ccode\u003e@​charmander\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded query continuations across lines and array entries (by \u003ca href=\"https://github.com/fzlzjerry\"\u003e\u003ccode\u003e@​fzlzjerry\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved \u003ccode\u003eor\u003c/code\u003e parsing performance (by \u003ca href=\"https://github.com/NotAFlightRisk\"\u003e\u003ccode\u003e@​NotAFlightRisk\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eincluding kaios\u003c/code\u003e in baseline queries (by \u003ca href=\"https://github.com/Jaybhade\"\u003e\u003ccode\u003e@​Jaybhade\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved parsing performance.\u003c/li\u003e\n\u003cli\u003eFixed unbounded memory growth (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed prototype write issue (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Electron version queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003e\u0026gt;\u003c/code\u003e and \u003ccode\u003e\u0026gt;=\u003c/code\u003e queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eSyntaxError\u003c/code\u003e regression of 4.28.3.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed baseline query case-insensitivity (by \u003ca href=\"https://github.com/swwind\"\u003e\u003ccode\u003e@​swwind\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/b4809dd2a2a11fbff492258f968130e9b470067f\"\u003e\u003ccode\u003eb4809dd\u003c/code\u003e\u003c/a\u003e Release 4.29.3 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/9d844f8d09c872e2f22e07daa8566fb53585c190\"\u003e\u003ccode\u003e9d844f8\u003c/code\u003e\u003c/a\u003e Update Firefox ESR\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/0033f344c3be446c935f9e515a366738fc0942a5\"\u003e\u003ccode\u003e0033f34\u003c/code\u003e\u003c/a\u003e Update dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/906d329968d968479474aab97ae2ab712bf18b5f\"\u003e\u003ccode\u003e906d329\u003c/code\u003e\u003c/a\u003e Release 4.29.2 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/ff8c83f72dd22e3331e89404487a19ec4ea6d5fc\"\u003e\u003ccode\u003eff8c83f\u003c/code\u003e\u003c/a\u003e Update dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/067f4a1fa37047e8a53b369cb1fd837399f5d5d5\"\u003e\u003ccode\u003e067f4a1\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/browserslist/browserslist/issues/952\"\u003e#952\u003c/a\u003e from wahidrizka/fix-cover-null-usage\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/f760921db5e420bd8c10e31d0278ab16fdbb9a2d\"\u003e\u003ccode\u003ef760921\u003c/code\u003e\u003c/a\u003e Do not add versions without usage data to cover queries\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/5be63f54fc37cef2db22930bdabfafcb22b6fd46\"\u003e\u003ccode\u003e5be63f5\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/browserslist/browserslist/issues/953\"\u003e#953\u003c/a\u003e from wahidrizka/docs-android-latest-version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/1e5356f16429cb8a30dfa5415c7d0beddff8548f\"\u003e\u003ccode\u003e1e5356f\u003c/code\u003e\u003c/a\u003e Note that Android version queries return only the latest version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/5b7e94169750cedd9e63fdb8d2419542d3aa185f\"\u003e\u003ccode\u003e5b7e941\u003c/code\u003e\u003c/a\u003e Add missed changes to ChangeLog\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/browserslist/browserslist/compare/4.21.5...4.29.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for browserslist since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `colord` from 2.9.3 to 2.10.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/omgovich/colord/releases\"\u003ecolord's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.10 (RGB color mixing)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003emix\u003c/code\u003e, \u003ccode\u003etints\u003c/code\u003e, \u003ccode\u003eshades\u003c/code\u003e and \u003ccode\u003etones\u003c/code\u003e (\u003ccode\u003emix\u003c/code\u003e plugin) now accept an optional interpolation color space. LAB stays the default; pass \u003ccode\u003e\u0026quot;rgb\u0026quot;\u003c/code\u003e to interpolate RGB channels instead — the way browsers and design tools (such as Figma) composite translucent layers.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003eimport { colord, extend } from \u0026quot;colord\u0026quot;;\nimport mixPlugin from \u0026quot;colord/plugins/mix\u0026quot;;\n\u003cp\u003eextend([mixPlugin]);\u003c/p\u003e\n\u003cp\u003ecolord(\u0026quot;#ff0000\u0026quot;).mix(\u0026quot;#ffffff\u0026quot;, 0.5, \u0026quot;rgb\u0026quot;).toHex(); // \u0026quot;#ff8080\u0026quot;\ncolord(\u0026quot;#f0f3f1\u0026quot;).mix(\u0026quot;#007d40\u0026quot;, 0.14, \u0026quot;rgb\u0026quot;).toHex(); // \u0026quot;#cee2d8\u0026quot; — same as compositing rgba(0, 125, 64, 0.14) over #f0f3f1\ncolord(\u0026quot;#ff0000\u0026quot;).tints(3, \u0026quot;rgb\u0026quot;).map((c) =\u0026gt; c.toHex()); // [\u0026quot;#ff0000\u0026quot;, \u0026quot;#ff8080\u0026quot;, \u0026quot;#ffffff\u0026quot;]\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/omgovich/colord/blob/master/CHANGELOG.md\"\u003ecolord's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch3\u003e2.10.0\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImprove \u003ccode\u003emix\u003c/code\u003e plugin by adding an optional \u003ccode\u003e\u0026quot;rgb\u0026quot;\u003c/code\u003e interpolation mode to \u003ccode\u003emix\u003c/code\u003e, \u003ccode\u003etints\u003c/code\u003e, \u003ccode\u003etones\u003c/code\u003e and \u003ccode\u003eshades\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e2.9.7\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eMake HEX parsing and serialization more than 2x faster\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e2.9.6\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix: Rotate the unrounded hue so \u003ccode\u003erotate\u003c/code\u003e and \u003ccode\u003eharmonies\u003c/code\u003e preserve the original color\u003c/li\u003e\n\u003cli\u003eFix: Normalize HWB whiteness + blackness over 100% to gray ❤️ \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e2.9.5\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix: Use adjusted chroma for the CIEDE2000 rotation term ❤️ \u003ca href=\"https://github.com/maximilliangrand\"\u003e\u003ccode\u003e@​maximilliangrand\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix: Keep the hue within \u003ccode\u003e[0, 360)\u003c/code\u003e in every color model ❤️ \u003ca href=\"https://github.com/sarathfrancis90\"\u003e\u003ccode\u003e@​sarathfrancis90\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eBoth fixes change returned numbers for a small set of colors; \u003ccode\u003etoHex()\u003c/code\u003e output is unchanged. Snapshots holding \u003ccode\u003eh: 360\u003c/code\u003e, \u003ccode\u003e\u0026quot;hsl(360, …)\u0026quot;\u003c/code\u003e or a \u003ccode\u003edelta()\u003c/code\u003e value may need updating.\u003c/p\u003e\n\u003ch3\u003e2.9.4\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix: Reject malformed color strings in linear time ❤️ \u003ca href=\"https://github.com/GAP-dev\"\u003e\u003ccode\u003e@​GAP-dev\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/omgovich/colord/commits/v2.10\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `http-cache-semantics` from 4.1.1 to 4.3.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/kornelski/http-cache-semantics/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `joi` from 17.8.3 to 17.13.8\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/4ae6af96f7990fdb336aa8ad7dee5e9f847d084a\"\u003e\u003ccode\u003e4ae6af9\u003c/code\u003e\u003c/a\u003e 17.13.8\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/b3ed6fbdf123f4d77755e6a5df2d6a7af27cd9e8\"\u003e\u003ccode\u003eb3ed6fb\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/hapijs/joi/issues/3153\"\u003e#3153\u003c/a\u003e from hapijs/fix/messages-proto-flat-v17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/1d2001cad9971327a62c9fd8eb1afec20cd784d2\"\u003e\u003ccode\u003e1d2001c\u003c/code\u003e\u003c/a\u003e chore: backport \u003ca href=\"https://redirect.github.com/hapijs/joi/issues/3151\"\u003e#3151\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/ed9d7cdd11ef5f7751fd46886f38dc605c9c3995\"\u003e\u003ccode\u003eed9d7cd\u003c/code\u003e\u003c/a\u003e 17.13.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/f2729f71839c57c94ac500b4be9e4b5b26d4e637\"\u003e\u003ccode\u003ef2729f7\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/hapijs/joi/issues/3145\"\u003e#3145\u003c/a\u003e from hapijs/backport/isodate-timeshift-v17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/c43fc964799c9b5f0c6921bf788162b67066ae81\"\u003e\u003ccode\u003ec43fc96\u003c/code\u003e\u003c/a\u003e chore: add regression test for \u003ca href=\"https://redirect.github.com/hapijs/joi/issues/3143\"\u003e#3143\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/115e7b58d5eaaecc5e9b7093d41899ad6fb053ec\"\u003e\u003ccode\u003e115e7b5\u003c/code\u003e\u003c/a\u003e fix(isoDate): pad a bare-hour timeshift with a colon, not just zeros\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/850be1ee24be8d548bb09359bdb0cf9fe41635ff\"\u003e\u003ccode\u003e850be1e\u003c/code\u003e\u003c/a\u003e 17.13.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/9faeecc48b18ec40e3881467645ae9074f0dfa3c\"\u003e\u003ccode\u003e9faeecc\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/hapijs/joi/issues/3139\"\u003e#3139\u003c/a\u003e from hapijs/chore/backport-messages-proto\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/8d0b808f3e874d28f9078f61b7742290989afb36\"\u003e\u003ccode\u003e8d0b808\u003c/code\u003e\u003c/a\u003e fix: prevent messages proto injection\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/hapijs/joi/compare/v17.8.3...v17.13.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `moment` from 2.29.4 to 2.31.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/releases\"\u003emoment's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.31.0\u003c/h2\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.30.1\u003c/h2\u003e\n\u003cp\u003eNote - this was not a new release, but rather just updating GitHub's \u003ccode\u003elatest\u003c/code\u003e release to indicate the existing version \u003ccode\u003e2.30.1\u003c/code\u003e from Dec 27, 2023.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/blob/develop/CHANGELOG.md\"\u003emoment's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch3\u003e2.31.0\u003c/h3\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e2.30.1\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/15b45d48a176312e8f34143c5a800090abf4787f\"\u003e\u003ccode\u003e15b45d4\u003c/code\u003e\u003c/a\u003e [pkg] Build 2.31.0 (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6452\"\u003e#6452\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/631cd81454ee001e1f508e21270eae0b6bb62974\"\u003e\u003ccode\u003e631cd81\u003c/code\u003e\u003c/a\u003e [pkg] Update changelog for upcoming release (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6394\"\u003e#6394\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/6caff9e0d54e85a63a6eb97d7361f1da35bc58f4\"\u003e\u003ccode\u003e6caff9e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/710703b7eac93535ad125cbf4feb3d42afed6fb3\"\u003e\u003ccode\u003e710703b\u003c/code\u003e\u003c/a\u003e [feature] Add internal date-default hook for Moment Timezone (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6451\"\u003e#6451\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/863ed940556e6e63c43de23981a4853036a003ac\"\u003e\u003ccode\u003e863ed94\u003c/code\u003e\u003c/a\u003e [bugfix] Add stack traces to conditional deprecation warnings (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6450\"\u003e#6450\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/2c7abe1c42ee15445d30c2c5d536750a1e43a09a\"\u003e\u003ccode\u003e2c7abe1\u003c/code\u003e\u003c/a\u003e [bugfix] Apply postformat to locale relative time methods (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6448\"\u003e#6448\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/9c45ac38690c649c95e19923276b63da5fe2be26\"\u003e\u003ccode\u003e9c45ac3\u003c/code\u003e\u003c/a\u003e [bugfix] Include metadata in all-locales bundle (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6447\"\u003e#6447\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/f6eefc5fc7b44ceccbd007aeffc48ebc5eac30fa\"\u003e\u003ccode\u003ef6eefc5\u003c/code\u003e\u003c/a\u003e [bugfix] Validate timezone offset range (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6446\"\u003e#6446\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/136b441794a3bb207d593add3b59e9de0e062523\"\u003e\u003ccode\u003e136b441\u003c/code\u003e\u003c/a\u003e [bugfix] Avoid Object.assign in duration.humanize (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6443\"\u003e#6443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/0d1050437b40f66ac47e14b285bb3d09676cf2e0\"\u003e\u003ccode\u003e0d10504\u003c/code\u003e\u003c/a\u003e [bugfix] Fix locale('\u003cstrong\u003eproto\u003c/strong\u003e') corrupting the global locale (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6442\"\u003e#6442\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moment/moment/compare/2.29.4...2.31.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for moment since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `nanoid` from 3.3.4 to 3.3.20\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ai/nanoid/releases\"\u003enanoid's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e3.3.20\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed types (by \u003ca href=\"https://github.com/johnemau\"\u003e\u003ccode\u003e@​johnemau\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.19\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed killing the app by setting huge user ID.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.18\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed infinite loop on async for React Native (by \u003ca href=\"https://github.com/OvergrowthBeards-JB\"\u003e\u003ccode\u003e@​OvergrowthBeards-JB\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.17\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed infinite loop on zero size.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.16\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed infinite loop on negative size (by \u003ca href=\"https://github.com/greymoth-jp\"\u003e\u003ccode\u003e@​greymoth-jp\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.15\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed npm provenance error.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.14\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed random pool corruption on big ID sizes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.13\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReduced npm package size.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.12\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed breaking Nano ID by requesting big ID.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.11\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed React Native support.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.10\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed React Native support (by \u003ca href=\"https://github.com/steida\"\u003e\u003ccode\u003e@​steida\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReduced npm package size.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ai/nanoid/blob/main/CHANGELOG.md\"\u003enanoid's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e3.3.20\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed types (by \u003ca href=\"https://github.com/johnemau\"\u003e\u003ccode\u003e@​johnemau\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.19\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed killing the app by setting huge user ID (by \u003ca href=\"https://github.com/geoffrey-diederichs\"\u003e\u003ccode\u003e@​geoffrey-diederichs\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.18\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed infinite loop on async for React Native (by \u003ca href=\"https://github.com/OvergrowthBeards-JB\"\u003e\u003ccode\u003e@​OvergrowthBeards-JB\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.17\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed infinite loop on zero size.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.16\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed infinite loop on negative size (by \u003ca href=\"https://github.com/greymoth-jp\"\u003e\u003ccode\u003e@​greymoth-jp\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.15\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed npm provenance error.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.14\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed random pool corruption on big ID sizes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.13\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReduced npm package size.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.12\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed breaking Nano ID by requesting big ID.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.11\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed React Native support.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.10\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed React Native support (by \u003ca href=\"https://github.com/steida\"\u003e\u003ccode\u003e@​steida\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReduced npm package size.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.8\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/d76f633e0201c1299d735a6544c4c4a05c882f0b\"\u003e\u003ccode\u003ed76f633\u003c/code\u003e\u003c/a\u003e Release 3.3.20 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/ac09ff646dd64de1d03827c288ce30bb26c4315c\"\u003e\u003ccode\u003eac09ff6\u003c/code\u003e\u003c/a\u003e Fix: async return types are synchronous in v3 (\u003ca href=\"https://redirect.github.com/ai/nanoid/issues/615\"\u003e#615\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/eb63bd6775188dc35d143bf24868be094f19b5ee\"\u003e\u003ccode\u003eeb63bd6\u003c/code\u003e\u003c/a\u003e Release 3.3.19 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/9067e0361a643ab2c94ddd67606efbf275f6c0dd\"\u003e\u003ccode\u003e9067e03\u003c/code\u003e\u003c/a\u003e Sync CJS and ESM\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/9ad98052b316c5e707f8098ace509d2ae165e54d\"\u003e\u003ccode\u003e9ad9805\u003c/code\u003e\u003c/a\u003e Release 3.3.18 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/55e50a0621ec084b4bb4000ea4e86e1191bd3da8\"\u003e\u003ccode\u003e55e50a0\u003c/code\u003e\u003c/a\u003e Update CI action\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/e10f8d40ce9d1ab47f66d65a16b48086432730d0\"\u003e\u003ccode\u003ee10f8d4\u003c/code\u003e\u003c/a\u003e Update index.native.js (\u003ca href=\"https://redirect.github.com/ai/nanoid/issues/606\"\u003e#606\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/73d67168136b36fd3b644159b0cff149da4905d9\"\u003e\u003ccode\u003e73d6716\u003c/code\u003e\u003c/a\u003e Release 3.3.17 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/f9d13f150847d117877adee3460a46eceb0cf49b\"\u003e\u003ccode\u003ef9d13f1\u003c/code\u003e\u003c/a\u003e Sync 0 size behaviour with PostCSS 5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/9760e112757cf7d46a79abd7a133bc4958757bb8\"\u003e\u003ccode\u003e9760e11\u003c/code\u003e\u003c/a\u003e Release 3.3.16 version\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ai/nanoid/compare/3.3.4...3.3.20\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for nanoid since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `proxy-addr` from 2.0.7 to 2.0.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jshttp/proxy-addr/releases\"\u003eproxy-addr's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.0.8\u003c/h2\u003e\n\u003ch2\u003eImportant\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-90711\"\u003eCVE-2026-90711\u003c/a\u003e (\u003ca href=\"https://github.com/jshttp/proxy-addr/security/advisories/GHSA-jqcg-44mw-7w3h\"\u003eGHSA-jqcg-44mw-7w3h\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd OSSF scorecard action by \u003ca href=\"https://github.com/carpasse\"\u003e\u003ccode\u003e@​carpasse\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/27\"\u003ejshttp/proxy-addr#27\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix ci pipeline and add missing Node.JS versions by \u003ca href=\"https://github.com/carpasse\"\u003e\u003ccode\u003e@​carpasse\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/26\"\u003ejshttp/proxy-addr#26\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[StepSecurity] Apply security best practices by \u003ca href=\"https://github.com/step-security-bot\"\u003e\u003ccode\u003e@​step-security-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/29\"\u003ejshttp/proxy-addr#29\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump coverallsapp/github-action from 1.2.5 to 2.3.6 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/30\"\u003ejshttp/proxy-addr#30\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 2.23.2 to 3.28.18 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/31\"\u003ejshttp/proxy-addr#31\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump eslint-plugin-import from 2.23.4 to 2.31.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/32\"\u003ejshttp/proxy-addr#32\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump ossf/scorecard-action from 2.0.6 to 2.4.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/33\"\u003ejshttp/proxy-addr#33\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 3.1.3 to 4.6.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/35\"\u003ejshttp/proxy-addr#35\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump deep-equal from 1.0.1 to 1.1.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/34\"\u003ejshttp/proxy-addr#34\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump eslint-plugin-markdown from 2.2.0 to 2.2.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/36\"\u003ejshttp/proxy-addr#36\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: add funding to package.json by \u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/40\"\u003ejshttp/proxy-addr#40\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.28.18 to 3.29.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/41\"\u003ejshttp/proxy-addr#41\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.7 to 3.29.11 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/43\"\u003ejshttp/proxy-addr#43\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 3.6.0 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/42\"\u003ejshttp/proxy-addr#42\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/47\"\u003ejshttp/proxy-addr#47\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.11 to 4.31.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/46\"\u003ejshttp/proxy-addr#46\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump coverallsapp/github-action from 2.3.6 to 2.3.7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/50\"\u003ejshttp/proxy-addr#50\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.31.2 to 4.31.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/49\"\u003ejshttp/proxy-addr#49\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 5.0.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/48\"\u003ejshttp/proxy-addr#48\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 6.0.0 to 6.0.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/56\"\u003ejshttp/proxy-addr#56\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.31.5 to 4.32.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/55\"\u003ejshttp/proxy-addr#55\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.32.0 to 4.32.4 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/57\"\u003ejshttp/proxy-addr#57\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 5.0.0 to 7.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/58\"\u003ejshttp/proxy-addr#58\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix \u0026quot;arugment\u0026quot; typo in README by \u003ca href=\"https://github.com/schiwekM\"\u003e\u003ccode\u003e@​schiwekM\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/61\"\u003ejshttp/proxy-addr#61\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.32.4 to 4.36.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/64\"\u003ejshttp/proxy-addr#64\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/63\"\u003ejshttp/proxy-addr#63\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/45\"\u003ejshttp/proxy-addr#45\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump eslint-plugin-import from 2.31.0 to 2.32.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/39\"\u003ejshttp/proxy-addr#39\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(ci): npm-publish via reusable workflows by \u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/54\"\u003ejshttp/proxy-addr#54\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefresh CI by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/69\"\u003ejshttp/proxy-addr#69\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: typo by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/71\"\u003ejshttp/proxy-addr#71\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease: 2.0.8 by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/70\"\u003ejshttp/proxy-addr#70\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/carpasse\"\u003e\u003ccode\u003e@​carpasse\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/27\"\u003ejshttp/proxy-addr#27\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/step-security-bot\"\u003e\u003ccode\u003e@​step-security-bot\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/29\"\u003ejshttp/proxy-addr#29\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/30\"\u003ejshttp/proxy-addr#30\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/40\"\u003ejshttp/proxy-addr#40\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/schiwekM\"\u003e\u003ccode\u003e@​schiwekM\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/61\"\u003ejshttp/proxy-addr#61\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/54\"\u003ejshttp/proxy-addr#54\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8\"\u003ehttps://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jshttp/proxy-addr/blob/master/HISTORY.md\"\u003eproxy-addr's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e2.0.8\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-90711\"\u003eCVE-2026-90711\u003c/a\u003e (\u003ca href=\"https://github.com/jshttp/proxy-addr/security/advisories/GHSA-jqcg-44mw-7w3h\"\u003eGHSA-jqcg-44mw-7w3h\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/a11ad82545698af5c33e59f3ed0b52eab79bf610\"\u003e\u003ccode\u003ea11ad82\u003c/code\u003e\u003c/a\u003e 2.0.8 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/70\"\u003e#70\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/780911d84d18e2c5fa008ed0c0d387631ec11965\"\u003e\u003ccode\u003e780911d\u003c/code\u003e\u003c/a\u003e fix: reject IPv4 trust via mapped IPv6 subnets with a short prefix\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/92e103e3f3ab0467c8846cacea71f27dfc81091d\"\u003e\u003ccode\u003e92e103e\u003c/code\u003e\u003c/a\u003e fix(ci): use publised as release trigger event (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/71\"\u003e#71\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/3e5ac75d275d82606d33d6ac47c0ff43c2eccee9\"\u003e\u003ccode\u003e3e5ac75\u003c/code\u003e\u003c/a\u003e ci: merge coverage via artifacts, disable fail-fast, add Node.js 23-26 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/69\"\u003e#69\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/4b9db8190923840eb732b752a70f3e5ff713768c\"\u003e\u003ccode\u003e4b9db81\u003c/code\u003e\u003c/a\u003e chore(ci): npm-publish via workflows (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/54\"\u003e#54\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/655e8950435ac457c586e8287da4d5993b7d0db5\"\u003e\u003ccode\u003e655e895\u003c/code\u003e\u003c/a\u003e build(deps-dev): bump eslint-plugin-import from 2.31.0 to 2.32.0 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/39\"\u003e#39\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/50ce4d09132a4c34f5485b52740ce879a9223b1f\"\u003e\u003ccode\u003e50ce4d0\u003c/code\u003e\u003c/a\u003e build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/45\"\u003e#45\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/0fd347f5b342e7502da58a512dc998d4a59cea24\"\u003e\u003ccode\u003e0fd347f\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/63\"\u003e#63\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/6a517fa25c741cc107a90019df458b34f580ce55\"\u003e\u003ccode\u003e6a517fa\u003c/code\u003e\u003c/a\u003e build(deps): bump github/codeql-action from 4.32.4 to 4.36.0 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/64\"\u003e#64\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/0d45e2a88e82a2faf1148956b6457e3a6c99ebcd\"\u003e\u003ccode\u003e0d45e2a\u003c/code\u003e\u003c/a\u003e Fix \u0026quot;arugment\u0026quot; typo in README (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/61\"\u003e#61\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for proxy-addr since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `qs` from 6.11.0 to 6.16.1\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ljharb/qs/blob/main/CHANGELOG.md\"\u003eqs's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003cstrong\u003e6.16.1\u003c/strong\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: do not mutate an object input\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: stop re-encoding structural separator dots when \u003ccode\u003eencodeDotInKeys\u003c/code\u003e is set (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/564\"\u003e#564\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: \u003ccode\u003earrayFormat: 'comma'\u003c/code\u003e: pass the full encoder arguments with \u003ccode\u003eencodeValuesOnly\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eutils\u003c/code\u003e: encode \u003ccode\u003e+\u003c/code\u003e as \u003ccode\u003e%2B\u003c/code\u003e in iso-8859-1 mode so values round-trip (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/565\"\u003e#565\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Fix] parse: only convert top-level dots to brackets when allowDots is on (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/621\"\u003e#621\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: ignore inherited array format names (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/622\"\u003e#622\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: \u003ccode\u003earrayFormat: 'comma'\u003c/code\u003e: do not throw on elements with no callable \u003ccode\u003etoString\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eutils\u003c/code\u003e: \u003ccode\u003emerge\u003c/code\u003e: seed an overflow container's index from its own keys, not just the source\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eutils\u003c/code\u003e: \u003ccode\u003emerge\u003c/code\u003e: keep a \u003ccode\u003estrictMerge\u003c/code\u003e conflict container's index and \u003ccode\u003earrayLimit\u003c/code\u003e correct\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: only treat \u003ccode\u003e[]\u003c/code\u003e as array syntax when it ends the key\u003c/li\u003e\n\u003cli\u003e[Perf] \u003ccode\u003edecode\u003c/code\u003e: skip decoders when there is no percent sign (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/583\"\u003e#583\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Robustness] \u003ccode\u003eutils\u003c/code\u003e: \u003ccode\u003emerge\u003c/code\u003e: apply \u003ccode\u003earrayLimit\u003c/code\u003e to the two-element array built for colliding values\u003c/li\u003e\n\u003cli\u003e[Robustness] \u003ccode\u003eparse\u003c/code\u003e: bound the nesting added by repeated \u003ccode\u003estrictMerge\u003c/code\u003e conflicts (credit \u003ca href=\"https://github.com/Yeaseen\"\u003e\u003ccode\u003e@​Yeaseen\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Docs] document that \u003ccode\u003eqs\u003c/code\u003e and flat parsers disagree about parameter names\u003c/li\u003e\n\u003cli\u003e[Docs] clarify that \u003ccode\u003ethrowOnLimitExceeded\u003c/code\u003e limits each array, not the total number of values\u003c/li\u003e\n\u003cli\u003e[Docs] clarify 6.14.1/6.15.2 parse bracket behavior change (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/567\"\u003e#567\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/ljharb/qs/issues/568\"\u003e#568\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[meta] fix changelog indents\u003c/li\u003e\n\u003cli\u003e[actions] set least-privilege \u003ccode\u003ecache-mode\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Tests] \u003ccode\u003eutils\u003c/code\u003e: \u003ccode\u003edecode\u003c/code\u003e: add missing cases\u003c/li\u003e\n\u003cli\u003e[Tests] \u003ccode\u003eparse\u003c/code\u003e: characterize the \u003ccode\u003e]=\u003c/code\u003e split when an \u003ccode\u003e=\u003c/code\u003e precedes any bracket group (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/620\"\u003e#620\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Tests] \u003ccode\u003eparse\u003c/code\u003e: \u003ccode\u003eallowDots\u003c/code\u003e: cover stray close brackets before a dot\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eeslint\u003c/code\u003e, \u003ccode\u003etape\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003cstrong\u003e6.16.0\u003c/strong\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003estringify\u003c/code\u003e: add a \u003ccode\u003edepth\u003c/code\u003e option to bound recursion depth (default \u003ccode\u003eInfinity\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e[Fix] stringify: serialize Date values when a filter is provided\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: enforce \u003ccode\u003earrayLimit\u003c/code\u003e on comma groups under \u003ccode\u003e[]=\u003c/code\u003e when \u003ccode\u003ethrowOnLimitExceeded\u003c/code\u003e is set\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: flatten a collection appended to an overflowed array (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/571\"\u003e#571\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eutils\u003c/code\u003e: \u003ccode\u003eisBuffer\u003c/code\u003e: do not invoke a non-callable \u003ccode\u003econstructor.isBuffer\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: do not let \u003ccode\u003eallowEmptyArrays\u003c/code\u003e skip cycle detection (or drop own keys) on an empty array with own properties\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: encode dots in a top-level key with a primitive value when encodeDotInKeys is set (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/562\"\u003e#562\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Docs] threat model: clarify \u003ccode\u003estringify\u003c/code\u003e deep-nesting DoS is caller-bounded\u003c/li\u003e\n\u003cli\u003e[Docs] clarify \u003ccode\u003earrayLimit\u003c/code\u003e is a representation threshold, not an element-count cap\u003c/li\u003e\n\u003cli\u003e[Tests] \u003ccode\u003eparse\u003c/code\u003e: remove a test that pinned \u003ccode\u003e[]=\u003c/code\u003e comma groups escaping \u003ccode\u003earrayLimit\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Tests] \u003ccode\u003estringify\u003c/code\u003e: pin current \u003ccode\u003eencodeDotInKeys\u003c/code\u003e separator-dot behavior\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eeslint\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003eeslint\u003c/code\u003e, \u003ccode\u003eevalmd\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003cstrong\u003e6.15.3\u003c/strong\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: enforce \u003ccode\u003ethrowOnLimitExceeded\u003c/code\u003e for cumulative array growth via \u003ccode\u003ecombine\u003c/code\u003e/\u003ccode\u003emerge\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eutils\u003c/code\u003e: respect encoding of surrogate pairs across chunks (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/559\"\u003e#559\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Robustness] \u003ccode\u003eparse\u003c/code\u003e: throw the \u003ccode\u003earrayLimit\u003c/code\u003e error before splitting oversized comma values\u003c/li\u003e\n\u003cli\u003e[Robustness] \u003ccode\u003eutils.merge\u003c/code\u003e / \u003ccode\u003eutils.assign\u003c/code\u003e: avoid invoking \u003ccode\u003e__proto__\u003c/code\u003e setter when copying own properties\u003c/li\u003e\n\u003cli\u003e[Robustness] \u003ccode\u003eutils\u003c/code\u003e: enforce \u003ccode\u003earrayLimit\u003c/code\u003e consistently across \u003ccode\u003emerge\u003c/code\u003e's array paths\u003c/li\u003e\n\u003cli\u003e[Perf] \u003ccode\u003eutils\u003c/code\u003e: make \u003ccode\u003ecompact\u003c/code\u003e O(n) via a side-channel visited-set instead of \u003ccode\u003eArray.indexOf\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Deps] update \u003ccode\u003eside-channel\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003eeslint\u003c/code\u003e, \u003ccode\u003emock-property\u003c/code\u003e, \u003ccode\u003etape\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Tests] \u003ccode\u003eparse\u003c/code\u003e: characterize current lenient handling of unbalanced bracket keys (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/558\"\u003e#558\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/2471b66ae696a8a10915c01453ae2c0f139a5adc\"\u003e\u003ccode\u003e2471b66\u003c/code\u003e\u003c/a\u003e v6.16.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/51f736e94b079b8479fa8f668acba84c1e177596\"\u003e\u003ccode\u003e51f736e\u003c/code\u003e\u003c/a\u003e [Docs] document that \u003ccode\u003eqs\u003c/code\u003e and flat parsers disagree about parameter names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/40239f7564e99ab92eb9125defaaf4779a26b03a\"\u003e\u003ccode\u003e40239f7\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003etape\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/d2...\n\n_Description has been truncated_","html_url":"https://github.com/Sawsqr68/nodejs.dev/pull/2","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Sawsqr68%2Fnodejs.dev/issues/2","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/2/packages"}},{"old_version":"2.30.1","new_version":"2.31.0","update_type":"minor","path":null,"pr_created_at":"2026-10-18T13:31:00.000Z","version_change":"2.30.1 → 2.31.0","issue":{"uuid":"5910034283","node_id":"PR_kwDOChomAM8AAAABJKDiTg","number":227,"state":"open","title":"build(deps): bump moment from 2.30.1 to 2.31.0","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-18T13:31:00.000Z","updated_at":"2026-10-18T13:32:38.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"moment","old_version":"2.30.1","new_version":"2.31.0","repository_url":"https://github.com/moment/moment"}],"path":null,"ecosystem":"npm"},"body":"Bumps [moment](https://github.com/moment/moment) from 2.30.1 to 2.31.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/releases\"\u003emoment's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.31.0\u003c/h2\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/blob/develop/CHANGELOG.md\"\u003emoment's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch3\u003e2.31.0\u003c/h3\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/15b45d48a176312e8f34143c5a800090abf4787f\"\u003e\u003ccode\u003e15b45d4\u003c/code\u003e\u003c/a\u003e [pkg] Build 2.31.0 (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6452\"\u003e#6452\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/631cd81454ee001e1f508e21270eae0b6bb62974\"\u003e\u003ccode\u003e631cd81\u003c/code\u003e\u003c/a\u003e [pkg] Update changelog for upcoming release (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6394\"\u003e#6394\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/6caff9e0d54e85a63a6eb97d7361f1da35bc58f4\"\u003e\u003ccode\u003e6caff9e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/710703b7eac93535ad125cbf4feb3d42afed6fb3\"\u003e\u003ccode\u003e710703b\u003c/code\u003e\u003c/a\u003e [feature] Add internal date-default hook for Moment Timezone (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6451\"\u003e#6451\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/863ed940556e6e63c43de23981a4853036a003ac\"\u003e\u003ccode\u003e863ed94\u003c/code\u003e\u003c/a\u003e [bugfix] Add stack traces to conditional deprecation warnings (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6450\"\u003e#6450\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/2c7abe1c42ee15445d30c2c5d536750a1e43a09a\"\u003e\u003ccode\u003e2c7abe1\u003c/code\u003e\u003c/a\u003e [bugfix] Apply postformat to locale relative time methods (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6448\"\u003e#6448\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/9c45ac38690c649c95e19923276b63da5fe2be26\"\u003e\u003ccode\u003e9c45ac3\u003c/code\u003e\u003c/a\u003e [bugfix] Include metadata in all-locales bundle (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6447\"\u003e#6447\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/f6eefc5fc7b44ceccbd007aeffc48ebc5eac30fa\"\u003e\u003ccode\u003ef6eefc5\u003c/code\u003e\u003c/a\u003e [bugfix] Validate timezone offset range (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6446\"\u003e#6446\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/136b441794a3bb207d593add3b59e9de0e062523\"\u003e\u003ccode\u003e136b441\u003c/code\u003e\u003c/a\u003e [bugfix] Avoid Object.assign in duration.humanize (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6443\"\u003e#6443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/0d1050437b40f66ac47e14b285bb3d09676cf2e0\"\u003e\u003ccode\u003e0d10504\u003c/code\u003e\u003c/a\u003e [bugfix] Fix locale('\u003cstrong\u003eproto\u003c/strong\u003e') corrupting the global locale (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6442\"\u003e#6442\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moment/moment/compare/2.30.1...2.31.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for moment since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=moment\u0026package-manager=npm_and_yarn\u0026previous-version=2.30.1\u0026new-version=2.31.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/mat3ra/wave.js/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/mat3ra/wave.js/pull/227","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/mat3ra%2Fwave.js/issues/227","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/227/packages"}},{"old_version":"2.30.1","new_version":"2.31.0","update_type":"minor","path":null,"pr_created_at":"2026-10-18T11:54:14.000Z","version_change":"2.30.1 → 2.31.0","issue":{"uuid":"5909251488","node_id":"PR_kwDOTurCD88AAAABJJdZyQ","number":20,"state":"closed","title":"Bump the minor-and-patch group across 1 directory with 27 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-10-21T23:25:58.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-18T11:54:14.000Z","updated_at":"2026-10-21T23:26:00.000Z","time_to_close":300704,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"minor-and-patch","update_count":27,"packages":[{"name":"moment","old_version":"2.30.1","new_version":"2.31.0","repository_url":"https://github.com/moment/moment"},{"name":"moment-timezone","old_version":"0.6.3","new_version":"0.6.5","repository_url":"https://github.com/moment/moment-timezone"},{"name":"socket.io-client","old_version":"4.8.3","new_version":"4.8.4","repository_url":"https://github.com/socketio/socket.io"},{"name":"vue","old_version":"3.5.42","new_version":"3.5.44","repository_url":"https://github.com/vuejs/core"},{"name":"sass","old_version":"1.103.1","new_version":"1.105.1","repository_url":"https://github.com/sass/dart-sass"},{"name":"vue-tsc","old_version":"3.3.11","new_version":"3.3.13","repository_url":"https://github.com/vuejs/language-tools"},{"name":"@nestjs/common","old_version":"12.0.1","new_version":"12.1.3","repository_url":"https://github.com/nestjs/nest"},{"name":"@nestjs/core","old_version":"12.0.1","new_version":"12.1.3","repository_url":"https://github.com/nestjs/nest"},{"name":"@nestjs/schedule","old_version":"12.0.1","new_version":"12.0.2","repository_url":"https://github.com/nestjs/schedule"},{"name":"@types/lodash","old_version":"4.17.25","new_version":"4.17.26","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"@nestjs/axios","old_version":"12.0.0","new_version":"12.0.1","repository_url":"https://github.com/nestjs/axios"},{"name":"@nestjs/cache-manager","old_version":"12.0.0","new_version":"12.0.1","repository_url":"https://github.com/nestjs/cache-manager"},{"name":"@nestjs/jwt","old_version":"12.0.1","new_version":"12.0.3","repository_url":"https://github.com/nestjs/jwt"},{"name":"@nestjs/platform-express","old_version":"12.0.1","new_version":"12.1.3","repository_url":"https://github.com/nestjs/nest"},{"name":"@nestjs/platform-socket.io","old_version":"12.0.1","new_version":"12.1.3","repository_url":"https://github.com/nestjs/nest"},{"name":"@nestjs/swagger","old_version":"12.0.1","new_version":"12.0.2","repository_url":"https://github.com/nestjs/swagger"},{"name":"@nestjs/typeorm","old_version":"12.0.1","new_version":"12.0.2","repository_url":"https://github.com/nestjs/typeorm"},{"name":"@nestjs/websockets","old_version":"12.0.1","new_version":"12.1.3","repository_url":"https://github.com/nestjs/nest"},{"name":"@node-rs/argon2","old_version":"2.2.0","new_version":"2.2.2","repository_url":"https://github.com/napi-rs/node-rs"},{"name":"jszip","old_version":"3.10.1","new_version":"3.10.2","repository_url":"https://github.com/Stuk/jszip"},{"name":"multer","old_version":"2.3.0","new_version":"2.4.0","repository_url":"https://github.com/expressjs/multer"},{"name":"@types/multer","old_version":"2.2.0","new_version":"2.3.0","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"mysql2","old_version":"3.24.2","new_version":"3.24.6","repository_url":"https://github.com/sidorares/node-mysql2"},{"name":"otpauth","old_version":"9.5.1","new_version":"9.5.2","repository_url":"https://github.com/hectorm/otpauth"},{"name":"sanitize-html","old_version":"2.17.7","new_version":"2.18.1","repository_url":"https://github.com/apostrophecms/apostrophe"},{"name":"@types/sanitize-html","old_version":"2.16.1","new_version":"2.16.2","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"@types/multer","old_version":"2.2.0","new_version":"2.3.0","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"@types/sanitize-html","old_version":"2.16.1","new_version":"2.16.2","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"webpack","old_version":"5.110.2","new_version":"5.111.1","repository_url":"https://github.com/webpack/webpack"}],"path":null,"ecosystem":"npm"},"body":"Bumps the minor-and-patch group with 27 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [moment](https://github.com/moment/moment) | `2.30.1` | `2.31.0` |\n| [moment-timezone](https://github.com/moment/moment-timezone) | `0.6.3` | `0.6.5` |\n| [socket.io-client](https://github.com/socketio/socket.io) | `4.8.3` | `4.8.4` |\n| [vue](https://github.com/vuejs/core) | `3.5.42` | `3.5.44` |\n| [sass](https://github.com/sass/dart-sass) | `1.103.1` | `1.105.1` |\n| [vue-tsc](https://github.com/vuejs/language-tools/tree/HEAD/packages/tsc) | `3.3.11` | `3.3.13` |\n| [@nestjs/common](https://github.com/nestjs/nest/tree/HEAD/packages/common) | `12.0.1` | `12.1.3` |\n| [@nestjs/core](https://github.com/nestjs/nest/tree/HEAD/packages/core) | `12.0.1` | `12.1.3` |\n| [@nestjs/schedule](https://github.com/nestjs/schedule) | `12.0.1` | `12.0.2` |\n| [@types/lodash](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/lodash) | `4.17.25` | `4.17.26` |\n| [@nestjs/axios](https://github.com/nestjs/axios) | `12.0.0` | `12.0.1` |\n| [@nestjs/cache-manager](https://github.com/nestjs/cache-manager) | `12.0.0` | `12.0.1` |\n| [@nestjs/jwt](https://github.com/nestjs/jwt) | `12.0.1` | `12.0.3` |\n| [@nestjs/platform-express](https://github.com/nestjs/nest/tree/HEAD/packages/platform-express) | `12.0.1` | `12.1.3` |\n| [@nestjs/platform-socket.io](https://github.com/nestjs/nest/tree/HEAD/packages/platform-socket.io) | `12.0.1` | `12.1.3` |\n| [@nestjs/swagger](https://github.com/nestjs/swagger) | `12.0.1` | `12.0.2` |\n| [@nestjs/typeorm](https://github.com/nestjs/typeorm) | `12.0.1` | `12.0.2` |\n| [@nestjs/websockets](https://github.com/nestjs/nest/tree/HEAD/packages/websockets) | `12.0.1` | `12.1.3` |\n| [@node-rs/argon2](https://github.com/napi-rs/node-rs) | `2.2.0` | `2.2.2` |\n| [jszip](https://github.com/Stuk/jszip) | `3.10.1` | `3.10.2` |\n| [multer](https://github.com/expressjs/multer) | `2.3.0` | `2.4.0` |\n| [@types/multer](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/multer) | `2.2.0` | `2.3.0` |\n| [mysql2](https://github.com/sidorares/node-mysql2) | `3.24.2` | `3.24.6` |\n| [otpauth](https://github.com/hectorm/otpauth) | `9.5.1` | `9.5.2` |\n| [sanitize-html](https://github.com/apostrophecms/apostrophe/tree/HEAD/packages/sanitize-html) | `2.17.7` | `2.18.1` |\n| [@types/sanitize-html](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/sanitize-html) | `2.16.1` | `2.16.2` |\n| [@types/multer](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/multer) | `2.2.0` | `2.3.0` |\n| [@types/sanitize-html](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/sanitize-html) | `2.16.1` | `2.16.2` |\n| [webpack](https://github.com/webpack/webpack) | `5.110.2` | `5.111.1` |\n\n\nUpdates `moment` from 2.30.1 to 2.31.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/releases\"\u003emoment's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.31.0\u003c/h2\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/blob/develop/CHANGELOG.md\"\u003emoment's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch3\u003e2.31.0\u003c/h3\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/15b45d48a176312e8f34143c5a800090abf4787f\"\u003e\u003ccode\u003e15b45d4\u003c/code\u003e\u003c/a\u003e [pkg] Build 2.31.0 (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6452\"\u003e#6452\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/631cd81454ee001e1f508e21270eae0b6bb62974\"\u003e\u003ccode\u003e631cd81\u003c/code\u003e\u003c/a\u003e [pkg] Update changelog for upcoming release (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6394\"\u003e#6394\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/6caff9e0d54e85a63a6eb97d7361f1da35bc58f4\"\u003e\u003ccode\u003e6caff9e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/710703b7eac93535ad125cbf4feb3d42afed6fb3\"\u003e\u003ccode\u003e710703b\u003c/code\u003e\u003c/a\u003e [feature] Add internal date-default hook for Moment Timezone (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6451\"\u003e#6451\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/863ed940556e6e63c43de23981a4853036a003ac\"\u003e\u003ccode\u003e863ed94\u003c/code\u003e\u003c/a\u003e [bugfix] Add stack traces to conditional deprecation warnings (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6450\"\u003e#6450\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/2c7abe1c42ee15445d30c2c5d536750a1e43a09a\"\u003e\u003ccode\u003e2c7abe1\u003c/code\u003e\u003c/a\u003e [bugfix] Apply postformat to locale relative time methods (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6448\"\u003e#6448\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/9c45ac38690c649c95e19923276b63da5fe2be26\"\u003e\u003ccode\u003e9c45ac3\u003c/code\u003e\u003c/a\u003e [bugfix] Include metadata in all-locales bundle (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6447\"\u003e#6447\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/f6eefc5fc7b44ceccbd007aeffc48ebc5eac30fa\"\u003e\u003ccode\u003ef6eefc5\u003c/code\u003e\u003c/a\u003e [bugfix] Validate timezone offset range (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6446\"\u003e#6446\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/136b441794a3bb207d593add3b59e9de0e062523\"\u003e\u003ccode\u003e136b441\u003c/code\u003e\u003c/a\u003e [bugfix] Avoid Object.assign in duration.humanize (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6443\"\u003e#6443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/0d1050437b40f66ac47e14b285bb3d09676cf2e0\"\u003e\u003ccode\u003e0d10504\u003c/code\u003e\u003c/a\u003e [bugfix] Fix locale('\u003cstrong\u003eproto\u003c/strong\u003e') corrupting the global locale (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6442\"\u003e#6442\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moment/moment/compare/2.30.1...2.31.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for moment since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `moment-timezone` from 0.6.3 to 0.6.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment-timezone/releases\"\u003emoment-timezone's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease 0.6.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated data to IANA TZDB \u003ccode\u003e2026e\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/moment/moment-timezone/issues/1165\"\u003e#1165\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 0.6.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated data to IANA TZDB \u003ccode\u003e2026d\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/moment/moment-timezone/pull/1157\"\u003e#1157\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed calendar arithmetic around time zone gaps. \u003ca href=\"https://redirect.github.com/moment/moment-timezone/pull/1151\"\u003e#1151\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed default date selection when creating a zoned Moment with only time fields.\n\u003cul\u003e\n\u003cli\u003eObject inputs (e.g. \u003ccode\u003emoment.tz({ hour: 9 }, zoneName)\u003c/code\u003e). \u003ca href=\"https://redirect.github.com/moment/moment-timezone/pull/1156\"\u003e#1156\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eString inputs (e.g. \u003ccode\u003emoment.tz('09:00', 'HH:mm', zoneName)\u003c/code\u003e). \u003ca href=\"https://redirect.github.com/moment/moment-timezone/pull/1159\"\u003e#1159\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUsing un-zoned \u003ccode\u003emoment()\u003c/code\u003e when there is also a zone set with \u003ccode\u003emoment.tz.setDefault(zoneName)\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/moment/moment-timezone/pull/1161\"\u003e#1161\u003c/a\u003e\n\u003cul\u003e\n\u003cli\u003eNOTE: This specific fix only works when also using core \u003ccode\u003emoment\u003c/code\u003e version \u003ccode\u003e2.31.0\u003c/code\u003e or higher.\nAll other fixes in this release work with all supported versions of \u003ccode\u003emoment\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment-timezone/blob/develop/changelog.md\"\u003emoment-timezone's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch3\u003e\u003ccode\u003e0.6.5\u003c/code\u003e \u003cem\u003e2026-10-02\u003c/em\u003e\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated data to IANA TZDB \u003ccode\u003e2026e\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/moment/moment-timezone/pull/1165\"\u003e#1165\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e\u003ccode\u003e0.6.4\u003c/code\u003e \u003cem\u003e2026-09-15\u003c/em\u003e\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated data to IANA TZDB \u003ccode\u003e2026d\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/moment/moment-timezone/pull/1157\"\u003e#1157\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed calendar arithmetic around time zone gaps. \u003ca href=\"https://redirect.github.com/moment/moment-timezone/pull/1151\"\u003e#1151\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed default date selection when creating a zoned Moment with only time fields.\n\u003cul\u003e\n\u003cli\u003eObject inputs (e.g. \u003ccode\u003emoment.tz({ hour: 9 }, zoneName)\u003c/code\u003e). \u003ca href=\"https://redirect.github.com/moment/moment-timezone/pull/1156\"\u003e#1156\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eString inputs (e.g. \u003ccode\u003emoment.tz('09:00', 'HH:mm', zoneName)\u003c/code\u003e). \u003ca href=\"https://redirect.github.com/moment/moment-timezone/pull/1159\"\u003e#1159\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUsing un-zoned \u003ccode\u003emoment()\u003c/code\u003e when there is also a zone set with \u003ccode\u003emoment.tz.setDefault(zoneName)\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/moment/moment-timezone/pull/1161\"\u003e#1161\u003c/a\u003e\n\u003cul\u003e\n\u003cli\u003eNOTE: This specific fix only works when also using core \u003ccode\u003emoment\u003c/code\u003e version \u003ccode\u003e2.31.0\u003c/code\u003e or higher.\nAll other fixes in this release work with all supported versions of \u003ccode\u003emoment\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment-timezone/commit/fe4e8522a78d167aba3e38b4c72c057152e85e17\"\u003e\u003ccode\u003efe4e852\u003c/code\u003e\u003c/a\u003e Bump version and build moment-timezone 0.6.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment-timezone/commit/b48d24ad898bf130fa8f21289bc6323271ce5961\"\u003e\u003ccode\u003eb48d24a\u003c/code\u003e\u003c/a\u003e build(deps): bump package-lock moment from 2.29.4 to 2.31.0 (\u003ca href=\"https://redirect.github.com/moment/moment-timezone/issues/1166\"\u003e#1166\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment-timezone/commit/88edd547159c9ba63c00e7de50fa2487487dc861\"\u003e\u003ccode\u003e88edd54\u003c/code\u003e\u003c/a\u003e build(deps): bump brace-expansion (\u003ca href=\"https://redirect.github.com/moment/moment-timezone/issues/1164\"\u003e#1164\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment-timezone/commit/a973518b3b51372cfa59bef9cbeba33f6f5feef3\"\u003e\u003ccode\u003ea973518\u003c/code\u003e\u003c/a\u003e data: Add 2026e (\u003ca href=\"https://redirect.github.com/moment/moment-timezone/issues/1165\"\u003e#1165\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment-timezone/commit/3722a7dfb32107d66ea95b0d0c6fd7128c28002f\"\u003e\u003ccode\u003e3722a7d\u003c/code\u003e\u003c/a\u003e Bump version and build moment-timezone 0.6.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment-timezone/commit/70b06e93a5f3a1574a00a74161ff8a6f5d1e09a2\"\u003e\u003ccode\u003e70b06e9\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moment/moment-timezone/issues/1161\"\u003e#1161\u003c/a\u003e from moment/mjp/fix-default-zone-date-defaults\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment-timezone/commit/afac5bd7b4fedc59df623d357b3d2310ce8f3342\"\u003e\u003ccode\u003eafac5bd\u003c/code\u003e\u003c/a\u003e [bugfix] Apply default zone to omitted date fields\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment-timezone/commit/114242a3e3eed4a1ce1f26244eb696917681402b\"\u003e\u003ccode\u003e114242a\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/moment/moment-timezone/issues/1159\"\u003e#1159\u003c/a\u003e from moment/mjp/fix-119\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment-timezone/commit/0662d8bf20dea5f62b90416813e62d10d3b0ce7d\"\u003e\u003ccode\u003e0662d8b\u003c/code\u003e\u003c/a\u003e [bugfix] Use target zone for string date defaults\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment-timezone/commit/9da68c43a8609ca256655d4a09050b2ad81150a7\"\u003e\u003ccode\u003e9da68c4\u003c/code\u003e\u003c/a\u003e data: Add 2026d (\u003ca href=\"https://redirect.github.com/moment/moment-timezone/issues/1157\"\u003e#1157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moment/moment-timezone/compare/0.6.3...0.6.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `socket.io-client` from 4.8.3 to 4.8.4\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/socketio/socket.io/releases\"\u003esocket.io-client's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003esocket.io-client@4.8.4\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003etypes:\u003c/strong\u003e export ExtendedError for connect_error event (\u003ca href=\"https://redirect.github.com/socketio/socket.io/issues/5548\"\u003e#5548\u003c/a\u003e) (\u003ca href=\"https://github.com/socketio/socket.io/commit/c0d54509fbe7dafd3ed8b5a2f3f74a12810da4a3\"\u003ec0d5450\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003etypes:\u003c/strong\u003e export reserved event interfaces (\u003ca href=\"https://redirect.github.com/socketio/socket.io/issues/5533\"\u003e#5533\u003c/a\u003e) (\u003ca href=\"https://github.com/socketio/socket.io/commit/03945df6b750dfa6379305ef29ea4235a424ca47\"\u003e03945df\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependencies\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/socketio/socket.io/releases/tag/engine.io-client%406.6.7\"\u003e\u003ccode\u003eengine.io-client@~6.6.1\u003c/code\u003e\u003c/a\u003e (no change)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/websockets/ws/releases/tag/8.21.0\"\u003e\u003ccode\u003ews@~8.21.0\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://github.com/websockets/ws/compare/8.18.3...8.21.0\"\u003ediff\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/socketio/socket.io/commit/11a6f561a757264c3231c3383c4cdbf37bcf52de\"\u003e\u003ccode\u003e11a6f56\u003c/code\u003e\u003c/a\u003e chore(release): socket.io-client@4.8.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/socketio/socket.io/commit/00e4e73a68505ff0c93d7d9ca8db5dd510428cf4\"\u003e\u003ccode\u003e00e4e73\u003c/code\u003e\u003c/a\u003e chore(release): engine.io-client@6.6.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/socketio/socket.io/commit/e387ab116f6904537ccef872ef570a6ef7936e9d\"\u003e\u003ccode\u003ee387ab1\u003c/code\u003e\u003c/a\u003e chore: use \u003ccode\u003e@​rollup/plugin-terser\u003c/code\u003e instead of rollup-plugin-terser\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/socketio/socket.io/commit/973833304c7c195c2d0d99b72e4ac9f149e3ca94\"\u003e\u003ccode\u003e9738333\u003c/code\u003e\u003c/a\u003e chore(release): engine.io@6.6.11\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/socketio/socket.io/commit/fc9dd90e2ff26aa358d0cd27bc59ddc93458ae44\"\u003e\u003ccode\u003efc9dd90\u003c/code\u003e\u003c/a\u003e docs(eio): rework README\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/socketio/socket.io/commit/da008a514ded71e3058a964c831c69abe417b2f5\"\u003e\u003ccode\u003eda008a5\u003c/code\u003e\u003c/a\u003e fix(eio): refresh ping timeout on incoming packets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/socketio/socket.io/commit/3df3fed075fd2312e84481786235aa14d08b8fe7\"\u003e\u003ccode\u003e3df3fed\u003c/code\u003e\u003c/a\u003e fix(eio-client): restore default transport resolution\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/socketio/socket.io/commit/aaf2af36ec8ad05910f357a788e0e358bad32738\"\u003e\u003ccode\u003eaaf2af3\u003c/code\u003e\u003c/a\u003e test: upgrade WebdriverIO to v9\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/socketio/socket.io/commit/b5da079228666fcabd97166486d5f6a110826bc8\"\u003e\u003ccode\u003eb5da079\u003c/code\u003e\u003c/a\u003e refactor(sio): simplify packet handling switch\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/socketio/socket.io/commit/45873ca93e6e25ac55dc1ba5c9b87853bf19ffba\"\u003e\u003ccode\u003e45873ca\u003c/code\u003e\u003c/a\u003e docs(protocol): clarify namespace comma restriction for built-in parser (\u003ca href=\"https://redirect.github.com/socketio/socket.io/issues/5545\"\u003e#5545\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/socketio/socket.io/compare/socket.io-client@4.8.3...socket.io-client@4.8.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `vue` from 3.5.42 to 3.5.44\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vuejs/core/releases\"\u003evue's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.5.44\u003c/h2\u003e\n\u003cp\u003eFor stable releases, please refer to \u003ca href=\"https://github.com/vuejs/core/blob/main/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\nFor pre-releases, please refer to \u003ca href=\"https://github.com/vuejs/core/blob/minor/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e of the \u003ccode\u003eminor\u003c/code\u003e branch.\u003c/p\u003e\n\u003ch2\u003ev3.5.43\u003c/h2\u003e\n\u003cp\u003eFor stable releases, please refer to \u003ca href=\"https://github.com/vuejs/core/blob/main/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\nFor pre-releases, please refer to \u003ca href=\"https://github.com/vuejs/core/blob/minor/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e of the \u003ccode\u003eminor\u003c/code\u003e branch.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vuejs/core/blob/main/CHANGELOG.md\"\u003evue's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/vuejs/core/compare/v3.5.43...v3.5.44\"\u003e3.5.44\u003c/a\u003e (2026-10-13)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ecompat:\u003c/strong\u003e expose _setupProxy for Vue 2.7 compiled script setup (fix \u003ca href=\"https://redirect.github.com/vuejs/core/issues/11164\"\u003e#11164\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15618\"\u003e#15618\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/f08059d0ca8cf28b8258a6095f8760fa1804d333\"\u003ef08059d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecompiler-core:\u003c/strong\u003e parenthesise v-for key in v-memo cache guard (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15724\"\u003e#15724\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/d084b904903a7710ea19b7256b7c681e838eb63e\"\u003ed084b90\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vuejs/core/issues/15723\"\u003e#15723\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecompiler-dom:\u003c/strong\u003e correctly stringify \u003ccode\u003e0\u003c/code\u003e and \u003ccode\u003efalse\u003c/code\u003e in \u003ccode\u003ev-html\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15571\"\u003e#15571\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/9f3b4377c4bb5ff32b35ff08ce7670f6be6f5dbb\"\u003e9f3b437\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecompiler-dom:\u003c/strong\u003e inject transition persisted for v-show in production (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15783\"\u003e#15783\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/89cb2724bf3423fc38dca68af3139d736e6b4833\"\u003e89cb272\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecompiler-sfc:\u003c/strong\u003e error when defineModel prop options reference a destructured prop (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15604\"\u003e#15604\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/38012a5ad90a41c228e153774d089cba9515cf2d\"\u003e38012a5\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vuejs/core/issues/15602\"\u003e#15602\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecustom-element:\u003c/strong\u003e skip mounting an async custom element removed while its component loads (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15777\"\u003e#15777\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/0f8e7b40175059e262e0db232ae0c08b427486b5\"\u003e0f8e7b4\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vuejs/core/issues/15775\"\u003e#15775\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ehydration:\u003c/strong\u003e observe children of a display: contents root in hydrateOnVisible (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15773\"\u003e#15773\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/7f688e84745558d95b836c0aac25c3ca3257e943\"\u003e7f688e8\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eKeepAlive:\u003c/strong\u003e unmount pruned current component when its vnode was cloned on mount (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15711\"\u003e#15711\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/92798ac0a8810283055478dab1e54569f3e94c23\"\u003e92798ac\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vuejs/core/issues/15710\"\u003e#15710\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ereactivity:\u003c/strong\u003e avoid mutating native array iterators (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15703\"\u003e#15703\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/7f9d45d15bd10b6b9b136eb2b3a8879b449fec0d\"\u003e7f9d45d\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vuejs/core/issues/15643\"\u003e#15643\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ereactivity:\u003c/strong\u003e do not track deps in watcher callbacks run inside another effect (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15782\"\u003e#15782\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/db00fe9819eb17f0a5bde7e1fcfafe5984e267a3\"\u003edb00fe9\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vuejs/core/issues/5009\"\u003e#5009\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ereactivity:\u003c/strong\u003e once watcher should stop when its callback throws (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15755\"\u003e#15755\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/ae4bd94b6e5675f991696236dcc76a11d0597535\"\u003eae4bd94\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ereactivity:\u003c/strong\u003e preserve shallow collection semantics (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15793\"\u003e#15793\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/b600466135e0910d142d14f56ffec933c1c420a2\"\u003eb600466\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vuejs/core/issues/15792\"\u003e#15792\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eruntime-core:\u003c/strong\u003e detect new prop keys when comparing full props (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15634\"\u003e#15634\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/702fa61be9344852989bcd178681adec13264469\"\u003e702fa61\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vuejs/core/issues/15632\"\u003e#15632\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eruntime-core:\u003c/strong\u003e keep async placeholder for block patching and pending component updates (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15554\"\u003e#15554\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/05ec25f835cc65058bac7a85e4a5eb8075ed3151\"\u003e05ec25f\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vuejs/core/issues/15551\"\u003e#15551\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eruntime-core:\u003c/strong\u003e only flush jobs queued by the root render itself (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15757\"\u003e#15757\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/0bea14b962f1f6e27d2d994132efc2269945ab0f\"\u003e0bea14b\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vuejs/core/issues/6728\"\u003e#6728\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eruntime-core:\u003c/strong\u003e render nothing for an invalid v-for range in production (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15742\"\u003e#15742\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/ad19e7da3d58b772513ba3c2ded731eedb7d227d\"\u003ead19e7d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eruntime-dom:\u003c/strong\u003e preserve v-show display for unchanged style strings (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15794\"\u003e#15794\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/c0a6d3f2bbf80cf930f4c837409dbee95a149271\"\u003ec0a6d3f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eruntime-dom:\u003c/strong\u003e treat playsinline as a boolean attribute (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15627\"\u003e#15627\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/a084e4486f1c4dc118518d43a1c7547031c53a5c\"\u003ea084e44\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eserver-renderer:\u003c/strong\u003e propagate async setup errors (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15857\"\u003e#15857\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/693037486f38b3d3acf4cdf7b9850917c44cf9cb\"\u003e6930374\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vuejs/core/issues/15716\"\u003e#15716\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003essr:\u003c/strong\u003e honor falsy vnode content overrides (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15769\"\u003e#15769\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/c11c5c8f07c8527b537b9ce6d801f80bbdd12129\"\u003ec11c5c8\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003esuspense:\u003c/strong\u003e mount resolved async component with its own namespace (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15640\"\u003e#15640\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/2a086a2bee33abc30e20f8a3b0a2be418ae48967\"\u003e2a086a2\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vuejs/core/issues/15639\"\u003e#15639\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003esuspense:\u003c/strong\u003e skip rendering async components unmounted while pending (\u003ca href=\"https://github.com/vuejs/core/commit/4ab865a848a1da3d10fb674f857e5fff13094644\"\u003e4ab865a\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eteleport:\u003c/strong\u003e move targetStart and keep children before targetAnchor (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15818\"\u003e#15818\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/d3c6e02e7405b9dafa75b1007ca45fb376d45729\"\u003ed3c6e02\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vuejs/core/issues/15817\"\u003e#15817\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003etransition-group:\u003c/strong\u003e measure nested groups against their moving outer item (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15848\"\u003e#15848\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/1936c8791b61374fd21a99c99f450ee2b057b33e\"\u003e1936c87\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vuejs/core/issues/5385\"\u003e#5385\u003c/a\u003e \u003ca href=\"https://redirect.github.com/vuejs/core/issues/1531\"\u003e#1531\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003etransition:\u003c/strong\u003e handle comment-wrapped component roots (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15853\"\u003e#15853\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/ff3501429d4970c37194708b055492a56d9e5be5\"\u003eff35014\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vuejs/core/issues/6080\"\u003e#6080\u003c/a\u003e \u003ca href=\"https://redirect.github.com/vuejs/core/issues/5500\"\u003e#5500\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/vuejs/core/compare/v3.5.42...v3.5.43\"\u003e3.5.43\u003c/a\u003e (2026-09-17)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ecompiler-sfc:\u003c/strong\u003e ignore comment delimiters inside strings and url() when parsing css vars (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15548\"\u003e#15548\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/2fde3239ca3cdb9b152870f695cd3401fcaada94\"\u003e2fde323\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecompiler-sfc:\u003c/strong\u003e prepend semicolon for await in switch case (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15498\"\u003e#15498\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/9a1df69b63fecd743919af89a419783dd030b9f7\"\u003e9a1df69\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vuejs/core/issues/15495\"\u003e#15495\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecompiler-sfc:\u003c/strong\u003e restore await scope when leaving nested blocks (\u003ca href=\"https://github.com/vuejs/core/commit/54097087a0918b98f16c84599b1a6d654e952ca7\"\u003e5409708\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vuejs/core/issues/15465\"\u003e#15465\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecompiler-sfc:\u003c/strong\u003e reuse parsed parent configs across tsconfig walks (fix \u003ca href=\"https://redirect.github.com/vuejs/core/issues/15478\"\u003e#15478\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15480\"\u003e#15480\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/d6febaab8c0d95a6320e7e37276c00e8159e9cb2\"\u003ed6febaa\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ehydration:\u003c/strong\u003e run leave hooks for hydration placeholders (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15431\"\u003e#15431\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/5dda192082afa4985951d90e229324d522e25c22\"\u003e5dda192\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ereactivity:\u003c/strong\u003e preserve readonly wrappers in array copy methods (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15469\"\u003e#15469\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/599f35bbb21f3d78b7aa0818342ab4f27442a333\"\u003e599f35b\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eruntime-core:\u003c/strong\u003e unmount v-once children after parent rerenders (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15435\"\u003e#15435\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/d720338d5d29c1fac82abbe6f7066fe703ce624d\"\u003ed720338\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eshared:\u003c/strong\u003e handle circular references in looseEqual (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15499\"\u003e#15499\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/718f782b14c7e0165d20b6f4dd8664f78054b62c\"\u003e718f782\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vuejs/core/issues/15496\"\u003e#15496\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eshared:\u003c/strong\u003e preserve comment-like text in style values (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15471\"\u003e#15471\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/b9456cb40db714a6f573a1713d92e96d4c9e9533\"\u003eb9456cb\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003esuspense:\u003c/strong\u003e don't drop nested suspense patches during hydration (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15429\"\u003e#15429\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/76d42dc1874e82e62e9650debd68a53472d810e0\"\u003e76d42dc\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003esuspense:\u003c/strong\u003e keep the boundary pending while its branch is patched (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15411\"\u003e#15411\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/bfcfe9e4d0254f85af452544a058291ef88dce1a\"\u003ebfcfe9e\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vuejs/core/issues/7506\"\u003e#7506\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003esuspense:\u003c/strong\u003e patch a hydrating boundary's pending branch in place (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15432\"\u003e#15432\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/2cde6f754cb3e4695a21fb5719e0c75ee2fc5c61\"\u003e2cde6f7\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003esuspense:\u003c/strong\u003e unmount the DOM an interrupted async component claimed (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15430\"\u003e#15430\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/fb9b45ce780f656a23fcb374eb8ea9f7abadc594\"\u003efb9b45c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003etypes:\u003c/strong\u003e keep optional props when a runtime prop uses a generic PropType (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15523\"\u003e#15523\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/core/commit/243aabccf05fefb3760f2dab1c2d75aa424baad7\"\u003e243aabc\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vuejs/core/issues/9546\"\u003e#9546\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vuejs/core/commit/bf5f0dd877dd3c23ce85c2cbc1dd771567e84c8c\"\u003e\u003ccode\u003ebf5f0dd\u003c/code\u003e\u003c/a\u003e release: v3.5.44\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vuejs/core/commit/693037486f38b3d3acf4cdf7b9850917c44cf9cb\"\u003e\u003ccode\u003e6930374\u003c/code\u003e\u003c/a\u003e fix(server-renderer): propagate async setup errors (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15857\"\u003e#15857\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vuejs/core/commit/8e8c54756f057a47d46ad4bfe32cf1409476ed3c\"\u003e\u003ccode\u003e8e8c547\u003c/code\u003e\u003c/a\u003e chore(deps): update all non-major dependencies (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15585\"\u003e#15585\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vuejs/core/commit/4cb0ca8e207fa1c7fe029fe15e75bb518cc912a7\"\u003e\u003ccode\u003e4cb0ca8\u003c/code\u003e\u003c/a\u003e chore(deps): update playground (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15685\"\u003e#15685\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vuejs/core/commit/e38478f5b36a377d2a465fb40c882a61b1910df2\"\u003e\u003ccode\u003ee38478f\u003c/code\u003e\u003c/a\u003e chore(deps): update dawidd6/action-download-artifact action to v27 (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15768\"\u003e#15768\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vuejs/core/commit/1caed5ab1b8e9821926402621f7364205b44e559\"\u003e\u003ccode\u003e1caed5a\u003c/code\u003e\u003c/a\u003e chore(deps): update compiler (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15586\"\u003e#15586\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vuejs/core/commit/a49f451851d4ec4be1a5353960c4e328afd13367\"\u003e\u003ccode\u003ea49f451\u003c/code\u003e\u003c/a\u003e chore(deps): update lint (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15680\"\u003e#15680\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vuejs/core/commit/219b85809996bc57e275ba2d4a2b2c4da025da96\"\u003e\u003ccode\u003e219b858\u003c/code\u003e\u003c/a\u003e chore(deps): update build (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15679\"\u003e#15679\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vuejs/core/commit/ff3501429d4970c37194708b055492a56d9e5be5\"\u003e\u003ccode\u003eff35014\u003c/code\u003e\u003c/a\u003e fix(transition): handle comment-wrapped component roots (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15853\"\u003e#15853\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vuejs/core/commit/d084b904903a7710ea19b7256b7c681e838eb63e\"\u003e\u003ccode\u003ed084b90\u003c/code\u003e\u003c/a\u003e fix(compiler-core): parenthesise v-for key in v-memo cache guard (\u003ca href=\"https://redirect.github.com/vuejs/core/issues/15724\"\u003e#15724\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vuejs/core/compare/v3.5.42...v3.5.44\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `sass` from 1.103.1 to 1.105.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/sass/dart-sass/releases\"\u003esass's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eDart Sass 1.105.1\u003c/h2\u003e\n\u003cp\u003eTo install Sass 1.105.1, download one of the packages below and \u003ca href=\"https://katiek2.github.io/path-doc/\"\u003eadd it to your PATH\u003c/a\u003e, or see \u003ca href=\"https://sass-lang.com/install\"\u003ethe Sass website\u003c/a\u003e for full installation instructions.\u003c/p\u003e\n\u003ch1\u003eChanges\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eImprove error messages for \u003ccode\u003e@extend\u003c/code\u003es across different media queries.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSee the \u003ca href=\"https://github.com/sass/dart-sass/blob/master/CHANGELOG.md#11051\"\u003efull changelog\u003c/a\u003e for changes in earlier releases.\u003c/p\u003e\n\u003ch2\u003eDart Sass 1.105.0\u003c/h2\u003e\n\u003cp\u003eTo install Sass 1.105.0, download one of the packages below and \u003ca href=\"https://katiek2.github.io/path-doc/\"\u003eadd it to your PATH\u003c/a\u003e, or see \u003ca href=\"https://sass-lang.com/install\"\u003ethe Sass website\u003c/a\u003e for full installation instructions.\u003c/p\u003e\n\u003ch1\u003eChanges\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eAdd support for first-class modules. These can be accessed using the new \u003ccode\u003emeta.load()\u003c/code\u003e and \u003ccode\u003emeta.get-module()\u003c/code\u003e functions, and may be passed as the \u003ccode\u003e$module\u003c/code\u003e argument to numerous eisting \u003ccode\u003esass:meta\u003c/code\u003e functions.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eAdd the \u003ccode\u003emeta.css()\u003c/code\u003e mixin, which includes CSS from a first-class module.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eJS API\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd a \u003ccode\u003eSassModule\u003c/code\u003e class and a corresponding \u003ccode\u003eValue.assertModule()\u003c/code\u003e method.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDart API\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd a \u003ccode\u003eSassModule\u003c/code\u003e class and a corresponding \u003ccode\u003eValue.assertModule()\u003c/code\u003e method.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSee the \u003ca href=\"https://github.com/sass/dart-sass/blob/master/CHANGELOG.md#11050\"\u003efull changelog\u003c/a\u003e for changes in earlier releases.\u003c/p\u003e\n\u003ch2\u003eDart Sass 1.104.1\u003c/h2\u003e\n\u003cp\u003eTo install Sass 1.104.1, download one of the packages below and \u003ca href=\"https://katiek2.github.io/path-doc/\"\u003eadd it to your PATH\u003c/a\u003e, or see \u003ca href=\"https://sass-lang.com/install\"\u003ethe Sass website\u003c/a\u003e for full installation instructions.\u003c/p\u003e\n\u003ch1\u003eChanges\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eFix a bug where loud comments before \u003ccode\u003e@use\u003c/code\u003e rules could be emitted multiple times under certain circumstances.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eFix a bug in which an invalid selector at the end of an indented syntax stylesheet would cause the parser to crash instead of emitting a useful error message.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommand Line Interface\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eMany-to-many compilations no longer compile any files that appear in the output directory if the output directory is also within the source directory. This fixes a bug where \u003ccode\u003e--watch\u003c/code\u003e mode could enter an infinite loop recompiling the same CSS file over and over.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/sass/dart-sass/blob/main/CHANGELOG.md\"\u003esass's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.105.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImprove error messages for \u003ccode\u003e@extend\u003c/code\u003es across different media queries.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.105.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eAdd support for first-class modules. These can be accessed using the new\n\u003ccode\u003emeta.load()\u003c/code\u003e and \u003ccode\u003emeta.get-module()\u003c/code\u003e functions, and may be passed as the\n\u003ccode\u003e$module\u003c/code\u003e argument to numerous eisting \u003ccode\u003esass:meta\u003c/code\u003e functions.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eAdd the \u003ccode\u003emeta.css()\u003c/code\u003e mixin, which includes CSS from a first-class module.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eJS API\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd a \u003ccode\u003eSassModule\u003c/code\u003e class and a corresponding \u003ccode\u003eValue.assertModule()\u003c/code\u003e method.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDart API\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd a \u003ccode\u003eSassModule\u003c/code\u003e class and a corresponding \u003ccode\u003eValue.assertModule()\u003c/code\u003e method.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.104.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eFix a bug where loud comments before \u003ccode\u003e@use\u003c/code\u003e rules could be emitted multiple\ntimes under certain circumstances.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eFix a bug in which an invalid selector at the end of an indented syntax\nstylesheet would cause the parser to crash instead of emitting a useful error\nmessage.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommand Line Interface\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eMany-to-many compilations no longer compile any files that appear in the\noutput directory if the output directory is also within the source directory.\nThis fixes a bug where \u003ccode\u003e--watch\u003c/code\u003e mode could enter an infinite loop recompiling\nthe same CSS file over and over.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSass now sets the modification time of output files to the time compilation\n\u003cem\u003estarted\u003c/em\u003e rather than the time it \u003cem\u003eended\u003c/em\u003e. This ensures that, if a source file\nis modified during compilation, \u003ccode\u003e--watch\u003c/code\u003e and \u003ccode\u003e--update\u003c/code\u003e mode will recompile\nthe outputs to include the new source file contents.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.104.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003ePotentially breaking compatibility fix:\u003c/strong\u003e Colors now convert the special\nvalues NaN and negative zero, as well as infinity and negative infinity for\npolar-hue channels, to 0 as per the CSS spec.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eThe special value negative zero is now serialized as \u003ccode\u003e-0\u003c/code\u003e instead of \u003ccode\u003e0\u003c/code\u003e for\ngreater compatibility when using it in CSS calculations.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sass/dart-sass/commit/db3c666fd8adedce310295580694ae05a01a00cf\"\u003e\u003ccode\u003edb3c666\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/sass/dart-sass/issues/2869\"\u003e#2869\u003c/a\u003e from sass/extend-media-errors\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sass/dart-sass/commit/2ac45157135726623bf010d75559cd659a953737\"\u003e\u003ccode\u003e2ac4515\u003c/code\u003e\u003c/a\u003e Improve span boundaries for media queries and selectors\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sass/dart-sass/commit/706cfbf3cc8726f57cbbe82c0c355fec6708f974\"\u003e\u003ccode\u003e706cfbf\u003c/code\u003e\u003c/a\u003e Fix \u003ccode\u003eInterpolationMap._expandInterpolationSpanRight()\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sass/dart-sass/commit/792a948d6fb02d81f57baedb0dedb882ba29a652\"\u003e\u003ccode\u003e792a948\u003c/code\u003e\u003c/a\u003e Bump bufbuild/buf-action from 1.5.0 to 1.6.0 in /.github/util/initialize (\u003ca href=\"https://redirect.github.com/sass/dart-sass/issues/2870\"\u003e#2870\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sass/dart-sass/commit/61ab7025b90012161540afa7cf5757b88633aeb2\"\u003e\u003ccode\u003e61ab702\u003c/code\u003e\u003c/a\u003e Improve errors for \u003ccode\u003e@extend\u003c/code\u003e across media queries\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sass/dart-sass/commit/288d4e202501ea1b943525c88e1d5e5cd225de62\"\u003e\u003ccode\u003e288d4e2\u003c/code\u003e\u003c/a\u003e Auto-merge dependabot PRs as the Sass bot account (\u003ca href=\"https://redirect.github.com/sass/dart-sass/issues/2866\"\u003e#2866\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sass/dart-sass/commit/4bf2b92404be16adc0fde90bd18abf462ccfcb44\"\u003e\u003ccode\u003e4bf2b92\u003c/code\u003e\u003c/a\u003e Bump zizmorcore/zizmor-action from 0.6.3 to 0.6.4 (\u003ca href=\"https://redirect.github.com/sass/dart-sass/issues/2865\"\u003e#2865\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sass/dart-sass/commit/850d57ef92a3212f144c3589cd99aec5f110a5d1\"\u003e\u003ccode\u003e850d57e\u003c/code\u003e\u003c/a\u003e [meta.load] Add support for \u003ccode\u003emeta.load()\u003c/code\u003e and related features (\u003ca href=\"https://redirect.github.com/sass/dart-sass/issues/2861\"\u003e#2861\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sass/dart-sass/commit/6180be0e2fce9b99142302822221ad74ba787bc0\"\u003e\u003ccode\u003e6180be0\u003c/code\u003e\u003c/a\u003e Bump postcss from 8.5.26 to 8.5.28 in /pkg/sass-parser (\u003ca href=\"https://redirect.github.com/sass/dart-sass/issues/2863\"\u003e#2863\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sass/dart-sass/commit/da84fb52f6b7576cc9516e12312bc33f93ac7596\"\u003e\u003ccode\u003eda84fb5\u003c/code\u003e\u003c/a\u003e Fix \u003ccode\u003e--watch\u003c/code\u003e not recompiling sources modified during a compilation (\u003ca href=\"https://redirect.github.com/sass/dart-sass/issues/2850\"\u003e#2850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/sass/dart-sass/compare/1.103.1...1.105.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `vue-tsc` from 3.3.11 to 3.3.13\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vuejs/language-tools/releases\"\u003evue-tsc's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.3.12\u003c/h2\u003e\n\u003ch3\u003elanguage-core\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003esecurity:\u003c/strong\u003e improved handling of untrusted Vue files (\u003ca href=\"https://github.com/vuejs/language-tools/commit/cea069882606d62b31199a75a3013b99d3db7144\"\u003ecea0698\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003efeat:\u003c/strong\u003e infer first parameter type of default factory for \u003ccode\u003edefineModel\u003c/code\u003e (\u003ca href=\"https://github.com/vuejs/language-tools/commit/1be73b8f944fc4b571e2122255403f1f9b8fdad2\"\u003e1be73b8\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003efeat:\u003c/strong\u003e report duplicate CSS module names, including non-identifier names (\u003ca href=\"https://github.com/vuejs/language-tools/commit/d41d919b003c541a3af26982d9509162d01b0997\"\u003ed41d919\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/language-tools/commit/ffb85e57723d4a1a5107d43c0a09408814c4608a\"\u003effb85e5\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003efix:\u003c/strong\u003e keep union props when using withDefaults (\u003ca href=\"https://github.com/vuejs/language-tools/commit/084f30f6b764d4da97d4bc3be9ff3020d74e42d5\"\u003e084f30f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003efix:\u003c/strong\u003e keep inference-only props string single-line with block comments (\u003ca href=\"https://github.com/vuejs/language-tools/commit/55ca36fa864f60a6bf0d1113e1070a5469956014\"\u003e55ca36f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003efix:\u003c/strong\u003e support calling template bindings without \u003ccode\u003e.value\u003c/code\u003e (\u003ca href=\"https://github.com/vuejs/language-tools/commit/7ad4a94196d856d105f57ba91683c3c54a3dbe9c\"\u003e7ad4a94\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003efix:\u003c/strong\u003e avoid type guards missing from the tsc bundle in template binding analysis (\u003ca href=\"https://github.com/vuejs/language-tools/commit/e743e80e127400bbf57f829f880bd433756e4882\"\u003ee743e80\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003efix:\u003c/strong\u003e pad directive hook signatures to check short-arity directive bindings (\u003ca href=\"https://github.com/vuejs/language-tools/commit/94052b85199f8d1ea5458c02ce70c3ce99a871ee\"\u003e94052b8\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003efix:\u003c/strong\u003e \u003ccode\u003evueCompilerOptions.plugins\u003c/code\u003e now overrides the inherited list instead of being deduplicated on resolve (\u003ca href=\"https://github.com/vuejs/language-tools/commit/4fa9e9784e4b5028c23b180839c2302d15e8a4a7\"\u003e4fa9e97\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/language-tools/commit/c0e5d2ed78a01e83af648c655381b12b405860dd\"\u003ec0e5d2e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003efix:\u003c/strong\u003e eliminate synthesized ignore comments across codegen, scoped class aliases and compound event handlers (\u003ca href=\"https://github.com/vuejs/language-tools/commit/dbcb7de7ad569057fe77d49f1d1b3ac8b4ec53d4\"\u003edbcb7de\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/language-tools/commit/eccb74a5d9af138dd585f678456fb0590052e5f3\"\u003eeccb74a\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/language-tools/commit/612ae323e3cd835d32dbcfadb720e8349d073361\"\u003e612ae32\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003efix:\u003c/strong\u003e correct template mapping boundaries and eliminate unmapped diagnostics (\u003ca href=\"https://github.com/vuejs/language-tools/commit/04954ddb380b459be3d3cd593b092511bb6531af\"\u003e04954dd\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/language-tools/commit/8c85e38870010ee69246ff9f88e38d9973aadd15\"\u003e8c85e38\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/language-tools/commit/af7a1944462e5dbfce254f0102a0ee281291452c\"\u003eaf7a194\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/language-tools/commit/90f82073b666cce5c7480689eecb398979b973aa\"\u003e90f8207\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003efix:\u003c/strong\u003e stop typedef JSDoc from leaking into emitted dts (\u003ca href=\"https://github.com/vuejs/language-tools/commit/d4d41393fa9a5e626b65633518bb5fa5647b7224\"\u003ed4d4139\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eperf:\u003c/strong\u003e precompile attribute glob matchers (\u003ca href=\"https://github.com/vuejs/language-tools/commit/7d2e6030c61180096ad1b8f49923fdf77d740abf\"\u003e7d2e603\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ecomponent-meta\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003efix:\u003c/strong\u003e stop checking JS Vue files as TS (\u003ca href=\"https://github.com/vuejs/language-tools/commit/045a6a7eb5afa987b09a85a483eef118cbdcaaf3\"\u003e045a6a7\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003etypescript-plugin\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003efix:\u003c/strong\u003e don't abort reference span fix-up at style-less files (\u003ca href=\"https://github.com/vuejs/language-tools/commit/e46126c95682751ed2702355794563550a270edf\"\u003ee46126c\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003etsc\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003efix:\u003c/strong\u003e prevent watch mode crash on incremental build (\u003ca href=\"https://github.com/vuejs/language-tools/commit/a59da367002ffeb530edd8371493539d5387ea33\"\u003ea59da36\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003evscode\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eperf:\u003c/strong\u003e reduce focus mode overhead (\u003ca href=\"https://github.com/vuejs/language-tools/commit/b0936d1c77b68dcc5d888dfd670fe527c5c8ce0d\"\u003eb0936d1\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eContributors: \u003ca href=\"https://github.com/johnsoncodehk\"\u003e\u003ccode\u003e@​johnsoncodehk\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/serkodev\"\u003e\u003ccode\u003e@​serkodev\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/KazariEX\"\u003e\u003ccode\u003e@​KazariEX\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/00200200\"\u003e\u003ccode\u003e@​00200200\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/camonunez\"\u003e\u003ccode\u003e@​camonunez\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/Cherry\"\u003e\u003ccode\u003e@​Cherry\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/hungateJoseph\"\u003e\u003ccode\u003e@​hungateJoseph\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/uturnr\"\u003e\u003ccode\u003e@​uturnr\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/ValentinYoushkevich\"\u003e\u003ccode\u003e@​ValentinYoushkevich\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/xia-chao\"\u003e\u003ccode\u003e@​xia-chao\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vuejs/language-tools/blob/master/CHANGELOG.md\"\u003evue-tsc's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e3.3.13 (2026-10-10)\u003c/h2\u003e\n\u003ch3\u003elanguage-core\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003efix:\u003c/strong\u003e generate setup macros without static imports (\u003ca href=\"https://github.com/vuejs/language-tools/commit/85f665e9397b028c48d3ddd6ecd9a46e3fadeb94\"\u003e85f665e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003evscode\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003efix:\u003c/strong\u003e avoid \u003ccode\u003eregisterHooks\u003c/code\u003e on buggy Node versions (\u003ca href=\"https://github.com/vuejs/language-tools/commit/7e0d6c4c62d3e0a356968593c34e4aae8e9b9cd5\"\u003e7e0d6c4\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eContributors: \u003ca href=\"https://github.com/KazariEX\"\u003e\u003ccode\u003e@​KazariEX\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/serkodev\"\u003e\u003ccode\u003e@​serkodev\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e3.3.12 (2026-10-02)\u003c/h2\u003e\n\u003ch3\u003elanguage-core\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003esecurity:\u003c/strong\u003e improved handling of untrusted Vue files (\u003ca href=\"https://github.com/vuejs/language-tools/commit/cea069882606d62b31199a75a3013b99d3db7144\"\u003ecea0698\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003efeat:\u003c/strong\u003e infer first parameter type of default factory for \u003ccode\u003edefineModel\u003c/code\u003e (\u003ca href=\"https://github.com/vuejs/language-tools/commit/1be73b8f944fc4b571e2122255403f1f9b8fdad2\"\u003e1be73b8\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003efeat:\u003c/strong\u003e report duplicate CSS module names, including non-identifier names (\u003ca href=\"https://github.com/vuejs/language-tools/commit/d41d919b003c541a3af26982d9509162d01b0997\"\u003ed41d919\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/language-tools/commit/ffb85e57723d4a1a5107d43c0a09408814c4608a\"\u003effb85e5\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003efix:\u003c/strong\u003e keep union props when using withDefaults (\u003ca href=\"https://github.com/vuejs/language-tools/commit/084f30f6b764d4da97d4bc3be9ff3020d74e42d5\"\u003e084f30f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003efix:\u003c/strong\u003e keep inference-only props string single-line with block comments (\u003ca href=\"https://github.com/vuejs/language-tools/commit/55ca36fa864f60a6bf0d1113e1070a5469956014\"\u003e55ca36f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003efix:\u003c/strong\u003e support calling template bindings without \u003ccode\u003e.value\u003c/code\u003e (\u003ca href=\"https://github.com/vuejs/language-tools/commit/7ad4a94196d856d105f57ba91683c3c54a3dbe9c\"\u003e7ad4a94\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003efix:\u003c/strong\u003e avoid type guards missing from the tsc bundle in template binding analysis (\u003ca href=\"https://github.com/vuejs/language-tools/commit/e743e80e127400bbf57f829f880bd433756e4882\"\u003ee743e80\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003efix:\u003c/strong\u003e pad directive hook signatures to check short-arity directive bindings (\u003ca href=\"https://github.com/vuejs/language-tools/commit/94052b85199f8d1ea5458c02ce70c3ce99a871ee\"\u003e94052b8\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003efix:\u003c/strong\u003e \u003ccode\u003evueCompilerOptions.plugins\u003c/code\u003e now overrides the inherited list instead of being deduplicated on resolve (\u003ca href=\"https://github.com/vuejs/language-tools/commit/4fa9e9784e4b5028c23b180839c2302d15e8a4a7\"\u003e4fa9e97\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/language-tools/commit/c0e5d2ed78a01e83af648c655381b12b405860dd\"\u003ec0e5d2e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003efix:\u003c/strong\u003e eliminate synthesized ignore comments across codegen, scoped class aliases and compound event handlers (\u003ca href=\"https://github.com/vuejs/language-tools/commit/dbcb7de7ad569057fe77d49f1d1b3ac8b4ec53d4\"\u003edbcb7de\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/language-tools/commit/eccb74a5d9af138dd585f678456fb0590052e5f3\"\u003eeccb74a\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/language-tools/commit/612ae323e3cd835d32dbcfadb720e8349d073361\"\u003e612ae32\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003efix:\u003c/strong\u003e correct template mapping boundaries and eliminate unmapped diagnostics (\u003ca href=\"https://github.com/vuejs/language-tools/commit/04954ddb380b459be3d3cd593b092511bb6531af\"\u003e04954dd\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/language-tools/commit/8c85e38870010ee69246ff9f88e38d9973aadd15\"\u003e8c85e38\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/language-tools/commit/af7a1944462e5dbfce254f0102a0ee281291452c\"\u003eaf7a194\u003c/a\u003e) (\u003ca href=\"https://github.com/vuejs/language-tools/commit/90f82073b666cce5c7480689eecb398979b973aa\"\u003e90f8207\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003efix:\u003c/strong\u003e stop typedef JSDoc from leaking into emitted dts (\u003ca href=\"https://github.com/vuejs/language-tools/commit/d4d41393fa9a5e626b65633518bb5fa5647b7224\"\u003ed4d4139\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eperf:\u003c/strong\u003e precompile attribute glob matchers (\u003ca href=\"https://github.com/vuejs/language-tools/commit/7d2e6030c61180096ad1b8f49923fdf77d740abf\"\u003e7d2e603\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ecomponent-meta\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003efix:\u003c/strong\u003e stop checking JS Vue files as TS (\u003ca href=\"https://github.com/vuejs/language-tools/commit/045a6a7eb5afa987b09a85a483eef118cbdcaaf3\"\u003e045a6a7\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003etypescript-plugin\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003efix:\u003c/strong\u003e don't abort reference span fix-up at style-less files (\u003ca href=\"https://github.com/vuejs/language-tools/commit/e46126c95682751ed2702355794563550a270edf\"\u003ee46126c\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003etsc\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003efix:\u003c/strong\u003e prevent watch mode crash on incremental build (\u003ca href=\"https://github.com/vuejs/language-tools/commit/a59da367002ffeb530edd8371493539d5387ea33\"\u003ea59da36\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003evscode\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eperf:\u003c/strong\u003e reduce focus mode overhead (\u003ca href=\"https://github.com/vuejs/language-tools/commit/b0936d1c77b68dcc5d888dfd670fe527c5c8ce0d\"\u003eb0936d1\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eContributors: \u003ca href=\"https://github.com/johnsoncodehk\"\u003e\u003ccode\u003e@​johnsoncodehk\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/serkodev\"\u003e\u003ccode\u003e@​serkodev\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/KazariEX\"\u003e\u003ccode\u003e@​KazariEX\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/00200200\"\u003e\u003ccode\u003e@​00200200\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/camonunez\"\u003e\u003ccode\u003e@​camonunez\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/Cherry\"\u003e\u003ccode\u003e@​Cherry\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/hungateJoseph\"\u003e\u003ccode\u003e@​hungateJoseph\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/uturnr\"\u003e\u003ccode\u003e@​uturnr\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/ValentinYoushkevich\"\u003e\u003ccode\u003e@​ValentinYoushkevich\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/xia-chao\"\u003e\u003ccode\u003e@​xia-chao\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vuejs/language-tools/commit/f2d92d3f1cb5513268fff358993f163e78d4821a\"\u003e\u003ccode\u003ef2d92d3\u003c/code\u003e\u003c/a\u003e v3.3.13 (\u003ca href=\"https://github.com/vuejs/language-tools/tree/HEAD/packages/tsc/issues/6263\"\u003e#6263\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vuejs/language-tools/commit/cea069882606d62b31199a75a3013b99d3db7144\"\u003e\u003ccode\u003ecea0698\u003c/code\u003e\u003c/a\u003e v3.3.12 (\u003ca href=\"https://github.com/vuejs/language-tools/tree/HEAD/packages/tsc/issues/6234\"\u003e#6234\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vuejs/language-tools/commit/d4d41393fa9a5e626b65633518bb5fa5647b7224\"\u003e\u003ccode\u003ed4d4139\u003c/code\u003e\u003c/a\u003e fix(language-core): stop typedef jsdoc from leaking into emitted dts\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vuejs/language-tools/commit/045a6a7eb5afa987b09a85a483eef118cbdcaaf3\"\u003e\u003ccode\u003e045a6a7\u003c/code\u003e\u003c/a\u003e fix(component-meta): stop checking JS Vue files as TS (\u003ca href=\"https://github.com/vuejs/language-tools/tree/HEAD/packages/tsc/issues/6231\"\u003e#6231\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vuejs/language-tools/commit/a59da367002ffeb530edd8371493539d5387ea33\"\u003e\u003ccode\u003ea59da36\u003c/code\u003e\u003c/a\u003e fix(tsc): prevent watch mode crash on incremental build (\u003ca href=\"https://github.com/vuejs/language-tools/tree/HEAD/packages/tsc/issues/6213\"\u003e#6213\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vuejs/language-tools/commit/94052b85199f8d1ea5458c02ce70c3ce99a871ee\"\u003e\u003ccode\u003e94052b8\u003c/code\u003e\u003c/a\u003e fix(language-core): pad directive hook signatures to check short-arity direct...