dependabot[bot] opened a new pull request, #65153: URL: https://github.com/apache/airflow/pull/65153
Bumps the legacy-ui-package-updates group with 20 updates in the /airflow/www directory: | Package | From | To | | --- | --- | --- | | [axios](https://github.com/axios/axios) | `1.13.6` | `1.15.0` | | [lodash](https://github.com/lodash/lodash) | `4.17.23` | `4.18.1` | | [moment-timezone](https://github.com/moment/moment-timezone) | `0.6.0` | `0.6.1` | | [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.2.4` | `19.2.5` | | [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.2.4` | `19.2.5` | | [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `7.13.1` | `7.14.0` | | [swagger-ui-dist](https://github.com/swagger-api/swagger-ui) | `5.32.0` | `5.32.2` | | [type-fest](https://github.com/sindresorhus/type-fest) | `5.4.4` | `5.5.0` | | [validator](https://github.com/validatorjs/validator.js) | `13.15.26` | `13.15.35` | | [@babel/preset-env](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-env) | `7.29.0` | `7.29.2` | | [@types/color](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/color) | `4.2.0` | `4.2.1` | | [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.56.1` | `8.58.1` | | [babel-jest](https://github.com/jestjs/jest/tree/HEAD/packages/babel-jest) | `30.2.0` | `30.3.0` | | [babel-loader](https://github.com/babel/babel-loader) | `10.0.0` | `10.1.1` | | [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) | `30.2.0` | `30.3.0` | | [jest-environment-jsdom](https://github.com/jestjs/jest/tree/HEAD/packages/jest-environment-jsdom) | `30.2.0` | `30.3.0` | | [mini-css-extract-plugin](https://github.com/webpack/mini-css-extract-plugin) | `2.10.0` | `2.10.2` | | [stylelint](https://github.com/stylelint/stylelint) | `17.4.0` | `17.6.0` | | [terser-webpack-plugin](https://github.com/webpack/terser-webpack-plugin) | `5.3.17` | `5.4.0` | | [webpack](https://github.com/webpack/webpack) | `5.105.4` | `5.106.0` | Updates `axios` from 1.13.6 to 1.15.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/axios/axios/releases";>axios's releases</a>.</em></p> <blockquote> <h2>v1.15.0</h2> <p>This release delivers two critical security patches, adds runtime support for Deno and Bun, and includes significant CI hardening, documentation improvements, and routine dependency updates.</p> <h2>⚠️ Important Changes</h2> <ul> <li><strong>Deprecation:</strong> <code>url.parse()</code> usage has been replaced to address Node.js deprecation warnings. If you are on a recent version of Node.js, this resolves console warnings you may have been seeing. (<strong><a href="https://redirect.github.com/axios/axios/issues/10625";>#10625</a></strong>)</li> </ul> <h2>🔒 Security Fixes</h2> <ul> <li><strong>Proxy Handling:</strong> Fixed a <code>no_proxy</code> hostname normalisation bypass that could lead to Server-Side Request Forgery (SSRF). (<strong><a href="https://redirect.github.com/axios/axios/issues/10661";>#10661</a></strong>)</li> <li><strong>Header Injection:</strong> Fixed an unrestricted cloud metadata exfiltration vulnerability via a header injection chain. (<strong><a href="https://redirect.github.com/axios/axios/issues/10660";>#10660</a></strong>)</li> </ul> <h2>🚀 New Features</h2> <ul> <li><strong>Runtime Support:</strong> Added compatibility checks and documentation for Deno and Bun environments. (<strong><a href="https://redirect.github.com/axios/axios/issues/10652";>#10652</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10653";>#10653</a></strong>)</li> </ul> <h2>🔧 Maintenance & Chores</h2> <ul> <li><strong>CI Security:</strong> Hardened workflow permissions to least privilege, added the <code>zizmor</code> security scanner, pinned action versions, and gated npm publishing with OIDC and environment protection. (<strong><a href="https://redirect.github.com/axios/axios/issues/10618";>#10618</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10619";>#10619</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10627";>#10627</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10637";>#10637</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10666";>#10666</a></strong>)</li> <li><strong>Dependencies:</strong> Bumped <code>serialize-javascript</code>, <code>handlebars</code>, <code>picomatch</code>, <code>vite</code>, and <code>denoland/setup-deno</code> to latest versions. Added a 7-day Dependabot cooldown period. (<strong><a href="https://redirect.github.com/axios/axios/issues/10574";>#10574</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10572";>#10572</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10568";>#10568</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10663";>#10663</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10664";>#10664</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10665";>#10665</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10669";>#10669</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10670";>#10670</a></strong>, <strong><a hre f="https://redirect.github.com/axios/axios/issues/10616";>#10616</a></strong>)</li> <li><strong>Documentation:</strong> Unified docs, improved <code>beforeRedirect</code> credential leakage example, clarified <code>withCredentials</code>/<code>withXSRFToken</code> behaviour, HTTP/2 support notes, async/await timeout error handling, header case preservation, and various typo fixes. (<strong><a href="https://redirect.github.com/axios/axios/issues/10649";>#10649</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10624";>#10624</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/7452";>#7452</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/7471";>#7471</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10654";>#10654</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10644";>#10644</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10589";>#10589</a></strong>)</li> <li><strong>Housekeeping:</strong> Removed stale files, regenerated lockfile, and updated sponsor scripts and blocks. (<strong><a href="https://redirect.github.com/axios/axios/issues/10584";>#10584</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10650";>#10650</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10582";>#10582</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10640";>#10640</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10659";>#10659</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10668";>#10668</a></strong>)</li> <li><strong>Tests:</strong> Added regression coverage for urlencoded <code>Content-Type</code> casing. (<strong><a href="https://redirect.github.com/axios/axios/issues/10573";>#10573</a></strong>)</li> </ul> <h2>🌟 New Contributors</h2> <p>We are thrilled to welcome our new contributors. Thank you for helping improve Axios:</p> <ul> <li><strong><a href="https://github.com/raashish1601";><code>@raashish1601</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10573";>#10573</a></strong>)</li> <li><strong><a href="https://github.com/Kilros0817";><code>@Kilros0817</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10625";>#10625</a></strong>)</li> <li><strong><a href="https://github.com/ashstrc";><code>@ashstrc</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10624";>#10624</a></strong>)</li> <li><strong><a href="https://github.com/Abhi3975";><code>@Abhi3975</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10589";>#10589</a></strong>)</li> <li><strong><a href="https://github.com/theamodhshetty";><code>@theamodhshetty</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/7452";>#7452</a></strong>)</li> </ul> <h2>v1.14.0</h2> <p>This release focuses on compatibility fixes, adapter stability improvements, and test/tooling modernisation.</p> <h2>⚠️ Important Changes</h2> <ul> <li><strong>Breaking Changes:</strong> None identified in this release.