Commit c99022c
authored
Bump the prod-dependencies-minor group across 1 directory with 8 updates (#3392)
Bumps the prod-dependencies-minor group with 8 updates in the /
directory:
| Package | From | To |
| --- | --- | --- |
|
[@tanstack/react-virtual](https://github.com/TanStack/virtual/tree/HEAD/packages/react-virtual)
| `3.13.19` | `3.14.3` |
| [css-tree](https://github.com/csstree/csstree) | `3.1.0` | `3.2.1` |
| [monaco-yaml](https://github.com/remcohaszing/monaco-yaml) | `5.4.0` |
`5.5.1` |
|
[overlayscrollbars](https://github.com/KingSora/OverlayScrollbars/tree/HEAD/packages/overlayscrollbars)
| `2.14.0` | `2.16.0` |
|
[react-frame-component](https://github.com/ryanseddon/react-frame-component)
| `5.2.7` | `5.3.2` |
| [semver](https://github.com/npm/node-semver) | `7.7.3` | `7.8.4` |
| [tailwind-merge](https://github.com/dcastil/tailwind-merge) | `3.5.0`
| `3.6.0` |
| [yaml](https://github.com/eemeli/yaml) | `2.8.3` | `2.9.0` |
Updates `@tanstack/react-virtual` from 3.13.19 to 3.14.3
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/TanStack/virtual/releases">@tanstack/react-virtual's
releases</a>.</em></p>
<blockquote>
<h2><code>@tanstack/react-virtual</code><a
href="https://github.com/3"><code>@3</code></a>.14.3</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p><a
href="https://redirect.github.com/TanStack/virtual/pull/1201">#1201</a>
<a
href="https://github.com/TanStack/virtual/commit/2ba5eb60f108f4ba9b2bd9570bbd41f9ce618438"><code>2ba5eb6</code></a>
- Make <code>directDomUpdates</code> a no-op for direct DOM writes when
<code>containerRef</code> is omitted. Previously the virtualizer still
wrote item positions while never sizing the container (a broken
half-state). Now omitting <code>containerRef</code> skips all direct
writes while still skipping re-renders, letting consumers own the DOM
updates themselves (e.g. in <code>onChange</code>).</p>
</li>
<li>
<p>Updated dependencies [<a
href="https://github.com/TanStack/virtual/commit/ef69ea31738caa2819142e922efa03d3c408e25c"><code>ef69ea3</code></a>]:</p>
<ul>
<li><code>@tanstack/virtual-core</code><a
href="https://github.com/3"><code>@3</code></a>.17.1</li>
</ul>
</li>
</ul>
<h2><code>@tanstack/react-virtual</code><a
href="https://github.com/3"><code>@3</code></a>.14.2</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies [<a
href="https://github.com/TanStack/virtual/commit/c0b84c83f03de1244649f9838a408faf75ed29c9"><code>c0b84c8</code></a>,
<a
href="https://github.com/TanStack/virtual/commit/fbf3bdbe38a2b1bf22c65a89752b7b9c07a77266"><code>fbf3bdb</code></a>]:
<ul>
<li><code>@tanstack/virtual-core</code><a
href="https://github.com/3"><code>@3</code></a>.17.0</li>
</ul>
</li>
</ul>
<h2><code>@tanstack/react-virtual</code><a
href="https://github.com/3"><code>@3</code></a>.14.1</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies [<a
href="https://github.com/TanStack/virtual/commit/c7468416354c203cd7cc952da5997073394224fb"><code>c746841</code></a>]:
<ul>
<li><code>@tanstack/virtual-core</code><a
href="https://github.com/3"><code>@3</code></a>.16.1</li>
</ul>
</li>
</ul>
<h2><code>@tanstack/react-virtual</code><a
href="https://github.com/3"><code>@3</code></a>.14.0</h2>
<h3>Minor Changes</h3>
<ul>
<li>Add opt-in direct DOM updates for scroll positioning with
<code>directDomUpdates</code>, <code>directDomUpdatesMode</code>, and