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vuejs/language-tools/commit/ffb85e57723d4a1a5107d43c0a09408814c4608a\"\u003e\u003ccode\u003effb85e5\u003c/code\u003e\u003c/a\u003e fix(language-core): report duplicate non-identifier CSS module names (\u003ca href=\"https://github.com/vuejs/language-tools/tree/HEAD/packages/tsc/issues/6199\"\u003e#6199\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vuejs/language-tools/commit/d41d919b003c541a3af26982d9509162d01b0997\"\u003e\u003ccode\u003ed41d919\u003c/code\u003e\u003c/a\u003e feat(language-core): report duplicate CSS module names (\u003ca href=\"https://github.com/vuejs/language-tools/tree/HEAD/packages/tsc/issues/6198\"\u003e#6198\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vuejs/language-tools/commit/3167acfd69b98d1442e9cd21df8ba3c13f054451\"\u003e\u003ccode\u003e3167acf\u003c/code\u003e\u003c/a\u003e test(tsc): assert emitted declarations are self-contained and add jsxSlots te...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vuejs/language-tools/commit/d797f44e6e1a0a778c34db3ca7314ca75199f29c\"\u003e\u003ccode\u003ed797f44\u003c/code\u003e\u003c/a\u003e chore(deps): upgrade Vue to 3.6.0-rc.6 (\u003ca href=\"https://github.com/vuejs/language-tools/tree/HEAD/packages/tsc/issues/6189\"\u003e#6189\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vuejs/language-tools/commits/v3.3.13/packages/tsc\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@nestjs/common` from 12.0.1 to 12.1.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nestjs/nest/releases\"\u003e@​nestjs/common's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev12.1.3 (2026-10-12)\u003c/h2\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ecore\u003c/code\u003e, \u003ccode\u003emicroservices\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/18111\"\u003e#18111\u003c/a\u003e fix(core,microservices): flush buffered logs when initialization fails (\u003ca href=\"https://github.com/thekhegay\"\u003e\u003ccode\u003e@​thekhegay\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/17993\"\u003e#17993\u003c/a\u003e fix(core,microservices): run transient global enhancers on controllers (\u003ca href=\"https://github.com/johnnyhuirilef\"\u003e\u003ccode\u003e@​johnnyhuirilef\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eplatform-express\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/18110\"\u003e#18110\u003c/a\u003e fix(express): guard async request hook completion (\u003ca href=\"https://github.com/GiHoon1123\"\u003e\u003ccode\u003e@​GiHoon1123\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/17973\"\u003e#17973\u003c/a\u003e fix(express): destroy the \u003ccode\u003eStreamableFile\u003c/code\u003e source on client disconnect (\u003ca href=\"https://github.com/maxymlyskov\"\u003e\u003ccode\u003e@​maxymlyskov\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/17942\"\u003e#17942\u003c/a\u003e fix(express): run wildcard middleware on the bare global prefix path (\u003ca href=\"https://github.com/Chaoqi31\"\u003e\u003ccode\u003e@​Chaoqi31\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ecore\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/18104\"\u003e#18104\u003c/a\u003e fix(core): fail at startup for request-scoped class global enhancers (\u003ca href=\"https://github.com/thekhegay\"\u003e\u003ccode\u003e@​thekhegay\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/18066\"\u003e#18066\u003c/a\u003e fix(core): stop silently dropping request-scoped global enhancers (\u003ca href=\"https://github.com/OmBhandwaldar\"\u003e\u003ccode\u003e@​OmBhandwaldar\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/18072\"\u003e#18072\u003c/a\u003e fix(core): resolve uri versioned exclusions for the not-found handler (\u003ca href=\"https://github.com/basteez\"\u003e\u003ccode\u003e@​basteez\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/18075\"\u003e#18075\u003c/a\u003e fix(core): normalize slashes when mapping controllers for middleware (\u003ca href=\"https://github.com/basteez\"\u003e\u003ccode\u003e@​basteez\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/18086\"\u003e#18086\u003c/a\u003e fix(core): do not mutate the message when assigning an sse event id (\u003ca href=\"https://github.com/Metehan-Bicer\"\u003e\u003ccode\u003e@​Metehan-Bicer\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/18025\"\u003e#18025\u003c/a\u003e fix(core): end sse streams whose event data cannot be serialized (\u003ca href=\"https://github.com/OmBhandwaldar\"\u003e\u003ccode\u003e@​OmBhandwaldar\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/18011\"\u003e#18011\u003c/a\u003e fix(core): send status and headers set by handlers on sse responses (\u003ca href=\"https://github.com/johnnyhuirilef\"\u003e\u003ccode\u003e@​johnnyhuirilef\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/18021\"\u003e#18021\u003c/a\u003e fix(core): honor a shutdown signal received while close() is in flight (\u003ca href=\"https://github.com/maxymlyskov\"\u003e\u003ccode\u003e@​maxymlyskov\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/17987\"\u003e#17987\u003c/a\u003e fix(core): settle SSE lifecycle on early disconnect (\u003ca href=\"https://github.com/jackie-cqz\"\u003e\u003ccode\u003e@​jackie-cqz\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/17986\"\u003e#17986\u003c/a\u003e fix(core): commit SSE headers for empty streams (\u003ca href=\"https://github.com/jackie-cqz\"\u003e\u003ccode\u003e@​jackie-cqz\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/17978\"\u003e#17978\u003c/a\u003e fix...\n\n_Description has been truncated_","html_url":"https://github.com/MCXTeam/UnicoreCMS/pull/20","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/MCXTeam%2FUnicoreCMS/issues/20","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/20/packages"}},{"old_version":"2.26.0","new_version":"2.31.0","update_type":"minor","path":null,"pr_created_at":"2026-10-16T00:56:06.000Z","version_change":"2.26.0 → 2.31.0","issue":{"uuid":"5876348599","node_id":"PR_kwDOVA41Rs8AAAABIvsltw","number":61,"state":"closed","title":"Bump the all-prod group across 1 directory with 7 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-10-20T21:16:15.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-16T00:56:06.000Z","updated_at":"2026-10-20T21:16:18.000Z","time_to_close":418809,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"all-prod","update_count":7,"packages":[{"name":"@rooks/use-window-size","old_version":"4.6.1","new_version":"4.11.2","repository_url":"https://github.com/imbhargav5/rooks"},{"name":"lodash","old_version":"4.17.11","new_version":"4.18.1","repository_url":"https://github.com/lodash/lodash"},{"name":"@types/lodash","old_version":"4.14.153","new_version":"4.17.26","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"moment","old_version":"2.26.0","new_version":"2.31.0","repository_url":"https://github.com/moment/moment"},{"name":"redux-devtools-extension","old_version":"2.13.8","new_version":"2.13.9","repository_url":"https://github.com/zalmoxisus/redux-devtools-extension"},{"name":"voca","old_version":"1.4.0","new_version":"1.4.1","repository_url":"https://github.com/panzerdp/voca"},{"name":"@types/voca","old_version":"1.4.0","new_version":"1.4.6","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"}],"path":null,"ecosystem":"npm"},"body":"Bumps the all-prod group with 7 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [@rooks/use-window-size](https://github.com/imbhargav5/rooks/tree/HEAD/packages/window-size) | `4.6.1` | `4.11.2` |\n| [lodash](https://github.com/lodash/lodash) | `4.17.11` | `4.18.1` |\n| [@types/lodash](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/lodash) | `4.14.153` | `4.17.26` |\n| [moment](https://github.com/moment/moment) | `2.26.0` | `2.31.0` |\n| [redux-devtools-extension](https://github.com/zalmoxisus/redux-devtools-extension) | `2.13.8` | `2.13.9` |\n| [voca](https://github.com/panzerdp/voca) | `1.4.0` | `1.4.1` |\n| [@types/voca](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/voca) | `1.4.0` | `1.4.6` |\n\n\nUpdates `@rooks/use-window-size` from 4.6.1 to 4.11.2\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/imbhargav5/rooks/commit/06505ee4cb6785a3edc51ccf99cb6401823a5171\"\u003e\u003ccode\u003e06505ee\u003c/code\u003e\u003c/a\u003e v4.11.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/imbhargav5/rooks/commit/333dac254010f1a9eb04bd846d1089bcf7a75fea\"\u003e\u003ccode\u003e333dac2\u003c/code\u003e\u003c/a\u003e update readme images\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/imbhargav5/rooks/commit/0f163c1b47a40459f8070239dfbf9ebde4d155b8\"\u003e\u003ccode\u003e0f163c1\u003c/code\u003e\u003c/a\u003e v4.11.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/imbhargav5/rooks/commit/a84cb3b10e24b8c088ad75fb6f0106aff4f172ac\"\u003e\u003ccode\u003ea84cb3b\u003c/code\u003e\u003c/a\u003e update readme\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/imbhargav5/rooks/commit/91a8a1d3598527b916a247d370612f9af6d40594\"\u003e\u003ccode\u003e91a8a1d\u003c/code\u003e\u003c/a\u003e v4.11.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/imbhargav5/rooks/commit/c24b903fe26de2a6e881790749a291552a4395cd\"\u003e\u003ccode\u003ec24b903\u003c/code\u003e\u003c/a\u003e v4.10.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/imbhargav5/rooks/commit/88d2b9eb6e408ad2458a39e0ed3c8fa2b1664ce9\"\u003e\u003ccode\u003e88d2b9e\u003c/code\u003e\u003c/a\u003e v4.10.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/imbhargav5/rooks/commit/b71eb75f82f653d8d6ccc88034220a0743959743\"\u003e\u003ccode\u003eb71eb75\u003c/code\u003e\u003c/a\u003e v4.9.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/imbhargav5/rooks/commit/d1a9b493367d81d3822326acdc9d23718671cfa4\"\u003e\u003ccode\u003ed1a9b49\u003c/code\u003e\u003c/a\u003e v4.9.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/imbhargav5/rooks/commit/23c70566e0f6d85534d3da21692415e473e1240c\"\u003e\u003ccode\u003e23c7056\u003c/code\u003e\u003c/a\u003e Reduce npm bundle size (\u003ca href=\"https://github.com/imbhargav5/rooks/tree/HEAD/packages/window-size/issues/378\"\u003e#378\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/imbhargav5/rooks/commits/v4.11.2/packages/window-size\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `lodash` from 4.17.11 to 4.18.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/lodash/lodash/releases\"\u003elodash's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.18.1\u003c/h2\u003e\n\u003ch2\u003eBugs\u003c/h2\u003e\n\u003cp\u003eFixes a \u003ccode\u003eReferenceError\u003c/code\u003e issue in \u003ccode\u003elodash\u003c/code\u003e \u003ccode\u003elodash-es\u003c/code\u003e \u003ccode\u003elodash-amd\u003c/code\u003e and \u003ccode\u003elodash.template\u003c/code\u003e when using the \u003ccode\u003etemplate\u003c/code\u003e and \u003ccode\u003efromPairs\u003c/code\u003e functions from the modular builds. See \u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6167#issuecomment-4165269769\"\u003elodash/lodash#6167\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eThese defects were related to how lodash distributions are built from the main branch using \u003ca href=\"https://github.com/lodash-archive/lodash-cli\"\u003ehttps://github.com/lodash-archive/lodash-cli\u003c/a\u003e. When internal dependencies change inside lodash functions, equivalent updates need to be made to a mapping in the lodash-cli. (hey, it was ahead of its time once upon a time!). We know this, but we missed it in the last release. It's the kind of thing that passes in CI, but fails bc the build is not the same thing you tested.\u003c/p\u003e\n\u003cp\u003eThere is no diff on main for this, but you can see the diffs for each of the npm packages on their respective branches:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003elodash\u003c/code\u003e: \u003ca href=\"https://github.com/lodash/lodash/compare/4.18.0-npm...4.18.1-npm\"\u003ehttps://github.com/lodash/lodash/compare/4.18.0-npm...4.18.1-npm\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003elodash-es\u003c/code\u003e: \u003ca href=\"https://github.com/lodash/lodash/compare/4.18.0-es...4.18.1-es\"\u003ehttps://github.com/lodash/lodash/compare/4.18.0-es...4.18.1-es\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003elodash-amd\u003c/code\u003e: \u003ca href=\"https://github.com/lodash/lodash/compare/4.18.0-amd...4.18.1-amd\"\u003ehttps://github.com/lodash/lodash/compare/4.18.0-amd...4.18.1-amd\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003elodash.template\u003c/code\u003e\u003ca href=\"https://github.com/lodash/lodash/compare/4.18.0-npm-packages...4.18.1-npm-packages\"\u003ehttps://github.com/lodash/lodash/compare/4.18.0-npm-packages...4.18.1-npm-packages\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.18.0\u003c/h2\u003e\n\u003ch2\u003ev4.18.0\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/lodash/lodash/compare/4.17.23...4.18.0\"\u003ehttps://github.com/lodash/lodash/compare/4.17.23...4.18.0\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cp\u003e\u003cstrong\u003e\u003ccode\u003e_.unset\u003c/code\u003e / \u003ccode\u003e_.omit\u003c/code\u003e\u003c/strong\u003e: Fixed prototype pollution via \u003ccode\u003econstructor\u003c/code\u003e/\u003ccode\u003eprototype\u003c/code\u003e path traversal (\u003ca href=\"https://github.com/lodash/lodash/security/advisories/GHSA-f23m-r3pf-42rh\"\u003eGHSA-f23m-r3pf-42rh\u003c/a\u003e, \u003ca href=\"https://github.com/lodash/lodash/commit/fe8d32eda854377349a4f922ab7655c8e5df9a0b\"\u003efe8d32e\u003c/a\u003e). Previously, array-wrapped path segments and primitive roots could bypass the existing guards, allowing deletion of properties from built-in prototypes. Now \u003ccode\u003econstructor\u003c/code\u003e and \u003ccode\u003eprototype\u003c/code\u003e are blocked unconditionally as non-terminal path keys, matching \u003ccode\u003ebaseSet\u003c/code\u003e. Calls that previously returned \u003ccode\u003etrue\u003c/code\u003e and deleted the property now return \u003ccode\u003efalse\u003c/code\u003e and leave the target untouched.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e\u003ccode\u003e_.template\u003c/code\u003e\u003c/strong\u003e: Fixed code injection via \u003ccode\u003eimports\u003c/code\u003e keys (\u003ca href=\"https://github.com/lodash/lodash/security/advisories/GHSA-r5fr-rjxr-66jc\"\u003eGHSA-r5fr-rjxr-66jc\u003c/a\u003e, CVE-2026-4800, \u003ca href=\"https://github.com/lodash/lodash/commit/879aaa93132d78c2f8d20c60279da9f8b21576d6\"\u003e879aaa9\u003c/a\u003e). Fixes an incomplete patch for CVE-2021-23337. The \u003ccode\u003evariable\u003c/code\u003e option was validated against \u003ccode\u003ereForbiddenIdentifierChars\u003c/code\u003e but \u003ccode\u003eimportsKeys\u003c/code\u003e was left unguarded, allowing code injection via the same \u003ccode\u003eFunction()\u003c/code\u003e constructor sink. \u003ccode\u003eimports\u003c/code\u003e keys containing forbidden identifier characters now throw \u003ccode\u003e\u0026quot;Invalid imports option passed into _.template\u0026quot;\u003c/code\u003e.\u003c/p\u003e\n\u003ch3\u003eDocs\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd security notice for \u003ccode\u003e_.template\u003c/code\u003e in threat model and API docs (\u003ca href=\"https://redirect.github.com/lodash/lodash/pull/6099\"\u003e#6099\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocument \u003ccode\u003elower \u0026gt; upper\u003c/code\u003e behavior in \u003ccode\u003e_.random\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/lodash/lodash/pull/6115\"\u003e#6115\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix quotes in \u003ccode\u003e_.compact\u003c/code\u003e jsdoc (\u003ca href=\"https://redirect.github.com/lodash/lodash/pull/6090\"\u003e#6090\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e\u003ccode\u003elodash.*\u003c/code\u003e modular packages\u003c/h3\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/lodash/lodash/pull/6157\"\u003eDiff\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eWe have also regenerated and published a select number of the \u003ccode\u003elodash.*\u003c/code\u003e modular packages.\u003c/p\u003e\n\u003cp\u003eThese modular packages had fallen out of sync significantly from the minor/patch updates to lodash. Specifically, we have brought the following packages up to parity w/ the latest lodash release because they have had CVEs on them in the past:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.orderby\"\u003elodash.orderby\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.tonumber\"\u003elodash.tonumber\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.trim\"\u003elodash.trim\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.trimend\"\u003elodash.trimend\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.sortedindexby\"\u003elodash.sortedindexby\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.zipobjectdeep\"\u003elodash.zipobjectdeep\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.unset\"\u003elodash.unset\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.omit\"\u003elodash.omit\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.template\"\u003elodash.template\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/cb0b9b9212521c08e3eafe7c8cb0af1b42b6649e\"\u003e\u003ccode\u003ecb0b9b9\u003c/code\u003e\u003c/a\u003e release(patch): bump main to 4.18.1 (\u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6177\"\u003e#6177\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/75535f57883b7225adb96de1cfc1cd4169cfcb51\"\u003e\u003ccode\u003e75535f5\u003c/code\u003e\u003c/a\u003e chore: prune stale advisory refs (\u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6170\"\u003e#6170\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/62e91bc6a39c98d85b9ada8c44d40593deaf82a4\"\u003e\u003ccode\u003e62e91bc\u003c/code\u003e\u003c/a\u003e docs: remove n_ Node.js \u0026lt; 6 REPL note from README (\u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6165\"\u003e#6165\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/59be2de61f8aa9461c7856533b51d31b7d8babc4\"\u003e\u003ccode\u003e59be2de\u003c/code\u003e\u003c/a\u003e release(minor): bump to 4.18.0 (\u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6161\"\u003e#6161\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/af634573030f979194871da7c68f79420992f53d\"\u003e\u003ccode\u003eaf63457\u003c/code\u003e\u003c/a\u003e fix: broken tests for _.template 879aaa9\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/1073a7693e1727e0cf3641e5f71f75ddcf8de7c0\"\u003e\u003ccode\u003e1073a76\u003c/code\u003e\u003c/a\u003e fix: linting issues\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/879aaa93132d78c2f8d20c60279da9f8b21576d6\"\u003e\u003ccode\u003e879aaa9\u003c/code\u003e\u003c/a\u003e fix: validate imports keys in _.template\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/fe8d32eda854377349a4f922ab7655c8e5df9a0b\"\u003e\u003ccode\u003efe8d32e\u003c/code\u003e\u003c/a\u003e fix: block prototype pollution in baseUnset via constructor/prototype traversal\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/18ba0a32f42fd02117f096b032f89c984173462d\"\u003e\u003ccode\u003e18ba0a3\u003c/code\u003e\u003c/a\u003e refactor(fromPairs): use baseAssignValue for consistent assignment (\u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6153\"\u003e#6153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/b8190803d48d60b8c80ad45d39125f32fa618cb2\"\u003e\u003ccode\u003eb819080\u003c/code\u003e\u003c/a\u003e ci: add dist sync validation workflow (\u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6137\"\u003e#6137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/lodash/lodash/compare/4.17.11...4.18.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@types/lodash` from 4.14.153 to 4.17.26\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/lodash\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `moment` from 2.26.0 to 2.31.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/releases\"\u003emoment's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.31.0\u003c/h2\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.30.1\u003c/h2\u003e\n\u003cp\u003eNote - this was not a new release, but rather just updating GitHub's \u003ccode\u003elatest\u003c/code\u003e release to indicate the existing version \u003ccode\u003e2.30.1\u003c/code\u003e from Dec 27, 2023.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/blob/develop/CHANGELOG.md\"\u003emoment's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch3\u003e2.31.0\u003c/h3\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e2.30.1\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/15b45d48a176312e8f34143c5a800090abf4787f\"\u003e\u003ccode\u003e15b45d4\u003c/code\u003e\u003c/a\u003e [pkg] Build 2.31.0 (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6452\"\u003e#6452\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/631cd81454ee001e1f508e21270eae0b6bb62974\"\u003e\u003ccode\u003e631cd81\u003c/code\u003e\u003c/a\u003e [pkg] Update changelog for upcoming release (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6394\"\u003e#6394\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/6caff9e0d54e85a63a6eb97d7361f1da35bc58f4\"\u003e\u003ccode\u003e6caff9e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/710703b7eac93535ad125cbf4feb3d42afed6fb3\"\u003e\u003ccode\u003e710703b\u003c/code\u003e\u003c/a\u003e [feature] Add internal date-default hook for Moment Timezone (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6451\"\u003e#6451\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/863ed940556e6e63c43de23981a4853036a003ac\"\u003e\u003ccode\u003e863ed94\u003c/code\u003e\u003c/a\u003e [bugfix] Add stack traces to conditional deprecation warnings (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6450\"\u003e#6450\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/2c7abe1c42ee15445d30c2c5d536750a1e43a09a\"\u003e\u003ccode\u003e2c7abe1\u003c/code\u003e\u003c/a\u003e [bugfix] Apply postformat to locale relative time methods (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6448\"\u003e#6448\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/9c45ac38690c649c95e19923276b63da5fe2be26\"\u003e\u003ccode\u003e9c45ac3\u003c/code\u003e\u003c/a\u003e [bugfix] Include metadata in all-locales bundle (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6447\"\u003e#6447\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/f6eefc5fc7b44ceccbd007aeffc48ebc5eac30fa\"\u003e\u003ccode\u003ef6eefc5\u003c/code\u003e\u003c/a\u003e [bugfix] Validate timezone offset range (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6446\"\u003e#6446\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/136b441794a3bb207d593add3b59e9de0e062523\"\u003e\u003ccode\u003e136b441\u003c/code\u003e\u003c/a\u003e [bugfix] Avoid Object.assign in duration.humanize (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6443\"\u003e#6443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/0d1050437b40f66ac47e14b285bb3d09676cf2e0\"\u003e\u003ccode\u003e0d10504\u003c/code\u003e\u003c/a\u003e [bugfix] Fix locale('\u003cstrong\u003eproto\u003c/strong\u003e') corrupting the global locale (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6442\"\u003e#6442\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moment/moment/compare/2.26.0...2.31.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for moment since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `redux-devtools-extension` from 2.13.8 to 2.13.9\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/zalmoxisus/redux-devtools-extension/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `voca` from 1.4.0 to 1.4.1\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/panzerdp/voca/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@types/voca` from 1.4.0 to 1.4.6\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/voca\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/midst-press/midst-web/pull/61","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/midst-press%2Fmidst-web/issues/61","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/61/packages"}},{"old_version":"2.30.1","new_version":"2.31.0","update_type":"minor","path":null,"pr_created_at":"2026-10-13T16:58:02.000Z","version_change":"2.30.1 → 2.31.0","issue":{"uuid":"5834356709","node_id":"PR_kwDOC8t2HM8AAAABIOHL8A","number":5668,"state":"open","title":"chore(deps): bump moment from 2.30.1 to 2.31.0","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":6,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-13T16:58:02.000Z","updated_at":"2026-10-22T12:03:29.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"moment","old_version":"2.30.1","new_version":"2.31.0","repository_url":"https://github.com/moment/moment"}],"path":null,"ecosystem":"npm"},"body":"Bumps [moment](https://github.com/moment/moment) from 2.30.1 to 2.31.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/releases\"\u003emoment's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.31.0\u003c/h2\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/blob/develop/CHANGELOG.md\"\u003emoment's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch3\u003e2.31.0\u003c/h3\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/15b45d48a176312e8f34143c5a800090abf4787f\"\u003e\u003ccode\u003e15b45d4\u003c/code\u003e\u003c/a\u003e [pkg] Build 2.31.0 (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6452\"\u003e#6452\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/631cd81454ee001e1f508e21270eae0b6bb62974\"\u003e\u003ccode\u003e631cd81\u003c/code\u003e\u003c/a\u003e [pkg] Update changelog for upcoming release (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6394\"\u003e#6394\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/6caff9e0d54e85a63a6eb97d7361f1da35bc58f4\"\u003e\u003ccode\u003e6caff9e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/710703b7eac93535ad125cbf4feb3d42afed6fb3\"\u003e\u003ccode\u003e710703b\u003c/code\u003e\u003c/a\u003e [feature] Add internal date-default hook for Moment Timezone (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6451\"\u003e#6451\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/863ed940556e6e63c43de23981a4853036a003ac\"\u003e\u003ccode\u003e863ed94\u003c/code\u003e\u003c/a\u003e [bugfix] Add stack traces to conditional deprecation warnings (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6450\"\u003e#6450\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/2c7abe1c42ee15445d30c2c5d536750a1e43a09a\"\u003e\u003ccode\u003e2c7abe1\u003c/code\u003e\u003c/a\u003e [bugfix] Apply postformat to locale relative time methods (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6448\"\u003e#6448\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/9c45ac38690c649c95e19923276b63da5fe2be26\"\u003e\u003ccode\u003e9c45ac3\u003c/code\u003e\u003c/a\u003e [bugfix] Include metadata in all-locales bundle (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6447\"\u003e#6447\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/f6eefc5fc7b44ceccbd007aeffc48ebc5eac30fa\"\u003e\u003ccode\u003ef6eefc5\u003c/code\u003e\u003c/a\u003e [bugfix] Validate timezone offset range (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6446\"\u003e#6446\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/136b441794a3bb207d593add3b59e9de0e062523\"\u003e\u003ccode\u003e136b441\u003c/code\u003e\u003c/a\u003e [bugfix] Avoid Object.assign in duration.humanize (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6443\"\u003e#6443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/0d1050437b40f66ac47e14b285bb3d09676cf2e0\"\u003e\u003ccode\u003e0d10504\u003c/code\u003e\u003c/a\u003e [bugfix] Fix locale('\u003cstrong\u003eproto\u003c/strong\u003e') corrupting the global locale (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6442\"\u003e#6442\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moment/moment/compare/2.30.1...2.31.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for moment since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n","html_url":"https://github.com/rudderlabs/rudder-transformer/pull/5668","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/rudderlabs%2Frudder-transformer/issues/5668","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/5668/packages"}},{"old_version":"2.30.1","new_version":"2.31.0","update_type":"minor","path":null,"pr_created_at":"2026-10-11T08:02:13.000Z","version_change":"2.30.1 → 2.31.0","issue":{"uuid":"5799225961","node_id":"PR_kwDODLSLdM8AAAABHyaMPQ","number":929,"state":"closed","title":"Bump moment from 2.30.1 to 2.31.0","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-10-11T08:08:44.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-11T08:02:13.000Z","updated_at":"2026-10-11T08:08:53.000Z","time_to_close":391,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"moment","old_version":"2.30.1","new_version":"2.31.0","repository_url":"https://github.com/moment/moment"}],"path":null,"ecosystem":"npm"},"body":"Bumps [moment](https://github.com/moment/moment) from 2.30.1 to 2.31.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/releases\"\u003emoment's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.31.0\u003c/h2\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/blob/develop/CHANGELOG.md\"\u003emoment's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch3\u003e2.31.0\u003c/h3\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/15b45d48a176312e8f34143c5a800090abf4787f\"\u003e\u003ccode\u003e15b45d4\u003c/code\u003e\u003c/a\u003e [pkg] Build 2.31.0 (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6452\"\u003e#6452\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/631cd81454ee001e1f508e21270eae0b6bb62974\"\u003e\u003ccode\u003e631cd81\u003c/code\u003e\u003c/a\u003e [pkg] Update changelog for upcoming release (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6394\"\u003e#6394\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/6caff9e0d54e85a63a6eb97d7361f1da35bc58f4\"\u003e\u003ccode\u003e6caff9e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/710703b7eac93535ad125cbf4feb3d42afed6fb3\"\u003e\u003ccode\u003e710703b\u003c/code\u003e\u003c/a\u003e [feature] Add internal date-default hook for Moment Timezone (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6451\"\u003e#6451\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/863ed940556e6e63c43de23981a4853036a003ac\"\u003e\u003ccode\u003e863ed94\u003c/code\u003e\u003c/a\u003e [bugfix] Add stack traces to conditional deprecation warnings (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6450\"\u003e#6450\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/2c7abe1c42ee15445d30c2c5d536750a1e43a09a\"\u003e\u003ccode\u003e2c7abe1\u003c/code\u003e\u003c/a\u003e [bugfix] Apply postformat to locale relative time methods (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6448\"\u003e#6448\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/9c45ac38690c649c95e19923276b63da5fe2be26\"\u003e\u003ccode\u003e9c45ac3\u003c/code\u003e\u003c/a\u003e [bugfix] Include metadata in all-locales bundle (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6447\"\u003e#6447\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/f6eefc5fc7b44ceccbd007aeffc48ebc5eac30fa\"\u003e\u003ccode\u003ef6eefc5\u003c/code\u003e\u003c/a\u003e [bugfix] Validate timezone offset range (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6446\"\u003e#6446\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/136b441794a3bb207d593add3b59e9de0e062523\"\u003e\u003ccode\u003e136b441\u003c/code\u003e\u003c/a\u003e [bugfix] Avoid Object.assign in duration.humanize (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6443\"\u003e#6443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/0d1050437b40f66ac47e14b285bb3d09676cf2e0\"\u003e\u003ccode\u003e0d10504\u003c/code\u003e\u003c/a\u003e [bugfix] Fix locale('\u003cstrong\u003eproto\u003c/strong\u003e') corrupting the global locale (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6442\"\u003e#6442\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moment/moment/compare/2.30.1...2.31.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for moment since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=moment\u0026package-manager=npm_and_yarn\u0026previous-version=2.30.1\u0026new-version=2.31.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/DrozmotiX/ioBroker.vedirect/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/DrozmotiX/ioBroker.vedirect/pull/929","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/DrozmotiX%2FioBroker.vedirect/issues/929","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/929/packages"}},{"old_version":"2.30.1","new_version":"2.31.0","update_type":"minor","path":null,"pr_created_at":"2026-10-09T11:37:43.000Z","version_change":"2.30.1 → 2.31.0","issue":{"uuid":"5777457520","node_id":"PR_kwDOUvKxIM8AAAABHhhI1Q","number":42,"state":"open","title":"chore(deps): bump the production-dependencies group across 1 directory with 56 updates","user":"dependabot[bot]","labels":["dependencies","backend","frontend","size/xl"],"assignees":[],"locked":false,"comments_count":4,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-09T11:37:43.000Z","updated_at":"2026-10-09T11:41:10.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"production-dependencies","update_count":56,"packages":[{"name":"@tanstack/react-query","old_version":"5.90.12","new_version":"5.104.1","repository_url":"https://github.com/TanStack/query"},{"name":"express-rate-limit","old_version":"8.2.1","new_version":"8.7.1","repository_url":"https://github.com/express-rate-limit/express-rate-limit"},{"name":"react-joyride","old_version":"3.0.0-7","new_version":"3.2.0","repository_url":"https://github.com/gilbarbara/react-joyride"},{"name":"react-native-reanimated","old_version":"4.2.0","new_version":"4.7.1","repository_url":"https://github.com/software-mansion/react-native-reanimated"},{"name":"react-native-worklets","old_version":"0.7.1","new_version":"0.13.0","repository_url":"https://github.com/software-mansion/react-native-reanimated"},{"name":"resend","old_version":"6.5.2","new_version":"6.32.0","repository_url":"https://github.com/resend/resend-node"},{"name":"swagger-jsdoc","old_version":"6.2.8","new_version":"6.3.0","repository_url":"https://github.com/Surnet/swagger-jsdoc"},{"name":"react","old_version":"19.2.1","new_version":"19.3.0","repository_url":"https://github.com/react/react"},{"name":"react-dom","old_version":"19.2.1","new_version":"19.3.0","repository_url":"https://github.com/react/react"},{"name":"@esbuild/linux-x64","old_version":"0.27.1","new_version":"0.28.2","repository_url":"https://github.com/evanw/esbuild"},{"name":"@rollup/rollup-linux-x64-gnu","old_version":"4.53.3","new_version":"4.64.0","repository_url":"https://github.com/rollup/rollup"},{"name":"@tailwindcss/oxide-linux-x64-gnu","old_version":"4.1.17","new_version":"4.3.3","repository_url":"https://github.com/tailwindlabs/tailwindcss"},{"name":"lightningcss-linux-x64-gnu","old_version":"1.30.2","new_version":"1.33.0","repository_url":"https://github.com/parcel-bundler/lightningcss"},{"name":"cors","old_version":"2.8.5","new_version":"2.8.6","repository_url":"https://github.com/expressjs/cors"},{"name":"helmet","old_version":"8.1.0","new_version":"8.3.0","repository_url":"https://github.com/helmetjs/helmet"},{"name":"morgan","old_version":"1.10.1","new_version":"1.12.1","repository_url":"https://github.com/expressjs/morgan"},{"name":"multer","old_version":"2.0.2","new_version":"2.4.0","repository_url":"https://github.com/expressjs/multer"},{"name":"@types/multer","old_version":"2.0.0","new_version":"2.3.0","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"papaparse","old_version":"5.5.3","new_version":"5.7.0","repository_url":"https://github.com/mholt/PapaParse"},{"name":"@types/papaparse","old_version":"5.5.1","new_version":"5.5.2","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"zod","old_version":"4.0.17","new_version":"3.25.76","repository_url":"https://github.com/colinhacks/zod"},{"name":"@opentelemetry/api","old_version":"1.9.0","new_version":"1.9.1","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@opentelemetry/core","old_version":"2.2.0","new_version":"2.11.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@opentelemetry/instrumentation","old_version":"0.208.0","new_version":"0.222.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@opentelemetry/instrumentation-http","old_version":"0.208.0","new_version":"0.222.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@opentelemetry/semantic-conventions","old_version":"1.38.0","new_version":"1.43.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@anthropic-ai/sdk","old_version":"0.52.0","new_version":"0.131.0","repository_url":"https://github.com/anthropics/anthropic-sdk-typescript"},{"name":"date-fns","old_version":"4.1.0","new_version":"4.4.0","repository_url":"https://github.com/date-fns/date-fns"},{"name":"knex","old_version":"3.1.0","new_version":"3.3.0","repository_url":"https://github.com/knex/knex"},{"name":"pg","old_version":"8.16.3","new_version":"8.23.1","repository_url":"https://github.com/brianc/node-postgres"},{"name":"pino","old_version":"10.1.0","new_version":"10.4.0","repository_url":"https://github.com/pinojs/pino"},{"name":"pino-pretty","old_version":"13.1.3","new_version":"13.2.0","repository_url":"https://github.com/pinojs/pino-pretty"},{"name":"sanitize-html","old_version":"2.17.0","new_version":"2.18.0","repository_url":"https://github.com/apostrophecms/apostrophe"},{"name":"@react-navigation/bottom-tabs","old_version":"7.8.12","new_version":"7.20.0","repository_url":"https://github.com/react-navigation/react-navigation"},{"name":"@react-navigation/native","old_version":"7.1.25","new_version":"7.5.0","repository_url":"https://github.com/react-navigation/react-navigation"},{"name":"@react-navigation/native-stack","old_version":"7.8.6","new_version":"7.20.0","repository_url":"https://github.com/react-navigation/react-navigation"},{"name":"react-native-maps","old_version":"1.26.20","new_version":"1.29.11","repository_url":"https://github.com/react-native-maps/react-native-maps"},{"name":"react-native-paper","old_version":"5.14.5","new_version":"5.15.3","repository_url":"https://github.com/callstack/react-native-paper"},{"name":"react-native-safe-area-context","old_version":"5.6.2","new_version":"5.10.1","repository_url":"https://github.com/appandflow/react-native-safe-area-context"},{"name":"react-native-screens","old_version":"4.18.0","new_version":"4.28.0","repository_url":"https://github.com/software-mansion/react-native-screens"},{"name":"react-native-signature-canvas","old_version":"5.0.1","new_version":"5.1.1","repository_url":"https://github.com/YanYuanFE/react-native-signature-canvas"},{"name":"react-native-web","old_version":"0.21.2","new_version":"0.21.3","repository_url":"https://github.com/necolas/react-native-web"},{"name":"zustand","old_version":"5.0.9","new_version":"5.0.15","repository_url":"https://github.com/pmndrs/zustand"},{"name":"@headlessui/react","old_version":"2.2.9","new_version":"2.2.10","repository_url":"https://github.com/tailwindlabs/headlessui"},{"name":"@hookform/resolvers","old_version":"5.2.2","new_version":"5.9.1","repository_url":"https://github.com/react-hook-form/resolvers"},{"name":"moment","old_version":"2.30.1","new_version":"2.31.0","repository_url":"https://github.com/moment/moment"},{"name":"react-big-calendar","old_version":"1.19.4","new_version":"1.20.0","repository_url":"https://github.com/bigcalendar/react-big-calendar"},{"name":"react-hook-form","old_version":"7.68.0","new_version":"7.89.0","repository_url":"https://github.com/react-hook-form/react-hook-form"},{"name":"react-hot-toast","old_version":"2.6.0","new_version":"2.6.1","repository_url":"https://github.com/timolins/react-hot-toast"},{"name":"react-is","old_version":"19.2.1","new_version":"19.3.0","repository_url":"https://github.com/react/react"},{"name":"react-router-dom","old_version":"7.10.1","new_version":"7.18.4","repository_url":"https://github.com/remix-run/react-router"},{"name":"recharts","old_version":"3.5.1","new_version":"3.10.1","repository_url":"https://github.com/recharts/recharts"},{"name":"jspdf-autotable","old_version":"5.0.2","new_version":"5.0.8","repository_url":"https://github.com/simonbengtsson/jsPDF-AutoTable"},{"name":"pdfkit","old_version":"0.17.2","new_version":"0.20.2","repository_url":"https://github.com/foliojs/pdfkit"},{"name":"axios","old_version":"1.13.2","new_version":"1.20.0","repository_url":"https://github.com/axios/axios"},{"name":"driver.js","old_version":"1.4.0","new_version":"1.9.0","repository_url":"https://github.com/nilbuild/driver.js"}],"path":null,"ecosystem":"npm"},"body":"Bumps the production-dependencies group with 56 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.90.12` | `5.104.1` |\n| [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit) | `8.2.1` | `8.7.1` |\n| [react-joyride](https://github.com/gilbarbara/react-joyride) | `3.0.0-7` | `3.2.0` |\n| [react-native-reanimated](https://github.com/software-mansion/react-native-reanimated/tree/HEAD/packages/react-native-reanimated) | `4.2.0` | `4.7.1` |\n| [react-native-worklets](https://github.com/software-mansion/react-native-reanimated/tree/HEAD/packages/react-native-worklets) | `0.7.1` | `0.13.0` |\n| [resend](https://github.com/resend/resend-node) | `6.5.2` | `6.32.0` |\n| [swagger-jsdoc](https://github.com/Surnet/swagger-jsdoc) | `6.2.8` | `6.3.0` |\n| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.1` | `19.3.0` |\n| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.1` | `19.3.0` |\n| [@esbuild/linux-x64](https://github.com/evanw/esbuild) | `0.27.1` | `0.28.2` |\n| [@rollup/rollup-linux-x64-gnu](https://github.com/rollup/rollup) | `4.53.3` | `4.64.0` |\n| [@tailwindcss/oxide-linux-x64-gnu](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/crates/node/npm/linux-x64-gnu) | `4.1.17` | `4.3.3` |\n| [lightningcss-linux-x64-gnu](https://github.com/parcel-bundler/lightningcss) | `1.30.2` | `1.33.0` |\n| [cors](https://github.com/expressjs/cors) | `2.8.5` | `2.8.6` |\n| [helmet](https://github.com/helmetjs/helmet) | `8.1.0` | `8.3.0` |\n| [morgan](https://github.com/expressjs/morgan) | `1.10.1` | `1.12.1` |\n| [multer](https://github.com/expressjs/multer) | `2.0.2` | `2.4.0` |\n| [@types/multer](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/multer) | `2.0.0` | `2.3.0` |\n| [papaparse](https://github.com/mholt/PapaParse) | `5.5.3` | `5.7.0` |\n| [@types/papaparse](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/papaparse) | `5.5.1` | `5.5.2` |\n| [zod](https://github.com/colinhacks/zod) | `4.0.17` | `3.25.76` |\n| [@opentelemetry/api](https://github.com/open-telemetry/opentelemetry-js) | `1.9.0` | `1.9.1` |\n| [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) | `2.2.0` | `2.11.0` |\n| [@opentelemetry/instrumentation](https://github.com/open-telemetry/opentelemetry-js) | `0.208.0` | `0.222.0` |\n| [@opentelemetry/instrumentation-http](https://github.com/open-telemetry/opentelemetry-js) | `0.208.0` | `0.222.0` |\n| [@opentelemetry/semantic-conventions](https://github.com/open-telemetry/opentelemetry-js) | `1.38.0` | `1.43.0` |\n| [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) | `0.52.0` | `0.131.0` |\n| [date-fns](https://github.com/date-fns/date-fns) | `4.1.0` | `4.4.0` |\n| [knex](https://github.com/knex/knex) | `3.1.0` | `3.3.0` |\n| [pg](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg) | `8.16.3` | `8.23.1` |\n| [pino](https://github.com/pinojs/pino) | `10.1.0` | `10.4.0` |\n| [pino-pretty](https://github.com/pinojs/pino-pretty) | `13.1.3` | `13.2.0` |\n| [sanitize-html](https://github.com/apostrophecms/apostrophe/tree/HEAD/packages/sanitize-html) | `2.17.0` | `2.18.0` |\n| [@react-navigation/bottom-tabs](https://github.com/react-navigation/react-navigation/tree/HEAD/packages/bottom-tabs) | `7.8.12` | `7.20.0` |\n| [@react-navigation/native](https://github.com/react-navigation/react-navigation/tree/HEAD/packages/native) | `7.1.25` | `7.5.0` |\n| [@react-navigation/native-stack](https://github.com/react-navigation/react-navigation/tree/HEAD/packages/native-stack) | `7.8.6` | `7.20.0` |\n| [react-native-maps](https://github.com/react-native-maps/react-native-maps) | `1.26.20` | `1.29.11` |\n| [react-native-paper](https://github.com/callstack/react-native-paper) | `5.14.5` | `5.15.3` |\n| [react-native-safe-area-context](https://github.com/appandflow/react-native-safe-area-context) | `5.6.2` | `5.10.1` |\n| [react-native-screens](https://github.com/software-mansion/react-native-screens) | `4.18.0` | `4.28.0` |\n| [react-native-signature-canvas](https://github.com/YanYuanFE/react-native-signature-canvas) | `5.0.1` | `5.1.1` |\n| [react-native-web](https://github.com/necolas/react-native-web) | `0.21.2` | `0.21.3` |\n| [zustand](https://github.com/pmndrs/zustand) | `5.0.9` | `5.0.15` |\n| [@headlessui/react](https://github.com/tailwindlabs/headlessui/tree/HEAD/packages/@headlessui-react) | `2.2.9` | `2.2.10` |\n| [@hookform/resolvers](https://github.com/react-hook-form/resolvers) | `5.2.2` | `5.9.1` |\n| [moment](https://github.com/moment/moment) | `2.30.1` | `2.31.0` |\n| [react-big-calendar](https://github.com/bigcalendar/react-big-calendar) | `1.19.4` | `1.20.0` |\n| [react-hook-form](https://github.com/react-hook-form/react-hook-form) | `7.68.0` | `7.89.0` |\n| [react-hot-toast](https://github.com/timolins/react-hot-toast) | `2.6.0` | `2.6.1` |\n| [react-is](https://github.com/react/react/tree/HEAD/packages/react-is) | `19.2.1` | `19.3.0` |\n| [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `7.10.1` | `7.18.4` |\n| [recharts](https://github.com/recharts/recharts) | `3.5.1` | `3.10.1` |\n| [jspdf-autotable](https://github.com/simonbengtsson/jsPDF-AutoTable) | `5.0.2` | `5.0.8` |\n| [pdfkit](https://github.com/foliojs/pdfkit) | `0.17.2` | `0.20.2` |\n| [axios](https://github.com/axios/axios) | `1.13.2` | `1.20.0` |\n| [driver.js](https://github.com/nilbuild/driver.js/tree/HEAD/packages/driver) | `1.4.0` | `1.9.0` |\n\n\nUpdates `@tanstack/react-query` from 5.90.12 to 5.104.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/TanStack/query/releases\"\u003e@​tanstack/react-query's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ccode\u003e@​tanstack/react-query-devtools\u003c/code\u003e\u003ca href=\"https://github.com/5\"\u003e\u003ccode\u003e@​5\u003c/code\u003e\u003c/a\u003e.104.1\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies [\u003ca href=\"https://github.com/TanStack/query/commit/ec060b6f74b2e51f4b0c78932beec656ef6f6878\"\u003e\u003ccode\u003eec060b6\u003c/code\u003e\u003c/a\u003e]:\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/query-devtools\u003c/code\u003e\u003ca href=\"https://github.com/5\"\u003e\u003ccode\u003e@​5\u003c/code\u003e\u003c/a\u003e.104.1\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/react-query\u003c/code\u003e\u003ca href=\"https://github.com/5\"\u003e\u003ccode\u003e@​5\u003c/code\u003e\u003c/a\u003e.104.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ccode\u003e@​tanstack/react-query-next-experimental\u003c/code\u003e\u003ca href=\"https://github.com/5\"\u003e\u003ccode\u003e@​5\u003c/code\u003e\u003c/a\u003e.104.1\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies []:\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/react-query\u003c/code\u003e\u003ca href=\"https://github.com/5\"\u003e\u003ccode\u003e@​5\u003c/code\u003e\u003c/a\u003e.104.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ccode\u003e@​tanstack/react-query-persist-client\u003c/code\u003e\u003ca href=\"https://github.com/5\"\u003e\u003ccode\u003e@​5\u003c/code\u003e\u003c/a\u003e.104.1\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies []:\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/query-persist-client-core\u003c/code\u003e\u003ca href=\"https://github.com/5\"\u003e\u003ccode\u003e@​5\u003c/code\u003e\u003c/a\u003e.104.1\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/react-query\u003c/code\u003e\u003ca href=\"https://github.com/5\"\u003e\u003ccode\u003e@​5\u003c/code\u003e\u003c/a\u003e.104.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ccode\u003e@​tanstack/react-query\u003c/code\u003e\u003ca href=\"https://github.com/5\"\u003e\u003ccode\u003e@​5\u003c/code\u003e\u003c/a\u003e.104.1\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies []:\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/query-core\u003c/code\u003e\u003ca href=\"https://github.com/5\"\u003e\u003ccode\u003e@​5\u003c/code\u003e\u003c/a\u003e.104.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ccode\u003e@​tanstack/react-query-devtools\u003c/code\u003e\u003ca href=\"https://github.com/5\"\u003e\u003ccode\u003e@​5\u003c/code\u003e\u003c/a\u003e.104.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/TanStack/query/pull/11650\"\u003e#11650\u003c/a\u003e \u003ca href=\"https://github.com/TanStack/query/commit/5279b05211223dd719803ca22a9d1fa46c98638e\"\u003e\u003ccode\u003e5279b05\u003c/code\u003e\u003c/a\u003e - Build projects with Vite 8\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies [\u003ca href=\"https://github.com/TanStack/query/commit/5279b05211223dd719803ca22a9d1fa46c98638e\"\u003e\u003ccode\u003e5279b05\u003c/code\u003e\u003c/a\u003e]:\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/query-devtools\u003c/code\u003e\u003ca href=\"https://github.com/5\"\u003e\u003ccode\u003e@​5\u003c/code\u003e\u003c/a\u003e.104.0\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/react-query\u003c/code\u003e\u003ca href=\"https://github.com/5\"\u003e\u003ccode\u003e@​5\u003c/code\u003e\u003c/a\u003e.104.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ccode\u003e@​tanstack/react-query-next-experimental\u003c/code\u003e\u003ca href=\"https://github.com/5\"\u003e\u003ccode\u003e@​5\u003c/code\u003e\u003c/a\u003e.104.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/TanStack/query/pull/11650\"\u003e#11650\u003c/a\u003e \u003ca href=\"https://github.com/TanStack/query/commit/5279b05211223dd719803ca22a9d1fa46c98638e\"\u003e\u003ccode\u003e5279b05\u003c/code\u003e\u003c/a\u003e - Build projects with Vite 8\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies [\u003ca href=\"https://github.com/TanStack/query/commit/5279b05211223dd719803ca22a9d1fa46c98638e\"\u003e\u003ccode\u003e5279b05\u003c/code\u003e\u003c/a\u003e]:\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/react-query\u003c/code\u003e\u003ca href=\"https://github.com/5\"\u003e\u003ccode\u003e@​5\u003c/code\u003e\u003c/a\u003e.104.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ccode\u003e@​tanstack/react-query-persist-client\u003c/code\u003e\u003ca href=\"https://github.com/5\"\u003e\u003ccode\u003e@​5\u003c/code\u003e\u003c/a\u003e.104.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md\"\u003e@​tanstack/react-query's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e5.104.1\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies []:\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/query-core\u003c/code\u003e\u003ca href=\"https://github.com/5\"\u003e\u003ccode\u003e@​5\u003c/code\u003e\u003c/a\u003e.104.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.104.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/TanStack/query/pull/11650\"\u003e#11650\u003c/a\u003e \u003ca href=\"https://github.com/TanStack/query/commit/5279b05211223dd719803ca22a9d1fa46c98638e\"\u003e\u003ccode\u003e5279b05\u003c/code\u003e\u003c/a\u003e - Build projects with Vite 8\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies [\u003ca href=\"https://github.com/TanStack/query/commit/5279b05211223dd719803ca22a9d1fa46c98638e\"\u003e\u003ccode\u003e5279b05\u003c/code\u003e\u003c/a\u003e]:\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/query-core\u003c/code\u003e\u003ca href=\"https://github.com/5\"\u003e\u003ccode\u003e@​5\u003c/code\u003e\u003c/a\u003e.104.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.103.3\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/TanStack/query/pull/11647\"\u003e#11647\u003c/a\u003e \u003ca href=\"https://github.com/TanStack/query/commit/1c9693eac75495a04ae4328a35818b1fdf264978\"\u003e\u003ccode\u003e1c9693e\u003c/code\u003e\u003c/a\u003e - fix(codemods): avoid copying unnecessary files from codemods project\u003c/li\u003e\n\u003cli\u003eUpdated dependencies []:\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/query-core\u003c/code\u003e\u003ca href=\"https://github.com/5\"\u003e\u003ccode\u003e@​5\u003c/code\u003e\u003c/a\u003e.103.3\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.103.2\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies [\u003ca href=\"https://github.com/TanStack/query/commit/8a28904aaccb6bc26398b751400a181c0f6d7f0e\"\u003e\u003ccode\u003e8a28904\u003c/code\u003e\u003c/a\u003e]:\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/query-core\u003c/code\u003e\u003ca href=\"https://github.com/5\"\u003e\u003ccode\u003e@​5\u003c/code\u003e\u003c/a\u003e.103.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.103.1\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies [\u003ca href=\"https://github.com/TanStack/query/commit/8330b2f2d431f226d7bb95eb727c637be9d4c6d8\"\u003e\u003ccode\u003e8330b2f\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/TanStack/query/commit/3212966a3681e02d14eb79e9cce0d3265b046877\"\u003e\u003ccode\u003e3212966\u003c/code\u003e\u003c/a\u003e]:\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/query-core\u003c/code\u003e\u003ca href=\"https://github.com/5\"\u003e\u003ccode\u003e@​5\u003c/code\u003e\u003c/a\u003e.103.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.103.0\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies [\u003ca href=\"https://github.com/TanStack/query/commit/e57f8163b18ab3abfe52ad69cdbdda4d31453393\"\u003e\u003ccode\u003ee57f816\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/TanStack/query/commit/fdae2ce4e5382af7326c7c38ce5d5a12751ada12\"\u003e\u003ccode\u003efdae2ce\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/TanStack/query/commit/a1119e5a3ffa52534de7390f17c7183d17658051\"\u003e\u003ccode\u003ea1119e5\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/TanStack/query/commit/cbf77bf8e1a9ce09caef0cdd9a8ed10fef57edf0\"\u003e\u003ccode\u003ecbf77bf\u003c/code\u003e\u003c/a\u003e]:\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/query-core\u003c/code\u003e\u003ca href=\"https://github.com/5\"\u003e\u003ccode\u003e@​5\u003c/code\u003e\u003c/a\u003e.103.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.102.8\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/TanStack/query/commit/29859ae60c8dca0a5cdbf8abccc775b655cf43e2\"\u003e\u003ccode\u003e29859ae\u003c/code\u003e\u003c/a\u003e ci: Version Packages (\u003ca href=\"https://github.com/TanStack/query/tree/HEAD/packages/react-query/issues/11806\"\u003e#11806\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/TanStack/query/commit/339e09f4e50f5e693e7d9d35b25ecac43f818cd0\"\u003e\u003ccode\u003e339e09f\u003c/code\u003e\u003c/a\u003e chore(*): manage 'react' eslint plugins with pnpm 'catalog' (\u003ca href=\"https://github.com/TanStack/query/tree/HEAD/packages/react-query/issues/11781\"\u003e#11781\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/TanStack/query/commit/0a5727935a56db69e720222730e28523400c8f30\"\u003e\u003ccode\u003e0a57279\u003c/code\u003e\u003c/a\u003e test({react,preact,solid,angular}-query/mutationOptions): fix 'mutationOpt1' ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/TanStack/query/commit/c51bb623bb3999aa28aa7afde404d054689d2ee0\"\u003e\u003ccode\u003ec51bb62\u003c/code\u003e\u003c/a\u003e chore(*): declare '\u003ccode\u003e@​eslint-react/eslint-plugin\u003c/code\u003e' in the react packages and exa...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/TanStack/query/commit/a91461326bd6708601104b2cfdb27af72c59dc7a\"\u003e\u003ccode\u003ea914613\u003c/code\u003e\u003c/a\u003e chore(*): declare 'eslint-plugin-react-hooks' in the react packages that use ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/TanStack/query/commit/d99c84b6b55775ce8ef4eca41f24ee90aefc578e\"\u003e\u003ccode\u003ed99c84b\u003c/code\u003e\u003c/a\u003e chore(*): update '\u003ccode\u003e@​eslint-react/eslint-plugin\u003c/code\u003e' to v5 and apply its 'recommend...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/TanStack/query/commit/fd96529f3e0b748874be4655516caecc5d6a0521\"\u003e\u003ccode\u003efd96529\u003c/code\u003e\u003c/a\u003e chore(*): update 'eslint-plugin-react-hooks' to v7 and use its stable 'recomm...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/TanStack/query/commit/e878990b869da186ade549145193cfc718ca3330\"\u003e\u003ccode\u003ee878990\u003c/code\u003e\u003c/a\u003e chore(*): manage 'react' packages with pnpm 'catalog' (\u003ca href=\"https://github.com/TanStack/query/tree/HEAD/packages/react-query/issues/11712\"\u003e#11712\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/TanStack/query/commit/2e1ad64b525f6ff2034f169ab9c2f48f82f17296\"\u003e\u003ccode\u003e2e1ad64\u003c/code\u003e\u003c/a\u003e chore(*): declare 'npm-run-all2' once in the root 'package.json' like other s...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/TanStack/query/commit/c1de23a80e8c2b69299101c9fb6b22bc7c17552f\"\u003e\u003ccode\u003ec1de23a\u003c/code\u003e\u003c/a\u003e chore(*): manage 'typescript' with pnpm 'catalog' and declare it in each pack...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/TanStack/query/commits/@tanstack/react-query@5.104.1/packages/react-query\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for \u003ccode\u003e@​tanstack/react-query\u003c/code\u003e since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `express-rate-limit` from 8.2.1 to 8.7.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/express-rate-limit/express-rate-limit/releases\"\u003eexpress-rate-limit's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev8.7.1\u003c/h2\u003e\n\u003cp\u003eYou can view the changelog \u003ca href=\"https://express-rate-limit.mintlify.app/reference/changelog\"\u003ehere\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003ev8.7.0\u003c/h2\u003e\n\u003cp\u003eYou can view the changelog \u003ca href=\"https://express-rate-limit.mintlify.app/reference/changelog\"\u003ehere\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003ev8.6.2\u003c/h2\u003e\n\u003cp\u003eYou can view the changelog \u003ca href=\"https://express-rate-limit.mintlify.app/reference/changelog\"\u003ehere\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003ev8.6.1\u003c/h2\u003e\n\u003cp\u003eYou can view the changelog \u003ca href=\"https://express-rate-limit.mintlify.app/reference/changelog\"\u003ehere\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003ev8.6.0\u003c/h2\u003e\n\u003cp\u003eYou can view the changelog \u003ca href=\"https://express-rate-limit.mintlify.app/reference/changelog\"\u003ehere\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003ev8.5.2\u003c/h2\u003e\n\u003cp\u003eYou can view the changelog \u003ca href=\"https://express-rate-limit.mintlify.app/reference/changelog\"\u003ehere\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003ev8.5.1\u003c/h2\u003e\n\u003cp\u003eYou can view the changelog \u003ca href=\"https://express-rate-limit.mintlify.app/reference/changelog\"\u003ehere\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003ev8.5.0\u003c/h2\u003e\n\u003cp\u003eYou can view the changelog \u003ca href=\"https://express-rate-limit.mintlify.app/reference/changelog\"\u003ehere\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003ev8.4.1\u003c/h2\u003e\n\u003cp\u003eYou can view the changelog \u003ca href=\"https://express-rate-limit.mintlify.app/reference/changelog\"\u003ehere\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003ev8.4.0\u003c/h2\u003e\n\u003cp\u003eYou can view the changelog \u003ca href=\"https://express-rate-limit.mintlify.app/reference/changelog\"\u003ehere\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003ev8.3.2\u003c/h2\u003e\n\u003cp\u003eYou can view the changelog \u003ca href=\"https://express-rate-limit.mintlify.app/reference/changelog\"\u003ehere\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003ev8.3.1\u003c/h2\u003e\n\u003cp\u003eYou can view the changelog \u003ca href=\"https://express-rate-limit.mintlify.app/reference/changelog\"\u003ehere\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003ev8.3.0\u003c/h2\u003e\n\u003cp\u003eYou can view the changelog \u003ca href=\"https://express-rate-limit.mintlify.app/reference/changelog\"\u003ehere\u003c/a\u003e.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/express-rate-limit/express-rate-limit/commit/c2e30b340189e287123cf5bfd89526dd2ea07d3f\"\u003e\u003ccode\u003ec2e30b3\u003c/code\u003e\u003c/a\u003e 8.7.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/express-rate-limit/express-rate-limit/commit/b40a390170d984b20f6257b15acf31dbad4f0180\"\u003e\u003ccode\u003eb40a390\u003c/code\u003e\u003c/a\u003e v8.7.1 changelog\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/express-rate-limit/express-rate-limit/commit/ccbee88b60845c6ef07fdbc3ac3615c4445f8f92\"\u003e\u003ccode\u003eccbee88\u003c/code\u003e\u003c/a\u003e fix: correct es2020/es2022 version mismatch between tsconfig and esbuild comm...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/express-rate-limit/express-rate-limit/commit/11a143a56eb18678766bdc3ba4557ead10ca89d1\"\u003e\u003ccode\u003e11a143a\u003c/code\u003e\u003c/a\u003e chore: fix duplicate entries in pnpm-lockfile.yaml (\u003ca href=\"https://redirect.github.com/express-rate-limit/express-rate-limit/issues/685\"\u003e#685\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/express-rate-limit/express-rate-limit/commit/92f685d7a6ddf5423e96662295805e8d3452fd3d\"\u003e\u003ccode\u003e92f685d\u003c/code\u003e\u003c/a\u003e chore(deps): bump softprops/action-gh-release from 1 to 3 (\u003ca href=\"https://redirect.github.com/express-rate-limit/express-rate-limit/issues/692\"\u003e#692\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/express-rate-limit/express-rate-limit/commit/0c7c0663f4a8072ef13cd6374651837da0094415\"\u003e\u003ccode\u003e0c7c066\u003c/code\u003e\u003c/a\u003e chore(deps): bump actions/checkout from 4.4.0 to 7.0.1 (\u003ca href=\"https://redirect.github.com/express-rate-limit/express-rate-limit/issues/694\"\u003e#694\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/express-rate-limit/express-rate-limit/commit/9735b69649f20e462b6260e9cef856a57b7c4033\"\u003e\u003ccode\u003e9735b69\u003c/code\u003e\u003c/a\u003e chore(deps): bump pnpm/action-setup from 3.0.0 to 6.1.0 (\u003ca href=\"https://redirect.github.com/express-rate-limit/express-rate-limit/issues/695\"\u003e#695\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/express-rate-limit/express-rate-limit/commit/7f401b76504ebfe25ab97c2291d1de27a8d31d73\"\u003e\u003ccode\u003e7f401b7\u003c/code\u003e\u003c/a\u003e chore(deps): bump actions/setup-node from 4.4.0 to 7.0.0 (\u003ca href=\"https://redirect.github.com/express-rate-limit/express-rate-limit/issues/693\"\u003e#693\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/express-rate-limit/express-rate-limit/commit/7a49bb0d4bc1a1a1bc4f4ef42e0ddcc26f222b07\"\u003e\u003ccode\u003e7a49bb0\u003c/code\u003e\u003c/a\u003e ci: add guard that fails the build on unpinned GitHub Actions (companion to #...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/express-rate-limit/express-rate-limit/commit/784c447798bac552e2dad4a1a818092765cc6b9b\"\u003e\u003ccode\u003e784c447\u003c/code\u003e\u003c/a\u003e ci: pin GitHub Actions to immutable commit SHAs (\u003ca href=\"https://redirect.github.com/express-rate-limit/express-rate-limit/issues/690\"\u003e#690\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/express-rate-limit/express-rate-limit/compare/v8.2.1...v8.7.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for express-rate-limit since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `react-joyride` from 3.0.0-7 to 3.2.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/gilbarbara/react-joyride/releases\"\u003ereact-joyride's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e3.2.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade dependencies: a519b010525d63cfe58cf7d88a9556815d67ad6f\u003c/li\u003e\n\u003cli\u003eUpdate playwright config: 146f421583aa9b38fbeef7d99ed50e0c0484398e\u003c/li\u003e\n\u003cli\u003eWebsite: Upgrade dependencies: 27bc889f1e79dc23afbd8c68ba2152aaa05d7066\u003c/li\u003e\n\u003cli\u003eWebsite: refactor dev setup: 16dc0fc06264df9b3924c9bdf5915b261dd66147\u003c/li\u003e\n\u003cli\u003eDemos: fix Overview step: 6c52a07fdb2358046c1d3d395e3a312a6445808e\u003c/li\u003e\n\u003cli\u003eDemos: update color picker and styles: c66147c991218cc00474a85d337bd2799d637f54\u003c/li\u003e\n\u003cli\u003eRefactor spotlight positioning: 4dd0fcab17a3c25f20eaf4e8ed73df410dadaf6e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.1.0\u003c/h2\u003e\n\u003ch2\u003eFeatures\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003econtrols.replay(origin?)\u003c/code\u003e\u003c/strong\u003e — re-run current step. Re-emits \u003ccode\u003estep:after\u003c/code\u003e → \u003ccode\u003estep:before\u003c/code\u003e, re-runs \u003ccode\u003ebefore\u003c/code\u003e/\u003ccode\u003eafter\u003c/code\u003e hooks, index unchanged. Only valid from \u003ccode\u003eRUNNING + TOOLTIP\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eNew \u003ccode\u003e'replay'\u003c/code\u003e value\u003c/strong\u003e for \u003ccode\u003ecloseButtonAction\u003c/code\u003e, \u003ccode\u003edismissKeyAction\u003c/code\u003e, \u003ccode\u003eoverlayClickAction\u003c/code\u003e. Dismiss tooltip → show beacon on same step (resolves \u003ca href=\"https://redirect.github.com/gilbarbara/react-joyride/issues/1205\"\u003e#1205\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eNew \u003ccode\u003eACTIONS.REPLAY\u003c/code\u003e literal.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eInternal\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFloater zIndex offset reduced (\u003ccode\u003e+100\u003c/code\u003e → \u003ccode\u003e+1\u003c/code\u003e). Relative stacking with overlay unchanged.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eControlled-mode note\u003c/h2\u003e\n\u003cp\u003eParent \u003ccode\u003eonEvent\u003c/code\u003e must skip index increment on \u003ccode\u003eSTEP_AFTER + ACTIONS.REPLAY\u003c/code\u003e:\u003c/p\u003e\n\u003cpre lang=\"tsx\"\u003e\u003ccode\u003eif (type === EVENTS.STEP_AFTER \u0026amp;\u0026amp; action === ACTIONS.REPLAY) return;\r\n\u003c/code\u003e\u003c/pre\u003e\n\u003ch2\u003eDocs\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eNew recipe: \u003cstrong\u003eConditional / Dynamic Steps\u003c/strong\u003e — use \u003ccode\u003ebefore\u003c/code\u003e hooks, not \u003ccode\u003euseEffect\u003c/code\u003e-driven \u003ccode\u003estepIndex\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eControlled mode: \u0026quot;use sparingly\u0026quot; guidance.\u003c/li\u003e\n\u003cli\u003eUpdated \u003ccode\u003eControlsTable\u003c/code\u003e, \u003ccode\u003eOptionsTable\u003c/code\u003e, \u003ccode\u003eexports\u003c/code\u003e reference, and architecture doc.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/gilbarbara/react-joyride/compare/v3.0.2...v3.1.0\"\u003ehttps://github.com/gilbarbara/react-joyride/compare/v3.0.2...v3.1.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e3.0.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix React 18 aggressive batching: 79a7ef0d9e8f0e1a96631a34275c59a07ed5fcc7\u003c/li\u003e\n\u003cli\u003eRe-organize modules: 324b5c92c91387288c108deac0cdbcb0a98d8de9\u003c/li\u003e\n\u003cli\u003ePropagate origin through all UI-triggered control methods: ee6aad34a01e4b50c0608a12ec16f08132a6cc9c\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.0.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade dependencies: 2199f9eebb76f128858260a9258fdeeabf08539e\u003c/li\u003e\n\u003cli\u003eAdd support to spotlight styles (SVGPath): 40e6faae78117a65350f6823b8070ce9249d12d6\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.0.0\u003c/h2\u003e\n\u003cp\u003eV3 is a complete rewrite focused on modern React patterns, smaller bundle size, and a more intuitive API.\u003c/p\u003e\n\u003ch3\u003eHighlights\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003euseJoyride\u003c/code\u003e hook\u003c/strong\u003e — replaces \u003ccode\u003egetHelpers\u003c/code\u003e with a proper hook returning controls, state, current step, failures, and event subscriptions\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eNew event system\u003c/strong\u003e — discriminated event types (\u003ccode\u003etour:start\u003c/code\u003e, \u003ccode\u003estep:before\u003c/code\u003e, \u003ccode\u003etooltip\u003c/code\u003e, etc.) with \u003ccode\u003eonEvent(data, controls)\u003c/code\u003e and selective subscription via \u003ccode\u003eon()\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eStep hooks\u003c/strong\u003e — async \u003ccode\u003ebefore\u003c/code\u003e/\u003ccode\u003eafter\u003c/code\u003e callbacks for per-step logic\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eFloating UI\u003c/strong\u003e — replaced Popper.js/react-floater with direct \u003ccode\u003e@floating-ui/react-dom\u003c/code\u003e integration\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/gilbarbara/react-joyride/commits/v3.2.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for react-joyride since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version adds \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `react-native-reanimated` from 4.2.0 to 4.7.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/software-mansion/react-native-reanimated/releases\"\u003ereact-native-reanimated's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eReanimated - 4.7.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cp\u003eThis release includes stability fixes for Layout Animations and Shared Element Transitions, fixes several crashes on Android, and stops synchronously updated props from going back to old values.\u003c/p\u003e\n\u003ch3\u003e🐛 Bug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix a reset of synchronously updated props to old values when a commit moves a view to another position in its parent, for example after a \u003ccode\u003ezIndex\u003c/code\u003e change of a sibling, on iOS and on Android with \u003ccode\u003eenableAccumulatedUpdatesInRawPropsAndroid\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10800\"\u003e#10800\u003c/a\u003e by \u003ca href=\"https://github.com/pawicao\"\u003e\u003ccode\u003e@​pawicao\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix an Android crash with \u003ccode\u003e[Reanimated] Unknown sensor type.\u003c/code\u003e in \u003ccode\u003euseAnimatedSensor\u003c/code\u003e on devices that deliver sensor events labeled with a sensor other than the registered one. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10792\"\u003e#10792\u003c/a\u003e by \u003ca href=\"https://github.com/pawicao\"\u003e\u003ccode\u003e@​pawicao\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix an Android crash with \u003ccode\u003ereact-native-screens\u003c/code\u003e before 4.27 when a native stack screen that holds a nested stack with header buttons is removed. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10754\"\u003e#10754\u003c/a\u003e by \u003ca href=\"https://github.com/bartlomiejbloniarz\"\u003e\u003ccode\u003e@​bartlomiejbloniarz\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix shared element transitions casting the props of a nested \u003ccode\u003e\u0026lt;Text\u0026gt;\u003c/code\u003e with a \u003ccode\u003esharedTransitionTag\u003c/code\u003e on Android to view props. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10741\"\u003e#10741\u003c/a\u003e by \u003ca href=\"https://github.com/bartlomiejbloniarz\"\u003e\u003ccode\u003e@​bartlomiejbloniarz\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix a native crash on Android caused by reading \u003ccode\u003eopacity\u003c/code\u003e from the props of a \u003ccode\u003e\u0026lt;Text\u0026gt;\u003c/code\u003e nested in another \u003ccode\u003e\u0026lt;Text\u0026gt;\u003c/code\u003e as if they were view props. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10732\"\u003e#10732\u003c/a\u003e by \u003ca href=\"https://github.com/hirvesh\"\u003e\u003ccode\u003e@​hirvesh\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003ewithTiming\u003c/code\u003e extrapolating its easing when the first frame reports a timestamp earlier than the animation's \u003ccode\u003estartTime\u003c/code\u003e, which happens when the animation is started outside a frame flush. With an easing whose first control point is \u003ccode\u003ex1 = 0\u003c/code\u003e the Newton-Raphson solver in \u003ccode\u003eEasing.bezier\u003c/code\u003e diverges just outside its domain, so the animated value could land orders of magnitude out of range for a single frame. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10720\"\u003e#10720\u003c/a\u003e by \u003ca href=\"https://github.com/piaskowyk\"\u003e\u003ccode\u003e@​piaskowyk\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFlush completed exiting view removals in the legacy layout animations proxy when Android's mounting coordinator pull model is enabled. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10704\"\u003e#10704\u003c/a\u003e by \u003ca href=\"https://github.com/piaskowyk\"\u003e\u003ccode\u003e@​piaskowyk\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix exiting Layout Animations leaking their views on Android under the mounting coordinator pull model, where the structural cleanup of a finished animation was never flushed. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10682\"\u003e#10682\u003c/a\u003e by \u003ca href=\"https://github.com/piaskowyk\"\u003e\u003ccode\u003e@​piaskowyk\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix a crash of the Layout Animations proxy (\u003ccode\u003eshadowIndex is out of range\u003c/code\u003e, \u003ccode\u003eIndices are wrong in Remove mutation\u003c/code\u003e, or memory corruption in release builds) when a view flattens in the same commit in which its parent unflattens. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10676\"\u003e#10676\u003c/a\u003e by \u003ca href=\"https://github.com/bartlomiejbloniarz\"\u003e\u003ccode\u003e@​bartlomiejbloniarz\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix an Android crash in \u003ccode\u003eperformOperations\u003c/code\u003e when the React host is torn down while a CSS or layout animation runs in the background, for example on an \u003ccode\u003eexpo-updates\u003c/code\u003e restart. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10661\"\u003e#10661\u003c/a\u003e by \u003ca href=\"https://github.com/bartlomiejbloniarz\"\u003e\u003ccode\u003e@​bartlomiejbloniarz\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix an animated view that showed an older value for one frame when a React commit mounted over a newer synchronous write, with \u003ccode\u003eANDROID_SYNCHRONOUSLY_UPDATE_UI_PROPS\u003c/code\u003e or \u003ccode\u003eIOS_SYNCHRONOUSLY_UPDATE_UI_PROPS\u003c/code\u003e on. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10631\"\u003e#10631\u003c/a\u003e by \u003ca href=\"https://github.com/pawicao\"\u003e\u003ccode\u003e@​pawicao\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix a crash in \u003ccode\u003euseAnimatedKeyboard\u003c/code\u003e on iOS when the app delegate does not declare \u003ccode\u003ewindow\u003c/code\u003e, as in apps that use the UIScene lifecycle. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10587\"\u003e#10587\u003c/a\u003e by \u003ca href=\"https://github.com/CAMOBAP\"\u003e\u003ccode\u003e@​CAMOBAP\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSkip synchronous Android prop updates for unmounted views to avoid throwing and logging mounting-layer exceptions on the UI thread. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10435\"\u003e#10435\u003c/a\u003e by \u003ca href=\"https://github.com/ryan-saffer\"\u003e\u003ccode\u003e@​ryan-saffer\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e💡 Others\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eInitialize the layout animations light tree root from the committed root shadow node. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10737\"\u003e#10737\u003c/a\u003e by \u003ca href=\"https://github.com/bartlomiejbloniarz\"\u003e\u003ccode\u003e@​bartlomiejbloniarz\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSimplify the light tree based Layout Animations proxy so that every view React deletes waits for one decision of how it exits, and name the states of a light node after what they mean. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10677\"\u003e#10677\u003c/a\u003e by \u003ca href=\"https://github.com/bartlomiejbloniarz\"\u003e\u003ccode\u003e@​bartlomiejbloniarz\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRename the \u003ccode\u003eDEAD\u003c/code\u003e exiting state of the light tree based Layout Animations proxy to \u003ccode\u003eCOMPLETED\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10629\"\u003e#10629\u003c/a\u003e by \u003ca href=\"https://github.com/bartlomiejbloniarz\"\u003e\u003ccode\u003e@​bartlomiejbloniarz\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/software-mansion/react-native-reanimated/compare/4.7.0...4.7.1\"\u003ehttps://github.com/software-mansion/react-native-reanimated/compare/4.7.0...4.7.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eReanimated - 4.7.0\u003c/h2\u003e\n\u003ch2\u003eKey changes\u003c/h2\u003e\n\u003ch3\u003eNew layout animations engine is the default\u003c/h3\u003e\n\u003cp\u003eLayout animations now run on the new engine by default.\u003c/p\u003e\n\u003cp\u003eIf the new engine causes a regression in your app, enable the \u003ca href=\"https://docs.swmansion.com/react-native-reanimated/docs/guides/feature-flags#use_legacy_layout_animations_proxy\"\u003e\u003ccode\u003eUSE_LEGACY_LAYOUT_ANIMATIONS_PROXY\u003c/code\u003e feature flag\u003c/a\u003e to go back to the previous engine, and please report an issue. The previous engine does not support shared element transitions, so you cannot enable this flag together with \u003ccode\u003eENABLE_SHARED_ELEMENT_TRANSITIONS\u003c/code\u003e.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003efeat(Reanimated): make light-tree based layout animations proxy default by \u003ca href=\"https://github.com/pawicao\"\u003e\u003ccode\u003e@​pawicao\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10423\"\u003esoftware-mansion/react-native-reanimated#10423\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(Reanimated): carry registry values in Reanimated commits by \u003ca href=\"https://github.com/pawicao\"\u003e\u003ccode\u003e@​pawicao\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10416\"\u003esoftware-mansion/react-native-reanimated#10416\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor(LayoutAnimations): use one proxy instance per surface by \u003ca href=\"https://github.com/bartlomiejbloniarz\"\u003e\u003ccode\u003e@​bartlomiejbloniarz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10368\"\u003esoftware-mansion/react-native-reanimated#10368\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor(LayoutAnimations): centralize animation lifecycle and UI operations by \u003ca href=\"https://github.com/bartlomiejbloniarz\"\u003e\u003ccode\u003e@​bartlomiejbloniarz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10369\"\u003esoftware-mansion/react-native-reanimated#10369\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor(LayoutAnimations): make shared container ownership explicit by \u003ca href=\"https://github.com/bartlomiejbloniarz\"\u003e\u003ccode\u003e@​bartlomiejbloniarz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10370\"\u003esoftware-mansion/react-native-reanimated#10370\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(LayoutAnimations): separate progress transition states by \u003ca href=\"https://github.com/bartlomiejbloniarz\"\u003e\u003ccode\u003e@​bartlomiejbloniarz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10371\"\u003esoftware-mansion/react-native-reanimated#10371\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(LayoutAnimations): update Android view hierarchy only during JS pulls by \u003ca href=\"https://github.com/bartlomiejbloniarz\"\u003e\u003ccode\u003e@​bartlomiejbloniarz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10372\"\u003esoftware-mansion/react-native-reanimated#10372\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(LayoutAnimations): serialize config updates with pullTransaction by \u003ca href=\"https://github.com/bartlomiejbloniarz\"\u003e\u003ccode\u003e@​bartlomiejbloniarz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10373\"\u003esoftware-mansion/react-native-reanimated#10373\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(Reanimated): keep exiting views at their host position in experimental LA proxy by \u003ca href=\"https://github.com/pawicao\"\u003e\u003ccode\u003e@​pawicao\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10392\"\u003esoftware-mansion/react-native-reanimated#10392\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(reanimated): skip preserveMountedTags_ on pull model by \u003ca href=\"https://github.com/piaskowyk\"\u003e\u003ccode\u003e@​piaskowyk\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10481\"\u003esoftware-mansion/react-native-reanimated#10481\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(LayoutAnimations): keep animated views on their final layout after config or order changes by \u003ca href=\"https://github.com/bartlomiejbloniarz\"\u003e\u003ccode\u003e@​bartlomiejbloniarz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10537\"\u003esoftware-mansion/react-native-reanimated#10537\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(LayoutAnimations): properly animate reparented views by \u003ca href=\"https://github.com/bartlomiejbloniarz\"\u003e\u003ccode\u003e@​bartlomiejbloniarz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10538\"\u003esoftware-mansion/react-native-reanimated#10538\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/software-mansion/react-native-reanimated/blob/4.7.1/packages/react-native-reanimated/CHANGELOG.md\"\u003ereact-native-reanimated's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.7.1 — 2026-10-02\u003c/h2\u003e\n\u003ch3\u003e🐛 Bug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix a reset of synchronously updated props to old values when a commit moves a view to another position in its parent, for example after a \u003ccode\u003ezIndex\u003c/code\u003e change of a sibling, on iOS and on Android with \u003ccode\u003eenableAccumulatedUpdatesInRawPropsAndroid\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10800\"\u003e#10800\u003c/a\u003e by \u003ca href=\"https://github.com/pawicao\"\u003e\u003ccode\u003e@​pawicao\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix an Android crash with \u003ccode\u003e[Reanimated] Unknown sensor type.\u003c/code\u003e in \u003ccode\u003euseAnimatedSensor\u003c/code\u003e on devices that deliver sensor events labeled with a sensor other than the registered one. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10792\"\u003e#10792\u003c/a\u003e by \u003ca href=\"https://github.com/pawicao\"\u003e\u003ccode\u003e@​pawicao\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix an Android crash with \u003ccode\u003ereact-native-screens\u003c/code\u003e before 4.27 when a native stack screen that holds a nested stack with header buttons is removed. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10754\"\u003e#10754\u003c/a\u003e by \u003ca href=\"https://github.com/bartlomiejbloniarz\"\u003e\u003ccode\u003e@​bartlomiejbloniarz\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix shared element transitions casting the props of a nested \u003ccode\u003e\u0026lt;Text\u0026gt;\u003c/code\u003e with a \u003ccode\u003esharedTransitionTag\u003c/code\u003e on Android to view props. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10741\"\u003e#10741\u003c/a\u003e by \u003ca href=\"https://github.com/bartlomiejbloniarz\"\u003e\u003ccode\u003e@​bartlomiejbloniarz\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix a native crash on Android caused by reading \u003ccode\u003eopacity\u003c/code\u003e from the props of a \u003ccode\u003e\u0026lt;Text\u0026gt;\u003c/code\u003e nested in another \u003ccode\u003e\u0026lt;Text\u0026gt;\u003c/code\u003e as if they were view props. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10732\"\u003e#10732\u003c/a\u003e by \u003ca href=\"https://github.com/hirvesh\"\u003e\u003ccode\u003e@​hirvesh\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003ewithTiming\u003c/code\u003e extrapolating its easing when the first frame reports a timestamp earlier than the animation's \u003ccode\u003estartTime\u003c/code\u003e, which happens when the animation is started outside a frame flush. With an easing whose first control point is \u003ccode\u003ex1 = 0\u003c/code\u003e the Newton-Raphson solver in \u003ccode\u003eEasing.bezier\u003c/code\u003e diverges just outside its domain, so the animated value could land orders of magnitude out of range for a single frame. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10720\"\u003e#10720\u003c/a\u003e by \u003ca href=\"https://github.com/piaskowyk\"\u003e\u003ccode\u003e@​piaskowyk\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFlush completed exiting view removals in the legacy layout animations proxy when Android's mounting coordinator pull model is enabled. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10704\"\u003e#10704\u003c/a\u003e by \u003ca href=\"https://github.com/piaskowyk\"\u003e\u003ccode\u003e@​piaskowyk\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix exiting Layout Animations leaking their views on Android under the mounting coordinator pull model, where the structural cleanup of a finished animation was never flushed. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10682\"\u003e#10682\u003c/a\u003e by \u003ca href=\"https://github.com/piaskowyk\"\u003e\u003ccode\u003e@​piaskowyk\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix a crash of the Layout Animations proxy (\u003ccode\u003eshadowIndex is out of range\u003c/code\u003e, \u003ccode\u003eIndices are wrong in Remove mutation\u003c/code\u003e, or memory corruption in release builds) when a view flattens in the same commit in which its parent unflattens. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10676\"\u003e#10676\u003c/a\u003e by \u003ca href=\"https://github.com/bartlomiejbloniarz\"\u003e\u003ccode\u003e@​bartlomiejbloniarz\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix an Android crash in \u003ccode\u003eperformOperations\u003c/code\u003e when the React host is torn down while a CSS or layout animation runs in the background, for example on an \u003ccode\u003eexpo-updates\u003c/code\u003e restart. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10661\"\u003e#10661\u003c/a\u003e by \u003ca href=\"https://github.com/bartlomiejbloniarz\"\u003e\u003ccode\u003e@​bartlomiejbloniarz\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix an animated view that showed an older value for one frame when a React commit mounted over a newer synchronous write, with \u003ccode\u003eANDROID_SYNCHRONOUSLY_UPDATE_UI_PROPS\u003c/code\u003e or \u003ccode\u003eIOS_SYNCHRONOUSLY_UPDATE_UI_PROPS\u003c/code\u003e on. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10631\"\u003e#10631\u003c/a\u003e by \u003ca href=\"https://github.com/pawicao\"\u003e\u003ccode\u003e@​pawicao\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix a crash in \u003ccode\u003euseAnimatedKeyboard\u003c/code\u003e on iOS when the app delegate does not declare \u003ccode\u003ewindow\u003c/code\u003e, as in apps that use the UIScene lifecycle. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10587\"\u003e#10587\u003c/a\u003e by \u003ca href=\"https://github.com/CAMOBAP\"\u003e\u003ccode\u003e@​CAMOBAP\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSkip synchronous Android prop updates for unmounted views to avoid throwing and logging mounting-layer exceptions on the UI thread. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10435\"\u003e#10435\u003c/a\u003e by \u003ca href=\"https://github.com/ryan-saffer\"\u003e\u003ccode\u003e@​ryan-saffer\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e💡 Others\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eInitialize the layout animations light tree root from the committed root shadow node. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10737\"\u003e#10737\u003c/a\u003e by \u003ca href=\"https://github.com/bartlomiejbloniarz\"\u003e\u003ccode\u003e@​bartlomiejbloniarz\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSimplify the light tree based Layout Animations proxy so that every view React deletes waits for one decision of how it exits, and name the states of a light node after what they mean. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10677\"\u003e#10677\u003c/a\u003e by \u003ca href=\"https://github.com/bartlomiejbloniarz\"\u003e\u003ccode\u003e@​bartlomiejbloniarz\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRename the \u003ccode\u003eDEAD\u003c/code\u003e exiting state of the light tree based Layout Animations proxy to \u003ccode\u003eCOMPLETED\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10629\"\u003e#10629\u003c/a\u003e by \u003ca href=\"https://github.com/bartlomiejbloniarz\"\u003e\u003ccode\u003e@​bartlomiejbloniarz\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.7.0 — 2026-09-18\u003c/h2\u003e\n\u003ch3\u003e🛠 Breaking changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eAnimatedRefOnUI\u003c/code\u003e is now a \u003ccode\u003eShareableHost\u0026lt;ShadowNodeWrapper | null\u0026gt;\u003c/code\u003e read with \u003ccode\u003e.value\u003c/code\u003e instead of a callable, and \u003ccode\u003eAnimatedRefOnJS\u003c/code\u003e was renamed to \u003ccode\u003eAnimatedRefOnRN\u003c/code\u003e. \u003ccode\u003emeasure\u003c/code\u003e on an unmounted ref now returns \u003ccode\u003enull\u003c/code\u003e and warns instead of calling into \u003ccode\u003e_measure\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10413\"\u003e#10413\u003c/a\u003e by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRemove the \u003ccode\u003eUSE_SYNCHRONIZABLE_FOR_MUTABLES\u003c/code\u003e feature flag. Mutables always use Synchronizable state now. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10298\"\u003e#10298\u003c/a\u003e by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMake the light-tree layout animations proxy the default. Enable the new \u003ccode\u003eUSE_LEGACY_LAYOUT_ANIMATIONS_PROXY\u003c/code\u003e feature flag to roll back to the previous implementation. The legacy proxy does not support Shared Element Transitions, so \u003ccode\u003eENABLE_SHARED_ELEMENT_TRANSITIONS\u003c/code\u003e must be off when you enable it. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10423\"\u003e#10423\u003c/a\u003e by \u003ca href=\"https://github.com/pawicao\"\u003e\u003ccode\u003e@​pawicao\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e🎉 New features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRun \u003ccode\u003eshadowColor\u003c/code\u003e CSS transitions on the Android platform animation path on Android 9 and newer. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10547\"\u003e#10547\u003c/a\u003e by \u003ca href=\"https://github.com/MatiPl01\"\u003e\u003ccode\u003e@​MatiPl01\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRun CSS transitions for \u003ccode\u003ebackgroundColor\u003c/code\u003e, \u003ccode\u003eborderColor\u003c/code\u003e, and numeric \u003ccode\u003eborderRadius\u003c/code\u003e on the Android platform animation path. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10310\"\u003e#10310\u003c/a\u003e by \u003ca href=\"https://github.com/MatiPl01\"\u003e\u003ccode\u003e@​MatiPl01\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003ebackgroundImage\u003c/code\u003e support to animated styles. Linear and radial gradients are accepted as objects or CSS strings and processed on the UI thread. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10486\"\u003e#10486\u003c/a\u003e by \u003ca href=\"https://github.com/tshmieldev\"\u003e\u003ccode\u003e@​tshmieldev\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd iOS Swift Package Manager support via \u003ccode\u003ePackage.swift\u003c/code\u003e and SPM integration metadata in \u003ccode\u003ereact-native.config.js\u003c/code\u003e, with a dependency on \u003ccode\u003eRNWorklets\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10472\"\u003e#10472\u003c/a\u003e by \u003ca href=\"https://github.com/kacperzolkiewski\"\u003e\u003ccode\u003e@​kacperzolkiewski\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd an optional \u003ccode\u003eonLog\u003c/code\u003e callback as a second argument to \u003ccode\u003econfigureReanimatedLogger\u003c/code\u003e, invoked for every warning and error that passes the \u003ccode\u003elevel\u003c/code\u003e and \u003ccode\u003estrict\u003c/code\u003e filters, in addition to the default console output. On native, logs raised on the UI runtime are delivered asynchronously on the React Native Runtime. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10482\"\u003e#10482\u003c/a\u003e by \u003ca href=\"https://github.com/douglowder\"\u003e\u003ccode\u003e@​douglowder\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e🐛 Bug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix a property removed from \u003ccode\u003etransitionProperty\u003c/code\u003e while it transitions to or from \u003ccode\u003eundefined\u003c/code\u003e (its style key was just removed or added) finishing the transition instead of snapping to the committed value. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10613\"\u003e#10613\u003c/a\u003e by \u003ca href=\"https://github.com/MatiPl01\"\u003e\u003ccode\u003e@​MatiPl01\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix a property removed from \u003ccode\u003etransitionProperty\u003c/code\u003e mid-transition reverting to the interpolator default (for example \u003ccode\u003eborderRadius: 0\u003c/code\u003e) instead of the committed style on Android. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10614\"\u003e#10614\u003c/a\u003e by \u003ca href=\"https://github.com/MatiPl01\"\u003e\u003ccode\u003e@​MatiPl01\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReject a \u003ccode\u003ebackgroundImage\u003c/code\u003e gradient given as an object when a transition hint is not placed between two color stops, and reject gradients with fewer than two color stops in both the object and the string form; React Native crashes on iOS or Android when such values reach the renderer. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10589\"\u003e#10589\u003c/a\u003e by \u003ca href=\"https://github.com/matipl01\"\u003e\u003ccode\u003e@​matipl01\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix a crash in the light tree based Layout Animations proxy when a view is flattened while one of its children is removed in the same commit. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10628\"\u003e#10628\u003c/a\u003e by \u003ca href=\"https://github.com/bartlomiejbloniarz\"\u003e\u003ccode\u003e@​bartlomiejbloniarz\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRemove \u003ccode\u003ezIndex\u003c/code\u003e from the synchronous props. No platform applies \u003ccode\u003ezIndex\u003c/code\u003e to a mounted view, so with \u003ccode\u003eIOS_SYNCHRONOUSLY_UPDATE_UI_PROPS\u003c/code\u003e on, an animated style with only \u003ccode\u003ezIndex\u003c/code\u003e and \u003ccode\u003eelevation\u003c/code\u003e never reached the shadow tree commit and the views did not reorder until a later React render. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10602\"\u003e#10602\u003c/a\u003e by \u003ca href=\"https://github.com/pawicao\"\u003e\u003ccode\u003e@​pawicao\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eStop passing \u003ccode\u003eforwardedRef\u003c/code\u003e and \u003ccode\u003enativeID\u003c/code\u003e to the wrapped component on web, which React Strict DOM reported as invalid props. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10605\"\u003e#10605\u003c/a\u003e by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePreserve Android color and other prop updates when hiding and restoring shared transition views. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10601\"\u003e#10601\u003c/a\u003e by \u003ca href=\"https://github.com/bartlomiejbloniarz\"\u003e\u003ccode\u003e@​bartlomiejbloniarz\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePrevent Shared Transition Boundaries from intercepting touches intended for sibling views while keeping their children interactive. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10600\"\u003e#10600\u003c/a\u003e by \u003ca href=\"https://github.com/bartlomiejbloniarz\"\u003e\u003ccode\u003e@​bartlomiejbloniarz\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/software-mansion/react-native-reanimated/commit/5fd93c32624c64c4020fb089171afde88a511d92\"\u003e\u003ccode\u003e5fd93c3\u003c/code\u003e\u003c/a\u003e release(Reanimated): 4.7.1 (\u003ca href=\"https://github.com/software-mansion/react-native-reanimated/tree/HEAD/packages/react-native-reanimated/issues/10797\"\u003e#10797\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/software-mansion/react-native-reanimated/commit/d9cd48b1ef123baafdfa8ed0b0ff4326817ee7ae\"\u003e\u003ccode\u003ed9cd48b\u003c/code\u003e\u003c/a\u003e cherry-pick(4.7-stable): Keep synchronously updated props when a mount insert...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/software-mansion/react-native-reanimated/commit/3b08cb1d0cfaa031002a5c73d449cb4c4b9b4fdc\"\u003e\u003ccode\u003e3b08cb1\u003c/code\u003e\u003c/a\u003e cherry-pick(4.7-stable): Stop crashing when the React host is torn down durin...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/software-mansion/react-native-reanimated/commit/0eaa8a5e016cc0dfaa03495c224ab19c32ef097d\"\u003e\u003ccode\u003e0eaa8a5\u003c/code\u003e\u003c/a\u003e cherry-pick(4.7-stable): Write synchronous props again after a React commit m...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/software-mansion/react-native-reanimated/commit/36b61af405c0f39b8dd3df9ce2ce29c8feef3c13\"\u003e\u003ccode\u003e36b61af\u003c/code\u003e\u003c/a\u003e cherry-pick(4.7-stable): Remove a view's children before the view, as React d...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/software-mansion/react-native-reanimated/commit/e1367a4854feb0c1b255c5d717c574c4ee995590\"\u003e\u003ccode\u003ee1367a4\u003c/code\u003e\u003c/a\u003e cherry-pick(4.7-stable): Don't read ViewProps opacity from nested Text props ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/software-mansion/react-native-reanimated/commit/11ae0e7058283d3f154478c3781208e54998a7d1\"\u003e\u003ccode\u003e11ae0e7\u003c/code\u003e\u003c/a\u003e cherry-pick(4.7-stable): Give every view React deletes the same lifecycle in ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/software-mansion/react-native-reanimated/commit/6bafff64a32ebe1be7c8553243dc592b75fa3f02\"\u003e\u003ccode\u003e6bafff6\u003c/code\u003e\u003c/a\u003e cherry-pick(4.7-stable): Don't crash when a view flattens in the same commit ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/software-mansion/react-native-reanimated/commit/e5191e4d5eccd3b915539bec802df6a4979b56ed\"\u003e\u003ccode\u003ee5191e4\u003c/code\u003e\u003c/a\u003e cherry-pick(4.7-stable): Skip shared element transitions for nested Text (\u003ca href=\"https://github.com/software-mansion/react-native-reanimated/tree/HEAD/packages/react-native-reanimated/issues/10\"\u003e#10\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/software-mansion/react-native-reanimated/commit/404b8891363139d22ec44421ffb6a38d79ebb5a1\"\u003e\u003ccode\u003e404b889\u003c/code\u003e\u003c/a\u003e cherry-pick(4.7-stable): Crash in useAnimatedSensor on events labeled with an...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/software-mansion/react-native-reanimated/commits/4.7.1/packages/react-native-reanimated\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `react-native-worklets` from 0.7.1 to 0.13.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/software-mansion/react-native-reanimated/releases\"\u003ereact-native-worklets's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eWorklets - 0.13.0\u003c/h2\u003e\n\u003ch2\u003eKey changes\u003c/h2\u003e\n\u003ch3\u003eNetworking on Worklet Runtimes in Bundle Mode\u003c/h3\u003e\n\u003cp\u003eWorklet Runtimes created in Bundle Mode now ship a standalone networking module: \u003ccode\u003eXMLHttpRequest\u003c/code\u003e, \u003ccode\u003eBlob\u003c/code\u003e, \u003ccode\u003eFileReader\u003c/code\u003e, \u003ccode\u003efetch\u003c/code\u003e (whatwg), \u003ccode\u003eHeaders\u003c/code\u003e, \u003ccode\u003eRequest\u003c/code\u003e, \u003ccode\u003eResponse\u003c/code\u003e, \u003ccode\u003eFormData\u003c/code\u003e, \u003ccode\u003eAbortController\u003c/code\u003e and \u003ccode\u003eAbortSignal\u003c/code\u003e. It replaces the earlier networking preview and its \u003ccode\u003eFETCH_PREVIEW_ENABLED\u003c/code\u003e feature flag. \u003ccode\u003ecreateWorkletRuntime\u003c/code\u003e accepts a new \u003ccode\u003eenableNetworking\u003c/code\u003e option, which defaults to \u003ccode\u003etrue\u003c/code\u003e and is forced off on runtimes without the Event Loop.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003erefactor(Worklets): remove the networking preview by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10250\"\u003esoftware-mansion/react-native-reanimated#10250\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(Worklets): networking module with XMLHttpRequest by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10493\"\u003esoftware-mansion/react-native-reanimated#10493\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(Worklets): add Blob and FileReader to the networking module by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10494\"\u003esoftware-mansion/react-native-reanimated#10494\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(Worklets): add fetch to the networking module by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10495\"\u003esoftware-mansion/react-native-reanimated#10495\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(Worklets): add FormData to the networking module by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10496\"\u003esoftware-mansion/react-native-reanimated#10496\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(Worklets): add AbortController to the networking module by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10497\"\u003esoftware-mansion/react-native-reanimated#10497\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(Worklets): add the enableNetworking runtime option by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10498\"\u003esoftware-mansion/react-native-reanimated#10498\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eOXC port of the Worklets Babel plugin\u003c/h3\u003e\n\u003cp\u003eThe Worklets Babel plugin has a Rust port built on OXC for Bundle Mode. It is available as \u003ccode\u003ereact-native-worklets/plugin-oxc/babel\u003c/code\u003e, with prebuilt binaries for macOS, Linux and Windows on x64 and arm64.