dependabot[bot] opened a new pull request, #65022: URL: https://github.com/apache/airflow/pull/65022
Bumps the legacy-ui-package-updates group with 17 updates in the /airflow/www directory: | Package | From | To | | --- | --- | --- | | [axios](https://github.com/axios/axios) | `1.13.6` | `1.14.0` | | [lodash](https://github.com/lodash/lodash) | `4.17.23` | `4.18.1` | | [moment-timezone](https://github.com/moment/moment-timezone) | `0.6.0` | `0.6.1` | | [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `7.13.1` | `7.14.0` | | [swagger-ui-dist](https://github.com/swagger-api/swagger-ui) | `5.32.0` | `5.32.1` | | [type-fest](https://github.com/sindresorhus/type-fest) | `5.4.4` | `5.5.0` | | [validator](https://github.com/validatorjs/validator.js) | `13.15.26` | `13.15.35` | | [@babel/preset-env](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-env) | `7.29.0` | `7.29.2` | | [@types/color](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/color) | `4.2.0` | `4.2.1` | | [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.56.1` | `8.58.0` | | [babel-jest](https://github.com/jestjs/jest/tree/HEAD/packages/babel-jest) | `30.2.0` | `30.3.0` | | [babel-loader](https://github.com/babel/babel-loader) | `10.0.0` | `10.1.1` | | [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) | `30.2.0` | `30.3.0` | | [jest-environment-jsdom](https://github.com/jestjs/jest/tree/HEAD/packages/jest-environment-jsdom) | `30.2.0` | `30.3.0` | | [mini-css-extract-plugin](https://github.com/webpack/mini-css-extract-plugin) | `2.10.0` | `2.10.2` | | [stylelint](https://github.com/stylelint/stylelint) | `17.4.0` | `17.6.0` | | [terser-webpack-plugin](https://github.com/webpack/terser-webpack-plugin) | `5.3.17` | `5.4.0` | Updates `axios` from 1.13.6 to 1.14.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/axios/axios/releases";>axios's releases</a>.</em></p> <blockquote> <h2>v1.14.0</h2> <p>This release focuses on compatibility fixes, adapter stability improvements, and test/tooling modernisation.</p> <h2>⚠️ Important Changes</h2> <ul> <li><strong>Breaking Changes:</strong> None identified in this release.</li> <li><strong>Action Required:</strong> If you rely on env-based proxy behaviour or CJS resolution edge-cases, validate your integration after upgrade (notably <code>proxy-from-env</code> v2 alignment and <code>main</code> entry compatibility fix).</li> </ul> <h2>🚀 New Features</h2> <ul> <li><strong>Runtime Features:</strong> No new end-user features were introduced in this release.</li> <li><strong>Test Coverage Expansion:</strong> Added broader smoke/module test coverage for CJS and ESM package usage. (<a href="https://redirect.github.com/axios/axios/pull/7510";>#7510</a>)</li> </ul> <h2>🐛 Bug Fixes</h2> <ul> <li><strong>Headers:</strong> Trim trailing CRLF in normalised header values. (<a href="https://redirect.github.com/axios/axios/pull/7456";>#7456</a>)</li> <li><strong>HTTP/2:</strong> Close detached HTTP/2 sessions on timeout to avoid lingering sessions. (<a href="https://redirect.github.com/axios/axios/pull/7457";>#7457</a>)</li> <li><strong>Fetch Adapter:</strong> Cancel <code>ReadableStream</code> created during request-stream capability probing to prevent async resource leaks. (<a href="https://redirect.github.com/axios/axios/pull/7515";>#7515</a>)</li> <li><strong>Proxy Handling:</strong> Fixed env proxy behavior with <code>proxy-from-env</code> v2 usage. (<a href="https://redirect.github.com/axios/axios/pull/7499";>#7499</a>)</li> <li><strong>CommonJS Compatibility:</strong> Fixed package <code>main</code> entry regression affecting CJS consumers. (<a href="https://redirect.github.com/axios/axios/pull/7532";>#7532</a>)</li> </ul> <h2>🔧 Maintenance & Chores</h2> <ul> <li><strong>Security/Dependencies:</strong> Updated <code>formidable</code> and refreshed package set to newer versions. (<a href="https://redirect.github.com/axios/axios/pull/7533";>#7533</a>, <a href="https://redirect.github.com/axios/axios/pull/10556";>#10556</a>)</li> <li><strong>Tooling:</strong> Continued migration to Vitest and modernised CI/test harnesses. (<a href="https://redirect.github.com/axios/axios/pull/7484";>#7484</a>, <a href="https://redirect.github.com/axios/axios/pull/7489";>#7489</a>, <a href="https://redirect.github.com/axios/axios/pull/7498";>#7498</a>)</li> <li><strong>Build/Lint Stack:</strong> Rollup, ESLint, TypeScript, and related dev-dependency updates. (<a href="https://redirect.github.com/axios/axios/pull/7508";>#7508</a>, <a href="https://redirect.github.com/axios/axios/pull/7509";>#7509</a>, <a href="https://redirect.github.com/axios/axios/pull/7522";>#7522</a>)</li> <li><strong>Documentation:</strong> Clarified JSON parsing and adapter-related docs/comments. (<a href="https://redirect.github.com/axios/axios/pull/7398";>#7398</a>, <a href="https://redirect.github.com/axios/axios/pull/7460";>#7460</a>, <a href="https://redirect.github.com/axios/axios/pull/7478";>#7478</a>)</li> </ul> <h2>🌟 New Contributors</h2> <p>We are thrilled to welcome our new contributors. Thank you for helping improve Axios:</p> <ul> <li><a href="https://github.com/aviu16";><code>@aviu16</code></a> (<a href="https://redirect.github.com/axios/axios/pull/7456";>#7456</a>)</li> <li><a href="https://github.com/NETIZEN-11";><code>@NETIZEN-11</code></a> (<a href="https://redirect.github.com/axios/axios/pull/7460";>#7460</a>)</li> <li><a href="https://github.com/fedotov";><code>@fedotov</code></a> (<a href="https://redirect.github.com/axios/axios/pull/7457";>#7457</a>)</li> <li><a href="https://github.com/nthbotast";><code>@nthbotast</code></a> (<a href="https://redirect.github.com/axios/axios/pull/7478";>#7478</a>)</li> <li><a href="https://github.com/veeceey";><code>@veeceey</code></a> (<a href="https://redirect.github.com/axios/axios/pull/7398";>#7398</a>)</li> <li><a href="https://github.com/penkzhou";><code>@penkzhou</code></a> (<a href="https://redirect.github.com/axios/axios/pull/7515";>#7515</a>)</li> </ul> <p><em>Full Changelog: <a href="https://github.com/axios/axios/compare/v1.13.6...v1.14.0";>v1.13.6...v1.14.0</a></em></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/axios/axios/commit/46bee3dea75ef53a8eae49f3b7487e6341de6074";><code>46bee3d</code></a> chore(release): prepare release 1.14.0 (<a href="https://redirect.github.com/axios/axios/issues/10563";>#10563</a>)</li> <li><a href="https://github.com/axios/axios/commit/518aff569043116c87ce78e3d83877d5251f2a16";><code>518aff5</code></a> chore: add AI Moderator workflow for spam detection (<a href="https://redirect.github.com/axios/axios/issues/10551";>#10551</a>)</li> <li><a href="https://github.com/axios/axios/commit/b7dfda3e7cf9e85f6063d90334318f82842b42d0";><code>b7dfda3</code></a> chore(sponsor): update sponsor block (<a href="https://redirect.github.com/axios/axios/issues/10557";>#10557</a>)</li> <li><a href="https://github.com/axios/axios/commit/9aa34d52918c13eaa445d884a24e9e20e71a7a93";><code>9aa34d5</code></a> fix: updated release flow to match the current flows (<a href="https://redirect.github.com/axios/axios/issues/10562";>#10562</a>)</li> <li><a href="https://github.com/axios/axios/commit/e9e5ebe483b3f0cecbb5a4c9fa95a316ea5d0645";><code>e9e5ebe</code></a> Update packages to latest version (<a href="https://redirect.github.com/axios/axios/issues/10556";>#10556</a>)</li> <li><a href="https://github.com/axios/axios/commit/4d8931ca8a92e53c5dcf02cf46d1016a10e60ec0";><code>4d8931c</code></a> fix: formidable dependency vulnerable to arbitrary (<a href="https://redirect.github.com/axios/axios/issues/7533";>#7533</a>)</li> <li><a href="https://github.com/axios/axios/commit/3a6f5c1ae1f9b58198e9f3109896a2c11d017c58";><code>3a6f5c1</code></a> chore(deps-dev): bump <code>@babel/preset-env</code> (<a href="https://redirect.github.com/axios/axios/issues/7531";>#7531</a>)</li> <li><a href="https://github.com/axios/axios/commit/bcfd2997dc93b56669dd03b29b83d8a868797937";><code>bcfd299</code></a> fix: bug axios breaks commonjs compatibility main entry (<a href="https://redirect.github.com/axios/axios/issues/7532";>#7532</a>)</li> <li><a href="https://github.com/axios/axios/commit/d6dcbfd53e9506d9c8c0b1fd09c4d960bea9b9f0";><code>d6dcbfd</code></a> fix: dependabot uses the correct labels (<a href="https://redirect.github.com/axios/axios/issues/7530";>#7530</a>)</li> <li><a href="https://github.com/axios/axios/commit/5dd7ba78b8960fb29e39b6918ee5cb9a2130f15c";><code>5dd7ba7</code></a> chore: upgrade to latest ts (<a href="https://redirect.github.com/axios/axios/issues/7522";>#7522</a>)</li> <li>Additional commits viewable in <a href="https://github.com/axios/axios/compare/v1.13.6...v1.14.0";>compare view</a></li> </ul> </details> <details> <summary>Install script changes</summary> <p>This version modifies <code>prepare</code> script that runs during installation. Review the package contents before updating.