</li> <li><strong>Action Required:</strong> If you rely on env-based proxy behaviour or CJS resolution edge-cases, validate your integration after upgrade (notably <code>proxy-from-env</code> v2 alignment and <code>main</code> entry compatibility fix).</li> </ul> <h2>🚀 New Features</h2> <ul> <li><strong>Runtime Features:</strong> No new end-user features were introduced in this release.</li> <li><strong>Test Coverage Expansion:</strong> Added broader smoke/module test coverage for CJS and ESM package usage. (<a href="https://redirect.github.com/axios/axios/pull/7510";>#7510</a>)</li> </ul> <h2>🐛 Bug Fixes</h2> <ul> <li><strong>Headers:</strong> Trim trailing CRLF in normalised header values. (<a href="https://redirect.github.com/axios/axios/pull/7456";>#7456</a>)</li> <li><strong>HTTP/2:</strong> Close detached HTTP/2 sessions on timeout to avoid lingering sessions. (<a href="https://redirect.github.com/axios/axios/pull/7457";>#7457</a>)</li> <li><strong>Fetch Adapter:</strong> Cancel <code>ReadableStream</code> created during request-stream capability probing to prevent async resource leaks. (<a href="https://redirect.github.com/axios/axios/pull/7515";>#7515</a>)</li> <li><strong>Proxy Handling:</strong> Fixed env proxy behavior with <code>proxy-from-env</code> v2 usage. (<a href="https://redirect.github.com/axios/axios/pull/7499";>#7499</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/axios/axios/blob/v1.x/CHANGELOG.md";>axios's changelog</a>.</em></p> <blockquote> <h1>Changelog</h1> <h2><a href="https://github.com/axios/axios/compare/v1.13.2...v1.13.3";>1.13.3</a> (2026-01-20)</h2> <h3>Bug Fixes</h3> <ul> <li><strong>http2:</strong> Use port 443 for HTTPS connections by default. (<a href="https://redirect.github.com/axios/axios/issues/7256";>#7256</a>) (<a href="https://github.com/axios/axios/commit/d7e60653460480ffacecf85383012ca1baa6263e";>d7e6065</a>)</li> <li><strong>interceptor:</strong> handle the error in the same interceptor (<a href="https://redirect.github.com/axios/axios/issues/6269";>#6269</a>) (<a href="https://github.com/axios/axios/commit/5945e40bb171d4ac4fc195df276cf952244f0f89";>5945e40</a>)</li> <li>main field in package.json should correspond to cjs artifacts (<a href="https://redirect.github.com/axios/axios/issues/5756";>#5756</a>) (<a href="https://github.com/axios/axios/commit/7373fbff24cd92ce650d99ff6f7fe08c2e2a0a04";>7373fbf</a>)</li> <li><strong>package.json:</strong> add 'bun' package.json 'exports' condition. Load the Node.js build in Bun instead of the browser build (<a href="https://redirect.github.com/axios/axios/issues/5754";>#5754</a>) (<a href="https://github.com/axios/axios/commit/b89217e3e91de17a3d55e2b8f39ceb0e9d8aeda8";>b89217e</a>)</li> <li>silentJSONParsing=false should throw on invalid JSON (<a href="https://redirect.github.com/axios/axios/issues/7253";>#7253</a>) (<a href="https://redirect.github.com/axios/axios/issues/7257";>#7257</a>) (<a href="https://github.com/axios/axios/commit/7d19335e43d6754a1a9a66e424f7f7da259895bf";>7d19335</a>)</li> <li>turn AxiosError into a native error (<a href="https://redirect.github.com/axios/axios/issues/5394";>#5394</a>) (<a href="https://redirect.github.com/axios/axios/issues/5558";>#5558</a>) (<a href="https://github.com/axios/axios/commit/1c6a86dd2c0623ee1af043a8491dbc96d40e883b";>1c6a86d</a>)</li> <li><strong>types:</strong> add handlers to AxiosInterceptorManager interface (<a href="https://redirect.github.com/axios/axios/issues/5551";>#5551</a>) (<a href="https://github.com/axios/axios/commit/8d1271b49fc226ed7defd07cd577bd69a55bb13a";>8d1271b</a>)</li> <li><strong>types:</strong> restore AxiosError.cause type from unknown to Error (<a href="https://redirect.github.com/axios/axios/issues/7327";>#7327</a>) (<a href="https://github.com/axios/axios/commit/d8233d9e8e9a64bfba9bbe01d475ba417510b82b";>d8233d9</a>)</li> <li>unclear error message is thrown when specifying an empty proxy authorization (<a href="https://redirect.github.com/axios/axios/issues/6314";>#6314</a>) (<a href="https://github.com/axios/axios/commit/6ef867e684adf7fb2343e3b29a79078a3c76dc29";>6ef867e</a>)</li> </ul> <h3>Features</h3> <ul> <li>add <code>undefined</code> as a value in AxiosRequestConfig (<a href="https://redirect.github.com/axios/axios/issues/5560";>#5560</a>) (<a href="https://github.com/axios/axios/commit/095033c626895ecdcda2288050b63dcf948db3bd";>095033c</a>)</li> <li>add automatic minor and patch upgrades to dependabot (<a href="https://redirect.github.com/axios/axios/issues/6053";>#6053</a>) (<a href="https://github.com/axios/axios/commit/65a7584eda6164980ddb8cf5372f0afa2a04c1ed";>65a7584</a>)</li> <li>add Node.js coverage script using c8 (closes <a href="https://redirect.github.com/axios/axios/issues/7289";>#7289</a>) (<a href="https://redirect.github.com/axios/axios/issues/7294";>#7294</a>) (<a href="https://github.com/axios/axios/commit/ec9d94e9f88da13e9219acadf65061fb38ce080a";>ec9d94e</a>)</li> <li>added copilot instructions (<a href="https://github.com/axios/axios/commit/3f83143bfe617eec17f9d7dcf8bafafeeae74c26";>3f83143</a>)</li> <li>compatibility with frozen prototypes (<a href="https://redirect.github.com/axios/axios/issues/6265";>#6265</a>) (<a href="https://github.com/axios/axios/commit/860e03396a536e9b926dacb6570732489c9d7012";>860e033</a>)</li> <li>enhance pipeFileToResponse with error handling (<a href="https://redirect.github.com/axios/axios/issues/7169";>#7169</a>) (<a href="https://github.com/axios/axios/commit/88d78842541610692a04282233933d078a8a2552";>88d7884</a>)</li> <li><strong>types:</strong> Intellisense for string literals in a widened union (<a href="https://redirect.github.com/axios/axios/issues/6134";>#6134</a>) (<a href="https://github.com/axios/axios/commit/f73474d02c5aa957b2daeecee65508557fd3c6e5";>f73474d</a>), closes <a href="https://redirect.github.com//redirect.github.com/microsoft/TypeScript/issues/33471/issues/issuecomment-1376364329";>microsoft/TypeScript#33471</a></li> </ul> <h3>Reverts</h3> <ul> <li>Revert "fix: silentJSONParsing=false should throw on invalid JSON (<a href="https://redirect.github.com/axios/axios/issues/7253";>#7253</a>) (<a href="https://redirect.github.com/axios/axios/issues/7";>#7</a>…" (<a href="https://redirect.github.com/axios/axios/issues/7298";>#7298</a>) (<a href="https://github.com/axios/axios/commit/a4230f5581b3f58b6ff531b6dbac377a4fd7942a";>a4230f5</a>), closes <a href="https://redirect.github.com/axios/axios/issues/7253";>#7253</a> <a href="https://redirect.github.com/axios/axios/issues/7";>#7</a> <a href="https://redirect.github.com/axios/axios/issues/7298";>#7298</a></li> <li><strong>deps:</strong> bump peter-evans/create-pull-request from 7 to 8 in the github-actions group (<a href="https://redirect.github.com/axios/axios/issues/7334";>#7334</a>) (<a href="https://github.com/axios/axios/commit/2d6ad5e48bd29b0b2b5e7e95fb473df98301543a";>2d6ad5e</a>)</li> </ul> <h3>Contributors to this release</h3> <ul> <li><!-- raw HTML omitted --> <a href="https://github.com/ashvin2005"; title="+1752/-4 ([#7218](https://github.com/axios/axios/issues/7218) [#7218](https://github.com/axios/axios/issues/7218) )">Ashvin Tiwari</a></li> <li><!-- raw HTML omitted --> <a href="https://github.com/mochinikunj"; title="+940/-12 ([#7294](https://github.com/axios/axios/issues/7294) [#7294](https://github.com/axios/axios/issues/7294) )">Nikunj Mochi</a></li> <li><!-- raw HTML omitted --> <a href="https://github.com/imanchalsingh"; title="+544/-102 ([#7169](https://github.com/axios/axios/issues/7169) [#7185](https://github.com/axios/axios/issues/7185) )">Anchal Singh</a></li> <li><!-- raw HTML omitted --> <a href="https://github.com/jasonsaayman"; title="+317/-73 ([#7334](https://github.com/axios/axios/issues/7334) [#7298](https://github.com/axios/axios/issues/7298) )">jasonsaayman</a></li> <li><!-- raw HTML omitted --> <a href="https://github.com/brodo"; title="+99/-120 ([#5558](https://github.com/axios/axios/issues/5558) )">Julian Dax</a></li> <li><!