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003efeat(Worklets): port babel plugin to oxc by \u003ca href=\"https://github.com/tshmieldev\"\u003e\u003ccode\u003e@​tshmieldev\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/9518\"\u003esoftware-mansion/react-native-reanimated#9518\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(Worklets): publishing oxc plugin binaries by \u003ca href=\"https://github.com/tshmieldev\"\u003e\u003ccode\u003e@​tshmieldev\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10608\"\u003esoftware-mansion/react-native-reanimated#10608\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed-type Synchronizable\u003c/h3\u003e\n\u003cp\u003e\u003ccode\u003ecreateSynchronizable\u003c/code\u003e accepts a new \u003ccode\u003efixedType\u003c/code\u003e option. A fixed-type Synchronizable holds a number or a boolean without serialization and exposes \u003ccode\u003esetDirty\u003c/code\u003e, a non-exclusive write that doesn't wait for other \u003ccode\u003esetDirty\u003c/code\u003e calls. On the C++ side \u003ccode\u003eSynchronizable\u003c/code\u003e is now an interface over \u003ccode\u003estd::variant\u003c/code\u003e values with a \u003ccode\u003eSynchronizableDynamic\u003c/code\u003e implementation, and several races on exotic architectors and lock leaks in the dynamic implementation are fixed.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003efeat(Worklets): fixed-type Synchronizable by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10296\"\u003esoftware-mansion/react-native-reanimated#10296\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(Worklets): add setDirty to the Synchronizable interface by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10295\"\u003esoftware-mansion/react-native-reanimated#10295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor(Worklets): operate on variant values in Synchronizable by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10294\"\u003esoftware-mansion/react-native-reanimated#10294\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor(Worklets): extract SynchronizableDynamic from Synchronizable by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10293\"\u003esoftware-mansion/react-native-reanimated#10293\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(Worklets): make Synchronizable value access atomic by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10292\"\u003esoftware-mansion/react-native-reanimated#10292\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(Worklets): release the Synchronizable lock when a setter throws by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10331\"\u003esoftware-mansion/react-native-reanimated#10331\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor(Worklets): identify the Synchronizable lock owner with std::thread::id by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10349\"\u003esoftware-mansion/react-native-reanimated#10349\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs(Worklets): document fixed-type Synchronizable by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10297\"\u003esoftware-mansion/react-native-reanimated#10297\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFaster startup\u003c/h3\u003e\n\u003cp\u003eThe native side of \u003ccode\u003eWorkletsModule\u003c/code\u003e is created on a background thread as soon as the module is created, so \u003ccode\u003einstallTurboModule\u003c/code\u003e only attaches it to the RN Runtime. In Bundle Mode the bundle is evaluated on the UI Worklet Runtime on a background thread while the RN Runtime evaluates it, instead of on the JS thread in \u003ccode\u003estart\u003c/code\u003e.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003efeat(Worklets): initialize the native module ahead of time by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10489\"\u003esoftware-mansion/react-native-reanimated#10489\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(Worklets): start the UI runtime in Bundle Mode ahead of time by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10490\"\u003esoftware-mansion/react-native-reanimated#10490\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eHermes microtask queue on Worklet Runtimes\u003c/h3\u003e\n\u003cp\u003eWorklet Runtimes use the built-in Hermes microtask queue instead of a custom JS implementation.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003erefactor: migrate to Hermes microtaskQueue by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10199\"\u003esoftware-mansion/react-native-reanimated#10199\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor: intertwine RAF queue with microtasks by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10237\"\u003esoftware-mansion/react-native-reanimated#10237\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eRemoved SerializableInitializer (SerializableHandle)\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/software-mansion/react-native-reanimated/blob/main/packages/react-native-worklets/CHANGELOG.md\"\u003ereact-native-worklets's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e0.13.0 — 2026-09-18\u003c/h2\u003e\n\u003ch3\u003e🛠 Breaking changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eOmit empty worklet closures and export closure-free worklets directly in Bundle Mode without factory wrappers. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10517\"\u003e#10517\u003c/a\u003e by \u003ca href=\"https://github.com/tshmieldev\"\u003e\u003ccode\u003e@​tshmieldev\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eStore worklet closures as arrays instead of objects. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10506\"\u003e#10506\u003c/a\u003e by \u003ca href=\"https://github.com/tshmieldev\"\u003e\u003ccode\u003e@​tshmieldev\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRemoved the networking preview together with its \u003ccode\u003eFETCH_PREVIEW_ENABLED\u003c/code\u003e feature flag. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10250\"\u003e#10250\u003c/a\u003e by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRemove the Serializable handle - \u003ccode\u003eSerializableInitializer\u003c/code\u003e, \u003ccode\u003ecreateSerializableInitializer\u003c/code\u003e and the \u003ccode\u003e__init\u003c/code\u003e clone path are gone. \u003ccode\u003eSerializable::ValueType::HandleType\u003c/code\u003e stays in the Compat Stable API enum for ABI compatibility and \u003ccode\u003eextractSerializable\u003c/code\u003e throws for it. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10414\"\u003e#10414\u003c/a\u003e by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003emakeShareable\u003c/code\u003e now serializes its value eagerly into a retaining Serializable instead of rebuilding it lazily on each runtime through a handle. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10412\"\u003e#10412\u003c/a\u003e by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRemove worklet context objects from the Babel plugin. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10411\"\u003e#10411\u003c/a\u003e by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eChange the C++ \u003ccode\u003eSynchronizable\u003c/code\u003e interface to operate on \u003ccode\u003estd::variant\u003c/code\u003e values. Getters return a \u003ccode\u003eSerializable\u003c/code\u003e, a \u003ccode\u003edouble\u003c/code\u003e or a \u003ccode\u003ebool\u003c/code\u003e, and \u003ccode\u003esetBlocking\u003c/code\u003e takes either a \u003ccode\u003eSerializable\u003c/code\u003e or a plain value. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10294\"\u003e#10294\u003c/a\u003e by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd virtual \u003ccode\u003esetDirty\u003c/code\u003e to the C++ \u003ccode\u003eSynchronizable\u003c/code\u003e interface. \u003ccode\u003eSynchronizableDynamic\u003c/code\u003e throws from it. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10295\"\u003e#10295\u003c/a\u003e by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e🎉 New features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd iOS Swift Package Manager support via \u003ccode\u003ePackage.swift\u003c/code\u003e and SPM integration metadata in \u003ccode\u003ereact-native.config.js\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10472\"\u003e#10472\u003c/a\u003e by \u003ca href=\"https://github.com/kacperzolkiewski\"\u003e\u003ccode\u003e@​kacperzolkiewski\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd a standalone networking module for Worklet Runtimes in Bundle Mode, with \u003ccode\u003eXMLHttpRequest\u003c/code\u003e for text and \u003ccode\u003earraybuffer\u003c/code\u003e responses. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10493\"\u003e#10493\u003c/a\u003e by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eBlob\u003c/code\u003e and \u003ccode\u003eFileReader\u003c/code\u003e to the Worklets networking module, and \u003ccode\u003eblob\u003c/code\u003e and \u003ccode\u003earraybuffer\u003c/code\u003e response types to \u003ccode\u003eXMLHttpRequest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10494\"\u003e#10494\u003c/a\u003e by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003efetch\u003c/code\u003e, \u003ccode\u003eHeaders\u003c/code\u003e, \u003ccode\u003eRequest\u003c/code\u003e and \u003ccode\u003eResponse\u003c/code\u003e to the Worklets networking module, backed by \u003ccode\u003ewhatwg-fetch\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10495\"\u003e#10495\u003c/a\u003e by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eFormData\u003c/code\u003e to the Worklets networking module, with multipart encoding done in JavaScript. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10496\"\u003e#10496\u003c/a\u003e by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eAbortController\u003c/code\u003e and \u003ccode\u003eAbortSignal\u003c/code\u003e to the Worklets networking module. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10497\"\u003e#10497\u003c/a\u003e by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd the \u003ccode\u003eenableNetworking\u003c/code\u003e option to \u003ccode\u003ecreateWorkletRuntime\u003c/code\u003e. It defaults to \u003ccode\u003etrue\u003c/code\u003e and is forced off on runtimes without the Event Loop. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10498\"\u003e#10498\u003c/a\u003e by \u003ca href=\"https://github.com/tjzel\"\u003e\u003ccode\u003e@​tjzel\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePer-runtime caching for \u003ccode\u003eRetainingSerializable\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10264\"\u003e#10264\u003c/a\u003e by \u003ca href=\"https://github.com/tshmieldev\"\u003e\u003ccode\u003e@​tshmieldev\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eisOnUIThread\u003c/code\u003e to the Worklets Stable API. (\u003ca href=\"https://redirect.github.com/software-mansion/react-native-reanimated/pull/10265\"\u003e#10265\u003c/a\u003e by \u003ca href=\"https://github.com/bartlomiejbloniarz\"\u003e\u003ccode\u003e@​bartlomiejbloniarz\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd the fast-path \u003ccode\u003efixedType\u003c/code\u003e option to \u003ccode\u003ecreateSynchronizable\u003c/code\u003e. A fixed-type Synchronizable holds a number or a boolean without serialization and exposes \u003ccode\u003esetDirty\u003c/code\u003e, a non-exclusive write that doesn't wait fo...\n\n_Description has been truncated_","html_url":"https://github.com/markjsjordan/folk-care/pull/42","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/markjsjordan%2Ffolk-care/issues/42","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/42/packages"}},{"old_version":"2.29.4","new_version":"2.31.0","update_type":"minor","path":null,"pr_created_at":"2026-10-09T07:28:13.000Z","version_change":"2.29.4 → 2.31.0","issue":{"uuid":"5774543829","node_id":"PR_kwDOAfS9pM8AAAABHfNFMA","number":568,"state":"closed","title":"chore(deps): bump moment from 2.29.4 to 2.31.0","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-10-09T12:23:49.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-09T07:28:13.000Z","updated_at":"2026-10-09T12:23:53.000Z","time_to_close":17736,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"moment","old_version":"2.29.4","new_version":"2.31.0","repository_url":"https://github.com/moment/moment"}],"path":null,"ecosystem":"npm"},"body":"Bumps [moment](https://github.com/moment/moment) from 2.29.4 to 2.31.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/releases\"\u003emoment's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.31.0\u003c/h2\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.30.1\u003c/h2\u003e\n\u003cp\u003eNote - this was not a new release, but rather just updating GitHub's \u003ccode\u003elatest\u003c/code\u003e release to indicate the existing version \u003ccode\u003e2.30.1\u003c/code\u003e from Dec 27, 2023.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/blob/develop/CHANGELOG.md\"\u003emoment's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch3\u003e2.31.0\u003c/h3\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e2.30.1\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/15b45d48a176312e8f34143c5a800090abf4787f\"\u003e\u003ccode\u003e15b45d4\u003c/code\u003e\u003c/a\u003e [pkg] Build 2.31.0 (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6452\"\u003e#6452\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/631cd81454ee001e1f508e21270eae0b6bb62974\"\u003e\u003ccode\u003e631cd81\u003c/code\u003e\u003c/a\u003e [pkg] Update changelog for upcoming release (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6394\"\u003e#6394\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/6caff9e0d54e85a63a6eb97d7361f1da35bc58f4\"\u003e\u003ccode\u003e6caff9e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/710703b7eac93535ad125cbf4feb3d42afed6fb3\"\u003e\u003ccode\u003e710703b\u003c/code\u003e\u003c/a\u003e [feature] Add internal date-default hook for Moment Timezone (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6451\"\u003e#6451\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/863ed940556e6e63c43de23981a4853036a003ac\"\u003e\u003ccode\u003e863ed94\u003c/code\u003e\u003c/a\u003e [bugfix] Add stack traces to conditional deprecation warnings (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6450\"\u003e#6450\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/2c7abe1c42ee15445d30c2c5d536750a1e43a09a\"\u003e\u003ccode\u003e2c7abe1\u003c/code\u003e\u003c/a\u003e [bugfix] Apply postformat to locale relative time methods (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6448\"\u003e#6448\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/9c45ac38690c649c95e19923276b63da5fe2be26\"\u003e\u003ccode\u003e9c45ac3\u003c/code\u003e\u003c/a\u003e [bugfix] Include metadata in all-locales bundle (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6447\"\u003e#6447\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/f6eefc5fc7b44ceccbd007aeffc48ebc5eac30fa\"\u003e\u003ccode\u003ef6eefc5\u003c/code\u003e\u003c/a\u003e [bugfix] Validate timezone offset range (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6446\"\u003e#6446\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/136b441794a3bb207d593add3b59e9de0e062523\"\u003e\u003ccode\u003e136b441\u003c/code\u003e\u003c/a\u003e [bugfix] Avoid Object.assign in duration.humanize (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6443\"\u003e#6443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/0d1050437b40f66ac47e14b285bb3d09676cf2e0\"\u003e\u003ccode\u003e0d10504\u003c/code\u003e\u003c/a\u003e [bugfix] Fix locale('\u003cstrong\u003eproto\u003c/strong\u003e') corrupting the global locale (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6442\"\u003e#6442\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moment/moment/compare/2.29.4...2.31.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for moment since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=moment\u0026package-manager=npm_and_yarn\u0026previous-version=2.29.4\u0026new-version=2.31.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/BeWelcome/rox/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/BeWelcome/rox/pull/568","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/BeWelcome%2Frox/issues/568","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/568/packages"}},{"old_version":"2.30.1","new_version":"2.31.0","update_type":"minor","path":null,"pr_created_at":"2026-10-09T06:53:27.000Z","version_change":"2.30.1 → 2.31.0","issue":{"uuid":"5774153204","node_id":"PR_kwDOLxoDjM8AAAABHe5SUw","number":109,"state":"closed","title":"chore(deps): bump moment from 2.30.1 to 2.31.0","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":3,"pull_request":true,"closed_at":"2026-10-09T06:58:10.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-09T06:53:27.000Z","updated_at":"2026-10-09T06:58:13.000Z","time_to_close":283,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"moment","old_version":"2.30.1","new_version":"2.31.0","repository_url":"https://github.com/moment/moment"}],"path":null,"ecosystem":"npm"},"body":"Bumps [moment](https://github.com/moment/moment) from 2.30.1 to 2.31.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/releases\"\u003emoment's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.31.0\u003c/h2\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/blob/develop/CHANGELOG.md\"\u003emoment's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch3\u003e2.31.0\u003c/h3\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/15b45d48a176312e8f34143c5a800090abf4787f\"\u003e\u003ccode\u003e15b45d4\u003c/code\u003e\u003c/a\u003e [pkg] Build 2.31.0 (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6452\"\u003e#6452\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/631cd81454ee001e1f508e21270eae0b6bb62974\"\u003e\u003ccode\u003e631cd81\u003c/code\u003e\u003c/a\u003e [pkg] Update changelog for upcoming release (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6394\"\u003e#6394\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/6caff9e0d54e85a63a6eb97d7361f1da35bc58f4\"\u003e\u003ccode\u003e6caff9e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/710703b7eac93535ad125cbf4feb3d42afed6fb3\"\u003e\u003ccode\u003e710703b\u003c/code\u003e\u003c/a\u003e [feature] Add internal date-default hook for Moment Timezone (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6451\"\u003e#6451\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/863ed940556e6e63c43de23981a4853036a003ac\"\u003e\u003ccode\u003e863ed94\u003c/code\u003e\u003c/a\u003e [bugfix] Add stack traces to conditional deprecation warnings (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6450\"\u003e#6450\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/2c7abe1c42ee15445d30c2c5d536750a1e43a09a\"\u003e\u003ccode\u003e2c7abe1\u003c/code\u003e\u003c/a\u003e [bugfix] Apply postformat to locale relative time methods (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6448\"\u003e#6448\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/9c45ac38690c649c95e19923276b63da5fe2be26\"\u003e\u003ccode\u003e9c45ac3\u003c/code\u003e\u003c/a\u003e [bugfix] Include metadata in all-locales bundle (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6447\"\u003e#6447\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/f6eefc5fc7b44ceccbd007aeffc48ebc5eac30fa\"\u003e\u003ccode\u003ef6eefc5\u003c/code\u003e\u003c/a\u003e [bugfix] Validate timezone offset range (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6446\"\u003e#6446\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/136b441794a3bb207d593add3b59e9de0e062523\"\u003e\u003ccode\u003e136b441\u003c/code\u003e\u003c/a\u003e [bugfix] Avoid Object.assign in duration.humanize (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6443\"\u003e#6443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/0d1050437b40f66ac47e14b285bb3d09676cf2e0\"\u003e\u003ccode\u003e0d10504\u003c/code\u003e\u003c/a\u003e [bugfix] Fix locale('\u003cstrong\u003eproto\u003c/strong\u003e') corrupting the global locale (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6442\"\u003e#6442\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moment/moment/compare/2.30.1...2.31.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for moment since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=moment\u0026package-manager=npm_and_yarn\u0026previous-version=2.30.1\u0026new-version=2.31.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/droidconKE/flutterconKE2024Web/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/droidconKE/flutterconKE2024Web/pull/109","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/droidconKE%2FflutterconKE2024Web/issues/109","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/109/packages"}},{"old_version":"2.30.1","new_version":"2.31.0","update_type":"minor","path":null,"pr_created_at":"2026-10-09T00:42:30.000Z","version_change":"2.30.1 → 2.31.0","issue":{"uuid":"5770977798","node_id":"PR_kwDOMbEDbc8AAAABHcZvbg","number":591,"state":"open","title":"chore(deps): bump moment from 2.30.1 to 2.31.0","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-09T00:42:30.000Z","updated_at":"2026-10-09T00:44:24.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"moment","old_version":"2.30.1","new_version":"2.31.0","repository_url":"https://github.com/moment/moment"}],"path":null,"ecosystem":"npm"},"body":"Bumps [moment](https://github.com/moment/moment) from 2.30.1 to 2.31.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/releases\"\u003emoment's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.31.0\u003c/h2\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/blob/develop/CHANGELOG.md\"\u003emoment's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch3\u003e2.31.0\u003c/h3\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/15b45d48a176312e8f34143c5a800090abf4787f\"\u003e\u003ccode\u003e15b45d4\u003c/code\u003e\u003c/a\u003e [pkg] Build 2.31.0 (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6452\"\u003e#6452\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/631cd81454ee001e1f508e21270eae0b6bb62974\"\u003e\u003ccode\u003e631cd81\u003c/code\u003e\u003c/a\u003e [pkg] Update changelog for upcoming release (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6394\"\u003e#6394\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/6caff9e0d54e85a63a6eb97d7361f1da35bc58f4\"\u003e\u003ccode\u003e6caff9e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/710703b7eac93535ad125cbf4feb3d42afed6fb3\"\u003e\u003ccode\u003e710703b\u003c/code\u003e\u003c/a\u003e [feature] Add internal date-default hook for Moment Timezone (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6451\"\u003e#6451\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/863ed940556e6e63c43de23981a4853036a003ac\"\u003e\u003ccode\u003e863ed94\u003c/code\u003e\u003c/a\u003e [bugfix] Add stack traces to conditional deprecation warnings (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6450\"\u003e#6450\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/2c7abe1c42ee15445d30c2c5d536750a1e43a09a\"\u003e\u003ccode\u003e2c7abe1\u003c/code\u003e\u003c/a\u003e [bugfix] Apply postformat to locale relative time methods (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6448\"\u003e#6448\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/9c45ac38690c649c95e19923276b63da5fe2be26\"\u003e\u003ccode\u003e9c45ac3\u003c/code\u003e\u003c/a\u003e [bugfix] Include metadata in all-locales bundle (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6447\"\u003e#6447\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/f6eefc5fc7b44ceccbd007aeffc48ebc5eac30fa\"\u003e\u003ccode\u003ef6eefc5\u003c/code\u003e\u003c/a\u003e [bugfix] Validate timezone offset range (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6446\"\u003e#6446\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/136b441794a3bb207d593add3b59e9de0e062523\"\u003e\u003ccode\u003e136b441\u003c/code\u003e\u003c/a\u003e [bugfix] Avoid Object.assign in duration.humanize (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6443\"\u003e#6443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/0d1050437b40f66ac47e14b285bb3d09676cf2e0\"\u003e\u003ccode\u003e0d10504\u003c/code\u003e\u003c/a\u003e [bugfix] Fix locale('\u003cstrong\u003eproto\u003c/strong\u003e') corrupting the global locale (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6442\"\u003e#6442\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moment/moment/compare/2.30.1...2.31.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for moment since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=moment\u0026package-manager=npm_and_yarn\u0026previous-version=2.30.1\u0026new-version=2.31.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/DEFRA/forms-submission-api/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/DEFRA/forms-submission-api/pull/591","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/DEFRA%2Fforms-submission-api/issues/591","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/591/packages"}},{"old_version":"2.30.1","new_version":"2.31.0","update_type":"minor","path":"/worklenz-frontend","pr_created_at":"2026-10-07T15:55:50.000Z","version_change":"2.30.1 → 2.31.0","issue":{"uuid":"5747895823","node_id":"PR_kwDOL8QT2c8AAAABHJ6Y-w","number":492,"state":"open","title":"chore(deps): bump moment from 2.30.1 to 2.31.0 in /worklenz-frontend","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-07T15:55:50.000Z","updated_at":"2026-10-07T15:55:59.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"moment","old_version":"2.30.1","new_version":"2.31.0","repository_url":"https://github.com/moment/moment"}],"path":"/worklenz-frontend","ecosystem":"npm"},"body":"Bumps [moment](https://github.com/moment/moment) from 2.30.1 to 2.31.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/releases\"\u003emoment's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.31.0\u003c/h2\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/blob/develop/CHANGELOG.md\"\u003emoment's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch3\u003e2.31.0\u003c/h3\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/15b45d48a176312e8f34143c5a800090abf4787f\"\u003e\u003ccode\u003e15b45d4\u003c/code\u003e\u003c/a\u003e [pkg] Build 2.31.0 (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6452\"\u003e#6452\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/631cd81454ee001e1f508e21270eae0b6bb62974\"\u003e\u003ccode\u003e631cd81\u003c/code\u003e\u003c/a\u003e [pkg] Update changelog for upcoming release (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6394\"\u003e#6394\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/6caff9e0d54e85a63a6eb97d7361f1da35bc58f4\"\u003e\u003ccode\u003e6caff9e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/710703b7eac93535ad125cbf4feb3d42afed6fb3\"\u003e\u003ccode\u003e710703b\u003c/code\u003e\u003c/a\u003e [feature] Add internal date-default hook for Moment Timezone (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6451\"\u003e#6451\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/863ed940556e6e63c43de23981a4853036a003ac\"\u003e\u003ccode\u003e863ed94\u003c/code\u003e\u003c/a\u003e [bugfix] Add stack traces to conditional deprecation warnings (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6450\"\u003e#6450\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/2c7abe1c42ee15445d30c2c5d536750a1e43a09a\"\u003e\u003ccode\u003e2c7abe1\u003c/code\u003e\u003c/a\u003e [bugfix] Apply postformat to locale relative time methods (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6448\"\u003e#6448\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/9c45ac38690c649c95e19923276b63da5fe2be26\"\u003e\u003ccode\u003e9c45ac3\u003c/code\u003e\u003c/a\u003e [bugfix] Include metadata in all-locales bundle (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6447\"\u003e#6447\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/f6eefc5fc7b44ceccbd007aeffc48ebc5eac30fa\"\u003e\u003ccode\u003ef6eefc5\u003c/code\u003e\u003c/a\u003e [bugfix] Validate timezone offset range (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6446\"\u003e#6446\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/136b441794a3bb207d593add3b59e9de0e062523\"\u003e\u003ccode\u003e136b441\u003c/code\u003e\u003c/a\u003e [bugfix] Avoid Object.assign in duration.humanize (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6443\"\u003e#6443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/0d1050437b40f66ac47e14b285bb3d09676cf2e0\"\u003e\u003ccode\u003e0d10504\u003c/code\u003e\u003c/a\u003e [bugfix] Fix locale('\u003cstrong\u003eproto\u003c/strong\u003e') corrupting the global locale (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6442\"\u003e#6442\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moment/moment/compare/2.30.1...2.31.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for moment since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=moment\u0026package-manager=npm_and_yarn\u0026previous-version=2.30.1\u0026new-version=2.31.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Worklenz/worklenz/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/Worklenz/worklenz/pull/492","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Worklenz%2Fworklenz/issues/492","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/492/packages"}},{"old_version":"2.30.1","new_version":"2.31.0","update_type":"minor","path":null,"pr_created_at":"2026-10-07T03:09:49.000Z","version_change":"2.30.1 → 2.31.0","issue":{"uuid":"5738742055","node_id":"PR_kwDOSEc7Gs8AAAABHCkPTQ","number":372,"state":"closed","title":"Bump the npm_and_yarn group across 14 directories with 11 updates","user":"dependabot[bot]","labels":["dependencies","javascript","auto-closed: invalid-title"],"assignees":[],"locked":false,"comments_count":3,"pull_request":true,"closed_at":"2026-10-07T03:10:02.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-07T03:09:49.000Z","updated_at":"2026-10-07T03:10:12.000Z","time_to_close":13,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"npm_and_yarn","update_count":11,"packages":[{"name":"electron","old_version":"42.3.0","new_version":"42.10.0","repository_url":"https://github.com/electron/electron"},{"name":"markdown-it","old_version":"13.0.2","new_version":"14.3.1","repository_url":"https://github.com/markdown-it/markdown-it"},{"name":"moment","old_version":"2.30.1","new_version":"2.31.0","repository_url":"https://github.com/moment/moment"},{"name":"undici","old_version":"8.10.0","new_version":"8.10.2","repository_url":"https://github.com/nodejs/undici"},{"name":"adm-zip","old_version":"0.5.18","new_version":"0.6.1","repository_url":"https://github.com/cthackers/adm-zip"},{"name":"nanoid","old_version":"3.3.11","new_version":"3.3.12","repository_url":"https://github.com/ai/nanoid"},{"name":"nodemailer","old_version":"6.10.1","new_version":"10.0.9","repository_url":"https://github.com/nodemailer/nodemailer"},{"name":"fast-uri","old_version":"3.1.3","new_version":"3.1.8","repository_url":"https://github.com/fastify/fast-uri"},{"name":"joi","old_version":"17.5.0","new_version":"17.13.8","repository_url":"https://github.com/hapijs/joi"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 9 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [electron](https://github.com/electron/electron) | `42.3.0` | `42.10.0` |\n| [markdown-it](https://github.com/markdown-it/markdown-it) | `13.0.2` | `14.3.1` |\n| [moment](https://github.com/moment/moment) | `2.30.1` | `2.31.0` |\n| [undici](https://github.com/nodejs/undici) | `8.10.0` | `8.10.2` |\n| [adm-zip](https://github.com/cthackers/adm-zip) | `0.5.18` | `0.6.1` |\n| [nanoid](https://github.com/ai/nanoid) | `3.3.11` | `3.3.12` |\n| [nodemailer](https://github.com/nodemailer/nodemailer) | `6.10.1` | `10.0.9` |\n| [fast-uri](https://github.com/fastify/fast-uri) | `3.1.3` | `3.1.8` |\n| [joi](https://github.com/hapijs/joi) | `17.5.0` | `17.13.8` |\n\nBumps the npm_and_yarn group with 1 update in the /Assets/TinyMCE/JoplinLists directory: [brace-expansion](https://github.com/juliangruber/brace-expansion).\nBumps the npm_and_yarn group with 2 updates in the /packages/app-cli/tests/support/plugins/ai_chat directory: [brace-expansion](https://github.com/juliangruber/brace-expansion) and [fast-uri](https://github.com/fastify/fast-uri).\nBumps the npm_and_yarn group with 2 updates in the /packages/app-cli/tests/support/plugins/ai_search directory: [brace-expansion](https://github.com/juliangruber/brace-expansion) and [fast-uri](https://github.com/fastify/fast-uri).\nBumps the npm_and_yarn group with 4 updates in the /packages/app-cli/tests/support/plugins/codemirror5-and-codemirror6 directory: [moment](https://github.com/moment/moment), [nanoid](https://github.com/ai/nanoid), [brace-expansion](https://github.com/juliangruber/brace-expansion) and [ip-address](https://github.com/beaugunderson/ip-address).\nBumps the npm_and_yarn group with 2 updates in the /packages/app-cli/tests/support/plugins/codemirror6 directory: [nanoid](https://github.com/ai/nanoid) and [brace-expansion](https://github.com/juliangruber/brace-expansion).\nBumps the npm_and_yarn group with 2 updates in the /packages/app-cli/tests/support/plugins/menu directory: [brace-expansion](https://github.com/juliangruber/brace-expansion) and [fast-uri](https://github.com/fastify/fast-uri).\nBumps the npm_and_yarn group with 3 updates in the /packages/app-cli/tests/support/plugins/note_list_renderer directory: [moment](https://github.com/moment/moment), [nanoid](https://github.com/ai/nanoid) and [brace-expansion](https://github.com/juliangruber/brace-expansion).\nBumps the npm_and_yarn group with 4 updates in the /packages/app-desktop directory: [electron](https://github.com/electron/electron), [markdown-it](https://github.com/markdown-it/markdown-it), [moment](https://github.com/moment/moment) and [undici](https://github.com/nodejs/undici).\nBumps the npm_and_yarn group with 5 updates in the /packages/lib directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [markdown-it](https://github.com/markdown-it/markdown-it) | `13.0.2` | `14.3.1` |\n| [moment](https://github.com/moment/moment) | `2.30.1` | `2.31.0` |\n| [undici](https://github.com/nodejs/undici) | `8.10.0` | `8.10.2` |\n| [adm-zip](https://github.com/cthackers/adm-zip) | `0.5.18` | `0.6.1` |\n| [nanoid](https://github.com/ai/nanoid) | `3.3.11` | `3.3.12` |\n\nBumps the npm_and_yarn group with 1 update in the /packages/renderer directory: [markdown-it](https://github.com/markdown-it/markdown-it).\nBumps the npm_and_yarn group with 2 updates in the /packages/server directory: [markdown-it](https://github.com/markdown-it/markdown-it) and [nodemailer](https://github.com/nodemailer/nodemailer).\nBumps the npm_and_yarn group with 2 updates in the /packages/tools directory: [markdown-it](https://github.com/markdown-it/markdown-it) and [moment](https://github.com/moment/moment).\nBumps the npm_and_yarn group with 2 updates in the /packages/utils directory: [markdown-it](https://github.com/markdown-it/markdown-it) and [moment](https://github.com/moment/moment).\n\nUpdates `electron` from 42.3.0 to 42.10.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/electron/electron/releases\"\u003eelectron's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eelectron v42.10.0\u003c/h2\u003e\n\u003ch1\u003eRelease Notes for v42.10.0\u003c/h1\u003e\n\u003ch2\u003eFeatures\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed contentTracing module to capture Node.js trace categories. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52973\"\u003e#52973\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eFixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed DevTools device metrics overrides persisting indefinitely when a remote debugging client disconnected without clearing them. \u003ca href=\"https://redirect.github.com/electron/electron/pull/53133\"\u003e#53133\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52946\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52930\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed DevTools popup and context menus not appearing when DevTools is hosted in a custom window via \u003ccode\u003ewebContents.setDevToolsWebContents()\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52981\"\u003e#52981\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52937\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52434\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003eBrowserWindow.unmaximize()\u003c/code\u003e and \u003ccode\u003erestore()\u003c/code\u003e having no effect on Wayland when the window was maximized immediately after creation. \u003ca href=\"https://redirect.github.com/electron/electron/pull/53126\"\u003e#53126\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/53124\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003eUncaught illegal access\u003c/code\u003e errors and possible renderer crashes after closing a same-process child window or removing an iframe with \u003ccode\u003enodeIntegrationInSubFrames\u003c/code\u003e enabled. \u003ca href=\"https://redirect.github.com/electron/electron/pull/53042\"\u003e#53042\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/53040\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003edialog.showOpenDialog\u003c/code\u003e/\u003ccode\u003edialog.showSaveDialog\u003c/code\u003e opening at an unusable location on Linux when \u003ccode\u003edefaultPath\u003c/code\u003e is a bare filename without a directory. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52980\"\u003e#52980\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52401\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52402\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed a crash on Linux when the D-Bus session bus disconnected while the app was running, such as at logout or when dbus is restarted. \u003ca href=\"https://redirect.github.com/electron/electron/pull/53094\"\u003e#53094\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/53095\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/53096\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed a crash on Windows when V8 posted a delayed worker task during shutdown. \u003ca href=\"https://redirect.github.com/electron/electron/pull/53014\"\u003e#53014\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/53013\"\u003e43\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed a crash with \u003ccode\u003eapp.setLoginItemSettings\u003c/code\u003e if a non-UTF8 service name is used. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52989\"\u003e#52989\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52944\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52801\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed a possible crash (SIGABRT) during process exit when the process had loaded \u003ccode\u003etls\u003c/code\u003e/\u003ccode\u003ehttps\u003c/code\u003e shortly before exiting, affecting \u003ccode\u003eapp.exit()\u003c/code\u003e before \u003ccode\u003eready\u003c/code\u003e and short-lived \u003ccode\u003eELECTRON_RUN_AS_NODE\u003c/code\u003e / \u003ccode\u003echild_process.fork()\u003c/code\u003e scripts. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52992\"\u003e#52992\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52870\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52871\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed a possible main process crash at quit when a session was created from JavaScript that runs during shutdown. \u003ca href=\"https://redirect.github.com/electron/electron/pull/53132\"\u003e#53132\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52925\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52924\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed a rare crash in the main process when DevTools were opened and a garbage collection ran before the DevTools frontend finished loading. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52994\"\u003e#52994\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52903\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52904\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed a renderer crash when a page calls \u003ccode\u003eSpeechRecognition.available()\u003c/code\u003e or \u003ccode\u003eSpeechRecognition.install()\u003c/code\u003e with \u003ccode\u003eprocessLocally\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/electron/electron/pull/53016\"\u003e#53016\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/53015\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/53021\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed an issue on Linux where the system theme color appeared at the top edge of frameless windows. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52978\"\u003e#52978\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/53006\"\u003e41\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52179\"\u003e43\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed an issue where some values passed into \u003ccode\u003erequestSingleInstanceLock\u003c/code\u003e could result in a crash. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52982\"\u003e#52982\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52471\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52470\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed crash in sharedTexture module when GPU context becomes unavailable. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52983\"\u003e#52983\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52938\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52926\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed document title updates when using back/forward navigation using the same document without utilizing \u003ccode\u003ebrowserWindow.setTitle()\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/electron/electron/pull/53099\"\u003e#53099\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/53023\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52968\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed the built-in PDF viewer not rendering documents in in-memory sessions (partitions without the \u003ccode\u003epersist:\u003c/code\u003e prefix). \u003ca href=\"https://redirect.github.com/electron/electron/pull/52990\"\u003e#52990\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52835\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52834\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed titleBarOverlay.color set to \u003ccode\u003ergba(0,0,0,0)\u003c/code\u003e failing back to default frame color. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52976\"\u003e#52976\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/53004\"\u003e41\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52010\"\u003e43\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed utility process crashes at exit on Windows 11 24H2 and later. \u003ca href=\"https://redirect.github.com/electron/electron/pull/53091\"\u003e#53091\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/53092\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/53093\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eOther Changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBackported fixes from upstream Chromium and V8. \u003ca href=\"https://redirect.github.com/electron/electron/pull/53060\"\u003e#53060\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a 1-in-200 chance per renderer process on Windows of scripts on the first page load being compiled without their V8 code cache. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52988\"\u003e#52988\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52943\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52792\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed a Windows x64 renderer performance regression introduced in 42.8.1 that made style/layout work (and app startup) noticeably slower. \u003ca href=\"https://redirect.github.com/electron/electron/pull/53064\"\u003e#53064\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a stall of tens of milliseconds while creating the first \u003ccode\u003eBrowserWindow\u003c/code\u003e on Linux.\n\u003cul\u003e\n\u003cli\u003eImproved the performance of file lookups inside ASAR archives and of large files served from them to the renderer.\u003c/li\u003e\n\u003cli\u003eImproved the performance of calls through \u003ccode\u003econtextBridge\u003c/code\u003e-exposed APIs.\u003c/li\u003e\n\u003cli\u003eReduced the main-thread cost of sending large values through \u003ccode\u003eipcRenderer\u003c/code\u003e, \u003ccode\u003eipcMain\u003c/code\u003e handlers and \u003ccode\u003ewebContents.send\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/electron/electron/pull/53019\"\u003e#53019\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/53018\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/53017\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eImproved startup time of \u003ccode\u003eutilityProcess.fork()\u003c/code\u003e, \u003ccode\u003echild_process.fork()\u003c/code\u003e / \u003ccode\u003eELECTRON_RUN_AS_NODE\u003c/code\u003e child processes and Node.js-enabled renderers. \u003ca href=\"https://redirect.github.com/electron/electron/pull/53136\"\u003e#53136\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/53135\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/53134\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eLinux arm64, Windows arm64 and macOS x64 builds now start the main process from the embedded Node.js startup snapshot like the other platforms, improving startup time. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52880\"\u003e#52880\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52881\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52879\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eelectron v42.9.3\u003c/h2\u003e\n\u003ch1\u003eRelease Notes for v42.9.3\u003c/h1\u003e\n\u003ch2\u003eFixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a graphical glitch on Linux where thin borders appeared past the drop shadows on frameless windows when multiple windows were created. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52772\"\u003e#52772\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52607\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52606\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed a memory leak when creating BrowserWindows. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52893\"\u003e#52893\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52892\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52894\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed an issue on Windows where the app process could fail to exit after \u003ccode\u003eapp.quit()\u003c/code\u003e while a \u003ccode\u003eshell.openExternal()\u003c/code\u003e or \u003ccode\u003eshell.openPath()\u003c/code\u003e call was still waiting on a system \u0026quot;Open with\u0026quot; dialog. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52900\"\u003e#52900\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52899\"\u003e41\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52897\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52898\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed custom V8 snapshots (\u003ccode\u003eelectron-mksnapshot\u003c/code\u003e, and the \u003ccode\u003eloadBrowserProcessSpecificV8Snapshot\u003c/code\u003e fuse) having no effect in the main process on macOS arm64, Linux x64 and Windows x64. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52876\"\u003e#52876\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52877\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52878\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eOther Changes\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/9f0109679540320c5dc5b7bef0aa94733058e8c2\"\u003e\u003ccode\u003e9f01096\u003c/code\u003e\u003c/a\u003e fix: window stuck maximized on Wayland after early maximize() (\u003ca href=\"https://redirect.github.com/electron/electron/issues/53126\"\u003e#53126\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/c411b7ccad8d71964428aad52da738359cf70fec\"\u003e\u003ccode\u003ec411b7c\u003c/code\u003e\u003c/a\u003e perf: boot every Node.js-hosting process from the Node snapshot / code cache ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/5751bc5fefb180e7b2fef48a3afc350f1f1f6d46\"\u003e\u003ccode\u003e5751bc5\u003c/code\u003e\u003c/a\u003e fix: clear device metrics overrides when a DevTools client disconnects (\u003ca href=\"https://redirect.github.com/electron/electron/issues/53133\"\u003e#53133\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/277efdf2cdee0e289f127c99570706e2d4589f02\"\u003e\u003ccode\u003e277efdf\u003c/code\u003e\u003c/a\u003e fix: crash in gin::PerIsolateData::NotifyDisposed when a session is created d...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/d054052a752ea88556b13b5d322f398907319a04\"\u003e\u003ccode\u003ed054052\u003c/code\u003e\u003c/a\u003e chore: iwyu commonly-included headers in shell/ (\u003ca href=\"https://redirect.github.com/electron/electron/issues/52972\"\u003e#52972\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/1645b087103c7401be3ff202be3bbf61cfca73c6\"\u003e\u003ccode\u003e1645b08\u003c/code\u003e\u003c/a\u003e build: update PGO profiles (\u003ca href=\"https://redirect.github.com/electron/electron/issues/53119\"\u003e#53119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/e4ea00f761c6970a4181fc0932251a44d943e2d7\"\u003e\u003ccode\u003ee4ea00f\u003c/code\u003e\u003c/a\u003e build: update PGO profiles (\u003ca href=\"https://redirect.github.com/electron/electron/issues/53113\"\u003e#53113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/b5c236f24546a8c53664525cbd26dbcf5c34c549\"\u003e\u003ccode\u003eb5c236f\u003c/code\u003e\u003c/a\u003e fix: update document title on back or forward navigation (\u003ca href=\"https://redirect.github.com/electron/electron/issues/53099\"\u003e#53099\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/569c64a6e9ff893d2bdd9c7914a22ee0023598ac\"\u003e\u003ccode\u003e569c64a\u003c/code\u003e\u003c/a\u003e build: skip linux-arm in PGO profile generation (\u003ca href=\"https://redirect.github.com/electron/electron/issues/53111\"\u003e#53111\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/d13ae9f14b56f4fb0730cf9e582956ddf986e2f4\"\u003e\u003ccode\u003ed13ae9f\u003c/code\u003e\u003c/a\u003e fix: illegal access errors when a same-process child window or subframe close...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/electron/electron/compare/v42.3.0...v42.10.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `markdown-it` from 13.0.2 to 14.3.1\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/markdown-it/markdown-it/blob/14.3.1/CHANGELOG.md\"\u003emarkdown-it's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[14.3.1] - 2026-08-27\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackported 15.0.1 fixes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[14.3.0] - 2026-07-02\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReworked build pipeline \u0026amp; tools.\u003c/li\u003e\n\u003cli\u003eAdded source maps.\u003c/li\u003e\n\u003cli\u003eBumped \u003ccode\u003elinkify-it\u003c/code\u003e to 5.0.2.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePreserve backslash-space hard line breaks, matching CommonMark 6.7, \u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1185\"\u003e#1185\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[14.2.0] - 2026-05-24\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eisPunctCharCode\u003c/code\u003e to utilities.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDon't end HTML comment blocks on a blank line, \u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1155\"\u003e#1155\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eProperly recognize astral chars (surrogates) in delimiter scans for\nemphasis-like markers, \u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1072\"\u003e#1072\u003c/a\u003e. Big thanks to \u003ca href=\"https://github.com/tats-u\"\u003e\u003ccode\u003e@​tats-u\u003c/code\u003e\u003c/a\u003e for his global efforts\nwith improving CJK support.\u003c/li\u003e\n\u003cli\u003ePreserve unicode whitespaces when trimm headings/paragraphs, \u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1074\"\u003e#1074\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eMore strict entities decode to avoid false positives \u003ccode\u003e;\u003c/code\u003e, \u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1096\"\u003e#1096\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eRestore block parser state on fail in \u003ccode\u003elheading\u003c/code\u003e rule, \u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1131\"\u003e#1131\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed poor smartquotes perfomance on \u0026gt; 70k quotes in single block\u003c/li\u003e\n\u003cli\u003eBumped linkify-it to 5.0.1 with fixed potential perfomance issues.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[14.1.1] - 2026-01-11\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed regression from v13 in linkify inline rule. Specific patterns could\ncause high CPU use. Thanks to \u003ca href=\"https://github.com/ltduc147\"\u003e\u003ccode\u003e@​ltduc147\u003c/code\u003e\u003c/a\u003e for report.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[14.1.0] - 2024-03-19\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated CM spec compatibility to 0.31.2, \u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1009\"\u003e#1009\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed quadratic complexity when parsing references, \u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/996\"\u003e#996\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eFixed quadratic output size with pathological user input in tables, \u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1000\"\u003e#1000\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/a855f10b1b796ca42178952b4b83b9c8b677ddb8\"\u003e\u003ccode\u003ea855f10\u003c/code\u003e\u003c/a\u003e 14.3.1 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/ad70f6b7cff64bee10e42a774147112480ca0d49\"\u003e\u003ccode\u003ead70f6b\u003c/code\u003e\u003c/a\u003e Backported 15.0.1 fixes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/b407f3b0667c9491cc52c6550736ee5a31721baa\"\u003e\u003ccode\u003eb407f3b\u003c/code\u003e\u003c/a\u003e Ignore generated API docs in lint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/bf025adb983e90af426761a08cc76e4e41ab0239\"\u003e\u003ccode\u003ebf025ad\u003c/code\u003e\u003c/a\u003e Prepare package.json for v14 backports\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/2d9bbea7df2ab1a48caecfafc39cb8599f193d3c\"\u003e\u003ccode\u003e2d9bbea\u003c/code\u003e\u003c/a\u003e fix: recognize lowercase declarations as HTML blocks (CommonMark 4.6) (\u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1189\"\u003e#1189\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/a311cfbeb7dcdb86d001a21facaf60190414ca4d\"\u003e\u003ccode\u003ea311cfb\u003c/code\u003e\u003c/a\u003e fix: keep literal backslash before space in link destination (CommonMark 6.3)...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/ff0ee084fc6b0d10fac049fa562bc2925b5cc723\"\u003e\u003ccode\u003eff0ee08\u003c/code\u003e\u003c/a\u003e 14.3.0 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/52e2749ab25aaf841bf74b50560929aa93b8e14d\"\u003e\u003ccode\u003e52e2749\u003c/code\u003e\u003c/a\u003e Bump linkify-it / vite deps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/56c2404e6d3e78632ce7b37a95f289fc04330c76\"\u003e\u003ccode\u003e56c2404\u003c/code\u003e\u003c/a\u003e fix: keep backslash-space hard line break (CommonMark 6.7) (\u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1185\"\u003e#1185\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/0fbb18b23145158a39255f7476c781dbce320a16\"\u003e\u003ccode\u003e0fbb18b\u003c/code\u003e\u003c/a\u003e Bump vite from 8.0.14 to 8.0.16 (\u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1181\"\u003e#1181\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/markdown-it/markdown-it/compare/13.0.2...14.3.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `moment` from 2.30.1 to 2.31.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/releases\"\u003emoment's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.31.0\u003c/h2\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/blob/develop/CHANGELOG.md\"\u003emoment's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch3\u003e2.31.0\u003c/h3\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/15b45d48a176312e8f34143c5a800090abf4787f\"\u003e\u003ccode\u003e15b45d4\u003c/code\u003e\u003c/a\u003e [pkg] Build 2.31.0 (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6452\"\u003e#6452\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/631cd81454ee001e1f508e21270eae0b6bb62974\"\u003e\u003ccode\u003e631cd81\u003c/code\u003e\u003c/a\u003e [pkg] Update changelog for upcoming release (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6394\"\u003e#6394\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/6caff9e0d54e85a63a6eb97d7361f1da35bc58f4\"\u003e\u003ccode\u003e6caff9e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/710703b7eac93535ad125cbf4feb3d42afed6fb3\"\u003e\u003ccode\u003e710703b\u003c/code\u003e\u003c/a\u003e [feature] Add internal date-default hook for Moment Timezone (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6451\"\u003e#6451\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/863ed940556e6e63c43de23981a4853036a003ac\"\u003e\u003ccode\u003e863ed94\u003c/code\u003e\u003c/a\u003e [bugfix] Add stack traces to conditional deprecation warnings (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6450\"\u003e#6450\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/2c7abe1c42ee15445d30c2c5d536750a1e43a09a\"\u003e\u003ccode\u003e2c7abe1\u003c/code\u003e\u003c/a\u003e [bugfix] Apply postformat to locale relative time methods (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6448\"\u003e#6448\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/9c45ac38690c649c95e19923276b63da5fe2be26\"\u003e\u003ccode\u003e9c45ac3\u003c/code\u003e\u003c/a\u003e [bugfix] Include metadata in all-locales bundle (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6447\"\u003e#6447\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/f6eefc5fc7b44ceccbd007aeffc48ebc5eac30fa\"\u003e\u003ccode\u003ef6eefc5\u003c/code\u003e\u003c/a\u003e [bugfix] Validate timezone offset range (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6446\"\u003e#6446\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/136b441794a3bb207d593add3b59e9de0e062523\"\u003e\u003ccode\u003e136b441\u003c/code\u003e\u003c/a\u003e [bugfix] Avoid Object.assign in duration.humanize (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6443\"\u003e#6443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/0d1050437b40f66ac47e14b285bb3d09676cf2e0\"\u003e\u003ccode\u003e0d10504\u003c/code\u003e\u003c/a\u003e [bugfix] Fix locale('\u003cstrong\u003eproto\u003c/strong\u003e') corrupting the global locale (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6442\"\u003e#6442\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moment/moment/compare/2.30.1...2.31.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for moment since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `undici` from 8.10.0 to 8.10.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nodejs/undici/releases\"\u003eundici's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev8.10.2\u003c/h2\u003e\n\u003ch2\u003e⚠️ Security fixes\u003c/h2\u003e\n\u003ch3\u003eHigh severity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-vp8m-p9jh-q5pm\"\u003eGHSA-vp8m-p9jh-q5pm\u003c/a\u003e: cache and deduplication interceptors could use caller-controlled request metadata instead of the authoritative dispatcher origin, enabling cross-origin cache poisoning and data disclosure. Undici now derives interceptor identities from the dispatcher origin and bypasses origin-dependent interceptors when no authoritative origin exists. Fixed by \u003ca href=\"https://github.com/nodejs/undici/commit/caf6194d3dae989b731ed87ab85f182befe5eb80\"\u003ecaf6194d\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-w293-vg96-wgc3\"\u003eGHSA-w293-vg96-wgc3\u003c/a\u003e: \u003ccode\u003eBalancedPool\u003c/code\u003e could drop function-valued connection options while cloning its configuration, including custom TLS certificate validation callbacks. Undici now preserves \u003ccode\u003econnect\u003c/code\u003e and legacy \u003ccode\u003etls\u003c/code\u003e options when creating upstreams. Fixed by \u003ca href=\"https://github.com/nodejs/undici/commit/8f5868fbdbc8f1146dfc1bcd1f2d117790141390\"\u003e8f5868fb\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-rfgv-xxqx-mfg5\"\u003eGHSA-rfgv-xxqx-mfg5\u003c/a\u003e: a WebSocket server could select a subprotocol when none was requested, causing an uncaught \u003ccode\u003eTypeError\u003c/code\u003e that could terminate the process. Undici now rejects the handshake with protocol error 1002. Fixed by \u003ca href=\"https://github.com/nodejs/undici/commit/66e12816064cf3068f63bd134748b7fc4e779bad\"\u003e66e12816\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMedium severity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-3wwx-pv8p-q78v\"\u003eGHSA-3wwx-pv8p-q78v\u003c/a\u003e: a malformed permessage-deflate payload exceeding the configured decompression limit could emit an unhandled zlib error and terminate the process. Undici now destroys the inflater after reaching the limit. Fixed by \u003ca href=\"https://github.com/nodejs/undici/commit/4411a238a98e8791da5fff10cc9e3578a7668ed6\"\u003e4411a238\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-rx4f-c7p8-82vq\"\u003eGHSA-rx4f-c7p8-82vq\u003c/a\u003e: an unclean \u003ccode\u003eWebSocketStream\u003c/code\u003e close could create an unobserved rejected promise when its writable stream was locked, potentially terminating the process. Undici now propagates the failure through the retained writable stream controller. Fixed by \u003ca href=\"https://github.com/nodejs/undici/commit/662d0ea671fe64139e79533c913fce412765e1d7\"\u003e662d0ea6\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-2jfj-6hjv-fm6j\"\u003eGHSA-2jfj-6hjv-fm6j\u003c/a\u003e: shared caches could store and replay responses containing \u003ccode\u003eSet-Cookie\u003c/code\u003e, disclosing one user's cookies to another caller. Undici now excludes these responses from shared caches, including existing entries and revalidation paths. Fixed by \u003ca href=\"https://github.com/nodejs/undici/commit/cb75bbb34224a968b4ad80cab8b7aba5e0b3b28a\"\u003ecb75bbb3\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-3xpg-4rpp-hhhm\"\u003eGHSA-3xpg-4rpp-hhhm\u003c/a\u003e: the decompression interceptor did not bound decoded output, allowing compressed responses to consume excessive memory. Undici now limits every decompression stage to 64 MiB by default and supports a configurable \u003ccode\u003emaxSize\u003c/code\u003e. Fixed by \u003ca href=\"https://github.com/nodejs/undici/commit/7aac7f12f757844763c8b8f1ab6e305e80d55838\"\u003e7aac7f12\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-pmjh-fq2x-6v4x\"\u003eGHSA-pmjh-fq2x-6v4x\u003c/a\u003e: a terminal retry failure after response headers were exposed could orphan the original response body, causing consumers to hang indefinitely. Undici now propagates the terminal error to the exposed body. Fixed by \u003ca href=\"https://github.com/nodejs/undici/commit/e905b5b87e6953bcc542af90557b2fee5b7b5974\"\u003ee905b5b8\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eLow severity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-8436-99hf-9mmv\"\u003eGHSA-8436-99hf-9mmv\u003c/a\u003e: cache interceptors could store and replay responses to unsafe HTTP methods such as \u003ccode\u003ePOST\u003c/code\u003e or \u003ccode\u003eDELETE\u003c/code\u003e. Undici now restricts cache reads and writes to safe methods while preserving invalidation by successful unsafe requests. Fixed by \u003ca href=\"https://github.com/nodejs/undici/commit/2be07bf97b3022e0324142d31f99f6e019d815e3\"\u003e2be07bf9\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-2gqq-gqf2-x968\"\u003eGHSA-2gqq-gqf2-x968\u003c/a\u003e: the dump interceptor could treat an oversized chunked response as successfully truncated when no \u003ccode\u003eContent-Length\u003c/code\u003e was present. Undici now enforces \u003ccode\u003emaxSize\u003c/code\u003e against received bytes and aborts oversized responses. Fixed by \u003ca href=\"https://github.com/nodejs/undici/commit/6d583124e7cf60b640097d64144ed633cc450584\"\u003e6d583124\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-r53p-7pc4-xj5r\"\u003eGHSA-r53p-7pc4-xj5r\u003c/a\u003e: the retry interceptor could concatenate a resumed response with inconsistent framing into downstream output, enabling response splitting or corruption. Undici now validates \u003ccode\u003eContent-Range\u003c/code\u003e against the original response framing before resuming. Fixed by \u003ca href=\"https://github.com/nodejs/undici/commit/0160a719063fb0a77f4fdf9500b9166b91e14329\"\u003e0160a719\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild(deps-dev): bump undici from 6.27.0 to 6.28.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5653\"\u003enodejs/undici#5653\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump jest from 30.4.2 to 30.5.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5750\"\u003enodejs/undici#5750\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action/analyze from 4.37.3 to 4.37.9 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5752\"\u003enodejs/undici#5752\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action/upload-sarif from 4.36.2 to 4.37.9 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5754\"\u003enodejs/undici#5754\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest(h2): cover stream reset with NGHTTP2_INTERNAL_ERROR by \u003ca href=\"https://github.com/zeexzeex\"\u003e\u003ccode\u003e@​zeexzeex\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5725\"\u003enodejs/undici#5725\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(retry): reject invalid resumed responses by \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5724\"\u003enodejs/undici#5724\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: make stale-while-revalidate cache update test deterministic by \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5722\"\u003enodejs/undici#5722\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: avoid unbounded recursion in Set-Cookie attribute parser by \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5757\"\u003enodejs/undici#5757\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: honor SOCKS5 connection timeout by \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5733\"\u003enodejs/undici#5733\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(eventsource): validate Last-Event-ID on reconnect by \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5746\"\u003enodejs/undici#5746\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: avoid duplicate release attempts by \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5745\"\u003enodejs/undici#5745\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(cache): refetch when 304 adds vary fields by \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5732\"\u003enodejs/undici#5732\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etypes: expose PendingInterceptor and PendingInterceptorsFormatter on the MockAgent namespace by \u003ca href=\"https://github.com/RaphaelFakhri\"\u003e\u003ccode\u003e@​RaphaelFakhri\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5721\"\u003enodejs/undici#5721\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci(codeql): align CodeQL action versions to v4.37.9 by \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5759\"\u003enodejs/undici#5759\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump \u003ccode\u003e@​humanfs/node\u003c/code\u003e from 0.16.7 to 0.16.8 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5760\"\u003enodejs/undici#5760\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(proxy-agent): guard Proxy-Authorization in iterable header containers by \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5758\"\u003enodejs/undici#5758\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: name the parameters these two blocks describe by \u003ca href=\"https://github.com/darkdi\"\u003e\u003ccode\u003e@​darkdi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5735\"\u003enodejs/undici#5735\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(websocket): fail the connection on a non-200 h2 extended CONNECT response by \u003ca href=\"https://github.com/kjsik11\"\u003e\u003ccode\u003e@​kjsik11\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5751\"\u003enodejs/undici#5751\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest(node-fetch): re-enable the set-cookie header combining test by \u003ca href=\"https://github.com/pacocartones\"\u003e\u003ccode\u003e@​pacocartones\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5730\"\u003enodejs/undici#5730\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(retry): forward rawHeaders writes through RetryController by \u003ca href=\"https://github.com/official-burak\"\u003e\u003ccode\u003e@​official-burak\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5727\"\u003enodejs/undici#5727\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(fetch): only send Sec-Fetch-Mode to potentially trustworthy URLs by \u003ca href=\"https://github.com/kjsik11\"\u003e\u003ccode\u003e@​kjsik11\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5738\"\u003enodejs/undici#5738\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/darkdi\"\u003e\u003ccode\u003e@​darkdi\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5735\"\u003enodejs/undici#5735\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kjsik11\"\u003e\u003ccode\u003e@​kjsik11\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5751\"\u003enodejs/undici#5751\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/5e541e0b9df7563e5766bbd469fbfe383d9ae6ca\"\u003e\u003ccode\u003e5e541e0\u003c/code\u003e\u003c/a\u003e Bumped v8.10.2 (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5771\"\u003e#5771\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/eb04cc39954e63e9b46bdf824e6efad9fff2e7b5\"\u003e\u003ccode\u003eeb04cc3\u003c/code\u003e\u003c/a\u003e fix(fetch): only send Sec-Fetch-Mode to potentially trustworthy URLs (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5738\"\u003e#5738\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/e905b5b87e6953bcc542af90557b2fee5b7b5974\"\u003e\u003ccode\u003ee905b5b\u003c/code\u003e\u003c/a\u003e fix(retry): settle exposed body on terminal failure\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/0160a719063fb0a77f4fdf9500b9166b91e14329\"\u003e\u003ccode\u003e0160a71\u003c/code\u003e\u003c/a\u003e fix(retry): validate resumed response framing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/66e12816064cf3068f63bd134748b7fc4e779bad\"\u003e\u003ccode\u003e66e1281\u003c/code\u003e\u003c/a\u003e fix(websocket): reject unrequested subprotocols\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/7aac7f12f757844763c8b8f1ab6e305e80d55838\"\u003e\u003ccode\u003e7aac7f1\u003c/code\u003e\u003c/a\u003e fix(decompress): limit decompressed response size\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/cb75bbb34224a968b4ad80cab8b7aba5e0b3b28a\"\u003e\u003ccode\u003ecb75bbb\u003c/code\u003e\u003c/a\u003e fix(cache): do not cache Set-Cookie in shared caches\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/6d583124e7cf60b640097d64144ed633cc450584\"\u003e\u003ccode\u003e6d58312\u003c/code\u003e\u003c/a\u003e fix(interceptor/dump): abort oversized chunked responses\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/8f5868fbdbc8f1146dfc1bcd1f2d117790141390\"\u003e\u003ccode\u003e8f5868f\u003c/code\u003e\u003c/a\u003e fix: preserve BalancedPool connection options\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/2be07bf97b3022e0324142d31f99f6e019d815e3\"\u003e\u003ccode\u003e2be07bf\u003c/code\u003e\u003c/a\u003e fix(cache): reject unsafe method response caching\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/nodejs/undici/compare/v8.10.0...v8.10.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `adm-zip` from 0.5.18 to 0.6.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cthackers/adm-zip/releases\"\u003eadm-zip's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.6.1\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cthackers/adm-zip/compare/v0.6.0...v0.6.1\"\u003ehttps://github.com/cthackers/adm-zip/compare/v0.6.0...v0.6.1\u003c/a\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dev dependencies\u003c/li\u003e\n\u003cli\u003eFixed uncaught crash in async decompression on malformed DEFLATE data\u003c/li\u003e\n\u003cli\u003eFixed addLocalFolder following symlinks out of the archived folder\u003c/li\u003e\n\u003cli\u003eStripped setuid/setgid/sticky bits from extracted file permissions\u003c/li\u003e\n\u003cli\u003eEnforced the decompression size cap on the async path and for size 0\u003c/li\u003e\n\u003cli\u003eRejected archives with duplicate entry names\u003c/li\u003e\n\u003cli\u003eBlocked extraction from writing through symlinks inside the target\u003c/li\u003e\n\u003cli\u003eRouted malformed-header parse errors through the async callback\u003c/li\u003e\n\u003cli\u003eRejected zip entries whose declared data extent runs past the buffer\u003c/li\u003e\n\u003cli\u003eFixed addLocalFolderPromise hanging on empty folders and swallowing errors\u003c/li\u003e\n\u003cli\u003eFixed addLocalFolderAsync2 mangling local paths on Windows\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.6.0\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cthackers/adm-zip/compare/v0.5.18...v0.6.0\"\u003ehttps://github.com/cthackers/adm-zip/compare/v0.5.18...v0.6.0\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eThis release fixes a security vulnerability (CVE-2026-39244), resolves several long-standing bugs, ships built-in TypeScript types, and includes two behavior changes worth reading before you upgrade.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eextractEntryTo(dirEntry, target, maintainEntryPath = false) now preserves subdirectories instead of flattening files into the target folder by basename (which also silently overwrote same-named files). (\u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/306\"\u003e#306\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eExtraction no longer fails when the modification time can't be set — utimes is now best-effort. (\u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/379\"\u003e#379\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMinimum Node.js is now 14 (the code already required it; engines was incorrectly \u0026gt;=12).\u003c/li\u003e\n\u003cli\u003eCVE-2026-39244 — a crafted archive declaring a huge uncompressed size could force an unbounded Buffer.alloc and OOM the process; allocation is now bounded by the data actually present. Reported by Daniel Púa (devploit), Anh Hong, and José Antonio Zamudio Amaya. (\u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/568\"\u003e#568\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHardened entry-name lookup against object injection (\u003cstrong\u003eproto\u003c/strong\u003e names). Prototype-less table.\u003c/li\u003e\n\u003cli\u003eData-descriptor regression rejecting valid archives (\u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/548\"\u003e#548\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/533\"\u003e#533\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/554\"\u003e#554\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDirectory permissions not restored on extract (\u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/530\"\u003e#530\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eInfinite recursion on symlink loops in addLocalFolder (\u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/541\"\u003e#541\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUncaught process crash in writeFileToAsync on write failure (\u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/470\"\u003e#470\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/459\"\u003e#459\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/402\"\u003e#402\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEmpty name on directory entries (\u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/466\"\u003e#466\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest() always returned false for archives with files\u003c/li\u003e\n\u003cli\u003e~6× faster entry sorting for large archives\u003c/li\u003e\n\u003cli\u003eBuilt-in TypeScript definitions (types.d.ts) — you can drop \u003ccode\u003e@​types/adm-zip\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cthackers/adm-zip/blob/master/history.md\"\u003eadm-zip's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e0.6.0 / 2026-07-10\u003c/h1\u003e\n\u003cp\u003eSecurity\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eFixed CVE-2026-39244: a crafted archive declaring a huge uncompressed size could force an unbounded \u003ccode\u003eBuffer.alloc\u003c/code\u003e (memory exhaustion / DoS) before any validation. Allocation is now bounded by the data actually present — STORED output is sized from the real bytes, DEFLATED output is grown by the inflater and capped at the declared size (\u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/568\"\u003e#568\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHardened the internal entry-name lookup table against object injection: entry names come from untrusted archives, and a name such as \u003ccode\u003e__proto__\u003c/code\u003e previously resolved to \u003ccode\u003eObject.prototype\u003c/code\u003e, crashing \u003ccode\u003eaddFile\u003c/code\u003e and hiding the entry from \u003ccode\u003egetEntry\u003c/code\u003e/\u003ccode\u003ereadFile\u003c/code\u003e. The table is now prototype-less\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eBug fixes\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a regression (0.5.15) that rejected valid archives using a data descriptor (general-purpose bit 3). The payload is now validated against the authoritative central-directory CRC instead of requiring/parsing the trailing descriptor (\u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/548\"\u003e#548\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/533\"\u003e#533\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/554\"\u003e#554\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003eextractAllTo\u003c/code\u003e/\u003ccode\u003eextractAllToAsync\u003c/code\u003e not restoring directory permissions with \u003ccode\u003ekeepOriginalPermission\u003c/code\u003e; directory modes are applied after their contents are written, deepest path first, and no longer lock the extractor out of a restrictive directory (\u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/530\"\u003e#530\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFixed infinite recursion in \u003ccode\u003eaddLocalFolder\u003c/code\u003e when a folder contains a symlink pointing back to an ancestor (e.g. workspace \u003ccode\u003enode_modules\u003c/code\u003e); the walk now tracks resolved real paths and skips already-visited directories (\u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/541\"\u003e#541\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFixed an uncaught exception (\u003ccode\u003eERR_INVALID_ARG_TYPE\u003c/code\u003e) that crashed the process when \u003ccode\u003ewriteFileToAsync\u003c/code\u003e could not open the target file (bad permissions, invalid filename, exhausted file descriptors); write failures are now reported through the callback and write errors are no longer silently swallowed (\u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/470\"\u003e#470\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/459\"\u003e#459\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/402\"\u003e#402\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFixed directory entries reporting an empty \u003ccode\u003ename\u003c/code\u003e (e.g. \u003ccode\u003ea/b/c/\u003c/code\u003e now returns \u003ccode\u003ec\u003c/code\u003e) (\u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/466\"\u003e#466\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003eextractEntryTo\u003c/code\u003e flattening subdirectories when \u003ccode\u003emaintainEntryPath\u003c/code\u003e is false; the structure below the extracted directory is now preserved instead of collapsing (and overwriting) files by basename (\u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/306\"\u003e#306\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFixed a failed \u003ccode\u003eutimes\u003c/code\u003e aborting extraction; setting the modification time is now best-effort and never fails extraction of already-written content (\u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/379\"\u003e#379\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003etest()\u003c/code\u003e always returning false for any archive containing a file (it indexed the entries array with an entry object instead of reading the entry); it now correctly verifies each entry's CRC\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003ePerformance\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eFaster entry sorting when writing archives with many entries: names are decoded once instead of on every comparison (about 6× faster sort for large archives)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eAdded\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eBundled TypeScript type definitions (\u003ccode\u003etypes.d.ts\u003c/code\u003e), so \u003ccode\u003e@types/adm-zip\u003c/code\u003e is no longer required\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eNotes\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eBehavior change: \u003ccode\u003eextractEntryTo(dir, target, /* maintainEntryPath */ false)\u003c/code\u003e now preserves subdirectories beneath the extracted directory rather than flattening them\u003c/li\u003e\n\u003cli\u003eBehavior change: extraction no longer fails when the modification time cannot be set\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e0.5.4 / 2021-03-08\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFixed relative paths\u003c/li\u003e\n\u003cli\u003eAdded zipcrypto encryption\u003c/li\u003e\n\u003cli\u003eLower verMade for macOS when generating zip file\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e0.5.3 / 2021-02-07\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFixed filemode when unzipping\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e0.5.2 / 2021-01-27\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFixed path traversal issue (GHSL-2020-198)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e0.5.1 / 2020-11-27\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eIncremented version (cthackers)\u003c/li\u003e\n\u003cli\u003eFixed outFileName (cthackers)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e0.5.0 / 2020-11-19\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eAdded extra parameter to extractEntryTo so target filename can be renamed (cthackers)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cthackers/adm-zip/commit/cb2cf9ba4c7c865db426e2de1997cb41194d9872\"\u003e\u003ccode\u003ecb2cf9b\u003c/code\u003e\u003c/a\u003e Fixed addLocalFolderAsync2 mangling local paths on Windows\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cthackers/adm-zip/commit/54902b60f0f1d6d6e8157e81e0f18c5001941ccc\"\u003e\u003ccode\u003e54902b6\u003c/code\u003e\u003c/a\u003e Fixed addLocalFolderPromise hanging on empty folders and swallowing errors\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cthackers/adm-zip/commit/73131bdce50fa6ed201c48b468082ef456894f2e\"\u003e\u003ccode\u003e73131bd\u003c/code\u003e\u003c/a\u003e Fixed CI\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cthackers/adm-zip/commit/758898d71508e8a016691d5843b5f7ce2d1b208a\"\u003e\u003ccode\u003e758898d\u003c/code\u003e\u003c/a\u003e Rejected zip entries whose declared data extent runs past the buffer\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cthackers/adm-zip/commit/74b6e9f402c4c7cde4e33f3c87ff8f15ddcd6121\"\u003e\u003ccode\u003e74b6e9f\u003c/code\u003e\u003c/a\u003e Routed malformed-header parse errors through the async callback\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cthackers/adm-zip/commit/eaa35fa73df6108a3d6ebc9b9073371740735265\"\u003e\u003ccode\u003eeaa35fa\u003c/code\u003e\u003c/a\u003e Blocked extraction from writing through symlinks inside the target\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cthackers/adm-zip/commit/1e015e3e713aee426bf3d5c1bc1b555c90f4f3e6\"\u003e\u003ccode\u003e1e015e3\u003c/code\u003e\u003c/a\u003e Increment version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cthackers/adm-zip/commit/05101d47b3b983b705cc3e66fc34366118ba7b99\"\u003e\u003ccode\u003e05101d4\u003c/code\u003e\u003c/a\u003e Rejected archives with duplicate entry names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cthackers/adm-zip/commit/491600683dacb6cb9fe0718a0eeb9cb5eb49afa6\"\u003e\u003ccode\u003e4916006\u003c/code\u003e\u003c/a\u003e Enforced the decompression size cap on the async path and for size 0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cthackers/adm-zip/commit/6a63c339b83c52915483efacda517660a7a7bf87\"\u003e\u003ccode\u003e6a63c33\u003c/code\u003e\u003c/a\u003e Stripped setuid/setgid/sticky bits from extracted file permissions\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/cthackers/adm-zip/compare/v0.5.18...v0.6.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `nanoid` from 3.3.11 to 3.3.12\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ai/nanoid/releases\"\u003enanoid's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e3.3.12\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed breaking Nano ID by requesting big ID.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ai/nanoid/blob/main/CHANGELOG.md\"\u003enanoid's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e3.3.12\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed breaking Nano ID by requesting big ID.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/aa9c399f6915fb8aaf957ac9290321be932ac252\"\u003e\u003ccode\u003eaa9c399\u003c/code\u003e\u003c/a\u003e Release 3.3.12 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/b0036ed60dc9facd7f1191a50dfb3076500202ac\"\u003e\u003ccode\u003eb0036ed\u003c/code\u003e\u003c/a\u003e Backport fix to CommonJS version too\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/08a19a4c82ca6ea920c9f5898e22f4841d167605\"\u003e\u003ccode\u003e08a19a4\u003c/code\u003e\u003c/a\u003e Update test\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/821dfed7b5db7f88e92f56c60eef32c8135077c3\"\u003e\u003ccode\u003e821dfed\u003c/code\u003e\u003c/a\u003e Backport pool breaking fix\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/609646c6441c8fcabf01b65cd5d0dba806ccc22e\"\u003e\u003ccode\u003e609646c\u003c/code\u003e\u003c/a\u003e Fix CI\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/ai/nanoid/compare/3.3.11...3.3.12\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `nodemailer` from 6.10.1 to 10.0.9\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nodemailer/nodemailer/releases\"\u003enodemailer's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev10.0.9\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v10.0.8...v10.0.9\"\u003e10.0.9\u003c/a\u003e (2026-09-12)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eaddressparser:\u003c/strong\u003e bound the '@' probe to the run being scanned (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/1465c3f5ff74a7c4fbbe9853bd01448bb92bf5b7\"\u003e1465c3f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eaddressparser:\u003c/strong\u003e keep the text after a comment out of a quoted local part address (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/2f36eb1aa1dd33e312411dc9b888548e14db54ee\"\u003e2f36eb1\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev10.0.8\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v10.0.7...v10.0.8\"\u003e10.0.8\u003c/a\u003e (2026-09-11)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003emime-node:\u003c/strong\u003e clean the boundary where it is written, not only where it is built (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/e14278d2dae9427280c79450605a27b1c5d2c355\"\u003ee14278d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003emime-node:\u003c/strong\u003e drop every control character from multipart boundary material (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/a82a35554848a2e07485ff81f80aefe2736e5a04\"\u003ea82a355\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev10.0.7\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v10.0.6...v10.0.7\"\u003e10.0.7\u003c/a\u003e (2026-09-11)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003emime-funcs:\u003c/strong\u003e do not double encode Buffer input when chunking base64 mime words (\u003ca href=\"https://redirect.github.com/nodemailer/nodemailer/issues/1865\"\u003e#1865\u003c/a\u003e) (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/4327a59939748a7f9394b0a029495fd476f68f30\"\u003e4327a59\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003emime-node:\u003c/strong\u003e keep a boundary that is only line breaks from stripping to empty (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/ec46800cdcab734d9aa79e1278e819962b3b8f09\"\u003eec46800\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003emime-node:\u003c/strong\u003e strip line breaks from multipart boundary material (\u003ca href=\"https://redirect.github.com/nodemailer/nodemailer/issues/1867\"\u003e#1867\u003c/a\u003e) (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/03c1a5c48b6828d9392983d8718fdb1fd583a06c\"\u003e03c1a5c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003esmtp-pool:\u003c/strong\u003e release rate-limited connections on close (\u003ca href=\"https://redirect.github.com/nodemailer/nodemailer/issues/1866\"\u003e#1866\u003c/a\u003e) (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/7f5c7a46b61da9f5c5feaffd921c55b9d5892ee5\"\u003e7f5c7a4\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev10.0.6\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v10.0.5...v10.0.6\"\u003e10.0.6\u003c/a\u003e (2026-09-11)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eaddressparser:\u003c/strong\u003e scan free text for an address in linear time (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/437d7fc47403df176bc39271641541b7a9bce102\"\u003e437d7fc\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev10.0.5\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v10.0.4...v10.0.5\"\u003e10.0.5\u003c/a\u003e (2026-09-11)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eaddressparser:\u003c/strong\u003e parse comment-joined addresses in linear time (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/c07f17518d25aca8ab2ad66968dcbca538c24b89\"\u003ec07f175\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev10.0.4\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/com...\n\n_Description has been truncated_","html_url":"https://github.com/sigma7863/joplin/pull/372","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/sigma7863%2Fjoplin/issues/372","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/372/packages"}},{"old_version":"2.29.4","new_version":"2.31.0","update_type":"minor","path":null,"pr_created_at":"2026-10-07T02:25:55.000Z","version_change":"2.29.4 → 2.31.0","issue":{"uuid":"5738357118","node_id":"PR_kwDODTtS988AAAABHCQxSg","number":245,"state":"open","title":"build(deps): bump moment from 2.29.4 to 2.31.0","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-07T02:25:55.000Z","updated_at":"2026-10-07T02:30:33.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"moment","old_version":"2.29.4","new_version":"2.31.0","repository_url":"https://github.com/moment/moment"}],"path":null,"ecosystem":"npm"},"body":"Bumps [moment](https://github.com/moment/moment) from 2.29.4 to 2.31.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/releases\"\u003emoment's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.31.0\u003c/h2\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.30.1\u003c/h2\u003e\n\u003cp\u003eNote - this was not a new release, but rather just updating GitHub's \u003ccode\u003elatest\u003c/code\u003e release to indicate the existing version \u003ccode\u003e2.30.1\u003c/code\u003e from Dec 27, 2023.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/blob/develop/CHANGELOG.md\"\u003emoment's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch3\u003e2.31.0\u003c/h3\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e2.30.1\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/15b45d48a176312e8f34143c5a800090abf4787f\"\u003e\u003ccode\u003e15b45d4\u003c/code\u003e\u003c/a\u003e [pkg] Build 2.31.0 (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6452\"\u003e#6452\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/631cd81454ee001e1f508e21270eae0b6bb62974\"\u003e\u003ccode\u003e631cd81\u003c/code\u003e\u003c/a\u003e [pkg] Update changelog for upcoming release (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6394\"\u003e#6394\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/6caff9e0d54e85a63a6eb97d7361f1da35bc58f4\"\u003e\u003ccode\u003e6caff9e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/710703b7eac93535ad125cbf4feb3d42afed6fb3\"\u003e\u003ccode\u003e710703b\u003c/code\u003e\u003c/a\u003e [feature] Add internal date-default hook for Moment Timezone (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6451\"\u003e#6451\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/863ed940556e6e63c43de23981a4853036a003ac\"\u003e\u003ccode\u003e863ed94\u003c/code\u003e\u003c/a\u003e [bugfix] Add stack traces to conditional deprecation warnings (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6450\"\u003e#6450\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/2c7abe1c42ee15445d30c2c5d536750a1e43a09a\"\u003e\u003ccode\u003e2c7abe1\u003c/code\u003e\u003c/a\u003e [bugfix] Apply postformat to locale relative time methods (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6448\"\u003e#6448\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/9c45ac38690c649c95e19923276b63da5fe2be26\"\u003e\u003ccode\u003e9c45ac3\u003c/code\u003e\u003c/a\u003e [bugfix] Include metadata in all-locales bundle (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6447\"\u003e#6447\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/f6eefc5fc7b44ceccbd007aeffc48ebc5eac30fa\"\u003e\u003ccode\u003ef6eefc5\u003c/code\u003e\u003c/a\u003e [bugfix] Validate timezone offset range (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6446\"\u003e#6446\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/136b441794a3bb207d593add3b59e9de0e062523\"\u003e\u003ccode\u003e136b441\u003c/code\u003e\u003c/a\u003e [bugfix] Avoid Object.assign in duration.humanize (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6443\"\u003e#6443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/0d1050437b40f66ac47e14b285bb3d09676cf2e0\"\u003e\u003ccode\u003e0d10504\u003c/code\u003e\u003c/a\u003e [bugfix] Fix locale('\u003cstrong\u003eproto\u003c/strong\u003e') corrupting the global locale (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6442\"\u003e#6442\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moment/moment/compare/2.29.4...2.31.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for moment since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=moment\u0026package-manager=npm_and_yarn\u0026previous-version=2.29.4\u0026new-version=2.31.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/kristw/encodable/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/kristw/encodable/pull/245","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/kristw%2Fencodable/issues/245","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/245/packages"}},{"old_version":"2.30.1","new_version":"2.31.0","update_type":"minor","path":null,"pr_created_at":"2026-10-06T18:23:45.000Z","version_change":"2.30.1 → 2.31.0","issue":{"uuid":"5733392850","node_id":"PR_kwDOTJYz_s8AAAABG-TrRg","number":131,"state":"closed","title":"chore(deps): bump the npm_and_yarn group across 1 directory with 3 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-10-06T18:26:01.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-06T18:23:45.000Z","updated_at":"2026-10-06T18:26:01.000Z","time_to_close":136,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"npm_and_yarn","update_count":3,"packages":[{"name":"source-map-js","old_version":"1.2.1","new_version":"1.2.2","repository_url":"https://github.com/7rulnik/source-map-js"},{"name":"compression","old_version":"1.8.1","new_version":"1.8.2","repository_url":"https://github.com/expressjs/compression"},{"name":"moment","old_version":"2.30.1","new_version":"2.31.0","repository_url":"https://github.com/moment/moment"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 3 updates in the /artifacts/aurora-mobile directory: [source-map-js](https://github.com/7rulnik/source-map-js), [compression](https://github.com/expressjs/compression) and [moment](https://github.com/moment/moment).\n\nUpdates `source-map-js` from 1.2.1 to 1.2.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/7rulnik/source-map-js/releases\"\u003esource-map-js's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.2.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eFix crash when executing in browser with CSP script-src that don't permit unsafe-eval (\u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/29\"\u003e#29\u003c/a\u003e) \u003ca href=\"https://github.com/xfournet\"\u003e\u003ccode\u003e@​xfournet\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eFix denial of service from malicious indexed source maps (CVE-2026-93749) (\u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/79\"\u003e#79\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eReported by \u003ca href=\"https://github.com/waydeshi\"\u003e\u003ccode\u003e@​waydeshi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/issues/76\"\u003e#76\u003c/a\u003e. A fix was also proposed by \u003ca href=\"https://github.com/aniebiet\"\u003e\u003ccode\u003e@​aniebiet\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/78\"\u003e#78\u003c/a\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/7rulnik/source-map-js/blob/main/CHANGELOG.md\"\u003esource-map-js's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.2.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eFix crash when executing in browser with CSP script-src that don't permit unsafe-eval (\u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/29\"\u003e#29\u003c/a\u003e) \u003ca href=\"https://github.com/xfournet\"\u003e\u003ccode\u003e@​xfournet\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eFix denial of service from malicious indexed source maps (CVE-2026-93749) (\u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/79\"\u003e#79\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eReported by \u003ca href=\"https://github.com/waydeshi\"\u003e\u003ccode\u003e@​waydeshi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/issues/76\"\u003e#76\u003c/a\u003e. A fix was also proposed by \u003ca href=\"https://github.com/aniebiet\"\u003e\u003ccode\u003e@​aniebiet\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/78\"\u003e#78\u003c/a\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/7rulnik/source-map-js/commit/0a1d334fd1e55a47df97fcd60a7915d46df3b08a\"\u003e\u003ccode\u003e0a1d334\u003c/code\u003e\u003c/a\u003e 1.2.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/7rulnik/source-map-js/commit/4c6fa26d77419bd8e48ec92844866cce7d9ae739\"\u003e\u003ccode\u003e4c6fa26\u003c/code\u003e\u003c/a\u003e Update changelog\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/7rulnik/source-map-js/commit/cf7658058ceeaa8619d5ae0ec90be6905209d016\"\u003e\u003ccode\u003ecf76580\u003c/code\u003e\u003c/a\u003e Fix denial of service from malicious indexed source maps (CVE-2026-93749) (\u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/issues/79\"\u003e#79\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/7rulnik/source-map-js/commit/7899a86615c630f4fc220273ff9fe2e8e49a56df\"\u003e\u003ccode\u003e7899a86\u003c/code\u003e\u003c/a\u003e Fix crash when executing browser with CSP script-src that don't permit unsafe...\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/7rulnik/source-map-js/compare/v1.2.1...v1.2.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `compression` from 1.8.1 to 1.8.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/compression/releases\"\u003ecompression's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.8.2\u003c/h2\u003e\n\u003ch2\u003eImportant\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-87776\"\u003eCVE-2026-87776\u003c/a\u003e (\u003ca href=\"https://github.com/expressjs/compression/security/advisories/GHSA-vc2v-76pw-4v95\"\u003eGHSA-vc2v-76pw-4v95\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore: add funding to package.json by \u003ca href=\"https://github.com/bjohansebas\"\u003e\u003ccode\u003e@​bjohansebas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/248\"\u003eexpressjs/compression#248\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.2 to 3.29.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/249\"\u003eexpressjs/compression#249\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 4.2.2 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/253\"\u003eexpressjs/compression#253\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.7 to 3.29.11 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/252\"\u003eexpressjs/compression#252\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/download-artifact from 4.3.0 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/251\"\u003eexpressjs/compression#251\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-node from 4.4.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/261\"\u003eexpressjs/compression#261\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.11 to 4.31.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/260\"\u003eexpressjs/compression#260\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/259\"\u003eexpressjs/compression#259\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/download-artifact from 5.0.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/258\"\u003eexpressjs/compression#258\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump coverallsapp/github-action from 2.3.6 to 2.3.7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/264\"\u003eexpressjs/compression#264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 5.0.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/263\"\u003eexpressjs/compression#263\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.31.2 to 4.31.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/262\"\u003eexpressjs/compression#262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: up node version to 25.x in CI by \u003ca href=\"https://github.com/imangas\"\u003e\u003ccode\u003e@​imangas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/272\"\u003eexpressjs/compression#272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edoc(package): remove history.md and add readme.md to published files by \u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/270\"\u003eexpressjs/compression#270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate link to CONTRIBUTING.md by \u003ca href=\"https://github.com/krzysdz\"\u003e\u003ccode\u003e@​krzysdz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/281\"\u003eexpressjs/compression#281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: run CI on Windows and macOS by \u003ca href=\"https://github.com/kilisamemarisaaa\"\u003e\u003ccode\u003e@​kilisamemarisaaa\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/283\"\u003eexpressjs/compression#283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/257\"\u003eexpressjs/compression#257\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/download-artifact from 6.0.0 to 7.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/268\"\u003eexpressjs/compression#268\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.31.5 to 4.31.9 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/265\"\u003eexpressjs/compression#265\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-node from 6.0.0 to 6.1.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/266\"\u003eexpressjs/compression#266\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/267\"\u003eexpressjs/compression#267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(ci): npm-publish via reusable workflows by \u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/269\"\u003eexpressjs/compression#269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: update outdated Brotli note and fix npm install docs URL by \u003ca href=\"https://github.com/Vansh1811\"\u003e\u003ccode\u003e@​Vansh1811\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/276\"\u003eexpressjs/compression#276\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: match Cache-Control no-transform directive case-insensitively by \u003ca href=\"https://github.com/vaibhavmashal\"\u003e\u003ccode\u003e@​vaibhavmashal\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/286\"\u003eexpressjs/compression#286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e1.8.2 by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/287\"\u003eexpressjs/compression#287\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/imangas\"\u003e\u003ccode\u003e@​imangas\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/272\"\u003eexpressjs/compression#272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/270\"\u003eexpressjs/compression#270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/krzysdz\"\u003e\u003ccode\u003e@​krzysdz\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/281\"\u003eexpressjs/compression#281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kilisamemarisaaa\"\u003e\u003ccode\u003e@​kilisamemarisaaa\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/283\"\u003eexpressjs/compression#283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Vansh1811\"\u003e\u003ccode\u003e@​Vansh1811\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/276\"\u003eexpressjs/compression#276\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vaibhavmashal\"\u003e\u003ccode\u003e@​vaibhavmashal\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/286\"\u003eexpressjs/compression#286\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/compression/compare/v1.8.1...v1.8.2\"\u003ehttps://github.com/expressjs/compression/compare/v1.8.1...v1.8.