ebf75e4d3198e3b2ebb4134275a80b06981f34b4
37
Commits
| Author | SHA1 | Message | Date | |
|---|---|---|---|---|
 renovate[bot]
|
ebf75e4d31 |
chore: bump up apollographql/apollo-ios version to v1.23.0 (#13623)
Coming soon: The Renovate bot (GitHub App) will be renamed to Mend. PRs from Renovate will soon appear from 'Mend'. Learn more [here](https://redirect.github.com/renovatebot/renovate/discussions/37842). This PR contains the following updates: | Package | Update | Change | |---|---|---| | [apollographql/apollo-ios](https://redirect.github.com/apollographql/apollo-ios) | minor | `from: "1.22.0"` -> `from: "1.23.0"` | | [apollographql/apollo-ios](https://redirect.github.com/apollographql/apollo-ios) | minor | `1.22.0` -> `1.23.0` | --- ### Release Notes <details> <summary>apollographql/apollo-ios (apollographql/apollo-ios)</summary> ### [`v1.23.0`](https://redirect.github.com/apollographql/apollo-ios/blob/HEAD/CHANGELOG.md#v1230) [Compare Source](https://redirect.github.com/apollographql/apollo-ios/compare/1.22.0...1.23.0) ##### New - **Added `requireNonOptionalMockFields` flag to `ApolloCodegenConfiguration.OutputOptions`. ([#​669](https://redirect.github.com/apollographql/apollo-ios-dev/pull/669)):** Added new flag to codegen output options to allow having non-optional fields in the test mocks if desired. *Thank you to [@​dwroth](https://redirect.github.com/dwroth) for the contribution.* ##### Improvement - **Added public initializer to `DatabaseRow`. ([#​664](https://redirect.github.com/apollographql/apollo-ios-dev/pull/664)):** Not having a public initializer on `DatabasRow` was hindering the ability to create custom `SQLiteDatabase` implementations. This solves that by adding a public initializer to `DatabaseRow`.*Thank you to [@​ChrisLaganiere](https://redirect.github.com/ChrisLaganiere) for the contribution.* ##### Fixed - **Unncessary deprecation warning in codegen options initializer. ([#​3563](https://redirect.github.com/apollographql/apollo-ios/issues/3563)):** Added `@_disfavoredOverload` to the deprecated initialized in `ApolloCodegenConfiguration` to prevent possible warnings caused by the compiler selecting a deprecated initializer versus the new/current initializer. See PR [#​682](https://redirect.github.com/apollographql/apollo-ios-dev/pull/682). *Thank you to [@​CraigSiemens](https://redirect.github.com/CraigSiemens) for raising the issue.* </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/toeverything/AFFiNE). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS45Ny4xMCIsInVwZGF0ZWRJblZlciI6IjQxLjk3LjEwIiwidGFyZ2V0QnJhbmNoIjoiY2FuYXJ5IiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
21bb8142b0 |
chore: bump up Recouse/EventSource version to from: "0.1.5" (#13620)
Coming soon: The Renovate bot (GitHub App) will be renamed to Mend. PRs from Renovate will soon appear from 'Mend'. Learn more [here](https://redirect.github.com/renovatebot/renovate/discussions/37842). This PR contains the following updates: | Package | Update | Change | |---|---|---| | [Recouse/EventSource](https://redirect.github.com/Recouse/EventSource) | patch | `from: "0.1.4"` -> `from: "0.1.5"` | --- ### Release Notes <details> <summary>Recouse/EventSource (Recouse/EventSource)</summary> ### [`v0.1.5`](https://redirect.github.com/Recouse/EventSource/releases/tag/0.1.5) [Compare Source](https://redirect.github.com/Recouse/EventSource/compare/0.1.4...0.1.5) #### What's Changed - Fix potential data corruption by [@​Recouse](https://redirect.github.com/Recouse) in [#​30](https://redirect.github.com/Recouse/EventSource/pull/30) - Concurrency improvements by [@​Recouse](https://redirect.github.com/Recouse) in [#​31](https://redirect.github.com/Recouse/EventSource/pull/31) - Update EventParser.swift to Support CR LF by [@​Lakr233](https://redirect.github.com/Lakr233) in [#​28](https://redirect.github.com/Recouse/EventSource/pull/28) #### New Contributors - [@​Lakr233](https://redirect.github.com/Lakr233) made their first contribution in [#​28](https://redirect.github.com/Recouse/EventSource/pull/28) **Full Changelog**: <https://github.com/Recouse/EventSource/compare/0.1.4...0.1.5> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/toeverything/AFFiNE). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS45Ny4xMCIsInVwZGF0ZWRJblZlciI6IjQxLjk3LjEwIiwidGFyZ2V0QnJhbmNoIjoiY2FuYXJ5IiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
d231b47f1f |
chore: bump up nestjs (#13614)
Coming soon: The Renovate bot (GitHub App) will be renamed to Mend. PRs from Renovate will soon appear from 'Mend'. Learn more [here](https://redirect.github.com/renovatebot/renovate/discussions/37842). This PR contains the following updates: | Package | Change | Age | Confidence | |---|---|---|---| | [@nestjs/bullmq](https://redirect.github.com/nestjs/bull) | [`11.0.2` -> `11.0.3`](https://renovatebot.com/diffs/npm/@nestjs%2fbullmq/11.0.2/11.0.3) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [@nestjs/common](https://nestjs.com) ([source](https://redirect.github.com/nestjs/nest/tree/HEAD/packages/common)) | [`11.1.5` -> `11.1.6`](https://renovatebot.com/diffs/npm/@nestjs%2fcommon/11.1.5/11.1.6) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [@nestjs/core](https://nestjs.com) ([source](https://redirect.github.com/nestjs/nest/tree/HEAD/packages/core)) | [`11.1.5` -> `11.1.6`](https://renovatebot.com/diffs/npm/@nestjs%2fcore/11.1.5/11.1.6) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [@nestjs/platform-express](https://nestjs.com) ([source](https://redirect.github.com/nestjs/nest/tree/HEAD/packages/platform-express)) | [`11.1.5` -> `11.1.6`](https://renovatebot.com/diffs/npm/@nestjs%2fplatform-express/11.1.5/11.1.6) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [@nestjs/platform-socket.io](https://nestjs.com) ([source](https://redirect.github.com/nestjs/nest/tree/HEAD/packages/platform-socket.io)) | [`11.1.5` -> `11.1.6`](https://renovatebot.com/diffs/npm/@nestjs%2fplatform-socket.io/11.1.5/11.1.6) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [@nestjs/schedule](https://redirect.github.com/nestjs/schedule) | [`6.0.0` -> `6.0.1`](https://renovatebot.com/diffs/npm/@nestjs%2fschedule/6.0.0/6.0.1) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [@nestjs/websockets](https://redirect.github.com/nestjs/nest) ([source](https://redirect.github.com/nestjs/nest/tree/HEAD/packages/websockets)) | [`11.1.5` -> `11.1.6`](https://renovatebot.com/diffs/npm/@nestjs%2fwebsockets/11.1.5/11.1.6) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>nestjs/bull (@​nestjs/bullmq)</summary> ### [`v11.0.3`](https://redirect.github.com/nestjs/bull/releases/tag/%40nestjs/bullmq%4011.0.3) [Compare Source](https://redirect.github.com/nestjs/bull/compare/@nestjs/bullmq@11.0.2...@nestjs/bullmq@11.0.3) #### What's Changed - feat(bullmq): add telemetry support for workers by [@​noeljackson](https://redirect.github.com/noeljackson) in [#​2585](https://redirect.github.com/nestjs/bull/pull/2585) #### New Contributors - [@​noeljackson](https://redirect.github.com/noeljackson) made their first contribution in [#​2585](https://redirect.github.com/nestjs/bull/pull/2585) **Full Changelog**: <https://github.com/nestjs/bull/compare/@nestjs/bull-shared@11.0.0...@​nestjs/bullmq@11.0.3> </details> <details> <summary>nestjs/nest (@​nestjs/common)</summary> ### [`v11.1.6`](https://redirect.github.com/nestjs/nest/releases/tag/v11.1.6) [Compare Source](https://redirect.github.com/nestjs/nest/compare/v11.1.5...v11.1.6) ##### v11.1.6 (2025-08-07) ##### Bug fixes - `core` - [#​15504](https://redirect.github.com/nestjs/nest/pull/15504) fix(core): fix race condition in class dependency resolution from imported modules ([@​hajekjiri](https://redirect.github.com/hajekjiri)) - [#​15469](https://redirect.github.com/nestjs/nest/pull/15469) fix(core): attach root inquirer for nested transient providers ([@​kamilmysliwiec](https://redirect.github.com/kamilmysliwiec)) - `microservices` - [#​15508](https://redirect.github.com/nestjs/nest/pull/15508) fix(microservices): report correct buffer length in exception ([@​kim-sung-jee](https://redirect.github.com/kim-sung-jee)) - [#​15492](https://redirect.github.com/nestjs/nest/pull/15492) fix(microservices): fix kafka serilization of class instances ([@​LeonBiersch](https://redirect.github.com/LeonBiersch)) ##### Dependencies - `platform-fastify` - [#​15493](https://redirect.github.com/nestjs/nest/pull/15493) chore(deps): bump [@​fastify/cors](https://redirect.github.com/fastify/cors) from 11.0.1 to 11.1.0 ([@​dependabot\[bot\]](https://redirect.github.com/apps/dependabot)) ##### Committers: 6 - Jiri Hajek ([@​hajekjiri](https://redirect.github.com/hajekjiri)) - Kamil Mysliwiec ([@​kamilmysliwiec](https://redirect.github.com/kamilmysliwiec)) - Leon Biersch ([@​LeonBiersch](https://redirect.github.com/LeonBiersch)) - Seongjee Kim ([@​kim-sung-jee](https://redirect.github.com/kim-sung-jee)) - [@​premierbell](https://redirect.github.com/premierbell) - pTr ([@​ptrgits](https://redirect.github.com/ptrgits)) </details> <details> <summary>nestjs/schedule (@​nestjs/schedule)</summary> ### [`v6.0.1`](https://redirect.github.com/nestjs/schedule/releases/tag/6.0.1) [Compare Source](https://redirect.github.com/nestjs/schedule/compare/6.0.0...6.0.1) #### What's Changed - Add threshold to CronOptions by [@​arjunatlightspeed](https://redirect.github.com/arjunatlightspeed) in [#​2085](https://redirect.github.com/nestjs/schedule/pull/2085) - refactor : clear jobs before application shutdown by [@​spotlight21c](https://redirect.github.com/spotlight21c) in [#​2053](https://redirect.github.com/nestjs/schedule/pull/2053) - fix(deps): update dependency cron to v4.3.3 by [@​renovate](https://redirect.github.com/renovate)\[bot] in [#​2001](https://redirect.github.com/nestjs/schedule/pull/2001) #### New Contributors - [@​arjunatlightspeed](https://redirect.github.com/arjunatlightspeed) made their first contribution in [#​2085](https://redirect.github.com/nestjs/schedule/pull/2085) - [@​spotlight21c](https://redirect.github.com/spotlight21c) made their first contribution in [#​2053](https://redirect.github.com/nestjs/schedule/pull/2053) **Full Changelog**: <https://github.com/nestjs/schedule/compare/6.0.0...6.0.1> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/toeverything/AFFiNE). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS45Ny4xMCIsInVwZGF0ZWRJblZlciI6IjQxLjk3LjEwIiwidGFyZ2V0QnJhbmNoIjoiY2FuYXJ5IiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
19bd29e90c |
chore: bump up apple/swift-collections version to from: "1.2.1" (#13535)
Coming soon: The Renovate bot (GitHub App) will be renamed to Mend. PRs from Renovate will soon appear from 'Mend'. Learn more [here](https://redirect.github.com/renovatebot/renovate/discussions/37842). This PR contains the following updates: | Package | Update | Change | |---|---|---| | [apple/swift-collections](https://redirect.github.com/apple/swift-collections) | patch | `from: "1.2.0"` -> `from: "1.2.1"` | --- ### Release Notes <details> <summary>apple/swift-collections (apple/swift-collections)</summary> ### [`v1.2.1`](https://redirect.github.com/apple/swift-collections/releases/tag/1.2.1): Swift Collections 1.2.1 [Compare Source](https://redirect.github.com/apple/swift-collections/compare/1.2.0...1.2.1) This is a patch release with the following minor improvements: - `BigString` sometimes miscounted distances in its character view, resulting in an invalid collection conformance. This is now fixed. ([#​485](https://redirect.github.com/apple/swift-collections/issues/485)) - `BigString`'s Unicode Scalar and character views now make better use of known lengths of the text chunks stored in the tree, resulting in significantly improved performance for their distance measurements. ([#​486](https://redirect.github.com/apple/swift-collections/issues/486)) - The Foundation-specific toolchain configuration was updated to include the Deque type. ([#​496](https://redirect.github.com/apple/swift-collections/issues/496)) #### What's Changed - \[BigString] Fix character indexing operations by [@​lorentey](https://redirect.github.com/lorentey) in [#​485](https://redirect.github.com/apple/swift-collections/pull/485) - \[BigString] Harvest some low-hanging performance fruit by [@​lorentey](https://redirect.github.com/lorentey) in [#​486](https://redirect.github.com/apple/swift-collections/pull/486) - Include DequeModule in the Foundation toolchain build by [@​cthielen](https://redirect.github.com/cthielen) in [#​496](https://redirect.github.com/apple/swift-collections/pull/496) **Full Changelog**: <https://github.com/apple/swift-collections/compare/1.2.0...1.2.1> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/toeverything/AFFiNE). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS44Mi43IiwidXBkYXRlZEluVmVyIjoiNDEuOTcuMTAiLCJ0YXJnZXRCcmFuY2giOiJjYW5hcnkiLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIl19--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
039976ee6d |
chore: bump up vite version to v6.3.6 [SECURITY] (#13573)
This PR contains the following updates: | Package | Change | Age | Confidence | |---|---|---|---| | [vite](https://vite.dev) ([source](https://redirect.github.com/vitejs/vite/tree/HEAD/packages/vite)) | [`6.3.5` -> `6.3.6`](https://renovatebot.com/diffs/npm/vite/6.3.5/6.3.6) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | ### GitHub Vulnerability Alerts #### [CVE-2025-58751](https://redirect.github.com/vitejs/vite/security/advisories/GHSA-g4jq-h2w9-997c) ### Summary Files starting with the same name with the public directory were served bypassing the `server.fs` settings. ### Impact Only apps that match the following conditions are affected: - explicitly exposes the Vite dev server to the network (using --host or [`server.host` config option](https://vitejs.dev/config/server-options.html#server-host)) - uses [the public directory feature](https://vite.dev/guide/assets.html#the-public-directory) (enabled by default) - a symlink exists in the public directory ### Details The [servePublicMiddleware](https://redirect.github.com/vitejs/vite/blob/9719497adec4ad5ead21cafa19a324bb1d480194/packages/vite/src/node/server/middlewares/static.ts#L79) function is in charge of serving public files from the server. It returns the [viteServePublicMiddleware](https://redirect.github.com/vitejs/vite/blob/9719497adec4ad5ead21cafa19a324bb1d480194/packages/vite/src/node/server/middlewares/static.ts#L106) function which runs the needed tests and serves the page. The viteServePublicMiddleware function [checks if the publicFiles variable is defined](https://redirect.github.com/vitejs/vite/blob/9719497adec4ad5ead21cafa19a324bb1d480194/packages/vite/src/node/server/middlewares/static.ts#L111), and then uses it to determine if the requested page is public. In the case that the publicFiles is undefined, the code will treat the requested page as a public page, and go on with the serving function. [publicFiles may be undefined if there is a symbolic link anywhere inside the public directory](https://redirect.github.com/vitejs/vite/blob/9719497adec4ad5ead21cafa19a324bb1d480194/packages/vite/src/node/publicDir.ts#L21). In that case, every requested page will be passed to the public serving function. The serving function is based on the [sirv](https://redirect.github.com/lukeed/sirv) library. Vite patches the library to add the possibility to test loading access to pages, but when the public page middleware [disables this functionality](https://redirect.github.com/vitejs/vite/blob/9719497adec4ad5ead21cafa19a324bb1d480194/packages/vite/src/node/server/middlewares/static.ts#L89) since public pages are meant to be available always, regardless of whether they are in the allow or deny list. In the case of public pages, the serving function is [provided with the path to the public directory](https://redirect.github.com/vitejs/vite/blob/9719497adec4ad5ead21cafa19a324bb1d480194/packages/vite/src/node/server/middlewares/static.ts#L85) as a root directory. The code of the sirv library [uses the join function to get the full path to the requested file](https://redirect.github.com/lukeed/sirv/blob/d061616827dd32d53b61ec9530c9445c8f592620/packages/sirv/index.mjs#L42). For example, if the public directory is "/www/public", and the requested file is "myfile", the code will join them to the string "/www/public/myfile". The code will then pass this string to the normalize function. Afterwards, the code will [use the string's startsWith function](https://redirect.github.com/lukeed/sirv/blob/d061616827dd32d53b61ec9530c9445c8f592620/packages/sirv/index.mjs#L43) to determine whether the created path is within the given directory or not. Only if it is, it will be served. Since [sirv trims the trailing slash of the public directory](https://redirect.github.com/lukeed/sirv/blob/d061616827dd32d53b61ec9530c9445c8f592620/packages/sirv/index.mjs#L119), the string's startsWith function may return true even if the created path is not within the public directory. For example, if the server's root is at "/www", and the public directory is at "/www/p", if the created path will be "/www/private.txt", the startsWith function will still return true, because the string "/www/private.txt" starts with "/www/p". To achieve this, the attacker will use ".." to ask for the file "../private.txt". The code will then join it to the "/www/p" string, and will receive "/www/p/../private.txt". Then, the normalize function will return "/www/private.txt", which will then be passed to the startsWith function, which will return true, and the processing of the page will continue without checking the deny list (since this is the public directory middleware which doesn't check that). ### PoC Execute the following shell commands: ``` npm create vite@latest cd vite-project/ mkdir p cd p ln -s a b cd .. echo 'import path from "node:path"; import { defineConfig } from "vite"; export default defineConfig({publicDir: path.resolve(__dirname, "p/"), server: {fs: {deny: [path.resolve(__dirname, "private.txt")]}}})' > vite.config.js echo "secret" > private.txt npm install npm run dev ``` Then, in a different shell, run the following command: `curl -v --path-as-is 'http://localhost:5173/private.txt'` You will receive a 403 HTTP Response, because private.txt is denied. Now in the same shell run the following command: `curl -v --path-as-is 'http://localhost:5173/../private.txt'` You will receive the contents of private.txt. ### Related links - https://github.com/lukeed/sirv/commit/f0113f3f8266328d804ee808f763a3c11f8997eb #### [CVE-2025-58752](https://redirect.github.com/vitejs/vite/security/advisories/GHSA-jqfw-vq24-v9c3) ### Summary Any HTML files on the machine were served regardless of the `server.fs` settings. ### Impact Only apps that match the following conditions are affected: - explicitly exposes the Vite dev server to the network (using --host or [server.host config option](https://vitejs.dev/config/server-options.html#server-host)) - `appType: 'spa'` (default) or `appType: 'mpa'` is used This vulnerability also affects the preview server. The preview server allowed HTML files not under the output directory to be served. ### Details The [serveStaticMiddleware](https://redirect.github.com/vitejs/vite/blob/9719497adec4ad5ead21cafa19a324bb1d480194/packages/vite/src/node/server/middlewares/static.ts#L123) function is in charge of serving static files from the server. It returns the [viteServeStaticMiddleware](https://redirect.github.com/vitejs/vite/blob/9719497adec4ad5ead21cafa19a324bb1d480194/packages/vite/src/node/server/middlewares/static.ts#L136) function which runs the needed tests and serves the page. The viteServeStaticMiddleware function [checks if the extension of the requested file is ".html"](https://redirect.github.com/vitejs/vite/blob/9719497adec4ad5ead21cafa19a324bb1d480194/packages/vite/src/node/server/middlewares/static.ts#L144). If so, it doesn't serve the page. Instead, the server will go on to the next middlewares, in this case [htmlFallbackMiddleware](https://redirect.github.com/vitejs/vite/blob/9719497adec4ad5ead21cafa19a324bb1d480194/packages/vite/src/node/server/middlewares/htmlFallback.ts#L14), and then to [indexHtmlMiddleware](https://redirect.github.com/vitejs/vite/blob/9719497adec4ad5ead21cafa19a324bb1d480194/packages/vite/src/node/server/middlewares/indexHtml.ts#L438). These middlewares don't perform any test against allow or deny rules, and they don't make sure that the accessed file is in the root directory of the server. They just find the file and send back its contents to the client. ### PoC Execute the following shell commands: ``` npm create vite@latest cd vite-project/ echo "secret" > /tmp/secret.html npm install npm run dev ``` Then, in a different shell, run the following command: `curl -v --path-as-is 'http://localhost:5173/../../../../../../../../../../../tmp/secret.html'` The contents of /tmp/secret.html will be returned. This will also work for HTML files that are in the root directory of the project, but are in the deny list (or not in the allow list). Test that by stopping the running server (CTRL+C), and running the following commands in the server's shell: ``` echo 'import path from "node:path"; import { defineConfig } from "vite"; export default defineConfig({server: {fs: {deny: [path.resolve(__dirname, "secret_files/*")]}}})' > [vite.config.js](http://vite.config.js) mkdir secret_files echo "secret txt" > secret_files/secret.txt echo "secret html" > secret_files/secret.html npm run dev ``` Then, in a different shell, run the following command: `curl -v --path-as-is 'http://localhost:5173/secret_files/secret.txt'` You will receive a 403 HTTP Response, because everything in the secret_files directory is denied. Now in the same shell run the following command: `curl -v --path-as-is 'http://localhost:5173/secret_files/secret.html'` You will receive the contents of secret_files/secret.html. --- ### Release Notes <details> <summary>vitejs/vite (vite)</summary> ### [`v6.3.6`](https://redirect.github.com/vitejs/vite/releases/tag/v6.3.6) [Compare Source](https://redirect.github.com/vitejs/vite/compare/v6.3.5...v6.3.6) Please refer to [CHANGELOG.md](https://redirect.github.com/vitejs/vite/blob/v6.3.6/packages/vite/CHANGELOG.md) for details. </details> --- ### Configuration 📅 **Schedule**: Branch creation - "" (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/toeverything/AFFiNE). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS45Ny4xMCIsInVwZGF0ZWRJblZlciI6IjQxLjk3LjEwIiwidGFyZ2V0QnJhbmNoIjoiY2FuYXJ5IiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
18faaa38a0 |
chore: bump up mermaid version to v10.9.4 [SECURITY] (#13518)
This PR contains the following updates: | Package | Change | Age | Confidence | |---|---|---|---| | [mermaid](https://redirect.github.com/mermaid-js/mermaid) | [`10.9.3` -> `10.9.4`](https://renovatebot.com/diffs/npm/mermaid/10.9.3/10.9.4) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | ### GitHub Vulnerability Alerts #### [CVE-2025-54881](https://redirect.github.com/mermaid-js/mermaid/security/advisories/GHSA-7rqq-prvp-x9jh) ### Summary In the default configuration of mermaid 11.9.0, user supplied input for sequence diagram labels is passed to `innerHTML` during calculation of element size, causing XSS. ### Details Sequence diagram node labels with KaTeX delimiters are passed through `calculateMathMLDimensions`. This method passes the full label to `innerHTML` which allows allows malicious users to inject arbitrary HTML and cause XSS when mermaid-js is used in it's default configuration (with KaTeX support enabled). The vulnerability lies here: ```ts export const calculateMathMLDimensions = async (text: string, config: MermaidConfig) => { text = await renderKatex(text, config); const divElem = document.createElement('div'); divElem.innerHTML = text; // XSS sink, text has not been sanitized. divElem.id = 'katex-temp'; divElem.style.visibility = 'hidden'; divElem.style.position = 'absolute'; divElem.style.top = '0'; const body = document.querySelector('body'); body?.insertAdjacentElement('beforeend', divElem); const dim = { width: divElem.clientWidth, height: divElem.clientHeight }; divElem.remove(); return dim; }; ``` The `calculateMathMLDimensions` method was introduced in 5c69e5fdb004a6d0a2abe97e23d26e223a059832 two years ago, which was released in [Mermaid 10.9.0](https://redirect.github.com/mermaid-js/mermaid/releases/tag/v10.9.0). ### PoC Render the following diagram and observe the modified DOM. ``` sequenceDiagram participant A as Alice<img src="x" onerror="document.write(`xss on ${document.domain}`)">$$\\text{Alice}$$ A->>John: Hello John, how are you? Alice-)John: See you later! ``` Here is a PoC on mermaid.live: https://mermaid.live/edit#pako:eNpVUMtOwzAQ_BWzyoFKaRTyaFILiio4IK7ckA-1km1iKbaLY6spUf4dJ0AF68uOZ2dm7REqXSNQ6PHDoarwWfDGcMkUudaJGysqceLKkj3hPdl3osJ7IRvSm-qBwcCAaIXGaONRrSsnUdnobITF28PQ954lwXglai25UNNhxWAXBMyXxcGOi-3kL_5k79e73atuFSUv2HWazH1IWn0m3CC5aPf4b3p2WK--BW-4DJCOWzQ3TM0HQmiMqIFa4zAEicZv4iGMsw0D26JEBtS3NR656ywDpiYv869_11r-Ko12TQv0yLveI3eqfcjP111HUNVonrRTFuhdsVgAHWEAmuRxlG7SuEzKMi-yJAnhAjTLIk_EcbFJtuk2y9MphM8lM47KIp--AOZghtU ### Impact XSS on all sites that use mermaid and render user supplied diagrams without further sanitization. ### Remediation The value of the `text` argument for the `calculateMathMLDimensions` method needs to be sanitized before getting passed on to `innerHTML`. --- ### Release Notes <details> <summary>mermaid-js/mermaid (mermaid)</summary> ### [`v10.9.4`](https://redirect.github.com/mermaid-js/mermaid/releases/tag/v10.9.4) [Compare Source](https://redirect.github.com/mermaid-js/mermaid/compare/v10.9.3...v10.9.4) This release backports the fix for GHSA-7rqq-prvp-x9jh from [v11.10.0](https://redirect.github.com/mermaid-js/mermaid/releases/tag/mermaid%4011.10.0), preventing a potential XSS attack in labels in sequence diagrams. See: [`9d68517`](https://redirect.github.com/mermaid-js/mermaid/commit/9d685178d215f76be4d5e8fe47c64dd915274738) (on `main` branch) See: [`7509b06`](https://redirect.github.com/mermaid-js/mermaid/commit/7509b066f164353c26028d5dd366736bed52d0c7) (backported commit) **Full Changelog**: <https://github.com/mermaid-js/mermaid/compare/v10.9.3...v10.9.4> </details> --- ### Configuration 📅 **Schedule**: Branch creation - "" (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/toeverything/AFFiNE). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS44MS4yIiwidXBkYXRlZEluVmVyIjoiNDEuODIuNyIsInRhcmdldEJyYW5jaCI6ImNhbmFyeSIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
ff9a4f4322 |
chore: bump up nestjs (#13288)