-- raw HTML omitted --> <a href="https://github.com/AKASHDHARDUBEY"; title="+167/-0 ([#7287](https://github.com/axios/axios/issues/7287) [#7288](https://github.com/axios/axios/issues/7288) )">Akash Dhar Dubey</a></li> <li><!-- raw HTML omitted --> <a href="https://github.com/madhumitaaa"; title="+20/-68 ([#7198](https://github.com/axios/axios/issues/7198) )">Madhumita</a></li> <li><!-- raw HTML omitted --> <a href="https://github.com/Tackoil"; title="+80/-2 ([#6269](https://github.com/axios/axios/issues/6269) )">Tackoil</a></li> <li><!-- raw HTML omitted --> <a href="https://github.com/justindhillon"; title="+41/-41 ([#6324](https://github.com/axios/axios/issues/6324) [#6315](https://github.com/axios/axios/issues/6315) )">Justin Dhillon</a></li> <li><!-- raw HTML omitted --> <a href="https://github.com/Rudrxxx"; title="+71/-2 ([#7257](https://github.com/axios/axios/issues/7257) )">Rudransh</a></li> <li><!-- raw HTML omitted --> <a href="https://github.com/WuMingDao"; title="+36/-36 ([#7215](https://github.com/axios/axios/issues/7215) )">WuMingDao</a></li> <li><!-- raw HTML omitted --> <a href="https://github.com/codenomnom"; title="+70/-0 ([#7201](https://github.com/axios/axios/issues/7201) [#7201](https://github.com/axios/axios/issues/7201) )">codenomnom</a></li> <li><!-- raw HTML omitted --> <a href="https://github.com/Nandann018-ux"; title="+60/-10 ([#7272](https://github.com/axios/axios/issues/7272) )">Nandan Acharya</a></li> <li><!-- raw HTML omitted --> <a href="https://github.com/KernelDeimos"; title="+22/-40 ([#7042](https://github.com/axios/axios/issues/7042) )">Eric Dubé</a></li> <li><!-- raw HTML omitted --> <a href="https://github.com/tiborpilz"; title="+40/-4 ([#5551](https://github.com/axios/axios/issues/5551) )">Tibor Pilz</a></li> <li><!-- raw HTML omitted --> <a href="https://github.com/joaoGabriel55"; title="+31/-4 ([#6314](https://github.com/axios/axios/issues/6314) )">Gabriel Quaresma</a></li> <li><!-- raw HTML omitted --> <a href="https://github.com/turadg"; title="+23/-6 ([#6265](https://github.com/axios/axios/issues/6265) )">Turadg Aleahmad</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/axios/axios/commit/772a4e54ecc4cc2421e2b746daff0aca10f359d7";><code>772a4e5</code></a> chore(release): prepare release 1.15.0 (<a href="https://redirect.github.com/axios/axios/issues/10671";>#10671</a>)</li> <li><a href="https://github.com/axios/axios/commit/4b071371be2f810b4bc7797a13838e0f806ebb22";><code>4b07137</code></a> chore(deps-dev): bump vite from 8.0.0 to 8.0.5 in /tests/smoke/esm (<a href="https://redirect.github.com/axios/axios/issues/10663";>#10663</a>)</li> <li><a href="https://github.com/axios/axios/commit/51e57b39db251bfe3d34af5c943dfea18e06c8b6";><code>51e57b3</code></a> chore(deps-dev): bump vite from 8.0.2 to 8.0.5 (<a href="https://redirect.github.com/axios/axios/issues/10664";>#10664</a>)</li> <li><a href="https://github.com/axios/axios/commit/fba1a77930f0c459677b729161627234b88c90aa";><code>fba1a77</code></a> chore(deps-dev): bump vite from 8.0.2 to 8.0.5 in /tests/module/esm (<a href="https://redirect.github.com/axios/axios/issues/10665";>#10665</a>)</li> <li><a href="https://github.com/axios/axios/commit/0bf6e28eac86e87da2b60bbf5ea4237910e1a08e";><code>0bf6e28</code></a> chore(deps): bump denoland/setup-deno in the github-actions group (<a href="https://redirect.github.com/axios/axios/issues/10669";>#10669</a>)</li> <li><a href="https://github.com/axios/axios/commit/8107157c572ee4a54cb28c01ab7f7f3d895ba661";><code>8107157</code></a> chore(deps-dev): bump the development_dependencies group with 4 updates (<a href="https://redirect.github.com/axios/axios/issues/10670";>#10670</a>)</li> <li><a href="https://github.com/axios/axios/commit/e66530e3302d56176befd0778155dafea2487542";><code>e66530e</code></a> ci: require npm-publish environment for releases (<a href="https://redirect.github.com/axios/axios/issues/10666";>#10666</a>)</li> <li><a href="https://github.com/axios/axios/commit/49f23cbfe4d308a075281c5f798d4c68f648cbe2";><code>49f23cb</code></a> chore(sponsor): update sponsor block (<a href="https://redirect.github.com/axios/axios/issues/10668";>#10668</a>)</li> <li><a href="https://github.com/axios/axios/commit/363185461b90b1b78845dc8a99a1f103d9b122a1";><code>3631854</code></a> fix: unrestricted cloud metadata exfiltration via header injection chain (<a href="https://redirect.github.com/axios/axios/issues/10";>#10</a>...</li> <li><a href="https://github.com/axios/axios/commit/fb3befb6daac6cad26b2e54094d0f2d9e47f24df";><code>fb3befb</code></a> fix: no_proxy hostname normalization bypass leads to ssrf (<a href="https://redirect.github.com/axios/axios/issues/10661";>#10661</a>)</li> <li>Additional commits viewable in <a href="https://github.com/axios/axios/compare/v1.13.6...v1.15.0";>compare view</a></li> </ul> </details> <details> <summary>Install script changes</summary> <p>This version modifies <code>prepare</code> script that runs during installation. Review the package contents before updating.</p> </details> <br /> Updates `chakra-react-select` from 4.0.3 to 4.10.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/csandman/chakra-react-select/releases";>chakra-react-select's releases</a>.</em></p> <blockquote> <h2>4.10.1</h2> <h2>What's Changed</h2> <ul> <li>fix: Reduce selected menu option styles specificity by <a href="https://github.com/csandman";><code>@csandman</code></a> in <a href="https://redirect.github.com/csandman/chakra-react-select/pull/338";>csandman/chakra-react-select#338</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/csandman/chakra-react-select/compare/v4.10.0...v4.10.1";>https://github.com/csandman/chakra-react-select/compare/v4.10.0...v4.10.1</a></p> <h2>4.10.0</h2> <h2>What's Changed</h2> <ul> <li>fix: Switch peer dependencies to depend on <code>@chakra-ui/react</code> instead of sub-packages by <a href="https://github.com/csandman";><code>@csandman</code></a> in <a href="https://redirect.github.com/csandman/chakra-react-select/pull/336";>csandman/chakra-react-select#336</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/csandman/chakra-react-select/compare/v4.9.2...v4.10.0";>https://github.com/csandman/chakra-react-select/compare/v4.9.2...v4.10.0</a></p> <h2>4.9.2</h2> <h2>What's Changed</h2> <ul> <li>fix: Change package <code>type</code> back to default of <code>"commonjs"</code> by <a href="https://github.com/csandman";><code>@csandman</code></a> in <a href="https://redirect.github.com/csandman/chakra-react-select/pull/331";>csandman/chakra-react-select#331</a> <ul> <li>This was to fix <a href="https://redirect.github.com/csandman/chakra-react-select/issues/329";>#329</a>, which was being caused by Jest importing the wrong build of the package.</li> </ul> </li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/csandman/chakra-react-select/compare/v4.9.1...v4.9.2";>https://github.com/csandman/chakra-react-select/compare/v4.9.1...v4.9.2</a></p> <h2>4.9.1</h2> <h2>What's Changed</h2> <ul> <li>fix: Fix <code>react-select</code> core <code>Props</code> type export by <a href="https://github.com/csandman";><code>@csandman</code></a> in <a href="https://redirect.github.com/csandman/chakra-react-select/pull/324";>csandman/chakra-react-select#324</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/csandman/chakra-react-select/compare/v4.9.0...v4.9.1";>https://github.com/csandman/chakra-react-select/compare/v4.9.0...v4.9.1</a></p> <h2>4.9.0</h2> <h2>What's Changed</h2> <ul> <li>chore: Switch to tsup for building and update dependencies by <a href="https://github.com/csandman";><code>@csandman</code></a> in <a href="https://redirect.github.com/csandman/chakra-react-select/pull/298";>csandman/chakra-react-select#298</a> <ul> <li>This change should finally make this package fully support ESM, where as before it didn't really which was causing some issues. It should fix an issue with the ID prop not matching mentioned in <a href="https://redirect.github.com/csandman/chakra-react-select/issues/260";>#260</a>, without the need for a workaround. Check the <a href="https://redirect.github.com/csandman/chakra-react-select/pull/298";>PR description</a> for full details!</li> </ul> </li> </ul> <p>I tested this change in a few different environments with different module resolution setups but it's possible I missed a case. If it ends up not working for your particular setup, please open a <a href="https://github.com/csandman/chakra-react-select/issues/new?assignees=csandman&labels=Bug&projects=&template=bug_report.yml&title=%5BBUG%5D+";>bug report</a> with as much specific information as you can give me, such as:</p> <ul> <li>Chakra Package Versions</li> <li>React Version</li> <li>TypeScript or Vanilla</li> <li>Yarn or NPM (and which version of the package manager you're on)</li> <li>Your jsconfig/tsconfig setup</li> </ul> <p>I'm not likely to figure out what's going on if I can't replicate the environment locally, so the more information you can provide the better!</p> <p><strong>Full Changelog</strong>: <a href="https://github.com/csandman/chakra-react-select/compare/v4.8.0...v4.9.0";>https://github.com/csandman/chakra-react-select/compare/v4.8.0...v4.9.0</a></p> <h2>4.8.0</h2> <h2>What's Changed</h2> <ul> <li>chore: Update all dependencies by <a href="https://github.com/csandman";><code>@csandman</code></a> in <a href="https://redirect.github.com/csandman/chakra-react-select/pull/315";>csandman/chakra-react-select#315</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/csandman/chakra-react-select/commit/b49461f52213e8324a14f157a3f441d52567a736";><code>b49461f</code></a> 4.10.1</li> <li><a href="https://github.com/csandman/chakra-react-select/commit/2269b856b29c3f9144c16e19dc147a30bf94c33b";><code>2269b85</code></a> Merge pull request <a href="https://redirect.github.com/csandman/chakra-react-select/issues/338";>#338</a> from csandman/fix/selected-menu-option-styles</li> <li><a href="https://github.com/csandman/chakra-react-select/commit/61bfe641c67d5b3d3cd91e280b7829a3f7ca2204";><code>61bfe64</code></a> Generalize the dependency version of <code>react-select</code></li> <li><a href="https://github.com/csandman/chakra-react-select/commit/f80680161916fa03fdba48b65fd284e38cb77649";><code>f806801</code></a> Reduce selected menu option styles specificity</li> <li><a href="https://github.com/csandman/chakra-react-select/commit/9b9ddcc899f2ae207bf13f2f2d16ff4198bf7d19";><code>9b9ddcc</code></a> 4.10.0</li> <li><a href="https://github.com/csandman/chakra-react-select/commit/12d7cc63ff645b61629c388ad3093c37a08f5081";><code>12d7cc6</code></a> Merge pull request <a href="https://redirect.github.com/csandman/chakra-react-select/issues/336";>#336</a> from csandman/fix/switch-to-chakra-ui-react-imports</li> <li><a href="https://github.com/csandman/chakra-react-select/commit/f9822c4fb9f79e4cd9e6c99553b9700ae8a3ac24";><code>f9822c4</code></a> Remove CodeSandbox CI</li> <li><a href="https://github.com/csandman/chakra-react-select/commit/b495516eb142c536f91154c695802c213f130db1";><code>b495516</code></a> Update TSConfig once more</li> <li><a href="https://github.com/csandman/chakra-react-select/commit/cef98ceaeb55c39bee52dda6ba29e5c01a7e6fe3";><code>cef98ce</code></a> Switch to using the single package import approach for <code>@chakra-ui/react</code></li> <li><a href="https://github.com/csandman/chakra-react-select/commit/c68d4a72945e11cf682bb790250cf3ce17180b6f";><code>c68d4a7</code></a> 4.9.2</li> <li>Additional commits viewable in <a href="https://github.com/csandman/chakra-react-select/compare/v4.0.3...v4.10.1";>compare view</a></li> </ul> </details> <details> <summary>Install script changes</summary> <p>This version modifies <code>prepare</code> script that runs during installation. Review the package contents before updating.</p> </details> <br /> Updates `lodash` from 4.17.23 to 4.18.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/lodash/lodash/releases";>lodash's releases</a>.</em></p> <blockquote> <h2>4.18.1</h2> <h2>Bugs</h2> <p>Fixes a <code>ReferenceError</code> issue in <code>lodash</code> <code>lodash-es</code> <code>lodash-amd</code> and <code>lodash.template</code> when using the <code>template</code> and <code>fromPairs</code> functions from the modular builds. See <a href="https://redirect.github.com/lodash/lodash/issues/6167#issuecomment-4165269769";>lodash/lodash#6167</a></p> <p>These defects were related to how lodash distributions are built from the main branch using <a href="https://github.com/lodash-archive/lodash-cli";>https://github.com/lodash-archive/lodash-cli</a>. When internal dependencies change inside lodash functions, equivalent updates need to be made to a mapping in the lodash-cli. (hey, it was ahead of its time once upon a time!). We know this, but we missed it in the last release. It's the kind of thing that passes in CI, but fails bc the build is not the same thing you tested.</p> <p>There is no diff on main for this, but you can see the diffs for each of the npm packages on their respective branches:</p> <ul> <li><code>lodash</code>: <a href="https://github.com/lodash/lodash/compare/4.18.0-npm...4.18.1-npm";>https://github.com/lodash/lodash/compare/4.18.0-npm...4.18.1-npm</a></li> <li><code>lodash-es</code>: <a href="https://github.com/lodash/lodash/compare/4.18.0-es...4.18.1-es";>https://github.com/lodash/lodash/compare/4.18.0-es...4.18.1-es</a></li> <li><code>lodash-amd</code>: <a href="https://github.com/lodash/lodash/compare/4.18.0-amd...4.18.1-amd";>https://github.com/lodash/lodash/compare/4.18.0-amd...4.18.1-amd</a></li> <li><code>lodash.template</code><a href="https://github.com/lodash/lodash/compare/4.18.0-npm-packages...4.18.1-npm-packages";>https://github.com/lodash/lodash/compare/4.18.0-npm-packages...4.18.1-npm-packages</a></li> </ul> <h2>4.18.0</h2> <h2>v4.18.0</h2> <p><strong>Full Changelog</strong>: <a href="https://github.com/lodash/lodash/compare/4.17.23...4.18.0";>https://github.com/lodash/lodash/compare/4.17.23...4.18.0</a></p> <h3>Security</h3> <p><strong><code>_.unset</code> / <code>_.omit</code></strong>: Fixed prototype pollution via <code>constructor</code>/<code>prototype</code> path traversal (<a href="https://github.com/lodash/lodash/security/advisories/GHSA-f23m-r3pf-42rh";>GHSA-f23m-r3pf-42rh</a>, <a href="https://github.com/lodash/lodash/commit/fe8d32eda854377349a4f922ab7655c8e5df9a0b";>fe8d32e</a>). Previously, array-wrapped path segments and primitive roots could bypass the existing guards, allowing deletion of properties from built-in prototypes. Now <code>constructor</code> and <code>prototype</code> are blocked unconditionally as non-terminal path keys, matching <code>baseSet</code>. Calls that previously returned <code>true</code> and deleted the property now return <code>false</code> and leave the target untouched.</p> <p><strong><code>_.template</code></strong>: Fixed code injection via <code>imports</code> keys (<a href="https://github.com/lodash/lodash/security/advisories/GHSA-r5fr-rjxr-66jc";>GHSA-r5fr-rjxr-66jc</a>, CVE-2026-4800, <a href="https://github.com/lodash/lodash/commit/879aaa93132d78c2f8d20c60279da9f8b21576d6";>879aaa9</a>). Fixes an incomplete patch for CVE-2021-23337. The <code>variable</code> option was validated against <code>reForbiddenIdentifierChars</code> but <code>importsKeys</code> was left unguarded, allowing code injection via the same <code>Function()</code> constructor sink. <code>imports</code> keys containing forbidden identifier characters now throw <code>"Invalid imports option passed into _.template"</code>.</p> <h3>Docs</h3> <ul> <li>Add security notice for <code>_.template</code> in threat model and API docs (<a href="https://redirect.github.com/lodash/lodash/pull/6099";>#6099</a>)</li> <li>Document <code>lower > upper</code> behavior in <code>_.random</code> (<a href="https://redirect.github.com/lodash/lodash/pull/6115";>#6115</a>)</li> <li>Fix quotes in <code>_.compact</code> jsdoc (<a href="https://redirect.github.com/lodash/lodash/pull/6090";>#6090</a>)</li> </ul> <h3><code>lodash.