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/compression/blob/master/HISTORY.md\"\u003ecompression's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e1.8.2\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-87776\"\u003eCVE-2026-87776\u003c/a\u003e (\u003ca href=\"https://github.com/expressjs/compression/security/advisories/GHSA-vc2v-76pw-4v95\"\u003eGHSA-vc2v-76pw-4v95\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edeps: add destroy@1.2.0\u003c/li\u003e\n\u003cli\u003eMatch \u003ccode\u003eCache-Control: no-transform\u003c/code\u003e directive case-insensitively\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/0f9707417bd53d41a319fce8bdb80dfa08b435c8\"\u003e\u003ccode\u003e0f97074\u003c/code\u003e\u003c/a\u003e 1.8.2 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/287\"\u003e#287\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/151f63e91e1b64f8fb0b064e19321a4f28db6bff\"\u003e\u003ccode\u003e151f63e\u003c/code\u003e\u003c/a\u003e fix: destroy compression stream on response close\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/0a764956691bede2b62c711598ee65ea643d3b1e\"\u003e\u003ccode\u003e0a76495\u003c/code\u003e\u003c/a\u003e fix: match Cache-Control no-transform directive case-insensitively (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/286\"\u003e#286\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/c17b6e58ac914c84d9e3a64130dcc428e0e26887\"\u003e\u003ccode\u003ec17b6e5\u003c/code\u003e\u003c/a\u003e docs: update outdated Brotli note and fix npm install docs URL (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/276\"\u003e#276\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/112911abc46e0d8fa6c9793ef5005ca1d53ccb7c\"\u003e\u003ccode\u003e112911a\u003c/code\u003e\u003c/a\u003e chore(ci): npm-publish via reusable workflows (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/269\"\u003e#269\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/1bf5eb0b5eaf5001af9782ade18c6cca690ccaad\"\u003e\u003ccode\u003e1bf5eb0\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/267\"\u003e#267\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/d8fe64d50081d4a13a8ea5c25a852ca27fde0b7b\"\u003e\u003ccode\u003ed8fe64d\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/setup-node from 6.0.0 to 6.1.0 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/266\"\u003e#266\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/b218ff54eb8e211100d8a6697d13cdc73fdb13b3\"\u003e\u003ccode\u003eb218ff5\u003c/code\u003e\u003c/a\u003e build(deps): bump github/codeql-action from 4.31.5 to 4.31.9 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/265\"\u003e#265\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/8a1cf8ecf948c28ffd3d29f942c9a310bc36e5c1\"\u003e\u003ccode\u003e8a1cf8e\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/download-artifact from 6.0.0 to 7.0.0 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/268\"\u003e#268\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/4a19855442b7ebfcea4f95caf491968108dc15b8\"\u003e\u003ccode\u003e4a19855\u003c/code\u003e\u003c/a\u003e build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/257\"\u003e#257\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/expressjs/compression/compare/v1.8.1...v1.8.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for compression since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `moment` from 2.30.1 to 2.31.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/releases\"\u003emoment's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.31.0\u003c/h2\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/blob/develop/CHANGELOG.md\"\u003emoment's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch3\u003e2.31.0\u003c/h3\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/15b45d48a176312e8f34143c5a800090abf4787f\"\u003e\u003ccode\u003e15b45d4\u003c/code\u003e\u003c/a\u003e [pkg] Build 2.31.0 (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6452\"\u003e#6452\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/631cd81454ee001e1f508e21270eae0b6bb62974\"\u003e\u003ccode\u003e631cd81\u003c/code\u003e\u003c/a\u003e [pkg] Update changelog for upcoming release (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6394\"\u003e#6394\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/6caff9e0d54e85a63a6eb97d7361f1da35bc58f4\"\u003e\u003ccode\u003e6caff9e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/710703b7eac93535ad125cbf4feb3d42afed6fb3\"\u003e\u003ccode\u003e710703b\u003c/code\u003e\u003c/a\u003e [feature] Add internal date-default hook for Moment Timezone (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6451\"\u003e#6451\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/863ed940556e6e63c43de23981a4853036a003ac\"\u003e\u003ccode\u003e863ed94\u003c/code\u003e\u003c/a\u003e [bugfix] Add stack traces to conditional deprecation warnings (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6450\"\u003e#6450\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/2c7abe1c42ee15445d30c2c5d536750a1e43a09a\"\u003e\u003ccode\u003e2c7abe1\u003c/code\u003e\u003c/a\u003e [bugfix] Apply postformat to locale relative time methods (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6448\"\u003e#6448\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/9c45ac38690c649c95e19923276b63da5fe2be26\"\u003e\u003ccode\u003e9c45ac3\u003c/code\u003e\u003c/a\u003e [bugfix] Include metadata in all-locales bundle (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6447\"\u003e#6447\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/f6eefc5fc7b44ceccbd007aeffc48ebc5eac30fa\"\u003e\u003ccode\u003ef6eefc5\u003c/code\u003e\u003c/a\u003e [bugfix] Validate timezone offset range (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6446\"\u003e#6446\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/136b441794a3bb207d593add3b59e9de0e062523\"\u003e\u003ccode\u003e136b441\u003c/code\u003e\u003c/a\u003e [bugfix] Avoid Object.assign in duration.humanize (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6443\"\u003e#6443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/0d1050437b40f66ac47e14b285bb3d09676cf2e0\"\u003e\u003ccode\u003e0d10504\u003c/code\u003e\u003c/a\u003e [bugfix] Fix locale('\u003cstrong\u003eproto\u003c/strong\u003e') corrupting the global locale (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6442\"\u003e#6442\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moment/moment/compare/2.30.1...2.31.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for moment since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/josephcrown920/Auroraglobal/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/josephcrown920/Auroraglobal/pull/131","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/josephcrown920%2FAuroraglobal/issues/131","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/131/packages"}},{"old_version":"2.30.1","new_version":"2.31.0","update_type":"minor","path":null,"pr_created_at":"2026-10-06T09:31:29.000Z","version_change":"2.30.1 → 2.31.0","issue":{"uuid":"5726160690","node_id":"PR_kwDOQxCN4s8AAAABG4d0vg","number":7,"state":"closed","title":"chore(deps): bump the npm_and_yarn group across 1 directory with 5 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-10-06T09:34:15.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-06T09:31:29.000Z","updated_at":"2026-10-06T09:34:17.000Z","time_to_close":166,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"npm_and_yarn","update_count":5,"packages":[{"name":"smol-toml","old_version":"1.7.1","new_version":"1.9.0","repository_url":"https://github.com/squirrelchat/smol-toml"},{"name":"dompurify","old_version":"3.4.2","new_version":"3.4.16","repository_url":"https://github.com/cure53/DOMPurify"},{"name":"moment","old_version":"2.30.1","new_version":"2.31.0","repository_url":"https://github.com/moment/moment"},{"name":"undici","old_version":"7.25.0","new_version":"7.30.0","repository_url":"https://github.com/nodejs/undici"},{"name":"ws","old_version":"8.20.0","new_version":"8.22.0","repository_url":"https://github.com/websockets/ws"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 5 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [smol-toml](https://github.com/squirrelchat/smol-toml) | `1.7.1` | `1.9.0` |\n| [dompurify](https://github.com/cure53/DOMPurify) | `3.4.2` | `3.4.16` |\n| [moment](https://github.com/moment/moment) | `2.30.1` | `2.31.0` |\n| [undici](https://github.com/nodejs/undici) | `7.25.0` | `7.30.0` |\n| [ws](https://github.com/websockets/ws) | `8.20.0` | `8.22.0` |\n\n\nUpdates `smol-toml` from 1.7.1 to 1.9.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/squirrelchat/smol-toml/releases\"\u003esmol-toml's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.9.0\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eHuge update\u003c/strong\u003e!!! This is most likely the largest update the library received since its release, with lots of new features and improvements.\u003c/p\u003e\n\u003ch3\u003ePerformance improvements\u003c/h3\u003e\n\u003cp\u003eSignificant parts of the internal parse logic have been rewritten, improving performance by \u003cstrong\u003e1.5x-2x\u003c/strong\u003e. The library was already comfortably ahead of the others, but it is now faster than ever, sitting at \u003cstrong\u003e4x faster parse performance\u003c/strong\u003e than the closest maintained implementation.\u003c/p\u003e\n\u003cp\u003eProblematic code paths have also been replaced by safer implementations, solving potential DoS vectors. See GHSA-r4xh-jqrq-34v2.\u003c/p\u003e\n\u003cp\u003eNote: the objects returned by the library now have a \u003cem\u003enull prototype\u003c/em\u003e. This is a transparent change for 99.9% of users, and is one of the most significant contributors to the major performance gains in this version.\u003c/p\u003e\n\u003ch3\u003eFull Temporal support\u003c/h3\u003e\n\u003cp\u003eVersion 1.8.0 brought support for Temporal in \u003ccode\u003estringify\u003c/code\u003e; now the library is also able to emit Temporal objects instead of its own ad-hoc \u003ccode\u003eTomlDate\u003c/code\u003e object. It is not enabled by default, but it will become the default in v2. Enable by setting \u003ccode\u003euseLegacyDate: false\u003c/code\u003e in the parser's options.\u003c/p\u003e\n\u003ch4\u003eBetter Temporal support in stringify\u003c/h4\u003e\n\u003cp\u003eTemporal support has been improved since it released: Temporal objects that cannot be represented (such as \u003ccode\u003eTemporal.PlainMonthDay\u003c/code\u003e) now throw an error (instead of silently emitting a bogus object).\u003c/p\u003e\n\u003cp\u003eA new option has been added to \u003ccode\u003estringify\u003c/code\u003e to disallow Temporal objects that cannot be fully represented in TOML. This includes \u003ccode\u003eZonedDateTime\u003c/code\u003e objects with a IANA timezone attached instead of a plain offset, and dates with a specific calendar value set. Enable by setting \u003ccode\u003estrictTemporal: true\u003c/code\u003e in the options.\u003c/p\u003e\n\u003ch3\u003eHandling of unsafe keys\u003c/h3\u003e\n\u003cp\u003eSince its release the library has been protected against prototype pollution attacks, setting properties like \u003ccode\u003e__proto__\u003c/code\u003e using safe mechanisms that do not trigger prototype pollution. However, while the returned objects are safe on their own, they may become problematic if used carelessly.\u003c/p\u003e\n\u003cp\u003eInspired by \u003ccode\u003esecure-json-parse\u003c/code\u003e, the library now offers a way to either drop unsafe properties from the returned object, or to throw an error and reject documents altogether. By default, these potentially unsafe keys are preserved and returned.\u003c/p\u003e\n\u003ch3\u003eMiscellaneous updates\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUnicode BOM is now gracefully accepted and ignored.\u003c/li\u003e\n\u003cli\u003eTable array headers are now properly checked again. Reported in \u003ca href=\"https://redirect.github.com/squirrelchat/smol-toml/issues/65\"\u003e#65\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eClosed certain gaps where invalid whitespace would be accepted. Reported in \u003ca href=\"https://redirect.github.com/squirrelchat/smol-toml/issues/61\"\u003e#61\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eBogus local date and local time values with a UTC offset are no longer accepted.\u003c/li\u003e\n\u003cli\u003eCertain error messages are more accurate and handle errors at line boundaries better.\u003c/li\u003e\n\u003cli\u003eThe default export of the lib is now formally deprecated; use a \u003ccode\u003eimport *\u003c/code\u003e instead. Proposed in \u003ca href=\"https://redirect.github.com/squirrelchat/smol-toml/issues/50\"\u003e#50\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eOn Node 20+, strings that contain lone surrogates are now normalised to well-formed strings.\u003c/li\u003e\n\u003cli\u003eOn Node 20+, keys that contain lone surrogates are now rejected.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/squirrelchat/smol-toml/compare/v1.8.0...v1.9.0\"\u003ehttps://github.com/squirrelchat/smol-toml/compare/v1.8.0...v1.9.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.8.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat: stringify temporal objects by \u003ca href=\"https://github.com/Gouvernathor\"\u003e\u003ccode\u003e@​Gouvernathor\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/cyyynthia\"\u003e\u003ccode\u003e@​cyyynthia\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/squirrelchat/smol-toml/compare/v1.7.2...v1.8.0\"\u003ehttps://github.com/squirrelchat/smol-toml/compare/v1.7.2...v1.8.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.7.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003erefactor: improve performance of the parser by \u003ca href=\"https://github.com/cyyynthia\"\u003e\u003ccode\u003e@​cyyynthia\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: revert sourcemap publishing by \u003ca href=\"https://github.com/cyyynthia\"\u003e\u003ccode\u003e@​cyyynthia\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/squirrelchat/smol-toml/commit/6f9739a5ab481f57c3112024bc4947534b580b58\"\u003e\u003ccode\u003e6f9739a\u003c/code\u003e\u003c/a\u003e fix: gate \u003ccode\u003e[is|to]WellFormed\u003c/code\u003e (Node 18 compat)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/squirrelchat/smol-toml/commit/a73ca32c7c9237f744c880d900ad15307a0cef56\"\u003e\u003ccode\u003ea73ca32\u003c/code\u003e\u003c/a\u003e fix: no Temporal with toml-test when Node \u0026lt; 26\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/squirrelchat/smol-toml/commit/7727890604580bd3fc2d7d2f79ad6e67b745ebe7\"\u003e\u003ccode\u003e7727890\u003c/code\u003e\u003c/a\u003e chore: version bump\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/squirrelchat/smol-toml/commit/641903d60d47900080602b6a83e919d2a526547f\"\u003e\u003ccode\u003e641903d\u003c/code\u003e\u003c/a\u003e chore: rewrite README.md\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/squirrelchat/smol-toml/commit/2df14c57945fec5a3737bc0cdce06a436bf9a77e\"\u003e\u003ccode\u003e2df14c5\u003c/code\u003e\u003c/a\u003e fix(types): make it work if Temporal doesn't exist\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/squirrelchat/smol-toml/commit/3eaa44ef54b859990969935664b12023b26d0eae\"\u003e\u003ccode\u003e3eaa44e\u003c/code\u003e\u003c/a\u003e chore: update benchmark harness\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/squirrelchat/smol-toml/commit/cd3ba6021a59bff0ac57dc059ca2e194365caedd\"\u003e\u003ccode\u003ecd3ba60\u003c/code\u003e\u003c/a\u003e feat: safety option for dangerous properties\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/squirrelchat/smol-toml/commit/6746a7f3ec066109ef8ba69126489fd84b6d3b73\"\u003e\u003ccode\u003e6746a7f\u003c/code\u003e\u003c/a\u003e perf: refactor TomlDate to avoid regex path\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/squirrelchat/smol-toml/commit/16fa64fc5efad895e8657d70e5a1855a16f58ace\"\u003e\u003ccode\u003e16fa64f\u003c/code\u003e\u003c/a\u003e chore: move benchmarks and test harness under 0BSD\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/squirrelchat/smol-toml/commit/bbd14b154b603068ad25ad54b4a3e7f53adeedc0\"\u003e\u003ccode\u003ebbd14b1\u003c/code\u003e\u003c/a\u003e fix: correct sign for single-char numbers\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/squirrelchat/smol-toml/compare/v1.7.1...v1.9.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `dompurify` from 3.4.2 to 3.4.16\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cure53/DOMPurify/releases\"\u003edompurify's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eDOMPurify 3.4.16\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a problem with \u003ccode\u003eIN_PLACE\u003c/code\u003e node removal when working with hooks, thanks \u003ca href=\"https://github.com/manus-pi\"\u003e\u003ccode\u003e@​manus-pi\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a problem with \u003ccode\u003eIN_PLACE\u003c/code\u003e sanitization and raw-text roots, thanks \u003ca href=\"https://github.com/h-t-m\"\u003e\u003ccode\u003e@​h-t-m\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a problem with ESM default exports landing in CommonJS declarations, thanks \u003ca href=\"https://github.com/ssi02014\"\u003e\u003ccode\u003e@​ssi02014\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMigrated from \u003ccode\u003erollup\u003c/code\u003e to \u003ccode\u003erolldown\u003c/code\u003e because performance, thanks \u003ca href=\"https://github.com/ssi02014\"\u003e\u003ccode\u003e@​ssi02014\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBumped several dependencies where possible\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eDOMPurify 3.4.15\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded better clobbering hardening when XML content is involved, thanks \u003ca href=\"https://github.com/gnyselcuk\"\u003e\u003ccode\u003e@​gnyselcuk\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdded several smaller hardening and edge-case improvements, thanks \u003ca href=\"https://github.com/leechristensen\"\u003e\u003ccode\u003e@​leechristensen\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBumped several dependencies where possible\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eDOMPurify 3.4.14\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed an issue with possible bypasses when risky tags are allow-listed, thanks \u003ca href=\"https://github.com/AlirezaRouhbakhsh\"\u003e\u003ccode\u003e@​AlirezaRouhbakhsh\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a couple of edge cases with mixed document contexts, thanks \u003ca href=\"https://github.com/fishjojo1\"\u003e\u003ccode\u003e@​fishjojo1\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdded the SVG \u003ccode\u003epointer-events\u003c/code\u003e and \u003ccode\u003evector-effect\u003c/code\u003e presentation attributes to the allow-list, thanks \u003ca href=\"https://github.com/Jaybhade\"\u003e\u003ccode\u003e@​Jaybhade\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eConducted another refactoring run, removed dead branches and duplicated logic, flattened attribute validation\u003c/li\u003e\n\u003cli\u003eUpdated the documentation in several spots, README, wiki, etc., thanks \u003ca href=\"https://github.com/Akokonunes\"\u003e\u003ccode\u003e@​Akokonunes\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdated several development dependencies and CI workflow actions\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eDOMPurify 3.4.13\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed an issue with hook removal during \u003ccode\u003eIN_PLACE\u003c/code\u003e sanitization, thanks \u003ca href=\"https://github.com/koyokr\"\u003e\u003ccode\u003e@​koyokr\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed an issue with hooks potentially bypassing the clone guard, thanks \u003ca href=\"https://github.com/AkshayjainG\"\u003e\u003ccode\u003e@​AkshayjainG\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed an issue with DOM clobbering via \u003ccode\u003eownerDocument\u003c/code\u003e during \u003ccode\u003eIN_PLACE\u003c/code\u003e, thanks \u003ca href=\"https://github.com/AkshayjainG\"\u003e\u003ccode\u003e@​AkshayjainG\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBumped several dependencies where possible\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eDOMPurify 3.4.12\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed an issue where a hook would not get called for custom elements, thanks \u003ca href=\"https://github.com/Rikuxx0\"\u003e\u003ccode\u003e@​Rikuxx0\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHardened the handling of hooks removing elements, \u003ca href=\"https://github.com/mkrause-bee360\"\u003e\u003ccode\u003e@​mkrause-bee360\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdded support for a few new SVG attributes, thanks \u003ca href=\"https://github.com/cbn-falias\"\u003e\u003ccode\u003e@​cbn-falias\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/Develop-KIM\"\u003e\u003ccode\u003e@​Develop-KIM\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHardened the handling of declarative partial updates\u003c/li\u003e\n\u003cli\u003eUpdated the documentation is several spots, README, wiki, etc.\u003c/li\u003e\n\u003cli\u003eBumped several dependencies where possible\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eDOMPurify 3.4.11\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed an issue with a leaky config for hooks via \u003ccode\u003esetConfig\u003c/code\u003e, thanks \u003ca href=\"https://github.com/trace37labs\"\u003e\u003ccode\u003e@​trace37labs\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBumped vulnerable development dependencies to arrive at plain 0 with \u003ccode\u003enpm audit\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eUpdated the \u003ccode\u003eosv-scanner\u003c/code\u003e suppression list as no vulnerable dependencies are left for now\u003c/li\u003e\n\u003cli\u003eUpdated up the linting tool-chain and removed now-redundant lint directives\u003c/li\u003e\n\u003cli\u003eUpdated the documentation is several spots, README, wiki, etc.\u003c/li\u003e\n\u003cli\u003eBumped several dependencies where possible\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eDOMPurify 3.4.10\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRefactored codebase for clarity: extracted the public type declarations into \u003ccode\u003etypes.ts\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eDecomposed the three largest sanitizer functions into focused helpers\u003c/li\u003e\n\u003cli\u003eRemoved duplicated defaults and dead branches, consolidated \u003ccode\u003eSAFE_FOR_TEMPLATES\u003c/code\u003e scrubbing into single shared path\u003c/li\u003e\n\u003cli\u003eImproved per-node performance by hoisting the mXSS probe regexes and testing \u003ccode\u003etextContent\u003c/code\u003e before \u003ccode\u003einnerHTML\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdded a deterministic micro-benchmark harness (\u003ccode\u003enpm run bench\u003c/code\u003e) with a \u003ccode\u003e--compare\u003c/code\u003e mode\u003c/li\u003e\n\u003cli\u003eReduced CI cost by running the full three-engine browser suite once per PR\u003c/li\u003e\n\u003cli\u003eRefreshed the \u003ccode\u003edemos/\u003c/code\u003e folder so every demo runs again, and added a SVG-via-\u003ccode\u003e\u0026lt;img\u0026gt;\u003c/code\u003e demo\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cure53/DOMPurify/commit/b9b9d80f7e401771c2ccaef5f45def7eec8f27d7\"\u003e\u003ccode\u003eb9b9d80\u003c/code\u003e\u003c/a\u003e release: 3.4.16 (\u003ca href=\"https://redirect.github.com/cure53/DOMPurify/issues/1636\"\u003e#1636\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cure53/DOMPurify/commit/1d7460c4f8a27be825c11b1c9d346d79db32c1e5\"\u003e\u003ccode\u003e1d7460c\u003c/code\u003e\u003c/a\u003e release: 3.4.15 (\u003ca href=\"https://redirect.github.com/cure53/DOMPurify/issues/1609\"\u003e#1609\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cure53/DOMPurify/commit/4e6fe24173f1a85eafacd95e3c82966e29d34d49\"\u003e\u003ccode\u003e4e6fe24\u003c/code\u003e\u003c/a\u003e release: 3.4.14 (\u003ca href=\"https://redirect.github.com/cure53/DOMPurify/issues/1587\"\u003e#1587\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cure53/DOMPurify/commit/3067f774676975de12306effd6db6ad7a9a8c17f\"\u003e\u003ccode\u003e3067f77\u003c/code\u003e\u003c/a\u003e release: 3.4.13 (\u003ca href=\"https://redirect.github.com/cure53/DOMPurify/issues/1562\"\u003e#1562\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cure53/DOMPurify/commit/a9ca1e537422319a557a9a2aa61f003b23b4a197\"\u003e\u003ccode\u003ea9ca1e5\u003c/code\u003e\u003c/a\u003e release: 3.4.12 (\u003ca href=\"https://redirect.github.com/cure53/DOMPurify/issues/1537\"\u003e#1537\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cure53/DOMPurify/commit/0cae5187403132f96a6d357649e4b15633fc210a\"\u003e\u003ccode\u003e0cae518\u003c/code\u003e\u003c/a\u003e release: 3.4.11 (\u003ca href=\"https://redirect.github.com/cure53/DOMPurify/issues/1494\"\u003e#1494\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cure53/DOMPurify/commit/6ee5716f8336989753611beeca364957c0eb0c3e\"\u003e\u003ccode\u003e6ee5716\u003c/code\u003e\u003c/a\u003e release: 3.4.10 (\u003ca href=\"https://redirect.github.com/cure53/DOMPurify/issues/1478\"\u003e#1478\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cure53/DOMPurify/commit/52102472d46035857c52df19e44285f8a1e102fc\"\u003e\u003ccode\u003e5210247\u003c/code\u003e\u003c/a\u003e release: 3.4.9 (\u003ca href=\"https://redirect.github.com/cure53/DOMPurify/issues/1459\"\u003e#1459\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cure53/DOMPurify/commit/bcdd8285412dc9c4c149652aed2d712e790d6ccf\"\u003e\u003ccode\u003ebcdd828\u003c/code\u003e\u003c/a\u003e release: 3.4.8 (\u003ca href=\"https://redirect.github.com/cure53/DOMPurify/issues/1439\"\u003e#1439\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cure53/DOMPurify/commit/ca30f070c360df162a3e3848e80e6fd3c9e74bff\"\u003e\u003ccode\u003eca30f07\u003c/code\u003e\u003c/a\u003e release: 3.4.7 (\u003ca href=\"https://redirect.github.com/cure53/DOMPurify/issues/1414\"\u003e#1414\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/cure53/DOMPurify/compare/3.4.2...3.4.16\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `moment` from 2.30.1 to 2.31.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/releases\"\u003emoment's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.31.0\u003c/h2\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/blob/develop/CHANGELOG.md\"\u003emoment's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch3\u003e2.31.0\u003c/h3\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/15b45d48a176312e8f34143c5a800090abf4787f\"\u003e\u003ccode\u003e15b45d4\u003c/code\u003e\u003c/a\u003e [pkg] Build 2.31.0 (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6452\"\u003e#6452\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/631cd81454ee001e1f508e21270eae0b6bb62974\"\u003e\u003ccode\u003e631cd81\u003c/code\u003e\u003c/a\u003e [pkg] Update changelog for upcoming release (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6394\"\u003e#6394\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/6caff9e0d54e85a63a6eb97d7361f1da35bc58f4\"\u003e\u003ccode\u003e6caff9e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/710703b7eac93535ad125cbf4feb3d42afed6fb3\"\u003e\u003ccode\u003e710703b\u003c/code\u003e\u003c/a\u003e [feature] Add internal date-default hook for Moment Timezone (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6451\"\u003e#6451\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/863ed940556e6e63c43de23981a4853036a003ac\"\u003e\u003ccode\u003e863ed94\u003c/code\u003e\u003c/a\u003e [bugfix] Add stack traces to conditional deprecation warnings (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6450\"\u003e#6450\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/2c7abe1c42ee15445d30c2c5d536750a1e43a09a\"\u003e\u003ccode\u003e2c7abe1\u003c/code\u003e\u003c/a\u003e [bugfix] Apply postformat to locale relative time methods (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6448\"\u003e#6448\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/9c45ac38690c649c95e19923276b63da5fe2be26\"\u003e\u003ccode\u003e9c45ac3\u003c/code\u003e\u003c/a\u003e [bugfix] Include metadata in all-locales bundle (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6447\"\u003e#6447\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/f6eefc5fc7b44ceccbd007aeffc48ebc5eac30fa\"\u003e\u003ccode\u003ef6eefc5\u003c/code\u003e\u003c/a\u003e [bugfix] Validate timezone offset range (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6446\"\u003e#6446\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/136b441794a3bb207d593add3b59e9de0e062523\"\u003e\u003ccode\u003e136b441\u003c/code\u003e\u003c/a\u003e [bugfix] Avoid Object.assign in duration.humanize (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6443\"\u003e#6443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/0d1050437b40f66ac47e14b285bb3d09676cf2e0\"\u003e\u003ccode\u003e0d10504\u003c/code\u003e\u003c/a\u003e [bugfix] Fix locale('\u003cstrong\u003eproto\u003c/strong\u003e') corrupting the global locale (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6442\"\u003e#6442\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moment/moment/compare/2.30.1...2.31.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for moment since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `undici` from 7.25.0 to 7.30.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nodejs/undici/releases\"\u003eundici's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev7.30.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[Backport v7.x] fix: selectively re-enable SIMD for ppc64 by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5794\"\u003enodejs/undici#5794\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport upgrade diagnostics lifecycle fixes to v7.x by \u003ca href=\"https://github.com/BridgeAR\"\u003e\u003ccode\u003e@​BridgeAR\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5783\"\u003enodejs/undici#5783\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Backport v7.x] fix: honor backpressure in decompression interceptor by \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5837\"\u003enodejs/undici#5837\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: close rejected HTTP/2 WebSocket streams on v7.x by \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5876\"\u003enodejs/undici#5876\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest(fetch): make pull-dont-push exceed any socket buffer by \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5889\"\u003enodejs/undici#5889\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/nodejs/undici/compare/v7.29.1...v7.30.0\"\u003ehttps://github.com/nodejs/undici/compare/v7.29.1...v7.30.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.29.1\u003c/h2\u003e\n\u003ch2\u003e⚠️ Security fixes\u003c/h2\u003e\n\u003ch3\u003eHigh severity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-w293-vg96-wgc3\"\u003eGHSA-w293-vg96-wgc3\u003c/a\u003e: \u003ccode\u003eBalancedPool\u003c/code\u003e could drop function-valued connection options while cloning its configuration, including custom TLS certificate validation callbacks. Undici now preserves \u003ccode\u003econnect\u003c/code\u003e and legacy \u003ccode\u003etls\u003c/code\u003e options when creating upstreams. Fixed by \u003ca href=\"https://github.com/nodejs/undici/commit/f690157d728508652fef14673630c71515123e96\"\u003ef690157d\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-rfgv-xxqx-mfg5\"\u003eGHSA-rfgv-xxqx-mfg5\u003c/a\u003e: a WebSocket server could select a subprotocol when none was requested, causing an uncaught \u003ccode\u003eTypeError\u003c/code\u003e that could terminate the process. Undici now rejects the handshake with protocol error 1002. Fixed by \u003ca href=\"https://github.com/nodejs/undici/commit/6615e0175e9b635bcd2e3e87a47daa82f6f5b728\"\u003e6615e017\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMedium severity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-3wwx-pv8p-q78v\"\u003eGHSA-3wwx-pv8p-q78v\u003c/a\u003e: a malformed permessage-deflate payload exceeding the configured decompression limit could emit an unhandled zlib error and terminate the process. Undici now destroys the inflater after reaching the limit. Fixed by \u003ca href=\"https://github.com/nodejs/undici/commit/63cf698b611fecc6ee0a17b185b930051e4b982f\"\u003e63cf698b\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-rx4f-c7p8-82vq\"\u003eGHSA-rx4f-c7p8-82vq\u003c/a\u003e: an unclean \u003ccode\u003eWebSocketStream\u003c/code\u003e close could create an unobserved rejected promise when its writable stream was locked, potentially terminating the process. Undici now propagates the failure through the retained writable stream controller. Fixed by \u003ca href=\"https://github.com/nodejs/undici/commit/1858656ebb1e919311c1f31613dfd581b7214349\"\u003e1858656e\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-2jfj-6hjv-fm6j\"\u003eGHSA-2jfj-6hjv-fm6j\u003c/a\u003e: shared caches could store and replay responses containing \u003ccode\u003eSet-Cookie\u003c/code\u003e, disclosing one user's cookies to another caller. Undici now excludes these responses from shared caches, including existing entries and revalidation paths. Fixed by \u003ca href=\"https://github.com/nodejs/undici/commit/b6c5a00252c37da9dd2db9bead053bb843e1f988\"\u003eb6c5a002\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-3xpg-4rpp-hhhm\"\u003eGHSA-3xpg-4rpp-hhhm\u003c/a\u003e: the decompression interceptor did not bound decoded output, allowing compressed responses to consume excessive memory. Undici now limits every decompression stage to 64 MiB by default and supports a configurable \u003ccode\u003emaxSize\u003c/code\u003e. Fixed by \u003ca href=\"https://github.com/nodejs/undici/commit/2c7d7e1227043c644c4c32cfd1e276f4fd4fcb11\"\u003e2c7d7e12\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-pmjh-fq2x-6v4x\"\u003eGHSA-pmjh-fq2x-6v4x\u003c/a\u003e: a terminal retry failure after response headers were exposed could orphan the original response body, causing consumers to hang indefinitely. Undici now propagates the terminal error to the exposed body. Fixed by \u003ca href=\"https://github.com/nodejs/undici/commit/3c6726599cea8646384dde846c97d630da472a74\"\u003e3c672659\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eLow severity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-8436-99hf-9mmv\"\u003eGHSA-8436-99hf-9mmv\u003c/a\u003e: cache interceptors could store and replay responses to unsafe HTTP methods such as \u003ccode\u003ePOST\u003c/code\u003e or \u003ccode\u003eDELETE\u003c/code\u003e. Undici now restricts cache reads and writes to safe methods while preserving invalidation by successful unsafe requests. Fixed by \u003ca href=\"https://github.com/nodejs/undici/commit/b61d9432bac7caac51273ad209862e4c0bf935ae\"\u003eb61d9432\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-2gqq-gqf2-x968\"\u003eGHSA-2gqq-gqf2-x968\u003c/a\u003e: the dump interceptor could treat an oversized chunked response as successfully truncated when no \u003ccode\u003eContent-Length\u003c/code\u003e was present. Undici now enforces \u003ccode\u003emaxSize\u003c/code\u003e against received bytes and aborts oversized responses. Fixed by \u003ca href=\"https://github.com/nodejs/undici/commit/21693f406f0142f3504192e9f9b022dcf84782ae\"\u003e21693f40\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-r53p-7pc4-xj5r\"\u003eGHSA-r53p-7pc4-xj5r\u003c/a\u003e: the retry interceptor could concatenate a resumed response with inconsistent framing into downstream output, enabling response splitting or corruption. Undici now validates \u003ccode\u003eContent-Range\u003c/code\u003e against the original response framing before resuming. Fixed by \u003ca href=\"https://github.com/nodejs/undici/commit/cd8af90b38ae33c2838d54a2d629774122effe95\"\u003ecd8af90b\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[v7.x] drop: remove Node.js 26 from shared-builtin CI build by \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5592\"\u003enodejs/undici#5592\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(h2): honour headersTimeout by \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5604\"\u003enodejs/undici#5604\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(h2): keep the connection ref'd while requests are outstanding by \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5605\"\u003enodejs/undici#5605\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: increase Windows workflow timeout on v7.x by \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5621\"\u003enodejs/undici#5621\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(h2): retire the request that completed, not the head of the queue by \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5618\"\u003enodejs/undici#5618\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(h2): settle a request whose stream is cancelled by \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5607\"\u003enodejs/undici#5607\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: reduce EventSourceStream parser allocations (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5032\"\u003e#5032\u003c/a\u003e) by \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5646\"\u003enodejs/undici#5646\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(h2): handle GOAWAY for CONNECT streams by \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5640\"\u003enodejs/undici#5640\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v7.x] perf(h1): drop idle-socket timer floor with a ref'd setImmediate (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5707\"\u003e#5707\u003c/a\u003e) by \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5769\"\u003enodejs/undici#5769\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/nodejs/undici/compare/v7.29.0...v7.29.1\"\u003ehttps://github.com/nodejs/undici/compare/v7.29.0...v7.29.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.29.0\u003c/h2\u003e\n\u003ch2\u003e⚠️ Security fixes\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/6741f66e62c3f4ca81fa4ecaa84d3fd668a54686\"\u003e\u003ccode\u003e6741f66\u003c/code\u003e\u003c/a\u003e Bumped v7.30.0 (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5887\"\u003e#5887\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/8d2f2f00ac3db6e3586f87577cea1ebe19d0780c\"\u003e\u003ccode\u003e8d2f2f0\u003c/code\u003e\u003c/a\u003e test(fetch): make pull-dont-push exceed any socket buffer (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5889\"\u003e#5889\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/fad98ae7c2cb68563a265bee9b3127d3045e77c3\"\u003e\u003ccode\u003efad98ae\u003c/code\u003e\u003c/a\u003e fix: close rejected HTTP/2 WebSocket streams on v7.x (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5876\"\u003e#5876\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/369058e52ad07f9e4251e694e084c9c973af5fcc\"\u003e\u003ccode\u003e369058e\u003c/code\u003e\u003c/a\u003e fix: honor backpressure in decompression interceptor (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5829\"\u003e#5829\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5837\"\u003e#5837\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/a7914e5c9b0be89c7d0ac5e52feb950a8278d383\"\u003e\u003ccode\u003ea7914e5\u003c/code\u003e\u003c/a\u003e Backport upgrade diagnostics lifecycle fixes to v7.x (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5783\"\u003e#5783\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/48367af35eea84980ddbf81aa82117c2322413bb\"\u003e\u003ccode\u003e48367af\u003c/code\u003e\u003c/a\u003e fix: selectively re-enable SIMD for ppc64 (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5776\"\u003e#5776\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5794\"\u003e#5794\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/d39a83e7b0d631590c3b85b5cc0dbeab66c3a1d8\"\u003e\u003ccode\u003ed39a83e\u003c/code\u003e\u003c/a\u003e Bumped v7.29.1 (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5772\"\u003e#5772\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/0d88464876d02bdb9cf27015d9d66500a8aaa782\"\u003e\u003ccode\u003e0d88464\u003c/code\u003e\u003c/a\u003e fix(test): remove unused EventEmitter import\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/f57411b894d45b89964252971497507500c32bc1\"\u003e\u003ccode\u003ef57411b\u003c/code\u003e\u003c/a\u003e perf(h1): drop idle-socket timer floor with a ref'd setImmediate (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5707\"\u003e#5707\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5769\"\u003e#5769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/3c6726599cea8646384dde846c97d630da472a74\"\u003e\u003ccode\u003e3c67265\u003c/code\u003e\u003c/a\u003e fix(retry): settle exposed body on terminal failure\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/nodejs/undici/compare/v7.25.0...v7.30.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `ws` from 8.20.0 to 8.22.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/websockets/ws/releases\"\u003ews's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e8.22.0\u003c/h2\u003e\n\u003ch1\u003eFeatures\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduced the \u003ccode\u003eprotocols\u003c/code\u003e option (8b918b01).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBug fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eCalling \u003ccode\u003ewebsocket.close()\u003c/code\u003e with invalid arguments no longer transitions the\nstate to \u003ccode\u003eWebSocket.CLOSING\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/websockets/ws/issues/2337\"\u003e#2337\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.21.3\u003c/h2\u003e\n\u003ch1\u003eBug fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eThe server now correctly rejects permessage-deflate offers if the incoming\n\u003ccode\u003eclient_max_window_bits\u003c/code\u003e parameter value is smaller than its configured\n\u003ccode\u003eclientMaxWindowBits\u003c/code\u003e (e97a20ea).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.21.2\u003c/h2\u003e\n\u003ch1\u003eBug fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a test for \u003ca href=\"https://github.com/nodejs/citgm\"\u003eCITGM\u003c/a\u003e (2eb3be0b).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.21.1\u003c/h2\u003e\n\u003ch1\u003eBug fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eEmpty fragments are now counted toward the limit (a2f4e7c0).\u003c/li\u003e\n\u003cli\u003eThe default values of the \u003ccode\u003emaxBufferedChunks\u003c/code\u003e and \u003ccode\u003emaxFragments\u003c/code\u003e options have\nbeen reduced (f197ac65).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.21.0\u003c/h2\u003e\n\u003ch1\u003eFeatures\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduced the \u003ccode\u003emaxBufferedChunks\u003c/code\u003e and \u003ccode\u003emaxFragments\u003c/code\u003e options (2b2abd45).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBug fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a remote memory exhaustion DoS vulnerability (2b2abd45).\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eA high volume of tiny fragments and data chunks could be sent by a peer, using\nmodest network traffic, to crash a \u003ccode\u003ews\u003c/code\u003e server or client due to OOM.\u003c/p\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003eimport { WebSocket, WebSocketServer } from 'ws';\r\n\u003cp\u003econst wss = new WebSocketServer({ port: 0 }, function () {\nconst data = Buffer.alloc(1);\nconst options = { fin: false };\nconst { port } = wss.address();\n\u0026lt;/tr\u0026gt;\u0026lt;/table\u0026gt;\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/websockets/ws/commit/297202cdae9b0590629821373b3b679c407f3431\"\u003e\u003ccode\u003e297202c\u003c/code\u003e\u003c/a\u003e [dist] 8.22.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/websockets/ws/commit/8b918b01c149c6e4ccb8051bace7f322db94ed8b\"\u003e\u003ccode\u003e8b918b0\u003c/code\u003e\u003c/a\u003e [feature] Introduce the \u003ccode\u003eprotocols\u003c/code\u003e option\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/websockets/ws/commit/73e03eb35b1a84a3b28f906bab6a359231660695\"\u003e\u003ccode\u003e73e03eb\u003c/code\u003e\u003c/a\u003e [ci] Update actions/setup-node action to v7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/websockets/ws/commit/d9b89544e627f2a260fb85a6f42c8ecba98d7615\"\u003e\u003ccode\u003ed9b8954\u003c/code\u003e\u003c/a\u003e [fix] Change the ready state after validating the arguments (\u003ca href=\"https://redirect.github.com/websockets/ws/issues/2337\"\u003e#2337\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/websockets/ws/commit/c791e707eab3c13dd9a261d2479c3cc4a49a6fed\"\u003e\u003ccode\u003ec791e70\u003c/code\u003e\u003c/a\u003e [dist] 8.21.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/websockets/ws/commit/e97a20eaa6f2ad7969419eed732a506453251eb9\"\u003e\u003ccode\u003ee97a20e\u003c/code\u003e\u003c/a\u003e [fix] Reject offers with \u003ccode\u003eclient_max_window_bits\u003c/code\u003e below config\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/websockets/ws/commit/787ebf22ce3d091fb6f931d20b4c7e914ba7cf85\"\u003e\u003ccode\u003e787ebf2\u003c/code\u003e\u003c/a\u003e [dist] 8.21.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/websockets/ws/commit/b4d62ebad40c3b925c84ff305a47975406015422\"\u003e\u003ccode\u003eb4d62eb\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;[ci] Trust Coveralls Homebrew tap\u0026quot;\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/websockets/ws/commit/e4bb883723a0c18452eea10a74139901ae33c61d\"\u003e\u003ccode\u003ee4bb883\u003c/code\u003e\u003c/a\u003e [security] Use GitHub PVR as main reporting channel\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/websockets/ws/commit/2eb3be0bff2453e2654b1315c5872e8d5d424a50\"\u003e\u003ccode\u003e2eb3be0\u003c/code\u003e\u003c/a\u003e [test] Skip test on Node.js versions where it does not apply\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/websockets/ws/compare/8.20.0...8.22.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/datisthq/fairspec-cardealer/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/datisthq/fairspec-cardealer/pull/7","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/datisthq%2Ffairspec-cardealer/issues/7","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/7/packages"}},{"old_version":"2.30.1","new_version":"2.31.0","update_type":"minor","path":null,"pr_created_at":"2026-10-06T07:44:03.000Z","version_change":"2.30.1 → 2.31.0","issue":{"uuid":"5724856305","node_id":"PR_kwDOQl8VYM8AAAABG3bD2A","number":64,"state":"closed","title":"Bump moment from 2.30.1 to 2.31.0","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-10-07T05:02:26.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-06T07:44:03.000Z","updated_at":"2026-10-07T05:02:35.000Z","time_to_close":76703,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"moment","old_version":"2.30.1","new_version":"2.31.0","repository_url":"https://github.com/moment/moment"}],"path":null,"ecosystem":"npm"},"body":"Bumps [moment](https://github.com/moment/moment) from 2.30.1 to 2.31.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/releases\"\u003emoment's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.31.0\u003c/h2\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/blob/develop/CHANGELOG.md\"\u003emoment's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch3\u003e2.31.0\u003c/h3\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/15b45d48a176312e8f34143c5a800090abf4787f\"\u003e\u003ccode\u003e15b45d4\u003c/code\u003e\u003c/a\u003e [pkg] Build 2.31.0 (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6452\"\u003e#6452\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/631cd81454ee001e1f508e21270eae0b6bb62974\"\u003e\u003ccode\u003e631cd81\u003c/code\u003e\u003c/a\u003e [pkg] Update changelog for upcoming release (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6394\"\u003e#6394\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/6caff9e0d54e85a63a6eb97d7361f1da35bc58f4\"\u003e\u003ccode\u003e6caff9e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/710703b7eac93535ad125cbf4feb3d42afed6fb3\"\u003e\u003ccode\u003e710703b\u003c/code\u003e\u003c/a\u003e [feature] Add internal date-default hook for Moment Timezone (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6451\"\u003e#6451\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/863ed940556e6e63c43de23981a4853036a003ac\"\u003e\u003ccode\u003e863ed94\u003c/code\u003e\u003c/a\u003e [bugfix] Add stack traces to conditional deprecation warnings (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6450\"\u003e#6450\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/2c7abe1c42ee15445d30c2c5d536750a1e43a09a\"\u003e\u003ccode\u003e2c7abe1\u003c/code\u003e\u003c/a\u003e [bugfix] Apply postformat to locale relative time methods (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6448\"\u003e#6448\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/9c45ac38690c649c95e19923276b63da5fe2be26\"\u003e\u003ccode\u003e9c45ac3\u003c/code\u003e\u003c/a\u003e [bugfix] Include metadata in all-locales bundle (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6447\"\u003e#6447\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/f6eefc5fc7b44ceccbd007aeffc48ebc5eac30fa\"\u003e\u003ccode\u003ef6eefc5\u003c/code\u003e\u003c/a\u003e [bugfix] Validate timezone offset range (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6446\"\u003e#6446\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/136b441794a3bb207d593add3b59e9de0e062523\"\u003e\u003ccode\u003e136b441\u003c/code\u003e\u003c/a\u003e [bugfix] Avoid Object.assign in duration.humanize (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6443\"\u003e#6443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/0d1050437b40f66ac47e14b285bb3d09676cf2e0\"\u003e\u003ccode\u003e0d10504\u003c/code\u003e\u003c/a\u003e [bugfix] Fix locale('\u003cstrong\u003eproto\u003c/strong\u003e') corrupting the global locale (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6442\"\u003e#6442\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moment/moment/compare/2.30.1...2.31.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for moment since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=moment\u0026package-manager=npm_and_yarn\u0026previous-version=2.30.1\u0026new-version=2.31.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/FSDTeam-SAA/claude-dashboard/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/FSDTeam-SAA/claude-dashboard/pull/64","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/FSDTeam-SAA%2Fclaude-dashboard/issues/64","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/64/packages"}},{"old_version":"2.30.1","new_version":"2.31.0","update_type":"minor","path":null,"pr_created_at":"2026-10-06T01:43:24.000Z","version_change":"2.30.1 → 2.31.0","issue":{"uuid":"5721573230","node_id":"PR_kwDOI6Sfdc8AAAABG00wXw","number":186,"state":"closed","title":"Bump the npm_and_yarn group across 19 directories with 16 updates","user":"dependabot[bot]","labels":["dependencies","javascript","auto-closed: invalid-title"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-10-06T01:43:35.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-06T01:43:24.000Z","updated_at":"2026-10-06T01:43:44.000Z","time_to_close":11,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"npm_and_yarn","update_count":16,"packages":[{"name":"sharp","old_version":"0.34.5","new_version":"0.35.4","repository_url":"https://github.com/lovell/sharp"},{"name":"axios","old_version":"1.16.1","new_version":"1.20.0","repository_url":"https://github.com/axios/axios"},{"name":"electron","old_version":"42.3.0","new_version":"42.10.0","repository_url":"https://github.com/electron/electron"},{"name":"markdown-it","old_version":"13.0.2","new_version":"14.3.1","repository_url":"https://github.com/markdown-it/markdown-it"},{"name":"moment","old_version":"2.30.1","new_version":"2.31.0","repository_url":"https://github.com/moment/moment"},{"name":"adm-zip","old_version":"0.5.17","new_version":"0.6.1","repository_url":"https://github.com/cthackers/adm-zip"},{"name":"js-yaml","old_version":"4.1.1","new_version":"4.3.2","repository_url":"https://github.com/nodeca/js-yaml"},{"name":"nodemailer","old_version":"6.10.1","new_version":"10.0.9","repository_url":"https://github.com/nodemailer/nodemailer"},{"name":"baseline-browser-mapping","old_version":"2.9.13","new_version":"2.11.26","repository_url":"https://github.com/web-platform-dx/baseline-browser-mapping"},{"name":"brace-expansion","old_version":"1.1.11","new_version":"1.1.21","repository_url":"https://github.com/juliangruber/brace-expansion"},{"name":"joi","old_version":"17.5.0","new_version":"17.13.8","repository_url":"https://github.com/hapijs/joi"},{"name":"svgo","old_version":"2.8.0","new_version":"2.8.4","repository_url":"https://github.com/svg/svgo"},{"name":"undici","old_version":"6.21.2","new_version":"6.29.0","repository_url":"https://github.com/nodejs/undici"},{"name":"webpack-dev-middleware","old_version":"5.3.3","new_version":"5.3.4","repository_url":"https://github.com/webpack/webpack-dev-middleware"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 14 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [sharp](https://github.com/lovell/sharp) | `0.34.5` | `0.35.4` |\n| [axios](https://github.com/axios/axios) | `1.16.1` | `1.20.0` |\n| [electron](https://github.com/electron/electron) | `42.3.0` | `42.10.0` |\n| [markdown-it](https://github.com/markdown-it/markdown-it) | `13.0.2` | `14.3.1` |\n| [moment](https://github.com/moment/moment) | `2.30.1` | `2.31.0` |\n| [adm-zip](https://github.com/cthackers/adm-zip) | `0.5.17` | `0.6.1` |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `4.1.1` | `4.3.2` |\n| [nodemailer](https://github.com/nodemailer/nodemailer) | `6.10.1` | `10.0.9` |\n| [baseline-browser-mapping](https://github.com/web-platform-dx/baseline-browser-mapping) | `2.9.13` | `2.11.26` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.11` | `1.1.21` |\n| [joi](https://github.com/hapijs/joi) | `17.5.0` | `17.13.8` |\n| [svgo](https://github.com/svg/svgo) | `2.8.0` | `2.8.4` |\n| [undici](https://github.com/nodejs/undici) | `6.21.2` | `6.29.0` |\n| [webpack-dev-middleware](https://github.com/webpack/webpack-dev-middleware) | `5.3.3` | `5.3.4` |\n\nBumps the npm_and_yarn group with 3 updates in the /Assets/TinyMCE/IconPack directory: [js-yaml](https://github.com/nodeca/js-yaml), [brace-expansion](https://github.com/juliangruber/brace-expansion) and [svgo](https://github.com/svg/svgo).\nBumps the npm_and_yarn group with 1 update in the /Assets/TinyMCE/JoplinLists directory: [brace-expansion](https://github.com/juliangruber/brace-expansion).\nBumps the npm_and_yarn group with 1 update in the /packages/app-cli directory: [sharp](https://github.com/lovell/sharp).\nBumps the npm_and_yarn group with 3 updates in the /packages/app-cli/tests/support/plugins/ai_chat directory: [baseline-browser-mapping](https://github.com/web-platform-dx/baseline-browser-mapping), [brace-expansion](https://github.com/juliangruber/brace-expansion) and [fast-uri](https://github.com/fastify/fast-uri).\nBumps the npm_and_yarn group with 3 updates in the /packages/app-cli/tests/support/plugins/ai_search directory: [baseline-browser-mapping](https://github.com/web-platform-dx/baseline-browser-mapping), [brace-expansion](https://github.com/juliangruber/brace-expansion) and [fast-uri](https://github.com/fastify/fast-uri).\nBumps the npm_and_yarn group with 4 updates in the /packages/app-cli/tests/support/plugins/codemirror5-and-codemirror6 directory: [moment](https://github.com/moment/moment), [js-yaml](https://github.com/nodeca/js-yaml), [brace-expansion](https://github.com/juliangruber/brace-expansion) and [ip-address](https://github.com/beaugunderson/ip-address).\nBumps the npm_and_yarn group with 2 updates in the /packages/app-cli/tests/support/plugins/codemirror6 directory: [js-yaml](https://github.com/nodeca/js-yaml) and [brace-expansion](https://github.com/juliangruber/brace-expansion).\nBumps the npm_and_yarn group with 3 updates in the /packages/app-cli/tests/support/plugins/menu directory: [baseline-browser-mapping](https://github.com/web-platform-dx/baseline-browser-mapping), [brace-expansion](https://github.com/juliangruber/brace-expansion) and [fast-uri](https://github.com/fastify/fast-uri).\nBumps the npm_and_yarn group with 3 updates in the /packages/app-cli/tests/support/plugins/note_list_renderer directory: [moment](https://github.com/moment/moment), [js-yaml](https://github.com/nodeca/js-yaml) and [brace-expansion](https://github.com/juliangruber/brace-expansion).\nBumps the npm_and_yarn group with 1 update in the /packages/app-cli/tests/support/plugins/worker directory: [brace-expansion](https://github.com/juliangruber/brace-expansion).\nBumps the npm_and_yarn group with 3 updates in the /packages/app-desktop directory: [electron](https://github.com/electron/electron), [markdown-it](https://github.com/markdown-it/markdown-it) and [moment](https://github.com/moment/moment).\nBumps the npm_and_yarn group with 1 update in the /packages/app-mobile directory: [sharp](https://github.com/lovell/sharp).\nBumps the npm_and_yarn group with 5 updates in the /packages/lib directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [sharp](https://github.com/lovell/sharp) | `0.34.5` | `0.35.4` |\n| [markdown-it](https://github.com/markdown-it/markdown-it) | `13.0.2` | `14.3.1` |\n| [moment](https://github.com/moment/moment) | `2.30.1` | `2.31.0` |\n| [adm-zip](https://github.com/cthackers/adm-zip) | `0.5.17` | `0.6.1` |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `4.1.1` | `4.3.2` |\n\nBumps the npm_and_yarn group with 1 update in the /packages/renderer directory: [markdown-it](https://github.com/markdown-it/markdown-it).\nBumps the npm_and_yarn group with 2 updates in the /packages/server directory: [markdown-it](https://github.com/markdown-it/markdown-it) and [nodemailer](https://github.com/nodemailer/nodemailer).\nBumps the npm_and_yarn group with 4 updates in the /packages/tools directory: [sharp](https://github.com/lovell/sharp), [markdown-it](https://github.com/markdown-it/markdown-it), [moment](https://github.com/moment/moment) and [js-yaml](https://github.com/nodeca/js-yaml).\nBumps the npm_and_yarn group with 1 update in the /packages/transcribe directory: [sharp](https://github.com/lovell/sharp).\nBumps the npm_and_yarn group with 2 updates in the /packages/utils directory: [markdown-it](https://github.com/markdown-it/markdown-it) and [moment](https://github.com/moment/moment).\n\nUpdates `sharp` from 0.34.5 to 0.35.4\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/lovell/sharp/releases\"\u003esharp's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.35.4\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/lovell/sharp-libvips/releases/tag/v1.3.3\"\u003ehttps://github.com/lovell/sharp-libvips/releases/tag/v1.3.3\u003c/a\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eBound resize dimensions to coordinate limit.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eBound composite left and top to coordinate limit.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/pull/4564\"\u003e#4564\u003c/a\u003e\n\u003ca href=\"https://github.com/metsw24-max\"\u003e\u003ccode\u003e@​metsw24-max\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eRound palette bit depth up for png and gif colours.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/pull/4569\"\u003e#4569\u003c/a\u003e\n\u003ca href=\"https://github.com/metsw24-max\"\u003e\u003ccode\u003e@​metsw24-max\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eEnsure tiff.subifd input option is used.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/pull/4572\"\u003e#4572\u003c/a\u003e\n\u003ca href=\"https://github.com/metsw24-max\"\u003e\u003ccode\u003e@​metsw24-max\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eEnsure \u003ccode\u003einfo.pages\u003c/code\u003e is correct when limiting input page range.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/pull/4578\"\u003e#4578\u003c/a\u003e\n\u003ca href=\"https://github.com/metsw24-max\"\u003e\u003ccode\u003e@​metsw24-max\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eImprove support for input Streams finishing before output is requested.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/pull/4584\"\u003e#4584\u003c/a\u003e\n\u003ca href=\"https://github.com/Jaybhade\"\u003e\u003ccode\u003e@​Jaybhade\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.35.4-rc.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eUpgrade to libvips v8.18.6 for upstream bug fixes.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eBound resize dimensions to coordinate limit.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eBound composite left and top to coordinate limit.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/pull/4564\"\u003e#4564\u003c/a\u003e\n\u003ca href=\"https://github.com/metsw24-max\"\u003e\u003ccode\u003e@​metsw24-max\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eRound palette bit depth up for png and gif colours.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/pull/4569\"\u003e#4569\u003c/a\u003e\n\u003ca href=\"https://github.com/metsw24-max\"\u003e\u003ccode\u003e@​metsw24-max\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eEnsure tiff.subifd input option is used.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/pull/4572\"\u003e#4572\u003c/a\u003e\n\u003ca href=\"https://github.com/metsw24-max\"\u003e\u003ccode\u003e@​metsw24-max\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eEnsure \u003ccode\u003einfo.pages\u003c/code\u003e is correct when limiting input page range.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/pull/4578\"\u003e#4578\u003c/a\u003e\n\u003ca href=\"https://github.com/metsw24-max\"\u003e\u003ccode\u003e@​metsw24-max\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eImprove support for input Streams finishing before output is requested.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/pull/4584\"\u003e#4584\u003c/a\u003e\n\u003ca href=\"https://github.com/Jaybhade\"\u003e\u003ccode\u003e@​Jaybhade\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/7f1a0a22cc285fe180766f4935d50b55af6e8432\"\u003e\u003ccode\u003e7f1a0a2\u003c/code\u003e\u003c/a\u003e Release v0.35.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/f927818924bc5a9493d822a4e8b23ec5857c52e1\"\u003e\u003ccode\u003ef927818\u003c/code\u003e\u003c/a\u003e Upgrade to sharp-libvips v1.3.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/e80209240d005c71e1173a50dd9cd4db4ce2a9e6\"\u003e\u003ccode\u003ee802092\u003c/code\u003e\u003c/a\u003e Prerelease v0.35.4-rc.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/e13eb2f97a0a22f1ef726e8d0cd33f7c56835945\"\u003e\u003ccode\u003ee13eb2f\u003c/code\u003e\u003c/a\u003e CI: Fix wasm32 build (\u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4589\"\u003e#4589\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/a82a0b3d58bc25854ad1e925e6eb0a50725d1489\"\u003e\u003ccode\u003ea82a0b3\u003c/code\u003e\u003c/a\u003e Upgrade to libvips v8.18.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/8044fe43e36d0ea7f8beb89f79a37bb0f3342e84\"\u003e\u003ccode\u003e8044fe4\u003c/code\u003e\u003c/a\u003e Bound resize dimensions to coordinate limit\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/147f8591a153bc4a1e199c3fe3150fac2931b30c\"\u003e\u003ccode\u003e147f859\u003c/code\u003e\u003c/a\u003e Docs: changelog entries for \u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4578\"\u003e#4578\u003c/a\u003e \u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4584\"\u003e#4584\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/ee5bfb853de75a611c64381783b04032a3a897d8\"\u003e\u003ccode\u003eee5bfb8\u003c/code\u003e\u003c/a\u003e Tests: use yauzl directly rather than via extract-zip wrapper\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/7a7788928f8a2a429f45039010a87cee35401694\"\u003e\u003ccode\u003e7a77889\u003c/code\u003e\u003c/a\u003e Bump uraimo/run-on-arch-action from 3.1.0 to 3.2.0 (\u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4588\"\u003e#4588\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/ea5bef24c187b2c7ee3fe3cad3b45c8cb67a46fd\"\u003e\u003ccode\u003eea5bef2\u003c/code\u003e\u003c/a\u003e Improve support for input Streams finishing before output is requested (\u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4584\"\u003e#4584\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/lovell/sharp/compare/v0.34.5...v0.35.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `axios` from 1.16.1 to 1.20.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.20.0 — August 19, 2026\u003c/h2\u003e\n\u003cp\u003eThis release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.\u003c/p\u003e\n\u003ch2\u003e⚠️ Breaking Changes \u0026amp; Deprecations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRuntime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInterceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11087\"\u003e#11087\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRequest Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eXHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNode.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCore Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and corrected the timeoutErrorMessage merge strategy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated fast-uri, postcss, js-yaml, mocha, development-tooling groups, and GitHub Actions dependencies. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11092\"\u003e#11092\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11098\"\u003e#11098\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11099\"\u003e#11099\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11106\"\u003e#11106\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11107\"\u003e#11107\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11122\"\u003e#11122\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11123\"\u003e#11123\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11126\"\u003e#11126\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11127\"\u003e#11127\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11144\"\u003e#11144\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Applied the v1.19.0 documentation updates, added the missing fs import to the README stream example, introduced localized global search, and repaired the interceptor test link. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11101\"\u003e#11101\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSponsorship: Updated sponsorship links and data and added ScrapingBee as a sponsor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11124\"\u003e#11124\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11136\"\u003e#11136\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCI and Release: Switched ESM smoke tests to locked dependencies and synchronized package and runtime version metadata for v1.20.0. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11128\"\u003e#11128\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yens1\"\u003e\u003ccode\u003e@​yens1\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Sasireddy001\"\u003e\u003ccode\u003e@​Sasireddy001\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ari-token-security\"\u003e\u003ccode\u003e@​ari-token-security\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timothyokooboh\"\u003e\u003ccode\u003e@​timothyokooboh\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gi9439041-png\"\u003e\u003ccode\u003e@​gi9439041-png\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Hashim1999164\"\u003e\u003ccode\u003e@​Hashim1999164\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/v-dev-cl\"\u003e\u003ccode\u003e@​v-dev-cl\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/r0h1tb\"\u003e\u003ccode\u003e@​r0h1tb\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ostapondo\"\u003e\u003ccode\u003e@​ostapondo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog (\u003ca href=\"https://github.com/axios/axios/compare/v1.19.0...v1.20.0\"\u003ehttps://github.com/axios/axios/compare/v1.19.0...v1.20.0\u003c/a\u003e)\u003c/p\u003e\n\u003ch2\u003ev1.19.0 - July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/blob/v1.x/CHANGELOG.md\"\u003eaxios's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003ev1.19.0 — July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🚀 New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eConfiguration Extensibility: Preserved own-enumerable symbol-keyed fields through mergeConfig and added a generic params type across public TypeScript declarations, responses, errors,\nadapters, and serializers. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11081\"\u003e#11081\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHeader Parameter Parsing: Added the opt-in AxiosHeaders.parseParameters() parser for quote-aware, RFC-style HTTP parameter parsing while preserving legacy parsing behavior. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11051\"\u003e#11051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHTTP Status Codes: Added the missing Cloudflare 520 WebServerReturnsAnUnknownError status and matching ESM/CJS declarations. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11067\"\u003e#11067\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eForm Data Conversion: Limited formDataToJSON path splitting to dot and bracket notation, preserving literal punctuation in keys, and removed browser-facing Buffer.from usage from toFormData to avoid unnecessary polyfills. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11018\"\u003e#11018\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProxy Bypass: Canonicalized IPv4 shorthand, octal, and hexadecimal forms during NO_PROXY matching and honored * entries within comma- or space-separated bypass lists. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11053\"\u003e#11053\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eCancellation: Propagated already-aborted input signals immediately when composing abort signals. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eHeader Handling: Preserved empty first values for duplicate singleton headers and made AxiosHeaders#getSetCookie() consistently return arrays for present values. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11036\"\u003e#11036\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11037\"\u003e#11037\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eURL Handling: Included normalized, safely redacted offending URLs in malformed-protocol errors and removed repeated trailing slashes when combining base URLs. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11008\"\u003e#11008\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11038\"\u003e#11038\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProgress Events: Clamped malformed negative progress values to zero and ensured final Node.js download progress events are delivered before streamed responses close. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11039\"\u003e#11039\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11040\"\u003e#11040\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eError and JSON Serialization: Serialized Set values as arrays in JSON-compatible snapshots and synthesized useful AxiosError messages from otherwise-empty AggregateError instances. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11044\"\u003e#11044\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11059\"\u003e#11059\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eContent-Length Enforcement: Corrected base64 data: URL size estimation so maxContentLength is enforced consistently by the HTTP and Fetch adapters. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11061\"\u003e#11061\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSynchronous Interceptors: Prevented requests from being dispatched after synchronous request interceptors fail unless their paired rejection handler resolves successfully. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11071\"\u003e#11071\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated development and test tooling, the docs fixture's Axios version, and GitHub Actions integrations including Checkout, Setup Node, Setup Deno, and Zizmor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11031\"\u003e#11031\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11055\"\u003e#11055\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11056\"\u003e#11056\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11058\"\u003e#11058\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11079\"\u003e#11079\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11080\"\u003e#11080\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11088\"\u003e#11088\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11089\"\u003e#11089\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11090\"\u003e#11090\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBuild Outputs: Limited sourcemap generation to published minified bundles, removing broken map references from non-minified builds. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eForm Data Internals: Centralized FormData header handling and made the Node.js adapter tolerate getHeaders() returning undefined under the content-only policy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11062\"\u003e#11062\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDeveloper Experience: Ignored common local AI-tooling directories and fixed a constant-reassignment crash when the development sandbox serves its root path. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11032\"\u003e#11032\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11073\"\u003e#11073\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Updated sponsor information, clarified that baseURL is not a path-security boundary, scoped provenance claims to attested releases, and corrected the configuration-defaults documentation. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11041\"\u003e#11041\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11068\"\u003e#11068\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11076\"\u003e#11076\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11078\"\u003e#11078\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePublishing: Simplified v1 publishing to use the npm version bundled with Node.js 26 and updated package metadata for the 1.19.0 release. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11083\"\u003e#11083\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11095\"\u003e#11095\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve Axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/afonsojramos\"\u003e\u003ccode\u003e@​afonsojramos\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yassertawfik4\"\u003e\u003ccode\u003e@​yassertawfik4\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11024\"\u003e#11024\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AnandSundar\"\u003e\u003ccode\u003e@​AnandSundar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lin-hongkuan\"\u003e\u003ccode\u003e@​lin-hongkuan\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Wali007-lab\"\u003e\u003ccode\u003e@​Wali007-lab\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/magicdawn\"\u003e\u003ccode\u003e@​magicdawn\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/84a9f3b9a4f3244b8c8e818f557d64c7b964fb25\"\u003e\u003ccode\u003e84a9f3b\u003c/code\u003e\u003c/a\u003e chore(release): prepare release 1.20.0 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e6824eec5fcf9da467a9792724396badc490c469\"\u003e\u003ccode\u003ee6824ee\u003c/code\u003e\u003c/a\u003e fix: core methodList, HTTP adapter errors, and add tests (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d8a919fd81403d59058c0e9dbefc540407dee83f\"\u003e\u003ccode\u003ed8a919f\u003c/code\u003e\u003c/a\u003e fix(xhr): flush final progress during the live loadend dispatch (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2d2a21af8a433089474a2149781799c93acbcf3c\"\u003e\u003ccode\u003e2d2a21a\u003c/code\u003e\u003c/a\u003e fix(interceptors): tolerate nullish handlers in syncHandlerEntries (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a\"\u003e\u003ccode\u003ed19040b\u003c/code\u003e\u003c/a\u003e fix: harden runtime option handling (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e0a02dd16671deabe2b809334d4c2ebede29a233\"\u003e\u003ccode\u003ee0a02dd\u003c/code\u003e\u003c/a\u003e chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 in the github-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d10cb3aa3cda1d78721ddf96be590478df26cd81\"\u003e\u003ccode\u003ed10cb3a\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump the development_dependencies group with 4 updates (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2c94646eb7cb7ab9dcb2aefdb04ab1b040c28e16\"\u003e\u003ccode\u003e2c94646\u003c/code\u003e\u003c/a\u003e chore(deps): bump js-yaml and mocha in /tests/smoke/cjs (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/76c12bce5a4fe9a45bef9a5bf2baaf599d7d382e\"\u003e\u003ccode\u003e76c12bc\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/ba98559a7f5a18e531b5762387e5957bd281af3d\"\u003e\u003ccode\u003eba98559\u003c/code\u003e\u003c/a\u003e docs: add ScrapingBee sponsor (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/axios/axios/compare/v1.16.1...v1.20.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `electron` from 42.3.0 to 42.10.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/electron/electron/releases\"\u003eelectron's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eelectron v42.10.0\u003c/h2\u003e\n\u003ch1\u003eRelease Notes for v42.10.0\u003c/h1\u003e\n\u003ch2\u003eFeatures\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed contentTracing module to capture Node.js trace categories. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52973\"\u003e#52973\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eFixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed DevTools device metrics overrides persisting indefinitely when a remote debugging client disconnected without clearing them. \u003ca href=\"https://redirect.github.com/electron/electron/pull/53133\"\u003e#53133\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52946\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52930\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed DevTools popup and context menus not appearing when DevTools is hosted in a custom window via \u003ccode\u003ewebContents.setDevToolsWebContents()\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52981\"\u003e#52981\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52937\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52434\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003eBrowserWindow.unmaximize()\u003c/code\u003e and \u003ccode\u003erestore()\u003c/code\u003e having no effect on Wayland when the window was maximized immediately after creation. \u003ca href=\"https://redirect.github.com/electron/electron/pull/53126\"\u003e#53126\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/53124\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003eUncaught illegal access\u003c/code\u003e errors and possible renderer crashes after closing a same-process child window or removing an iframe with \u003ccode\u003enodeIntegrationInSubFrames\u003c/code\u003e enabled. \u003ca href=\"https://redirect.github.com/electron/electron/pull/53042\"\u003e#53042\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/53040\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003edialog.showOpenDialog\u003c/code\u003e/\u003ccode\u003edialog.showSaveDialog\u003c/code\u003e opening at an unusable location on Linux when \u003ccode\u003edefaultPath\u003c/code\u003e is a bare filename without a directory. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52980\"\u003e#52980\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52401\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52402\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed a crash on Linux when the D-Bus session bus disconnected while the app was running, such as at logout or when dbus is restarted. \u003ca href=\"https://redirect.github.com/electron/electron/pull/53094\"\u003e#53094\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/53095\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/53096\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed a crash on Windows when V8 posted a delayed worker task during shutdown. \u003ca href=\"https://redirect.github.com/electron/electron/pull/53014\"\u003e#53014\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/53013\"\u003e43\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed a crash with \u003ccode\u003eapp.setLoginItemSettings\u003c/code\u003e if a non-UTF8 service name is used. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52989\"\u003e#52989\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52944\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52801\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed a possible crash (SIGABRT) during process exit when the process had loaded \u003ccode\u003etls\u003c/code\u003e/\u003ccode\u003ehttps\u003c/code\u003e shortly before exiting, affecting \u003ccode\u003eapp.exit()\u003c/code\u003e before \u003ccode\u003eready\u003c/code\u003e and short-lived \u003ccode\u003eELECTRON_RUN_AS_NODE\u003c/code\u003e / \u003ccode\u003echild_process.fork()\u003c/code\u003e scripts. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52992\"\u003e#52992\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52870\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52871\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed a possible main process crash at quit when a session was created from JavaScript that runs during shutdown. \u003ca href=\"https://redirect.github.com/electron/electron/pull/53132\"\u003e#53132\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52925\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52924\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed a rare crash in the main process when DevTools were opened and a garbage collection ran before the DevTools frontend finished loading. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52994\"\u003e#52994\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52903\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52904\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed a renderer crash when a page calls \u003ccode\u003eSpeechRecognition.available()\u003c/code\u003e or \u003ccode\u003eSpeechRecognition.install()\u003c/code\u003e with \u003ccode\u003eprocessLocally\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/electron/electron/pull/53016\"\u003e#53016\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/53015\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/53021\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed an issue on Linux where the system theme color appeared at the top edge of frameless windows. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52978\"\u003e#52978\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/53006\"\u003e41\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52179\"\u003e43\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed an issue where some values passed into \u003ccode\u003erequestSingleInstanceLock\u003c/code\u003e could result in a crash. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52982\"\u003e#52982\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52471\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52470\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed crash in sharedTexture module when GPU context becomes unavailable. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52983\"\u003e#52983\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52938\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52926\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed document title updates when using back/forward navigation using the same document without utilizing \u003ccode\u003ebrowserWindow.setTitle()\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/electron/electron/pull/53099\"\u003e#53099\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/53023\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52968\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed the built-in PDF viewer not rendering documents in in-memory sessions (partitions without the \u003ccode\u003epersist:\u003c/code\u003e prefix). \u003ca href=\"https://redirect.github.com/electron/electron/pull/52990\"\u003e#52990\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52835\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52834\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed titleBarOverlay.color set to \u003ccode\u003ergba(0,0,0,0)\u003c/code\u003e failing back to default frame color. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52976\"\u003e#52976\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/53004\"\u003e41\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52010\"\u003e43\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed utility process crashes at exit on Windows 11 24H2 and later. \u003ca href=\"https://redirect.github.com/electron/electron/pull/53091\"\u003e#53091\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/53092\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/53093\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eOther Changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBackported fixes from upstream Chromium and V8. \u003ca href=\"https://redirect.github.com/electron/electron/pull/53060\"\u003e#53060\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a 1-in-200 chance per renderer process on Windows of scripts on the first page load being compiled without their V8 code cache. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52988\"\u003e#52988\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52943\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52792\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed a Windows x64 renderer performance regression introduced in 42.8.1 that made style/layout work (and app startup) noticeably slower. \u003ca href=\"https://redirect.github.com/electron/electron/pull/53064\"\u003e#53064\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a stall of tens of milliseconds while creating the first \u003ccode\u003eBrowserWindow\u003c/code\u003e on Linux.\n\u003cul\u003e\n\u003cli\u003eImproved the performance of file lookups inside ASAR archives and of large files served from them to the renderer.\u003c/li\u003e\n\u003cli\u003eImproved the performance of calls through \u003ccode\u003econtextBridge\u003c/code\u003e-exposed APIs.\u003c/li\u003e\n\u003cli\u003eReduced the main-thread cost of sending large values through \u003ccode\u003eipcRenderer\u003c/code\u003e, \u003ccode\u003eipcMain\u003c/code\u003e handlers and \u003ccode\u003ewebContents.send\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/electron/electron/pull/53019\"\u003e#53019\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/53018\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/53017\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eImproved startup time of \u003ccode\u003eutilityProcess.fork()\u003c/code\u003e, \u003ccode\u003echild_process.fork()\u003c/code\u003e / \u003ccode\u003eELECTRON_RUN_AS_NODE\u003c/code\u003e child processes and Node.js-enabled renderers. \u003ca href=\"https://redirect.github.com/electron/electron/pull/53136\"\u003e#53136\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/53135\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/53134\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eLinux arm64, Windows arm64 and macOS x64 builds now start the main process from the embedded Node.js startup snapshot like the other platforms, improving startup time. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52880\"\u003e#52880\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52881\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52879\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eelectron v42.9.3\u003c/h2\u003e\n\u003ch1\u003eRelease Notes for v42.9.3\u003c/h1\u003e\n\u003ch2\u003eFixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a graphical glitch on Linux where thin borders appeared past the drop shadows on frameless windows when multiple windows were created. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52772\"\u003e#52772\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52607\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52606\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed a memory leak when creating BrowserWindows. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52893\"\u003e#52893\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52892\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52894\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed an issue on Windows where the app process could fail to exit after \u003ccode\u003eapp.quit()\u003c/code\u003e while a \u003ccode\u003eshell.openExternal()\u003c/code\u003e or \u003ccode\u003eshell.openPath()\u003c/code\u003e call was still waiting on a system \u0026quot;Open with\u0026quot; dialog. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52900\"\u003e#52900\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52899\"\u003e41\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52897\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52898\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed custom V8 snapshots (\u003ccode\u003eelectron-mksnapshot\u003c/code\u003e, and the \u003ccode\u003eloadBrowserProcessSpecificV8Snapshot\u003c/code\u003e fuse) having no effect in the main process on macOS arm64, Linux x64 and Windows x64. \u003ca href=\"https://redirect.github.com/electron/electron/pull/52876\"\u003e#52876\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/52877\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/52878\"\u003e44\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eOther Changes\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/9f0109679540320c5dc5b7bef0aa94733058e8c2\"\u003e\u003ccode\u003e9f01096\u003c/code\u003e\u003c/a\u003e fix: window stuck maximized on Wayland after early maximize() (\u003ca href=\"https://redirect.github.com/electron/electron/issues/53126\"\u003e#53126\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/c411b7ccad8d71964428aad52da738359cf70fec\"\u003e\u003ccode\u003ec411b7c\u003c/code\u003e\u003c/a\u003e perf: boot every Node.js-hosting process from the Node snapshot / code cache ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/5751bc5fefb180e7b2fef48a3afc350f1f1f6d46\"\u003e\u003ccode\u003e5751bc5\u003c/code\u003e\u003c/a\u003e fix: clear device metrics overrides when a DevTools client disconnects (\u003ca href=\"https://redirect.github.com/electron/electron/issues/53133\"\u003e#53133\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/277efdf2cdee0e289f127c99570706e2d4589f02\"\u003e\u003ccode\u003e277efdf\u003c/code\u003e\u003c/a\u003e fix: crash in gin::PerIsolateData::NotifyDisposed when a session is created d...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/d054052a752ea88556b13b5d322f398907319a04\"\u003e\u003ccode\u003ed054052\u003c/code\u003e\u003c/a\u003e chore: iwyu commonly-included headers in shell/ (\u003ca href=\"https://redirect.github.com/electron/electron/issues/52972\"\u003e#52972\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/1645b087103c7401be3ff202be3bbf61cfca73c6\"\u003e\u003ccode\u003e1645b08\u003c/code\u003e\u003c/a\u003e build: update PGO profiles (\u003ca href=\"https://redirect.github.com/electron/electron/issues/53119\"\u003e#53119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/e4ea00f761c6970a4181fc0932251a44d943e2d7\"\u003e\u003ccode\u003ee4ea00f\u003c/code\u003e\u003c/a\u003e build: update PGO profiles (\u003ca href=\"https://redirect.github.com/electron/electron/issues/53113\"\u003e#53113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/b5c236f24546a8c53664525cbd26dbcf5c34c549\"\u003e\u003ccode\u003eb5c236f\u003c/code\u003e\u003c/a\u003e fix: update document title on back or forward navigation (\u003ca href=\"https://redirect.github.com/electron/electron/issues/53099\"\u003e#53099\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/569c64a6e9ff893d2bdd9c7914a22ee0023598ac\"\u003e\u003ccode\u003e569c64a\u003c/code\u003e\u003c/a\u003e build: skip linux-arm in PGO profile generation (\u003ca href=\"https://redirect.github.com/electron/electron/issues/53111\"\u003e#53111\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/d13ae9f14b56f4fb0730cf9e582956ddf986e2f4\"\u003e\u003ccode\u003ed13ae9f\u003c/code\u003e\u003c/a\u003e fix: illegal access errors when a same-process child window or subframe close...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/electron/electron/compare/v42.3.0...v42.10.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `markdown-it` from 13.0.2 to 14.3.1\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/markdown-it/markdown-it/blob/14.3.1/CHANGELOG.md\"\u003emarkdown-it's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[14.3.1] - 2026-08-27\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackported 15.0.1 fixes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[14.3.0] - 2026-07-02\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReworked build pipeline \u0026amp; tools.\u003c/li\u003e\n\u003cli\u003eAdded source maps.\u003c/li\u003e\n\u003cli\u003eBumped \u003ccode\u003elinkify-it\u003c/code\u003e to 5.0.2.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePreserve backslash-space hard line breaks, matching CommonMark 6.7, \u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1185\"\u003e#1185\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[14.2.0] - 2026-05-24\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eisPunctCharCode\u003c/code\u003e to utilities.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDon't end HTML comment blocks on a blank line, \u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1155\"\u003e#1155\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eProperly recognize astral chars (surrogates) in delimiter scans for\nemphasis-like markers, \u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1072\"\u003e#1072\u003c/a\u003e. Big thanks to \u003ca href=\"https://github.com/tats-u\"\u003e\u003ccode\u003e@​tats-u\u003c/code\u003e\u003c/a\u003e for his global efforts\nwith improving CJK support.\u003c/li\u003e\n\u003cli\u003ePreserve unicode whitespaces when trimm headings/paragraphs, \u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1074\"\u003e#1074\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eMore strict entities decode to avoid false positives \u003ccode\u003e;\u003c/code\u003e, \u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1096\"\u003e#1096\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eRestore block parser state on fail in \u003ccode\u003elheading\u003c/code\u003e rule, \u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1131\"\u003e#1131\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed poor smartquotes perfomance on \u0026gt; 70k quotes in single block\u003c/li\u003e\n\u003cli\u003eBumped linkify-it to 5.0.1 with fixed potential perfomance issues.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[14.1.1] - 2026-01-11\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed regression from v13 in linkify inline rule. Specific patterns could\ncause high CPU use. Thanks to \u003ca href=\"https://github.com/ltduc147\"\u003e\u003ccode\u003e@​ltduc147\u003c/code\u003e\u003c/a\u003e for report.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[14.1.0] - 2024-03-19\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated CM spec compatibility to 0.31.2, \u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1009\"\u003e#1009\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed quadratic complexity when parsing references, \u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/996\"\u003e#996\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eFixed quadratic output size with pathological user input in tables, \u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1000\"\u003e#1000\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/a855f10b1b796ca42178952b4b83b9c8b677ddb8\"\u003e\u003ccode\u003ea855f10\u003c/code\u003e\u003c/a\u003e 14.3.1 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/ad70f6b7cff64bee10e42a774147112480ca0d49\"\u003e\u003ccode\u003ead70f6b\u003c/code\u003e\u003c/a\u003e Backported 15.0.1 fixes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/b407f3b0667c9491cc52c6550736ee5a31721baa\"\u003e\u003ccode\u003eb407f3b\u003c/code\u003e\u003c/a\u003e Ignore generated API docs in lint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/bf025adb983e90af426761a08cc76e4e41ab0239\"\u003e\u003ccode\u003ebf025ad\u003c/code\u003e\u003c/a\u003e Prepare package.json for v14 backports\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/2d9bbea7df2ab1a48caecfafc39cb8599f193d3c\"\u003e\u003ccode\u003e2d9bbea\u003c/code\u003e\u003c/a\u003e fix: recognize lowercase declarations as HTML blocks (CommonMark 4.6) (\u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1189\"\u003e#1189\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/a311cfbeb7dcdb86d001a21facaf60190414ca4d\"\u003e\u003ccode\u003ea311cfb\u003c/code\u003e\u003c/a\u003e fix: keep literal backslash before space in link destination (CommonMark 6.3)...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/ff0ee084fc6b0d10fac049fa562bc2925b5cc723\"\u003e\u003ccode\u003eff0ee08\u003c/code\u003e\u003c/a\u003e 14.3.0 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/52e2749ab25aaf841bf74b50560929aa93b8e14d\"\u003e\u003ccode\u003e52e2749\u003c/code\u003e\u003c/a\u003e Bump linkify-it / vite deps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/56c2404e6d3e78632ce7b37a95f289fc04330c76\"\u003e\u003ccode\u003e56c2404\u003c/code\u003e\u003c/a\u003e fix: keep backslash-space hard line break (CommonMark 6.7) (\u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1185\"\u003e#1185\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/0fbb18b23145158a39255f7476c781dbce320a16\"\u003e\u003ccode\u003e0fbb18b\u003c/code\u003e\u003c/a\u003e Bump vite from 8.0.14 to 8.0.16 (\u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1181\"\u003e#1181\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/markdown-it/markdown-it/compare/13.0.2...14.3.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `moment` from 2.30.1 to 2.31.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/releases\"\u003emoment's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.31.0\u003c/h2\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/blob/develop/CHANGELOG.md\"\u003emoment's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch3\u003e2.31.0\u003c/h3\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/15b45d48a176312e8f34143c5a800090abf4787f\"\u003e\u003ccode\u003e15b45d4\u003c/code\u003e\u003c/a\u003e [pkg] Build 2.31.0 (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6452\"\u003e#6452\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/631cd81454ee001e1f508e21270eae0b6bb62974\"\u003e\u003ccode\u003e631cd81\u003c/code\u003e\u003c/a\u003e [pkg] Update changelog for upcoming release (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6394\"\u003e#6394\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/6caff9e0d54e85a63a6eb97d7361f1da35bc58f4\"\u003e\u003ccode\u003e6caff9e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/710703b7eac93535ad125cbf4feb3d42afed6fb3\"\u003e\u003ccode\u003e710703b\u003c/code\u003e\u003c/a\u003e [feature] Add internal date-default hook for Moment Timezone (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6451\"\u003e#6451\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/863ed940556e6e63c43de23981a4853036a003ac\"\u003e\u003ccode\u003e863ed94\u003c/code\u003e\u003c/a\u003e [bugfix] Add stack traces to conditional deprecation warnings (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6450\"\u003e#6450\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/2c7abe1c42ee15445d30c2c5d536750a1e43a09a\"\u003e\u003ccode\u003e2c7abe1\u003c/code\u003e\u003c/a\u003e [bugfix] Apply postformat to locale relative time methods (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6448\"\u003e#6448\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/9c45ac38690c649c95e19923276b63da5fe2be26\"\u003e\u003ccode\u003e9c45ac3\u003c/code\u003e\u003c/a\u003e [bugfix] Include metadata in all-locales bundle (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6447\"\u003e#6447\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/f6eefc5fc7b44ceccbd007aeffc48ebc5eac30fa\"\u003e\u003ccode\u003ef6eefc5\u003c/code\u003e\u003c/a\u003e [bugfix] Validate timezone offset range (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6446\"\u003e#6446\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/136b441794a3bb207d593add3b59e9de0e062523\"\u003e\u003ccode\u003e136b441\u003c/code\u003e\u003c/a\u003e [bugfix] Avoid Object.assign in duration.humanize (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6443\"\u003e#6443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/0d1050437b40f66ac47e14b285bb3d09676cf2e0\"\u003e\u003ccode\u003e0d10504\u003c/code\u003e\u003c/a\u003e [bugfix] Fix locale('\u003cstrong\u003eproto\u003c/strong\u003e') corrupting the global locale (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6442\"\u003e#6442\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moment/moment/compare/2.30.1...2.31.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for moment since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `adm-zip` from 0.5.17 to 0.6.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cthackers/adm-zip/releases\"\u003eadm-zip's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.6.1\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cthackers/adm-zip/compare/v0.6.0...v0.6.1\"\u003ehttps://github.com/cthackers/adm-zip/compare/v0.6.0...v0.6.1\u003c/a\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dev dependencies\u003c/li\u003e\n\u003cli\u003eFixed uncaught crash in async decompression on malformed DEFLATE data\u003c/li\u003e\n\u003cli\u003eFixed addLocalFolder following symlinks out of the archived folder\u003c/li\u003e\n\u003cli\u003eStripped setuid/setgid/sticky bits from extracted file permissions\u003c/li\u003e\n\u003cli\u003eEnforced the decompression size cap on the async path and for size 0\u003c/li\u003e\n\u003cli\u003eRejected archives with duplicate entry names\u003c/li\u003e\n\u003cli\u003eBlocked extraction from writing through symlinks inside the target\u003c/li\u003e\n\u003cli\u003eRouted malformed-header parse errors through the async callback\u003c/li\u003e\n\u003cli\u003eRejected zip entries whose declared data extent runs past the buffer\u003c/li\u003e\n\u003cli\u003eFixed addLocalFolderPromise hanging on empty folders and swallowing errors\u003c/li\u003e\n\u003cli\u003eFixed addLocalFolderAsync2 mangling local paths on Windows\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.6.0\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cthackers/adm-zip/compare/v0.5.18...v0.6.0\"\u003ehttps://github.com/cthackers/adm-zip/compare/v0.5.18...v0.6.0\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eThis release fixes a security vulnerability (CVE-2026-39244), resolves several long-standing bugs, ships built-in TypeScript types, and includes two behavior changes worth reading before you upgrade.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eextractEntryTo(dirEntry, target, maintainEntryPath = false) now preserves subdirectories instead of flattening files into the target folder by basename (which also silently overwrote same-named files). (\u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/306\"\u003e#306\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eExtraction no longer fails when the modification time can't be set — utimes is now best-effort. (\u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/379\"\u003e#379\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMinimum Node.js is now 14 (the code already required it; engines was incorrectly \u0026gt;=12).\u003c/li\u003e\n\u003cli\u003eCVE-2026-39244 — a crafted archive declaring a huge uncompressed size could force an unbounded Buffer.alloc and OOM the process; allocation is now bounded by the data actually present. Reported by Daniel Púa (devploit), Anh Hong, and José Antonio Zamudio Amaya. (\u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/568\"\u003e#568\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHardened entry-name lookup against object injection (\u003cstrong\u003eproto\u003c/strong\u003e names). Prototype-less table.\u003c/li\u003e\n\u003cli\u003eData-descriptor regression rejecting valid archives (\u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/548\"\u003e#548\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/533\"\u003e#533\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/554\"\u003e#554\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDirectory permissions not restored on extract (\u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/530\"\u003e#530\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eInfinite recursion on symlink loops in addLocalFolder (\u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/541\"\u003e#541\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUncaught process crash in writeFileToAsync on write failure (\u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/470\"\u003e#470\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/459\"\u003e#459\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/402\"\u003e#402\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEmpty name on directory entries (\u003ca href=\"https://redirect.github.com/cthackers/adm-zip/issues/466\"\u003e#466\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest() alway...\n\n_Description has been truncated_","html_url":"https://github.com/alexis-opolka/joplin/pull/186","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexis-opolka%2Fjoplin/issues/186","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/186/packages"}}]}