<code>containerRef</code>. (<a
href="https://redirect.github.com/TanStack/virtual/pull/1180">#1180</a>)</li>
</ul>
<h2><code>@tanstack/react-virtual</code><a
href="https://github.com/3"><code>@3</code></a>.13.26</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies [<a
href="https://github.com/TanStack/virtual/commit/fc992ab00a15166311b79bd7580736cf01e8cc1a"><code>fc992ab</code></a>]:
<ul>
<li><code>@tanstack/virtual-core</code><a
href="https://github.com/3"><code>@3</code></a>.16.0</li>
</ul>
</li>
</ul>
<h2><code>@tanstack/react-virtual</code><a
href="https://github.com/3"><code>@3</code></a>.13.25</h2>
<h3>Patch Changes</h3>
<ul>
<li>Replace the <code>useReducer(() => ({}), {})</code>
force-rerender pattern with an (<a
href="https://redirect.github.com/TanStack/virtual/pull/1168">#1168</a>)
incrementing number counter. Same semantics (every dispatch changes the
reducer state, forcing a render); zero per-dispatch object allocation.
Trivial individual cost, but eliminates one steady-state GC source on
scroll-heavy apps.</li>
<li>Updated dependencies [<a
href="https://github.com/TanStack/virtual/commit/99355ad1eceee6270efaa26e51f535d8d7c31ac2"><code>99355ad</code></a>,
<a
href="https://github.com/TanStack/virtual/commit/99355ad1eceee6270efaa26e51f535d8d7c31ac2"><code>99355ad</code></a>,
<a
href="https://github.com/TanStack/virtual/commit/99355ad1eceee6270efaa26e51f535d8d7c31ac2"><code>99355ad</code></a>,
<a
href="https://github.com/TanStack/virtual/commit/99355ad1eceee6270efaa26e51f535d8d7c31ac2"><code>99355ad</code></a>,
<a
href="https://github.com/TanStack/virtual/commit/99355ad1eceee6270efaa26e51f535d8d7c31ac2"><code>99355ad</code></a>,
<a
href="https://github.com/TanStack/virtual/commit/99355ad1eceee6270efaa26e51f535d8d7c31ac2"><code>99355ad</code></a>,
<a
href="https://github.com/TanStack/virtual/commit/99355ad1eceee6270efaa26e51f535d8d7c31ac2"><code>99355ad</code></a>]:
<ul>
<li><code>@tanstack/virtual-core</code><a
href="https://github.com/3"><code>@3</code></a>.15.0</li>
</ul>
</li>
</ul>
<h2><code>@tanstack/react-virtual</code><a
href="https://github.com/3"><code>@3</code></a>.13.24</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies [<a
href="https://github.com/TanStack/virtual/commit/97a204dc5526669114458685552b7569b60d2940"><code>97a204d</code></a>]:
<ul>
<li><code>@tanstack/virtual-core</code><a
href="https://github.com/3"><code>@3</code></a>.14.0</li>
</ul>
</li>
</ul>
<h2><code>@tanstack/react-virtual</code><a
href="https://github.com/3"><code>@3</code></a>.13.23</h2>
<h3>Patch Changes</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/TanStack/virtual/blob/main/packages/react-virtual/CHANGELOG.md">@tanstack/react-virtual's
changelog</a>.</em></p>
<blockquote>
<h2>3.14.3</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p><a
href="https://redirect.github.com/TanStack/virtual/pull/1201">#1201</a>
<a
href="https://github.com/TanStack/virtual/commit/2ba5eb60f108f4ba9b2bd9570bbd41f9ce618438"><code>2ba5eb6</code></a>
- Make <code>directDomUpdates</code> a no-op for direct DOM writes when
<code>containerRef</code> is omitted. Previously the virtualizer still
wrote item positions while never sizing the container (a broken
half-state). Now omitting <code>containerRef</code> skips all direct
writes while still skipping re-renders, letting consumers own the DOM
updates themselves (e.g. in <code>onChange</code>).</p>