*</code> modular packages</h3> <p><a href="https://redirect.github.com/lodash/lodash/pull/6157";>Diff</a></p> <p>We have also regenerated and published a select number of the <code>lodash.*</code> modular packages.</p> <p>These modular packages had fallen out of sync significantly from the minor/patch updates to lodash. Specifically, we have brought the following packages up to parity w/ the latest lodash release because they have had CVEs on them in the past:</p> <ul> <li><a href="https://www.npmjs.com/package/lodash.orderby";>lodash.orderby</a></li> <li><a href="https://www.npmjs.com/package/lodash.tonumber";>lodash.tonumber</a></li> <li><a href="https://www.npmjs.com/package/lodash.trim";>lodash.trim</a></li> <li><a href="https://www.npmjs.com/package/lodash.trimend";>lodash.trimend</a></li> <li><a href="https://www.npmjs.com/package/lodash.sortedindexby";>lodash.sortedindexby</a></li> <li><a href="https://www.npmjs.com/package/lodash.zipobjectdeep";>lodash.zipobjectdeep</a></li> <li><a href="https://www.npmjs.com/package/lodash.unset";>lodash.unset</a></li> <li><a href="https://www.npmjs.com/package/lodash.omit";>lodash.omit</a></li> <li><a href="https://www.npmjs.com/package/lodash.template";>lodash.template</a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/lodash/lodash/commit/cb0b9b9212521c08e3eafe7c8cb0af1b42b6649e";><code>cb0b9b9</code></a> release(patch): bump main to 4.18.1 (<a href="https://redirect.github.com/lodash/lodash/issues/6177";>#6177</a>)</li> <li><a href="https://github.com/lodash/lodash/commit/75535f57883b7225adb96de1cfc1cd4169cfcb51";><code>75535f5</code></a> chore: prune stale advisory refs (<a href="https://redirect.github.com/lodash/lodash/issues/6170";>#6170</a>)</li> <li><a href="https://github.com/lodash/lodash/commit/62e91bc6a39c98d85b9ada8c44d40593deaf82a4";><code>62e91bc</code></a> docs: remove n_ Node.js < 6 REPL note from README (<a href="https://redirect.github.com/lodash/lodash/issues/6165";>#6165</a>)</li> <li><a href="https://github.com/lodash/lodash/commit/59be2de61f8aa9461c7856533b51d31b7d8babc4";><code>59be2de</code></a> release(minor): bump to 4.18.0 (<a href="https://redirect.github.com/lodash/lodash/issues/6161";>#6161</a>)</li> <li><a href="https://github.com/lodash/lodash/commit/af634573030f979194871da7c68f79420992f53d";><code>af63457</code></a> fix: broken tests for _.template 879aaa9</li> <li><a href="https://github.com/lodash/lodash/commit/1073a7693e1727e0cf3641e5f71f75ddcf8de7c0";><code>1073a76</code></a> fix: linting issues</li> <li><a href="https://github.com/lodash/lodash/commit/879aaa93132d78c2f8d20c60279da9f8b21576d6";><code>879aaa9</code></a> fix: validate imports keys in _.template</li> <li><a href="https://github.com/lodash/lodash/commit/fe8d32eda854377349a4f922ab7655c8e5df9a0b";><code>fe8d32e</code></a> fix: block prototype pollution in baseUnset via constructor/prototype traversal</li> <li><a href="https://github.com/lodash/lodash/commit/18ba0a32f42fd02117f096b032f89c984173462d";><code>18ba0a3</code></a> refactor(fromPairs): use baseAssignValue for consistent assignment (<a href="https://redirect.github.com/lodash/lodash/issues/6153";>#6153</a>)</li> <li><a href="https://github.com/lodash/lodash/commit/b8190803d48d60b8c80ad45d39125f32fa618cb2";><code>b819080</code></a> ci: add dist sync validation workflow (<a href="https://redirect.github.com/lodash/lodash/issues/6137";>#6137</a>)</li> <li>Additional commits viewable in <a href="https://github.com/lodash/lodash/compare/4.17.23...4.18.1";>compare view</a></li> </ul> </details> <br /> Updates `moment-timezone` from 0.6.0 to 0.6.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/moment/moment-timezone/releases";>moment-timezone's releases</a>.</em></p> <blockquote> <h2>Release 0.6.1</h2> <ul> <li>Updated data to IANA TZDB <code>2026a</code>. <a href="https://redirect.github.com/moment/moment-timezone/issues/1140";>#1140</a></li> </ul> <p><strong>NOTE:</strong> This release does <em>not</em> include recently-announced DST changes for British Columbia, Canada. Those changes will likely be in <code>2026b</code>.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/moment/moment-timezone/blob/develop/changelog.md";>moment-timezone's changelog</a>.</em></p> <blockquote> <h3><code>0.6.1</code> <em>2026-03-18</em></h3> <ul> <li>Updated data to IANA TZDB <code>2026a</code>. <a href="https://redirect.github.com/moment/moment-timezone/pull/1140";>#1140</a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/moment/moment-timezone/commit/13e724cb72093aa297f6e4a5acd69cbb4afd52a5";><code>13e724c</code></a> Build moment-timezone 0.6.1</li> <li><a href="https://github.com/moment/moment-timezone/commit/22070ffa805483afbd0080b706b630e8a1dad684";><code>22070ff</code></a> Bump version to 0.6.1</li> <li><a href="https://github.com/moment/moment-timezone/commit/b4ebddb72a322007ee8fe465509a05b75816e8a1";><code>b4ebddb</code></a> Merge pull request <a href="https://redirect.github.com/moment/moment-timezone/issues/1140";>#1140</a> from moment/automated/data-update</li> <li><a href="https://github.com/moment/moment-timezone/commit/cb47a65338c249718d4364fb0b38821e02196d37";><code>cb47a65</code></a> data: Add 2026a</li> <li><a href="https://github.com/moment/moment-timezone/commit/026466a994947f92004dad12efb8a4a28d3d35d7";><code>026466a</code></a> build(deps): bump lodash from 4.17.21 to 4.17.23 (<a href="https://redirect.github.com/moment/moment-timezone/issues/1137";>#1137</a>)</li> <li><a href="https://github.com/moment/moment-timezone/commit/6dc54138e70d57dffce12f71e1b800463e7a6fe2";><code>6dc5413</code></a> Update Antarctica guess tests for 2026</li> <li><a href="https://github.com/moment/moment-timezone/commit/0efed482fe458bb96695bf2856ed7862e4fe50cd";><code>0efed48</code></a> build(deps): bump js-yaml from 3.14.1 to 3.14.2 (<a href="https://redirect.github.com/moment/moment-timezone/issues/1136";>#1136</a>)</li> <li>See full diff in <a href="https://github.com/moment/moment-timezone/compare/0.6.0...0.6.1";>compare view</a></li> </ul> </details> <br /> Updates `react` from 19.2.4 to 19.2.5 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/facebook/react/releases";>react's releases</a>.</em></p> <blockquote> <h2>19.2.5 (April 8th, 2026)</h2> <h2>React Server Components</h2> <ul> <li>Add more cycle protections (<a href="https://redirect.github.com/facebook/react/pull/36236";>#36236</a> by <a href="https://github.com/eps1lon";><code>@eps1lon</code></a> and <a href="https://github.com/unstubbable";><code>@unstubbable</code></a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/facebook/react/commit/23f4f9f30da9e9af2108c18bb197bae75ab584ea";><code>23f4f9f</code></a> 19.2.5</li> <li>See full diff in <a href="https://github.com/facebook/react/commits/v19.2.5/packages/react";>compare view</a></li> </ul> </details> <br /> Updates `react-dom` from 19.2.4 to 19.2.5 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/facebook/react/releases";>react-dom's releases</a>.</em></p> <blockquote> <h2>19.2.5 (April 8th, 2026)</h2> <h2>React Server Components</h2> <ul> <li>Add more cycle protections (<a href="https://redirect.github.com/facebook/react/pull/36236";>#36236</a> by <a href="https://github.com/eps1lon";><code>@eps1lon</code></a> and <a href="https://github.com/unstubbable";><code>@unstubbable</code></a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/facebook/react/commit/23f4f9f30da9e9af2108c18bb197bae75ab584ea";><code>23f4f9f</code></a> 19.2.5</li> <li>See full diff in <a href="https://github.com/facebook/react/commits/v19.2.5/packages/react-dom";>compare view</a></li> </ul> </details> <br /> Updates `react-router-dom` from 7.13.1 to 7.14.0 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/remix-run/react-router/blob/main/packages/react-router-dom/CHANGELOG.md";>react-router-dom's changelog</a>.</em></p> <blockquote> <h2>7.14.0</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies: <ul> <li><code>[email protected]</code></li> </ul> </li> </ul> <h2>7.13.2</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies: <ul> <li><code>[email protected]</code></li> </ul> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/remix-run/react-router/commit/e31077b0c380d9764dbced4c753e9ff99387045d";><code>e31077b</code></a> chore: Update version for release (<a href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom/issues/14945";>#14945</a>)</li> <li><a href="https://github.com/remix-run/react-router/commit/6683e85a9d7d607a45a3f6374afcc598a474f602";><code>6683e85</code></a> chore: Update version for release (pre) (<a href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom/issues/14943";>#14943</a>)</li> <li><a href="https://github.com/remix-run/react-router/commit/aadb56fa532e0eaf7e7b91c1d88e1f325851eb04";><code>aadb56f</code></a> chore: Update version for release (<a href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom/issues/14908";>#14908</a>)</li> <li><a href="https://github.com/remix-run/react-router/commit/c68a9b35933fe5a3750ea8e52399d06f9aaecf77";><code>c68a9b3</code></a> chore: Update version for release (pre) (<a href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom/issues/14893";>#14893</a>)</li> <li>See full diff in <a href="https://github.com/remix-run/react-router/commits/[email protected]/packages/react-router-dom";>compare view</a></li> </ul> </details> <br /> Updates `swagger-ui-dist` from 5.32.0 to 5.32.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/swagger-api/swagger-ui/releases";>swagger-ui-dist's releases</a>.</em></p> <blockquote> <h2>v5.32.2</h2> <h2><a href="https://github.com/swagger-api/swagger-ui/compare/v5.32.1...v5.32.2";>5.32.2</a> (2026-04-07)</h2> <h3>Bug Fixes</h3> <ul> <li><strong>docker:</strong> bump libpng and zlib versions to fix CVE-2026-33416, CVE-2026-33636 and CVE-2026-22184 (<a href="https://redirect.github.com/swagger-api/swagger-ui/issues/10802";>#10802</a>) (<a href="https://github.com/swagger-api/swagger-ui/commit/c200a69b634343b663f4cb8908678cd332aa8e64";>c200a69</a>)</li> </ul> <h2>v5.32.1</h2> <h2><a href="https://github.com/swagger-api/swagger-ui/compare/v5.32.0...v5.32.1";>5.32.1</a> (2026-03-17)</h2> <h3>Bug Fixes</h3> <ul> <li>invalidate models components cache based on location (<a href="https://redirect.github.com/swagger-api/swagger-ui/issues/10764";>#10764</a>) (<a href="https://github.com/swagger-api/swagger-ui/commit/fb78dd2a497307529fff3d368936519d050b5946";>fb78dd2</a>)</li> <li><strong>style:</strong> use container queries for responsive design (<a href="https://redirect.github.com/swagger-api/swagger-ui/issues/10763";>#10763</a>) (<a href="https://github.com/swagger-api/swagger-ui/commit/e35000e0b353d5bd756d142fbbc2337adab7fb31";>e35000e</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/swagger-api/swagger-ui/commit/d02a2df106961d8cb6bceb6b4b3aa8d9f6faaf4a";><code>d02a2df</code></a> chore(release): cut the 5.32.2 release</li> <li><a href="https://github.com/swagger-api/swagger-ui/commit/c200a69b634343b663f4cb8908678cd332aa8e64";><code>c200a69</code></a> fix(docker): bump libpng and zlib versions to fix CVE-2026-33416, CVE-2026-33...</li> <li><a href="https://github.com/swagger-api/swagger-ui/commit/eff82c1fd004ba1d061f9c41f5a980339fb889bf";><code>eff82c1</code></a> chore(deps): bump lodash from 4.17.23 to 4.18.1 (<a href="https://redirect.github.com/swagger-api/swagger-ui/issues/10801";>#10801</a>)</li> <li><a href="https://github.com/swagger-api/swagger-ui/commit/860ade2c7f8e50a838228bece0e18d93d23198b0";><code>860ade2</code></a> chore(deps): bump defu from 6.1.4 to 6.1.6 (<a href="https://redirect.github.com/swagger-api/swagger-ui/issues/10797";>#10797</a>)</li> <li><a href="https://github.com/swagger-api/swagger-ui/commit/749ec5097273aeced4e71078867d5338b63ee65c";><code>749ec50</code></a> chore(deps): bump dependabot/fetch-metadata from 2.5.0 to 3.0.0 (<a href="https://redirect.github.com/swagger-api/swagger-ui/issues/10777";>#10777</a>)</li> <li><a href="https://github.com/swagger-api/swagger-ui/commit/b339e559ac986506d41728054ec8d07cf8c1046f";><code>b339e55</code></a> chore(deps): bump node-forge from 1.3.3 to 1.4.0 (<a href="https://redirect.github.com/swagger-api/swagger-ui/issues/10781";>#10781</a>)</li> <li><a href="https://github.com/swagger-api/swagger-ui/commit/692e0ace72378d1e62b041b613fcc967251ddbb2";><code>692e0ac</code></a> chore(deps-dev): bump serialize-javascript from 7.0.4 to 7.0.5 (<a href="https://redirect.github.com/swagger-api/swagger-ui/issues/10782";>#10782</a>)</li> <li><a href="https://github.com/swagger-api/swagger-ui/commit/14cc424da6c4eb716a832462b172e67af4df69c4";><code>14cc424</code></a> chore(deps-dev): bump brace-expansion from 1.1.12 to 1.1.13 (<a href="https://redirect.github.com/swagger-api/swagger-ui/issues/10783";>#10783</a>)</li> <li><a href="https://github.com/swagger-api/swagger-ui/commit/076c188477fb20e46da7bd2e43c13bb59f71e2ea";><code>076c188</code></a> chore(deps-dev): bump handlebars from 4.7.8 to 4.7.9 (<a href="https://redirect.github.com/swagger-api/swagger-ui/issues/10778";>#10778</a>)</li> <li><a href="https://github.com/swagger-api/swagger-ui/commit/f251747350848eae8da0b39bb84ec41b41bb368a";><code>f251747</code></a> chore(deps-dev): bump flatted from 3.3.3 to 3.4.2 (<a href="https://redirect.github.com/swagger-api/swagger-ui/issues/10774";>#10774</a>)</li> <li>Additional commits viewable in <a href="https://github.com/swagger-api/swagger-ui/compare/v5.32.0...v5.32.2";>compare view</a></li> </ul> </details> <br /> Updates `type-fest` from 5.4.4 to 5.5.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sindresorhus/type-fest/releases";>type-fest's releases</a>.</em></p> <blockquote> <h2>v5.5.0</h2> <h3>New types</h3> <ul> <li><a href="https://github.com/sindresorhus/type-fest/blob/main/source/optional.d.ts";><code>Optional</code></a> (<a href="https://redirect.github.com/sindresorhus/type-fest/issues/1374";>#1374</a>) 9b52980</li> <li><a href="https://github.com/sindresorhus/type-fest/blob/main/source/exclude-exactly.d.ts";><code>ExcludeExactly</code></a> (<a href="https://redirect.github.com/sindresorhus/type-fest/issues/1349";>#1349</a>) 0f923d0</li> <li><a href="https://github.com/sindresorhus/type-fest/blob/main/source/array-length.d.ts";><code>ArrayLength</code></a> (<a href="https://redirect.github.com/sindresorhus/type-fest/issues/1344";>#1344</a>) 59bd056</li> <li><a href="https://github.com/sindresorhus/type-fest/blob/main/source/union-member.d.ts";><code>UnionMember</code></a> (<a href="https://redirect.github.com/sindresorhus/type-fest/issues/1368";>#1368</a>) 878b6df</li> <li><a href="https://github.com/sindresorhus/type-fest/blob/main/source/some-extend.d.ts";><code>SomeExtend</code></a> (<a href="https://redirect.github.com/sindresorhus/type-fest/issues/1380";>#1380</a>) bbce298</li> <li><a href="https://github.com/sindresorhus/type-fest/blob/main/source/and-all.d.ts";><code>AndAll</code></a> (<a href="https://redirect.github.com/sindresorhus/type-fest/issues/1383";>#1383</a>) 94aa3f8</li> <li><a href="https://github.com/sindresorhus/type-fest/blob/main/source/or-all.d.ts";><code>OrAll</code></a> (<a href="https://redirect.github.com/sindresorhus/type-fest/issues/1378";>#1378</a>) 4c42d89</li> </ul> <h3>Improvements</h3> <ul> <li>Add function parameter constraint examples to numeric comparison types (<a href="https://redirect.github.com/sindresorhus/type-fest/issues/1357";>#1357</a>) 24be93d</li> <li><code>UnionToTuple</code>: Fix behavior when a union member is a supertype of another (<a href="https://redirect.github.com/sindresorhus/type-fest/issues/1349";>#1349</a>) 0f923d0</li> <li><code>ConditionalPickDeep</code>: Fix returning <code>{}</code> instead of <code>never</code> when no keys match (<a href="https://redirect.github.com/sindresorhus/type-fest/issues/1360";>#1360</a>) 6af847a</li> <li><code>ConditionalPick</code>: Fix returning <code>{}</code> instead of <code>never</code> when no keys match (<a href="https://redirect.github.com/sindresorhus/type-fest/issues/1359";>#1359</a>) 3995003</li> <li><code>GreaterThan</code> / <code>LessThan</code> / <code>GreaterThanOrEqual</code> / <code>LessThanOrEqual</code>: Fix behavior with the <code>number</code> type (<a href="https://redirect.github.com/sindresorhus/type-fest/issues/1363";>#1363</a>) cfea505</li> </ul> <hr /> <p><a href="https://github.com/sindresorhus/type-fest/compare/v5.4.4...v5.5.0";>https://github.com/sindresorhus/type-fest/compare/v5.4.4...v5.5.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sindresorhus/type-fest/commit/0329b2b2dc568df61ed6bfbbfa0f513b060a02bb";><code>0329b2b</code></a> 5.5.0</li> <li><a href="https://github.com/sindresorhus/type-fest/commit/0f923d0f78dadf6f3a04f0aaba3aaf371fb4108b";><code>0f923d0</code></a> <code>UnionToTuple</code>: Fix behavior when a union member is a supertype of another; A...</li> <li><a href="https://github.com/sindresorhus/type-fest/commit/94aa3f8c3d46a8ef6002e3b41cc00a77a52909a7";><code>94aa3f8</code></a> Add <code>AndAll</code> type (<a href="https://redirect.github.com/sindresorhus/type-fest/issues/1383";>#1383</a>)</li> <li><a href="https://github.com/sindresorhus/type-fest/commit/4c42d891fa566d6b507f81e3fa869d6a0cd2f95f";><code>4c42d89</code></a> Add <code>OrAll</code> type (<a href="https://redirect.github.com/sindresorhus/type-fest/issues/1378";>#1378</a>)</li> <li><a href="https://github.com/sindresorhus/type-fest/commit/878b6df039347ae69c9c2029bcae6b639ede88a0";><code>878b6df</code></a> Add <code>UnionMember</code> type (<a href="https://redirect.github.com/sindresorhus/type-fest/issues/1368";>#1368</a>)</li> <li><a href="https://github.com/sindresorhus/type-fest/commit/bbce2985161c34c4544b34be7f41e038311c681c";><code>bbce298</code></a> Add <code>SomeExtend</code> type (<a href="https://redirect.github.com/sindresorhus/type-fest/issues/1380";>#1380</a>)</li> <li><a href="https://github.com/sindresorhus/type-fest/commit/d3302ce03a9d42edcb79332421dad942a95c67c9";><code>d3302ce</code></a> Validate twoslash types against different verbosity levels (<a href="https://redirect.github.com/sindresorhus/type-fest/issues/1364";>#1364</a>)</li> <li><a href="https://github.com/sindresorhus/type-fest/commit/9b52980b0a46f96b40adae15a711b89f83c4e100";><code>9b52980</code></a> Add <code>Optional</code> type (<a href="https://redirect.github.com/sindresorhus/type-fest/issues/1374";>#1374</a>)</li> <li><a href="https://github.com/sindresorhus/type-fest/commit/b0a606b5dd5cac7b1d69f3643397085ac818effb";><code>b0a606b</code></a> <code>Merge</code>: Improve documentation (<a href="https://redirect.github.com/sindresorhus/type-fest/issues/1375";>#1375</a>)</li> <li><a href="https://github.com/sindresorhus/type-fest/commit/76bd9cd7bf8fbaba9c1479b5df5a0aac20dca277";><code>76bd9cd</code></a> Fix typos</li> <li>Additional commits viewable in <a href="https://github.com/sindresorhus/type-fest/compare/v5.4.4...v5.5.0";>compare view</a></li> </ul> </details> <br /> Updates `validator` from 13.15.26 to 13.15.35 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/validatorjs/validator.js/releases";>validator's releases</a>.</em></p> <blockquote> <h2>13.15.35</h2> <h3>Fixes, New Locales and Enhancements</h3> <ul> <li><a href="https://redirect.github.com/validatorjs/validator.js/pull/2663";>#2663</a> <code>isISO31661Alpha2</code>/<code>isISO31661Alpha3</code>: add support for Kosovo (<code>XK</code> / <code>XXK</code>) <a href="https://github.com/johanpoirier-d4";><code>@johanpoirier-d4</code></a></li> <li><a href="https://redirect.github.com/validatorjs/validator.js/pull/2661";>#2661</a> <code>isHexColor</code>: ignore non-object options <a href="https://github.com/yuna0831";><code>@yuna0831</code></a></li> <li><code>isTaxID</code> <ul> <li><a href="https://redirect.github.com/validatorjs/validator.js/pull/2644";>#2644</a> improve <code>pt-BR</code> locale by adding support for alphanumeric CNPJ format <a href="https://github.com/easedu";><code>@easedu</code></a></li> <li><a href="https://redirect.github.com/validatorjs/validator.js/pull/2675";>#2675</a> improve <code>pt-BR</code> locale by adding support for formatted CPF values <a href="https://github.com/easedu";><code>@easedu</code></a></li> </ul> </li> <li><a href="https://redirect.github.com/validatorjs/validator.js/pull/2643";>#2643</a> <code>isPassportNumber</code>: improve <code>MX</code> locale <a href="https://github.com/jesroffrouk";><code>@jesroffrouk</code></a></li> <li><a href="https://redirect.github.com/validatorjs/validator.js/pull/2676";>#2676</a> <code>isMobilePhone</code>: add <code>fr-DJ</code> locale <a href="https://github.com/Kartikeya-guthub";><code>@Kartikeya-guthub</code></a></li> <li><a href="https://redirect.github.com/validatorjs/validator.js/pull/2682";>#2682</a> <code>isPostalCode</code>: add <code>MC</code> locale <a href="https://github.com/moogblob";><code>@moogblob</code></a></li> <li><a href="https://redirect.github.com/validatorjs/validator.js/pull/2690";>#2690</a> <code>isJSON</code>: allow any valid JSON value to pass <a href="https://github.com/relu91";><code>@relu91</code></a></li> <li><a href="https://redirect.github.com/validatorjs/validator.js/pull/2693";>#2693</a> <code>isSlug</code>: restrict allowed characters to valid slug charset <a href="https://github.com/Shrawak";><code>@Shrawak</code></a></li> <li><strong>Doc fixes and others:</strong> <ul> <li><a href="https://redirect.github.com/validatorjs/validator.js/pull/2658";>#2658</a> <a href="https://github.com/Manaskarthik28";><code>@Manaskarthik28</code></a></li> <li><a href="https://redirect.github.com/validatorjs/validator.js/pull/2592";>#2592</a> <a href="https://github.com/noritaka1166";><code>@noritaka1166</code></a></li> <li><a href="https://redirect.github.com/validatorjs/validator.js/pull/2591";>#2591</a> <a href="https://github.com/noritaka1166";><code>@noritaka1166</code></a></li> </ul> </li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/Manaskarthik28";><code>@Manaskarthik28</code></a> made their first contribution in <a href="https://redirect.github.com/validatorjs/validator.js/pull/2658";>validatorjs/validator.js#2658</a></li> <li><a href="https://github.com/johanpoirier-d4";><code>@johanpoirier-d4</code></a> made their first contribution in <a href="https://redirect.github.com/validatorjs/validator.js/pull/2663";>validatorjs/validator.js#2663</a></li> <li><a href="https://github.com/yuna0831";><code>@yuna0831</code></a> made their first contribution in <a href="https://redirect.github.com/validatorjs/validator.js/pull/2661";>validatorjs/validator.js#2661</a></li> <li><a href="https://github.com/easedu";><code>@easedu</code></a> made their first contribution in <a href="https://redirect.github.com/validatorjs/validator.js/pull/2644";>validatorjs/validator.js#2644</a></li> <li><a href="https://github.com/jesroffrouk";><code>@jesroffrouk</code></a> made their first contribution in <a href="https://redirect.github.com/validatorjs/validator.js/pull/2643";>validatorjs/validator.js#2643</a></li> <li><a href="https://github.com/Kartikeya-guthub";><code>@Kartikeya-guthub</code></a> made their first contribution in <a href="https://redirect.github.com/validatorjs/validator.js/pull/2676";>validatorjs/validator.js#2676</a></li> <li><a href="https://github.com/moogblob";><code>@moogblob</code></a> made their first contribution in <a href="https://redirect.github.com/validatorjs/validator.js/pull/2682";>validatorjs/validator.js#2682</a></li> <li><a href="https://github.com/noritaka1166";><code>@noritaka1166</code></a> made their first contribution in <a href="https://redirect.github.com/validatorjs/validator.js/pull/2592";>validatorjs/validator.js#2592</a></li> <li><a href="https://github.com/relu91";><code>@relu91</code></a> made their first contribution in <a href="https://redirect.github.com/validatorjs/validator.js/pull/2690";>validatorjs/validator.js#2690</a></li> <li><a href="https://github.com/Shrawak";><code>@Shrawak</code></a> made their first contribution in <a href="https://redirect.github.com/validatorjs/validator.js/pull/2693";>validatorjs/validator.js#2693</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/validatorjs/validator.js/compare/13.15.26...13.15.35";>https://github.com/validatorjs/validator.js/compare/13.15.26...13.15.35</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/validatorjs/validator.js/blob/master/CHANGELOG.md";>validator's changelog</a>.