Oneseco Media GITHUB

Oneseco Media GITHUB

4951 bookmarks
Newest
[Oneseco-Media/rsshub] Bump lru-cache from 11.5.2 to 11.5.3
[Oneseco-Media/rsshub] Bump lru-cache from 11.5.2 to 11.5.3

[Oneseco-Media/rsshub]

Bump lru-cache from 11.5.2 to 11.5.3

By dependabot[bot]

Assigned to

Bumps lru-cache from 11.5.2 to 11.5.3.

Commits

7e71a1f 11.5.3

98b553f add react-native export condition with no diagnostics_channel

See full diff in compare view

[Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • `@dependabot show

Labeled:

September 22, 2026 at 03:16AM

via GitHub https://ift.tt/kYhVIGc

·github.com·
[Oneseco-Media/rsshub] Bump lru-cache from 11.5.2 to 11.5.3
[Oneseco-Media/rsshub] Bump dotenv from 17.4.2 to 18.0.1
[Oneseco-Media/rsshub] Bump dotenv from 17.4.2 to 18.0.1

[Oneseco-Media/rsshub]

Bump dotenv from 17.4.2 to 18.0.1

By dependabot[bot]

Assigned to

Bumps dotenv from 17.4.2 to 18.0.1.

Changelog

Sourced from dotenv's changelog.

18.0.1 (2026-09-18)

Changed

Handle file urls in config logging (#1054)

18.0.0 (2026-09-17)

Added

NEW: Dotenv now has a CLI. (#1022)

$ dotenv run -- node index.js ◇ injected env (2) from .env Hello Dotenv

NEW: Dotenv now has a fast parser thanks to @​homanp of superagent.sh. Pass config({ fast: true }), flag --fast, or set DOTENV_FAST=true to opt-in to ~2x faster character-scanner parser. (#1010)

$ dotenv run --fast -- node index.js ◇ injected env (2) from .env Hello Dotenv

Changed

Injecting message sent to stderr rather than stdout and tips removed (#1037)

Removed

Remove tips (#1031)

Remove skill files (#1032)

Remove Spanish README (#1034)

Remove .env.vault support (#1033)

Remove preloading. Instead use cli dotenv run -- your-command (#1035)

Commits

ce3bfb4 18.0.1

294230e changelog

4fcffd4 Merge pull request #1054 from jakezwang/fix-url-path-logging

8ea84d6 fix: handle file URLs in config logging

2815fa8 18.0.0

451c6cb add spacing

7c7ed02 update README and changelog

7454f56 Merge pull request #1052 from motdotla/cli-cleanup

f5de622 .cmd coverage

75289b1 changelog

Additional commits viewable in compare view

[Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • `@dependabot show

Labeled:

September 22, 2026 at 03:16AM

via GitHub https://ift.tt/qafmGcb

·github.com·
[Oneseco-Media/rsshub] Bump dotenv from 17.4.2 to 18.0.1
[Oneseco-Media/rsshub] Bump @types/node from 26.5.1 to 26.6.2
[Oneseco-Media/rsshub] Bump @types/node from 26.5.1 to 26.6.2

[Oneseco-Media/rsshub]

Bump @types/node from 26.5.1 to 26.6.2

By dependabot[bot]

Assigned to

Bumps @types/node from 26.5.1 to 26.6.2.

Commits

See full diff in compare view

[Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • `@dependabot show

Labeled:

September 22, 2026 at 03:16AM

via GitHub https://ift.tt/65OMCb0

·github.com·
[Oneseco-Media/rsshub] Bump @types/node from 26.5.1 to 26.6.2
[Oneseco-Media/rsshub] Bump the vitest group with 2 updates
[Oneseco-Media/rsshub] Bump the vitest group with 2 updates

[Oneseco-Media/rsshub]

Bump the vitest group with 2 updates

By dependabot[bot]

Assigned to

Bumps the vitest group with 2 updates: @vitest/coverage-v8 and vitest.

Updates @vitest/coverage-v8 from 4.1.11 to 5.0.1

Release notes

Sourced from @​vitest/coverage-v8's releases.

v5.0.1

   🚀 Features

ui:

Move trace attempts selector to viewer header  -  by @​hi-ogawa, Hiroshi Ogawa and Codex in vitest-dev/vitest#11189 (5dc4b)

Add focused trace view layout mode  -  by @​hi-ogawa, Hiroshi Ogawa, OpenCode (gpt-5.6-sol) and Codex in vitest-dev/vitest#11190 (376dc)

   🐞 Bug Fixes

Exit 1 when vitest list fails collection  -  by @​hamed-bavar in vitest-dev/vitest#11145 and vitest-dev/vitest#11146 (6108b)

Keep parse error details in static collection  -  by @​hamed-bavar in vitest-dev/vitest#11150 and vitest-dev/vitest#11151 (7c818)

Avoid recursive prototype in automocking  -  by @​sheremet-va in vitest-dev/vitest#11195 (99fc5)

Prevent false Vitest import resolution  -  by @​sheremet-va in vitest-dev/vitest#11196 (b426c)

Keep metadata file when clearing the cache  -  by @​sheremet-va in vitest-dev/vitest#11199 (73614)

Correct typos in error message and comments  -  by @​shinji00222 and Shinji in vitest-dev/vitest#11187 (115c3)

Resolve ResolvedConfig exactOptionalPropertyTypes errors  -  by @​LukeAbby in vitest-dev/vitest#11175 (498fb)

Share the server on self-referencing extends  -  by @​sheremet-va in vitest-dev/vitest#11034 (23dda)

Warn when deprecated deps.optimizer.web is used  -  by @​im10furry in vitest-dev/vitest#11214 (2ce29)

browser:

Avoid double quotes in config.define  -  by @​sheremet-va in vitest-dev/vitest#11198 (972e2)

doctor:

Measure vm pools for custom environments  -  by @​sheremet-va in vitest-dev/vitest#11212 (91ab1)

expect:

Correct return value in toMatchAriaSnapshot  -  by @​sheremet-va in vitest-dev/vitest#11208 (c119b)

fakeTimers:

Force queueMicrotask and nextTick in toNotFake  -  by @​kingmakeruix, kingmakeruix, Hiroshi Ogawa, Codex and @​hi-ogawa in vitest-dev/vitest#11261 (a47d7)

snapshot:

Report obsolete keys next to skipped tests  -  by @​hamed-bavar, Hiroshi Ogawa and OpenCode (gpt-5.6-sol) in vitest-dev/vitest#11157 and vitest-dev/vitest#11158 (17e2b)

types:

Make public declarations self-contained  -  by @​ZoeySigel in vitest-dev/vitest#11141 (45546)

ui:

Fix collapse/expand suite with file name search  -  by @​hi-ogawa, Hiroshi Ogawa and Codex in vitest-dev/vitest#11260 (0a712)

Fix explorer file summary count  -  by @​hi-ogawa, Hiroshi Ogawa, OpenCode (gpt-5.6-sol) and Codex in vitest-dev/vitest#11125 (05982)

utils:

Fix deepMerge to handle prototype  -  by @​hi-ogawa, Hiroshi Ogawa and Codex in vitest-dev/vitest#11215 (4944c)

    View changes on GitHub

v5.0.0

Vitest 5 is officially out! This release focuses on performance and brings a lot of new features while fixing long-standing bugs. See our blog post for the official announcement.

   🚨 Breaking Changes

Replace loupe.inspect with pretty-format  -  by @​hi-ogawa, Claude Opus 5 (1M context) and OpenAI Codex in vitest-dev/vitest#9609 (3f802)

Remove quotes from string values in test.for/each title $ variable (take 2)  -  by @​hi-ogawa in vitest-dev/vitest#10170 (04d37)

Default attachmentsDir from .vitest-attachements/ to .vitest/attachments/  -  by @​MdSadiqMd in vitest-dev/vitest#10186 (1ba73)

Remove sequential test/suite options in favor of concurrent  -  by @​hi-ogawa and OpenAI Codex in vitest-dev/vitest#10198 (9229f)

Represent locator as an object instead of a string  -  by @​sheremet-va in vitest-dev/vitest#10212 (80f07)

Inline expect package  -  by @​sheremet-va in vitest-dev/vitest#10221 (ad162)

Remove deprecated entry points  -  by @​sheremet-va in vitest-dev/vitest#10222 (994c6)

... (truncated)

Commits

03630a5 chore: release v5.0.1 (#11275)

f441c6f chore: release v5.0.0 (#11130)

c4473e4 fix(coverage): prevent crash on /@fs/ prepended virtual files (#11119)

897f51f chore: release v5.0.0-rc.4 (#11107)

7db80dc chore: release v5.0.0-rc.3 (#11089)