</p> </details> <br /> Updates `chakra-react-select` from 4.0.3 to 4.10.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/csandman/chakra-react-select/releases";>chakra-react-select's releases</a>.</em></p> <blockquote> <h2>4.10.1</h2> <h2>What's Changed</h2> <ul> <li>fix: Reduce selected menu option styles specificity by <a href="https://github.com/csandman";><code>@csandman</code></a> in <a href="https://redirect.github.com/csandman/chakra-react-select/pull/338";>csandman/chakra-react-select#338</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/csandman/chakra-react-select/compare/v4.10.0...v4.10.1";>https://github.com/csandman/chakra-react-select/compare/v4.10.0...v4.10.1</a></p> <h2>4.10.0</h2> <h2>What's Changed</h2> <ul> <li>fix: Switch peer dependencies to depend on <code>@chakra-ui/react</code> instead of sub-packages by <a href="https://github.com/csandman";><code>@csandman</code></a> in <a href="https://redirect.github.com/csandman/chakra-react-select/pull/336";>csandman/chakra-react-select#336</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/csandman/chakra-react-select/compare/v4.9.2...v4.10.0";>https://github.com/csandman/chakra-react-select/compare/v4.9.2...v4.10.0</a></p> <h2>4.9.2</h2> <h2>What's Changed</h2> <ul> <li>fix: Change package <code>type</code> back to default of <code>"commonjs"</code> by <a href="https://github.com/csandman";><code>@csandman</code></a> in <a href="https://redirect.github.com/csandman/chakra-react-select/pull/331";>csandman/chakra-react-select#331</a> <ul> <li>This was to fix <a href="https://redirect.github.com/csandman/chakra-react-select/issues/329";>#329</a>, which was being caused by Jest importing the wrong build of the package.</li> </ul> </li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/csandman/chakra-react-select/compare/v4.9.1...v4.9.2";>https://github.com/csandman/chakra-react-select/compare/v4.9.1...v4.9.2</a></p> <h2>4.9.1</h2> <h2>What's Changed</h2> <ul> <li>fix: Fix <code>react-select</code> core <code>Props</code> type export by <a href="https://github.com/csandman";><code>@csandman</code></a> in <a href="https://redirect.github.com/csandman/chakra-react-select/pull/324";>csandman/chakra-react-select#324</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/csandman/chakra-react-select/compare/v4.9.0...v4.9.1";>https://github.com/csandman/chakra-react-select/compare/v4.9.0...v4.9.1</a></p> <h2>4.9.0</h2> <h2>What's Changed</h2> <ul> <li>chore: Switch to tsup for building and update dependencies by <a href="https://github.com/csandman";><code>@csandman</code></a> in <a href="https://redirect.github.com/csandman/chakra-react-select/pull/298";>csandman/chakra-react-select#298</a> <ul> <li>This change should finally make this package fully support ESM, where as before it didn't really which was causing some issues. It should fix an issue with the ID prop not matching mentioned in <a href="https://redirect.github.com/csandman/chakra-react-select/issues/260";>#260</a>, without the need for a workaround. Check the <a href="https://redirect.github.com/csandman/chakra-react-select/pull/298";>PR description</a> for full details!</li> </ul> </li> </ul> <p>I tested this change in a few different environments with different module resolution setups but it's possible I missed a case. If it ends up not working for your particular setup, please open a <a href="https://github.com/csandman/chakra-react-select/issues/new?assignees=csandman&labels=Bug&projects=&template=bug_report.yml&title=%5BBUG%5D+";>bug report</a> with as much specific information as you can give me, such as:</p> <ul> <li>Chakra Package Versions</li> <li>React Version</li> <li>TypeScript or Vanilla</li> <li>Yarn or NPM (and which version of the package manager you're on)</li> <li>Your jsconfig/tsconfig setup</li> </ul> <p>I'm not likely to figure out what's going on if I can't replicate the environment locally, so the more information you can provide the better!</p> <p><strong>Full Changelog</strong>: <a href="https://github.com/csandman/chakra-react-select/compare/v4.8.0...v4.9.0";>https://github.com/csandman/chakra-react-select/compare/v4.8.0...v4.9.0</a></p> <h2>4.8.0</h2> <h2>What's Changed</h2> <ul> <li>chore: Update all dependencies by <a href="https://github.com/csandman";><code>@csandman</code></a> in <a href="https://redirect.github.com/csandman/chakra-react-select/pull/315";>csandman/chakra-react-select#315</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/csandman/chakra-react-select/commit/b49461f52213e8324a14f157a3f441d52567a736";><code>b49461f</code></a> 4.10.1</li> <li><a href="https://github.com/csandman/chakra-react-select/commit/2269b856b29c3f9144c16e19dc147a30bf94c33b";><code>2269b85</code></a> Merge pull request <a href="https://redirect.github.com/csandman/chakra-react-select/issues/338";>#338</a> from csandman/fix/selected-menu-option-styles</li> <li><a href="https://github.com/csandman/chakra-react-select/commit/61bfe641c67d5b3d3cd91e280b7829a3f7ca2204";><code>61bfe64</code></a> Generalize the dependency version of <code>react-select</code></li> <li><a href="https://github.com/csandman/chakra-react-select/commit/f80680161916fa03fdba48b65fd284e38cb77649";><code>f806801</code></a> Reduce selected menu option styles specificity</li> <li><a href="https://github.com/csandman/chakra-react-select/commit/9b9ddcc899f2ae207bf13f2f2d16ff4198bf7d19";><code>9b9ddcc</code></a> 4.10.0</li> <li><a href="https://github.com/csandman/chakra-react-select/commit/12d7cc63ff645b61629c388ad3093c37a08f5081";><code>12d7cc6</code></a> Merge pull request <a href="https://redirect.github.com/csandman/chakra-react-select/issues/336";>#336</a> from csandman/fix/switch-to-chakra-ui-react-imports</li> <li><a href="https://github.com/csandman/chakra-react-select/commit/f9822c4fb9f79e4cd9e6c99553b9700ae8a3ac24";><code>f9822c4</code></a> Remove CodeSandbox CI</li> <li><a href="https://github.com/csandman/chakra-react-select/commit/b495516eb142c536f91154c695802c213f130db1";><code>b495516</code></a> Update TSConfig once more</li> <li><a href="https://github.com/csandman/chakra-react-select/commit/cef98ceaeb55c39bee52dda6ba29e5c01a7e6fe3";><code>cef98ce</code></a> Switch to using the single package import approach for <code>@chakra-ui/react</code></li> <li><a href="https://github.com/csandman/chakra-react-select/commit/c68d4a72945e11cf682bb790250cf3ce17180b6f";><code>c68d4a7</code></a> 4.9.2</li> <li>Additional commits viewable in <a href="https://github.com/csandman/chakra-react-select/compare/v4.0.3...v4.10.1";>compare view</a></li> </ul> </details> <details> <summary>Install script changes</summary> <p>This version modifies <code>prepare</code> script that runs during installation. Review the package contents before updating.</p> </details> <br /> Updates `lodash` from 4.17.23 to 4.18.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/lodash/lodash/releases";>lodash's releases</a>.</em></p> <blockquote> <h2>4.18.1</h2> <h2>Bugs</h2> <p>Fixes a <code>ReferenceError</code> issue in <code>lodash</code> <code>lodash-es</code> <code>lodash-amd</code> and <code>lodash.template</code> when using the <code>template</code> and <code>fromPairs</code> functions from the modular builds. See <a href="https://redirect.github.com/lodash/lodash/issues/6167#issuecomment-4165269769";>lodash/lodash#6167</a></p> <p>These defects were related to how lodash distributions are built from the main branch using <a href="https://github.com/lodash-archive/lodash-cli";>https://github.com/lodash-archive/lodash-cli</a>. When internal dependencies change inside lodash functions, equivalent updates need to be made to a mapping in the lodash-cli. (hey, it was ahead of its time once upon a time!). We know this, but we missed it in the last release. It's the kind of thing that passes in CI, but fails bc the build is not the same thing you tested.</p> <p>There is no diff on main for this, but you can see the diffs for each of the npm packages on their respective branches:</p> <ul> <li><code>lodash</code>: <a href="https://github.com/lodash/lodash/compare/4.18.0-npm...4.18.1-npm";>https://github.com/lodash/lodash/compare/4.18.0-npm...4.18.1-npm</a></li> <li><code>lodash-es</code>: <a href="https://github.com/lodash/lodash/compare/4.18.0-es...4.18.1-es";>https://github.com/lodash/lodash/compare/4.18.0-es...4.18.1-es</a></li> <li><code>lodash-amd</code>: <a href="https://github.com/lodash/lodash/compare/4.18.0-amd...4.18.1-amd";>https://github.com/lodash/lodash/compare/4.18.0-amd...4.18.1-amd</a></li> <li><code>lodash.template</code><a href="https://github.com/lodash/lodash/compare/4.18.0-npm-packages...4.18.1-npm-packages";>https://github.com/lodash/lodash/compare/4.18.0-npm-packages...4.18.1-npm-packages</a></li> </ul> <h2>4.18.0</h2> <h2>v4.18.0</h2> <p><strong>Full Changelog</strong>: <a href="https://github.com/lodash/lodash/compare/4.17.23...4.18.0";>https://github.com/lodash/lodash/compare/4.17.23...4.18.0</a></p> <h3>Security</h3> <p><strong><code>_.unset</code> / <code>_.omit</code></strong>: Fixed prototype pollution via <code>constructor</code>/<code>prototype</code> path traversal (<a href="https://github.com/lodash/lodash/security/advisories/GHSA-f23m-r3pf-42rh";>GHSA-f23m-r3pf-42rh</a>, <a href="https://github.com/lodash/lodash/commit/fe8d32eda854377349a4f922ab7655c8e5df9a0b";>fe8d32e</a>). Previously, array-wrapped path segments and primitive roots could bypass the existing guards, allowing deletion of properties from built-in prototypes. Now <code>constructor</code> and <code>prototype</code> are blocked unconditionally as non-terminal path keys, matching <code>baseSet</code>. Calls that previously returned <code>true</code> and deleted the property now return <code>false</code> and leave the target untouched.</p> <p><strong><code>_.template</code></strong>: Fixed code injection via <code>imports</code> keys (<a href="https://github.com/lodash/lodash/security/advisories/GHSA-r5fr-rjxr-66jc";>GHSA-r5fr-rjxr-66jc</a>, CVE-2026-4800, <a href="https://github.com/lodash/lodash/commit/879aaa93132d78c2f8d20c60279da9f8b21576d6";>879aaa9</a>). Fixes an incomplete patch for CVE-2021-23337. The <code>variable</code> option was validated against <code>reForbiddenIdentifierChars</code> but <code>importsKeys</code> was left unguarded, allowing code injection via the same <code>Function()</code> constructor sink. <code>imports</code> keys containing forbidden identifier characters now throw <code>"Invalid imports option passed into _.template"</code>.</p> <h3>Docs</h3> <ul> <li>Add security notice for <code>_.template</code> in threat model and API docs (<a href="https://redirect.github.com/lodash/lodash/pull/6099";>#6099</a>)</li> <li>Document <code>lower > upper</code> behavior in <code>_.random</code> (<a href="https://redirect.github.com/lodash/lodash/pull/6115";>#6115</a>)</li> <li>Fix quotes in <code>_.compact</code> jsdoc (<a href="https://redirect.github.com/lodash/lodash/pull/6090";>#6090</a>)</li> </ul> <h3><code>lodash.*</code> modular packages</h3> <p><a href="https://redirect.github.com/lodash/lodash/pull/6157";>Diff</a></p> <p>We have also regenerated and published a select number of the <code>lodash.*</code> modular packages.</p> <p>These modular packages had fallen out of sync significantly from the minor/patch updates to lodash. Specifically, we have brought the following packages up to parity w/ the latest lodash release because they have had CVEs on them in the past:</p> <ul> <li><a href="https://www.npmjs.com/package/lodash.orderby";>lodash.orderby</a></li> <li><a href="https://www.npmjs.com/package/lodash.tonumber";>lodash.tonumber</a></li> <li><a href="https://www.npmjs.com/package/lodash.trim";>lodash.trim</a></li> <li><a href="https://www.npmjs.com/package/lodash.trimend";>lodash.trimend</a></li> <li><a href="https://www.npmjs.com/package/lodash.sortedindexby";>lodash.sortedindexby</a></li> <li><a href="https://www.npmjs.com/package/lodash.zipobjectdeep";>lodash.zipobjectdeep</a></li> <li><a href="https://www.npmjs.com/package/lodash.unset";>lodash.unset</a></li> <li><a href="https://www.npmjs.com/package/lodash.omit";>lodash.omit</a></li> <li><a href="https://www.npmjs.com/package/lodash.template";>lodash.template</a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/lodash/lodash/commit/cb0b9b9212521c08e3eafe7c8cb0af1b42b6649e";><code>cb0b9b9</code></a> release(patch): bump main to 4.18.1 (<a href="https://redirect.github.com/lodash/lodash/issues/6177";>#6177</a>)</li> <li><a href="https://github.com/lodash/lodash/commit/75535f57883b7225adb96de1cfc1cd4169cfcb51";><code>75535f5</code></a> chore: prune stale advisory refs (<a href="https://redirect.github.com/lodash/lodash/issues/6170";>#6170</a>)</li> <li><a href="https://github.com/lodash/lodash/commit/62e91bc6a39c98d85b9ada8c44d40593deaf82a4";><code>62e91bc</code></a> docs: remove n_ Node.js < 6 REPL note from README (<a href="https://redirect.github.com/lodash/lodash/issues/6165";>#6165</a>)</li> <li><a href="https://github.com/lodash/lodash/commit/59be2de61f8aa9461c7856533b51d31b7d8babc4";><code>59be2de</code></a> release(minor): bump to 4.18.0 (<a href="https://redirect.github.com/lodash/lodash/issues/6161";>#6161</a>)</li> <li><a href="https://github.com/lodash/lodash/commit/af634573030f979194871da7c68f79420992f53d";><code>af63457</code></a> fix: broken tests for _.template 879aaa9</li> <li><a href="https://github.com/lodash/lodash/commit/1073a7693e1727e0cf3641e5f71f75ddcf8de7c0";><code>1073a76</code></a> fix: linting issues</li> <li><a href="https://github.com/lodash/lodash/commit/879aaa93132d78c2f8d20c60279da9f8b21576d6";><code>879aaa9</code></a> fix: validate imports keys in _.template</li> <li><a href="https://github.com/lodash/lodash/commit/fe8d32eda854377349a4f922ab7655c8e5df9a0b";><code>fe8d32e</code></a> fix: block prototype pollution in baseUnset via constructor/prototype traversal</li> <li><a href="https://github.com/lodash/lodash/commit/18ba0a32f42fd02117f096b032f89c984173462d";><code>18ba0a3</code></a> refactor(fromPairs): use baseAssignValue for consistent assignment (<a href="https://redirect.github.com/lodash/lodash/issues/6153";>#6153</a>)</li> <li><a href="https://github.com/lodash/lodash/commit/b8190803d48d60b8c80ad45d39125f32fa618cb2";><code>b819080</code></a> ci: add dist sync validation workflow (<a href="https://redirect.github.com/lodash/lodash/issues/6137";>#6137</a>)</li> <li>Additional commits viewable in <a href="https://github.com/lodash/lodash/compare/4.17.23...4.18.1";>compare view</a></li> </ul> </details> <br /> Updates `moment-timezone` from 0.6.0 to 0.6.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/moment/moment-timezone/releases";>moment-timezone's releases</a>.</em></p> <blockquote> <h2>Release 0.6.1</h2> <ul> <li>Updated data to IANA TZDB <code>2026a</code>. <a href="https://redirect.github.com/moment/moment-timezone/issues/1140";>#1140</a></li> </ul> <p><strong>NOTE:</strong> This release does <em>not</em> include recently-announced DST changes for British Columbia, Canada. Those changes will likely be in <code>2026b</code>.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/moment/moment-timezone/blob/develop/changelog.md";>moment-timezone's changelog</a>.</em></p> <blockquote> <h3><code>0.6.1</code> <em>2026-03-18</em></h3> <ul> <li>Updated data to IANA TZDB <code>2026a</code>. <a href="https://redirect.github.com/moment/moment-timezone/pull/1140";>#1140</a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/moment/moment-timezone/commit/13e724cb72093aa297f6e4a5acd69cbb4afd52a5";><code>13e724c</code></a> Build moment-timezone 0.6.1</li> <li><a href="https://github.com/moment/moment-timezone/commit/22070ffa805483afbd0080b706b630e8a1dad684";><code>22070ff</code></a> Bump version to 0.6.1</li> <li><a href="https://github.com/moment/moment-timezone/commit/b4ebddb72a322007ee8fe465509a05b75816e8a1";><code>b4ebddb</code></a> Merge pull request <a href="https://redirect.github.com/moment/moment-timezone/issues/1140";>#1140</a> from moment/automated/data-update</li> <li><a href="https://github.com/moment/moment-timezone/commit/cb47a65338c249718d4364fb0b38821e02196d37";><code>cb47a65</code></a> data: Add 2026a</li> <li><a href="https://github.com/moment/moment-timezone/commit/026466a994947f92004dad12efb8a4a28d3d35d7";><code>026466a</code></a> build(deps): bump lodash from 4.17.21 to 4.17.23 (<a href="https://redirect.github.com/moment/moment-timezone/issues/1137";>#1137</a>)</li> <li><a href="https://github.com/moment/moment-timezone/commit/6dc54138e70d57dffce12f71e1b800463e7a6fe2";><code>6dc5413</code></a> Update Antarctica guess tests for 2026</li> <li><a href="https://github.com/moment/moment-timezone/commit/0efed482fe458bb96695bf2856ed7862e4fe50cd";><code>0efed48</code></a> build(deps): bump js-yaml from 3.14.1 to 3.14.2 (<a href="https://redirect.github.com/moment/moment-timezone/issues/1136";>#1136</a>)</li> <li>See full diff in <a href="https://github.com/moment/moment-timezone/compare/0.6.0...0.6.1";>compare view</a></li> </ul> </details> <br /> Updates `react-router-dom` from 7.13.1 to 7.14.0 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/remix-run/react-router/blob/main/packages/react-router-dom/CHANGELOG.md";>react-router-dom's changelog</a>.</em></p> <blockquote> <h2>7.14.0</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies: <ul> <li><code>[email protected]</code></li> </ul> </li> </ul> <h2>7.13.2</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies: <ul> <li><code>[email protected]</code></li> </ul> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/remix-run/react-router/commit/e31077b0c380d9764dbced4c753e9ff99387045d";><code>e31077b</code></a> chore: Update version for release (<a href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom/issues/14945";>#14945</a>)</li> <li><a href="https://github.com/remix-run/react-router/commit/6683e85a9d7d607a45a3f6374afcc598a474f602";><code>6683e85</code></a> chore: Update version for release (pre) (<a href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom/issues/14943";>#14943</a>)</li> <li><a href="https://github.com/remix-run/react-router/commit/aadb56fa532e0eaf7e7b91c1d88e1f325851eb04";><code>aadb56f</code></a> chore: Update version for release (<a href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom/issues/14908";>#14908</a>)</li> <li><a href="https://github.com/remix-run/react-router/commit/c68a9b35933fe5a3750ea8e52399d06f9aaecf77";><code>c68a9b3</code></a> chore: Update version for release (pre) (<a href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom/issues/14893";>#14893</a>)</li> <li>See full diff in <a href="https://github.com/remix-run/react-router/commits/[email protected]/packages/react-router-dom";>compare view</a></li> </ul> </details> <br /> Updates `swagger-ui-dist` from 5.32.0 to 5.32.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/swagger-api/swagger-ui/releases";>swagger-ui-dist's releases</a>.</em></p> <blockquote> <h2>v5.32.1</h2> <h2><a href="https://github.com/swagger-api/swagger-ui/compare/v5.32.0...v5.32.1";>5.32.1</a> (2026-03-17)</h2> <h3>Bug Fixes</h3> <ul> <li>invalidate models components cache based on location (<a href="https://redirect.github.com/swagger-api/swagger-ui/issues/10764";>#10764</a>) (<a href="https://github.com/swagger-api/swagger-ui/commit/fb78dd2a497307529fff3d368936519d050b5946";>fb78dd2</a>)</li> <li><strong>style:</strong> use container queries for responsive design (<a href="https://redirect.github.com/swagger-api/swagger-ui/issues/10763";>#10763</a>) (<a href="https://github.com/swagger-api/swagger-ui/commit/e35000e0b353d5bd756d142fbbc2337adab7fb31";>e35000e</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/swagger-api/swagger-ui/commit/d361f5b3570b8ade67fb1c02cf7a676fcb441479";><code>d361f5b</code></a> chore(release): cut the 5.32.1 release</li> <li><a href="https://github.com/swagger-api/swagger-ui/commit/d202577ae75756d13ff0214abdf679f378abed1b";><code>d202577</code></a> chore(deps): update swagger-js (<a href="https://redirect.github.com/swagger-api/swagger-ui/issues/10772";>#10772</a>)</li> <li><a href="https://github.com/swagger-api/swagger-ui/commit/07ee095a7b452e2b9f188a906ef01e1c2375cd51";><code>07ee095</code></a> chore(deps): bump mshick/add-pr-comment from 2 to 3 (<a href="https://redirect.github.com/swagger-api/swagger-ui/issues/10768";>#10768</a>)</li> <li><a href="https://github.com/swagger-api/swagger-ui/commit/ffdd27c4b9b6e07792b0268a20e625c341d11068";><code>ffdd27c</code></a> chore(deps): bump nginx from 1.29.5-alpine to 1.29.6-alpine (<a href="https://redirect.github.com/swagger-api/swagger-ui/issues/10771";>#10771</a>)</li> <li><a href="https://github.com/swagger-api/swagger-ui/commit/e35000e0b353d5bd756d142fbbc2337adab7fb31";><code>e35000e</code></a> fix(style): use container queries for responsive design (<a href="https://redirect.github.com/swagger-api/swagger-ui/issues/10763";>#10763</a>)</li> <li><a href="https://github.com/swagger-api/swagger-ui/commit/fb78dd2a497307529fff3d368936519d050b5946";><code>fb78dd2</code></a> fix: invalidate models components cache based on location (<a href="https://redirect.github.com/swagger-api/swagger-ui/issues/10764";>#10764</a>)</li> <li><a href="https://github.com/swagger-api/swagger-ui/commit/8e1bfefa9b4e023de46c173d98c9ef558bd5453c";><code>8e1bfef</code></a> chore(deps): bump docker/login-action from 3 to 4 (<a href="https://redirect.github.com/swagger-api/swagger-ui/issues/10750";>#10750</a>)</li> <li><a href="https://github.com/swagger-api/swagger-ui/commit/f67003be8f0a6f1eb7b80c6854ffaa625ad7a075";><code>f67003b</code></a> chore(deps): bump docker/setup-buildx-action from 3 to 4 (<a href="https://redirect.github.com/swagger-api/swagger-ui/issues/10766";>#10766</a>)</li> <li><a href="https://github.com/swagger-api/swagger-ui/commit/71134e130e50ecb545b3b0bb78957622334265db";><code>71134e1</code></a> build: use [email protected] in dev setup (<a href="https://redirect.github.com/swagger-api/swagger-ui/issues/10674";>#10674</a>)</li> <li><a href="https://github.com/swagger-api/swagger-ui/commit/0c9412b099df9c5d84ff6bfdc8e260ace016dea6";><code>0c9412b</code></a> chore(deps): bump docker/setup-qemu-action from 3 to 4 (<a href="https://redirect.github.com/swagger-api/swagger-ui/issues/10749";>#10749</a>)</li> <li>Additional commits viewable in <a href="https://github.com/swagger-api/swagger-ui/compare/v5.32.0...v5.32.1";>compare view</a></li> </ul> </details> <br /> Updates `type-fest` from 5.4.4 to 5.5.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sindresorhus/type-fest/releases";>type-fest's releases</a>.</em></p> <blockquote> <h2>v5.5.0</h2> <h3>New types</h3> <ul> <li><a href="https://github.com/sindresorhus/type-fest/blob/main/source/optional.d.ts";><code>Optional</code></a> (<a href="https://redirect.github.com/sindresorhus/type-fest/issues/1374";>#1374</a>) 9b52980</li> <li><a href="https://github.com/sindresorhus/type-fest/blob/main/source/exclude-exactly.d.ts";><code>ExcludeExactly</code></a> (<a href="https://redirect.github.com/sindresorhus/type-fest/issues/1349";>#1349</a>) 0f923d0</li> <li><a href="https://github.com/sindresorhus/type-fest/blob/main/source/array-length.d.ts";><code>ArrayLength</code></a> (<a href="https://redirect.github.com/sindresorhus/type-fest/issues/1344";>#1344</a>) 59bd056</li> <li><a href="https://github.com/sindresorhus/type-fest/blob/main/source/union-member.d.ts";><code>UnionMember</code></a> (<a href="https://redirect.github.com/sindresorhus/type-fest/issues/1368";>#1368</a>) 878b6df</li> <li><a href="https://github.com/sindresorhus/type-fest/blob/main/source/some-extend.d.ts";><code>SomeExtend</code></a> (<a href="https://redirect.github.com/sindresorhus/type-fest/issues/1380";>#1380</a>) bbce298</li> <li><a href="https://github.com/sindresorhus/type-fest/blob/main/source/and-all.d.ts";><code>AndAll</code></a> (<a href="https://redirect.github.com/sindresorhus/type-fest/issues/1383";>#1383</a>) 94aa3f8</li> <li><a href="https://github.com/sindresorhus/type-fest/blob/main/source/or-all.d.ts";><code>OrAll</code></a> (<a href="https://redirect.github.com/sindresorhus/type-fest/issues/1378";>#1378</a>) 4c42d89</li> </ul> <h3>Improvements</h3> <ul> <li>Add function parameter constraint examples to numeric comparison types (<a href="https://redirect.github.com/sindresorhus/type-fest/issues/1357";>#1357</a>) 24be93d</li> <li><code>UnionToTuple</code>: Fix behavior when a union member is a supertype of another (<a href="https://redirect.github.com/sindresorhus/type-fest/issues/1349";>#1349</a>) 0f923d0</li> <li><code>ConditionalPickDeep</code>: Fix returning <code>{}</code> instead of <code>never</code> when no keys match (<a href="https://redirect.github.com/sindresorhus/type-fest/issues/1360";>#1360</a>) 6af847a</li> <li><code>ConditionalPick</code>: Fix returning <code>{}</code> instead of <code>never</code> when no keys match (<a href="https://redirect.github.com/sindresorhus/type-fest/issues/1359";>#1359</a>) 3995003</li> <li><code>GreaterThan</code> / <code>LessThan</code> / <code>GreaterThanOrEqual</code> / <code>LessThanOrEqual</code>: Fix behavior with the <code>number</code> type (<a href="https://redirect.github.com/sindresorhus/type-fest/issues/1363";>#1363</a>) cfea505</li> </ul> <hr /> <p><a href="https://github.com/sindresorhus/type-fest/compare/v5.4.4...v5.5.0";>https://github.com/sindresorhus/type-fest/compare/v5.4.4...v5.5.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sindresorhus/type-fest/commit/0329b2b2dc568df61ed6bfbbfa0f513b060a02bb";><code>0329b2b</code></a> 5.5.0</li> <li><a href="https://github.com/sindresorhus/type-fest/commit/0f923d0f78dadf6f3a04f0aaba3aaf371fb4108b";><code>0f923d0</code></a> <code>UnionToTuple</code>: Fix behavior when a union member is a supertype of another; A...</li> <li><a href="https://github.com/sindresorhus/type-fest/commit/94aa3f8c3d46a8ef6002e3b41cc00a77a52909a7";><code>94aa3f8</code></a> Add <code>AndAll</code> type (<a href="https://redirect.github.com/sindresorhus/type-fest/issues/1383";>#1383</a>)</li> <li><a href="https://github.com/sindresorhus/type-fest/commit/4c42d891fa566d6b507f81e3fa869d6a0cd2f95f";><code>4c42d89</code></a> Add <code>OrAll</code> type (<a href="https://redirect.github.com/sindresorhus/type-fest/issues/1378";>#1378</a>)</li> <li><a href="https://github.com/sindresorhus/type-fest/commit/878b6df039347ae69c9c2029bcae6b639ede88a0";><code>878b6df</code></a> Add <code>UnionMember</code> type (<a href="https://redirect.github.com/sindresorhus/type-fest/issues/1368";>#1368</a>)</li> <li><a href="https://github.com/sindresorhus/type-fest/commit/bbce2985161c34c4544b34be7f41e038311c681c";><code>bbce298</code></a> Add <code>SomeExtend</code> type (<a href="https://redirect.github.com/sindresorhus/type-fest/issues/1380";>#1380</a>)</li> <li><a href="https://github.com/sindresorhus/type-fest/commit/d3302ce03a9d42edcb79332421dad942a95c67c9";><code>d3302ce</code></a> Validate twoslash types against different verbosity levels (<a href="https://redirect.github.com/sindresorhus/type-fest/issues/1364";>#1364</a>)</li> <li><a href="https://github.com/sindresorhus/type-fest/commit/9b52980b0a46f96b40adae15a711b89f83c4e100";><code>9b52980</code></a> Add <code>Optional</code> type (<a href="https://redirect.github.com/sindresorhus/type-fest/issues/1374";>#1374</a>)</li> <li><a href="https://github.com/sindresorhus/type-fest/commit/b0a606b5dd5cac7b1d69f3643397085ac818effb";><code>b0a606b</code></a> <code>Merge</code>: Improve documentation (<a href="https://redirect.github.com/sindresorhus/type-fest/issues/1375";>#1375</a>)</li> <li><a href="https://github.com/sindresorhus/type-fest/commit/76bd9cd7bf8fbaba9c1479b5df5a0aac20dca277";><code>76bd9cd</code></a> Fix typos</li> <li>Additional commits viewable in <a href="https://github.com/sindresorhus/type-fest/compare/v5.4.4...v5.5.0";>compare view</a></li> </ul> </details> <br /> Updates `validator` from 13.15.26 to 13.15.35 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/validatorjs/validator.js/releases";>validator's releases</a>.</em></p> <blockquote> <h2>13.15.35</h2> <h3>Fixes, New Locales and Enhancements</h3> <ul> <li><a href="https://redirect.github.com/validatorjs/validator.js/pull/2663";>#2663</a> <code>isISO31661Alpha2</code>/<code>isISO31661Alpha3</code>: add support for Kosovo (<code>XK</code> / <code>XXK</code>) <a href="https://github.com/johanpoirier-d4";><code>@johanpoirier-d4</code></a></li> <li><a href="https://redirect.github.com/validatorjs/validator.js/pull/2661";>#2661</a> <code>isHexColor</code>: ignore non-object options <a href="https://github.com/yuna0831";><code>@yuna0831</code></a></li> <li><code>isTaxID</code> <ul> <li><a href="https://redirect.github.com/validatorjs/validator.js/pull/2644";>#2644</a> improve <code>pt-BR</code> locale by adding support for alphanumeric CNPJ format <a href="https://github.com/easedu";><code>@easedu</code></a></li> <li><a href="https://redirect.github.com/validatorjs/validator.js/pull/2675";>#2675</a> improve <code>pt-BR</code> locale by adding support for formatted CPF values <a href="https://github.com/easedu";><code>@easedu</code></a></li> </ul> </li> <li><a href="https://redirect.github.com/validatorjs/validator.js/pull/2643";>#2643</a> <code>isPassportNumber</code>: improve <code>MX</code> locale <a href="https://github.com/jesroffrouk";><code>@jesroffrouk</code></a></li> <li><a href="https://redirect.github.com/validatorjs/validator.js/pull/2676";>#2676</a> <code>isMobilePhone</code>: add <code>fr-DJ</code> locale <a href="https://github.com/Kartikeya-guthub";><code>@Kartikeya-guthub</code></a></li> <li><a href="https://redirect.github.com/validatorjs/validator.js/pull/2682";>#2682</a> <code>isPostalCode</code>: add <code>MC</code> locale <a href="https://github.com/moogblob";><code>@moogblob</code></a></li> <li><a href="https://redirect.github.com/validatorjs/validator.js/pull/2690";>#2690</a> <code>isJSON</code>: allow any valid JSON value to pass <a href="https://github.com/relu91";><code>@relu91</code></a></li> <li><a href="https://redirect.github.com/validatorjs/validator.js/pull/2693";>#2693</a> <code>isSlug</code>: restrict allowed characters to valid slug charset <a href="https://github.com/Shrawak";><code>@Shrawak</code></a></li> <li><strong>Doc fixes and others:</strong> <ul> <li><a href="https://redirect.github.com/validatorjs/validator.js/pull/2658";>#2658</a> <a href="https://github.com/Manaskarthik28";><code>@Manaskarthik28</code></a></li> <li><a href="https://redirect.github.com/validatorjs/validator.js/pull/2592";>#2592</a> <a href="https://github.com/noritaka1166";><code>@noritaka1166</code></a></li> <li><a href="https://redirect.github.com/validatorjs/validator.js/pull/2591";>#2591</a> <a href="https://github.com/noritaka1166";><code>@noritaka1166</code></a></li> </ul> </li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/Manaskarthik28";><code>@Manaskarthik28</code></a> made their first contribution in <a href="https://redirect.github.com/validatorjs/validator.js/pull/2658";>validatorjs/validator.js#2658</a></li> <li><a href="https://github.com/johanpoirier-d4";><code>@johanpoirier-d4</code></a> made their first contribution in <a href="https://redirect.github.com/validatorjs/validator.js/pull/2663";>validatorjs/validator.js#2663</a></li> <li><a href="https://github.com/yuna0831";><code>@yuna0831</code></a> made their first contribution in <a href="https://redirect.github.com/validatorjs/validator.js/pull/2661";>validatorjs/validator.js#2661</a></li> <li><a href="https://github.com/easedu";><code>@easedu</code></a> made their first contribution in <a href="https://redirect.github.com/validatorjs/validator.js/pull/2644";>validatorjs/validator.js#2644</a></li> <li><a href="https://github.com/jesroffrouk";><code>@jesroffrouk</code></a> made their first contribution in <a href="https://redirect.github.com/validatorjs/validator.js/pull/2643";>validatorjs/validator.js#2643</a></li> <li><a href="https://github.com/Kartikeya-guthub";><code>@Kartikeya-guthub</code></a> made their first contribution in <a href="https://redirect.github.com/validatorjs/validator.js/pull/2676";>validatorjs/validator.js#2676</a></li> <li><a href="https://github.com/moogblob";><code>@moogblob</code></a> made their first contribution in <a href="https://redirect.github.com/validatorjs/validator.js/pull/2682";>validatorjs/validator.js#2682</a></li> <li><a href="https://github.com/noritaka1166";><code>@noritaka1166</code></a> made their first contribution in <a href="https://redirect.github.com/validatorjs/validator.js/pull/2592";>validatorjs/validator.js#2592</a></li> <li><a href="https://github.com/relu91";><code>@relu91</code></a> made their first contribution in <a href="https://redirect.github.com/validatorjs/validator.js/pull/2690";>validatorjs/validator.js#2690</a></li> <li><a href="https://github.com/Shrawak";><code>@Shrawak</code></a> made their first contribution in <a href="https://redirect.github.com/validatorjs/validator.js/pull/2693";>validatorjs/validator.js#2693</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/validatorjs/validator.js/compare/13.15.26...13.15.35";>https://github.com/validatorjs/validator.js/compare/13.15.26...13.15.35</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/validatorjs/validator.js/blob/master/CHANGELOG.md";>validator's changelog</a>.</em></p> <blockquote> <h1>13.15.35</h1> <h3>Fixes, New Locales and Enhancements</h3> <ul> <li><a href="https://redirect.github.com/validatorjs/validator.js/pull/2663";>#2663</a> <code>isISO31661Alpha2</code>/<code>isISO31661Alpha3</code>: add support for Kosovo (<code>XK</code> / <code>XXK</code>) <a href="https://github.com/johanpoirier-d4";><code>@johanpoirier-d4</code></a></li> <li><a href="https://redirect.github.com/validatorjs/validator.js/pull/2661";>#2661</a> <code>isHexColor</code>: ignore non-object options <a href="https://github.com/yuna0831";><code>@yuna0831</code></a></li> <li><code>isTaxID</code> <ul> <li><a href="https://redirect.github.com/validatorjs/validator.js/pull/2644";>#2644</a> improve <code>pt-BR</code> locale by adding support for alphanumeric CNPJ format <a href="https://github.com/easedu";><code>@easedu</code></a></li> <li><a href="https://redirect.github.com/validatorjs/validator.js/pull/2675";>#2675</a> improve <code>pt-BR</code> locale by adding support for formatted CPF values <a href="https://github.com/easedu";><code>@easedu</code></a></li> </ul> </li> <li><a href="https://redirect.github.com/validatorjs/validator.js/pull/2643";>#2643</a> <code>isPassportNumber</code>: improve <code>MX</code> locale <a href="https://github.com/jesroffrouk";><code>@jesroffrouk</code></a></li> <li><a href="https://redirect.github.com/validatorjs/validator.js/pull/2676";>#2676</a> <code>isMobilePhone</code>: add <code>fr-DJ</code> locale <a href="https://github.com/Kartikeya-guthub";><code>@Kartikeya-guthub</code></a></li> <li><a href="https://redirect.github.com/validatorjs/validator.js/pull/2682";>#2682</a> <code>isPostalCode</code>: add <code>MC</code> locale <a href="https://github.com/moogblob";><code>@moogblob</code></a></li> <li><a href="https://redirect.github.com/validatorjs/validator.js/pull/2690";>#2690</a> <code>isJSON</code>: allow any valid JSON value to pass <a href="https://github.com/relu91";><code>@relu91</code></a></li> <li><a href="https://redirect.github.com/validatorjs/validator.js/pull/2693";>#2693</a> <code>isSlug</code>: restrict allowed characters to valid slug charset <a href="https://github.com/Shrawak";><code>@Shrawak</code></a></li> <li><strong>Doc fixes and others:</strong> <ul> <li><a href="https://redirect.github.com/validatorjs/validator.js/pull/2658";>#2658</a> <a href="https://github.com/Manaskarthik28";><code>@Manaskarthik28</code></a></li> <li><a href="https://redirect.github.com/validatorjs/validator.js/pull/2592";>#2592</a> <a href="https://github.com/noritaka1166";><code>@noritaka1166</code></a></li> <li><a href="https://redirect.github.com/validatorjs/validator.js/pull/2591";>#2591</a> <a href="https://github.com/noritaka1166";><code>@noritaka1166</code></a></li> </ul> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/validatorjs/validator.js/commit/7a8079709cd4cb27b2a1846e6f6508d68c9d928f";><code>7a80797</code></a> maintenance: 2604 release (<a href="https://redirect.github.com/validatorjs/validator.js/issues/2695";>#2695</a>)</li> <li><a href="https://github.com/validatorjs/validator.js/commit/941db7fac5263cc7e0df0eba37253678f92989b0";><code>941db7f</code></a> fix(isSlug): restrict allowed characters to valid slug charset (<a href="https://redirect.github.com/validatorjs/validator.js/issues/2693";>#2693</a>)</li> <li><a href="https://github.com/validatorjs/validator.js/commit/2758f7029798df0361ace21143e7169eeb22df88";><code>2758f70</code></a> chore: fix typo in comment (<a href="https://redirect.github.com/validatorjs/validator.js/issues/2591";>#2591</a>)</li> <li><a href="https://github.com/validatorjs/validator.js/commit/fcfbff59f754b2fe81b4f91560a33455236a7f01";><code>fcfbff5</code></a> feat(isJson): allow any valid JSON value to pass (<a href="https://redirect.github.com/validatorjs/validator.js/issues/2690";>#2690</a>)</li> <li><a href="https://github.com/validatorjs/validator.js/commit/f06caee798c0c70d8f1774426a03c1d05ed0bd07";><code>f06caee</code></a> refactor: replace if-then-else flow by a single return statement (<a href="https://redirect.github.com/validatorjs/validator.js/issues/2592";>#2592</a>)</li> <li><a href="https://github.com/validatorjs/validator.js/commit/9fa1e3a44a3fb371bc91cf8bb7e127ee4e049331";><code>9fa1e3a</code></a> feat(isPostalCode): Add postal code for Monaco (<a href="https://redirect.github.com/validatorjs/validator.js/issues/2682";>#2682</a>)</li> <li><a href="https://github.com/validatorjs/validator.js/commit/b1aea75a5e64929eab32d9e83e957b7f5660e9bd";><code>b1aea75</code></a> feat(isMobilePhone): add Djibouti (fr-DJ) mobile phone validation (<a href="https://redirect.github.com/validatorjs/validator.js/issues/2676";>#2676</a>)</li> <li><a href="https://github.com/validatorjs/validator.js/commit/f715cddd592169a93cce1ac04d33bfb47ec53048";><code>f715cdd</code></a> fix(isPassportNumber): improve <code>MX</code> locale (<a href="https://redirect.github.com/validatorjs/validator.js/issues/2643";>#2643</a>)</li> <li><a href="https://github.com/validatorjs/validator.js/commit/e8c6914f72f8a176ecffe034b8324265e8b4d3fe";><code>e8c6914</code></a> fix(isTaxID): add formatted CPF support and additional test cases for pt-BR l...</li> <li><a href="https://github.com/validatorjs/validator.js/commit/90b0a9a40bdce395f74e43f8b7158c992297e71e";><code>90b0a9a</code></a> fix(isTaxID): improve <code>pt-BR</code> locale by adding support for alphanumeric CNPJ ...</li> <li>Additional commits viewable in <a href="https://github.com/validatorjs/validator.js/compare/13.15.26...13.15.35";>compare view</a></li> </ul> </details> <br /> Updates `@babel/preset-env` from 7.29.0 to 7.29.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/babel/babel/releases";><code>@babel/preset-env</code>'s releases</a>.</em></p> <blockquote> <h2>v7.29.2 (2026-03-16)</h2> <h4>:eyeglasses: Spec Compliance</h4> <ul> <li><code>babel-parser</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17840";>#17840</a> [7.x backport] async x => {} must be in leading pos (<a href="https://github.com/JLHwung";><code>@JLHwung</code></a>)</li> </ul> </li> </ul> <h4>:bug: Bug Fix</h4> <ul> <li><code>babel-helpers</code>, <code>babel-plugin-transform-async-generator-functions</code>, <code>babel-preset-env</code>, <code>babel-runtime-corejs3</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17805";>#17805</a> [7.x backport] fix: Properly handle await in finally (<a href="https://github.com/liuxingbaoyu";><code>@liuxingbaoyu</code></a>)</li> </ul> </li> <li><code>babel-preset-env</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17789";>#17789</a> [7.x backport] preset-env include/exclude should accept bugfix plugins (<a href="https://github.com/JLHwung";><code>@JLHwung</code></a>)</li> </ul> </li> </ul> <h4>:house: Internal</h4> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17813";>#17813</a> chore: update eslint peer deps (<a href="https://github.com/JLHwung";><code>@JLHwung</code></a>)</li> </ul> <h4>Committers: 2</h4> <ul> <li>Huáng Jùnliàng (<a href="https://github.com/JLHwung";><code>@JLHwung</code></a>)</li> <li><a href="https://github.com/liuxingbaoyu";><code>@liuxingbaoyu</code></a></li> </ul> <h2>v7.29.1 (2026-02-04)</h2> <h4>:bug: Bug Fix</h4> <ul> <li><code>babel-standalone</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17771";>#17771</a> [7.x backport] fix: ensure <code>targets.esmodules</code> is validated (<a href="https://github.com/JLHwung";><code>@JLHwung</code></a>)</li> </ul> </li> <li><code>babel-generator</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17776";>#17776</a> [7.x backport] Fix undefined when 64 indents (<a href="https://github.com/liuxingbaoyu";><code>@liuxingbaoyu</code></a>)</li> </ul> </li> </ul> <h4>Committers: 2</h4> <ul> <li>Huáng Jùnliàng (<a href="https://github.com/JLHwung";><code>@JLHwung</code></a>)</li> <li><a href="https://github.com/liuxingbaoyu";><code>@liuxingbaoyu</code></a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/babel/babel/commit/37d5595fca9f188f0534458180611f2e776acd31";><code>37d5595</code></a> v7.29.2</li> <li><a href="https://github.com/babel/babel/commit/1c0a08d95ae7e1c788c7e1ae3a10ee53f7c86864";><code>1c0a08d</code></a> [7.x backport] fix: Properly handle await in finally (<a href="https://github.com/babel/babel/tree/HEAD/packages/babel-preset-env/issues/17805";>#17805</a>)</li> <li><a href="https://github.com/babel/babel/commit/061bf95142132ce4200f863f891a8e3a727cd844";><code>061bf95</code></a> [7.x backport] preset-env include/exclude should accept bugfix plugins (<a href="https://github.com/babel/babel/tree/HEAD/packages/babel-preset-env/issues/17789";>#17789</a>)</li> <li>See full diff in <a href="https://github.com/babel/babel/commits/v7.29.2/packages/babel-preset-env";>compare view</a></li> </ul> </details> <br /> Updates `@types/color` from 4.2.0 to 4.2.1 <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/color";>compare view</a></li> </ul> </details> <br /> Updates `@typescript-eslint/parser` from 8.56.1 to 8.58.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/releases";><code>@typescript-eslint/parser</code>'s releases</a>.</em></p> <blockquote> <h2>v8.58.0</h2> <h2>8.58.0 (2026-03-30)</h2> <h3>🚀 Features</h3> <ul> <li>support TypeScript 6 (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12124";>#12124</a>)</li> </ul> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> crash in <code>no-unnecessary-type-arguments</code> (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12163";>#12163</a>)</li> <li><strong>eslint-plugin:</strong> [no-extraneous-class] handle index signatures (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12142";>#12142</a>)</li> <li><strong>eslint-plugin:</strong> [prefer-regexp-exec] avoid fixing unknown RegExp flags (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12161";>#12161</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>ej shafran <a href="https://github.com/ej-shafran";><code>@ej-shafran</code></a></li> <li>Evyatar Daud <a href="https://github.com/StyleShit";><code>@StyleShit</code></a></li> <li>GG ZIBLAKING</li> <li>milkboy2564 <a href="https://github.com/SeolJaeHyeok";><code>@SeolJaeHyeok</code></a></li> <li>teee32 <a href="https://github.com/teee32";><code>@teee32</code></a></li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.58.0";>GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning";>versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases";>releases</a> on our website.</p> <h2>v8.57.2</h2> <h2>8.57.2 (2026-03-23)</h2> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> [prefer-optional-chain] remove dangling closing parenthesis (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11865";>#11865</a>)</li> <li><strong>eslint-plugin:</strong> [array-type] ignore Array and ReadonlyArray without type arguments (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11971";>#11971</a>)</li> <li><strong>eslint-plugin:</strong> [no-restricted-types] flag banned generics in extends or implements (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12120";>#12120</a>)</li> <li><strong>eslint-plugin:</strong> [no-unsafe-return] false positive on unwrapping generic (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12125";>#12125</a>)</li> <li><strong>eslint-plugin:</strong> [no-unsafe-return] false positive on unwrapping generic (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12125";>#12125</a>)</li> <li><strong>eslint-plugin:</strong> [no-useless-default-assignment] skip reporting false positives for unresolved type parameters (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12127";>#12127</a>)</li> <li><strong>eslint-plugin:</strong> [prefer-readonly-parameter-types] preserve type alias infomation (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11954";>#11954</a>)</li> <li><strong>typescript-estree:</strong> skip createIsolatedProgram fallback for projectService (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12066";>#12066</a>, <a href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/12065";>#12065</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Kirk Waiblinger <a href="https://github.com/kirkwaiblinger";><code>@kirkwaiblinger</code></a></li> <li>Konv Suu</li> <li>mdm317</li> <li>Newton Yuan <a href="https://github.com/NewtonYuan";><code>@NewtonYuan</code></a></li> <li>RyoheiYamamoto</li> <li>SungHyun627 <a href="https://github.com/SungHyun627";><code>@SungHyun627</code></a></li> <li>Tamashoo <a href="https://github.com/Tamashoo";><code>@Tamashoo</code></a></li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.57.2";>GitHub Releases</a> for more information.</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md";><code>@typescript-eslint/parser</code>'s changelog</a>.</em></p> <blockquote> <h2>8.58.0 (2026-03-30)</h2> <h3>🚀 Features</h3> <ul> <li>support TypeScript 6 (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12124";>#12124</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Evyatar Daud <a href="https://github.com/StyleShit";><code>@StyleShit</code></a></li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.58.0";>GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning";>versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases";>releases</a> on our website.</p> <h2>8.57.2 (2026-03-23)</h2> <p>This was a version bump only for parser to align it with other projects, there were no code changes.</p> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.57.2";>GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning";>versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases";>releases</a> on our website.</p> <h2>8.57.1 (2026-03-16)</h2> <p>This was a version bump only for parser to align it with other projects, there were no code changes.</p> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.57.1";>GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning";>versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases";>releases</a> on our website.</p> <h2>8.57.0 (2026-03-09)</h2> <p>This was a version bump only for parser to align it with other projects, there were no code changes.</p> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.57.0";>GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning";>versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases";>releases</a> on our website.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/493341709fe7d1d6433332b7bd2724e3332c7cdf";><code>4933417</code></a> chore(release): publish 8.58.0</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/8cde2d06fb9bc591a4c93452509ddbd600c76a35";><code>8cde2d0</code></a> feat: support TypeScript 6 (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser/issues/12124";>#12124</a>)</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/be4d54d26e695cc93605ffcca67dd75848e95c6f";><code>be4d54d</code></a> chore(release): publish 8.57.2</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/c7c38aa252d7bf6708a225aebedc57686ac33dcd";><code>c7c38aa</code></a> chore(release): publish 8.57.1</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/2c6aeeec238dfea860b9f3c146a55f8f49f15cf5";><code>2c6aeee</code></a> chore(release): publish 8.57.0</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/f696dadfc37078efe4119ad2ab0609cde3e42766";><code>f696dad</code></a> chore: use pnpm catalog (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser/issues/12047";>#12047</a>)</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/a09921e2de2e8790e6a803016b825815ca9409d8";><code>a09921e</code></a> chore: update vitest to 4.x (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser/issues/12071";>#12071</a>)</li> <li>See full diff in <a href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.58.0/packages/parser";>compare view</a></li> </ul> </details> <br /> Updates `babel-jest` from 30.2.0 to 30.3.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/jestjs/jest/releases";>babel-jest's releases</a>.</em></p> <blockquote> <h2>v30.3.0</h2> <h3>Features</h3> <ul> <li><code>[jest-config]</code> Add <code>defineConfig</code> and <code>mergeConfig</code> helpers for type-safe Jest config (<a href="https://redirect.github.com/jestjs/jest/pull/15844";>#15844</a>)</li> <li><code>[jest-fake-timers]</code> Add <code>setTimerTickMode</code> to configure how timers advance</li> <li><code>[*]</code> Reduce token usage when run through LLMs (<a href="https://github.com/jestjs/jest/commit/3f17932061c0203999451e5852664093de876709";><code>3f17932</code></a>)</li> </ul> <h3>Fixes</h3> <ul> <li><code>[jest-config]</code> Keep CLI coverage output when using <code>--json</code> with <code>--outputFile</code> (<a href="https://redirect.github.com/jestjs/jest/pull/15918";>#15918</a>)</li> <li><code>[jest-mock]</code> Use <code>Symbol</code> from test environment (<a href="https://redirect.github.com/jestjs/jest/pull/15858";>#15858</a>)</li> <li><code>[jest-reporters]</code> Fix issue where console output not displayed for GHA reporter even with <code>silent: false</code> option (<a href="https://redirect.github.com/jestjs/jest/pull/15864";>#15864</a>)</li> <li><code>[jest-runtime]</code> Fix issue where user cannot utilize dynamic import despite specifying <code>--experimental-vm-modules</code> Node option (<a href="https://redirect.github.com/jestjs/jest/pull/15842";>#15842</a>)</li> <li><code>[jest-test-sequencer]</code> Fix issue where failed tests due to compilation errors not getting re-executed even with <code>--onlyFailures</code> CLI option (<a href="https://redirect.github.com/jestjs/jest/pull/15851";>#15851</a>)</li> <li><code>[jest-util]</code> Make sure <code>process.features.require_module</code> is <code>false</code> (<a href="https://redirect.github.com/jestjs/jest/pull/15867";>#15867</a>)</li> </ul> <h3>Chore & Maintenance</h3> <ul> <li><code>[*]</code> Replace remaining micromatch uses with picomatch</li> <li><code>[deps]</code> Update to sinon/fake-timers v15</li> <li><code>[docs]</code> Update V30 migration guide to notify users on <code>jest.mock()</code> work with case-sensitive path (<a href="https://redirect.github.com/jestjs/jest/pull/15849";>#15849</a>)</li> <li>Updated Twitter icon to match the latest brand guidelines (<a href="https://redirect.github.com/jestjs/jest/pull/15869";>#15869</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/jestjs/jest/blob/main/CHANGELOG.md";>babel-jest's changelog</a>.</em></p> <blockquote> <h2>30.3.0</h2> <h3>Features</h3> <ul> <li><code>[jest-config]</code> Add <code>defineConfig</code> and <code>mergeConfig</code> helpers for type-safe Jest config (<a href="https://redirect.github.com/jestjs/jest/pull/15844";>#15844</a>)</li> <li><code>[jest-fake-timers]</code> Add <code>setTimerTickMode</code> to configure how timers advance</li> <li><code>[*]</code> Reduce token usage when run through LLMs (<a href="https://github.com/jestjs/jest/commit/3f17932061c0203999451e5852664093de876709";><code>3f17932</code></a>)</li> </ul> <h3>Fixes</h3> <ul> <li><code>[jest-config]</code> Keep CLI coverage output when using <code>--json</code> with <code>--outputFile</code> (<a href="https://redirect.github.com/jestjs/jest/pull/15918";>#15918</a>)</li> <li><code>[jest-mock]</code> Use <code>Symbol</code> from test environment (<a href="https://redirect.github.com/jestjs/jest/pull/15858";>#15858</a>)</li> <li><code>[jest-reporters]</code> Fix issue where console output not displayed for GHA reporter even with <code>silent: false</code> option (<a href="https://redirect.github.com/jestjs/jest/pull/15864";>#15864</a>)</li> <li><code>[jest-runtime]</code> Fix issue where user cannot utilize dynamic import despite specifying <code>--experimental-vm-modules</code> Node option (<a href="https://redirect.github.com/jestjs/jest/pull/15842";>#15842</a>)</li> <li><code>[jest-test-sequencer]</code> Fix issue where failed tests due to compilation errors not getting re-executed even with <code>--onlyFailures</code> CLI option (<a href="https://redirect.github.com/jestjs/jest/pull/15851";>#15851</a>)</li> <li><code>[jest-util]</code> Make sure <code>process.features.require_module</code> is <code>false</code> (<a... _Description has been truncated_ -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