</em></p> <blockquote> <h1>13.15.35</h1> <h3>Fixes, New Locales and Enhancements</h3> <ul> <li><a href="https://redirect.github.com/validatorjs/validator.js/pull/2663";>#2663</a> <code>isISO31661Alpha2</code>/<code>isISO31661Alpha3</code>: add support for Kosovo (<code>XK</code> / <code>XXK</code>) <a href="https://github.com/johanpoirier-d4";><code>@johanpoirier-d4</code></a></li> <li><a href="https://redirect.github.com/validatorjs/validator.js/pull/2661";>#2661</a> <code>isHexColor</code>: ignore non-object options <a href="https://github.com/yuna0831";><code>@yuna0831</code></a></li> <li><code>isTaxID</code> <ul> <li><a href="https://redirect.github.com/validatorjs/validator.js/pull/2644";>#2644</a> improve <code>pt-BR</code> locale by adding support for alphanumeric CNPJ format <a href="https://github.com/easedu";><code>@easedu</code></a></li> <li><a href="https://redirect.github.com/validatorjs/validator.js/pull/2675";>#2675</a> improve <code>pt-BR</code> locale by adding support for formatted CPF values <a href="https://github.com/easedu";><code>@easedu</code></a></li> </ul> </li> <li><a href="https://redirect.github.com/validatorjs/validator.js/pull/2643";>#2643</a> <code>isPassportNumber</code>: improve <code>MX</code> locale <a href="https://github.com/jesroffrouk";><code>@jesroffrouk</code></a></li> <li><a href="https://redirect.github.com/validatorjs/validator.js/pull/2676";>#2676</a> <code>isMobilePhone</code>: add <code>fr-DJ</code> locale <a href="https://github.com/Kartikeya-guthub";><code>@Kartikeya-guthub</code></a></li> <li><a href="https://redirect.github.com/validatorjs/validator.js/pull/2682";>#2682</a> <code>isPostalCode</code>: add <code>MC</code> locale <a href="https://github.com/moogblob";><code>@moogblob</code></a></li> <li><a href="https://redirect.github.com/validatorjs/validator.js/pull/2690";>#2690</a> <code>isJSON</code>: allow any valid JSON value to pass <a href="https://github.com/relu91";><code>@relu91</code></a></li> <li><a href="https://redirect.github.com/validatorjs/validator.js/pull/2693";>#2693</a> <code>isSlug</code>: restrict allowed characters to valid slug charset <a href="https://github.com/Shrawak";><code>@Shrawak</code></a></li> <li><strong>Doc fixes and others:</strong> <ul> <li><a href="https://redirect.github.com/validatorjs/validator.js/pull/2658";>#2658</a> <a href="https://github.com/Manaskarthik28";><code>@Manaskarthik28</code></a></li> <li><a href="https://redirect.github.com/validatorjs/validator.js/pull/2592";>#2592</a> <a href="https://github.com/noritaka1166";><code>@noritaka1166</code></a></li> <li><a href="https://redirect.github.com/validatorjs/validator.js/pull/2591";>#2591</a> <a href="https://github.com/noritaka1166";><code>@noritaka1166</code></a></li> </ul> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/validatorjs/validator.js/commit/7a8079709cd4cb27b2a1846e6f6508d68c9d928f";><code>7a80797</code></a> maintenance: 2604 release (<a href="https://redirect.github.com/validatorjs/validator.js/issues/2695";>#2695</a>)</li> <li><a href="https://github.com/validatorjs/validator.js/commit/941db7fac5263cc7e0df0eba37253678f92989b0";><code>941db7f</code></a> fix(isSlug): restrict allowed characters to valid slug charset (<a href="https://redirect.github.com/validatorjs/validator.js/issues/2693";>#2693</a>)</li> <li><a href="https://github.com/validatorjs/validator.js/commit/2758f7029798df0361ace21143e7169eeb22df88";><code>2758f70</code></a> chore: fix typo in comment (<a href="https://redirect.github.com/validatorjs/validator.js/issues/2591";>#2591</a>)</li> <li><a href="https://github.com/validatorjs/validator.js/commit/fcfbff59f754b2fe81b4f91560a33455236a7f01";><code>fcfbff5</code></a> feat(isJson): allow any valid JSON value to pass (<a href="https://redirect.github.com/validatorjs/validator.js/issues/2690";>#2690</a>)</li> <li><a href="https://github.com/validatorjs/validator.js/commit/f06caee798c0c70d8f1774426a03c1d05ed0bd07";><code>f06caee</code></a> refactor: replace if-then-else flow by a single return statement (<a href="https://redirect.github.com/validatorjs/validator.js/issues/2592";>#2592</a>)</li> <li><a href="https://github.com/validatorjs/validator.js/commit/9fa1e3a44a3fb371bc91cf8bb7e127ee4e049331";><code>9fa1e3a</code></a> feat(isPostalCode): Add postal code for Monaco (<a href="https://redirect.github.com/validatorjs/validator.js/issues/2682";>#2682</a>)</li> <li><a href="https://github.com/validatorjs/validator.js/commit/b1aea75a5e64929eab32d9e83e957b7f5660e9bd";><code>b1aea75</code></a> feat(isMobilePhone): add Djibouti (fr-DJ) mobile phone validation (<a href="https://redirect.github.com/validatorjs/validator.js/issues/2676";>#2676</a>)</li> <li><a href="https://github.com/validatorjs/validator.js/commit/f715cddd592169a93cce1ac04d33bfb47ec53048";><code>f715cdd</code></a> fix(isPassportNumber): improve <code>MX</code> locale (<a href="https://redirect.github.com/validatorjs/validator.js/issues/2643";>#2643</a>)</li> <li><a href="https://github.com/validatorjs/validator.js/commit/e8c6914f72f8a176ecffe034b8324265e8b4d3fe";><code>e8c6914</code></a> fix(isTaxID): add formatted CPF support and additional test cases for pt-BR l...</li> <li><a href="https://github.com/validatorjs/validator.js/commit/90b0a9a40bdce395f74e43f8b7158c992297e71e";><code>90b0a9a</code></a> fix(isTaxID): improve <code>pt-BR</code> locale by adding support for alphanumeric CNPJ ...</li> <li>Additional commits viewable in <a href="https://github.com/validatorjs/validator.js/compare/13.15.26...13.15.35";>compare view</a></li> </ul> </details> <br /> Updates `@babel/preset-env` from 7.29.0 to 7.29.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/babel/babel/releases";><code>@babel/preset-env</code>'s releases</a>.</em></p> <blockquote> <h2>v7.29.2 (2026-03-16)</h2> <h4>:eyeglasses: Spec Compliance</h4> <ul> <li><code>babel-parser</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17840";>#17840</a> [7.x backport] async x => {} must be in leading pos (<a href="https://github.com/JLHwung";><code>@JLHwung</code></a>)</li> </ul> </li> </ul> <h4>:bug: Bug Fix</h4> <ul> <li><code>babel-helpers</code>, <code>babel-plugin-transform-async-generator-functions</code>, <code>babel-preset-env</code>, <code>babel-runtime-corejs3</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17805";>#17805</a> [7.x backport] fix: Properly handle await in finally (<a href="https://github.com/liuxingbaoyu";><code>@liuxingbaoyu</code></a>)</li> </ul> </li> <li><code>babel-preset-env</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17789";>#17789</a> [7.x backport] preset-env include/exclude should accept bugfix plugins (<a href="https://github.com/JLHwung";><code>@JLHwung</code></a>)</li> </ul> </li> </ul> <h4>:house: Internal</h4> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17813";>#17813</a> chore: update eslint peer deps (<a href="https://github.com/JLHwung";><code>@JLHwung</code></a>)</li> <... _Description has been truncated_ -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