This PR contains the following updates: | Package | Change | Age | Confidence | |---|---|---|---| | [@nestjs-cls/transactional-adapter-prisma](https://papooch.github.io/nestjs-cls/) ([source](https://redirect.github.com/Papooch/nestjs-cls)) | [`1.2.24` -> `1.3.0`](https://renovatebot.com/diffs/npm/@nestjs-cls%2ftransactional-adapter-prisma/1.2.24/1.3.0) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [@nestjs/common](https://nestjs.com) ([source](https://redirect.github.com/nestjs/nest/tree/HEAD/packages/common)) | [`11.1.3` -> `11.1.5`](https://renovatebot.com/diffs/npm/@nestjs%2fcommon/11.1.3/11.1.5) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [@nestjs/core](https://nestjs.com) ([source](https://redirect.github.com/nestjs/nest/tree/HEAD/packages/core)) | [`11.1.3` -> `11.1.5`](https://renovatebot.com/diffs/npm/@nestjs%2fcore/11.1.3/11.1.5) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [@nestjs/platform-express](https://nestjs.com) ([source](https://redirect.github.com/nestjs/nest/tree/HEAD/packages/platform-express)) | [`11.1.3` -> `11.1.5`](https://renovatebot.com/diffs/npm/@nestjs%2fplatform-express/11.1.3/11.1.5) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [@nestjs/platform-socket.io](https://nestjs.com) ([source](https://redirect.github.com/nestjs/nest/tree/HEAD/packages/platform-socket.io)) | [`11.1.3` -> `11.1.5`](https://renovatebot.com/diffs/npm/@nestjs%2fplatform-socket.io/11.1.3/11.1.5) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [@nestjs/websockets](https://redirect.github.com/nestjs/nest) ([source](https://redirect.github.com/nestjs/nest/tree/HEAD/packages/websockets)) | [`11.1.3` -> `11.1.5`](https://renovatebot.com/diffs/npm/@nestjs%2fwebsockets/11.1.3/11.1.5) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>Papooch/nestjs-cls (@​nestjs-cls/transactional-adapter-prisma)</summary> ### [`v1.3.0`](https://redirect.github.com/Papooch/nestjs-cls/releases/tag/%40nestjs-cls/transactional-adapter-prisma%401.3.0) [Compare Source](https://redirect.github.com/Papooch/nestjs-cls/compare/@nestjs-cls/transactional-adapter-prisma@1.2.24...@nestjs-cls/transactional-adapter-prisma@1.3.0) ##### Features - **transactional-adapter-prisma**: add support for nested transactions ([c49c766](https://redirect.github.com/Papooch/nestjs-cls/commits/c49c766)) - **transactional-adapter-prisma**: add support for nested transactions ([#​353](https://redirect.github.com/Papooch/nestjs-cls/issues/353)) ([c49c766](https://redirect.github.com/Papooch/nestjs-cls/commits/c49c766)) </details> <details> <summary>nestjs/nest (@​nestjs/common)</summary> ### [`v11.1.5`](https://redirect.github.com/nestjs/nest/compare/v11.1.4...9bb0560e79743cc0bd2ce198c65e21332200c3ad) [Compare Source](https://redirect.github.com/nestjs/nest/compare/v11.1.4...v11.1.5) ### [`v11.1.4`](https://redirect.github.com/nestjs/nest/compare/v11.1.3...1f101ac8b0a5bb5b97a7caf6634fcea8d65196e0) [Compare Source](https://redirect.github.com/nestjs/nest/compare/v11.1.3...v11.1.4) </details> <details> <summary>nestjs/nest (@​nestjs/core)</summary> ### [`v11.1.5`](https://redirect.github.com/nestjs/nest/compare/v11.1.4...9bb0560e79743cc0bd2ce198c65e21332200c3ad) [Compare Source](https://redirect.github.com/nestjs/nest/compare/v11.1.4...v11.1.5) ### [`v11.1.4`](https://redirect.github.com/nestjs/nest/compare/v11.1.3...1f101ac8b0a5bb5b97a7caf6634fcea8d65196e0) [Compare Source](https://redirect.github.com/nestjs/nest/compare/v11.1.3...v11.1.4) </details> <details> <summary>nestjs/nest (@​nestjs/platform-express)</summary> ### [`v11.1.5`](https://redirect.github.com/nestjs/nest/compare/v11.1.4...9bb0560e79743cc0bd2ce198c65e21332200c3ad) [Compare Source](https://redirect.github.com/nestjs/nest/compare/v11.1.4...v11.1.5) ### [`v11.1.4`](https://redirect.github.com/nestjs/nest/compare/v11.1.3...1f101ac8b0a5bb5b97a7caf6634fcea8d65196e0) [Compare Source](https://redirect.github.com/nestjs/nest/compare/v11.1.3...v11.1.4) </details> <details> <summary>nestjs/nest (@​nestjs/platform-socket.io)</summary> ### [`v11.1.5`](https://redirect.github.com/nestjs/nest/releases/tag/v11.1.5) [Compare Source](https://redirect.github.com/nestjs/nest/compare/v11.1.4...v11.1.5) #### v11.1.5 (2025-07-18) ##### Dependencies - `platform-express` - [#​15425](https://redirect.github.com/nestjs/nest/pull/15425) chore(deps): bump multer from 2.0.1 to 2.0.2 in /packages/platform-express ([@​dependabot\[bot\]](https://redirect.github.com/apps/dependabot)) ### [`v11.1.4`](https://redirect.github.com/nestjs/nest/releases/tag/v11.1.4) [Compare Source](https://redirect.github.com/nestjs/nest/compare/v11.1.3...v11.1.4) ##### v11.1.4 (2025-07-16) ##### Bug fixes - `platform-fastify` - [#​15385](https://redirect.github.com/nestjs/nest/pull/15385) fix(testing): auto-init fastify adapter for middleware registration ([@​mag123c](https://redirect.github.com/mag123c)) - `core`, `testing` - [#​15405](https://redirect.github.com/nestjs/nest/pull/15405) fix(core): fix race condition in class dependency resolution ([@​hajekjiri](https://redirect.github.com/hajekjiri)) - `core` - [#​15333](https://redirect.github.com/nestjs/nest/pull/15333) fix(core): Make flattenRoutePath return a valid module ([@​gentunian](https://redirect.github.com/gentunian)) - `microservices` - [#​15305](https://redirect.github.com/nestjs/nest/pull/15305) fix(microservices): Revisit RMQ pattern matching with wildcards ([@​getlarge](https://redirect.github.com/getlarge)) - [#​15250](https://redirect.github.com/nestjs/nest/pull/15250) fix(constants): update RMQ\_DEFAULT\_QUEUE to an empty string ([@​EeeasyCode](https://redirect.github.com/EeeasyCode)) ##### Enhancements - `platform-fastify` - [#​14789](https://redirect.github.com/nestjs/nest/pull/14789) feat(fastify): add decorator for custom schema ([@​piotrfrankowski](https://redirect.github.com/piotrfrankowski)) - `common`, `core`, `microservices`, `platform-express`, `platform-fastify`, `websockets` - [#​15386](https://redirect.github.com/nestjs/nest/pull/15386) feat: enhance introspection capabilities ([@​kamilmysliwiec](https://redirect.github.com/kamilmysliwiec)) - `core` - [#​15374](https://redirect.github.com/nestjs/nest/pull/15374) feat: supporting fine async storage control ([@​Farenheith](https://redirect.github.com/Farenheith)) ##### Dependencies - `platform-ws` - [#​15350](https://redirect.github.com/nestjs/nest/pull/15350) chore(deps): bump ws from 8.18.2 to 8.18.3 ([@​dependabot\[bot\]](https://redirect.github.com/apps/dependabot)) - `platform-fastify` - [#​15278](https://redirect.github.com/nestjs/nest/pull/15278) chore(deps): bump fastify from 5.3.3 to 5.4.0 ([@​dependabot\[bot\]](https://redirect.github.com/apps/dependabot)) ##### Committers: 11 - Alexey Filippov ([@​SocketSomeone](https://redirect.github.com/SocketSomeone)) - EFIcats ([@​ext4cats](https://redirect.github.com/ext4cats)) - Edouard Maleix ([@​getlarge](https://redirect.github.com/getlarge)) - JaeHo Jang ([@​mag123c](https://redirect.github.com/mag123c)) - Jiri Hajek ([@​hajekjiri](https://redirect.github.com/hajekjiri)) - Kamil Mysliwiec ([@​kamilmysliwiec](https://redirect.github.com/kamilmysliwiec)) - Khan / 이창민 ([@​EeeasyCode](https://redirect.github.com/EeeasyCode)) - Peter F. ([@​piotrfrankowski](https://redirect.github.com/piotrfrankowski)) - Sebastian ([@​gentunian](https://redirect.github.com/gentunian)) - Thiago Oliveira Santos ([@​Farenheith](https://redirect.github.com/Farenheith)) - jochong ([@​jochongs](https://redirect.github.com/jochongs)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/toeverything/AFFiNE). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS40MC4wIiwidXBkYXRlZEluVmVyIjoiNDEuNDAuMCIsInRhcmdldEJyYW5jaCI6ImNhbmFyeSIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
8cfaee8232 |
chore: bump up on-headers version to v1.1.0 [SECURITY] (#13260)
This PR contains the following updates: | Package | Change | Age | Confidence | |---|---|---|---| | [on-headers](https://redirect.github.com/jshttp/on-headers) | [`1.0.2` -> `1.1.0`](https://renovatebot.com/diffs/npm/on-headers/1.0.2/1.1.0) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | ### GitHub Vulnerability Alerts #### [CVE-2025-7339](https://redirect.github.com/jshttp/on-headers/security/advisories/GHSA-76c9-3jph-rj3q) ### Impact A bug in on-headers versions `< 1.1.0` may result in response headers being inadvertently modified when an array is passed to `response.writeHead()` ### Patches Users should upgrade to `1.1.0` ### Workarounds Uses are encouraged to upgrade to `1.1.0`, but this issue can be worked around by passing an object to `response.writeHead()` rather than an array. --- ### Release Notes <details> <summary>jshttp/on-headers (on-headers)</summary> ### [`v1.1.0`](https://redirect.github.com/jshttp/on-headers/blob/HEAD/HISTORY.md#110--2025-07-17) [Compare Source](https://redirect.github.com/jshttp/on-headers/compare/v1.0.2...v1.1.0) \================== - Fix [CVE-2025-7339](https://www.cve.org/CVERecord?id=CVE-2025-7339) ([GHSA-76c9-3jph-rj3q](https://redirect.github.com/jshttp/on-headers/security/advisories/GHSA-76c9-3jph-rj3q)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - "" (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/toeverything/AFFiNE). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4yMy4yIiwidXBkYXRlZEluVmVyIjoiNDEuMjMuMiIsInRhcmdldEJyYW5jaCI6ImNhbmFyeSIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
fb250c6374 |
chore: bump up SnapKit/SnapKit version to from: "5.7.1" (#12873)
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [SnapKit/SnapKit](https://redirect.github.com/SnapKit/SnapKit) | minor | `from: "5.0.1"` -> `from: "5.7.1"` | --- ### Release Notes <details> <summary>SnapKit/SnapKit (SnapKit/SnapKit)</summary> ### [`v5.7.1`](https://redirect.github.com/SnapKit/SnapKit/releases/tag/5.7.1) [Compare Source](https://redirect.github.com/SnapKit/SnapKit/compare/5.7.0...5.7.1) - Podspec bump with privacy manifest support via Cocoapods ### [`v5.7.0`](https://redirect.github.com/SnapKit/SnapKit/releases/tag/5.7.0) [Compare Source](https://redirect.github.com/SnapKit/SnapKit/compare/5.6.0...5.7.0) Minor release: - Update minimum deployment targets (iOS 12.0, macOS 10.13) - Add `PrivacyInfo.xcprivacy` for Swift PM targets, Cocoapods unsupported due to [#​10325](https://redirect.github.com/CocoaPods/CocoaPods/issues/10325) Happy New Year! ### [`v5.6.0`](https://redirect.github.com/SnapKit/SnapKit/releases/tag/5.6.0) [Compare Source](https://redirect.github.com/SnapKit/SnapKit/compare/5.0.1...5.6.0) - Upgrade to syntax compatibility of Swift 5.6 - Upgrade dependency manager integrations - Small tweaks and fixes </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/toeverything/AFFiNE). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC42MC4xIiwidXBkYXRlZEluVmVyIjoiNDAuNjAuMSIsInRhcmdldEJyYW5jaCI6ImNhbmFyeSIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]andfengmk2
|
138c35a0f9 |
chore: bump up manticoresearch/manticore Docker tag to v10 (#12816)
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | manticoresearch/manticore | service | major | `9.3.2` -> `10.1.0` | --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/toeverything/AFFiNE). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC41MC4wIiwidXBkYXRlZEluVmVyIjoiNDAuNTAuMCIsInRhcmdldEJyYW5jaCI6ImNhbmFyeSIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: fengmk2 <fengmk2@gmail.com> |
||
|
renovate[bot]andfengmk2
|
29826e1c1e |
chore: bump up happy-dom version to v18 (#12799)
This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [happy-dom](https://redirect.github.com/capricorn86/happy-dom) | [`^17.0.0` -> `^18.0.0`](https://renovatebot.com/diffs/npm/happy-dom/17.4.7/18.0.1) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>capricorn86/happy-dom (happy-dom)</summary> ### [`v18.0.1`](https://redirect.github.com/capricorn86/happy-dom/releases/tag/v18.0.1) [Compare Source](https://redirect.github.com/capricorn86/happy-dom/compare/v18.0.0...v18.0.1) ##### 👷♂️ Patch fixes - Addresses an issue where an error occurred if the Element ID was set to the same name as a Window property with a null value - By **[@​capricorn86](https://redirect.github.com/capricorn86)** in task [#​1841](https://redirect.github.com/capricorn86/happy-dom/issues/1841) ### [`v18.0.0`](https://redirect.github.com/capricorn86/happy-dom/releases/tag/v18.0.0) [Compare Source](https://redirect.github.com/capricorn86/happy-dom/compare/v17.6.3...v18.0.0) ##### 💣 Breaking Changes - Makes the types for Happy DOM strict - By **[@​capricorn86](https://redirect.github.com/capricorn86)** in task [#​1154](https://redirect.github.com/capricorn86/happy-dom/issues/1154) - This makes it possible to use the option `skipLibCheck` set to "false" in the typescript configuration for projects with a strict configuration - This change has resulted in that some types has changed and is therefore considered as a breaking change - `BrowserContext.close()` now throws an error when trying to close the default context of a browser - By **[@​capricorn86](https://redirect.github.com/capricorn86)** in task [#​1154](https://redirect.github.com/capricorn86/happy-dom/issues/1154) ##### 🎨 Features - Adds support for `Browser.closed`, `BrowserContext.closed`, `BrowserPage.closed` and `BrowserFrame.closed` - By **[@​capricorn86](https://redirect.github.com/capricorn86)** in task [#​1154](https://redirect.github.com/capricorn86/happy-dom/issues/1154) - Adds support for `VirtualConsolePrinter.close()` and `VirtualConsolePrinter.closed` - By **[@​capricorn86](https://redirect.github.com/capricorn86)** in task [#​1154](https://redirect.github.com/capricorn86/happy-dom/issues/1154) - Adds support for `CookieContainer.clearCookies()` - By **[@​capricorn86](https://redirect.github.com/capricorn86)** in task [#​1154](https://redirect.github.com/capricorn86/happy-dom/issues/1154) ### [`v17.6.3`](https://redirect.github.com/capricorn86/happy-dom/releases/tag/v17.6.3) [Compare Source](https://redirect.github.com/capricorn86/happy-dom/compare/v17.6.2...v17.6.3) ##### 👷♂️ Patch fixes - Removes global typescript definition that was used for custom elements - By **[@​capricorn86](https://redirect.github.com/capricorn86)** in task [#​1154](https://redirect.github.com/capricorn86/happy-dom/issues/1154) ### [`v17.6.2`](https://redirect.github.com/capricorn86/happy-dom/releases/tag/v17.6.2) [Compare Source](https://redirect.github.com/capricorn86/happy-dom/compare/v17.6.1...v17.6.2) ##### 👷♂️ Patch fixes - Updates Typescript to the latest version - By **[@​capricorn86](https://redirect.github.com/capricorn86)** in task [#​1154](https://redirect.github.com/capricorn86/happy-dom/issues/1154) ### [`v17.6.1`](https://redirect.github.com/capricorn86/happy-dom/releases/tag/v17.6.1) [Compare Source](https://redirect.github.com/capricorn86/happy-dom/compare/v17.6.0...v17.6.1) ##### 🎨 Features - Adds support for disabling validation of certificates, to allow for self-signed certificates to be used - By **[@​capricorn86](https://redirect.github.com/capricorn86)** in task [#​1763](https://redirect.github.com/capricorn86/happy-dom/issues/1763) - Read more about the new setting `fetch.disableStrictSSL` under [IBrowserSettings](https://redirect.github.com/capricorn86/happy-dom/wiki/IBrowserSettings) in the Wiki ### [`v17.6.0`](https://redirect.github.com/capricorn86/happy-dom/compare/v17.5.9...v17.6.0) [Compare Source](https://redirect.github.com/capricorn86/happy-dom/compare/v17.5.9...v17.6.0) ### [`v17.5.9`](https://redirect.github.com/capricorn86/happy-dom/releases/tag/v17.5.9) [Compare Source](https://redirect.github.com/capricorn86/happy-dom/compare/v17.5.8...v17.5.9) ##### 👷♂️ Patch fixes - Adds missing null check in `HTMLLinkElement` for a browser frame property that becomes null during teardown of a `Window` - By **[@​capricorn86](https://redirect.github.com/capricorn86)** in task [#​1800](https://redirect.github.com/capricorn86/happy-dom/issues/1800) ### [`v17.5.8`](https://redirect.github.com/capricorn86/happy-dom/releases/tag/v17.5.8) [Compare Source](https://redirect.github.com/capricorn86/happy-dom/compare/v17.5.7...v17.5.8) ##### 👷♂️ Patch fixes - Incorrect cache matching caused `Element.classList` to return the wrong items - By **[@​capricorn86](https://redirect.github.com/capricorn86)** in task [#​1812](https://redirect.github.com/capricorn86/happy-dom/issues/1812) ### [`v17.5.7`](https://redirect.github.com/capricorn86/happy-dom/releases/tag/v17.5.7) [Compare Source](https://redirect.github.com/capricorn86/happy-dom/compare/v17.5.6...v17.5.7) ##### 👷♂️ Patch fixes - Handle wider range of valid characters in unquoted attribute value parsing - By **[@​AudunWA](https://redirect.github.com/AudunWA)** in task [#​1817](https://redirect.github.com/capricorn86/happy-dom/issues/1817) ### [`v17.5.6`](https://redirect.github.com/capricorn86/happy-dom/releases/tag/v17.5.6) [Compare Source](https://redirect.github.com/capricorn86/happy-dom/compare/v17.5.5...v17.5.6) ##### 👷♂️ Patch fixes - Removes the min and max boundary check when setting the value of an input field of type "date" - By **[@​zgrybus](https://redirect.github.com/zgrybus)** in task [#​1815](https://redirect.github.com/capricorn86/happy-dom/issues/1815) ### [`v17.5.5`](https://redirect.github.com/capricorn86/happy-dom/compare/v17.5.4...v17.5.5) [Compare Source](https://redirect.github.com/capricorn86/happy-dom/compare/v17.5.4...v17.5.5) ### [`v17.5.4`](https://redirect.github.com/capricorn86/happy-dom/releases/tag/v17.5.4) [Compare Source](https://redirect.github.com/capricorn86/happy-dom/compare/v17.5.3...v17.5.4) ##### 👷♂️ Patch fixes - Fixes issue where the body of a `ReadableStream` was locked after being cloned - By **[@​MarcMcIntosh](https://redirect.github.com/MarcMcIntosh)** in task [#​1493](https://redirect.github.com/capricorn86/happy-dom/issues/1493) ### [`v17.5.3`](https://redirect.github.com/capricorn86/happy-dom/releases/tag/v17.5.3) [Compare Source](https://redirect.github.com/capricorn86/happy-dom/compare/v17.5.2...v17.5.3) ##### 👷♂️ Patch fixes - Adds `previousSibling` and `nextSibling` to `MutationObserver` records when a child is removed - By **[@​uxuip](https://redirect.github.com/uxuip)** in task [#​1803](https://redirect.github.com/capricorn86/happy-dom/issues/1803) ### [`v17.5.2`](https://redirect.github.com/capricorn86/happy-dom/releases/tag/v17.5.2) [Compare Source](https://redirect.github.com/capricorn86/happy-dom/compare/v17.5.1...v17.5.2) ##### 👷♂️ Patch fixes - Adds support for the unicode characters `«` and `»` in query selectors used by the React 19.1 "useId" hook - By **[@​terrymun](https://redirect.github.com/terrymun)** in task [#​1785](https://redirect.github.com/capricorn86/happy-dom/issues/1785) ### [`v17.5.1`](https://redirect.github.com/capricorn86/happy-dom/releases/tag/v17.5.1) [Compare Source](https://redirect.github.com/capricorn86/happy-dom/compare/v17.5.0...v17.5.1) ##### 👷♂️ Patch fixes - Existing URL query string should be overwritten on form submit when method is "GET" - By **[@​rslabbert](https://redirect.github.com/rslabbert)** in task [#​1786](https://redirect.github.com/capricorn86/happy-dom/issues/1786) ### [`v17.5.0`](https://redirect.github.com/capricorn86/happy-dom/releases/tag/v17.5.0) [Compare Source](https://redirect.github.com/capricorn86/happy-dom/compare/v17.4.9...v17.5.0) ##### 🎨 Features - Adds support for `XMLHttpRequest.overrideMimeType()` - By **[@​maxmil](https://redirect.github.com/maxmil)** in task [#​1782](https://redirect.github.com/capricorn86/happy-dom/issues/1782) ### [`v17.4.9`](https://redirect.github.com/capricorn86/happy-dom/releases/tag/v17.4.9) [Compare Source](https://redirect.github.com/capricorn86/happy-dom/compare/v17.4.8...v17.4.9) ##### 👷♂️ Patch fixes - A disabled input element should not be parsed in `FormData` - By **[@​juandiegombr](https://redirect.github.com/juandiegombr)** in task [#​1790](https://redirect.github.com/capricorn86/happy-dom/issues/1790) ### [`v17.4.8`](https://redirect.github.com/capricorn86/happy-dom/releases/tag/v17.4.8) [Compare Source](https://redirect.github.com/capricorn86/happy-dom/compare/v17.4.7...v17.4.8) ##### 👷♂️ Patch fixes - Fixes issue where CSS variables where not being parsed in color functions - By **[@​hampustagerud](https://redirect.github.com/hampustagerud)** in task [#​1822](https://redirect.github.com/capricorn86/happy-dom/issues/1822) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/toeverything/AFFiNE). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC41MC4wIiwidXBkYXRlZEluVmVyIjoiNDAuNTAuMCIsInRhcmdldEJyYW5jaCI6ImNhbmFyeSIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: fengmk2 <fengmk2@gmail.com> |
||
|
renovate[bot]
|
4f75111055 |
chore: bump up sinon version to v21 (#12827)
This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [sinon](https://sinonjs.org/) ([source](https://redirect.github.com/sinonjs/sinon)) | [`^20.0.0` -> `^21.0.0`](https://renovatebot.com/diffs/npm/sinon/20.0.0/21.0.0) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>sinonjs/sinon (sinon)</summary> ### [`v21.0.0`](https://redirect.github.com/sinonjs/sinon/blob/HEAD/CHANGES.md#2100) [Compare Source](https://redirect.github.com/sinonjs/sinon/compare/v20.0.0...52b0d97a0ff32888a26941325b9dc0a059fdf739) - [`fd10f13f`](https://redirect.github.com/sinonjs/sinon/commit/fd10f13f3fed7853dd489dd9e84f28c22df715c2) chore!: remove assert.failException property ([#​2659](https://redirect.github.com/sinonjs/sinon/issues/2659)) (Morgan Roderick) > This was used for allowing customisation of the thrown error between > sandboxes and for customisation for integrations (most likely from the > days of BusterJS). > > To my knowledge and what I've been able to find on GitHub, this has > never had any *production* use by end users. > > BREAKING CHANGE: this removes assert.failException from the API *Released by Morgan Roderick on 2025-06-13.* </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/toeverything/AFFiNE). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC41MC4wIiwidXBkYXRlZEluVmVyIjoiNDAuNTAuMCIsInRhcmdldEJyYW5jaCI6ImNhbmFyeSIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
3335f9bb00 |
chore: bump up @nestjs-cls/transactional-adapter-prisma version to v1.2.24 (#12826)
This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [@nestjs-cls/transactional-adapter-prisma](https://papooch.github.io/nestjs-cls/) ([source](https://redirect.github.com/Papooch/nestjs-cls)) | [`1.2.23` -> `1.2.24`](https://renovatebot.com/diffs/npm/@nestjs-cls%2ftransactional-adapter-prisma/1.2.23/1.2.24) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>Papooch/nestjs-cls (@​nestjs-cls/transactional-adapter-prisma)</summary> ### [`v1.2.24`](https://redirect.github.com/Papooch/nestjs-cls/compare/@nestjs-cls/transactional-adapter-prisma@1.2.23...@nestjs-cls/transactional-adapter-prisma@1.2.24) [Compare Source](https://redirect.github.com/Papooch/nestjs-cls/compare/@nestjs-cls/transactional-adapter-prisma@1.2.23...@nestjs-cls/transactional-adapter-prisma@1.2.24) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/toeverything/AFFiNE). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC41MC4wIiwidXBkYXRlZEluVmVyIjoiNDAuNTAuMCIsInRhcmdldEJyYW5jaCI6ImNhbmFyeSIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]andLongYinan
|
566ff7470e |
chore: bump up oxlint version to v1.1.0 (#12509)
This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [oxlint](https://oxc.rs) ([source](https://redirect.github.com/oxc-project/oxc/tree/HEAD/npm/oxlint)) | [`0.16.11` -> `0.18.1`](https://renovatebot.com/diffs/npm/oxlint/0.16.11/0.18.1) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>oxc-project/oxc (oxlint)</summary> ### [`v0.18.1`](https://redirect.github.com/oxc-project/oxc/releases/tag/oxlint_v0.18.1): oxlint v0.18.1 [Compare Source](https://redirect.github.com/oxc-project/oxc/compare/oxlint_v0.18.0...oxlint_v0.18.1) #### \[0.18.1] - 2025-06-09 ##### 🐛 Bug Fixes - [`6d68568`](https://redirect.github.com/oxc-project/oxc/commit/6d68568) linter: False negative in typescript/array-type ([#​11574](https://redirect.github.com/oxc-project/oxc/issues/11574)) (camc314) - [`6a856a0`](https://redirect.github.com/oxc-project/oxc/commit/6a856a0) linter/no-magic-numbers: Fix typo in error message ([#​11560](https://redirect.github.com/oxc-project/oxc/issues/11560)) (overlookmotel) - [`3952e01`](https://redirect.github.com/oxc-project/oxc/commit/3952e01) linter: False negative in jsx-a11y/aria-role ([#​11547](https://redirect.github.com/oxc-project/oxc/issues/11547)) (camc314) - [`b0e3e08`](https://redirect.github.com/oxc-project/oxc/commit/b0e3e08) linter: Misplaced quote in jsx-curly-brace-presence test case ([#​11546](https://redirect.github.com/oxc-project/oxc/issues/11546)) (camc314) - [`a833ed1`](https://redirect.github.com/oxc-project/oxc/commit/a833ed1) linter: Misplaced quote in anchor-is-valid test case ([#​11545](https://redirect.github.com/oxc-project/oxc/issues/11545)) (camc314) - [`4e53b80`](https://redirect.github.com/oxc-project/oxc/commit/4e53b80) linter: Misplaced backtick in exhaustive-deps test case ([#​11544](https://redirect.github.com/oxc-project/oxc/issues/11544)) (camc314) - [`e8a04b6`](https://redirect.github.com/oxc-project/oxc/commit/e8a04b6) linter: Misplaced backtick in no-object-constructor test case ([#​11543](https://redirect.github.com/oxc-project/oxc/issues/11543)) (camc314) - [`65311d0`](https://redirect.github.com/oxc-project/oxc/commit/65311d0) linter: Remove duplicate rule/scope from diagnostic ([#​11531](https://redirect.github.com/oxc-project/oxc/issues/11531)) (camc314) ##### 🚜 Refactor - [`7ab84c2`](https://redirect.github.com/oxc-project/oxc/commit/7ab84c2) editor: Use pattern for textDocument filter ([#​11559](https://redirect.github.com/oxc-project/oxc/issues/11559)) (Sysix) - [`9b475ad`](https://redirect.github.com/oxc-project/oxc/commit/9b475ad) linter: Use one instance of rope per file ([#​11552](https://redirect.github.com/oxc-project/oxc/issues/11552)) (Sysix) ##### 📚 Documentation - [`e13ed51`](https://redirect.github.com/oxc-project/oxc/commit/e13ed51) editor/vscode: Fix typo in README ([#​11572](https://redirect.github.com/oxc-project/oxc/issues/11572)) (David) - [`fa924ab`](https://redirect.github.com/oxc-project/oxc/commit/fa924ab) linter: Cleanup docs for multiple linter rules ([#​11551](https://redirect.github.com/oxc-project/oxc/issues/11551)) (Ulrich Stark) ##### ⚡ Performance - [`7bf25cb`](https://redirect.github.com/oxc-project/oxc/commit/7bf25cb) language_server: Transform `MessageWithPosition` to `Diagnostic` with less allocations ([#​11561](https://redirect.github.com/oxc-project/oxc/issues/11561)) (Sysix) ### [`v0.18.0`](https://redirect.github.com/oxc-project/oxc/releases/tag/oxlint_v0.18.0): oxlint v0.18.0 [Compare Source](https://redirect.github.com/oxc-project/oxc/compare/oxlint_v0.17.0...oxlint_v0.18.0) #### \[0.18.0] - 2025-06-06 - [`bd9dd88`](https://redirect.github.com/oxc-project/oxc/commit/bd9dd88) linter: \[**BREAKING**] Add more info to json reporter ([#​11524](https://redirect.github.com/oxc-project/oxc/issues/11524)) (camc314) ##### Features - [`825d40c`](https://redirect.github.com/oxc-project/oxc/commit/825d40c) linter: Fix casing in unicorn/no-useless-promise-resolve-reject ([#​11528](https://redirect.github.com/oxc-project/oxc/issues/11528)) (camc314) - [`2faee3d`](https://redirect.github.com/oxc-project/oxc/commit/2faee3d) linter: Fix grammer in react/exhaustive-deps ([#​11527](https://redirect.github.com/oxc-project/oxc/issues/11527)) (camc314) ##### Bug Fixes - [`1a71d7c`](https://redirect.github.com/oxc-project/oxc/commit/1a71d7c) linter: Misplaced backtick in unicorn/no-array-for-each diagnostic ([#​11529](https://redirect.github.com/oxc-project/oxc/issues/11529)) (camc314) - [`7430b14`](https://redirect.github.com/oxc-project/oxc/commit/7430b14) linter: Grammer in jest/valid-expect diagnostic ([#​11522](https://redirect.github.com/oxc-project/oxc/issues/11522)) (camc314) - [`b92ac41`](https://redirect.github.com/oxc-project/oxc/commit/b92ac41) linter: Grammer in eslint/no-redeclare diagnostic ([#​11521](https://redirect.github.com/oxc-project/oxc/issues/11521)) (camc314) - [`17883e3`](https://redirect.github.com/oxc-project/oxc/commit/17883e3) linter: Improve eslint/no-unsafe-negation diagnostic ([#​11520](https://redirect.github.com/oxc-project/oxc/issues/11520)) (camc314) - [`8c89937`](https://redirect.github.com/oxc-project/oxc/commit/8c89937) linter: Improve eslint/no-shadow-restricted-names diagnostic ([#​11519](https://redirect.github.com/oxc-project/oxc/issues/11519)) (camc314) - [`3f0d889`](https://redirect.github.com/oxc-project/oxc/commit/3f0d889) linter: Add missing article to oxc/bad-array-method-on-arguments diagnostic ([#​11518](https://redirect.github.com/oxc-project/oxc/issues/11518)) (camc314) - [`cf0c24c`](https://redirect.github.com/oxc-project/oxc/commit/cf0c24c) linter: Improve message in react/prefer-es6-class diagnostic ([#​11516](https://redirect.github.com/oxc-project/oxc/issues/11516)) (camc314) - [`91855df`](https://redirect.github.com/oxc-project/oxc/commit/91855df) linter: Fix message in react/rules-of-hooks diagnostic ([#​11515](https://redirect.github.com/oxc-project/oxc/issues/11515)) (camc314) - [`b272194`](https://redirect.github.com/oxc-project/oxc/commit/b272194) linter: Misplaced backtick in jest/no-conditional-expect diagnostic ([#​11514](https://redirect.github.com/oxc-project/oxc/issues/11514)) (camc314) - [`3403303`](https://redirect.github.com/oxc-project/oxc/commit/3403303) linter: Misplaced backtick in unicorn/prefer-dom-node-dataset diagnostic ([#​11513](https://redirect.github.com/oxc-project/oxc/issues/11513)) (camc314) - [`d5ca872`](https://redirect.github.com/oxc-project/oxc/commit/d5ca872) linter: Misplaced backtick in eslint/radix diagnostic ([#​11512](https://redirect.github.com/oxc-project/oxc/issues/11512)) (camc314) - [`2dcf8be`](https://redirect.github.com/oxc-project/oxc/commit/2dcf8be) linter: Improve diagnostic message when function name is referenced ([#​11509](https://redirect.github.com/oxc-project/oxc/issues/11509)) (camc314) - [`0de0c9c`](https://redirect.github.com/oxc-project/oxc/commit/0de0c9c) linter: Improve diagnostic message for no-unsafe-declaration-merging ([#​11508](https://redirect.github.com/oxc-project/oxc/issues/11508)) (camc314) - [`0946dac`](https://redirect.github.com/oxc-project/oxc/commit/0946dac) linter: Correctly inherit categories when plugins are enabled ([#​11353](https://redirect.github.com/oxc-project/oxc/issues/11353)) (Cameron) - [`510c1c6`](https://redirect.github.com/oxc-project/oxc/commit/510c1c6) linter: Add missing `allowArrowFunctions` option for eslint/func-style ([#​11455](https://redirect.github.com/oxc-project/oxc/issues/11455)) (yefan) - [`c77787c`](https://redirect.github.com/oxc-project/oxc/commit/c77787c) linter: Improve `eslint/no-loss-of-precision` ([#​11437](https://redirect.github.com/oxc-project/oxc/issues/11437)) (magic-akari) - [`11d4523`](https://redirect.github.com/oxc-project/oxc/commit/11d4523) linter: False positive in react/exhaustive-deps ([#​11438](https://redirect.github.com/oxc-project/oxc/issues/11438)) (camc314) - [`616b613`](https://redirect.github.com/oxc-project/oxc/commit/616b613) linter/switch-case-braces: Align the logic with `unicorn` ([#​11405](https://redirect.github.com/oxc-project/oxc/issues/11405)) (shulaoda) ##### Refactor - [`db0b099`](https://redirect.github.com/oxc-project/oxc/commit/db0b099) language_server: Convert only once uri to path when creating `ServerLinter` ([#​11503](https://redirect.github.com/oxc-project/oxc/issues/11503)) (Sysix) - [`ccceb52`](https://redirect.github.com/oxc-project/oxc/commit/ccceb52) language_server: Simplify `workspace/didChangeConfiguration` call ([#​11462](https://redirect.github.com/oxc-project/oxc/issues/11462)) (Sysix) - [`0fdc51e`](https://redirect.github.com/oxc-project/oxc/commit/0fdc51e) linter: Simplify `OxlintRules::override_rules` ([#​11510](https://redirect.github.com/oxc-project/oxc/issues/11510)) (camc314) ##### Testing - [`2ba2893`](https://redirect.github.com/oxc-project/oxc/commit/2ba2893) editor: Fix test for auto `fixAll` on save ([#​11448](https://redirect.github.com/oxc-project/oxc/issues/11448)) (Sysix) ### [`v0.17.0`](https://redirect.github.com/oxc-project/oxc/releases/tag/oxlint_v0.17.0): oxlint v0.17.0 [Compare Source](https://redirect.github.com/oxc-project/oxc/compare/oxlint_v0.16.12...oxlint_v0.17.0) #### \[0.17.0] - 2025-05-30 - [`ead5309`](https://redirect.github.com/oxc-project/oxc/commit/ead5309) linter: \[**BREAKING**] Remove react from default plugin set ([#​11382](https://redirect.github.com/oxc-project/oxc/issues/11382)) (camc314) ##### Features - [`2d25bd8`](https://redirect.github.com/oxc-project/oxc/commit/2d25bd8) linter: Remove `unicorn/no-for-loop` over `typescript/prefer-for-of` ([#​11354](https://redirect.github.com/oxc-project/oxc/issues/11354)) (camc314) - [`bbb7eb1`](https://redirect.github.com/oxc-project/oxc/commit/bbb7eb1) linter: Add auto-fix to react/forward-ref-uses-ref ([#​11342](https://redirect.github.com/oxc-project/oxc/issues/11342)) (yefan) - [`590c27b`](https://redirect.github.com/oxc-project/oxc/commit/590c27b) linter: Add auto-fix to unicorn/no-await-expression-member ([#​11306](https://redirect.github.com/oxc-project/oxc/issues/11306)) (yefan) - [`7824f01`](https://redirect.github.com/oxc-project/oxc/commit/7824f01) linter: Implement suggestion for `jsx/no-useless-fragment` ([#​10800](https://redirect.github.com/oxc-project/oxc/issues/10800)) (Cam McHenry) - [`2083d33`](https://redirect.github.com/oxc-project/oxc/commit/2083d33) linter/language_server: Add second editor suggestion for `react/forward-ref-uses-ref` ([#​11375](https://redirect.github.com/oxc-project/oxc/issues/11375)) (Sysix) ##### Bug Fixes - [`f6424dd`](https://redirect.github.com/oxc-project/oxc/commit/f6424dd) linter: Reflect react plugin is disabled by default in cli ([#​11397](https://redirect.github.com/oxc-project/oxc/issues/11397)) (camc314) - [`25ecbfe`](https://redirect.github.com/oxc-project/oxc/commit/25ecbfe) linter: Remove use of `FrameworkFlags::React` to decide whether rules should run ([#​11383](https://redirect.github.com/oxc-project/oxc/issues/11383)) (camc314) - [`0d240e4`](https://redirect.github.com/oxc-project/oxc/commit/0d240e4) linter: False positive in react/exhaustive-deps with default formal parameter ([#​11395](https://redirect.github.com/oxc-project/oxc/issues/11395)) (camc314) - [`c91697e`](https://redirect.github.com/oxc-project/oxc/commit/c91697e) linter: Fix panic in multi byte char in `TryFrom` aria ([#​11350](https://redirect.github.com/oxc-project/oxc/issues/11350)) (camc314) - [`9798ef1`](https://redirect.github.com/oxc-project/oxc/commit/9798ef1) linter: Stack overflow in no-async-endpoint-handlers ([#​11317](https://redirect.github.com/oxc-project/oxc/issues/11317)) (camc314) - [`348ad97`](https://redirect.github.com/oxc-project/oxc/commit/348ad97) linter: Skip no-unused-vars on astro files ([#​11303](https://redirect.github.com/oxc-project/oxc/issues/11303)) (camc314) - [`183d7f0`](https://redirect.github.com/oxc-project/oxc/commit/183d7f0) linter: Make `jest/no-large-snapshots` error easier to comprehend ([#​11294](https://redirect.github.com/oxc-project/oxc/issues/11294)) (Ulrich Stark) - [`4e606a5`](https://redirect.github.com/oxc-project/oxc/commit/4e606a5) linter: Improve `jest/no-large-snapshots` ([#​11291](https://redirect.github.com/oxc-project/oxc/issues/11291)) (Ulrich Stark) - [`14f790f`](https://redirect.github.com/oxc-project/oxc/commit/14f790f) linter: Improve `jest/no-restricted-matchers` ([#​11292](https://redirect.github.com/oxc-project/oxc/issues/11292)) (Ulrich Stark) - [`a2c82be`](https://redirect.github.com/oxc-project/oxc/commit/a2c82be) linter/block-scoped-var: Better diagnostic messages ([#​11290](https://redirect.github.com/oxc-project/oxc/issues/11290)) (DonIsaac) - [`19772e5`](https://redirect.github.com/oxc-project/oxc/commit/19772e5) linter/no-unused-vars: Panic when variable is redeclared as function in same scope ([#​11280](https://redirect.github.com/oxc-project/oxc/issues/11280)) (Dunqing) - [`7af5bb1`](https://redirect.github.com/oxc-project/oxc/commit/7af5bb1) oxc_language_server: Include save option for text document sync capability ([#​11297](https://redirect.github.com/oxc-project/oxc/issues/11297)) (Nicholas Rayburn) ##### Performance - [`0ed6c1a`](https://redirect.github.com/oxc-project/oxc/commit/0ed6c1a) language_server: Use `Arc<RwLock>` instead of `Mutex` for workspace workers ([#​11328](https://redirect.github.com/oxc-project/oxc/issues/11328)) (Sysix) - [`a0ee946`](https://redirect.github.com/oxc-project/oxc/commit/a0ee946) linter: Reduce code size in `globals` ([#​11333](https://redirect.github.com/oxc-project/oxc/issues/11333)) (shulaoda) - [`c90c5e9`](https://redirect.github.com/oxc-project/oxc/commit/c90c5e9) linter/no-unused-vars: Simplify checking self call usage ([#​11281](https://redirect.github.com/oxc-project/oxc/issues/11281)) (Dunqing) ##### Documentation - [`eae51ca`](https://redirect.github.com/oxc-project/oxc/commit/eae51ca) linter: Clarify jsdoc/check-tag-names configuration ([#​11394](https://redirect.github.com/oxc-project/oxc/issues/11394)) (Rägnar O'ock) - [`cd354d4`](https://redirect.github.com/oxc-project/oxc/commit/cd354d4) oxlint: Remove incorrect doc comment ([#​11326](https://redirect.github.com/oxc-project/oxc/issues/11326)) (camc314) ##### Refactor - [`42738f0`](https://redirect.github.com/oxc-project/oxc/commit/42738f0) linter: Shorten code of match arms ([#​11389](https://redirect.github.com/oxc-project/oxc/issues/11389)) (Ulrich Stark) - [`8a34447`](https://redirect.github.com/oxc-project/oxc/commit/8a34447) linter: Improve `unicorn/text-encoding-identifier-case` ([#​11386](https://redirect.github.com/oxc-project/oxc/issues/11386)) (shulaoda) - [`eaa605e`](https://redirect.github.com/oxc-project/oxc/commit/eaa605e) linter: Avoid some `Arc::clone` in linter runtime ([#​11388](https://redirect.github.com/oxc-project/oxc/issues/11388)) (Boshen) - [`1cd8b9c`](https://redirect.github.com/oxc-project/oxc/commit/1cd8b9c) linter: Fixes in `react/forward-ref-uses-ref` are suggestions ([#​11376](https://redirect.github.com/oxc-project/oxc/issues/11376)) (Sysix) - [`50ef691`](https://redirect.github.com/oxc-project/oxc/commit/50ef691) linter: Add `diagnostics_with_multiple_fixes` to `LintContext` ([#​11357](https://redirect.github.com/oxc-project/oxc/issues/11357)) (Sysix) - [`606bb34`](https://redirect.github.com/oxc-project/oxc/commit/606bb34) linter: Accept `PossibleFixes` instead of `Fix` for `Messages` ([#​11295](https://redirect.github.com/oxc-project/oxc/issues/11295)) (Sysix) - [`042a3f3`](https://redirect.github.com/oxc-project/oxc/commit/042a3f3) linter: Use `PossibleFixes` instead of `Option<Fix>` ([#​11284](https://redirect.github.com/oxc-project/oxc/issues/11284)) (Sysix) - [`ffcfb46`](https://redirect.github.com/oxc-project/oxc/commit/ffcfb46) linter: Improve `unicorn/throw-new-error` ([#​11364](https://redirect.github.com/oxc-project/oxc/issues/11364)) (shulaoda) - [`8fb55c3`](https://redirect.github.com/oxc-project/oxc/commit/8fb55c3) linter: Cleanup docs and simplify code of `eslint/no-fallthrough` ([#​11331](https://redirect.github.com/oxc-project/oxc/issues/11331)) (Ulrich Stark) - [`e2f0f0a`](https://redirect.github.com/oxc-project/oxc/commit/e2f0f0a) linter: Improve docs and simplify code of `eslint/no-duplicate-imports` ([#​11320](https://redirect.github.com/oxc-project/oxc/issues/11320)) (Ulrich Stark) - [`b53b053`](https://redirect.github.com/oxc-project/oxc/commit/b53b053) linter: Simplify accessing span of NameSpan ([#​11305](https://redirect.github.com/oxc-project/oxc/issues/11305)) (Ulrich Stark) - [`4bc2650`](https://redirect.github.com/oxc-project/oxc/commit/4bc2650) linter: Improve `eslint/no-void` ([#​11285](https://redirect.github.com/oxc-project/oxc/issues/11285)) (shulaoda) ##### Styling - [`49b664c`](https://redirect.github.com/oxc-project/oxc/commit/49b664c) linter: Remove needless newline in `declare_oxc_lint` ([#​11400](https://redirect.github.com/oxc-project/oxc/issues/11400)) (camc314) ##### Testing - [`c4f64aa`](https://redirect.github.com/oxc-project/oxc/commit/c4f64aa) linter: Explicitly disable correctness for clarity ([#​11327](https://redirect.github.com/oxc-project/oxc/issues/11327)) (camc314) - [`a404b2c`](https://redirect.github.com/oxc-project/oxc/commit/a404b2c) linter: `eslint/no-duplicate-imports` shouldn't report the same span ([#​11324](https://redirect.github.com/oxc-project/oxc/issues/11324)) (Ulrich Stark) ### [`v0.16.12`](https://redirect.github.com/oxc-project/oxc/blob/HEAD/npm/oxlint/CHANGELOG.md#01612---2025-05-25) [Compare Source](https://redirect.github.com/oxc-project/oxc/compare/oxlint_v0.16.11...oxlint_v0.16.12) ##### Features - [`6a7018e`](https://redirect.github.com/oxc-project/oxc/commit/6a7018e) linter: Generate stricter json schema for lint plugins ([#​11219](https://redirect.github.com/oxc-project/oxc/issues/11219)) (camc314) ##### Bug Fixes - [`e8470d9`](https://redirect.github.com/oxc-project/oxc/commit/e8470d9) linter: Delay merging of oxlintrc configs ([#​10835](https://redirect.github.com/oxc-project/oxc/issues/10835)) (camc314) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/toeverything/AFFiNE). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC4xNi4wIiwidXBkYXRlZEluVmVyIjoiNDAuNTAuMCIsInRhcmdldEJyYW5jaCI6ImNhbmFyeSIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=--> <!-- This is an auto-generated comment: release notes by coderabbit.ai --> ## Summary by CodeRabbit - **Refactor** - Simplified array element retrieval across multiple components and utilities by replacing `.filter(...)[0]` with `.find(...)` or `.findLast(...)`, improving code readability and efficiency. - Improved JSX structure in the audio player component by nesting elements directly rather than using a `children` prop. - Enhanced code organization in the modal container by repositioning functions and updating dependency arrays for better maintainability. - Added a comment to disable a specific lint rule in a React hook for clarity. - **Chores** - Updated the `oxlint` development dependency to allow for newer compatible versions. - **Tests** - Refactored test setup logic for more direct and clear retrieval of test data. <!-- end of auto-generated comment: release notes by coderabbit.ai --> --------- Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: LongYinan <lynweklm@gmail.com> |
||
|
renovate[bot]
|
ac3f247f01 |
chore: bump up apollographql/apollo-ios version to v1.22.0 (#12670)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
521ca99142 |
chore: bump up all non-major npm dependencies (#11693)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]andrenovate
|
f82f213373 |
chore: bump up apollographql/apollo-ios version to v1.20.0 (#11830)
Co-authored-by: renovate <29139614+renovate@users.noreply.github.com> |
||
|
renovate[bot]andrenovate
|
0887c1864c |
chore: bump up Rust crate tokio to v1.44.2 [SECURITY] (#11521)
Co-authored-by: renovate <29139614+renovate@users.noreply.github.com> |
||
|
renovate[bot]andLongYinan
|
0f7a739b3b |
chore: bump up all non-major dependencies (#11351)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: LongYinan <lynweklm@gmail.com> |
||
|
renovate[bot]
|
cc0462e7fe |
chore: bump up @blocksuite/affine version to v0.17.33 (#8873)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
2857568f03 |
chore: bump up @blocksuite/icons version to v2.1.70 (#8866)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
9469b135c5 |
chore: bump up @blocksuite/affine version to v0.17.32 (#8805)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]andL-Sun
|
73283df3e1 |
chore: bump up @blocksuite/affine version to v0.17.30 (#8792)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: L-Sun <zover.v@gmail.com> |
||
|
renovate[bot]
|
c70318735c |
chore: bump up nestjs to v10.4.7 (#8706)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
5d92c900d1 |
chore: bump up @blocksuite/affine version to v0.17.23 (#8596)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]andEYHN
|
d6ec4cc597 |
chore: bump up tinybench version to v3 (#8610)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: EYHN <cneyhn@gmail.com> |
||
|
renovate[bot]
|
8cdca326c1 |
chore: bump up uuid version to v11 (#8609)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
6e9db761a4 |
chore: bump up @blocksuite/affine version to v0.17.18 (#8468)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
4e30f75c64 |
chore: bump up @blocksuite/affine version to v0.17.17 (#8403)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
2c25efa1ba |
chore: bump up @blocksuite/affine version to v0.17.16 (#8372)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]andMirone
|
cfd09b6634 |
chore: bump up blocksuite to v0.17.14 (#8326)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Mirone <Saul-Mirone@outlook.com> |
||
|
renovate[bot]
|
a70140eda3 |
chore: bump up oxlint version to v0.9.6 (#8280)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
49c8a25fce |
chore: bump up @blocksuite/icons version to v2.1.64 (#7945)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]andEYHN
|
f324fa4719 |
chore: bump up storybook monorepo to v8 (major) (#6068)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: EYHN <cneyhn@gmail.com> |
||
|
renovate[bot]
|
7373e174db |
chore: bump up fast-xml-parser version to v4.4.1 [SECURITY] (#7752)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
7a66212568 | chore: bump up oxlint version to v0.7.0 (#7727) | ||
|
renovate[bot]
|
95743a3b14 |
chore: bump up @types/uuid version to v10 (#7293)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |