Oneseco Media GITHUB

[Oneseco-Media/Oneseco-RSS-Playground]

fix: align KrakenD API gateway routes, harden feed validator & managers, and add test suite

By Cybersoulja

Assigned to

Summary

This pull request addresses several critical API routing discrepancies, hardens feed parsing and device synchronization, modernizes database/model interactions, and introduces a full unit test suite.

Key Changes

• KrakenD Gateway Configuration (krakend.json):
  • Corrected backend route patterns to match the Flask API structure (/api/feeds/add, /api/feeds/refresh, /api/network/status, /api/sync/register).
  • Corrected /api/feeds gateway routing to point to the backend JSON API endpoint instead of the HTML root.
  • Added complete gateway proxy definitions for /api/sync/feeds, /api/sync/status, /api/feeds/remove, /api/recommendations, /api/network/configure, and /api/network/test.
• REST API Routes & Controllers (main.py):
  • Added dedicated GET /api/feeds JSON endpoint with serialized feed list.
  • Added dual support for JSON and form payloads across all POST endpoints.
  • Added singular/plural route aliases (/api/feed/add & /api/feeds/add, /api/feed/remove & /api/feeds/remove, /api/feed/refresh & /api/feeds/refresh).
• Feed Validator & Manager (feed_validator.py, feed_manager.py):
  • Added redirect following (allow_redirects=True) and custom browser User-Agent headers to prevent blocked HEAD requests.
  • Added automatic fallback from HEAD to GET on HTTP 403 / 405 status codes.
  • Hardened feedparser dictionary and entry extraction.
• Device Synchronization & Recommendations (sync_manager.py, recommendation_engine.py):
  • Made register_device idempotent by updating existing device records instead of creating duplicate rows.
  • Updated models and recommendation engine to use timezone-aware UTC timestamps and modern SQLAlchemy 2.0 db.session.get.
• Database Flexibility (app.py, models.py):
  • Added fallback to SQLite for local development and test runs when DATABASE_URL is unset.
  • Added to_dict() serialization helpers across all data models.
• Unit Test Suite (tests/):
  • Created 24 unit and integration tests across models, validator, managers, recommendation engine, network manager, and REST API endpoints.

Verification

• Ran full test suite via uv run python -m unittest discover -s tests -v.
• Results: 24 tests passed (100% OK, 0 failures, 0 errors).

Labeled:

September 28, 2026 at 11:22PM

via GitHub https://ift.tt/TXxqK6V

[Oneseco-Media/craft-agents-oss]

[WIP] Fix failing GitHub Actions job validate

By Copilot

Assigned to

Thanks for asking me to work on this. I will get started on it and keep this PR's description up to date as I form a plan and make progress.

Fix the failing GitHub Actions job "validate" Analyze the Actions logs, identify the root cause of the failure, and implement a fix. Check run ID: 108900607004 Job URL: https://ift.tt/FlwPz4X

Labeled:

September 28, 2026 at 08:54PM

via GitHub https://ift.tt/9Ovi471

[Oneseco-Media/rsshub]

Bump postal-mime from 3.0.0 to 3.0.1

By dependabot[bot]

Assigned to

Bumps postal-mime from 3.0.0 to 3.0.1.

Release notes

Sourced from postal-mime's releases.

v3.0.1

3.0.1 (2026-09-25)

Bug Fixes

collect parsed addresses in linear time (68cd065), closes #97

convert html to text in linear time (38b2a83), closes #97

detect angle bracket addresses in decoded words in linear time (390be2b), closes #97

normalize calendar attachment line endings in linear time (36edda7), closes #97

strip header comments in linear time (5d877da), closes #97

trim header whitespace in linear time (932441f), closes #97

trim text around an extracted address in linear time (511a194), closes #97

unfold format=flowed text in linear time (237c7a9), closes #97

Performance Improvements

skip decoder construction for charset labels TextDecoder cannot know (5407771), closes #97

Changelog

Sourced from postal-mime's changelog.

3.0.1 (2026-09-25)

Bug Fixes

collect parsed addresses in linear time (68cd065), closes #97

convert html to text in linear time (38b2a83), closes #97

detect angle bracket addresses in decoded words in linear time (390be2b), closes #97

normalize calendar attachment line endings in linear time (36edda7), closes #97

strip header comments in linear time (5d877da), closes #97

trim header whitespace in linear time (932441f), closes #97

trim text around an extracted address in linear time (511a194), closes #97

unfold format=flowed text in linear time (237c7a9), closes #97

Performance Improvements

skip decoder construction for charset labels TextDecoder cannot know (5407771), closes #97

Commits

2067a16 chore(master): release 3.0.1 (#98)

952a101 test: check the charset label list without assuming every encoding is built in

a9595ad refactor: keep native replace for plain tag patterns in htmlToText

38b2a83 fix: convert html to text in linear time

5407771 perf: skip decoder construction for charset labels TextDecoder cannot know

36edda7 fix: normalize calendar attachment line endings in linear time

390be2b fix: detect angle bracket addresses in decoded words in linear time

511a194 fix: trim text around an extracted address in linear time

5d877da fix: strip header comments in linear time

68cd065 fix: collect parsed addresses in linear time

Additional commits viewable in compare view

[

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• `@dependabot show

Labeled:

September 28, 2026 at 03:21AM

via GitHub https://ift.tt/Fx19Ev8

[Oneseco-Media/rsshub]

Bump dotenv from 17.4.2 to 18.0.3

By dependabot[bot]

Assigned to

Bumps dotenv from 17.4.2 to 18.0.3.

Changelog

Sourced from dotenv's changelog.

18.0.3 (2026-09-22)

Changed

Patch DOTENV_QUIET setting when inside .env file (#1059)

18.0.2 (2026-09-21)

Changed

Patch additional edge cases for the fast parser (#1056)

18.0.1 (2026-09-18)

Changed

Handle file urls in config logging (#1054)

18.0.0 (2026-09-17)

Added

NEW: Dotenv now has a CLI. (#1022)

$ dotenv run -- node index.js ◇ injected env (2) from .env Hello Dotenv

NEW: Dotenv now has a fast parser thanks to @​homanp of superagent.sh. Pass config({ fast: true }), flag --fast, or set DOTENV_FAST=true to opt-in to ~2x faster character-scanner parser. (#1010)

$ dotenv run --fast -- node index.js ◇ injected env (2) from .env Hello Dotenv

Changed

Injecting message sent to stderr rather than stdout and tips removed (#1037)

Removed

Remove tips (#1031)

Remove skill files (#1032)

Remove Spanish README (#1034)

Remove .env.vault support (#1033)

Remove preloading. Instead use cli dotenv run -- your-command (#1035)

Commits

f6390d1 18.0.3

456da68 changelog

12ea34b Merge pull request #1059 from motdotla/config-quiet

a654bc2 patch DOTENV_QUIET

a0ae3e0 Merge pull request #1058 from SulimanAbdulrazzaq/fix/fast-parser-lone-export-...

d6b3a1d demonstrate DOTENV_QUIET failing

d57e0bc fix: keep assignments after a bare export line in the fast parser

5203712 perf: skip quoted text and short-circuit ASCII whitespace checks

c69ed11 chore: align package version with 18.0.2 changelog

2db9acf fix: retain closing quote candidates in the fast scanner

Additional commits viewable in compare view

[

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• `@dependabot show

Labeled:

September 28, 2026 at 03:20AM

via GitHub https://ift.tt/rlcvIye

[Oneseco-Media/rsshub]

Bump youtubei.js from 18.0.0 to 18.1.0

By dependabot[bot]

Assigned to

Bumps youtubei.js from 18.0.0 to 18.1.0.

Release notes

Sourced from youtubei.js's releases.

v18.1.0

18.1.0 (2026-09-22)

Features

Channel: add methods for show tab (#1260) (d252b36)

GridPlaylist: Add thumbnail_overlays (#1263) (30efa61)

LockupView: Add show as possible content_type (#1262) (2b80e3e)

parser: add 'attributionText' to HowThisWasMadeSectionView (ef3afbe)

parser: Add VideoTitleHeaderView renderer parser (#1238) (e26e13d)

Parser: Add missing /player/heartbeat nodes (#1249) (9b3ee91)

Bug Fixes

Format: Rename target_duration_dec to target_duration_sec (0bdd5f1)

parser: Add playability_status_memo to IPlayerHeartbeatResponse (a480854)

parser: Add PlayerInterstitial and InterstitialView to ignored list (43dd935)

Session: Adjust JSPB parsing logic (7143efb)

Text: Handle missing length in attachmentRuns (#1241) (c636d81)

Changelog

Sourced from youtubei.js's changelog.

18.1.0 (2026-09-22)

Features

Channel: add methods for show tab (#1260) (d252b36)

GridPlaylist: Add thumbnail_overlays (#1263) (30efa61)

LockupView: Add show as possible content_type (#1262) (2b80e3e)

parser: add 'attributionText' to HowThisWasMadeSectionView (ef3afbe)

parser: Add VideoTitleHeaderView renderer parser (#1238) (e26e13d)

Parser: Add missing /player/heartbeat nodes (#1249) (9b3ee91)

Bug Fixes

Format: Rename target_duration_dec to target_duration_sec (0bdd5f1)

parser: Add playability_status_memo to IPlayerHeartbeatResponse (a480854)

parser: Add PlayerInterstitial and InterstitialView to ignored list (43dd935)

Session: Adjust JSPB parsing logic (7143efb)

Text: Handle missing length in attachmentRuns (#1241) (c636d81)

Commits

62c044f chore(main): release 18.1.0 (#1240)

6feb34e chore(package): Remove unused "web.bundle.min" export

b7e129e chore(docs): Update API ref

06bfc6a refactor(EventEmitterLike): Remove EventTarget requirement

7ce1a7f chore(deps-dev): bump typescript from 5.9.3 to 6.0.3 (#1247)

104b7dc chore(linter): Bump checkout/setup-node versions

ef14b7d chore: Update GitHub workflows and labeler configuration

bb6714d chore: catch up with remote main

43dd935 fix(parser): Add PlayerInterstitial and InterstitialView to ignored list

7143efb fix(Session): Adjust JSPB parsing logic

Additional commits viewable in compare view

[

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• `@dependabot show

Labeled:

September 28, 2026 at 03:20AM

via GitHub https://ift.tt/TCLENlG

[Oneseco-Media/rsshub]

Bump @googleapis/youtube from 38.0.0 to 39.0.1

By dependabot[bot]

Assigned to

Bumps @googleapis/youtube from 38.0.0 to 39.0.1.

Release notes

Sourced from @​googleapis/youtube's releases.

youtube: v39.0.1

39.0.1 (2026-09-23)

Bug Fixes

youtube: update the API (512e921)

run: v38.1.0

38.1.0 (2026-09-23)

Features

run: update the API (4d260c5)

Commits

a553bb3 chore: release main (#3709)

f862539 🦉 Updates from OwlBot post-processor

b1252e2 feat: regenerate index files

c10861a fix(youtubereporting): update the API

2a86630 fix(youtubeAnalytics): update the API

4bd649b fix(youtube): update the API

23b2dd2 feat(workstations): update the API

0bc596a fix(workspaceevents): update the API

bf5c5fc fix(workloadmanager): update the API

2971c47 fix(workflows): update the API

Additional commits viewable in compare view

[

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• `@dependabot show

Labeled:

September 28, 2026 at 03:19AM

via GitHub https://ift.tt/K3olDEP

[Oneseco-Media/rsshub]

Bump rolldown from 1.2.8 to 1.2.11

By dependabot[bot]

Assigned to

Bumps rolldown from 1.2.8 to 1.2.11.

Release notes

Sourced from rolldown's releases.

v1.2.11

[1.2.11] - 2026-09-24

🚀 Features

watch: report only file events (#10974) by @​shulaoda

🐛 Bug Fixes

sourcemap: preserve names through collapse_sourcemaps (#9486) by @​eoin

watch: map metadata events by kind and missing paths as deleted (#10973) by @​shulaoda

🚜 Refactor

rolldown_fs_watcher: hand the handler file events instead of notify results (#10980) by @​shulaoda

rolldown_fs_watcher: share one event handler adapter between the notify watchers (#10979) by @​shulaoda

rolldown_fs_watcher: register every path with one watch mode (#10978) by @​shulaoda

rolldown_fs_watcher: tweak the backend traits and the event mapping (#10977) by @​shulaoda

watch: translate notify events inside FsWatcher (#10972) by @​shulaoda

📚 Documentation

watch: update the fs watcher layout and the dev coordinator message (#10981) by @​shulaoda

watch: document the event translation in FsWatcher (#10975) by @​shulaoda

◀️ Revert

"perf(dev/lazy): fetch a lazy route in one request" (#10789) (#10982) by @​h-a-n-a

❤️ New Contributors

@​eoin made their first contribution in #9486

Co-authored-by: shulaoda 165626830+shulaoda@users.noreply.github.com

v1.2.10

[1.2.10] - 2026-09-23

🚀 Features

rolldown_plugin_esm_external_require: prefer 'module.exports' over a namespace spread (#10901) by @​isker

watch: support directories in addWatchFile (#10944) by @​shulaoda

label code-splitting timing rows (#10896) by @​IWANABETHATGUY

separate code-splitting group timing rows (#10892) by @​IWANABETHATGUY

clarify callback owners in the timing report (#10890) by @​IWANABETHATGUY

add checks.bundlerTimings with deprecated pluginTimings alias (#10883) by @​IWANABETHATGUY

🐛 Bug Fixes

code-splitting: initialize leaves behind a re-exported namespace import (#10694) by @​hyfdev

... (truncated)

Changelog

Sourced from rolldown's changelog.

[1.2.11] - 2026-09-24

🚀 Features

watch: report only file events (#10974) by @​shulaoda

🐛 Bug Fixes

sourcemap: preserve names through collapse_sourcemaps (#9486) by @​eoin

watch: map metadata events by kind and missing paths as deleted (#10973) by @​shulaoda

🚜 Refactor

rolldown_fs_watcher: hand the handler file events instead of notify results (#10980) by @​shulaoda

rolldown_fs_watcher: share one event handler adapter between the notify watchers (#10979) by @​shulaoda

rolldown_fs_watcher: register every path with one watch mode (#10978) by @​shulaoda

rolldown_fs_watcher: tweak the backend traits and the event mapping (#10977) by @​shulaoda

watch: translate notify events inside FsWatcher (#10972) by @​shulaoda

📚 Documentation

watch: update the fs watcher layout and the dev coordinator message (#10981) by @​shulaoda

watch: document the event translation in FsWatcher (#10975) by @​shulaoda

◀️ Revert

"perf(dev/lazy): fetch a lazy route in one request" (#10789) (#10982) by @​h-a-n-a

❤️ New Contributors

@​eoin made their first contribution in #9486

[1.2.10] - 2026-09-23

🚀 Features

rolldown_plugin_esm_external_require: prefer 'module.exports' over a namespace spread (#10901) by @​isker

watch: support directories in addWatchFile (#10944) by @​shulaoda

label code-splitting timing rows (#10896) by @​IWANABETHATGUY

separate code-splitting group timing rows (#10892) by @​IWANABETHATGUY

clarify callback owners in the timing report (#10890) by @​IWANABETHATGUY

add checks.bundlerTimings with deprecated pluginTimings alias (#10883) by @​IWANABETHATGUY

🐛 Bug Fixes

code-splitting: initialize leaves behind a re-exported namespace import (#10694) by @​hyfdev

node: record the WASI target on the WebContainer binding fallback (#10952) by @​shulaoda

dev: force incremental build on in DevEngine::new (#10958) by @​o-alexandrov

tree-shaking: propagate side effects through cycles (#10893) by @​IWANABETHATGUY

... (truncated)

Commits

8df4219 release: v1.2.11 (#10987)

6f85455 revert: "perf(dev/lazy): fetch a lazy route in one request" (#10789) (#10982)

7869925 feat(watch): report only file events (#10974)

3b8e06e release: v1.2.10 (#10969)

ec5bab8 feat(rolldown_plugin_esm_external_require): prefer 'module.exports' over a na...

bb1db15 chore(deps): update napi (#10959)

374639e fix(node): record the WASI target on the WebContainer binding fallback (#10952)

cfc9d19 refactor(watch): let FsWatcher own the watched paths (#10948)

1551cf8 feat(watch): support directories in addWatchFile (#10944)

b12f077 test: handle Windows paths in sourcemap callback tests (#10942)

Additional commits viewable in compare view

[

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• `@dependabot show

Labeled:

September 28, 2026 at 03:18AM

via GitHub https://ift.tt/02mgiWZ

[Oneseco-Media/rsshub]

Bump fs-extra from 11.4.0 to 11.4.1

By dependabot[bot]

Assigned to

Bumps fs-extra from 11.4.0 to 11.4.1.

Changelog

Sourced from fs-extra's changelog.

11.4.1 / 2026-09-22

Properly handle read errors (e.g. due to permissions) in emptyDir*() (#1080)

Allow renaming with only Unicode normalization difference in the filename (APFS-specific) (#859, #1079)

Commits

1e223d3 11.4.1

8cfd0a0 Remove obsolete docs note

de72292 Treat Unicode-normalization-only renames like case-only renames (#1079)

7e0ce7f Remove broken link (#1083)

00e858c Update GH Actions versions (#1082)

f829cc9 fix: propagate emptyDir directory read errors (#1080)

See full diff in compare view

[

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• `@dependabot show

Labeled:

September 28, 2026 at 03:18AM

via GitHub https://ift.tt/YtG4EWU

[Oneseco-Media/rsshub]

Bump @sentry/node from 10.74.0 to 11.0.0

By dependabot[bot]

Assigned to

Bumps @sentry/node from 10.74.0 to 11.0.0.

Release notes

Sourced from @​sentry/node's releases.

11.0.0

Version 11.0.0 marks a major release of the Sentry JavaScript SDKs containing breaking changes. The goal of this release is to be better compatible with OpenTelemetry, make our integrations work across Node.js, Cloudflare, Bun and Deno through run-time and build-time instrumentation, and make span streaming and more permissive data collection the default.

How To Upgrade

Please carefully read through the migration guide in the Sentry docs on how to upgrade from version 10 to version 11. Make sure to select your specific platform/framework in the top left corner: https://docs.sentry.io/platforms/javascript/migration/v10-to-v11/

A comprehensive migration guide outlining all changes can be found within the Sentry JavaScript SDK Repository: https://github.com/getsentry/sentry-javascript/blob/develop/MIGRATION.md

Breaking Changes

All SDKs

feat: Remove support for initialising via --require (#22513)

feat!: Rename deprecated http.* span attributes (#23574)

feat!: Rename deprecated net. span attributes (#23301)

feat!: Replace skipOpenTelemetrySetup with enableOpenTelemetrySetup (#23199)

feat!: Replace the deprecated http.target span attribute (#23575)

feat!: Require Node >=20.19.0 as minimum supported version (#22558)

feat!: Use handler span op for terminal request handlers (#22871)

feat!: Use middleware span op for web-server middleware (#22852)

feat(frameworks)!: Use function op for framework functions (#23047)

feat(node/cloudflare)!: Remove deprecated honoIntegration (#22480)

feat(v11): Drop TypeScript 3.8 support (#18604)

AI integrations

feat(langchain): Emit gen_ai.pipeline.name instead of langchain.chain.name (#23740)

ref(anthropic)!: Move Anthropic AI integration to @sentry/server-utils (#22954)

ref(google-genai)!: Move Google GenAI integration to @sentry/server-utils (#22959)

ref(langchain)!: Move LangChain and LangGraph integrations to @sentry/server-utils (#22962)

ref(langgraph)!: Drop gen_ai.create_agent spans (#22840)

ref(openai)!: Move OpenAI AI integration to @sentry/server-utils (#22953)

ref(vercel-ai)!: Move Vercel AI integration to @sentry/server-utils (#22964)

ref(workers-ai)!: Move Workers AI integration to @sentry/server-utils (#22960)

@​sentry/angular

feat(angular,ember,sveltekit)!: Use router span op for frontend routers (#23086)

feat(angular)!: Use ui.mount and function span ops for tracing decorators (#22667)

@​sentry/astro

feat(astro)!: Drop support for Astro 3 (#22683)

feat(astro)!: Enable orchestrion instrumentation on Cloudflare Workers (#23003)

feat(astro)!: Remove deprecated sourceMapsUploadOptions build option (#23630)

feat(astro)!: Remove unstable_sentryVitePluginOptions (#23370)

ref(astro)!: Migrate import hook to makeOrchestrionLoader (#22861)

ref(astro)!: Remove deprecated release/debug conflict workaround from BuildTimeOptionsBase (#23270)

... (truncated)

Changelog

Sourced from @​sentry/node's changelog.

11.0.0

Version 11.0.0 marks a major release of the Sentry JavaScript SDKs containing breaking changes. The goal of this release is to be better compatible with OpenTelemetry, make our integrations work across Node.js, Cloudflare, Bun and Deno through run-time and build-time instrumentation, and make span streaming and more permissive data collection the default.

How To Upgrade

Please carefully read through the migration guide in the Sentry docs on how to upgrade from version 10 to version 11. Make sure to select your specific platform/framework in the top left corner: https://docs.sentry.io/platforms/javascript/migration/v10-to-v11/

A comprehensive migration guide outlining all changes can be found within the Sentry JavaScript SDK Repository: https://github.com/getsentry/sentry-javascript/blob/develop/MIGRATION.md

Breaking Changes

All SDKs

feat: Remove support for initialising via --require (#22513)

feat!: Rename deprecated http.* span attributes (#23574)

feat!: Rename deprecated net. span attributes (#23301)

feat!: Replace skipOpenTelemetrySetup with enableOpenTelemetrySetup (#23199)

feat!: Replace the deprecated http.target span attribute (#23575)

feat!: Require Node >=20.19.0 as minimum supported version (#22558)

feat!: Use handler span op for terminal request handlers (#22871)

feat!: Use middleware span op for web-server middleware (#22852)

feat(frameworks)!: Use function op for framework functions (#23047)

feat(node/cloudflare)!: Remove deprecated honoIntegration (#22480)

feat(v11): Drop TypeScript 3.8 support (#18604)

AI integrations

feat(langchain): Emit gen_ai.pipeline.name instead of langchain.chain.name (#23740)

ref(anthropic)!: Move Anthropic AI integration to @sentry/server-utils (#22954)

ref(google-genai)!: Move Google GenAI integration to @sentry/server-utils (#22959)

ref(langchain)!: Move LangChain and LangGraph integrations to @sentry/server-utils (#22962)

ref(langgraph)!: Drop gen_ai.create_agent spans (#22840)

ref(openai)!: Move OpenAI AI integration to @sentry/server-utils (#22953)

ref(vercel-ai)!: Move Vercel AI integration to @sentry/server-utils (#22964)

ref(workers-ai)!: Move Workers AI integration to @sentry/server-utils (#22960)

@​sentry/angular

feat(angular,ember,sveltekit)!: Use router span op for frontend routers (#23086)

feat(angular)!: Use ui.mount and function span ops for tracing decorators (#22667)

@​sentry/astro

feat(astro)!: Drop support for Astro 3 (#22683)

feat(astro)!: Enable orchestrion instrumentation on Cloudflare Workers (#23003)

feat(astro)!: Remove deprecated sourceMapsUploadOptions build option (#23630)

feat(astro)!: Remove unstable_sentryVitePluginOptions (#23370)

ref(astro)!: Migrate import hook to makeOrchestrionLoader (#22861)

... (truncated)

Commits

3e02c87 release: 11.0.0

fe07bdf Merge pull request #24620 from getsentry/prepare-release/11.0.0

ed38fe7 meta(changelog): Update changelog for 11.0.0

ea27349 docs: Fix Solid, SolidStart, and NestJS README snippets (#24571)

84027a1 fix(tanstackstart-react): Reject non-POST requests to the managed tunnel rout...

6a99951 feat(tanstackstart-react): Emit low-cardinality names for function spans (#...

3fdf506 chore: Add external contributor to CHANGELOG.md (#24616)

bf7b9b2 fix(cloudflare): Bind pass-through Queue producer methods to the binding (#24...

1960dad fix(server-utils): Stop the orchestrion Vite plugin from adding an empty ssr ...

e281d82 chore: Remove CLAUDE.md symlink (#24524)

Additional commits viewable in compare view

[

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• `@dependabot show

Labeled:

September 28, 2026 at 03:17AM

via GitHub https://ift.tt/gI0xoWF

[Oneseco-Media/rsshub]

Bump tldts from 7.4.12 to 7.4.15

By dependabot[bot]

Assigned to

Bumps tldts from 7.4.12 to 7.4.15.

Release notes

Sourced from tldts's releases.

v7.4.15

:scroll: Update Public Suffix List

tldts-experimental, tldts

Update upstream public suffix list #2685 (@​remusao)

:nut_and_bolt: Dependencies

Bump rollup from 4.63.1 to 4.63.3 #2681 (@​dependabot[bot])

Bump typescript-eslint from 8.69.0 to 8.70.0 #2675 (@​dependabot[bot])

Bump @​types/node from 26.4.1 to 26.6.1 #2682 (@​dependabot[bot])

Bump mocha from 12.0.0 to 12.0.2 #2683 (@​dependabot[bot])

Authors: 2

@​dependabot[bot]

Rémi (@​remusao)

v7.4.14

:scroll: Update Public Suffix List

tldts-experimental, tldts

Update upstream public suffix list #2680 (@​remusao)

Authors: 1

Rémi (@​remusao)

v7.4.13

:scroll: Update Public Suffix List

tldts-experimental, tldts

Update upstream public suffix list #2673 (@​remusao)

:nut_and_bolt: Dependencies

Bump tar from 7.5.11 to 7.5.22 #2672 (@​dependabot[bot])

Authors: 2

@​dependabot[bot]

Rémi (@​remusao)

Changelog

Sourced from tldts's changelog.

v7.4.15 (Wed Sep 23 2026)

:scroll: Update Public Suffix List

tldts-experimental, tldts

Update upstream public suffix list #2685 (@​remusao)

:nut_and_bolt: Dependencies

Bump rollup from 4.63.1 to 4.63.3 #2681 (@​dependabot[bot])

Bump typescript-eslint from 8.69.0 to 8.70.0 #2675 (@​dependabot[bot])

Bump @​types/node from 26.4.1 to 26.6.1 #2682 (@​dependabot[bot])

Bump mocha from 12.0.0 to 12.0.2 #2683 (@​dependabot[bot])

Authors: 2

@​dependabot[bot]

Rémi (@​remusao)

v7.4.14 (Mon Sep 21 2026)

:scroll: Update Public Suffix List

tldts-experimental, tldts

Update upstream public suffix list #2680 (@​remusao)

Authors: 1

Rémi (@​remusao)

v7.4.13 (Sun Sep 13 2026)

:scroll: Update Public Suffix List

tldts-experimental, tldts

Update upstream public suffix list #2673 (@​remusao)

:nut_and_bolt: Dependencies

Bump tar from 7.5.11 to 7.5.22 #2672 (@​dependabot[bot])

Authors: 2

@​dependabot[bot]

Rémi (@​remusao)

... (truncated)

Commits

a1309f0 Bump version to: v7.4.15 [skip ci]

89b0d44 Update CHANGELOG.md [skip ci]

59cd92a Update upstream public suffix list (#2685)

101b3f2 Bump rollup from 4.63.1 to 4.63.3 (#2681)

579681a Bump typescript-eslint from 8.69.0 to 8.70.0 (#2675)

3208ca6 Bump @​types/node from 26.4.1 to 26.6.1 (#2682)

0f46e51 Bump mocha from 12.0.0 to 12.0.2 (#2683)

637f6f3 Bump version to: v7.4.14 [skip ci]

b4853b1 Update CHANGELOG.md [skip ci]

c44a2ef Update upstream public suffix list (#2680)

Additional commits viewable in compare view

[

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• `@dependabot show

Labeled:

September 28, 2026 at 03:17AM

via GitHub https://ift.tt/DsvX0xU

[Oneseco-Media/rsshub]

Bump imapflow from 2.0.2 to 2.0.6

By dependabot[bot]

Assigned to

Bumps imapflow from 2.0.2 to 2.0.6.

Changelog

Sourced from imapflow's changelog.

2.0.6 (2026-09-22)

Bug Fixes

parser: split flags a server writes without the separating space (96b2022)

2.0.5 (2026-09-15)

Bug Fixes

deps: update mailsplit to 5.4.17 (4eb90d8)

2.0.4 (2026-09-15)

Bug Fixes

deps: update libmime to 5.4.4 and encoding-japanese to 2.4.0 (ffa0f93)

2.0.3 (2026-09-14)

Bug Fixes

bound the chunked download loop by the reported message size (fc9b4eb)

stop chunked download when the server ignores the partial spec (#396) (e216fde)

Commits

9a2f573 Merge pull request #402 from postalsys/release-please--branches--master--comp...

d760ab0 chore(master): release 2.0.6 [skip-ci]

96b2022 fix(parser): split flags a server writes without the separating space

ee97145 chore(deps): update dev dependencies [skip ci]

de4e0ce Merge pull request #400 from postalsys/release-please--branches--master--comp...

1a75a5e chore(master): release 2.0.5 [skip-ci]

4eb90d8 fix(deps): update mailsplit to 5.4.17

ee1bf2d Merge pull request #399 from postalsys/release-please--branches--master--comp...

aa1e4c1 chore(master): release 2.0.4 [skip-ci]

ffa0f93 fix(deps): update libmime to 5.4.4 and encoding-japanese to 2.4.0

Additional commits viewable in compare view

[

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• `@dependabot show

Labeled:

September 28, 2026 at 03:16AM

via GitHub https://ift.tt/J6P1BSC

[Oneseco-Media/rsshub]

Bump undici from 8.10.2 to 8.11.2

By dependabot[bot]

Assigned to

Bumps undici from 8.10.2 to 8.11.2.

Release notes

Sourced from undici's releases.

v8.11.2

What's Changed

fix: close rejected HTTP/2 WebSocket handshake streams by @​mcollina in nodejs/undici#5873

fix: avoid reconnecting aborted requests by @​Junaid-PK in nodejs/undici#5846

New Contributors

@​Junaid-PK made their first contribution in nodejs/undici#5846

Full Changelog: https://github.com/nodejs/undici/compare/v8.11.1...v8.11.2

v8.11.1

What's Changed

deslopify websocket test by @​KhafraDev in nodejs/undici#5851

Revert "fix: preserve HTTP/2 for legacy fetch consumers" by @​mcollina in nodejs/undici#5860

fix websocketstream bugs by @​KhafraDev in nodejs/undici#5863

fix hang on 3xx response with large body by @​KhafraDev in nodejs/undici#5850

docs: warn about buffering response bodies by @​mcollina in nodejs/undici#5872

test: cover native fetch gzip decoding through the legacy bridge by @​mcollina in nodejs/undici#5874

Full Changelog: https://github.com/nodejs/undici/compare/v8.11.0...v8.11.1

v8.11.0

What's Changed

fix: complete upgrade diagnostics lifecycle by @​BridgeAR in nodejs/undici#5761

build(deps): bump step-security/harden-runner from 2.19.4 to 2.21.0 by @​dependabot[bot] in nodejs/undici#5753

fix(decompress): join a repeated content-encoding header by @​luantaraschi in nodejs/undici#5664

fix(cookies): keep a cookie named proto in getCookies by @​luantaraschi in nodejs/undici#5663

build(deps-dev): bump jest from 30.5.0 to 30.5.1 by @​dependabot[bot] in nodejs/undici#5784

build(deps): bump got from 15.1.0 to 16.0.0 in /benchmarks by @​dependabot[bot] in nodejs/undici#5785

fix: selectively re-enable SIMD for ppc64 by @​richardlau in nodejs/undici#5776

use private fields for brand checks by @​KhafraDev in nodejs/undici#5792

fix(h2): do not unref a session with open streams by @​kjsik11 in nodejs/undici#5782

fix(h2): avoid pool fan-out during ALPN negotiation by @​mcollina in nodejs/undici#5799

fix issue #5715 by @​KhafraDev in nodejs/undici#5805

ci: extend macOS Node.js workflow timeout by @​mcollina in nodejs/undici#5775

fix(env-http-proxy-agent): NO_PROXY wildcard semantics by @​mcollina in nodejs/undici#5777

fix(h2): do not replay a request whose response already started after GOAWAY by @​kjsik11 in nodejs/undici#5788

test: skip HTTP/2 churn test on Node.js 25 on all platforms by @​kjsik11 in nodejs/undici#5790

fix(proxy-agent): preserve repeated iterable headers by @​GiHoon1123 in nodejs/undici#5779

docs(errors): document ProxyConnectionError (UND_ERR_PRX_CONN) by @​kilisamemarisaaa in nodejs/undici#5781

dataurl parsing improvements + update WPT by @​KhafraDev in nodejs/undici#5812

fix(decompress): treat inherited Object.prototype names as unsupported encodings by @​NgoQuocViet2001 in nodejs/undici#5807

test(h2): stabilize http2-connection by @​ViniciusDev26 in nodejs/undici#5801

fix: preserve HTTP/2 for non-upgrade legacy requests by @​mcollina in nodejs/undici#5811

fix: skip drain dispatch for clientTtl-evicted clients in PoolBase by @​vwong in nodejs/undici#5677

chore: update tests blocking release by @​vwong in nodejs/undici#5828

build(deps): bump uWebSockets.js from v20.68.0 to v20.70.0 in /benchmarks by @​dependabot[bot] in nodejs/undici#5824

fix(deduplicate): settle requests when composed with retry by @​mcollina in nodejs/undici#5817

fix(cache): do not report aborted on successful cache hits by @​Yahiro025 in nodejs/undici#5819

... (truncated)

Commits

7e016ad Bumped v8.11.2 (#5886)

fcdd5a6 fix: skip reconnecting for aborted requests (#5846)

dd28c5c fix: close rejected HTTP/2 WebSocket handshake streams (#5873)

5e0a2f8 Bumped v8.11.1 (#5871)

2b72898 test: cover native fetch gzip decoding through the legacy bridge (#5874)

636bf51 docs: warn about buffering response bodies (#5872)

8145595 fix hang on 3xx response with large body (#5850)

f3cbe48 fix websocketstream bugs (#5863)

1d4ea0a Revert "fix: preserve HTTP/2 for legacy fetch consumers" (#5860)

77d7b3f deslopify websocket test (#5851)

Additional commits viewable in compare view

[

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• `@dependabot show

Labeled:

September 28, 2026 at 03:16AM

via GitHub https://ift.tt/m2uYCwk

[Cybersoulja/infiniflow-dashboard]

[WIP] Create Cloudflare Pages Build for InfiniFlow Developer Dashboard

By Copilot

Assigned to

Thanks for asking me to work on this. I will get started on it and keep this PR's description up to date as I form a plan and make progress.

Original prompt

Goal: Create a Cloudflare Pages Build for this development dashboard

🚀 InfiniFlow Developer Dashboard

Link to Original Document

🚀 InfiniFlow Developer Dashboard

All your tools. One launchpad. Powered by Craft.

🧠 Quick Access

✅ Daily Dev Digest

📆 Weekly Planning Board

📤 Pushcut Triggers

🔐 API Keys (Data Jar)

🧪 AI Prompt Lab

🕹 QuarterQuest Tools

🔗 Core Stack Links

Tool

Use Case

Link

Drafts

Capture + Automate

Open

Pushcut

Trigger notifications

Open

JSBox

Script custom actions

JSBox

Data Jar

Store variables + states

Docs

Scriptable

JavaScript-based workflows

Docs

Working Copy

GitHub integration

Docs

ShellFish

File system mounts

Docs

Textastic

On-device code editor

Docs

Token Store

Secure API key vault

Open

⚡ Automation Hub

✅ Daily Routine Triggers

📥 Inbox → Drafts capture

🔁 Weekly newsletter builder

🧪 Pushcut to launch AI prompt templates

⏱ Timer-based actions via Pushcut (recurring blocks)

🧰 Toolboxes

📥 Drafts Toolbox

🧠 Create New Note

🛠 Action Manager

🧼 Cleanup Script (JSBox)

📦 Pushcut Toolbox

🟢 Trigger Morning Brief

🔁 Automation Sync

🔔 Notifications for overdue actions

🧪 JSBox Toolbox

🧹 Drafts cleanup script

🧰 Automation UI triggers

📤 Share to GitHub (Working Copy)

🧠 AI + Knowledge Assistants

Use Case

Tool

Status

📖 Prompt Lab

Drafts + Craft

✅ Ready

🧠 Lore Builder

Craft + Notion

🛠 In Progress

🤖 Trill Astro Buzz

Pushcut + Chub AI

🚀 In Test

📊 Data Dashboards

Data Jar + JSBox

🔄 Updating

🎮 QuarterQuest Integration

🎲 Dice Roller

📜 Lore Entry Templates

🎤 Voice Notes → Lore AI

📖 Spellbook Sync to Notion + Craft

📁 Git + Deployment

🧬 Replit Projects

🌀 Cloudflare DNS Settings

📦 GitHub Deploy Tracker

📝 Template Library

Template

Use

📰 Newsletter Card

Weekly comms

📋 JSON API Block Template

Integrations

🧙 Spellbook Entry Card

QuarterQuest

📦 Shortcut Automation

iOS Scripts

📁 Craft Embed + Markdown

Cross-posting

Labeled:

September 27, 2026 at 07:49PM

via GitHub https://ift.tt/XO9e3oA

[Cybersoulja/trill-local-runtime]

feat(my-api): persistent Gemini sessions with SQLite storage

By Cybersoulja

Assigned to

Summary

Adds persistent Gemini session tracking in my-api/data/sessions.db (git-ignored) with SQLite storage, enabling restart-safe conversational state in gemini-tui.

What's Changed

• Session Manager (my-api/app/core/sessions.py):
  • Implements SessionManager and SessionRecord storing session_id, name, model, previous_interaction_id, created_at, updated_at, and last_used_at.
• TUI Integration (my-api/gemini_tui.py):
  • New Session (+ New): Prompts for a session name and resets turn counter.
  • Save Session (💾 Save): Persists or renames session and state to SQLite.
  • Load Session (📂 Load / Combobox): Resumes stateful context (previous_interaction_id) seamlessly.
  • Auto-save: Updates current interaction pointer upon each completed turn.
• Unit Tests (my-api/tests/test_sessions.py):
  • 3/3 tests verifying creation, save/turn advance, listing, and deletion.
  • All 8 unit tests passing across project.
• Documentation:
  • Updated my-api/README.md.

Verification

• pytest tests/ in my-api: 8/8 passed.
• SQLite database verified ignored by git (data/sessions.db).

Labeled:

September 27, 2026 at 02:48PM

via GitHub https://ift.tt/ftldhWE

[Cybersoulja/chatgpt-telegram]

feat: add Trill Telegram Cloudflare webhook

By Cybersoulja

Assigned to

Summary

Adds the first production slice of Trill Telegram Core:

Telegram -> Cloudflare Worker -> Neon Postgres

Included

• Telegram webhook endpoint at /telegram/webhook
• Telegram secret-token verification
• Telegram update normalization
• Upserts into telegram_users and telegram_chats
• Idempotent insert into telegram_messages
• /health endpoint
• Unit tests for normalization and secret comparison
• Cloudflare Wrangler config
• Deployment + Telegram webhook setup docs
• Dedicated Worker CI workflow

Deliberately not included yet

• Trill response generation
• agent_sessions writes
• Telegram sendMessage
• Svix fan-out

Those come after one real Telegram message is verified end-to-end in Neon.

Required runtime secrets

• DATABASE_URL
• TELEGRAM_WEBHOOK_SECRET

Build small. Compose big.

Summary by Sourcery

Establish the first production Telegram ingestion slice from Telegram through Cloudflare Worker into Neon Postgres.

New Features:

• Add a Cloudflare Worker webhook that receives Telegram messages, verifies requests, normalizes supported updates, and persists users, chats, and messages to Neon Postgres.
• Provide health monitoring and idempotent handling of duplicate Telegram deliveries.

Enhancements:

• Add local development, deployment, secret configuration, webhook registration, and first-message verification guidance for the Worker.

Build:

• Add the Worker package configuration, Wrangler deployment configuration, and runtime dependencies.

CI:

• Add a dedicated GitHub Actions workflow to install dependencies and run Worker tests on relevant changes.

Documentation:

• Document the Telegram-to-Neon production slice, required secrets, deployment process, and current scope.

Tests:

• Add unit coverage for Telegram update normalization, unsupported updates, and secret comparison.

Labeled:

September 26, 2026 at 11:28AM

via GitHub https://ift.tt/74ZKQ9I

[Oneseco-Media/rsshub]

Bump @sentry/node from 10.74.0 to 10.75.1

By dependabot[bot]

Assigned to

Bumps @sentry/node from 10.74.0 to 10.75.1.

Release notes

Sourced from @​sentry/node's releases.

10.75.1

fix(v10/cloudflare): Capture telemetry from untraced Durable Object RPC calls (#24512)

fix(v10/cloudflare): Instrument namespaces returned by jurisdiction() (#24513)

fix(v10/hono): Allow @​cloudflare/workers-types v5 as peer dependency (#24500)

fix(v10/nextjs): Resolve Next.js version relative to the SDK when cwd differs (#24475)

Bundle size 📦

Path

Size

@​sentry/browser

27.18 KB

@​sentry/browser - with treeshaking flags

25.66 KB

@​sentry/browser (incl. Tracing)

45.6 KB

@​sentry/browser (incl. Tracing + Span Streaming)

47.34 KB

@​sentry/browser (incl. Tracing, Profiling)

50.24 KB

@​sentry/browser (incl. Tracing, Replay)

83.99 KB

@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags

73.84 KB

@​sentry/browser (incl. Tracing, Replay with Canvas)

88.6 KB

@​sentry/browser (incl. Tracing, Replay, Feedback)

100.94 KB

@​sentry/browser (incl. Feedback)

43.94 KB

@​sentry/browser (incl. sendFeedback)

31.87 KB

@​sentry/browser (incl. FeedbackAsync)

36.88 KB

@​sentry/browser (incl. Metrics)

28.25 KB

@​sentry/browser (incl. Logs)

28.47 KB

@​sentry/browser (incl. Metrics & Logs)

29.15 KB

@​sentry/react

28.93 KB

@​sentry/react (incl. Tracing)

47.81 KB

@​sentry/vue

32.47 KB

@​sentry/vue (incl. Tracing)

47.55 KB

@​sentry/svelte

27.21 KB

CDN Bundle

29.53 KB

CDN Bundle (incl. Tracing)

47.52 KB

CDN Bundle (incl. Logs, Metrics)

31.07 KB

CDN Bundle (incl. Tracing, Logs, Metrics)

48.81 KB

CDN Bundle (incl. Replay, Logs, Metrics)

69.49 KB

CDN Bundle (incl. Tracing, Replay)

84.22 KB

CDN Bundle (incl. Tracing, Replay, Logs, Metrics)

85.5 KB

CDN Bundle (incl. Tracing, Replay, Feedback)

89.87 KB

CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics)

91.15 KB

CDN Bundle - uncompressed

87.93 KB

CDN Bundle (incl. Tracing) - uncompressed

143.41 KB

CDN Bundle (incl. Logs, Metrics) - uncompressed

92.53 KB

CDN Bundle (incl. Tracing, Logs, Metrics) - uncompressed

147.3 KB

CDN Bundle (incl. Replay, Logs, Metrics) - uncompressed

214.56 KB

CDN Bundle (incl. Tracing, Replay) - uncompressed

260.04 KB

CDN Bundle (incl. Tracing, Replay, Logs, Metrics) - uncompressed

263.91 KB

CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed

273.42 KB

CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) - uncompressed

277.28 KB

@​sentry/nextjs (client)

50.31 KB

@​sentry/sveltekit (client)

46.02 KB

... (truncated)

Changelog

Sourced from @​sentry/node's changelog.

10.75.1

fix(v10/cloudflare): Capture telemetry from untraced Durable Object RPC calls (#24512)

fix(v10/cloudflare): Instrument namespaces returned by jurisdiction() (#24513)

fix(v10/hono): Allow @​cloudflare/workers-types v5 as peer dependency (#24500)

fix(v10/nextjs): Resolve Next.js version relative to the SDK when cwd differs (#24475)

10.75.0

Important Changes

feat(v10/effect): Capture errors through the Effect v4 ErrorReporter API (#24445)

On Effect v4, Sentry.effectLayer now registers a Sentry ErrorReporter. Failures that pass through Effect.withErrorReporting, ErrorReporter.report or the built-in HTTP and RPC reporting boundaries are captured automatically, with ErrorReporter.ignore, ErrorReporter.severity and ErrorReporter.attributes annotations respected. Nothing changes on Effect v3.

Other Changes

feat(v10/core): Accept a CollectBehavior shorthand for dataCollection.httpHeaders (#24339)

fix(v10/browser): Release the XHR virtualError once the request completed (#24307)

fix(v10/browser-utils): Skip nullish LCP entries in vendored web-vitals (#24349)

fix(v10/bundler-plugins): Stamp debug IDs onto emitted source maps when disable-upload is set (#24332)

fix(v10/core): Don't instrument the SDK's own envelope requests (#24276)

fix(v10/nextjs): Only include emitted chunk directories in Turbopack sourcemap upload (#24295)

fix(v10/nitro): Import from nitro/h3 instead of h3 directly (#24444)

fix(v10/node-core): Don't recurse in logAndExitProcess on a broken stdio pipe (#24353)

fix(v10/nuxt): Detect Nitro version via the app's Nuxt dependency chain (#24025)

fix(v10/replay): Don't rewrite already-emitted nodes when syncing mirror attributes (#23588)

Commits

8025a92 release: 10.75.1

d1462b2 meta(changelog): Update changelog for 10.75.1 (#24561)

c8f750f fix(v10/cloudflare): Capture telemetry from untraced Durable Object RPC calls...

a47560c fix(v10/cloudflare): Instrument namespaces returned by jurisdiction() (#24513)

3ab9f79 fix(v10/hono): Allow @​cloudflare/workers-types v5 as peer dependency (#24500)

ed16288 fix(v10/nextjs): Resolve Next.js version relative to the SDK when cwd differs...

4f492f2 Merge remote-tracking branch 'remotes/origin/release/10.75.0' into v10

9ffb58c release: 10.75.0

664c906 meta(changelog): Update changelog for 10.75.0 (#24446)

e3e7acc fix(v10/nitro): Import from nitro/h3 instead of h3 directly (#24444)

Additional commits viewable in compare view

[

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• `@dependabot show

Labeled:

September 25, 2026 at 03:12AM

via GitHub https://ift.tt/8s0SDlF

[Oneseco-Media/rsshub]

Bump @honeybadger-io/js from 6.16.3 to 6.16.4

By dependabot[bot]

Assigned to

Bumps @honeybadger-io/js from 6.16.3 to 6.16.4.

Release notes

Sourced from @​honeybadger-io/js's releases.

@​honeybadger-io/js@​6.16.4

6.16.4 (2026-09-22)

Note: Version bump only for package @​honeybadger-io/js

Commits

e21cac8 chore(release): publish [skip ci]

c153000 chore(js): type the query passed to url.format instead of suppressing it (#1668)

See full diff in compare view

[

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• `@dependabot show

Labeled:

September 25, 2026 at 03:11AM

via GitHub https://ift.tt/aERdfr2

[Oneseco-Media/rsshub]

Bump jsdom from 30.0.1 to 30.1.1

By dependabot[bot]

Assigned to

Bumps jsdom from 30.0.1 to 30.1.1.

Release notes

Sourced from jsdom's releases.

v30.1.1

Fixed spurious window blur and focusout events and incorrect event.relatedTarget values when focusing an element after removing the previously focused element, which regressed in v30.1.0. (@​asamuzaK)

Fixed focus and blur behavior across frames, and focusing the document's viewport through document.documentElement.focus(). (@​asamuzaK)

Fixed focus targets removed or disabled by blur listeners becoming active, and text selections made by focus and blur listeners being overwritten. (@​asamuzaK)

Fixed element.focus() incorrectly focusing disabled form controls and <input type="hidden"> elements with tabindex="". (@​scttcper)

Fixed invalid style.setProperty() calls changing existing !important priorities, serialized styles, or mutation records. (@​FedgeNo)

Fixed !important handling when updating CSS longhands after shorthands, using variables or CSS-wide keywords, and assigning style properties directly. (@​FedgeNo)

Fixed <noscript> parsing with includeNodeLocations: true or inside frames to honor the runScripts option.

Fixed the storageQuota option being ignored by frames.

Fixed encoding detection of HTML and XML byte input to honor XML encoding declarations and detect UTF-16 without a byte order mark.

Fixed exceptions caused by truncated charset parameters in <meta> elements, and encoding detection incorrectly using incomplete <meta> tags. (@​FedgeNo)

Fixed XML serialization errors for namespaces named constructor, toString, proto, or "null", and incorrect reuse of namespace prefixes declared on sibling elements.

Fixed element.innerHTML and element.outerHTML in XML documents to reject invalid characters in attribute values and avoid stack overflows on large strings.

Fixed selector matching for :lang(), :nth-child(... of ...) after mutations, and :has() with duplicate IDs or nested logical pseudo-classes. (@​asamuzaK)

v30.1.0

jsdom is feeling the AGI!

This release is dedicated to @​scttcper, who unleashed @​codex upon jsdom and found tons of performance improvements. Along the way, he found and fixed many correctness issues as well.

We really appreciate his thoughtful PRs, which did a great job following the project's contribution guidelines, and were clearly human-curated, with their PR descriptions edited to be brief and respectful of the maintainers' time.

Thanks to @​scttcper, as well as all the other contributors of this release (most of whom were AI-assisted).

Added named access to elements on document, such as document.myForm for <form name="myForm">. (@​vojtisprime11)

Added QuotaExceededError, including its use for storage quota errors and oversized crypto.getRandomValues() requests.

Added support for the relaxed DOM naming rules when creating elements, attributes, and document types.

Improved performance of DOM construction, tree mutations, range operations, and live collection access, especially on large documents. (@​scttcper, @​erezrokah)

Improved performance of getComputedStyle(), style changes, and CSS serialization. (@​scttcper, @​jhult)

Improved performance of event dispatch, form control and label lookups, and updates to <select> elements and radio button groups. (@​scttcper)

Reduced memory use when creating and working with DOM nodes, attributes, event listeners, and mutation observers. (@​scttcper)

Changed window.close() to preserve access to the document and its DOM through retained references.

Fixed element.querySelectorAll() returning no matches when the first part of the selector matches the element itself, which regressed in v30.0.0. (@​asamuzaK)

Fixed case sensitivity in CSS attribute selectors, including selectors matching data-state="", title="", and other case-sensitive values. (@​asamuzaK)

Fixed document.querySelector() failing to find a matching element when an earlier element has the same ID but does not match the rest of the selector. (@​vojtisprime11)

Fixed :focus matching in shadow trees. (@​asamuzaK)

Fixed DOM insertion and replacement, including valid document.replaceChildren() calls, invalid document element and doctype placements, and mutations during element.replaceWith().

Fixed the ordering of script execution, custom element callbacks, iframe loading, and mutation observer notifications during DOM insertion, including in shadow trees.

Fixed queued events and navigation continuing after window.close() or iframe removal, and prevented new scripts, resource loads, timers, and animation frames from starting in destroyed documents. (@​scttcper)

Fixed parent documents waiting indefinitely for loading to finish when a child iframe removes itself during loading.

Fixed request cancellation across redirects, during pending requestInterceptor() callbacks, and when reusing an XMLHttpRequest after aborting it.

Fixed resource loading and JSDOM.fromURL() potentially hanging when response handling throws and response stream cleanup does not finish.

Fixed successful cached resource loads being treated as aborted.

Fixed getComputedStyle() and document.styleSheets using the wrong stylesheet order after inserting or updating <style> elements.

Fixed getComputedStyle() ignoring nested @import and @media rules in imported stylesheets, and returning stale results after imports finish loading.

Fixed style invalidation, stylesheet removal, and frame source updates in shadow trees.

Fixed repeated getComputedStyle() calls changing case-sensitive background URLs, and inconsistent resolution of border shorthands containing system colors. (@​scttcper)

Fixed computed border widths, including borderless elements incorrectly reporting 16px, which regressed in v30.0.0. (@​Alberto-BaseNet)

Fixed getComputedStyle() to resolve 'font-weight' keywords to numeric values. (@​tianrking)

Fixed getComputedStyle() to convert lengths to pixels inside CSS math functions containing percentages, and to resolve percentages in 'font-size' math functions. (@​soroushm)

... (truncated)

Commits

0a117f4 30.1.1

103f67d Remove unnecessary window cleanup from API tests

cdda00a Test HTTP/2 document and subresource loading

7ab92ce Update @​asamuzakjp/dom-selector to v9.2.1

d940c20 Share jsdom settings across descendant windows

6ba40cb Fix and simplify option propagation

3b3be70 Preserve CSS priorities across declaration updates

97b2758 Align focusing and unfocusing with HTML

b7b460b Update w3c-xmlserializer to v6

71d562f Update html-encoding-sniffer to v7

Additional commits viewable in compare view

[

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• `@dependabot show

Labeled:

September 25, 2026 at 03:11AM

via GitHub https://ift.tt/zH7YvD9

[Oneseco-Media/rsshub]

Bump dotenv from 17.4.2 to 18.0.2

By dependabot[bot]

Assigned to

Bumps dotenv from 17.4.2 to 18.0.2.

Changelog

Sourced from dotenv's changelog.

18.0.2 (2026-09-21)

Changed

Patch additional edge cases for the fast parser (#1056)

18.0.1 (2026-09-18)

Changed

Handle file urls in config logging (#1054)

18.0.0 (2026-09-17)

Added

NEW: Dotenv now has a CLI. (#1022)

$ dotenv run -- node index.js ◇ injected env (2) from .env Hello Dotenv

NEW: Dotenv now has a fast parser thanks to @​homanp of superagent.sh. Pass config({ fast: true }), flag --fast, or set DOTENV_FAST=true to opt-in to ~2x faster character-scanner parser. (#1010)

$ dotenv run --fast -- node index.js ◇ injected env (2) from .env Hello Dotenv

Changed

Injecting message sent to stderr rather than stdout and tips removed (#1037)

Removed

Remove tips (#1031)

Remove skill files (#1032)

Remove Spanish README (#1034)

Remove .env.vault support (#1033)

Remove preloading. Instead use cli dotenv run -- your-command (#1035)

Commits

5203712 perf: skip quoted text and short-circuit ASCII whitespace checks

c69ed11 chore: align package version with 18.0.2 changelog

2db9acf fix: retain closing quote candidates in the fast scanner

ccc8543 test: reproduce fast scanner backslash and closing quote differences

048dd48 fix: scan colon separators, export keys and Unicode line endings

e73dc1f changelog

c077457 Merge pull request #1056 from motdotla/1043-fast-parser-regression-tests

0772edb fix: handle parser regressions directly in the fast scanner

03bcdbb fix: preserve classic parser behavior for fast parser edge cases

4dcbf5d test: reproduce fast parser divergences from issue #1043

Additional commits viewable in compare view

[

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• `@dependabot show

Labeled:

September 25, 2026 at 03:10AM

via GitHub https://ift.tt/MF2u1KY

[Oneseco-Media/rsshub]

Bump tldts from 7.4.12 to 7.4.14

By dependabot[bot]

Assigned to

Bumps tldts from 7.4.12 to 7.4.14.

Release notes

Sourced from tldts's releases.

v7.4.14

:scroll: Update Public Suffix List

tldts-experimental, tldts

Update upstream public suffix list #2680 (@​remusao)

Authors: 1

Rémi (@​remusao)

v7.4.13

:scroll: Update Public Suffix List

tldts-experimental, tldts

Update upstream public suffix list #2673 (@​remusao)

:nut_and_bolt: Dependencies

Bump tar from 7.5.11 to 7.5.22 #2672 (@​dependabot[bot])

Authors: 2

@​dependabot[bot]

Rémi (@​remusao)

Changelog

Sourced from tldts's changelog.

v7.4.14 (Mon Sep 21 2026)

:scroll: Update Public Suffix List

tldts-experimental, tldts

Update upstream public suffix list #2680 (@​remusao)

Authors: 1

Rémi (@​remusao)

v7.4.13 (Sun Sep 13 2026)

:scroll: Update Public Suffix List

tldts-experimental, tldts

Update upstream public suffix list #2673 (@​remusao)

:nut_and_bolt: Dependencies

Bump tar from 7.5.11 to 7.5.22 #2672 (@​dependabot[bot])

Authors: 2

@​dependabot[bot]

Rémi (@​remusao)

Commits

637f6f3 Bump version to: v7.4.14 [skip ci]

b4853b1 Update CHANGELOG.md [skip ci]

c44a2ef Update upstream public suffix list (#2680)

200a338 Bump version to: v7.4.13 [skip ci]

7d9d3b0 Update CHANGELOG.md [skip ci]

453895b Update upstream public suffix list (#2673)

d37fc41 Bump tar from 7.5.11 to 7.5.22 (#2672)

See full diff in compare view

[

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• `@dependabot show

Labeled:

September 25, 2026 at 03:10AM

via GitHub https://ift.tt/qLJu3kF

[Oneseco-Media/rsshub]

Bump undici from 8.10.2 to 8.11.0

By dependabot[bot]

Assigned to

Bumps undici from 8.10.2 to 8.11.0.

Release notes

Sourced from undici's releases.

v8.11.0

What's Changed

fix: complete upgrade diagnostics lifecycle by @​BridgeAR in nodejs/undici#5761

build(deps): bump step-security/harden-runner from 2.19.4 to 2.21.0 by @​dependabot[bot] in nodejs/undici#5753

fix(decompress): join a repeated content-encoding header by @​luantaraschi in nodejs/undici#5664

fix(cookies): keep a cookie named proto in getCookies by @​luantaraschi in nodejs/undici#5663

build(deps-dev): bump jest from 30.5.0 to 30.5.1 by @​dependabot[bot] in nodejs/undici#5784

build(deps): bump got from 15.1.0 to 16.0.0 in /benchmarks by @​dependabot[bot] in nodejs/undici#5785

fix: selectively re-enable SIMD for ppc64 by @​richardlau in nodejs/undici#5776

use private fields for brand checks by @​KhafraDev in nodejs/undici#5792

fix(h2): do not unref a session with open streams by @​kjsik11 in nodejs/undici#5782

fix(h2): avoid pool fan-out during ALPN negotiation by @​mcollina in nodejs/undici#5799

fix issue #5715 by @​KhafraDev in nodejs/undici#5805

ci: extend macOS Node.js workflow timeout by @​mcollina in nodejs/undici#5775

fix(env-http-proxy-agent): NO_PROXY wildcard semantics by @​mcollina in nodejs/undici#5777

fix(h2): do not replay a request whose response already started after GOAWAY by @​kjsik11 in nodejs/undici#5788

test: skip HTTP/2 churn test on Node.js 25 on all platforms by @​kjsik11 in nodejs/undici#5790

fix(proxy-agent): preserve repeated iterable headers by @​GiHoon1123 in nodejs/undici#5779

docs(errors): document ProxyConnectionError (UND_ERR_PRX_CONN) by @​kilisamemarisaaa in nodejs/undici#5781

dataurl parsing improvements + update WPT by @​KhafraDev in nodejs/undici#5812

fix(decompress): treat inherited Object.prototype names as unsupported encodings by @​NgoQuocViet2001 in nodejs/undici#5807

test(h2): stabilize http2-connection by @​ViniciusDev26 in nodejs/undici#5801

fix: preserve HTTP/2 for non-upgrade legacy requests by @​mcollina in nodejs/undici#5811

fix: skip drain dispatch for clientTtl-evicted clients in PoolBase by @​vwong in nodejs/undici#5677

chore: update tests blocking release by @​vwong in nodejs/undici#5828

build(deps): bump uWebSockets.js from v20.68.0 to v20.70.0 in /benchmarks by @​dependabot[bot] in nodejs/undici#5824

fix(deduplicate): settle requests when composed with retry by @​mcollina in nodejs/undici#5817

fix(cache): do not report aborted on successful cache hits by @​Yahiro025 in nodejs/undici#5819

fix(cookies): keep an Expires of 0 when serializing a cookie by @​NgoQuocViet2001 in nodejs/undici#5808

fix: honor backpressure in decompression interceptor by @​mcollina in nodejs/undici#5829

fix(h2): validate h2Options.maxConcurrentStreams itself by @​kjsik11 in nodejs/undici#5830

test(fetch): make pull-dont-push exceed any socket buffer by @​kjsik11 in nodejs/undici#5840

test(decompress): wait for highWaterMark via readable instead of setImmediate loop by @​kjsik11 in nodejs/undici#5841

fix(h2): keep the session ref'd while requests are queued by @​kjsik11 in nodejs/undici#5839

fix cache.addAll and cache.add hanging by @​KhafraDev in nodejs/undici#5844

fix(retry): settle responses after connection close by @​mcollina in nodejs/undici#5815

fix(h2): validate response content-length by @​mcollina in nodejs/undici#5816

fix(redirect): ignore informational responses in history by @​mcollina in nodejs/undici#5813

fix(websocket): reset the compressed flag when a message completes by @​askalf in nodejs/undici#5827

fix(h2): keep queued requests alive when the last stream closes by @​kjsik11 in nodejs/undici#5847

build(deps-dev): bump jest from 30.5.1 to 30.5.2 by @​dependabot[bot] in nodejs/undici#5854

build(deps-dev): bump fast-check from 4.9.0 to 4.10.1 by @​dependabot[bot] in nodejs/undici#5852

build(deps): bump uWebSockets.js from v20.70.0 to v20.71.0 in /benchmarks by @​dependabot[bot] in nodejs/undici#5856

build(deps-dev): bump @​metcoder95/https-pem from 1.0.0 to 1.0.1 by @​dependabot[bot] in nodejs/undici#5853

New Contributors

@​luantaraschi made their first contribution in nodejs/undici#5664

@​kilisamemarisaaa made their first contribution in nodejs/undici#5781

@​NgoQuocViet2001 made their first contribution in nodejs/undici#5807

@​ViniciusDev26 made their first contribution in nodejs/undici#5801

... (truncated)

Commits

6e48f48 Bumped v8.11.0 (#5849)

e084dbd build(deps-dev): bump @​metcoder95/https-pem from 1.0.0 to 1.0.1 (#5853)

443a4c0 build(deps): bump uWebSockets.js in /benchmarks (#5856)

432a310 build(deps-dev): bump fast-check from 4.9.0 to 4.10.1 (#5852)

34eeba6 build(deps-dev): bump jest from 30.5.1 to 30.5.2 (#5854)

16395ea fix(h2): keep queued requests alive when the last stream closes (#5847)

2bc04d0 fix(websocket): reset the compressed flag when a message completes (#5827)

cd10be2 fix(redirect): ignore informational responses in history (#5813)

bdfe59f fix(h2): validate response content-length (#5816)

9196a01 fix(retry): settle responses after connection close (#5815)

Additional commits viewable in compare view

[

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• `@dependabot show

Labeled:

September 25, 2026 at 03:09AM

via GitHub https://ift.tt/g7dHUV6

[Oneseco-Media/rsshub]

Bump the typescript-eslint group with 2 updates

By dependabot[bot]

Assigned to

Bumps the typescript-eslint group with 2 updates: @typescript-eslint/eslint-plugin and @typescript-eslint/parser.

Updates @typescript-eslint/eslint-plugin from 8.70.0 to 8.70.1

Release notes

Sourced from @​typescript-eslint/eslint-plugin's releases.

v8.70.1

8.70.1 (2026-09-21)

🩹 Fixes

ast-spec: narrow import attribute keys to identifiers and strings (#12879)

eslint-plugin: [no-useless-default-assignment] avoid false positives on tuples with a rest element (#12768)

eslint-plugin: [no-unnecessary-type-parameters] handle type precedence in the suggestion fixer (#12637)

eslint-plugin: [no-explicit-any] use unknown[] for bare any rest parameters (#12818)

eslint-plugin: [no-generated-empty-object-type] don't report a mapped type whose keys are not resolved yet (#12854)

eslint-plugin: [no-misused-spread] omit WeakMap spread suggestions (#12850)

eslint-plugin: [no-unnecessary-type-assertion] false positive for empty object asserted to a type alias of Record (#12869)

eslint-plugin: [no-meaningless-void-operator] allow void on assignment expressions (#12873)

eslint-plugin: [await-thenable] prevent autofix from breaking code when removing await (#12716)

eslint-plugin: [no-unnecessary-parameter-property-assignment] account for parameter reassignment (#12880)

eslint-plugin: [unbound-method] treat Intl.Collator.prototype.compare as spec-bound (#12845)

eslint-plugin: [no-unnecessary-condition] handle union-keyed index access on the left-hand side of nullish assignment (#12747)

eslint-plugin: [no-useless-default-assignment] convert the fixer to a suggestion fixer (#12826)

eslint-plugin: [no-misused-promises] handle multiple Promise constituents (#12904)

rule-tester: test the final autofix output instead of the first pass (#12867)

scope-manager: merge implicit global definitions (#12809)

type-utils: match package specifiers on whole path components (#12838)

typescript-estree: resolve symlinked paths when matching files to projects (#12725)

typescript-estree: add missing < token opening type arguments (#12821)

typescript-estree: require string literal import attribute values (#12894)

website: prevent playground from breaking down after opening link with the .js file type (#12777)

❤️ Thank You

Amin @​amiin-dev

Brad Zacher @​bradzacher

Cameron

Diptajoy Mistry @​diptomistry

Evyatar Daud @​StyleShit

Grit @​Grit03

Hugo @​hugop95

Josh Goldberg ✨

Michael Naumov @​mnaoumov

Mikhail Baev @​baevm

Om Rawat

overlookmotel

Sanath @​sansynx

Shinji

stoicism @​stoicism02

Vinccool96

Younsang Na @​nayounsang

김채영 @​cchaeyoung

송재욱

See GitHub Releases for more information.

... (truncated)

Changelog

Sourced from @​typescript-eslint/eslint-plugin's changelog.

8.70.1 (2026-09-21)

🩹 Fixes

eslint-plugin: [no-misused-promises] handle multiple Promise constituents (#12904)

eslint-plugin: [no-useless-default-assignment] convert the fixer to a suggestion fixer (#12826)

eslint-plugin: [no-unnecessary-condition] handle union-keyed index access on the left-hand side of nullish assignment (#12747)

eslint-plugin: [unbound-method] treat Intl.Collator.prototype.compare as spec-bound (#12845)

eslint-plugin: [no-unnecessary-parameter-property-assignment] account for parameter reassignment (#12880)

eslint-plugin: [await-thenable] prevent autofix from breaking code when removing await (#12716)

eslint-plugin: [no-meaningless-void-operator] allow void on assignment expressions (#12873)

eslint-plugin: [no-unnecessary-type-assertion] false positive for empty object asserted to a type alias of Record (#12869)

eslint-plugin: [no-misused-spread] omit WeakMap spread suggestions (#12850)

eslint-plugin: [no-generated-empty-object-type] don't report a mapped type whose keys are not resolved yet (#12854)

eslint-plugin: [no-explicit-any] use unknown[] for bare any rest parameters (#12818)

eslint-plugin: [no-unnecessary-type-parameters] handle type precedence in the suggestion fixer (#12637)

eslint-plugin: [no-useless-default-assignment] avoid false positives on tuples with a rest element (#12768)

❤️ Thank You

Brad Zacher @​bradzacher

Diptajoy Mistry @​diptomistry

Grit @​Grit03

Hugo @​hugop95

Michael Naumov @​mnaoumov

Mikhail Baev @​baevm

Om Rawat

Sanath @​sansynx

Shinji

Vinccool96

김채영 @​cchaeyoung

송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

23d38ce chore(release): publish 8.70.1

9d82e4b chore: expand eslint-plugin rules test files glob (#12878)

f7482f6 fix(eslint-plugin): [no-misused-promises] handle multiple Promise constituent...

2673044 docs(eslint-plugin): [prefer-promise-reject-errors] add option sections and e...

8f141a2 fix(eslint-plugin): [no-useless-default-assignment] convert the fixer to a su...

479cd85 chore: enable assertion option requireData for all rule tests (#12816)

f3c190c fix(eslint-plugin): [no-unnecessary-condition] handle union-keyed index acces...

b1993df fix(eslint-plugin): [unbound-method] treat Intl.Collator.prototype.compare as...

da394bc fix(eslint-plugin): [no-unnecessary-parameter-property-assignment] account fo...

4a742ff fix(eslint-plugin): [await-thenable] prevent autofix from breaking code when ...

Additional commits viewable in compare view

Updates @typescript-eslint/parser from 8.70.0 to 8.70.1

Release notes

Sourced from @​typescript-eslint/parser's releases.

v8.70.1

8.70.1 (2026-09-21)

🩹 Fixes

ast-spec: narrow import attribute keys to identifiers and strings (#12879)

eslint-plugin: [no-useless-default-assignment] avoid false positives on tuples with a rest element (#12768)

eslint-plugin: [no-unnecessary-type-parameters] handle type precedence in the suggestion fixer (#12637)

eslint-plugin: [no-explicit-any] use unknown[] for bare any rest parameters (#12818)

eslint-plugin: [no-generated-empty-object-type] don't report a mapped type whose keys are not resolved yet (#12854)

eslint-plugin: [no-misused-spread] omit WeakMap spread suggestions (#12850)

eslint-plugin: [no-unnecessary-type-assertion] false positive for empty object asserted to a type alias of Record (#12869)

eslint-plugin: [no-meaningless-void-operator] allow void on assignment expressions (#12873)

eslint-plugin: [await-thenable] prevent autofix from breaking code when removing await (#12716)

eslint-plugin: [no-unnecessary-parameter-property-assignment] account for parameter reassignment (#12880)

eslint-plugin: [unbound-method] treat Intl.Collator.prototype.compare as spec-bound (#12845)

eslint-plugin: [no-unnecessary-condition] handle union-keyed index access on the left-hand side of nullish assignment (#12747)

eslint-plugin: [no-useless-default-assignment] convert the fixer to a suggestion fixer (#12826)

eslint-plugin: [no-misused-promises] handle multiple Promise constituents (#12904)

rule-tester: test the final autofix output instead of the first pass (#12867)

scope-manager: merge implicit global definitions (#12809)

type-utils: match package specifiers on whole path components (#12838)

typescript-estree: resolve symlinked paths when matching files to projects (#12725)

typescript-estree: add missing < token opening type arguments (#12821)

typescript-estree: require string literal import attribute values (#12894)

website: prevent playground from breaking down after opening link with the .js file type (#12777)

❤️ Thank You

Amin @​amiin-dev

Brad Zacher @​bradzacher

Cameron

Diptajoy Mistry @​diptomistry

Evyatar Daud @​StyleShit

Grit @​Grit03

Hugo @​hugop95

Josh Goldberg ✨

Michael Naumov @​mnaoumov

Mikhail Baev @​baevm

Om Rawat

overlookmotel

Sanath @​sansynx

Shinji

stoicism @​stoicism02

Vinccool96

Younsang Na @​nayounsang

김채영 @​cchaeyoung

송재욱

See GitHub Releases for more information.

... (truncated)

Changelog

Sourced from @​typescript-eslint/parser's changelog.

8.70.1 (2026-09-21)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

23d38ce chore(release): publish 8.70.1

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• `@dependabot show

Labeled:

September 25, 2026 at 03:09AM

via GitHub https://ift.tt/rbqUapn

[Cybersoulja/trill-local-runtime]

feat(extension): integrate Antigravity SDK & IFTTT-20 Chrome Side Panel Companion

By Cybersoulja

Assigned to

📌 Summary

Integrates the Antigravity SDK & IFTTT-20 Companion Chrome Extension into the workspace, providing an autonomous AI browser companion with real-time multimodal reasoning and one-click cloud automations.

Key Changes

• Chrome Extension (extension/):
  • Manifest V3 compliant architecture with persistent Side Panel UI.
  • Active tab context extraction (content.js) and visible tab vision screenshots (background.js).
  • Bi-directional WebSocket chat interface with streaming agent turns.
  • Full IFTTT-20 Action Deck with search, category filtering, and parameter configuration modal.
• Backend Loopback Server (server/):
  • FastAPI server (server/app.py) providing /api/health, /api/ifttt/list, /api/ifttt/trigger, /api/analyze, and /ws/chat.
  • Antigravity multi-agent system (server/agent.py) with Gemini function calling and multimodal analysis.
  • Zero-plaintext credential governance (server/security.py) integrating with macOS Keychain (keychain-env).
  • 20 pre-configured IFTTT webhook automations (server/tools/ifttt_tools.py) spanning DevOps, Productivity, Smart Home, Communications, and Media.
• Tooling & Operations:
  • Unified lifecycle CLI (automate-chrome-antigravity.sh).
  • Automated test suite (tests/test_integration.py).
  • Chrome Web Store metadata and permissions justification (CHROMEWEBSTORE.md).

🧪 Testing & Validation

• Ran integration test suite (python3 -m unittest tests/test_integration.py): 9/9 tests passed.
• Validated extension/manifest.json schema and permissions.
• Verified Python syntax compilation across all backend and test modules.
• Created .gitignore to prevent secret and log leakage (server-automation.log, .server.pid, __pycache__).

Labeled:

September 25, 2026 at 12:08AM

via GitHub https://ift.tt/d0vJ6c1

[Cybersoulja/oneseco-io]

Add n8n webhook connection (outgoing + incoming)

By Cybersoulja

Assigned to

Summary

• Adds server/lib/n8n.ts with sendToN8n(event, data), a helper for calling out to an n8n webhook. Failures are logged, never thrown, so an unreachable n8n instance can't break the app.
• Adds POST /api/webhooks/n8n in server/routes.ts so n8n can call into the app. Optionally gated by a shared secret (x-n8n-secret header vs. N8N_WEBHOOK_SECRET). Currently just logs the payload — a TODO marks where real handling goes once it's decided what n8n should trigger.
• Adds .env.example documenting N8N_WEBHOOK_URL and N8N_WEBHOOK_SECRET.
• Adds .env to .gitignore so real secrets never get committed.

Note: no existing app event calls sendToN8n(...) yet — that gets wired in once the specific trigger (e.g. character created, story started) is decided.

Test plan

• npx tsc --noEmit — no new type errors introduced
• Copy .env.example to .env, fill in real values, restart server
• `curl -X POST http://localhost:5000/api/webhooks/n8n -H "Content-Type: application/json" -H "x-n8n-secret:

[Oneseco-Media/glasp-integration-worker]

Fix worker build by specifying main entry point

By Cybersoulja

Assigned to

Added main = "index.js" to wrangler.toml so that wrangler deploy works correctly.

PR created automatically by Jules for task 8445719892390647270 started by @Cybersoulja

Labeled:

September 24, 2026 at 02:13PM

via GitHub https://ift.tt/YzRcJPG

[Cybersoulja/my-mcp-server]

feat: make Command Center Edge Health live

By Cybersoulja

Assigned to

First live Command Center module

Replaces the simulated Edge Health metric with a real Worker-backed health check.

Changes

• Adds public, secret-free GET /api/health
• Probes the bound MCP_KV service
• Returns runtime status, check timestamp, and measured latency
• Wires oneseco.html Edge Health card to the endpoint
• Refreshes automatically every 30 seconds
• Displays degraded/offline states instead of fabricated uptime

This establishes the atomic UI → API → infrastructure pattern for converting the rest of the Command Center from simulated data to live operational data.

Labeled:

September 23, 2026 at 08:03PM

via GitHub https://ift.tt/bV2PiA9

[Cybersoulja/my-mcp-server]

[WIP] Add Oneseco Media frontend webpage as oneseco.html

By Copilot

Assigned to

• Inspect the existing standalone oneseco.html frontend and repository scripts
• Compare the page against the requested interactive behaviors and identify any missing/incomplete sections
• Make the smallest self-contained HTML/JS fixes needed in oneseco.html
• Run the relevant validation for this standalone frontend and manually verify the UI interactions
• Scan changed files for secrets, validate the final diff, and push the update

Labeled:

September 23, 2026 at 07:36PM

via GitHub https://ift.tt/b25Yhkx

[Cybersoulja/my-mcp-server]

page dash

By Cybersoulja

Assigned to Cybersoulja

Labeled:

September 23, 2026 at 07:32PM

via GitHub https://ift.tt/mRt1w4x

[Oneseco-Media/rsshub]

Bump eslint-plugin-regexp from 3.3.0 to 3.3.1

By dependabot[bot]

Assigned to

Bumps eslint-plugin-regexp from 3.3.0 to 3.3.1.

Release notes

Sourced from eslint-plugin-regexp's releases.

v3.3.1

Patch Changes

Updates unicode property alias resource with latest (#1052)

Changelog

Sourced from eslint-plugin-regexp's changelog.

3.3.1

Patch Changes

Updates unicode property alias resource with latest (#1052)

Commits

2581e09 chore: release eslint-plugin-regexp (#1053)

fff47be Updates unicode property alias resource with latest (#1052)

bca5e87 chore(deps): update dependency eslint-plugin-unicorn to v76 (#1051)

5fd7d5b chore(deps): update dependency eslint-plugin-unicorn to v75 (#1049)

db8d56c chore(deps): update typescript-eslint monorepo to ~8.70.0 (#1047)

7275fff chore(deps): update changesets/action action to v2.1.2 (#1046)

1690120 chore(deps): update dependency eslint-plugin-regexp to ~3.3.0 (#1045)

See full diff in compare view

[

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• `@dependabot show

Labeled:

September 23, 2026 at 03:10AM

via GitHub https://ift.tt/DZI5VuS

[Oneseco-Media/rsshub]

Bump eslint-plugin-unicorn from 74.0.0 to 76.0.0

By dependabot[bot]

Assigned to

Bumps eslint-plugin-unicorn from 74.0.0 to 76.0.0.

Release notes

Sourced from eslint-plugin-unicorn's releases.

v76.0.0

Breaking

no-immediate-mutation: Add checkConditionals option and default it to off (#3707) 4686e7ef

no-break-in-nested-loop: Add checkContinue option and default it to off (#3712) d8fbfde8

prefer-combined-guards: Add checkCompoundConditions option default it to off (#3710)

Improvements

prefer-minimal-ternary: Add autofix (#3716) aaa75a46

prefer-logical-operator-over-ternary: Handle boolean expressions (#3711)

prefer-ternary: Preserve readable branches (#3709) f7a35aea

no-typeof-undefined: Ignore TypeScript ambient variables (#3708) 9245ed87

Fix autofixes that hardcoded a tab for inserted indentation (#3721) db20ce1c

https://github.com/sindresorhus/eslint-plugin-unicorn/compare/v75.0.0...v76.0.0

v75.0.0

New rules

prefer-combined-guards (#3680) 5d9d745c

no-unused-iterator-helper (#3677) 82137379

no-unused-builtin-method-return (#3676) b3d56a35

prefer-iterator-zip (#3675) 60d3b53a

no-useless-set-construction (#3672) 639c9844

prefer-iterator-helpers (#3670) 4c805e26

prefer-json-import (#3668) 1df640dd

prefer-temporal-conversion (#3667) 74bc02e7

no-async-iterator-callback (#3666) bb6c2450

no-using-resource-escape (#3663) 34247853

prefer-uint8array-hex (#3661) 92551329

no-deprecated-css-features (#3651) e1161021

no-unscoped-css-nesting-selector (#3650) ebd03bdf

no-duplicate-css-selectors (#3646) 508d9f50

no-unknown-pseudo-selectors (#3644) 99492cd7

no-invalid-media-features (#3643) ef37c1f1

no-unknown-css-annotations (#3642) 19637ee8

no-nesting-with-mixed-specificity (#3640) b2f2bf9d

prefer-media-feature-range-syntax (#3639) 19f112f6

no-duplicate-font-family-names (#3638) c8f81bc8

no-redundant-nested-style-rules (#3637) 31603ad6

Improvements

Add TOML support (#3687) f61393aa

Improve performance 3cfa32ce

prefer-continue: Add checkShortBodies option (#3699) 274d5815

filename-case: Add directoryRoots option (#3647) d2d6cc3e

... (truncated)

Commits

f70155e 76.0.0

db20ce1 Fix autofixes that hardcoded a tab for inserted indentation (#3721)

aaa75a4 prefer-minimal-ternary: Add autofix (#3716)

577746b prefer-logical-operator-over-ternary: Handle boolean expressions (#3711)

d8fbfde no-break-in-nested-loop: Add checkContinue option and default it to off (...

a0fdbef prefer-combined-guards: Add checkCompoundConditions option and make it of...

f7a35ae prefer-ternary: Preserve readable branches (#3709)

9245ed8 no-typeof-undefined: Ignore TypeScript ambient variables (#3708)

4686e7e no-immediate-mutation: Add checkConditionals option and default it to off...

80939f9 75.0.0

Additional commits viewable in compare view

[

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• `@dependabot show

Labeled:

September 23, 2026 at 03:10AM

via GitHub https://ift.tt/5SevBua