Skip to content

Maintenance: dependency and security updates (no release) - #51

Merged
BrainInBlack merged 6 commits into
mainfrom
develop
Oct 21, 2026
Merged

BrainInBlack merged 6 commits into
mainfrom
develop

Conversation

@BrainInBlack

Copy link
Copy Markdown
Owner

Maintenance merge of develop into main. No version bump, no release; stays on 1.4.0.

Brings main up to date with the dependency updates already on develop, which resolves
the open Dependabot alerts for vite (GHSA-587h-7wmj-h5pm, GHSA-r825-w8mm-5pxw,
GHSA-698v-4r3x-3vcv; fixed in vite >= 8.3.3). These only affect the dev server, never the
built output.

Changes

Supersedes #50.

dependabot Bot and others added 6 commits October 15, 2026 12:53
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 7.0.0 to 7.1.0.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@8207627...949feb2)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps the dev-dependencies group with 3 updates: [happy-dom](https://github.com/capricorn86/happy-dom), [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) and [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest).


Updates `happy-dom` from 20.14.5 to 21.0.1
- [Release notes](https://github.com/capricorn86/happy-dom/releases)
- [Commits](capricorn86/happy-dom@v20.14.5...v21.0.1)

Updates `vite` from 8.3.2 to 8.3.4
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.3.4/packages/vite)

Updates `vitest` from 5.0.3 to 5.0.4
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.4/packages/vitest)

---
updated-dependencies:
- dependency-name: happy-dom
  dependency-version: 21.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-dependencies
- dependency-name: vite
  dependency-version: 8.3.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: vitest
  dependency-version: 5.0.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [lucide-static](https://github.com/lucide-icons/lucide) from 1.52.0 to 1.55.0.
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](lucide-icons/lucide@1.52.0...1.55.0)

---
updated-dependencies:
- dependency-name: lucide-static
  dependency-version: 1.55.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
…velop/actions/setup-node-7.1.0

ci: bump actions/setup-node from 7.0.0 to 7.1.0
…lop/dev-dependencies-69bba1256f

deps: bump the dev-dependencies group with 3 updates
…lop/lucide-static-1.55.0

deps: bump lucide-static from 1.52.0 to 1.55.0
@BrainInBlack
BrainInBlack merged commit 0080d54 into main Oct 21, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant