Oneseco Media GITHUB

[Oneseco-Media/rsshub]

Bump rolldown from 1.2.8 to 1.2.13

By dependabot[bot]

Assigned to

Bumps rolldown from 1.2.8 to 1.2.13.

Release notes

Sourced from rolldown's releases.

v1.2.13

[1.2.13] - 2026-10-07

🚀 Features

rolldown_plugin_vite_import_glob: follow file creation and deletion via hotUpdate (#10550) by @​shulaoda

inline-common-chunks: deduplicate shared code along known loading paths (#11093) by @​hyfdev

rolldown_plugin_vite_import_glob: record a matcher per glob call in dev (#10592) by @​shulaoda

rolldown_plugin_vite_import_glob: watch the directory each glob reads (#10549) by @​shulaoda

watch: hand watch.exclude to notify as its ignore filter (#11008) by @​shulaoda

dev: add experimental.devMode.hotUpdate option (#11123) by @​h-a-n-a

🐛 Bug Fixes

renamer: check the printed name of namespace-alias imports for captures (#11129) by @​IWANABETHATGUY

devtools: honor devtools.sessionId by @​Brooooooklyn

renamer: keep a renamed nested binding off its module's top-level bindings (#11128) by @​IWANABETHATGUY

dev: keep this undefined when calling an imported function in HMR patches and lazy chunks (#11126) by @​h-a-n-a

dev: read string-named imports correctly in HMR patches and lazy chunks (#11127) by @​h-a-n-a

sanitize preserveModules chunk names after resolving the relative path (#11087) by @​waltuov

keep the with clause on bare external imports (#11100) by @​IWANABETHATGUY

generator: filter DISABLE_JS_HOOK bits from generated HookUsage (#10346) by @​Brooooooklyn

dev: make the module factory async for top-level await (#11118) by @​h-a-n-a

node: give each renderChunk call its own meta object (#11115) by @​Brooooooklyn

honor externalLiveBindings for imported exports (#11048) by @​camc314

dev: keep a late payload from replacing newer module code (#11030) by @​h-a-n-a

binding: use-after-free in async transform with a TsconfigCache (#11080) by @​shulaoda

fail on chunk syntax errors and escape export names once (#11051) by @​hyfdev

dev: ship newly imported modules the client never received (#11029) by @​h-a-n-a

code-splitting: avoid cycles from redundant re-export initialization (#11073) by @​hyfdev

link: treat re-exports of the same external binding as one export (#11069) by @​IWANABETHATGUY

escape namespace properties in IIFE and UMD output (#11085) by @​hyfdev

escape dependency paths in CJS and UMD output (#11084) by @​hyfdev

use computed access for arbitrary import names (#11083) by @​hyfdev

generate valid bindings for shimmed exports (#11082) by @​hyfdev

dev: reload the page when an HMR update fails after merging its edit (#11031) by @​h-a-n-a

dev/lazy: ship the deps of a module that a patch shipped but never ran (#11028) by @​h-a-n-a

code-splitting: don't move init calls in front of unwrapped JSON modules (#11062) by @​IWANABETHATGUY

escape export names in defineProperty calls (#11047) by @​camc314

📚 Documentation

say the CLI bundles multiple configs one after another (#11111) by @​Brooooooklyn

add renderChunk hook filter docs (#11065) by @​sapphi-red

⚡ Performance

use concat_string! instead of format! for plain string joins (#11139) by @​IWANABETHATGUY

utils: evaluate each concat_string! argument once (#11105) by @​IWANABETHATGUY

json: escape JSON.parse string with json-escape-simd (#11104) by @​IWANABETHATGUY

... (truncated)

Changelog

Sourced from rolldown's changelog.

[1.2.13] - 2026-10-07

🚀 Features

rolldown_plugin_vite_import_glob: follow file creation and deletion via hotUpdate (#10550) by @​shulaoda

inline-common-chunks: deduplicate shared code along known loading paths (#11093) by @​hyfdev

rolldown_plugin_vite_import_glob: record a matcher per glob call in dev (#10592) by @​shulaoda

rolldown_plugin_vite_import_glob: watch the directory each glob reads (#10549) by @​shulaoda

watch: hand watch.exclude to notify as its ignore filter (#11008) by @​shulaoda

dev: add experimental.devMode.hotUpdate option (#11123) by @​h-a-n-a

🐛 Bug Fixes

renamer: check the printed name of namespace-alias imports for captures (#11129) by @​IWANABETHATGUY

devtools: honor devtools.sessionId by @​Brooooooklyn

renamer: keep a renamed nested binding off its module's top-level bindings (#11128) by @​IWANABETHATGUY

dev: keep this undefined when calling an imported function in HMR patches and lazy chunks (#11126) by @​h-a-n-a

dev: read string-named imports correctly in HMR patches and lazy chunks (#11127) by @​h-a-n-a

sanitize preserveModules chunk names after resolving the relative path (#11087) by @​waltuov

keep the with clause on bare external imports (#11100) by @​IWANABETHATGUY

generator: filter DISABLE_JS_HOOK bits from generated HookUsage (#10346) by @​Brooooooklyn

dev: make the module factory async for top-level await (#11118) by @​h-a-n-a

node: give each renderChunk call its own meta object (#11115) by @​Brooooooklyn

honor externalLiveBindings for imported exports (#11048) by @​camc314

dev: keep a late payload from replacing newer module code (#11030) by @​h-a-n-a

binding: use-after-free in async transform with a TsconfigCache (#11080) by @​shulaoda

fail on chunk syntax errors and escape export names once (#11051) by @​hyfdev

dev: ship newly imported modules the client never received (#11029) by @​h-a-n-a

code-splitting: avoid cycles from redundant re-export initialization (#11073) by @​hyfdev

link: treat re-exports of the same external binding as one export (#11069) by @​IWANABETHATGUY

escape namespace properties in IIFE and UMD output (#11085) by @​hyfdev

escape dependency paths in CJS and UMD output (#11084) by @​hyfdev

use computed access for arbitrary import names (#11083) by @​hyfdev

generate valid bindings for shimmed exports (#11082) by @​hyfdev

dev: reload the page when an HMR update fails after merging its edit (#11031) by @​h-a-n-a

dev/lazy: ship the deps of a module that a patch shipped but never ran (#11028) by @​h-a-n-a

code-splitting: don't move init calls in front of unwrapped JSON modules (#11062) by @​IWANABETHATGUY

escape export names in defineProperty calls (#11047) by @​camc314

📚 Documentation

say the CLI bundles multiple configs one after another (#11111) by @​Brooooooklyn

add renderChunk hook filter docs (#11065) by @​sapphi-red

⚡ Performance

use concat_string! instead of format! for plain string joins (#11139) by @​IWANABETHATGUY

utils: evaluate each concat_string! argument once (#11105) by @​IWANABETHATGUY

json: escape JSON.parse string with json-escape-simd (#11104) by @​IWANABETHATGUY

unwrap JSON modules with a non-object root (#11066) by @​IWANABETHATGUY

... (truncated)

Commits

f7de35f release: v1.2.13 (#11144)

4229721 chore(deps): upgrade oxc to 0.153.0 (#11109)

0f60926 fix(devtools): honor devtools.sessionId

f918ebb feat(inline-common-chunks): deduplicate shared code along known loading paths...

047cec1 fix: sanitize preserveModules chunk names after resolving the relative path (...

37f4b00 fix(generator): filter DISABLE_JS_HOOK bits from generated HookUsage (#10346)

d0e7203 feat(dev): add experimental.devMode.hotUpdate option (#11123)

4f53338 fix(node): give each renderChunk call its own meta object (#11115)

fdd3604 docs: say the CLI bundles multiple configs one after another (#11111)

ddabe04 chore(deps): update napi (#11108)

Additional commits viewable in compare view

[

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• `@dependabot show

Labeled:

October 12, 2026 at 07:17PM

via GitHub https://ift.tt/TtNCQzc

[Oneseco-Media/rsshub]

Bump p-map from 7.0.7 to 7.1.0

By dependabot[bot]

Assigned to

Bumps p-map from 7.0.7 to 7.1.0.

Release notes

Sourced from p-map's releases.

v7.1.0

New

Add pMapSettled, pMapKeyed, and pMapSettledKeyed (#70) a05fd50

pMapSettled is like Promise.allSettled(), with a mapper and a concurrency limit

pMapKeyed and pMapSettledKeyed map the values of an object or a Map, like Promise.allKeyed() and Promise.allSettledKeyed()

Add pMapStop to stop iterating from the mapper, like break in a loop (#31) 27606f0

Add preserveOrder option to pMapIterable (#72) 2c0934b

Set it to false to get each result as soon as it is ready, instead of in input order

Make pMapIterable read ahead while the mappers run when backpressure is above concurrency (#78) cada71d

A slow input no longer leaves a mapper waiting for its next element. With the default backpressure, nothing changes

Improvements

Keep the caller in the stack trace of mapper errors (#34) 595754b

Make pMapIterable consume its results in linear time 7d5b6e1

It was O(n²) when backpressure let many results wait, which is the default

Reduce the per-element promise overhead ef82ce6

Give a nullish input the same TypeError as any other invalid input 6f4643d

Fixes

Fix handling of a source that settles its next() calls out of call order 415a474

The index and the result position now follow the order of the next() calls

With stopOnError: false, the errors in the AggregateError are now in input order, not in the order they happened

Fix pMapIterable dropping earlier results when a mapper throws while they are still being read 27606f0

The results before the error are now yielded first, like in a loop

Fix pMapSkip results not counting toward backpressure in pMapIterable 7d5b6e1

A mapper that skips most elements no longer reads further ahead than backpressure allows

Fix pMapIterable pulling and mapping input after return() or throw() while a next() call is pending 5f2c01d

https://github.com/sindresorhus/p-map/compare/v7.0.8...v7.1.0

v7.0.8

Fix pMapIterable calling next() on an exhausted source iterator 70479bf

Fix pMap hanging on a source that blocks in next() after it is exhausted 7c5cee7

Fix pMap preferring the sync iterator when the input has both 669fdc6

Fix pMapIterable calling the mapper for input that arrives after iteration stopped fca6099

Fix: Don't call return() on an exhausted source iterator in pMapIterable a97778a

Fix pMap not closing the source iterator when it rejects c82bd07

Fix pMapIterable not closing the source iterator when iteration stops early e7c2ecb

Fix pMap settling early when the source iterator throws with stopOnError: false 9c48f07

Fix pMapIterable continuing to pull input after the consumer stops iterating 6194e49

https://github.com/sindresorhus/p-map/compare/v7.0.7...v7.0.8

Commits

683a68e 7.1.0

595754b Keep the caller in the stack trace of mapper errors

d9cd930 Document how to choose a concurrency value

a05fd50 Add pMapSettled, pMapKeyed, and pMapSettledKeyed

36078d3 Add dynamic concurrency recipe

cada71d Make pMapIterable read ahead while the mappers run when backpressure is a...

27606f0 Add pMapStop to stop iterating from the mapper

2c0934b Add preserveOrder option to pMapIterable

ac01d02 Minor tweaks

ded6548 Add more tests

Additional commits viewable in compare view

[

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• `@dependabot show

Labeled:

October 12, 2026 at 07:17PM

via GitHub https://ift.tt/jFtEr1g

[Oneseco-Media/rsshub]

Bump @sentry/node from 10.74.0 to 11.6.0

By dependabot[bot]

Assigned to

Bumps @sentry/node from 10.74.0 to 11.6.0.

Release notes

Sourced from @​sentry/node's releases.

11.6.0

Important Changes

feat(nextjs): Add @sentry/nextjs/cloudflare (#24998)

The new @sentry/nextjs/cloudflare entry point exports withSentry for the Worker entry of a Next.js app on Cloudflare Workers, for example .open-next/worker.js of OpenNext. It is withSentry of @sentry/cloudflare with the Next.js server handling added, so a Next.js app on Workers gets the same spans as on Node.js.

import * as Sentry from '@sentry/nextjs/cloudflare'; import handler from './.open-next/worker.js';

export default Sentry.withSentry(

env => ({

dsn: env.SENTRY_DSN,

tracesSampleRate: 1.0,

}),

handler,

);

feat(server-utils): Add instrumentation for pi-durable (#24993)

The new piDurableIntegration traces agents built with pi-durable: each run, with its model requests and tool calls.

fix(core): Correct sleep clock drift on telemetry timestamps (#23054)

When a device sleeps, the performance.now() clock of the browser stops. Before this change, timestamps of spans and other telemetry recorded after the sleep could be too early. The SDK now detects this drift and corrects its time origin, also for spans created from performance entries. Span end times are now computed from the performance.now() duration since the span start, like in OpenTelemetry (#24903).

Other Changes

feat(cloudflare): Skip spans for the pi_ tables of PiHarness (#25028)

feat(remix): Propagate the server trace to Remix 3 page loads (#25145)

feat(server-utils): Map Mastra classifier evaluations to gen_ai.evaluate spans (#25044)

feat(server-utils): Record LangChain TypeSafeClassifier runs as gen_ai.evaluate spans (#25120)

fix(browser): Check for clock drift on page lifecycle events (#25091)

fix(core): Exclude attachments from internal exception events (#25160)

fix(effect): Convert Effect span times to the Sentry clock (#24972)

fix(effect): Detect HTTP spans named after the request method (#25159)

fix(node): Register Vercel keep-alive listeners once (#25146)

fix(replay): Place CLS and INP web vitals at the right time (#24990)

fix(server-utils): Record LangGraph span I/O for non-MessagesAnnotation state (#23315)

fix(sveltekit): Upload source maps with SvelteKit 3 (#25139)

chore: Add external contributor to CHANGELOG.md (#25136)

chore(deps-dev): Bump next from 15.5.24 to 15.5.27 (#25171)

chore(nitro): Remove stale bundler-plugin-core rollup external (#25149)

feat(cloudflare): Wrap vinext Worker entries with @sentry/nextjs/cloudflare (#25000)

... (truncated)

Changelog

Sourced from @​sentry/node's changelog.

11.6.0

Important Changes

feat(nextjs): Add @sentry/nextjs/cloudflare (#24998)

The new @sentry/nextjs/cloudflare entry point exports withSentry for the Worker entry of a Next.js app on Cloudflare Workers, for example .open-next/worker.js of OpenNext. It is withSentry of @sentry/cloudflare with the Next.js server handling added, so a Next.js app on Workers gets the same spans as on Node.js.

import * as Sentry from '@sentry/nextjs/cloudflare'; import handler from './.open-next/worker.js';

export default Sentry.withSentry(

env => ({

dsn: env.SENTRY_DSN,

tracesSampleRate: 1.0,

}),

handler,

);

feat(server-utils): Add instrumentation for pi-durable (#24993)

The new piDurableIntegration traces agents built with pi-durable: each run, with its model requests and tool calls.

fix(core): Correct sleep clock drift on telemetry timestamps (#23054)

When a device sleeps, the performance.now() clock of the browser stops. Before this change, timestamps of spans and other telemetry recorded after the sleep could be too early. The SDK now detects this drift and corrects its time origin, also for spans created from performance entries. Span end times are now computed from the performance.now() duration since the span start, like in OpenTelemetry (#24903).

Other Changes

feat(cloudflare): Skip spans for the pi_ tables of PiHarness (#25028)

feat(remix): Propagate the server trace to Remix 3 page loads (#25145)

feat(server-utils): Map Mastra classifier evaluations to gen_ai.evaluate spans (#25044)

feat(server-utils): Record LangChain TypeSafeClassifier runs as gen_ai.evaluate spans (#25120)

fix(browser): Check for clock drift on page lifecycle events (#25091)

fix(core): Exclude attachments from internal exception events (#25160)

fix(effect): Convert Effect span times to the Sentry clock (#24972)

fix(effect): Detect HTTP spans named after the request method (#25159)

fix(node): Register Vercel keep-alive listeners once (#25146)

fix(replay): Place CLS and INP web vitals at the right time (#24990)

fix(server-utils): Record LangGraph span I/O for non-MessagesAnnotation state (#23315)

fix(sveltekit): Upload source maps with SvelteKit 3 (#25139)

chore: Add external contributor to CHANGELOG.md (#25136)

chore(deps-dev): Bump next from 15.5.24 to 15.5.27 (#25171)

chore(nitro): Remove stale bundler-plugin-core rollup external (#25149)

... (truncated)

Commits

3c0c830 release: 11.6.0

13743e9 Merge pull request #25184 from getsentry/prepare-release/11.6.0

3605c50 chore(size-limit): Bump @​sentry/node size limits

53ae996 meta(changelog): Update changelog for 11.6.0

e99e6e1 feat(remix): Propagate the server trace to Remix 3 page loads (#25145)

2fdcb23 test(e2e): Add Mastra Jev classifier test to node-mastra (#25115)

5bb9a68 feat(server-utils): Map Mastra classifier evaluations to gen_ai.evaluate span...

221dd86 test(e2e): Add a cloudflare-pi-durable end-to-end application (#25022)

966e1ff feat(cloudflare): Skip spans for the pi_ tables of PiHarness (#25028)

b70f6bb test(e2e): Add a node-pi-durable end-to-end application (#24994)

Additional commits viewable in compare view

[

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• `@dependabot show

Labeled:

October 12, 2026 at 07:16PM

via GitHub https://ift.tt/7GXgELH

[Oneseco-Media/rsshub]

Bump @honeybadger-io/js from 6.16.3 to 6.16.6

By dependabot[bot]

Assigned to

Bumps @honeybadger-io/js from 6.16.3 to 6.16.6.

Release notes

Sourced from @​honeybadger-io/js's releases.

@​honeybadger-io/js@​6.16.6

6.16.6 (2026-10-08)

Bug Fixes

core: apply filters to query strings wherever a URL is reported (#1677) (d49aec8)

@​honeybadger-io/js@​6.16.5

6.16.5 (2026-09-27)

Bug Fixes

share the js singleton across duplicate module copies (#1670) (39f94ca)

@​honeybadger-io/js@​6.16.4

6.16.4 (2026-09-22)

Note: Version bump only for package @​honeybadger-io/js

Commits

4e92061 chore(release): publish [skip ci]

d49aec8 fix(core): apply filters to query strings wherever a URL is reported (#1677)

03f1158 chore(release): publish [skip ci]

a18c086 feat(nextjs): support Turbopack via Next.js instrumentation and post-compile ...

a03a364 chore(release): publish [skip ci]

1c55d14 fix(react-native): send pre-serialized events batches without re-encoding (#1...

e29582c chore(release): publish [skip ci]

39f94ca fix: share the js singleton across duplicate module copies (#1670)

e21cac8 chore(release): publish [skip ci]

c153000 chore(js): type the query passed to url.format instead of suppressing it (#1668)

See full diff in compare view

[

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• `@dependabot show

Labeled:

October 12, 2026 at 07:16PM

via GitHub https://ift.tt/utviJ02

[Oneseco-Media/rsshub]

Bump tldts from 7.4.12 to 7.4.18

By dependabot[bot]

Assigned to

Bumps tldts from 7.4.12 to 7.4.18.

Release notes

Sourced from tldts's releases.

v7.4.18

:scroll: Update Public Suffix List

tldts-experimental, tldts-icann, tldts

Update upstream public suffix list #2708 (@​remusao)

:nut_and_bolt: Dependencies

Bump mocha from 12.0.2 to 12.0.3 #2700 (@​dependabot[bot])

Bump @​types/node from 26.6.2 to 26.6.4 #2701 (@​dependabot[bot])

Bump globals from 17.12.0 to 17.13.0 #2702 (@​dependabot[bot])

Bump chai from 6.2.2 to 6.3.0 #2703 (@​dependabot[bot])

Bump rollup from 4.63.5 to 4.64.0 #2704 (@​dependabot[bot])

Bump eslint from 10.11.0 to 10.12.0 #2705 (@​dependabot[bot])

Bump postcss-selector-parser from 7.1.5 to 7.1.6 #2707 (@​dependabot[bot])

Bump serialize-javascript from 7.1.1 to 7.1.2 #2706 (@​dependabot[bot])

Bump ip-address from 10.4.0 to 10.7.2 #2697 (@​dependabot[bot])

Bump prettier from 3.9.8 to 3.9.9 #2692 (@​dependabot[bot])

Bump rollup-plugin-sourcemaps2 from 0.5.8 to 0.5.9 #2693 (@​dependabot[bot])

Bump rollup from 4.63.4 to 4.63.5 #2694 (@​dependabot[bot])

Authors: 2

@​dependabot[bot]

Rémi (@​remusao)

v7.4.16

:scroll: Update Public Suffix List

tldts-core, tldts-experimental, tldts-icann, tldts-tests, tldts-utils, tldts

Updates #2691 (@​remusao)

Authors: 1

Rémi (@​remusao)

v7.4.15

:scroll: Update Public Suffix List

tldts-experimental, tldts

Update upstream public suffix list #2685 (@​remusao)

:nut_and_bolt: Dependencies

Bump rollup from 4.63.1 to 4.63.3 #2681 (@​dependabot[bot])

Bump typescript-eslint from 8.69.0 to 8.70.0 #2675 (@​dependabot[bot])

Bump @​types/node from 26.4.1 to 26.6.1 #2682 (@​dependabot[bot])

Bump mocha from 12.0.0 to 12.0.2 #2683 (@​dependabot[bot])

Authors: 2

... (truncated)

Changelog

Sourced from tldts's changelog.

v7.4.17 (Wed Oct 07 2026)

:scroll: Update Public Suffix List

tldts-experimental, tldts-icann, tldts

Update upstream public suffix list #2708 (@​remusao)

:nut_and_bolt: Dependencies

Bump mocha from 12.0.2 to 12.0.3 #2700 (@​dependabot[bot])

Bump @​types/node from 26.6.2 to 26.6.4 #2701 (@​dependabot[bot])

Bump globals from 17.12.0 to 17.13.0 #2702 (@​dependabot[bot])

Bump chai from 6.2.2 to 6.3.0 #2703 (@​dependabot[bot])

Bump rollup from 4.63.5 to 4.64.0 #2704 (@​dependabot[bot])

Bump eslint from 10.11.0 to 10.12.0 #2705 (@​dependabot[bot])

Bump postcss-selector-parser from 7.1.5 to 7.1.6 #2707 (@​dependabot[bot])

Bump serialize-javascript from 7.1.1 to 7.1.2 #2706 (@​dependabot[bot])

Bump ip-address from 10.4.0 to 10.7.2 #2697 (@​dependabot[bot])

Bump prettier from 3.9.8 to 3.9.9 #2692 (@​dependabot[bot])

Bump rollup-plugin-sourcemaps2 from 0.5.8 to 0.5.9 #2693 (@​dependabot[bot])

Bump rollup from 4.63.4 to 4.63.5 #2694 (@​dependabot[bot])

Authors: 2

@​dependabot[bot]

Rémi (@​remusao)

v7.4.16 (Sun Sep 27 2026)

:scroll: Update Public Suffix List

tldts-core, tldts-experimental, tldts-icann, tldts-tests, tldts-utils, tldts

Updates #2691 (@​remusao)

Authors: 1

Rémi (@​remusao)

v7.4.15 (Wed Sep 23 2026)

:scroll: Update Public Suffix List

tldts-experimental, tldts

Update upstream public suffix list #2685 (@​remusao)

:nut_and_bolt: Dependencies

... (truncated)

Commits

3ac3c4c Bump version to: v7.4.18 [skip ci]

c99de8e Update CHANGELOG.md [skip ci]

8c86c3e Bump mocha from 12.0.2 to 12.0.3 (#2700)

989bef8 Bump @​types/node from 26.6.2 to 26.6.4 (#2701)

28ad8bf Bump globals from 17.12.0 to 17.13.0 (#2702)

4890c0d Bump chai from 6.2.2 to 6.3.0 (#2703)

1bf6112 Bump rollup from 4.63.5 to 4.64.0 (#2704)

6a82847 Bump eslint from 10.11.0 to 10.12.0 (#2705)

94508eb Bump postcss-selector-parser from 7.1.5 to 7.1.6 (#2707)

5fd4ff9 Bump serialize-javascript from 7.1.1 to 7.1.2 (#2706)

Additional commits viewable in compare view

[

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• `@dependabot show

Labeled:

October 12, 2026 at 07:15PM

via GitHub https://ift.tt/u9MQytB

[Oneseco-Media/rsshub]

Bump dotenv from 17.4.2 to 18.0.7

By dependabot[bot]

Assigned to

Bumps dotenv from 17.4.2 to 18.0.7.

Changelog

Sourced from dotenv's changelog.

18.0.7 (2026-10-09)

Changed

Treat undefined settings like quiet: true as null rather than falsey (#1070)

CLI should honor DOTENV_QUIET setting in .env file (#1071)

18.0.6 (2026-10-06)

Changed

Use smarter parseBoolean not Boolean() to fix override (#1069)

18.0.5 (2026-09-30)

Changed

Fix missing typescript module declaration (#1068)

Improve performance for large .env files (#1066)

18.0.4 (2026-09-25)

Changed

import dotenv/config should default quiet: true (#1063)

18.0.3 (2026-09-22)

Changed

Patch DOTENV_QUIET setting when inside .env file (#1059)

18.0.2 (2026-09-21)

Changed

Patch additional edge cases for the fast parser (#1056)

18.0.1 (2026-09-18)

Changed

Handle file urls in config logging (#1054)

18.0.0 (2026-09-17)

Added

NEW: Dotenv now has a CLI. (#1022)

... (truncated)

Commits

2953207 18.0.7

9944723 make more readable for undefined -> null

d455db0 Merge branch 'master' of github.com:motdotla/dotenv

e411e02 changelog

6237c35 Merge pull request #1070 from Utkarsh-Singhal-26/fix/ignore-undefined-config-...

9af8c28 Merge pull request #1071 from himanshu748/fix-cli-env-quiet

c7161c6 fix(cli): honor quiet settings loaded from .env

3990466 fix: ignore undefined options so they don't mask DOTENV_* env settings

5d7cc39 18.0.6

750ba03 changelog

Additional commits viewable in compare view

[

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• `@dependabot show

Labeled:

October 12, 2026 at 07:15PM

via GitHub https://ift.tt/zB5X1uY

[Oneseco-Media/rsshub]

Bump @types/node from 26.5.1 to 26.6.5

By dependabot[bot]

Assigned to

Bumps @types/node from 26.5.1 to 26.6.5.

Commits

See full diff in compare view

[

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• `@dependabot show

Labeled:

October 12, 2026 at 07:14PM

via GitHub https://ift.tt/0FGAkXo

[Oneseco-Media/rsshub]

Bump eslint-plugin-yml from 3.8.1 to 3.9.0

By dependabot[bot]

Assigned to

Bumps eslint-plugin-yml from 3.8.1 to 3.9.0.

Release notes

Sourced from eslint-plugin-yml's releases.

v3.9.0

Minor Changes

#675 dc9e467 Thanks @​AdamMagued! - fix(types): support exactOptionalPropertyTypes for flat configs

Changelog

Sourced from eslint-plugin-yml's changelog.

3.9.0

Minor Changes

#675 dc9e467 Thanks @​AdamMagued! - fix(types): support exactOptionalPropertyTypes for flat configs

Commits

abfa046 Version Packages (#679)

dc9e467 fix(types): support exactOptionalPropertyTypes for flat configs (#675)

737e4de chore(deps): update dependency eslint-plugin-jsdoc to v65 (#674)

32d6a58 chore(deps): update typescript-eslint monorepo to ~8.71.0 (#673)

21ef6f2 chore(deps): update dependency monaco-editor to ^0.57.0 (#672)

5eb6045 chore(deps): update typescript-eslint monorepo to ~8.70.0 (#669)

daa2f5f chore(deps): update changesets/action action to v2.1.2 (#668)

bbca18b chore(deps): update dependency tsdown to ^0.23.0 (#666)

264b4d5 chore(deps): update dependency mocha to v12 (#662)

b42d506 chore(deps): update typescript-eslint monorepo to ~8.69.0 (#661)

Additional commits viewable in compare view

[

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• `@dependabot show

Labeled:

October 12, 2026 at 07:14PM

via GitHub https://ift.tt/ad08SVv

[Oneseco-Media/rsshub]

Bump postal-mime from 3.0.0 to 4.0.5

By dependabot[bot]

Assigned to

Bumps postal-mime from 3.0.0 to 4.0.5.

Release notes

Sourced from postal-mime's releases.

v4.0.5

4.0.5 (2026-10-07)

Bug Fixes

bound the number of MIME parts with a maxPartCount option (87eaedd)

convert html with many unclosed link tags to text in linear time (c8e5792)

decode uppercase hex, NUL and C1 numeric character references like a browser (ee12306)

delete the trailing white space of quoted-printable lines (0639c5e)

end the headers at a whitespace-only line when no header can follow it (0639c5e)

fold line breaks out of decoded encoded words and RFC 2231 filenames (1f25e26)

hand attachment bytes through as sent and read legacy mail the lax way (0639c5e)

keep an escaped parenthesis inside an RFC 5322 comment (a2a07ce)

keep the line endings of 7bit, 8bit and binary parts and normalize text to LF (0639c5e)

read a multipart without a boundary parameter as plain text (0639c5e)

read text without a usable charset as UTF-8 or windows-1252 and honor an html meta charset (0639c5e)

unfold format=flowed quoted paragraphs as RFC 3676 reads them (0639c5e)

v4.0.4

4.0.4 (2026-10-03)

Bug Fixes

stop decoding the CRLF before a multipart boundary as part content (004eec7), closes #102

v4.0.3

4.0.3 (2026-10-03)

Bug Fixes

keep a continuation from overriding the plain parameter of the same name (6fa92ad)

stop the junk behind a closed quoted string from hiding the whole body (535fcf8)

v4.0.2

4.0.2 (2026-09-30)

Bug Fixes

stop a "[" from hiding the operators after it (2797ee5)

v4.0.1

4.0.1 (2026-09-30)

Bug Fixes

... (truncated)

Changelog

Sourced from postal-mime's changelog.

4.0.5 (2026-10-07)

Bug Fixes

bound the number of MIME parts with a maxPartCount option (87eaedd)

convert html with many unclosed link tags to text in linear time (c8e5792)

decode uppercase hex, NUL and C1 numeric character references like a browser (ee12306)

delete the trailing white space of quoted-printable lines (0639c5e)

end the headers at a whitespace-only line when no header can follow it (0639c5e)

fold line breaks out of decoded encoded words and RFC 2231 filenames (1f25e26)

hand attachment bytes through as sent and read legacy mail the lax way (0639c5e)

keep an escaped parenthesis inside an RFC 5322 comment (a2a07ce)

keep the line endings of 7bit, 8bit and binary parts and normalize text to LF (0639c5e)

read a multipart without a boundary parameter as plain text (0639c5e)

read text without a usable charset as UTF-8 or windows-1252 and honor an html meta charset (0639c5e)

unfold format=flowed quoted paragraphs as RFC 3676 reads them (0639c5e)

4.0.4 (2026-10-03)

Bug Fixes

stop decoding the CRLF before a multipart boundary as part content (004eec7), closes #102

4.0.3 (2026-10-03)

Bug Fixes

keep a continuation from overriding the plain parameter of the same name (6fa92ad)

stop the junk behind a closed quoted string from hiding the whole body (535fcf8)

4.0.2 (2026-09-30)

Bug Fixes

stop a "[" from hiding the operators after it (2797ee5)

4.0.1 (2026-09-30)

Bug Fixes

do not read an address out of a quoted encoded word (c88eaf5)

keep a display name holding an encoded word out of the address (ce5ba24)

open a domain-literal only after the '@' of an address (776b951)

port the address parser fixes from Nodemailer (902bd3f)

... (truncated)

Commits

16a157b chore(master): release 4.0.5 (#106)

a2a07ce fix: keep an escaped parenthesis inside an RFC 5322 comment

472121f test: compare the windows-1252 fallback with the runtime's own decoder

f5506e2 test: fuzz the parser with mutated fixtures and round trip messages composed ...

0639c5e fix: hand attachment bytes through as sent and read legacy mail the lax way

a8135c7 docs: sandbox the demo iframe and note what the parsed output needs sanitizin...

1f25e26 fix: fold line breaks out of decoded encoded words and RFC 2231 filenames

ee12306 fix: decode uppercase hex, NUL and C1 numeric character references like a bro...

c8e5792 fix: convert html with many unclosed link tags to text in linear time

87eaedd fix: bound the number of MIME parts with a maxPartCount option

Additional commits viewable in compare view

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.

[

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• `@dependabot show

Labeled:

October 12, 2026 at 07:13PM

via GitHub https://ift.tt/lu2UQ8A

[Oneseco-Media/rsshub]

Bump the opentelemetry group with 5 updates

By dependabot[bot]

Assigned to

Bumps the opentelemetry group with 5 updates:

Updates @opentelemetry/exporter-prometheus from 0.222.0 to 0.223.0

Release notes

Sourced from @​opentelemetry/exporter-prometheus's releases.

experimental/v0.223.0

0.223.0

:boom: Breaking Changes

chore(web-common)!: clean up and deprecate network span utils #7114

These utilities were long planned for removal. They were moved from the sdk-trace-web package and are currently only used by the (deprecated) instrumentation-fetch and instrumentation-xml-http-request packages.

Drop the skipOldSemconvContentLengthAttrs vestigial option from addSpanNetworkEvents().

:house: Internal

refactor(web-common, instrumentation-fetch, instrumentation-xml-http-request): move utils from @opentelemetry/sdk-trace-web into @opentelemetry/web-common and use them in @opentelemetry/instrumentation-fetch and @opentelemetry/instrumentation-xml-http-request. With this change the instrumentations do not depend on SDK packages and the utils are kept in a shared package so we avoid code duplication.

Commits

92b844e chore: prepare next v2.x release (#7151)

a859aff fix(web-common): export getElementXPath utility (#7124)

2bd5a73 chore(web-common)!: deprecate addSpanNetworkEvents() et al instrumentation-...

d60f05e doc(sdk-trace): add description for StackContextManager (#7089)

5bd476e chore: move context manager to sdk-trace (#7086)

554c0c6 chore: move sdk-trace-web utils to web-common (#7058)

788922c ci: support maintenance branch releases (#7036)

See full diff in compare view

Updates @opentelemetry/exporter-trace-otlp-http from 0.222.0 to 0.223.0

Release notes

Sourced from @​opentelemetry/exporter-trace-otlp-http's releases.

experimental/v0.223.0

0.223.0

:boom: Breaking Changes

chore(web-common)!: clean up and deprecate network span utils #7114

These utilities were long planned for removal. They were moved from the sdk-trace-web package and are currently only used by the (deprecated) instrumentation-fetch and instrumentation-xml-http-request packages.

Drop the skipOldSemconvContentLengthAttrs vestigial option from addSpanNetworkEvents().

:house: Internal

refactor(web-common, instrumentation-fetch, instrumentation-xml-http-request): move utils from @opentelemetry/sdk-trace-web into @opentelemetry/web-common and use them in @opentelemetry/instrumentation-fetch and @opentelemetry/instrumentation-xml-http-request. With this change the instrumentations do not depend on SDK packages and the utils are kept in a shared package so we avoid code duplication.

Commits

92b844e chore: prepare next v2.x release (#7151)

a859aff fix(web-common): export getElementXPath utility (#7124)

2bd5a73 chore(web-common)!: deprecate addSpanNetworkEvents() et al instrumentation-...

d60f05e doc(sdk-trace): add description for StackContextManager (#7089)

5bd476e chore: move context manager to sdk-trace (#7086)

554c0c6 chore: move sdk-trace-web utils to web-common (#7058)

788922c ci: support maintenance branch releases (#7036)

See full diff in compare view

Updates @opentelemetry/resources from 2.11.0 to 2.12.0

Release notes

Sourced from @​opentelemetry/resources's releases.

v2.12.0

2.12.0

:rocket: Features

chore(sdk-trace): add StackContextManager in @opentelemetry/sdk-trace package #7086

:house: Internal

feat(ci): support releasing from maintenance branches #6767 @​pichlermarc

The API documentation site is only redeployed for releases whose commit is reachable from main, so a maintenance release no longer overwrites it.

Changelog

Sourced from @​opentelemetry/resources's changelog.

2.12.0

:house: Internal

chore(sdk-trace): add StackContextManager in @opentelemetry/sdk-trace package #7086

feat(ci): support releasing from maintenance branches #6767 @​pichlermarc

The API documentation site is only redeployed for releases whose commit is reachable from main, so a maintenance release no longer overwrites it.

Commits

92b844e chore: prepare next v2.x release (#7151)

a859aff fix(web-common): export getElementXPath utility (#7124)

2bd5a73 chore(web-common)!: deprecate addSpanNetworkEvents() et al instrumentation-...

d60f05e doc(sdk-trace): add description for StackContextManager (#7089)

5bd476e chore: move context manager to sdk-trace (#7086)

554c0c6 chore: move sdk-trace-web utils to web-common (#7058)

788922c ci: support maintenance branch releases (#7036)

See full diff in compare view

Updates @opentelemetry/sdk-metrics from 2.11.0 to 2.12.0

Release notes

Sourced from @​opentelemetry/sdk-metrics's releases.

v2.12.0

2.12.0

:rocket: Features

chore(sdk-trace): add StackContextManager in @opentelemetry/sdk-trace package #7086

:house: Internal

feat(ci): support releasing from maintenance branches #6767 @​pichlermarc

The API documentation site is only redeployed for releases whose commit is reachable from main, so a maintenance release no longer overwrites it.

Changelog

Sourced from @​opentelemetry/sdk-metrics's changelog.

2.12.0

:house: Internal

chore(sdk-trace): add StackContextManager in @opentelemetry/sdk-trace package #7086

feat(ci): support releasing from maintenance branches #6767 @​pichlermarc

The API documentation site is only redeployed for releases whose commit is reachable from main, so a maintenance release no longer overwrites it.

Commits

92b844e chore: prepare next v2.x release (#7151)

a859aff fix(web-common): export getElementXPath utility (#7124)

2bd5a73 chore(web-common)!: deprecate addSpanNetworkEvents() et al instrumentation-...

d60f05e doc(sdk-trace): add description for StackContextManager (#7089)

5bd476e chore: move context manager to sdk-trace (#7086)

554c0c6 chore: move sdk-trace-web utils to web-common (#7058)

788922c ci: support maintenance branch releases (#7036)

See full diff in compare view

Updates @opentelemetry/sdk-trace-base from 2.11.0 to 2.12.0

Release notes

Sourced from @​opentelemetry/sdk-trace-base's releases.

v2.12.0

2.12.0

:rocket: Features

chore(sdk-trace): add StackContextManager in @opentelemetry/sdk-trace package #7086

:house: Internal

feat(ci): support releasing from maintenance branches #6767 @​pichlermarc

The API documentation site is only redeployed for releases whose commit is reachable from main, so a maintenance release no longer overwrites it.

Changelog

Sourced from @​opentelemetry/sdk-trace-base's changelog.

2.12.0

:house: Internal

chore(sdk-trace): add StackContextManager in @opentelemetry/sdk-trace package #7086

feat(ci): support releasing from maintenance branches #6767 @​pichlermarc

The API documentation site is only redeployed for releases whose commit is reachable from main, so a maintenance release no longer overwrites it.

Commits

92b844e chore: prepare next v2.x release (#7151)

a859aff fix(web-common): export getElementXPath utility (#7124)

2bd5a73 chore(web-common)!: deprecate addSpanNetworkEvents() et al instrumentation-...

d60f05e doc(sdk-trace): add description for StackContextManager (#7089)

5bd476e chore: move context manager to sdk-trace (#7086)

554c0c6 chore: move sdk-trace-web utils to web-common (#7058)

788922c ci: support maintenance branch releases (#7036)

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• `@dependabot show

Labeled:

October 12, 2026 at 07:12PM

via GitHub https://ift.tt/uFqi5Cz

[Cybersoulja/trill-local-runtime]

docs: document trill-voice cockpit and local runtime updates

By Cybersoulja

Assigned to

Documents the trill-voice CLI and Voice Cockpit (port 8766) in GLOBAL.md and AGENTS.md, and ignores .clasprc.json. The branch also carries earlier n8n, Jellyfin and my-api commits not yet on main.

Labeled:

October 11, 2026 at 12:16AM

via GitHub https://ift.tt/QnuvJ3N

[Oneseco-Media/rsshub]

Bump jsdom from 30.0.1 to 30.1.2

By dependabot[bot]

Assigned to

Bumps jsdom from 30.0.1 to 30.1.2.

Release notes

Sourced from jsdom's releases.

v30.1.2

Updated URLs to support Unicode v18.0.0 in internationalized domain names.

Reduced package size and memory use for CSS property definitions. (@​scttcper)

Fixed severe slowdowns when building large DOM trees, including SVG charts with D3, which regressed in v30.1.0. (@​cmdcolin)

Fixed exponentially slow reads of empty inherited CSS custom properties in deeply nested documents, and custom properties incorrectly inheriting past an initial reset. (@​scttcper)

Fixed getComputedStyle() returning stale results after editing stylesheet declarations, selectors, or media queries, including in imported stylesheets.

Fixed selector matching and computed styles after changes to form control checkedness, indeterminacy, selection, values, and validity, including during form resets and canceled clicks.

Fixed computed styles for :focus, :focus-visible, :focus-within, and selectors containing them after focus changes, including inside focus and blur listeners. (@​asamuzaK)

Fixed element.focus() incorrectly focusing elements hidden by 'display', including through shadow hosts and slots, and elements excluded by shadow DOM slot assignment. (@​asamuzaK)

Fixed getComputedStyle() throwing for elements without inline-style support, including XML and MathML elements.

Fixed a memory leak where stylesheet parsing retained the last parsed stylesheet's window after window.close().

Fixed memory growth from long-lived MutationObserver instances retaining bookkeeping for garbage-collected nodes. (@​scttcper)

Fixed retained select.selectedOptions collections becoming stale after selection changes and form resets.

Fixed rejection of negative CSS sizing values, including for 'min-width', 'min-height', 'max-width', and 'max-height', which regressed in v30.1.0.

Fixed handling of deeply nested color-mix() expressions, including exceptions during color resolution. (@​asamuzaK)

v30.1.1

Fixed spurious window blur and focusout events and incorrect event.relatedTarget values when focusing an element after removing the previously focused element, which regressed in v30.1.0. (@​asamuzaK)

Fixed focus and blur behavior across frames, and focusing the document's viewport through document.documentElement.focus(). (@​asamuzaK)

Fixed focus targets removed or disabled by blur listeners becoming active, and text selections made by focus and blur listeners being overwritten. (@​asamuzaK)

Fixed element.focus() incorrectly focusing disabled form controls and <input type="hidden"> elements with tabindex="". (@​scttcper)

Fixed invalid style.setProperty() calls changing existing !important priorities, serialized styles, or mutation records. (@​FedgeNo)

Fixed !important handling when updating CSS longhands after shorthands, using variables or CSS-wide keywords, and assigning style properties directly. (@​FedgeNo)

Fixed <noscript> parsing with includeNodeLocations: true or inside frames to honor the runScripts option.

Fixed the storageQuota option being ignored by frames.

Fixed encoding detection of HTML and XML byte input to honor XML encoding declarations and detect UTF-16 without a byte order mark.

Fixed exceptions caused by truncated charset parameters in <meta> elements, and encoding detection incorrectly using incomplete <meta> tags. (@​FedgeNo)

Fixed XML serialization errors for namespaces named constructor, toString, proto, or "null", and incorrect reuse of namespace prefixes declared on sibling elements.

Fixed element.innerHTML and element.outerHTML in XML documents to reject invalid characters in attribute values and avoid stack overflows on large strings.

Fixed selector matching for :lang(), :nth-child(... of ...) after mutations, and :has() with duplicate IDs or nested logical pseudo-classes. (@​asamuzaK)

v30.1.0

jsdom is feeling the AGI!

This release is dedicated to @​scttcper, who unleashed @​codex upon jsdom and found tons of performance improvements. Along the way, he found and fixed many correctness issues as well.

We really appreciate his thoughtful PRs, which did a great job following the project's contribution guidelines, and were clearly human-curated, with their PR descriptions edited to be brief and respectful of the maintainers' time.

Thanks to @​scttcper, as well as all the other contributors of this release (most of whom were AI-assisted).

Added named access to elements on document, such as document.myForm for <form name="myForm">. (@​vojtisprime11)

Added QuotaExceededError, including its use for storage quota errors and oversized crypto.getRandomValues() requests.

Added support for the relaxed DOM naming rules when creating elements, attributes, and document types.

Improved performance of DOM construction, tree mutations, range operations, and live collection access, especially on large documents. (@​scttcper, @​erezrokah)

Improved performance of getComputedStyle(), style changes, and CSS serialization. (@​scttcper, @​jhult)

Improved performance of event dispatch, form control and label lookups, and updates to <select> elements and radio button groups. (@​scttcper)

Reduced memory use when creating and working with DOM nodes, attributes, event listeners, and mutation observers. (@​scttcper)

Changed window.close() to preserve access to the document and its DOM through retained references.

Fixed element.querySelectorAll() returning no matches when the first part of the selector matches the element itself, which regressed in v30.0.0. (@​asamuzaK)

Fixed case sensitivity in CSS attribute selectors, including selectors matching data-state="", title="", and other case-sensitive values. (@​asamuzaK)

... (truncated)

Commits

a23bfb7 30.1.2

64a75d2 Update dependencies and dev dependencies

7bf9653 Invalidate styles after CSSOM and control state changes

fe9009c Update focused area handling

a8d28b3 Release windows retained by stylesheet parsing

05a2c01 Deduplicate generated CSS property metadata

1efa190 Reduce generated CSS property data

a372e12 Avoid Document named-property rebuilds after irrelevant tree mutations

b2cd235 Update css-color

0542d2b Release idle MutationObserver bookkeeping

Additional commits viewable in compare view

[

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• `@dependabot show

Labeled:

October 8, 2026 at 03:12AM

via GitHub https://ift.tt/OUxHBsa

[Oneseco-Media/rsshub]

Bump imapflow from 2.0.2 to 2.2.5

By dependabot[bot]

Assigned to

Bumps imapflow from 2.0.2 to 2.2.5.

Changelog

Sourced from imapflow's changelog.

2.2.5 (2026-10-04)

Bug Fixes

deps: update libbase64 to 1.3.2, libmime to 5.4.7 and mailsplit to 5.4.20 (fe10c6a)

2.2.4 (2026-10-03)

Bug Fixes

deps: hold pino at 10.3.x to match EmailEngine (65062e0)

2.2.3 (2026-10-03)

Bug Fixes

reject NUL in a non-ASCII search value instead of sending it as a literal (8c35084)

send non-ASCII search values as literals (b58d93e), closes #417

2.2.2 (2026-10-03)

Bug Fixes

do not let a flag update that reduces to nothing clear every flag (686a04b)

keep append flags when the destination is not an open read-write mailbox (d7f8da3), closes #415

2.2.1 (2026-10-01)

Bug Fixes

do not enable IMAP4rev2 on Strato RZimapd (dce30f8), closes #411

2.2.0 (2026-10-01)

Features

let the client choose the hash behind the fallback message id (0eb74e1)

2.1.2 (2026-09-28)

Bug Fixes

deps: update libmime to 5.4.6 and mailsplit to 5.4.19 (f6afb32)

... (truncated)

Commits

ca0fb63 Merge pull request #420 from postalsys/release-please--branches--master--comp...

560a422 chore(master): release 2.2.5 [skip-ci]

fe10c6a fix(deps): update libbase64 to 1.3.2, libmime to 5.4.7 and mailsplit to 5.4.20

65f7b32 Merge pull request #419 from postalsys/release-please--branches--master--comp...

421d629 chore(master): release 2.2.4 [skip-ci]

65062e0 fix(deps): hold pino at 10.3.x to match EmailEngine

827aafd Merge pull request #418 from postalsys/release-please--branches--master--comp...

6260e0d chore(master): release 2.2.3 [skip-ci]

8c35084 fix: reject NUL in a non-ASCII search value instead of sending it as a literal

b58d93e fix: send non-ASCII search values as literals

Additional commits viewable in compare view

[

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• `@dependabot show

Labeled:

October 8, 2026 at 03:11AM

via GitHub https://ift.tt/ncEl32P

[Oneseco-Media/rsshub]

Bump postal-mime from 3.0.0 to 4.0.4

By dependabot[bot]

Assigned to

Bumps postal-mime from 3.0.0 to 4.0.4.

Release notes

Sourced from postal-mime's releases.

v4.0.4

4.0.4 (2026-10-03)

Bug Fixes

stop decoding the CRLF before a multipart boundary as part content (004eec7), closes #102

v4.0.3

4.0.3 (2026-10-03)

Bug Fixes

keep a continuation from overriding the plain parameter of the same name (6fa92ad)

stop the junk behind a closed quoted string from hiding the whole body (535fcf8)

v4.0.2

4.0.2 (2026-09-30)

Bug Fixes

stop a "[" from hiding the operators after it (2797ee5)

v4.0.1

4.0.1 (2026-09-30)

Bug Fixes

do not read an address out of a quoted encoded word (c88eaf5)

keep a display name holding an encoded word out of the address (ce5ba24)

open a domain-literal only after the '@' of an address (776b951)

port the address parser fixes from Nodemailer (902bd3f)

v4.0.0

4.0.0 (2026-09-26)

⚠ BREAKING CHANGES

Node.js 20 or newer is required.

Attachment.disposition is typed as AttachmentDisposition | null, which accepts any Content-Disposition token, instead of 'attachment' | 'inline' | null. The parsed output is unchanged, but code that assigns the value to the narrower type has to widen it.

the ES module entry point moved from src/postal-mime.js to dist/esm/postal-mime.js, so browser code that imported the file from node_modules directly has to use the new path. Consumers that import postal-mime by name are unaffected.

Features

convert to TypeScript and ship ES module and CommonJS builds (2559c82)

declare the CommonJS entry point with export = and ship source maps (84d1159)

... (truncated)

Changelog

Sourced from postal-mime's changelog.

4.0.4 (2026-10-03)

Bug Fixes

stop decoding the CRLF before a multipart boundary as part content (004eec7), closes #102

4.0.3 (2026-10-03)

Bug Fixes

keep a continuation from overriding the plain parameter of the same name (6fa92ad)

stop the junk behind a closed quoted string from hiding the whole body (535fcf8)

4.0.2 (2026-09-30)

Bug Fixes

stop a "[" from hiding the operators after it (2797ee5)

4.0.1 (2026-09-30)

Bug Fixes

do not read an address out of a quoted encoded word (c88eaf5)

keep a display name holding an encoded word out of the address (ce5ba24)

open a domain-literal only after the '@' of an address (776b951)

port the address parser fixes from Nodemailer (902bd3f)

4.0.0 (2026-09-26)

⚠ BREAKING CHANGES

Node.js 20 or newer is required.

Attachment.disposition is typed as AttachmentDisposition | null, which accepts any Content-Disposition token, instead of 'attachment' | 'inline' | null. The parsed output is unchanged, but code that assigns the value to the narrower type has to widen it.

the ES module entry point moved from src/postal-mime.js to dist/esm/postal-mime.js, so browser code that imported the file from node_modules directly has to use the new path. Consumers that import postal-mime by name are unaffected.

Features

convert to TypeScript and ship ES module and CommonJS builds (2559c82)

declare the CommonJS entry point with export = and ship source maps (84d1159)

type the attachment disposition as the token the message carries (4bb2796)

Bug Fixes

... (truncated)

Commits

659e56e chore(master): release 4.0.4 (#104)

004eec7 fix: stop decoding the CRLF before a multipart boundary as part content

74c6d89 chore: bump dev dependencies

3004ab6 chore(master): release 4.0.3 (#103)

6fa92ad fix: keep a continuation from overriding the plain parameter of the same name

535fcf8 fix: stop the junk behind a closed quoted string from hiding the whole body

a64b943 chore(master): release 4.0.2 (#101)

2797ee5 fix: stop a "[" from hiding the operators after it

b9406e6 chore(master): release 4.0.1 (#100)

053d18d chore: update dependencies

Additional commits viewable in compare view

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.

[

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• `@dependabot show

Labeled:

October 7, 2026 at 03:11AM

via GitHub https://ift.tt/XWKOaDJ

[Oneseco-Media/rsshub]

Bump eslint-plugin-unicorn from 74.0.0 to 77.0.0

By dependabot[bot]

Assigned to

Bumps eslint-plugin-unicorn from 74.0.0 to 77.0.0.

Release notes

Sourced from eslint-plugin-unicorn's releases.

v77.0.0

Breaking

Move CSS-only rules to eslint-cssicorn (#3811) c3697c02

unicorn/no-deprecated-css-features → cssicorn/no-deprecated-features

unicorn/no-duplicate-css-selectors → cssicorn/no-duplicate-selectors

unicorn/no-duplicate-font-family-names → cssicorn/no-duplicate-font-family-names

unicorn/no-invalid-media-features → cssicorn/no-invalid-media-features

unicorn/no-nesting-with-mixed-specificity → cssicorn/no-nesting-with-mixed-specificity

unicorn/no-redundant-nested-style-rules → cssicorn/no-redundant-nested-style-rules

unicorn/no-unknown-css-annotations → cssicorn/no-unknown-annotations

unicorn/no-unknown-pseudo-selectors → cssicorn/no-unknown-pseudo-selectors

unicorn/no-unscoped-css-nesting-selector → cssicorn/no-unscoped-nesting-selector

unicorn/prefer-explicit-viewport-units → cssicorn/prefer-explicit-viewport-units

unicorn/prefer-media-feature-range-syntax → cssicorn/prefer-media-feature-range-syntax

Remove the deprecated flat/recommended and flat/all configs (#3810) 6f989c6f

Use recommended and all instead.

New rules

no-invalid-response-options (#3808) 7d590065

no-prevent-default-in-passive-listener (#3806) 09f94f2c

no-invalid-boolean-attribute-value (#3807) 2b91aa70

no-conflicting-constraints (#3805) 7c9b39ae

no-invalid-property-descriptor (#3804) d0bd123c

no-invalid-url-protocol-comparison (#3803) ec7b0634

no-invalid-integrity (#3802) d0b974c2

no-url-in-search-params (#3800) c1008cfd

no-invalid-dom-token (#3799) 85c9aa18

require-text-decoder-streaming (#3798) f3c317ea

no-invalid-temporal-arithmetic (#3797) 47904f2f

no-invalid-style-set-property (#3796) 239dd0b4

no-ineffective-csp-directives (#3795) a28a1042

no-invalid-intl-options (#3794) e7dc6d6c

no-unsafe-json-serialization (#3793) 7cc147b4

comma-spacing (#3790) a7a41803

no-empty-link-text (#3789) 742b3613

no-leading-empty-lines (#3786) 5c509bb8

no-unnecessary-parameters (#3784) e143b4b5

prefer-promise-static-methods (#3747) f3eefdea

no-javascript-url (#3746) 201e1289

no-incomplete-accessor-override (#3745) dee7a617

prefer-escaped-irregular-whitespace (#3742) d7f82224

key-name-casing (#3741) a330d287

prefer-literal-ascii (#3734) e9b5bcde

prefer-short-escape-sequences (#3731) 0e66146f

no-loss-of-precision (#3729) d4bdf38c

indent (#3726) 64ff93da

Improvements

... (truncated)

Commits

15f1d64 77.0.0

d252a13 Switch tests to node:test and add more tests (#3812)

c3697c0 Move CSS-only rules to eslint-cssicorn (#3811)

6f989c6 Add recommended presets for non-JavaScript languages (#3810)

93ef59c prefer-direct-iteration: Fix type inference for destructured bindings (#3809)

7d59006 Add no-invalid-response-options rule (#3808)

09f94f2 Add no-prevent-default-in-passive-listener rule (#3806)

ec7b063 Add no-invalid-url-protocol-comparison rule (#3803)

2b91aa7 Add no-invalid-boolean-attribute-value rule (#3807)

7c9b39a Add no-conflicting-constraints rule (#3805)

Additional commits viewable in compare view

[

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• `@dependabot show

Labeled:

October 7, 2026 at 03:10AM

via GitHub https://ift.tt/GArutCL

[Oneseco-Media/rsshub]

Bump imapflow from 2.0.2 to 2.2.4

By dependabot[bot]

Assigned to

Bumps imapflow from 2.0.2 to 2.2.4.

Changelog

Sourced from imapflow's changelog.

2.2.4 (2026-10-03)

Bug Fixes

deps: hold pino at 10.3.x to match EmailEngine (65062e0)

2.2.3 (2026-10-03)

Bug Fixes

reject NUL in a non-ASCII search value instead of sending it as a literal (8c35084)

send non-ASCII search values as literals (b58d93e), closes #417

2.2.2 (2026-10-03)

Bug Fixes

do not let a flag update that reduces to nothing clear every flag (686a04b)

keep append flags when the destination is not an open read-write mailbox (d7f8da3), closes #415

2.2.1 (2026-10-01)

Bug Fixes

do not enable IMAP4rev2 on Strato RZimapd (dce30f8), closes #411

2.2.0 (2026-10-01)

Features

let the client choose the hash behind the fallback message id (0eb74e1)

2.1.2 (2026-09-28)

Bug Fixes

deps: update libmime to 5.4.6 and mailsplit to 5.4.19 (f6afb32)

2.1.1 (2026-09-28)

Bug Fixes

settle every pending connect on close, refuse empty search operands, keep NIL envelope rows, prefer top-level special-use folders (27a93cc)

... (truncated)

Commits

65f7b32 Merge pull request #419 from postalsys/release-please--branches--master--comp...

421d629 chore(master): release 2.2.4 [skip-ci]

65062e0 fix(deps): hold pino at 10.3.x to match EmailEngine

827aafd Merge pull request #418 from postalsys/release-please--branches--master--comp...

6260e0d chore(master): release 2.2.3 [skip-ci]

8c35084 fix: reject NUL in a non-ASCII search value instead of sending it as a literal

b58d93e fix: send non-ASCII search values as literals

f6ef3d0 Merge pull request #416 from postalsys/release-please--branches--master--comp...

e123ec2 chore(master): release 2.2.2 [skip-ci]

686a04b fix: do not let a flag update that reduces to nothing clear every flag

Additional commits viewable in compare view

[

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• `@dependabot show

Labeled:

October 7, 2026 at 03:10AM

via GitHub https://ift.tt/jSfBdhx

[Oneseco-Media/rsshub]

Bump @googleapis/youtube from 38.0.0 to 40.0.0

By dependabot[bot]

Assigned to

Bumps @googleapis/youtube from 38.0.0 to 40.0.0.

Release notes

Sourced from @​googleapis/youtube's releases.

youtube: v40.0.0

40.0.0 (2026-10-03)

⚠ BREAKING CHANGES

youtube: This release has breaking changes.

Features

youtube: update the API (06d08ca)

youtube: v39.0.1

39.0.1 (2026-09-23)

Bug Fixes

youtube: update the API (512e921)

networkservices: v38.2.0

38.2.0 (2026-10-03)

Features

networkservices: update the API (476f865)

run: v38.2.0

38.2.0 (2026-10-03)

Features

run: update the API (421e6bd)

Changelog

Sourced from @​googleapis/youtube's changelog.

40.0.0 (2019-05-13)

Bug Fixes

Incorrect case README (#1706) (3e17bd8)

samples: fix readline args in youtube upload (#1676) (3db63d6)

Build System

upgrade engines field to >=8.10.0 (#1691) (8428d5c)

Features

run the generator (#1680) (6d5a9c8)

run the generator (#1709) (6817c39)

BREAKING CHANGES

This release has a few breaking changes.

Node.js 8.x is now the minimum required version

The healthcare/v1alpha API has been removed

Uses google-auth-library 4.0

upgrade engines field to >=8.10.0 (#1691)

v39.2.0

04-03-2019 16:17 PDT

This release has a few hot new APIs:

healthcare_v1beta1

run_v1

run_v1alpha1

securitycenter_v1

securitycenter_v1beta1

New Features

feat: run the generator (#1668)

Internal / Testing Changes

chore(deps): update dependency typescript to ~3.4.0

chore(deps): update dependency @​types/tmp to ^0.1.0

v39.1.0

03-28-2019 16:17 PDT

... (truncated)

Commits

3b2e51a chore: release 40.0.0 (#1710)

6817c39 feat!: run the generator (#1709)

8256d69 build: nyc configuration with --all

3e17bd8 fix: Incorrect case README (#1706)

3a4ff77 refactor: drop pify dependency (#1704)

70b1243 chore: upgrade gts to new version (#1703)

e6e632a build: switches to piping coverage to codecov from Node 10 (#1694)

e82a8bf build: allow Node 10 on presubmit to push to codecov (#1698)

ecaa83a build: allow Node 10 to push to codecov (#1697)

92ea32b chore(deps): update dependency ts-loader to v6 (#1700)

Additional commits viewable in compare view

[

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• `@dependabot show

Labeled:

October 6, 2026 at 03:11AM

via GitHub https://ift.tt/fEqZPg5

[Oneseco-Media/rsshub]

Bump @sentry/node from 10.74.0 to 11.4.0

By dependabot[bot]

Assigned to

Bumps @sentry/node from 10.74.0 to 11.4.0.

Release notes

Sourced from @​sentry/node's releases.

11.4.0

feat(sveltekit): Support stable SvelteKit 3 (#25009)

fix(remix): Match the Remix 3.0.0 package versions (#25008)

Bundle size 📦

Path

Size

@​sentry/browser

28.82 KB

@​sentry/browser - with treeshaking flags

27.03 KB

@​sentry/browser - with treeshaking flags tracing without tracing

26.93 KB

@​sentry/browser (incl. Tracing)

50.24 KB

@​sentry/browser (incl. Tracing + Span Streaming)

50.26 KB

@​sentry/browser (incl. Tracing, Profiling)

53.18 KB

@​sentry/browser (incl. Tracing, Replay)

88.91 KB

@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags

78.15 KB

@​sentry/browser (incl. Tracing, Replay with Canvas)

93.5 KB

@​sentry/browser (incl. Tracing, Replay, Feedback)

106.16 KB

@​sentry/browser (incl. Feedback)

45.94 KB

@​sentry/browser (incl. sendFeedback)

33.76 KB

@​sentry/browser (incl. FeedbackAsync)

38.75 KB

@​sentry/browser (incl. Metrics)

29.82 KB

@​sentry/browser (incl. Logs)

30.1 KB

@​sentry/browser (incl. Metrics & Logs)

30.74 KB

@​sentry/react

30.63 KB

@​sentry/react (incl. Tracing)

52.54 KB

@​sentry/vue

36.63 KB

@​sentry/vue (incl. Tracing)

53.06 KB

@​sentry/svelte

28.86 KB

@​sentry/remix (Remix 3 client bundle)

54.47 KB

CDN Bundle

30.49 KB

CDN Bundle (incl. Tracing)

50.76 KB

CDN Bundle (incl. Logs, Metrics)

32.68 KB

CDN Bundle (incl. Tracing, Logs, Metrics)

52.65 KB

CDN Bundle (incl. Replay, Logs, Metrics)

72.47 KB

CDN Bundle (incl. Tracing, Replay)

87.46 KB

CDN Bundle (incl. Tracing, Replay, Logs, Metrics)

89.39 KB

CDN Bundle (incl. Tracing, Replay, Feedback)

93.48 KB

CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics)

95.42 KB

CDN Bundle - uncompressed

89.98 KB

CDN Bundle (incl. Tracing) - uncompressed

150.87 KB

CDN Bundle (incl. Logs, Metrics) - uncompressed

96.4 KB

CDN Bundle (incl. Tracing, Logs, Metrics) - uncompressed

156.69 KB

CDN Bundle (incl. Replay, Logs, Metrics) - uncompressed

222.93 KB

CDN Bundle (incl. Tracing, Replay) - uncompressed

267.8 KB

CDN Bundle (incl. Tracing, Replay, Logs, Metrics) - uncompressed

273.6 KB

CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed

281.18 KB

CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) - uncompressed

286.97 KB

@​sentry/nextjs (client)

55 KB

@​sentry/sveltekit (client)

50.65 KB

... (truncated)

Changelog

Sourced from @​sentry/node's changelog.

11.4.0

feat(sveltekit): Support stable SvelteKit 3 (#25009)

fix(remix): Match the Remix 3.0.0 package versions (#25008)

11.3.0

Important Changes

Remix 3 support (alpha, may break in minor releases)

feat(remix): Add Remix 3 browser SDK with a bundled client entry (#24802)

feat(remix): Add source map upload for Remix 3 (#24943)

feat(remix): Capture Remix 3 component render errors (#24873)

feat(remix): Complete Remix 3 server error handling (#24878)

feat(remix): Inject debug IDs through the Remix 3 asset server (#24761)

feat(remix): Run the orchestrion transform on Remix 3 browser modules (#24894)

feat(nextjs): Add cache_origin span links to use cache hit spans (#24821)

A cache.get span for a "use cache" hit now carries a span link (sentry.link.type: 'cache_origin') to the cache.put span of the request that filled the cache entry, connecting the trace that reads a cached value to the trace that produced it.

fix(cloudflare): Don't treat DO constructor work as incoming RPC calls (#24829)

Durable Object constructors now run in their own isolation scope. When work that the constructor starts, for example a blockConcurrencyWhile callback, calls a method of the instance, that call is no longer treated as an incoming RPC call, so an error the instance catches itself is no longer reported as unhandled. As a result, Sentry.setTag(), setUser() and setContext() in a constructor now apply only to that constructor work. They no longer reach later fetch, RPC or alarm invocations, because the scope they used to write to is shared by every Durable Object and handler in the isolate. Use initialScope for static data, and set per-instance data in each handler.

fix(effect)!: Change peerDependency to v4 and fix currentSpan (#24940)

@sentry/effect now requires a stable Effect v4 release. Effect v4 beta and release candidate versions are no longer supported. @sentry/effect is in alpha, so this ships in a minor release.

Other Changes

feat(astro): Register astro route provider (#23792)

feat(cloudflare): Trace TypeSafe Jev calls in Workers AI as evaluate spans (#24833)

feat(core): Add route provider API for parameterized route resolution (#23551)

feat(deps): bump devalue from 5.9.2 to 5.9.4 (#24964)

feat(effect): Add opt-in for external span parents and isolate root spans (#23900)

feat(nextjs): Register nextjs route provider (#23552)

feat(nuxt): Register nuxt route provider (#23794)

feat(remix): Register remix route provider (#23791)

feat(vue): Register Vue route provider (#23793)

fix(bundler-plugins): Keep debug IDs on Vite source maps after the preload rewrite (#24920)

fix(bundler-plugins): Stabilize debug IDs for Rolldown and Vite 8 builds (#24919)

fix(cloudflare): Skip binding instrumentation work when spans are not sent (#24655)

fix(core, node, bun, deno): Align server span client address with event IP (#24767)

fix(hono): Return the existing client on repeated init in Bun and Deno (#24520)

fix(nitro): Capture errors only through the Nitro error hook (#24952)

fix(profiling-node): Send profile chunks with client.sendEnvelope (#24896)

fix(react-router): Avoid duplicating Vite config arrays (#24930)

fix(react-router): Resolve the Cloudflare entry in Workers and skip trace meta tags in prerendered pages (#24866)

... (truncated)

Commits

7f13c61 release: 11.4.0

fb73adb Merge pull request #25010 from getsentry/prepare-release/11.4.0

de3fb96 meta(changelog): Update changelog for 11.4.0

4f0fd84 feat(sveltekit): Support stable SvelteKit 3 (#25009)

ba4db28 fix(remix): Match the Remix 3.0.0 package versions (#25008)

c8738fb Merge pull request #24991 from getsentry/master

5f88a0b Merge commit '1e82c8f33488bc54364d343a7c5ab33ed9056f39'

1e82c8f release: 11.3.0

481c43c Merge pull request #24987 from getsentry/prepare-release/11.3.0

1c7308d meta(changelog): Update changelog for 11.3.0

Additional commits viewable in compare view

[

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• `@dependabot show

Labeled:

October 6, 2026 at 03:11AM

via GitHub https://ift.tt/NlEtWVn

[Oneseco-Media/rsshub]

Bump eslint-plugin-n from 18.3.0 to 18.4.1

By dependabot[bot]

Assigned to

Bumps eslint-plugin-n from 18.3.0 to 18.4.1.

Release notes

Sourced from eslint-plugin-n's releases.

v18.4.1

18.4.1 (2026-10-03)

🩹 Fixes

prefer-promises/fs: cover fs.watch (#566) (37bf3a2)

properly handle extension override mappings in file-extension-in-import (#572) (995c881)

🧹 Chores

cache parsed tsconfig per directory (#571) (1cfd694)

Remove stale TypeScript suppressions blocking the Lint job (#574) (73f4d4f)

resolve import targets lazily and reuse resolvers (#570) (aff82d1)

v18.4.0

18.4.0 (2026-09-26)

🌟 Features

no-extraneous: Support pnpm workspaces in no-extraneous rules (#569) (3aae430)

📚 Documentation

fix broken documentation links (#567) (569153f)

Changelog

Sourced from eslint-plugin-n's changelog.

18.4.1 (2026-10-03)

🩹 Fixes

prefer-promises/fs: cover fs.watch (#566) (37bf3a2)

properly handle extension override mappings in file-extension-in-import (#572) (995c881)

🧹 Chores

cache parsed tsconfig per directory (#571) (1cfd694)

Remove stale TypeScript suppressions blocking the Lint job (#574) (73f4d4f)

resolve import targets lazily and reuse resolvers (#570) (aff82d1)

18.4.0 (2026-09-26)

🌟 Features

no-extraneous: Support pnpm workspaces in no-extraneous rules (#569) (3aae430)

📚 Documentation

fix broken documentation links (#567) (569153f)

Commits

f1d47af chore(master): release 18.4.1 (#573)

73f4d4f chore: Remove stale TypeScript suppressions blocking the Lint job (#574)

37bf3a2 fix(prefer-promises/fs): cover fs.watch (#566)

aff82d1 perf: resolve import targets lazily and reuse resolvers (#570)

1cfd694 perf: cache parsed tsconfig per directory (#571)

995c881 fix: properly handle extension override mappings in file-extension-in-import ...

3c257fd chore(master): release 18.4.0 (#568)

3aae430 feat(no-extraneous): Support pnpm workspaces in no-extraneous rules (#569)

569153f docs: fix broken documentation links (#567)

See full diff in compare view

[

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• `@dependabot show

Labeled:

October 6, 2026 at 03:10AM

via GitHub https://ift.tt/ODyWN4Q

[Cybersoulja/townhouse-plaza]

[WIP] Fix deploy preview failure for ai-plaza-cd-9cd14a9986

By Copilot

Assigned to

Thanks for asking me to work on this. I will get started on it and keep this PR's description up to date as I form a plan and make progress.

---

This section details on the original issue you should resolve

• Closes Cybersoulja/townhouse-plaza#4

Comments on the Issue (you are @copilot in this section)

• Fixes #4

Labeled:

October 5, 2026 at 08:24PM

via GitHub https://ift.tt/8K1wbIG

[Oneseco-Media/rsshub]

Bump @types/node from 26.5.1 to 26.6.4

By dependabot[bot]

Assigned to

Bumps @types/node from 26.5.1 to 26.6.4.

Commits

See full diff in compare view

[

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• `@dependabot show

Labeled:

October 5, 2026 at 03:20AM

via GitHub https://ift.tt/hBb3Kar

[Oneseco-Media/rsshub]

Bump dotenv from 17.4.2 to 18.0.5

By dependabot[bot]

Assigned to

Bumps dotenv from 17.4.2 to 18.0.5.

Changelog

Sourced from dotenv's changelog.

18.0.5 (2026-09-30)

Changed

Fix missing typescript module declaration (#1068)

Improve performance for large .env files (#1066)

18.0.4 (2026-09-25)

Changed

import dotenv/config should default quiet: true (#1063)

18.0.3 (2026-09-22)

Changed

Patch DOTENV_QUIET setting when inside .env file (#1059)

18.0.2 (2026-09-21)

Changed

Patch additional edge cases for the fast parser (#1056)

18.0.1 (2026-09-18)

Changed

Handle file urls in config logging (#1054)

18.0.0 (2026-09-17)

Added

NEW: Dotenv now has a CLI. (#1022)

$ dotenv run -- node index.js ◇ injected env (2) from .env Hello Dotenv

NEW: Dotenv now has a fast parser thanks to @​homanp of superagent.sh. Pass config({ fast: true }), flag --fast, or set DOTENV_FAST=true to opt-in to ~2x faster character-scanner parser. (#1010)

$ dotenv run --fast -- node index.js ◇ injected env (2) from .env Hello Dotenv </tr></table>

... (truncated)

Commits

05215e0 18.0.5

25bdd0a changelog

2d640d2 Merge pull request #1066 from AyanAta42/master

c84e2b4 Merge pull request #1068 from matzehecht/fix-typescript

570146a Optimize fast parser comment scanning

4aa0665 add typescript module declaration for dotenv/config

f1380ec Bound fast parser comment scans to the current line

a626f72 add link

b36a142 video links

86804c0 18.0.4

Additional commits viewable in compare view

[

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• `@dependabot show

Labeled:

October 5, 2026 at 03:19AM

via GitHub https://ift.tt/igaPjxh

[Oneseco-Media/rsshub]

Bump rolldown from 1.2.8 to 1.2.12

By dependabot[bot]

Assigned to

Bumps rolldown from 1.2.8 to 1.2.12.

Release notes

Sourced from rolldown's releases.

v1.2.12

[1.2.12] - 2026-09-30

🚀 Features

inline common chunks containing import() and deduplicate shared code in lazy chunks (#11034) by @​hyfdev

experimental inlineCommonChunks support (#10899) by @​hyfdev

dev: ship imported bindings for HMR partial accept (#10856) by @​h-a-n-a

🐛 Bug Fixes

chunking: re-derive chunk exec orders after the runtime leaves its host chunk (#11005) by @​hyfdev

code-splitting: gate member-read init paths on the reading statement (#11039) by @​hyfdev

code-splitting: retain initialization paths through re-exported namespaces (#11037) by @​hyfdev

dev: reject non-ESM output formats in dev mode (#11038) by @​h-a-n-a

dev: align import.meta.hot.accept deps with Vite (#10997) by @​h-a-n-a

dev: clear the resolver cache when a file is created or deleted (#10986) by @​waltuov

error: name the resolved specifier in unresolved import diagnostics (#11014) by @​linyiru

make entries-aware chunk merging deterministic (#11002) by @​hyfdev

watch: avoid restarting macOS watcher for unchanged paths (#10992) by @​sep2

🚜 Refactor

dev: ship the dev runtime entry as one file (#10998) by @​h-a-n-a

binding: remove __internalForcePanic (#10989) by @​IWANABETHATGUY

📚 Documentation

fix cloudflare preview builds (#10996) by @​sapphi-red

fix build config loader warning (#10994) by @​sapphi-red

deps: use Vite 8 (#10993) by @​sapphi-red

⚡ Performance

dev: only ship rows with dynamic edges in registerGraph (#11019) by @​h-a-n-a

🧪 Testing

code-splitting: cover more re-exported namespace shapes (#11042) by @​hyfdev

webcontainer: cover the WebContainer download fallback in plain Node (#10966) by @​shulaoda

dev: pin the runtime entry file layout that Vite serves (#10983) by @​h-a-n-a

⚙️ Miscellaneous Tasks

pin VOID_API_URL for the docs deploy (#11041) by @​shulaoda

opt into the WebContainer smoke test for napi bumps and loader changes (#10967) by @​shulaoda

deps: upgrade oxc to 0.152.0 (#11018) by @​camc314

deps: update rust crates (#11012) by @​renovate[bot]

deps: update npm packages (#11011) by @​renovate[bot]

deps: update crate-ci/typos action to v1.50.3 (#11023) by @​renovate[bot]

... (truncated)

Changelog

Sourced from rolldown's changelog.

[1.2.12] - 2026-09-30

🚀 Features

inline common chunks containing import() and deduplicate shared code in lazy chunks (#11034) by @​hyfdev

experimental inlineCommonChunks support (#10899) by @​hyfdev

dev: ship imported bindings for HMR partial accept (#10856) by @​h-a-n-a

🐛 Bug Fixes

chunking: re-derive chunk exec orders after the runtime leaves its host chunk (#11005) by @​hyfdev

code-splitting: gate member-read init paths on the reading statement (#11039) by @​hyfdev

code-splitting: retain initialization paths through re-exported namespaces (#11037) by @​hyfdev

dev: reject non-ESM output formats in dev mode (#11038) by @​h-a-n-a

dev: align import.meta.hot.accept deps with Vite (#10997) by @​h-a-n-a

dev: clear the resolver cache when a file is created or deleted (#10986) by @​waltuov

error: name the resolved specifier in unresolved import diagnostics (#11014) by @​linyiru

make entries-aware chunk merging deterministic (#11002) by @​hyfdev

watch: avoid restarting macOS watcher for unchanged paths (#10992) by @​sep2

🚜 Refactor

dev: ship the dev runtime entry as one file (#10998) by @​h-a-n-a

binding: remove __internalForcePanic (#10989) by @​IWANABETHATGUY

📚 Documentation

fix cloudflare preview builds (#10996) by @​sapphi-red

fix build config loader warning (#10994) by @​sapphi-red

deps: use Vite 8 (#10993) by @​sapphi-red

⚡ Performance

dev: only ship rows with dynamic edges in registerGraph (#11019) by @​h-a-n-a

🧪 Testing

code-splitting: cover more re-exported namespace shapes (#11042) by @​hyfdev

webcontainer: cover the WebContainer download fallback in plain Node (#10966) by @​shulaoda

dev: pin the runtime entry file layout that Vite serves (#10983) by @​h-a-n-a

⚙️ Miscellaneous Tasks

pin VOID_API_URL for the docs deploy (#11041) by @​shulaoda

opt into the WebContainer smoke test for napi bumps and loader changes (#10967) by @​shulaoda

deps: upgrade oxc to 0.152.0 (#11018) by @​camc314

deps: update rust crates (#11012) by @​renovate[bot]

deps: update npm packages (#11011) by @​renovate[bot]

deps: update crate-ci/typos action to v1.50.3 (#11023) by @​renovate[bot]

deps: update test262 submodule for tests (#11022) by @​rolldown-guard[bot]

... (truncated)

Commits

45e407b release: v1.2.12 (#11046)

6450f2e feat: inline common chunks containing import() and deduplicate shared code in...

bad4b6e feat: experimental inlineCommonChunks support (#10899)

02d65a6 chore(deps): upgrade oxc to 0.152.0 (#11018)

8546e7a fix(dev): clear the resolver cache when a file is created or deleted (#10986)

3f76b5c perf(dev): only ship rows with dynamic edges in registerGraph (#11019)

57dfa85 refactor(dev): ship the dev runtime entry as one file (#10998)

30c7703 fix: make entries-aware chunk merging deterministic (#11002)

b3b93d9 feat(dev): ship imported bindings for HMR partial accept (#10856)

bb87268 test(dev): pin the runtime entry file layout that Vite serves (#10983)

Additional commits viewable in compare view

[

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• `@dependabot show

Labeled:

October 5, 2026 at 03:18AM

via GitHub https://ift.tt/acPRQhX

[Oneseco-Media/rsshub]

Bump globals from 17.12.0 to 17.13.0

By dependabot[bot]

Assigned to

Bumps globals from 17.12.0 to 17.13.0.

Release notes

Sourced from globals's releases.

v17.13.0

Update globals (2026-10-01) (#354) b007369

https://github.com/sindresorhus/globals/compare/v17.12.0...v17.13.0

Commits

ce512bc 17.13.0

b007369 Update globals (2026-10-01) (#354)

16cb1fe Meta tweaks

See full diff in compare view

[

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• `@dependabot show

Labeled:

October 5, 2026 at 03:18AM

via GitHub https://ift.tt/0fhuPVb

[Oneseco-Media/rsshub]

Bump @sentry/node from 10.74.0 to 11.2.0

By dependabot[bot]

Assigned to

Bumps @sentry/node from 10.74.0 to 11.2.0.

Release notes

Sourced from @​sentry/node's releases.

11.2.0

Important Changes

feat(hono): add orchestrion-based auto-instrumentation (#24497)

Hono is now instrumented automatically. Request spans are named after the matched Hono route, each middleware gets its own span, and errors thrown in handlers are captured.

feat(node/bun): Enable dedupeIntegration by default (#24794)

@sentry/node and @sentry/bun now include dedupeIntegration in their default integrations, like the browser, Deno, Vercel Edge and Cloudflare SDKs. When the same error is captured two times in a row, only the first event is sent. To keep the previous behavior, remove the integration: integrations: defaults => defaults.filter(integration => integration.name !== 'Dedupe').

feat(remix): Instrument Remix 3 server requests via fetch-router (#24801)

On Remix 3, the SDK now adds the matched route as http.route, the response status and a low-cardinality name to the http.server span of each fetch-router request. Start the app with --import @sentry/remix/v3/node in place of --import remix/node-tsx.

Other Changes

chore(bundler-plugins): Allow magic-string 1.x (#24768)

feat(deps): Bump oxc-parser to 0.152.0 and sentry to 0.45.0 (#24823)

feat(elysia): Export bunRuntimeMetricsIntegration (#24892)

feat(react-router): Support request-scoped CSP nonces in createSentryHandleRequest (#24826)

fix(aws-serverless): Keep Lambda extension polling past 300s (#24811)

fix(browser-utils): Stop leaking DOM instrumentation listeners on mismatched removals (#24727)

fix(core): Resolve escape sequences in fmt / parameterize messages (#24770)

fix(deno): Flush buffered metrics and logs before process exit (#24807)

fix(node): End Express layer spans when next is called (#24854)

fix(node): Flush buffered metrics on process exit (#24806)

fix(nuxt): Fix CommonJS interop for force-inlined instrumented packages (#24799)

fix(server-utils): Preserve raw Anthropic response bodies (#24902)

fix(server-utils): Preserve raw Groq and Together response bodies (#24906)

fix(server-utils): Preserve raw OpenAI embeddings and conversation responses (#24908)

fix(server-utils): Preserve response bodies for OpenAI parse helpers (#24783)

fix(solidstart): Support rolldownOptions in instrumentation file plugin (#24863)

fix(sveltekit): Skip trace meta tags when prerendering (#24777)

fix(vue): Share one root render span debounce timer across components (#24868)

perf(server-utils): Avoid quadratic SQL sanitizer output handling (#24834)

chore: Add external contributor to CHANGELOG.md (#24822)

chore: Add external contributor to CHANGELOG.md (#24827)

chore: Add external contributor to CHANGELOG.md (#24835)

chore: Add external contributor to CHANGELOG.md (#24850)

chore: Add external contributor to CHANGELOG.md (#24851)

chore: Add external contributor to CHANGELOG.md (#24914)

chore(deps): Update to Vitest 4 and Vite 8 (#24746)

chore(github): Add external label on PRs of external contributors (#24825)

chore(solidstart): Remove unused Vitest setup from e2e apps (#24789)

ci: shard Bun integration tests (#24771)

... (truncated)

Changelog

Sourced from @​sentry/node's changelog.

11.2.0

Important Changes

feat(hono): add orchestrion-based auto-instrumentation (#24497)

Hono is now instrumented automatically. Request spans are named after the matched Hono route, each middleware gets its own span, and errors thrown in handlers are captured.

feat(node/bun): Enable dedupeIntegration by default (#24794)

@sentry/node and @sentry/bun now include dedupeIntegration in their default integrations, like the browser, Deno, Vercel Edge and Cloudflare SDKs. When the same error is captured two times in a row, only the first event is sent. To keep the previous behavior, remove the integration: integrations: defaults => defaults.filter(integration => integration.name !== 'Dedupe').

feat(remix): Instrument Remix 3 server requests via fetch-router (#24801)

On Remix 3, the SDK now adds the matched route as http.route, the response status and a low-cardinality name to the http.server span of each fetch-router request. Start the app with --import @sentry/remix/v3/node in place of --import remix/node-tsx.

Other Changes

chore(bundler-plugins): Allow magic-string 1.x (#24768)

feat(deps): Bump oxc-parser to 0.152.0 and sentry to 0.45.0 (#24823)

feat(elysia): Export bunRuntimeMetricsIntegration (#24892)

feat(react-router): Support request-scoped CSP nonces in createSentryHandleRequest (#24826)

fix(aws-serverless): Keep Lambda extension polling past 300s (#24811)

fix(browser-utils): Stop leaking DOM instrumentation listeners on mismatched removals (#24727)

fix(core): Resolve escape sequences in fmt / parameterize messages (#24770)

fix(deno): Flush buffered metrics and logs before process exit (#24807)

fix(node): End Express layer spans when next is called (#24854)

fix(node): Flush buffered metrics on process exit (#24806)

fix(nuxt): Fix CommonJS interop for force-inlined instrumented packages (#24799)

fix(server-utils): Preserve raw Anthropic response bodies (#24902)

fix(server-utils): Preserve raw Groq and Together response bodies (#24906)

fix(server-utils): Preserve raw OpenAI embeddings and conversation responses (#24908)

fix(server-utils): Preserve response bodies for OpenAI parse helpers (#24783)

fix(solidstart): Support rolldownOptions in instrumentation file plugin (#24863)

fix(sveltekit): Skip trace meta tags when prerendering (#24777)

fix(vue): Share one root render span debounce timer across components (#24868)

perf(server-utils): Avoid quadratic SQL sanitizer output handling (#24834)

chore: Add external contributor to CHANGELOG.md (#24822)

chore: Add external contributor to CHANGELOG.md (#24827)

chore: Add external contributor to CHANGELOG.md (#24835)

chore: Add external contributor to CHANGELOG.md (#24850)

chore: Add external contributor to CHANGELOG.md (#24851)

chore: Add external contributor to CHANGELOG.md (#24914)

chore(deps): Update to Vitest 4 and Vite 8 (#24746)

chore(github): Add external label on PRs of external contributors (#24825)

chore(solidstart): Remove unused Vitest setup from e2e apps (#24789)

... (truncated)

Commits

e1a4316 release: 11.2.0

95153b1 Merge pull request #24927 from getsentry/prepare-release/11.2.0

b8a90a4 meta(changelog): Update changelog for 11.2.0

a0faac6 fix(deps): runtime dependency security fixes (#24911)

b45e5b8 feat(deps): bump moment from 2.30.1 to 2.31.0 (#24890)

5c82d5b feat(deps): bump hono from 4.13.5 to 4.13.7 (#24916)

2651a8f test(sveltekit): Add missing prerender e2e test (#24921)

8de2036 feat(deps): bump fastify from 5.12.1 to 5.12.5 (#24917)

29fc37c feat(deps): bump axios from 1.18.0 to 1.20.0 (#24918)

012e9bb fix(server-utils): Preserve raw OpenAI embeddings and conversation responses ...

Additional commits viewable in compare view

[

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• `@dependabot show

Labeled:

October 5, 2026 at 03:17AM

via GitHub https://ift.tt/LP8hmax