5f6a5e8 feat(coverage): switch to @vitest/istanbuljs packages (#11053)

c6174a6 fix(coverage): v8 to ignore Vite SSR's generated import bindings (#11023)

af83d1b chore: release v5.0.0-rc.2 (#10976)

a7fa111 chore: release v5.0.0-rc.1 (#10920)

0553851 chore: add Knip checks (#10847)

Additional commits viewable in compare view

Updates vitest from 4.1.11 to 5.0.1

Release notes

Sourced from vitest's releases.

v5.0.1

   🚀 Features

ui:

Move trace attempts selector to viewer header  -  by @​hi-ogawa, Hiroshi Ogawa and Codex in vitest-dev/vitest#11189 (5dc4b)

Add focused trace view layout mode  -  by @​hi-ogawa, Hiroshi Ogawa, OpenCode (gpt-5.6-sol) and Codex in vitest-dev/vitest#11190 (376dc)

   🐞 Bug Fixes

Exit 1 when vitest list fails collection  -  by @​hamed-bavar in vitest-dev/vitest#11145 and vitest-dev/vitest#11146 (6108b)

Keep parse error details in static collection  -  by @​hamed-bavar in vitest-dev/vitest#11150 and vitest-dev/vitest#11151 (7c818)

Avoid recursive prototype in automocking  -  by @​sheremet-va in vitest-dev/vitest#11195 (99fc5)

Prevent false Vitest import resolution  -  by @​sheremet-va in vitest-dev/vitest#11196 (b426c)

Keep metadata file when clearing the cache  -  by @​sheremet-va in vitest-dev/vitest#11199 (73614)

Correct typos in error message and comments  -  by @​shinji00222 and Shinji in vitest-dev/vitest#11187 (115c3)

Resolve ResolvedConfig exactOptionalPropertyTypes errors  -  by @​LukeAbby in vitest-dev/vitest#11175 (498fb)

Share the server on self-referencing extends  -  by @​sheremet-va in vitest-dev/vitest#11034 (23dda)

Warn when deprecated deps.optimizer.web is used  -  by @​im10furry in vitest-dev/vitest#11214 (2ce29)

browser:

Avoid double quotes in config.define  -  by @​sheremet-va in vitest-dev/vitest#11198 (972e2)

doctor:

Measure vm pools for custom environments  -  by @​sheremet-va in vitest-dev/vitest#11212 (91ab1)

expect:

Correct return value in toMatchAriaSnapshot  -  by @​sheremet-va in vitest-dev/vitest#11208 (c119b)

fakeTimers:

Force queueMicrotask and nextTick in toNotFake  -  by @​kingmakeruix, kingmakeruix, Hiroshi Ogawa, Codex and @​hi-ogawa in vitest-dev/vitest#11261 (a47d7)

snapshot:

Report obsolete keys next to skipped tests  -  by @​hamed-bavar, Hiroshi Ogawa and OpenCode (gpt-5.6-sol) in vitest-dev/vitest#11157 and vitest-dev/vitest#11158 (17e2b)

types:

Make public declarations self-contained  -  by @​ZoeySigel in vitest-dev/vitest#11141 (45546)

ui:

Fix collapse/expand suite with file name search  -  by @​hi-ogawa, Hiroshi Ogawa and Codex in vitest-dev/vitest#11260 (0a712)

Fix explorer file summary count  -  by @​hi-ogawa, Hiroshi Ogawa, OpenCode (gpt-5.6-sol) and Codex in vitest-dev/vitest#11125 (05982)

utils:

Fix deepMerge to handle prototype  -  by @​hi-ogawa, Hiroshi Ogawa and Codex in vitest-dev/vitest#11215 (4944c)

    View changes on GitHub

v5.0.0

Vitest 5 is officially out! This release focuses on performance and brings a lot of new features while fixing long-standing bugs. See our blog post for the official announcement.

   🚨 Breaking Changes

Replace loupe.inspect with pretty-format  -  by @​hi-ogawa, Claude Opus 5 (1M context) and OpenAI Codex in vitest-dev/vitest#9609 (3f802)

Remove quotes from string values in test.for/each title $ variable (take 2)  -  by @​hi-ogawa in vitest-dev/vitest#10170 (04d37)

Default attachmentsDir from .vitest-attachements/ to .vitest/attachments/  -  by @​MdSadiqMd in vitest-dev/vitest#10186 (1ba73)

Remove sequential test/suite options in favor of concurrent  -  by @​hi-ogawa and OpenAI Codex in vitest-dev/vitest#10198 (9229f)

Represent locator as an object instead of a string  -  by @​sheremet-va in vitest-dev/vitest#10212 (80f07)

Inline expect package  -  by @​sheremet-va in vitest-dev/vitest#10221 (ad162)

Remove deprecated entry points  -  by @​sheremet-va in vitest-dev/vitest#10222 (994c6)

... (truncated)

Commits

03630a5 chore: release v5.0.1 (#11275)

a47d790 fix(fakeTimers): force queueMicrotask and nextTick in toNotFake (#11261)

2ce29d5 fix: warn when deprecated deps.optimizer.web is used (#11214)

ccd6d05 docs: fix typecheck exclude default in documentation (#11223)

91ab158 fix(doctor): measure vm pools for custom environments (#11212)

23dda73 fix: share the server on self-referencing extends (#11034)

498fbe9 fix: resolve ResolvedConfig exactOptionalPropertyTypes errors (#11175)

115c3f6 fix: correct typos in error message and comments (#11187)

7361465 fix: keep metadata file when clearing the cache (#11199)

972e24b fix(browser): avoid double quotes in config.define (#11198)

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • `@dependabot show

Labeled:

September 22, 2026 at 03:15AM

via GitHub https://ift.tt/OVf8U6I

·github.com·
[Oneseco-Media/rsshub] Bump the vitest group with 2 updates
[Oneseco-Media/rsshub] Bump the oxc group with 6 updates
[Oneseco-Media/rsshub] Bump the oxc group with 6 updates

[Oneseco-Media/rsshub]

Bump the oxc group with 6 updates

By dependabot[bot]

Assigned to

Bumps the oxc group with 6 updates:

PackageFromTo
oxc-parser0.149.00.150.0
@oxlint/plugins1.82.01.83.0
oxfmt0.67.00.68.0
oxlint1.82.01.83.0
oxlint-plugin-eslint1.82.01.83.0
oxlint-tsgolint7.0.20017.0.2002

Updates oxc-parser from 0.149.0 to 0.150.0

Release notes

Sourced from oxc-parser's releases.

oxc crates_v0.150.0

🚀 Features

ca649e0 ecma: Define math constants as known globals and resolve their types (#26585) (Armano)

9ef028c codegen: Add ascii_only option (#25994) (Samuel Attard)

80a76a0 minifier: Negate binary comparison for typeof x < 'u' (#26367) (Armano)

🐛 Bug Fixes

8ca76da parser: Reject accessor modifiers on methods (#26617) (camc314)

1916f31 parser: Reject readonly modifier on constructors (#26612) (camc314)

1c42008 parser: Handle escaped let in for loops (#26583) (camc314)

d21d5cf parser: Recognize annotated empty arrows in conditionals (#26537) (camc314)

d7713ad parser: Classify Unicode line breaks in block comments (#26536) (camc314)

75cd919 transformer: Preserve receivers in private optional chains (#26535) (camc314)

b32d25d parser: Reject escaped import-phase keywords (#26534) (camc314)

47b8311 parser: Recognize contextual binding names in type lookaheads (#26532) (camc314)

d6b6705 parser: Require arrow separator in TypeScript function types (#26529) (camc314)

e98beef parser: Disambiguate await using in for initializers (#26527) (camc314)

92afee6 parser: Allow parenthesized JSX comma expressions with preserve_parens=false (#26524) (camc314)

31508b1 parser: Reject return types on constructor overloads (#26523) (camc314)

a091fc4 parser: Validate await context for await using declarations (#26495) (camc314)

5501e86 parser: Disallow in expressions in using for-loop initializers (#26490) (camc314)

c8e5fa7 parser: Allow escaped type names in import and export specifiers (#26487) (camc314)

2dcee2f parser: Reject async modifiers on class fields (#26486) (camc314)

973d58e parser: Require comma after TypeScript this parameter (#26480) (camc314)

32d00c5 codegen: Preserve instantiation expression precedence (#26424) (camc314)

cfa47ab parser: Allow in expressions in class static blocks (#26423) (camc314)

5986187 packages/codegen: Preserve private-in right operand precedence (#26420) (camc314)

f8e6c6c packages/codegen: Preserve in restriction through yield arguments (#26421) (camc314)

d61e3bf parser: Validate TS named tuple rest elements (#26419) (camc314)

ae6c386 codegen: Preserve in restriction through yield arguments (#26413) (camc314)

42ac916 codegen: Preserve private-in right operand precedence (#26411) (camc314)

10521b2 parser: Allow escaped type default import bindings (#26409) (camc314)

72cb5e3 parser: Reject rest parameters in getters (#26400) (camc314)

6e15ad5 packages/codegen: Print matching quoted import names as identifiers (#26404) (camc314)

bbbb4bc packages/codegen: Preserve private-in left operand precedence (#26403) (camc314)

a111b5b packages/codegen: Print accessibility modifiers before abstract (#26402) (camc314)

4e76602 parser: Allow in in arrow block bodies within for initializers (#26395) (camc314)

b20fc19 parser: Reject partially parenthesized mixed coalesce expressions (#26394) (camc314)

⚡ Performance

1f902a6 isolated_declarations: Key scope maps by Ident (#26380) (Dunqing)

a242469 minfiier: Reduce allocs when creating indirect access (#26601) (Armano)

5b4787f minifier: Update chain expressions in place (#26544) (Armano)

0bc1661 minifier: Try merging before creating new expression statements (#26556) (Armano)

c78d707 minifier: Process newly created stmt in handle_if_statement (#26541) (Armano)

029c84b minfier: Update expressions in place when substituting alternate syntax (#26460) (Armano)

d198982 codegen: Outline postfix source mapping work (#26450) (camc314)

... (truncated)

Changelog

Sourced from oxc-parser's changelog.

Changelog

All notable changes to this package will be documented in this file.

The format is based on Keep a Changelog.

[0.151.0] - 2026-09-21

🚀 Features

1fac655 coverage: Support new TypeScript fixture layout (#26226) (camc314)

Commits

5a6e37e release(crates): oxc v0.150.0 (#26632)

59e8d5f chore(deps): update napi (#26533)

See full diff in compare view

Updates @oxlint/plugins from 1.82.0 to 1.83.0

Release notes

Sourced from @​oxlint/plugins's releases.

oxlint v1.83.0 & oxfmt v0.68.0

Table of Contents

Oxlint v1.83.0

Oxfmt v0.68.0

Oxlint v1.83.0

🚀 Features

afe950d linter/react: Update lint rules to accomodate changes in React 19.3 (#26571) (Connor Shea)

🐛 Bug Fixes

fb87ed7 linter/unicorn/prefer-array-flat-map: Report .filter().flatMap() chains (#26626) (camc314)

336b654 linter/unicorn/prefer-at: Report single-character substring calls (#26623) (camc314)

a5bba6d linter/eslint/no-unused-vars: Respect rest params after-used option (#26579) (Bartok)

c1470a2 linter/eslint/no-unused-vars: Preserve ambient implicit exports (#26582) (Dex Hunter)

9a469d2 linter/unicorn/prefer-global-this: Preserve window event method references (#26611) (Dex Hunter)

aaff758 linter/unicorn/prefer-default-parameters: Report violation for ??= and ||= (#26607) (Bartok)

2bed25a linter/unicorn/prefer-array-flat: Skip plain concat normalization (#26604) (im10furry)

72bc7f2 oxlint: Replace backlashes path for "no js runtime" diagnostic (#26599) (Sysix)

1aa5ec1 linter/typescript/prefer-for-of: Handle computed collections (#26584) (camc314)

1e90019 linter/typescript: Mark no-unnecessary-type-parameters and prefer-find suggestions as implemented (#26586) (Mikhail Baev)

4231536 linter: Compare label text in runtime optimization assertion (#26526) (camc314)

36d5534 linter: Include file path in diagnostic assertion (#26525) (camc314)

31508b1 parser: Reject return types on constructor overloads (#26523) (camc314)

⚡ Performance

1d681b0 linter/react/jsx-pascal-case: Avoid temporary name segment vector (#26531) (camc314)

2ad7d49 linter/promise/catch-or-return: Avoid temporary formatting vectors (#26505) (camc314)

203235b linter/jsx-a11y/no-static-element-interactions: Avoid role vector (#26504) (camc314)

2e95167 linter/jsx-a11y/anchor-is-valid: Avoid temporary attribute vector (#26501) (camc314)

deafdba linter/react/exhaustive-deps: Avoid temporary dependency vector (#26502) (camc314)

4f1627f linter/oxc/branches-sharing-code: Compute deletion spans lazily (#26500) (camc314)

c068fd2 linter/react/jsx-curly-brace-presence: Avoid newline position allocation (#26499) (camc314)

ed4357c linter/eslint/no-restricted-properties: Skip empty configurations (#26497) (camc314)

92e41b7 linter/oxc/no-barrel-file: Iterate module requests directly (#26498) (camc314)

5255ee3 linter/unicorn/prefer-single-call: Avoid temporary argument vector (#26494) (camc314)

96ef365 linter/unicorn/prefer-includes: Reduce suggestion allocations (#26492) (camc314)

a71fd7f linter/unicorn/no-new-buffer: Avoid temporary argument vector (#26491) (camc314)

11085e7 linter/jsdoc/require-yields: Short-circuit JSDoc checks (#26488) (camc314)

9b1aff8 linter/unicorn/no-useless-undefined: Skip calls without trailing undefined (#26481) (camc314)

1e5d5d7 linter/eslint/no-unused-vars: Skip absent global declaration checks (#26457) (camc314)

403f899 linter/eslint/no-undef: Check globals once per unresolved name (#26456) (camc314)

118adb0 linter/eslint/no-restricted-imports: Avoid redundant import scans (#26455) (camc314)

ab848f2 linter/eslint/no-useless-assignment: Skip tracking exported symbols (#26449) (camc314)

1b6e409 linter/unicorn/prefer-object-from-entries: Avoid allocating configured paths (#26448) (camc314)

2206875 linter/eslint/new-cap: Avoid unnecessary callee name allocations (#26447) (camc314)

... (truncated)

Commits

7bf68f7 release(apps): oxlint v1.83.0 && oxfmt v0.68.0 (#26631)

See full diff in compare view

Updates oxfmt from 0.67.0 to 0.68.0

Changelog

Sourced from oxfmt's changelog.

Changelog

All notable changes to this package will be documented in this file.

The format is based on Keep a Changelog.

Commits

7bf68f7 release(apps): oxlint v1.83.0 && oxfmt v0.68.0 (#26631)

See full diff in compare view

Updates oxlint from 1.82.0 to 1.83.0

Changelog

Sourced from oxlint's changelog.

Changelog

All notable changes to this package will be documented in this file.

The format is based on Keep a Changelog.

Commits

7bf68f7 release(apps): oxlint v1.83.0 && oxfmt v0.68.0 (#26631)

See full diff in compare view

Updates oxlint-plugin-eslint from 1.82.0 to 1.83.0

Release notes

Sourced from oxlint-plugin-eslint's releases.

oxlint v1.83.0 & oxfmt v0.68.0

Table of Contents

Oxlint v1.83.0

Oxfmt v0.68.0

Oxlint v1.83.0

🚀 Features

afe950d linter/react: Update lint rules to accomodate changes in React 19.3 (#26571) (Connor Shea)

🐛 Bug Fixes

fb87ed7 linter/unicorn/prefer-array-flat-map: Report .filter().flatMap() chains (#26626) (camc314)

336b654 linter/unicorn/prefer-at: Report single-character substring calls (#26623) (camc314)

a5bba6d linter/eslint/no-unused-vars: Respect rest params after-used option (#26579) (Bartok)

c1470a2 linter/eslint/no-unused-vars: Preserve ambient implicit exports (#26582) (Dex Hunter)

9a469d2 linter/unicorn/prefer-global-this: Preserve window event method references (#26611) (Dex Hunter)

aaff758 linter/unicorn/prefer-default-parameters: Report violation for ??= and ||= (#26607) (Bartok)

2bed25a linter/unicorn/prefer-array-flat: Skip plain concat normalization (#26604) (im10furry)

72bc7f2 oxlint: Replace backlashes path for "no js runtime" diagnostic (#26599) (Sysix)

1aa5ec1 linter/typescript/prefer-for-of: Handle computed co

·github.com·
[Oneseco-Media/rsshub] Bump the oxc group with 6 updates
[Oneseco-Media/rsshub] Bump the hono group with 2 updates
[Oneseco-Media/rsshub] Bump the hono group with 2 updates

[Oneseco-Media/rsshub]

Bump the hono group with 2 updates

By dependabot[bot]

Assigned to

Bumps the hono group with 2 updates: @scalar/hono-api-reference and hono.

Updates @scalar/hono-api-reference from 0.12.1 to 0.12.2

Changelog

Sourced from @​scalar/hono-api-reference's changelog.

0.12.2

Commits

See full diff in compare view

Updates hono from 4.13.7 to 4.13.8

Release notes

Sourced from hono's releases.

v4.13.8

What's Changed

docs: fix typos in code comments and link third-party middleware section in honojs/hono#5343

perf(jsx/dom): reduce lookup work for large keyed updates in honojs/hono#5340

fix(aws-lambda): respect backpressure when streaming the response body in honojs/hono#5351

fix(accepts, language): skip accept entries with quality 0 when matching in honojs/hono#5311

fix(accept): treat the q parameter name as case-insensitive in honojs/hono#5349

fix(accept): clamp a negative q to 0, not 1 in honojs/hono#5357

fix(request): keep the request media type when reusing a cached body in honojs/hono#5366

docs(combine): fix except() JSDoc param and add missing @​returns in honojs/hono#5346

perf(jsx/dom): optimize matching-head child lookup during reconciliation in honojs/hono#5329

Full Changelog: https://github.com/honojs/hono/compare/v4.13.7...v4.13.8

Commits

098e119 4.13.8

e8c8c21 perf(jsx/dom): optimize matching-head child lookup during reconciliation (#5329)

8755b17 docs(combine): fix except() JSDoc param and add missing @​returns (#5346)

edd138e fix(request): keep the request media type when reusing a cached body (#5366)

9b4e9c2 fix(accept): clamp a negative q to 0, not 1 (#5357)

65cff90 fix(accept): treat the q parameter name as case-insensitive (#5349)

f147de5 fix(accepts, language): skip accept entries with quality 0 when matching (#5311)

90e1b94 fix(aws-lambda): respect backpressure when streaming the response body (#5351)

7792f5d perf(jsx/dom): reduce lookup work for large keyed updates (#5340)

e7b38ee docs: fix typos in code comments and link third-party middleware section (#5343)

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • `@dependabot show

Labeled:

September 22, 2026 at 03:12AM

via GitHub https://ift.tt/rdXTc4y

·github.com·
[Oneseco-Media/rsshub] Bump the hono group with 2 updates
[Oneseco-Media/rsshub] Bump eslint from 10.10.0 to 10.11.0 in the eslint group
[Oneseco-Media/rsshub] Bump eslint from 10.10.0 to 10.11.0 in the eslint group

[Oneseco-Media/rsshub]

Bump eslint from 10.10.0 to 10.11.0 in the eslint group

By dependabot[bot]

Assigned to

Bumps the eslint group with 1 update: eslint.

Updates eslint from 10.10.0 to 10.11.0

Release notes

Sourced from eslint's releases.

v10.11.0

Features

d136fa4 feat: object-shorthand handle quoted properties for ignoreConstructors (#21271) (Pavel)

397b3b8 feat: report unsafe labeled continue in no-unsafe-finally rule (#21316) (electrohyun)

d3dd47f feat: only exempt new-cap built-ins that reference the global (#21290) (sethamus)

Bug Fixes

22b09f5 fix: ignore proto properties in prefer-object-spread (#21311) (xbinaryx)

b684bb1 fix: make TimePass.parse optional in types and docs (#21313) (ntnyq)

26d11bc fix: don't report proto properties in object-shorthand (#21310) (xbinaryx)

Documentation

9ecfdc5 docs: note that --cache can serve stale results for cross-file rules (#21312) (bytedoe)

6c789ff docs: Update README (GitHub Actions Bot)

5997825 docs: clarify preserve-caught-error known limitation (#21294) (Akinyemi Toluwalase)

Chores

520dd77 perf: Implement fast paths in critical areas (#21210) (Nicholas C. Zakas)

92086c8 test: update EMFILE error generation for Node.js 26.9.0 compatibility (#21330) (Francesco Trotta)

9ac7eb6 chore: update github/codeql-action action to v4.38.0 (#21331) (renovate[bot])

24310e3 chore: update ecosystem plugins (#21324) (ESLint Bot)

45ad79e ci: bump pnpm/action-setup from 6.0.10 to 6.1.0 (#21318) (dependabot[bot])

ac74e37 chore: Add AGENTS.md with AI disclosure requirements (#21221) (Nicholas C. Zakas)

c832660 chore: Upgrade Stylelint to the latest version in docs (#21245) (Jung Hyeon Jun)

f9f88fc chore: update ecosystem plugins (#21308) (ESLint Bot)

fc81076 ci: add more types integration tests (#20395) (Nitin Kumar)

Commits

3c0b7c6 10.11.0

321f0a7 Build: changelog update for 10.11.0

520dd77 perf: Implement fast paths in critical areas (#21210)

9ecfdc5 docs: note that --cache can serve stale results for cross-file rules (#21312)

92086c8 test: update EMFILE error generation for Node.js 26.9.0 compatibility (#21330)

9ac7eb6 chore: update github/codeql-action action to v4.38.0 (#21331)

22b09f5 fix: ignore proto properties in prefer-object-spread (#21311)

24310e3 chore: update ecosystem plugins (#21324)

d136fa4 feat: object-shorthand handle quoted properties for ignoreConstructors (#21...

45ad79e ci: bump pnpm/action-setup from 6.0.10 to 6.1.0 (#21318)

Additional commits viewable in compare view

[Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • `@dependabot show

Labeled:

September 22, 2026 at 03:11AM

via GitHub https://ift.tt/sGC6fdg

·github.com·
[Oneseco-Media/rsshub] Bump eslint from 10.10.0 to 10.11.0 in the eslint group
[Oneseco-Media/rsshub] Bump the cloudflare group with 3 updates
[Oneseco-Media/rsshub] Bump the cloudflare group with 3 updates

[Oneseco-Media/rsshub]

Bump the cloudflare group with 3 updates

By dependabot[bot]

Assigned to

Bumps the cloudflare group with 3 updates: @cloudflare/vitest-plugin, @cloudflare/workers-types and wrangler.

Updates @cloudflare/vitest-plugin from 1.1.5 to 1.1.13

Release notes

Sourced from @​cloudflare/vitest-plugin's releases.

@​cloudflare/vitest-plugin@​1.1.13

Patch Changes

Updated dependencies [1f070c8, a0485d5, 629ddef, c4c9b75, 643e5cc]:

[email protected]

[email protected]

@​cloudflare/vitest-plugin@​1.1.12

Patch Changes

Updated dependencies [6874aa9, 2298cf1, d96b319, 876eea1, 2b39fc2]:

[email protected]

[email protected]

@​cloudflare/vitest-plugin@​1.1.11

Patch Changes

Updated dependencies [71b6f10, ad23e6e, bac0c6a, be2437a, bac0c6a, 6f3d7b5]:

[email protected]

[email protected]

@​cloudflare/vitest-plugin@​1.1.10

Patch Changes

Updated dependencies [1be7b97, b149147, 7db596c, 76c0ce6, a83d7ac, a0856da, e35c4a1, d3565a5, a83d7ac, cb0955f, fa79b26, 16d1310, ca71205, 1015cfb, 982b806, ffabe74, 7db596c, e03822a, a83d7ac, 641df47, c4a6279]:

[email protected]

[email protected]

@​cloudflare/vitest-plugin@​1.1.9

Patch Changes

Updated dependencies [8997652]:

[email protected]

[email protected]

@​cloudflare/vitest-plugin@​1.1.8

Patch Changes

Updated dependencies [945aaa3, 945aaa3, 47d906f, c2699bf, 945aaa3, 945aaa3]:

[email protected]

[email protected]

Changelog

Sourced from @​cloudflare/vitest-plugin's changelog.

1.1.13

Patch Changes

Updated dependencies [1f070c8, a0485d5, 629ddef, c4c9b75, 643e5cc]:

[email protected]

[email protected]

1.1.12

Patch Changes

Updated dependencies [6874aa9, 2298cf1, d96b319, 876eea1, 2b39fc2]:

[email protected]

[email protected]

1.1.11

Patch Changes

Updated dependencies [71b6f10, ad23e6e, bac0c6a, be2437a, bac0c6a, 6f3d7b5]:

[email protected]

[email protected]

1.1.10

Patch Changes

Updated dependencies [1be7b97, b149147, 7db596c, 76c0ce6, a83d7ac, a0856da, e35c4a1, d3565a5, a83d7ac, cb0955f, fa79b26, 16d1310, ca71205, 1015cfb, 982b806, ffabe74, 7db596c, e03822a, a83d7ac, 641df47, c4a6279]:

[email protected]

[email protected]

1.1.9

Patch Changes

Updated dependencies [8997652]:

[email protected]

[email protected]

1.1.8

Patch Changes

Updated dependencies [945aaa3, 945aaa3, 47d906f, c2699bf, 945aaa3, 945aaa3]:

[email protected]

[email protected]

1.1.7

... (truncated)

Commits

f9e7727 Version Packages (#15697)

643e5cc [wrangler] Support Preview builds in Build Output (#15701)

5b69153 Version Packages (#15687)

f4229f1 Version Packages (#15657)

bbf2f79 Version Packages (#15634)

a256f95 Version Packages (#15607)

00ae21f Version Packages (#15599)

41d7366 Version Packages (#15568)

efc8c51 [vitest-plugin] Fix generated runtime type composition (#15465)

5705262 Version Packages (#15555)

See full diff in compare view

Updates @cloudflare/workers-types from 5.20260908.1 to 5.20260919.1

Commits

See full diff in compare view

Updates wrangler from 4.129.1 to 4.135.0

Release notes

Sourced from wrangler's releases.

[email protected]

Minor Changes

#15609 1f070c8 Thanks @​emily-shen! - Build Containers when emitting experimental Build Output

Wrangler and the Cloudflare Vite plugin now build Dockerfile-backed Container images when experimental Build Output is enabled. Container configs are emitted under .cloudflare/output/v0/containers with local image references, while existing registry references pass through unchanged.

#15329 c4c9b75 Thanks @​akshitsinha! - Evaluate Flagship flags locally during development

Flagship bindings now use the local Miniflare store by default in Wrangler and the Vite plugin, keeping development offline and isolated from production flags. Set remote: true on a binding to continue using its remote app.

Use wrangler flagship flags pull <APP_ID> to seed the store from a remote app. Flag management commands also accept --local to read and update the local store directly.

#15701 643e5cc Thanks @​WillTaylorDev! - Pass Preview intent to defineWorker and upload its resolved configuration

Preview builds now evaluate programmatic Worker configuration with ctx.isPreview set to true and record that intent in Build Output. The shared Preview uploader deploys the resolved bindings and settings while preserving configured Preview base values when it creates a Preview.

Patch Changes

#15705 a0485d5 Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

The following dependency versions have been updated:

Dependency

From

To

@​cloudflare/workers-types

^5.20260917.1

^5.20260918.1

workerd

1.20260917.1

1.20260918.1

#15587 629ddef Thanks @​Kuldeeep18! - Fix duration calculation for running workflow instances, steps, and attempts in wrangler workflows instances describe

wrangler workflows instances describe previously distorted the elapsed duration of in-progress instances, steps, and attempts across non-UTC timezones by stripping " GMT" from toUTCString(), causing new Date(...) to parse the timestamp in the local client timezone. The duration is now correctly computed against the current time.

Updated dependencies [a0485d5]:

[email protected]

[email protected]

Minor Changes

#15684 6874aa9 Thanks @​Ankcorn! - Add support for configuring real-time Issues with observability.issues.enabled

Wrangler now validates and uploads the Issues setting alongside the existing logs and traces observability options. The experimental configuration format supports the equivalent observability.issues.enabled option.

#15681 d96b319 Thanks @​podonnell-dev! - Mark wrangler preview commands as open beta

Wrangler now labels Preview commands as open beta in help output and command warnings, matching the feature's public availability.

#15673 2b39fc2 Thanks @​ghostwriternr! - Support explicit named Container image selection in Wrangler local development

Wrangler builds or pulls named images configured through Wrangler JSON or TOML and exposes their local tags through ctx.container.images. Pass one of those references to ctx.container.start({ image }) to select the image.

... (truncated)

Commits

f9e7727 Version Packages (#15697)

643e5cc [wrangler] Support Preview builds in Build Output (#15701)

1f070c8 Add dev/build support for Containers with experimental new config (#15609)

c4c9b75 [wrangler] Add local Flagship development commands (#15329)

629ddef [wrangler] Fix running duration calculation in workflows instances describe (...

5b69153 Version Packages (#15687)

6874aa9 [wrangler] Add Issues observability configuration (#15684)

2b39fc2 [wrangler] Support named Container images locally (#15673)

d96b319 WC-5903 [wrangler] previews: move to open beta (#15681)

edb2fe7 [deploy-helpers] join route lists before printing them in deploy messages (#1...

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • `@dependabot show

Labeled:

September 22, 2026 at 03:11AM

via GitHub https://ift.tt/wl4O9Mc

·github.com·
[Oneseco-Media/rsshub] Bump the cloudflare group with 3 updates
[Oneseco-Media/rsshub] Bump eslint-plugin-unicorn from 74.0.0 to 75.0.0
[Oneseco-Media/rsshub] Bump eslint-plugin-unicorn from 74.0.0 to 75.0.0

[Oneseco-Media/rsshub]

Bump eslint-plugin-unicorn from 74.0.0 to 75.0.0

By dependabot[bot]

Assigned to

Bumps eslint-plugin-unicorn from 74.0.0 to 75.0.0.

Release notes

Sourced from eslint-plugin-unicorn's releases.

v75.0.0

New rules

prefer-combined-guards (#3680) 5d9d745c

no-unused-iterator-helper (#3677) 82137379

no-unused-builtin-method-return (#3676) b3d56a35

prefer-iterator-zip (#3675) 60d3b53a

no-useless-set-construction (#3672) 639c9844

prefer-iterator-helpers (#3670) 4c805e26

prefer-json-import (#3668) 1df640dd

prefer-temporal-conversion (#3667) 74bc02e7

no-async-iterator-callback (#3666) bb6c2450

no-using-resource-escape (#3663) 34247853

prefer-uint8array-hex (#3661) 92551329

no-deprecated-css-features (#3651) e1161021

no-unscoped-css-nesting-selector (#3650) ebd03bdf

no-duplicate-css-selectors (#3646) 508d9f50

no-unknown-pseudo-selectors (#3644) 99492cd7

no-invalid-media-features (#3643) ef37c1f1

no-unknown-css-annotations (#3642) 19637ee8

no-nesting-with-mixed-specificity (#3640) b2f2bf9d

prefer-media-feature-range-syntax (#3639) 19f112f6

no-duplicate-font-family-names (#3638) c8f81bc8

no-redundant-nested-style-rules (#3637) 31603ad6

Improvements

Add TOML support (#3687) f61393aa

Improve performance 3cfa32ce

prefer-continue: Add checkShortBodies option (#3699) 274d5815

filename-case: Add directoryRoots option (#3647) d2d6cc3e

custom-error-definition: Allow flexible options placement (#3698) 2f8e2e5d

prefer-smaller-scope: Check initialized declarations (#3697) 960b3745

no-unsafe-string-replacement: Allow safe repeated strings (#3696) 742bdcee

no-array-fill-with-reference-type: Recognize function return types (#3695) 60f00ffa

prefer-continue: Support trailing conditionals (#3694) bf480f6f

no-immediate-mutation: Support conditionals (#3688) 73235b9a

prefer-set-methods: Extend supported methods (#3674) 3459a293

prefer-minimal-ternary: Check property reads with checkComputedMemberAccess (#3673) 37d76148

prefer-array-from-async: Recognize ordinary serial mapping loops (#3671) 65ad1bb5

prefer-uint8array-base64: Prefer native encoding options (#3665) 6ecc9121

prefer-group-by: Recognize accumulation loops (#3664) a8e7d0e2

no-negated-condition: Preserve comments in autofixes (#3662) 8f407a73

prefer-minimal-ternary: Support objects, arrays, and constructors (#3658) 40c860a1

prefer-ternary: Handle flat return statements (#3657) 2edc1587

no-useless-else: Prevent unsafe combined fixes (#3654) 7beaf7df

no-useless-length-check: Check for…of loops (#3652) fdf47c59

no-unknown-css-annotations: Fix identifier lookup across @eslint/css-tree versions 9b6f37bc

prefer-dom-node-replace-children: Combine consecutive mutations (#3648) 52dd1cec

... (truncated)

Commits

80939f9 75.0.0

274d581 prefer-continue: Add checkShortBodies option (#3699)

2f8e2e5 custom-error-definition: Allow flexible options placement (#3698)

960b374 prefer-smaller-scope: Check initialized declarations (#3697)

742bdce no-unsafe-string-replacement: Allow safe repeated strings (#3696)

60f00ff no-array-fill-with-reference-type: Recognize function return types (#3695)

bf480f6 prefer-continue: Support trailing conditionals (#3694)

73235b9 no-immediate-mutation: Support conditionals (#3688)

f61393a Add TOML support (#3687)

05fd60e prefer-single-call: Document argument-count limitation (#3686)

Additional commits viewable in compare view

[Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • `@dependabot show

Labeled:

September 21, 2026 at 03:20AM

via GitHub https://ift.tt/Nf5mJTv

·github.com·
[Oneseco-Media/rsshub] Bump eslint-plugin-unicorn from 74.0.0 to 75.0.0
[Oneseco-Media/rsshub] Bump imapflow from 2.0.2 to 2.0.5
[Oneseco-Media/rsshub] Bump imapflow from 2.0.2 to 2.0.5

[Oneseco-Media/rsshub]

Bump imapflow from 2.0.2 to 2.0.5

By dependabot[bot]

Assigned to

Bumps imapflow from 2.0.2 to 2.0.5.

Changelog

Sourced from imapflow's changelog.

2.0.5 (2026-09-15)

Bug Fixes

deps: update mailsplit to 5.4.17 (4eb90d8)

2.0.4 (2026-09-15)

Bug Fixes

deps: update libmime to 5.4.4 and encoding-japanese to 2.4.0 (ffa0f93)

2.0.3 (2026-09-14)

Bug Fixes

bound the chunked download loop by the reported message size (fc9b4eb)

stop chunked download when the server ignores the partial spec (#396) (e216fde)

Commits

de4e0ce Merge pull request #400 from postalsys/release-please--branches--master--comp...

1a75a5e chore(master): release 2.0.5 [skip-ci]

4eb90d8 fix(deps): update mailsplit to 5.4.17

ee1bf2d Merge pull request #399 from postalsys/release-please--branches--master--comp...

aa1e4c1 chore(master): release 2.0.4 [skip-ci]

ffa0f93 fix(deps): update libmime to 5.4.4 and encoding-japanese to 2.4.0

75cca5b chore(master): release 2.0.3 [skip-ci] (#397)

fc9b4eb fix: bound the chunked download loop by the reported message size

e216fde fix: stop chunked download when the server ignores the partial spec (#396)

See full diff in compare view

[Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • `@dependabot show

Labeled:

September 21, 2026 at 03:19AM

via GitHub https://ift.tt/L8jBWDO

·github.com·
[Oneseco-Media/rsshub] Bump imapflow from 2.0.2 to 2.0.5
[Oneseco-Media/rsshub] Bump rate-limiter-flexible from 11.2.0 to 11.2.1
[Oneseco-Media/rsshub] Bump rate-limiter-flexible from 11.2.0 to 11.2.1

[Oneseco-Media/rsshub]

Bump rate-limiter-flexible from 11.2.0 to 11.2.1

By dependabot[bot]

Assigned to

Bumps rate-limiter-flexible from 11.2.0 to 11.2.1.

Release notes

Sourced from rate-limiter-flexible's releases.

Extend types for RateLimiterValkey options

What's Changed

extend IRateLimiterValkeyOptions by rejectIfValkeyNotReady by @​streifehoernli in animir/node-rate-limiter-flexible#367

New Contributors

@​streifehoernli made their first contribution in animir/node-rate-limiter-flexible#367

Full Changelog: https://github.com/animir/node-rate-limiter-flexible/compare/v11.2.0...v11.2.1

:cat:

Commits

1bf9eb1 11.2.1

13f88b4 extend IRateLimiterValkeyOptions by rejectIfValkeyNotReady (#367)

97fd58a update context

See full diff in compare view

[Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • `@dependabot show

Labeled:

September 21, 2026 at 03:18AM

via GitHub https://ift.tt/sIdmAet

·github.com·
[Oneseco-Media/rsshub] Bump rate-limiter-flexible from 11.2.0 to 11.2.1
[Oneseco-Media/rsshub] Bump @types/node from 26.5.1 to 26.6.1
[Oneseco-Media/rsshub] Bump @types/node from 26.5.1 to 26.6.1

[Oneseco-Media/rsshub]

Bump @types/node from 26.5.1 to 26.6.1

By dependabot[bot]

Assigned to

Bumps @types/node from 26.5.1 to 26.6.1.

Commits

See full diff in compare view

[Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • `@dependabot show

Labeled:

September 21, 2026 at 03:18AM

via GitHub https://ift.tt/0xrPotC

·github.com·
[Oneseco-Media/rsshub] Bump @types/node from 26.5.1 to 26.6.1
[Oneseco-Media/rsshub] Bump jsdom from 30.0.1 to 30.1.0
[Oneseco-Media/rsshub] Bump jsdom from 30.0.1 to 30.1.0

[Oneseco-Media/rsshub]

Bump jsdom from 30.0.1 to 30.1.0

By dependabot[bot]

Assigned to

Bumps jsdom from 30.0.1 to 30.1.0.

Release notes

Sourced from jsdom's releases.

v30.1.0

jsdom is feeling the AGI!

This release is dedicated to @​scttcper, who unleashed @​codex upon jsdom and found tons of performance improvements. Along the way, he found and fixed many correctness issues as well.

We really appreciate his thoughtful PRs, which did a great job following the project's contribution guidelines, and were clearly human-curated, with their PR descriptions edited to be brief and respectful of the maintainers' time.

Thanks to @​scttcper, as well as all the other contributors of this release (most of whom were AI-assisted).

Added named access to elements on document, such as document.myForm for <form name="myForm">. (@​vojtisprime11)

Added QuotaExceededError, including its use for storage quota errors and oversized crypto.getRandomValues() requests.

Added support for the relaxed DOM naming rules when creating elements, attributes, and document types.

Improved performance of DOM construction, tree mutations, range operations, and live collection access, especially on large documents. (@​scttcper, @​erezrokah)

Improved performance of getComputedStyle(), style changes, and CSS serialization. (@​scttcper, @​jhult)

Improved performance of event dispatch, form control and label lookups, and updates to <select> elements and radio button groups. (@​scttcper)

Reduced memory use when creating and working with DOM nodes, attributes, event listeners, and mutation observers. (@​scttcper)

Changed window.close() to preserve access to the document and its DOM through retained references.

Fixed element.querySelectorAll() returning no matches when the first part of the selector matches the element itself, which regressed in v30.0.0. (@​asamuzaK)

Fixed case sensitivity in CSS attribute selectors, including selectors matching data-state="", title="", and other case-sensitive values. (@​asamuzaK)

Fixed document.querySelector() failing to find a matching element when an earlier element has the same ID but does not match the rest of the selector. (@​vojtisprime11)

Fixed :focus matching in shadow trees. (@​asamuzaK)

Fixed DOM insertion and replacement, including valid document.replaceChildren() calls, invalid document element and doctype placements, and mutations during element.replaceWith().

Fixed the ordering of script execution, custom element callbacks, iframe loading, and mutation observer notifications during DOM insertion, including in shadow trees.

Fixed queued events and navigation continuing after window.close() or iframe removal, and prevented new scripts, resource loads, timers, and animation frames from starting in destroyed documents. (@​scttcper)

Fixed parent documents waiting indefinitely for loading to finish when a child iframe removes itself during loading.

Fixed request cancellation across redirects, during pending requestInterceptor() callbacks, and when reusing an XMLHttpRequest after aborting it.

Fixed resource loading and JSDOM.fromURL() potentially hanging when response handling throws and response stream cleanup does not finish.

Fixed successful cached resource loads being treated as aborted.

Fixed getComputedStyle() and document.styleSheets using the wrong stylesheet order after inserting or updating <style> elements.

Fixed getComputedStyle() ignoring nested @import and @media rules in imported stylesheets, and returning stale results after imports finish loading.

Fixed style invalidation, stylesheet removal, and frame source updates in shadow trees.

Fixed repeated getComputedStyle() calls changing case-sensitive background URLs, and inconsistent resolution of border shorthands containing system colors. (@​scttcper)

Fixed computed border widths, including borderless elements incorrectly reporting 16px, which regressed in v30.0.0. (@​Alberto-BaseNet)

Fixed getComputedStyle() to resolve 'font-weight' keywords to numeric values. (@​tianrking)

Fixed getComputedStyle() to convert lengths to pixels inside CSS math functions containing percentages, and to resolve percentages in 'font-size' math functions. (@​soroushm)

Fixed serialization of min() and max() containing nested calc(), which regressed in v30.0.0. (@​asamuzaK)

Fixed CSS values mixing lengths or percentages with math functions, such as 'grid-template-columns' values containing both 100px and calc(). (@​rome-xi)

Fixed parsing of 'background' and 'border' shorthands with adjacent components, such as url(a.png)no-repeat, including a crash when parsing inline styles. Also fixed handling of invalid shorthand assignments and escaped or unusual characters in CSS declarations. (@​asamuzaK)

Fixed parsing of unitless zero values in 'flex' shorthands, such as 35 1 0, and rejection of negative 'flex-basis' lengths and percentages. (@​asamuzaK)

Fixed shorthand style assignments producing extra mutation records and custom element callbacks for intermediate values. (@​scttcper)

Fixed Range and Selection handling of CDATA sections, including boundary offsets and range cloning, extraction, deletion, insertion, and stringification. (@​scttcper)

Fixed text.normalize() incorrectly removing the text node or merging its siblings. (@​scttcper)

Fixed cloning and importing CDATA sections and processing instructions whose contents have been modified, and serialization of CDATA sections adopted into HTML documents.

Fixed stale named-property collections on window, and incorrect named access from empty or namespaced id="" and name="" values. (@​scttcper)

Fixed elements in documents created with DOMParser or document.implementation.createHTMLDocument() appearing as named properties on window and being retained in memory. (@​Iaotle)

Fixed memory leaks from mutation observers retaining observed nodes, abort signals retaining removed event listeners, and storage event tracking retaining closed windows. (@​scttcper)

Fixed storage events being sent to windows created after the storage change, and ensured surviving recipients still receive events when the source document is destroyed.

Fixed attribute lookups after namespace prefix changes, and namespaced attributes incorrectly affecting ID lookups and element behavior. (@​scttcper)

Fixed input.list in detached element trees. (@​scttcper)

Fixed attr.ownerDocument after setting an attribute node on an element in another document or adopting its element. (@​Kjubikstronk)

... (truncated)

Commits

556b11f 30.1.0

9547fbf Tie queued tasks to document lifetime

3be65d9 Disable unused HTML reports in the WPT runner

d555e61 Replace SymbolTree with a DOM-specific tree

f28983d Clone CDATA and processing instructions without revalidation

33e4fa7 Invalidate computed styles after CSS imports load

ec6fd5b Select storage event recipients at mutation time

bcc037a Honor script type and legacy event attributes

faa5c4f Preserve currentScript across nested scripts

8d7a37f Avoid quadratic HTML collection iteration

Additional commits viewable in compare view

[Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • `@dependabot show

Labeled:

September 21, 2026 at 03:17AM

via GitHub https://ift.tt/0nQ5xCh

·github.com·
[Oneseco-Media/rsshub] Bump jsdom from 30.0.1 to 30.1.0
[Oneseco-Media/rsshub] Bump rolldown from 1.2.8 to 1.2.9
[Oneseco-Media/rsshub] Bump rolldown from 1.2.8 to 1.2.9

[Oneseco-Media/rsshub]

Bump rolldown from 1.2.8 to 1.2.9

By dependabot[bot]

Assigned to

Bumps rolldown from 1.2.8 to 1.2.9.

Release notes

Sourced from rolldown's releases.

v1.2.9

[1.2.9] - 2026-09-16

🚀 Features

add MODULE_LEVEL_DIRECTIVE warning (#10791) by @​sapphi-red

🐛 Bug Fixes

handle CommonJS exports through top-level this (#10872) by @​IWANABETHATGUY

scripts: make setup-vite CLI invocation work on Windows (#10885) by @​shulaoda

remove deleted property from output bundle proxy target (#10815) by @​Vladexy88x

treat module-scope await using as top-level await (#10739) by @​MarshallOfSound

watch: preserve plugin attribution in warnings (#10473) by @​Nic-Polumeyv

test-dev-server: link the workspace rolldown before building vite (#10857) by @​h-a-n-a

minify: preserve annotation comments when minified (#10854) (#10855) by @​justonemorenight

⚡ Performance

dev/lazy: fetch a lazy route in one request (#10789) by @​h-a-n-a

plugin: reduce binding binary size (#10776) by @​Boshen

vite-reporter: reuse emitted sourcemap sizes (#10841) by @​hyfdev

🧪 Testing

dev: full-bundle-mode regression test for cyclic import binding (#9946) (#9947) by @​ShMcK

cover asset option callback timings (#10870) by @​IWANABETHATGUY

⚙️ Miscellaneous Tasks

wait for npm bindings before publishing rolldown (#10866) by @​shulaoda

deps: update dependency @​napi-rs/cli to v3.10.1 (#10889) by @​renovate[bot]

deps: update napi (#10888) by @​renovate[bot]

compress debug info archives with zstd (#10778) by @​IWANABETHATGUY

publish split debug info for release bindings (#10777) by @​IWANABETHATGUY

rolldown_utils: simplify MIME guessing and remove UTF-8 check bypass (#10884) by @​shulaoda

add npm bugs metadata for rolldown (#9694) by @​kingshuaishuai

deps: upgrade oxc to 0.150.0 (#10877) by @​camc314

deps: update rust crates (#10869) by @​renovate[bot]

deps: update dependency vite-plus to v0.3.2 (#10878) by @​renovate[bot]

deps: update rollup submodule for tests to v4.63.3 (#10880) by @​rolldown-guard[bot]

deps: update test262 submodule for tests (#10881) by @​rolldown-guard[bot]

deps: update github actions (#10867) by @​renovate[bot]

deps: update npm packages (#10868) by @​renovate[bot]

deps: update napi to v3.12.4 (#10862) by @​renovate[bot]

deps: update napi (#10861) by @​renovate[bot]

❤️ New Contributors

@​Vladexy88x made their first contribution in #10815

... (truncated)

Changelog

Sourced from rolldown's changelog.

[1.2.9] - 2026-09-16

🚀 Features

add MODULE_LEVEL_DIRECTIVE warning (#10791) by @​sapphi-red

🐛 Bug Fixes

handle CommonJS exports through top-level this (#10872) by @​IWANABETHATGUY

scripts: make setup-vite CLI invocation work on Windows (#10885) by @​shulaoda

remove deleted property from output bundle proxy target (#10815) by @​Vladexy88x

treat module-scope await using as top-level await (#10739) by @​MarshallOfSound

watch: preserve plugin attribution in warnings (#10473) by @​Nic-Polumeyv

test-dev-server: link the workspace rolldown before building vite (#10857) by @​h-a-n-a

minify: preserve annotation comments when minified (#10854) (#10855) by @​justonemorenight

⚡ Performance

dev/lazy: fetch a lazy route in one request (#10789) by @​h-a-n-a

plugin: reduce binding binary size (#10776) by @​Boshen

vite-reporter: reuse emitted sourcemap sizes (#10841) by @​hyfdev

🧪 Testing

dev: full-bundle-mode regression test for cyclic import binding (#9946) (#9947) by @​ShMcK

cover asset option callback timings (#10870) by @​IWANABETHATGUY

⚙️ Miscellaneous Tasks

wait for npm bindings before publishing rolldown (#10866) by @​shulaoda

deps: update dependency @​napi-rs/cli to v3.10.1 (#10889) by @​renovate[bot]

deps: update napi (#10888) by @​renovate[bot]

compress debug info archives with zstd (#10778) by @​IWANABETHATGUY

publish split debug info for release bindings (#10777) by @​IWANABETHATGUY

rolldown_utils: simplify MIME guessing and remove UTF-8 check bypass (#10884) by @​shulaoda

add npm bugs metadata for rolldown (#9694) by @​kingshuaishuai

deps: upgrade oxc to 0.150.0 (#10877) by @​camc314

deps: update rust crates (#10869) by @​renovate[bot]

deps: update dependency vite-plus to v0.3.2 (#10878) by @​renovate[bot]

deps: update rollup submodule for tests to v4.63.3 (#10880) by @​rolldown-guard[bot]

deps: update test262 submodule for tests (#10881) by @​rolldown-guard[bot]

deps: update github actions (#10867) by @​renovate[bot]

deps: update npm packages (#10868) by @​renovate[bot]

deps: update napi to v3.12.4 (#10862) by @​renovate[bot]

deps: update napi (#10861) by @​renovate[bot]

❤️ New Contributors

@​Vladexy88x made their first contribution in #10815

@​MarshallOfSound made their first contribution in #10739

... (truncated)

Commits

5b4746e release: v1.2.9 (#10895)

c1dc973 ci: wait for npm bindings before publishing rolldown (#10866)

4ce09b9 chore(deps): update dependency @​napi-rs/cli to v3.10.1 (#10889)

3a1bd9d chore(deps): update napi (#10888)

a34b6f5 ci: publish split debug info for release bindings (#10777)

802b4aa fix: remove deleted property from output bundle proxy target (#10815)

2a5d72c fix(watch): preserve plugin attribution in warnings (#10473)

d8915ba chore: add npm bugs metadata for rolldown (#9694)

5db55b9 chore(deps): upgrade oxc to 0.150.0 (#10877)

f9c98e4 test: cover asset option callback timings (#10870)

Additional commits viewable in compare view

[Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • `@dependabot show

Labeled:

September 21, 2026 at 03:17AM

via GitHub https://ift.tt/EGM5yBX

·github.com·
[Oneseco-Media/rsshub] Bump rolldown from 1.2.8 to 1.2.9
[Oneseco-Media/rsshub] Bump @sentry/node from 10.74.0 to 10.75.0
[Oneseco-Media/rsshub] Bump @sentry/node from 10.74.0 to 10.75.0

[Oneseco-Media/rsshub]

Bump @sentry/node from 10.74.0 to 10.75.0

By dependabot[bot]

Assigned to

Bumps @sentry/node from 10.74.0 to 10.75.0.

Release notes

Sourced from @​sentry/node's releases.

10.75.0

Important Changes

feat(v10/effect): Capture errors through the Effect v4 ErrorReporter API (#24445)

On Effect v4, Sentry.effectLayer now registers a Sentry ErrorReporter. Failures that pass through Effect.withErrorReporting, ErrorReporter.report or the built-in HTTP and RPC reporting boundaries are captured automatically, with ErrorReporter.ignore, ErrorReporter.severity and ErrorReporter.attributes annotations respected. Nothing changes on Effect v3.

Other Changes

feat(v10/core): Accept a CollectBehavior shorthand for dataCollection.httpHeaders (#24339)

fix(v10/browser): Release the XHR virtualError once the request completed (#24307)

fix(v10/browser-utils): Skip nullish LCP entries in vendored web-vitals (#24349)

fix(v10/bundler-plugins): Stamp debug IDs onto emitted source maps when disable-upload is set (#24332)

fix(v10/core): Don't instrument the SDK's own envelope requests (#24276)

fix(v10/nextjs): Only include emitted chunk directories in Turbopack sourcemap upload (#24295)

fix(v10/nitro): Import from nitro/h3 instead of h3 directly (#24444)

fix(v10/node-core): Don't recurse in logAndExitProcess on a broken stdio pipe (#24353)

fix(v10/nuxt): Detect Nitro version via the app's Nuxt dependency chain (#24025)

fix(v10/replay): Don't rewrite already-emitted nodes when syncing mirror attributes (#23588)

Bundle size 📦

Path

Size

@​sentry/browser

27.18 KB

@​sentry/browser - with treeshaking flags

25.66 KB

@​sentry/browser (incl. Tracing)

45.6 KB

@​sentry/browser (incl. Tracing + Span Streaming)

47.34 KB

@​sentry/browser (incl. Tracing, Profiling)

50.24 KB

@​sentry/browser (incl. Tracing, Replay)

83.99 KB

@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags

73.84 KB

@​sentry/browser (incl. Tracing, Replay with Canvas)

88.6 KB

@​sentry/browser (incl. Tracing, Replay, Feedback)

100.94 KB

@​sentry/browser (incl. Feedback)

43.94 KB

@​sentry/browser (incl. sendFeedback)

31.87 KB

@​sentry/browser (incl. FeedbackAsync)

36.88 KB

@​sentry/browser (incl. Metrics)

28.25 KB

@​sentry/browser (incl. Logs)

28.47 KB

@​sentry/browser (incl. Metrics & Logs)

29.15 KB

@​sentry/react

28.93 KB

@​sentry/react (incl. Tracing)

47.81 KB

@​sentry/vue

32.47 KB

@​sentry/vue (incl. Tracing)

47.55 KB

@​sentry/svelte

27.21 KB

CDN Bundle

29.53 KB

CDN Bundle (incl. Tracing)

47.52 KB

CDN Bundle (incl. Logs, Metrics)

31.07 KB

CDN Bundle (incl. Tracing, Logs, Metrics)

48.81 KB

CDN Bundle (incl. Replay, Logs, Metrics)

69.49 KB

CDN Bundle (incl. Tracing, Replay)

84.22 KB

... (truncated)

Changelog

Sourced from @​sentry/node's changelog.

10.75.0

Important Changes

feat(v10/effect): Capture errors through the Effect v4 ErrorReporter API (#24445)

On Effect v4, Sentry.effectLayer now registers a Sentry ErrorReporter. Failures that pass through Effect.withErrorReporting, ErrorReporter.report or the built-in HTTP and RPC reporting boundaries are captured automatically, with ErrorReporter.ignore, ErrorReporter.severity and ErrorReporter.attributes annotations respected. Nothing changes on Effect v3.

Other Changes

feat(v10/core): Accept a CollectBehavior shorthand for dataCollection.httpHeaders (#24339)

fix(v10/browser): Release the XHR virtualError once the request completed (#24307)

fix(v10/browser-utils): Skip nullish LCP entries in vendored web-vitals (#24349)

fix(v10/bundler-plugins): Stamp debug IDs onto emitted source maps when disable-upload is set (#24332)

fix(v10/core): Don't instrument the SDK's own envelope requests (#24276)

fix(v10/nextjs): Only include emitted chunk directories in Turbopack sourcemap upload (#24295)

fix(v10/nitro): Import from nitro/h3 instead of h3 directly (#24444)

fix(v10/node-core): Don't recurse in logAndExitProcess on a broken stdio pipe (#24353)

fix(v10/nuxt): Detect Nitro version via the app's Nuxt dependency chain (#24025)

fix(v10/replay): Don't rewrite already-emitted nodes when syncing mirror attributes (#23588)

Commits

9ffb58c release: 10.75.0

664c906 meta(changelog): Update changelog for 10.75.0 (#24446)

e3e7acc fix(v10/nitro): Import from nitro/h3 instead of h3 directly (#24444)

4bb51d1 feat(v10/effect): Capture errors through the Effect v4 ErrorReporter API (#24...

738f17e fix(v10/core): Don't instrument the SDK's own envelope requests (#24276)

f63c56a fix(v10/node-core): Don't recurse in logAndExitProcess on a broken stdio pipe...

0e24355 fix(v10/browser-utils): Skip nullish LCP entries in vendored web-vitals (#24349)

ac3ea13 fix(v10/nuxt): Detect Nitro version via the app's Nuxt dependency chain (#24025)

9235d43 fix(v10/nextjs): Only include emitted chunk directories in Turbopack sourcema...

e2deda0 feat(v10/core): Accept CollectBehavior shorthand for `dataCollection.httpHe...

Additional commits viewable in compare view

[Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • `@dependabot show

Labeled:

September 21, 2026 at 03:16AM

via GitHub https://ift.tt/1gwNcsh

·github.com·
[Oneseco-Media/rsshub] Bump @sentry/node from 10.74.0 to 10.75.0
[Oneseco-Media/rsshub] Bump dotenv from 17.4.2 to 18.0.0
[Oneseco-Media/rsshub] Bump dotenv from 17.4.2 to 18.0.0

[Oneseco-Media/rsshub]

Bump dotenv from 17.4.2 to 18.0.0

By dependabot[bot]

Assigned to

Bumps dotenv from 17.4.2 to 18.0.0.

Changelog

Sourced from dotenv's changelog.

18.0.0 (2026-09-17)

Added

NEW: Dotenv now has a CLI. (#1022)

$ dotenv run -- node index.js ◇ injected env (2) from .env Hello Dotenv

NEW: Dotenv now has a fast parser thanks to @​homanp of superagent.sh. Pass config({ fast: true }), flag --fast, or set DOTENV_FAST=true to opt-in to ~2x faster character-scanner parser. (#1010)

$ dotenv run --fast -- node index.js ◇ injected env (2) from .env Hello Dotenv

Changed

Injecting message sent to stderr rather than stdout and tips removed (#1037)

Removed

Remove tips (#1031)

Remove skill files (#1032)

Remove Spanish README (#1034)

Remove .env.vault support (#1033)

Remove preloading. Instead use cli dotenv run -- your-command (#1035)

Commits

2815fa8 18.0.0

451c6cb add spacing

7c7ed02 update README and changelog

7454f56 Merge pull request #1052 from motdotla/cli-cleanup

f5de622 .cmd coverage

75289b1 changelog

33bd964 spawn for windows

2b4cc00 update changelog

de91a69 cli cleanup

fa8788e Merge pull request #1049 from webdevelopersrinu/fix-populate-null

Additional commits viewable in compare view

[Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • `@dependabot show

Labeled:

September 21, 2026 at 03:15AM

via GitHub https://ift.tt/PDMIBFO

·github.com·
[Oneseco-Media/rsshub] Bump dotenv from 17.4.2 to 18.0.0
[Cybersoulja/Agentic-Telegram-TMA] chore(env): add secrets store id keychain template
[Cybersoulja/Agentic-Telegram-TMA] chore(env): add secrets store id keychain template

[Cybersoulja/Agentic-Telegram-TMA]

chore(env): add secrets store id keychain template

By Cybersoulja

Assigned to

Adds a root .env.template that references the Cloudflare Secrets Store ID via the macOS Keychain (keychain-env) instead of committing the value. It is a new file only: CLOUDFLARE_SECRETS_STORE_ID=KEYCHAIN:CLOUDFLARE_SECRETS_STORE_ID. There are no source, wrangler, or build changes, so the trillastrob Worker is unaffected. The real value is stored locally with keychain-env set CLOUDFLARE_SECRETS_STORE_ID.

Labeled:

September 21, 2026 at 01:55AM

via GitHub https://ift.tt/FROoW5j

·github.com·
[Cybersoulja/Agentic-Telegram-TMA] chore(env): add secrets store id keychain template
Personal Access Tokens (Classic)
Personal Access Tokens (Classic)
GitHub is where people build software. More than 150 million people use GitHub to discover, fork, and contribute to over 420 million projects.
·github.com·
Personal Access Tokens (Classic)