</li>
<li>
<p>Updated dependencies [<a
href="https://github.com/TanStack/virtual/commit/ef69ea31738caa2819142e922efa03d3c408e25c"><code>ef69ea3</code></a>]:</p>
<ul>
<li><code>@tanstack/virtual-core</code><a
href="https://github.com/3"><code>@3</code></a>.17.1</li>
</ul>
</li>
</ul>
<h2>3.14.2</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies [<a
href="https://github.com/TanStack/virtual/commit/c0b84c83f03de1244649f9838a408faf75ed29c9"><code>c0b84c8</code></a>,
<a
href="https://github.com/TanStack/virtual/commit/fbf3bdbe38a2b1bf22c65a89752b7b9c07a77266"><code>fbf3bdb</code></a>]:
<ul>
<li><code>@tanstack/virtual-core</code><a
href="https://github.com/3"><code>@3</code></a>.17.0</li>
</ul>
</li>
</ul>
<h2>3.14.1</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies [<a
href="https://github.com/TanStack/virtual/commit/c7468416354c203cd7cc952da5997073394224fb"><code>c746841</code></a>]:
<ul>
<li><code>@tanstack/virtual-core</code><a
href="https://github.com/3"><code>@3</code></a>.16.1</li>
</ul>
</li>
</ul>
<h2>3.14.0</h2>
<h3>Minor Changes</h3>
<ul>
<li>Add opt-in direct DOM updates for scroll positioning with
<code>directDomUpdates</code>, <code>directDomUpdatesMode</code>, and
<code>containerRef</code>. (<a
href="https://redirect.github.com/TanStack/virtual/pull/1180">#1180</a>)</li>
</ul>
<h2>3.13.26</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies [<a
href="https://github.com/TanStack/virtual/commit/fc992ab00a15166311b79bd7580736cf01e8cc1a"><code>fc992ab</code></a>]:
<ul>
<li><code>@tanstack/virtual-core</code><a
href="https://github.com/3"><code>@3</code></a>.16.0</li>
</ul>
</li>
</ul>
<h2>3.13.25</h2>
<h3>Patch Changes</h3>
<ul>
<li>Replace the <code>useReducer(() => ({}), {})</code>
force-rerender pattern with an (<a
href="https://redirect.github.com/TanStack/virtual/pull/1168">#1168</a>)
incrementing number counter. Same semantics (every dispatch changes the
reducer state, forcing a render); zero per-dispatch object allocation.
Trivial individual cost, but eliminates one steady-state GC source on
scroll-heavy apps.</li>
<li>Updated dependencies [<a
href="https://github.com/TanStack/virtual/commit/99355ad1eceee6270efaa26e51f535d8d7c31ac2"><code>99355ad</code></a>,
<a
href="https://github.com/TanStack/virtual/commit/99355ad1eceee6270efaa26e51f535d8d7c31ac2"><code>99355ad</code></a>,
<a
href="https://github.com/TanStack/virtual/commit/99355ad1eceee6270efaa26e51f535d8d7c31ac2"><code>99355ad</code></a>,
<a
href="https://github.com/TanStack/virtual/commit/99355ad1eceee6270efaa26e51f535d8d7c31ac2"><code>99355ad</code></a>,
<a
href="https://github.com/TanStack/virtual/commit/99355ad1eceee6270efaa26e51f535d8d7c31ac2"><code>99355ad</code></a>,
<a
href="https://github.com/TanStack/virtual/commit/99355ad1eceee6270efaa26e51f535d8d7c31ac2"><code>99355ad</code></a>,
<a
href="https://github.com/TanStack/virtual/commit/99355ad1eceee6270efaa26e51f535d8d7c31ac2"><code>99355ad</code></a>]:
<ul>
<li><code>@tanstack/virtual-core</code><a
href="https://github.com/3"><code>@3</code></a>.15.0</li>
</ul>
</li>
</ul>
<h2>3.13.24</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/TanStack/virtual/commit/75ae8964a695137ea3dea1ff592ea9502d3d67de"><code>75ae896</code></a>
ci: Version Packages (<a
href="https://github.com/TanStack/virtual/tree/HEAD/packages/react-virtual/issues/1202">#1202</a>)</li>
<li><a
href="https://github.com/TanStack/virtual/commit/2ba5eb60f108f4ba9b2bd9570bbd41f9ce618438"><code>2ba5eb6</code></a>
fix(react-virtual): make directDomUpdates a no-op without containerRef
(<a
href="https://github.com/TanStack/virtual/tree/HEAD/packages/react-virtual/issues/1201">#1201</a>)</li>
<li><a
href="https://github.com/TanStack/virtual/commit/ef69ea31738caa2819142e922efa03d3c408e25c"><code>ef69ea3</code></a>
fix(virtual-core): adjust scroll on first measurement during backward
scroll ...</li>
<li><a
href="https://github.com/TanStack/virtual/commit/932c3588a00c8fd31ebe239ea10295bb0e65aac1"><code>932c358</code></a>
test(react-virtual): add e2e test for React Compiler with
directDomUpdates, b...</li>
<li><a
href="https://github.com/TanStack/virtual/commit/b983b21a48dabdb87e7ca36f5f8587d2cc02f837"><code>b983b21</code></a>
ci: Version Packages (<a
href="https://github.com/TanStack/virtual/tree/HEAD/packages/react-virtual/issues/1184">#1184</a>)</li>
<li><a
href="https://github.com/TanStack/virtual/commit/fbf3bdbe38a2b1bf22c65a89752b7b9c07a77266"><code>fbf3bdb</code></a>
feat(virtual-core): add <code>useCachedMeasurements</code> option to
preserve sizes when...</li>
<li><a
href="https://github.com/TanStack/virtual/commit/13dec399608c35c88ae0ac5346bb2b425a1550cc"><code>13dec39</code></a>
docs: add directDomUpdates and directDomUpdatesMode options (<a
href="https://github.com/TanStack/virtual/tree/HEAD/packages/react-virtual/issues/1185">#1185</a>)</li>
<li><a
href="https://github.com/TanStack/virtual/commit/c33902ffb88d894d0fd6d800d0a39a1bbda09a5e"><code>c33902f</code></a>
ci: Version Packages (<a
href="https://github.com/TanStack/virtual/tree/HEAD/packages/react-virtual/issues/1182">#1182</a>)</li>
<li><a
href="https://github.com/TanStack/virtual/commit/d789c6ea036963382eea3440783f84151ed6691d"><code>d789c6e</code></a>
ci: Version Packages (<a
href="https://github.com/TanStack/virtual/tree/HEAD/packages/react-virtual/issues/1181">#1181</a>)</li>
<li><a
href="https://github.com/TanStack/virtual/commit/73e115d53faf01f073bc4a7bd71ee0139307f4a8"><code>73e115d</code></a>
feat(react-virtual): add directDomUpdates for re-render-free scroll
positioni...</li>
<li>Additional commits viewable in <a
href="https://github.com/TanStack/virtual/commits/@tanstack/react-virtual@3.14.3/packages/react-virtual">compare
view</a></li>
</ul>
</details>
<br />
Updates `css-tree` from 3.1.0 to 3.2.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/csstree/csstree/releases">css-tree's
releases</a>.</em></p>
<blockquote>
<h2>3.2.1</h2>
<ul>
<li>Fixed parsing of nested function in a group in definition syntax (<a
href="https://redirect.github.com/csstree/csstree/issues/358">#358</a>)</li>
</ul>
<h2>3.2.0</h2>
<ul>
<li>Added <code>"sideEffects": false</code> in
<code>package.json</code></li>
<li>Added <code>list</code> option to the <code>parse()</code> method to
specify whether the parser should produce a <code>List</code> (by
default, <code>list: true</code>) or an array (<code>list: false</code>)
for node's children (e.g., <code>SelectorList</code>,
<code>Block</code>, etc.)</li>
<li>Added support for <a
href="https://www.w3.org/TR/css-values-4/#component-functions">Functional
Notation</a> in definition syntax (for now by wrapping function
arguments into an implicit group when necessary, see <a
href="https://redirect.github.com/csstree/csstree/issues/292">#292</a>)</li>
<li>Added support for stacked multipliers <code>{A}?</code> and
<code>{A,B}?</code> according to spec in definition syntax parsing (<a
href="https://redirect.github.com/csstree/csstree/issues/346">#346</a>)</li>
<li>Added math functions support in syntax matching (e.g.,
<code>min()</code>, <code>max()</code>, etc.) (<a
href="https://redirect.github.com/csstree/csstree/issues/344">#344</a>)</li>
<li>Added <code>onToken</code> option to the <code>parse()</code>
method, which can be either an array or a function:
<ul>
<li>When the value is an array, it is populated with objects <code>{
type, start, end }</code> (token type, and its start and end
offsets).</li>
<li>When the value is a function, it accepts <code>type</code>,
<code>start</code>, <code>end</code>, and <code>index</code> parameters,
and is invoked with a token API as <code>this</code>, enabling advanced
token handling (see <a
href="https://github.com/csstree/csstree/blob/HEAD/docs/parsing.md#ontoken">onToken</a>).
For example, the following demonstrates checking if all block tokens
have matching pairs:
<pre lang="js"><code>parse(css, {
onToken(type, start, end, index) {
if (this.isBlockOpenerTokenType(type)) {
if (this.getBlockPairTokenIndex(index) === -1) {
console.warn('No closing pair for', this.getTokenValue(index),
this.getRangeLocation(start, end));
}
} else if (this.isBlockCloserTokenType(type)) {
if (this.getBlockPairTokenIndex(index) === -1) {
console.warn('No opening pair for', this.getTokenValue(index),
this.getRangeLocation(start, end));
}
}
}
});
</code></pre>
</li>
</ul>
</li>
<li>Extended <code>TokenStream</code> with the following methods:
<ul>
<li><code>getTokenEnd(tokenIndex)</code> – returns the token's end
offset by index, complementing
<code>getTokenStart(tokenIndex)</code></li>
<li><code>getTokenType(tokenIndex)</code> – returns the token's type by
index</li>
<li><code>isBlockOpenerTokenType(tokenType)</code> – returns
<code>true</code> for <code><function-token></code>,
<code><(-token></code>, <code><[-token></code>, and
<code><{-token></code></li>
<li><code>isBlockCloserTokenType(tokenType)</code> – returns
<code>true</code> for <code><)-token></code>,
<code><]-token></code>, and <code><}-token></code></li>
<li><code>getBlockTokenPairIndex(tokenIndex)</code> – returns the index
of the pair token for a block, or <code>-1</code> if no pair exists</li>
</ul>
</li>
<li>Changed <code>generate()</code> to not auto insert whitespaces
between tokens for raw values (<a
href="https://redirect.github.com/csstree/csstree/issues/356">#356</a>)</li>
<li>Fixed <code>fork()</code> to extend <code>node</code> definitions
instead of overriding them. For example, <code>fork({ node: { Dimension:
{ generate() { /* ... */ } } } })</code> will now update only the
<code>generate()</code> method on the <code>Dimension</code> node, while
inheriting all other properties from the previous syntax
definition.</li>
<li>Bumped <code>mdn/data</code> to 2.27.1 and various fixes in
syntaxes</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/csstree/csstree/blob/master/CHANGELOG.md">css-tree's
changelog</a>.</em></p>
<blockquote>
<h2>3.2.1 (March 5, 2026)</h2>
<ul>
<li>Fixed parsing of nested function in a group in definition syntax (<a
href="https://redirect.github.com/csstree/csstree/issues/358">#358</a>)</li>
</ul>
<h2>3.2.0 (March 4, 2026)</h2>
<ul>
<li>Added <code>"sideEffects": false</code> in
<code>package.json</code></li>
<li>Added <code>list</code> option to the <code>parse()</code> method to
specify whether the parser should produce a <code>List</code> (by
default, <code>list: true</code>) or an array (<code>list: false</code>)
for node's children (e.g., <code>SelectorList</code>,
<code>Block</code>, etc.)</li>
<li>Added support for <a
href="https://www.w3.org/TR/css-values-4/#component-functions">Functional
Notation</a> in definition syntax (for now by wrapping function
arguments into an implicit group when necessary, see <a
href="https://redirect.github.com/csstree/csstree/issues/292">#292</a>)</li>
<li>Added support for stacked multipliers <code>{A}?</code> and
<code>{A,B}?</code> according to spec in definition syntax parsing (<a
href="https://redirect.github.com/csstree/csstree/issues/346">#346</a>)</li>
<li>Added math functions support in syntax matching (e.g.,
<code>min()</code>, <code>max()</code>, etc.) (<a
href="https://redirect.github.com/csstree/csstree/issues/344">#344</a>)</li>
<li>Added <code>onToken</code> option to the <code>parse()</code>
method, which can be either an array or a function:
<ul>
<li>When the value is an array, it is populated with objects <code>{
type, start, end }</code> (token type, and its start and end
offsets).</li>
<li>When the value is a function, it accepts <code>type</code>,
<code>start</code>, <code>end</code>, and <code>index</code> parameters,
and is invoked with a token API as <code>this</code>, enabling advanced
token handling (see <a
href="https://github.com/csstree/csstree/blob/master/docs/parsing.md#ontoken">onToken</a>).
For example, the following demonstrates checking if all block tokens
have matching pairs:
<pre lang="js"><code>parse(css, {
onToken(type, start, end, index) {
if (this.isBlockOpenerTokenType(type)) {
if (this.getBlockPairTokenIndex(index) === -1) {
console.warn('No closing pair for', this.getTokenValue(index),
this.getRangeLocation(start, end));
}
} else if (this.isBlockCloserTokenType(type)) {
if (this.getBlockPairTokenIndex(index) === -1) {
console.warn('No opening pair for', this.getTokenValue(index),
this.getRangeLocation(start, end));
}
}
}
});
</code></pre>
</li>
</ul>
</li>
<li>Extended <code>TokenStream</code> with the following methods:
<ul>
<li><code>getTokenEnd(tokenIndex)</code> – returns the token's end
offset by index, complementing
<code>getTokenStart(tokenIndex)</code></li>
<li><code>getTokenType(tokenIndex)</code> – returns the token's type by
index</li>
<li><code>isBlockOpenerTokenType(tokenType)</code> – returns
<code>true</code> for <code><function-token></code>,
<code><(-token></code>, <code><[-token></code>, and
<code><{-token></code></li>
<li><code>isBlockCloserTokenType(tokenType)</code> – returns
<code>true</code> for <code><)-token></code>,
<code><]-token></code>, and <code><}-token></code></li>
<li><code>getBlockTokenPairIndex(tokenIndex)</code> – returns the index
of the pair token for a block, or <code>-1</code> if no pair exists</li>
</ul>
</li>
<li>Changed <code>generate()</code> to not auto insert whitespaces
between tokens for raw values (<a
href="https://redirect.github.com/csstree/csstree/issues/356">#356</a>)</li>
<li>Fixed <code>fork()</code> to extend <code>node</code> definitions
instead of overriding them. For example, <code>fork({ node: { Dimension:
{ generate() { /* ... */ } } } })</code> will now update only the
<code>generate()</code> method on the <code>Dimension</code> node, while
inheriting all other properties from the previous syntax
definition.</li>
<li>Bumped <code>mdn/data</code> to 2.27.1 and various fixes in
syntaxes</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/csstree/csstree/commit/8a6caba481be4cae4b0e8690af643ff8e59271f2"><code>8a6caba</code></a>
3.2.1</li>
<li><a
href="https://github.com/csstree/csstree/commit/7c7f9ee13444735c1056b441b2a28caaa3bcd41f"><code>7c7f9ee</code></a>
Fix parsing of nested function in a group in definition syntax (fixes <a
href="https://redirect.github.com/csstree/csstree/issues/358">#358</a>)</li>
<li><a
href="https://github.com/csstree/csstree/commit/c42fee2f26d212e8edbce50477bf854ed933df00"><code>c42fee2</code></a>
3.2.0</li>
<li><a
href="https://github.com/csstree/csstree/commit/aad332e9f07d67549141d9bfcd63f9ed8a9ad1c5"><code>aad332e</code></a>
Add Function Notation in syntax definition (<a
href="https://redirect.github.com/csstree/csstree/issues/292">#292</a>)</li>
<li><a
href="https://github.com/csstree/csstree/commit/264d09d4a7ad1ab4d2541f595d507c4400bc6934"><code>264d09d</code></a>
Fix GitHub actions</li>
<li><a
href="https://github.com/csstree/csstree/commit/5766a656b6fde567955780c04a655a1951aea848"><code>5766a65</code></a>
Fix syntax definition issues</li>
<li><a
href="https://github.com/csstree/csstree/commit/307d8df80246910bb4130673176f45e552b1d8eb"><code>307d8df</code></a>
Bump deps</li>
<li><a
href="https://github.com/csstree/csstree/commit/c008c0174051b383d029f42c86d16428c6e64571"><code>c008c01</code></a>
Add support for stacked multipliers <code>{A}?</code> and
<code>{A,B}?</code> in definition syntax ...</li>
<li><a
href="https://github.com/csstree/csstree/commit/20f56718315e832a70d4c761ae037a78187dec29"><code>20f5671</code></a>
Add <code>list</code> option for parser (fixes <a
href="https://redirect.github.com/csstree/csstree/issues/348">#348</a>)</li>
<li><a
href="https://github.com/csstree/csstree/commit/39a0c7289fdb5d7698f2cc066e5146ffc067d50b"><code>39a0c72</code></a>
Update nodejs versions</li>
<li>Additional commits viewable in <a
href="https://github.com/csstree/csstree/compare/v3.1.0...v3.2.1">compare
view</a></li>
</ul>
</details>
<br />
Updates `monaco-yaml` from 5.4.0 to 5.5.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/remcohaszing/monaco-yaml/releases">monaco-yaml's
releases</a>.</em></p>
<blockquote>
<h2>v5.5.0</h2>
<h2>What's Changed</h2>
<ul>
<li>39b2e9e Update to yaml-language-server 1.23.0</li>
<li>d472fd9 Make optional features togglable</li>
<li>33c426a Implement code lens support</li>
<li>fbe60fd Implement rename support</li>
<li>fbe60fd Declare and implement new language service options</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/remcohaszing/monaco-yaml/compare/v5.4.1...v5.5.0">https://github.com/remcohaszing/monaco-yaml/compare/v5.4.1...v5.5.0</a></p>
<h2>v5.4.1</h2>
<h2>What's Changed</h2>
<ul>
<li>d095257 Add getOptions method to retrieve current configuration of
monaco-yaml by <a
href="https://github.com/pmahdicheraghi"><code>@pmahdicheraghi</code></a>
in <a
href="https://redirect.github.com/remcohaszing/monaco-yaml/pull/280">remcohaszing/monaco-yaml#280</a></li>
<li>187d130 Use OIDC for publishing to npm</li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/pmahdicheraghi"><code>@pmahdicheraghi</code></a>
made their first contribution in <a
href="https://redirect.github.com/remcohaszing/monaco-yaml/pull/280">remcohaszing/monaco-yaml#280</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/remcohaszing/monaco-yaml/compare/v5.4.0...v5.4.1">https://github.com/remcohaszing/monaco-yaml/compare/v5.4.0...v5.4.1</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/remcohaszing/monaco-yaml/commit/9a15c651c95f5ab4c6b16c42f6570ab0540c641a"><code>9a15c65</code></a>
5.5.1</li>
<li><a
href="https://github.com/remcohaszing/monaco-yaml/commit/9782fb3f87ce54581e788eb45d3e28f1dbbc6e37"><code>9782fb3</code></a>
Use staged publishing</li>
<li><a
href="https://github.com/remcohaszing/monaco-yaml/commit/9a73984413155aa76f7410cb501985b09457ca87"><code>9a73984</code></a>
Remove useless argument form eslint in CI</li>
<li><a
href="https://github.com/remcohaszing/monaco-yaml/commit/cc92ff9a3b947f6b45f15a9397275c7e6a4e8638"><code>cc92ff9</code></a>
Use Node.js 26 in CI</li>
<li><a
href="https://github.com/remcohaszing/monaco-yaml/commit/44195594a422b0a9937e9a19e57cc7ec35da06d5"><code>4419559</code></a>
Fix the dist ignore pattern</li>
<li><a
href="https://github.com/remcohaszing/monaco-yaml/commit/93a35d2dbe51fc342260d8e45c93dcec9b3db19a"><code>93a35d2</code></a>
Cleanup disposables in tests</li>
<li><a
href="https://github.com/remcohaszing/monaco-yaml/commit/4abd6b71ec653e85203b83283d260bb57d19f747"><code>4abd6b7</code></a>
Return real values from <code>defaultMeta</code> methods on
<code>ajv</code> instances (<a
href="https://redirect.github.com/remcohaszing/monaco-yaml/issues/283">#283</a>)</li>
<li><a
href="https://github.com/remcohaszing/monaco-yaml/commit/47f405b7484c82538b028d41c67d490cefd136b5"><code>47f405b</code></a>
Update lockfile</li>
<li><a
href="https://github.com/remcohaszing/monaco-yaml/commit/ffe35fdf8ccf94b1bc6eaa474166a391c0a37c98"><code>ffe35fd</code></a>
5.5.0</li>
<li><a
href="https://github.com/remcohaszing/monaco-yaml/commit/daa57894c99549d68447f45556ac1fcf8ca499ad"><code>daa5789</code></a>
Stub ajv-i18n</li>
<li>Additional commits viewable in <a
href="https://github.com/remcohaszing/monaco-yaml/compare/v5.4.0...v5.5.1">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new
releaser for monaco-yaml since your current version.</p>
</details>
<br />
Updates `overlayscrollbars` from 2.14.0 to 2.16.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/KingSora/OverlayScrollbars/blob/master/packages/overlayscrollbars/CHANGELOG.md">overlayscrollbars's
changelog</a>.</em></p>
<blockquote>
<h2>2.16.0</h2>
<h3>Features</h3>
<ul>
<li>The package now contains an additional css file
<code>overlayscrollbars.scriptingenabled.css</code> which uses the
<code>scripting: enabled</code> media query to enable the
<code>data-overlayscrollbars-initialize</code> styles. This ensures that
native scrollbars stay visible when JavaScript is not executed. For
browser backwards compatibility reasons this can't be the default. <a
href="https://redirect.github.com/KingSora/OverlayScrollbars/issues/751">#751</a></li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>Make sure the expensive "non default flow direction" check
is not running when it shouldn't. <a
href="https://redirect.github.com/KingSora/OverlayScrollbars/issues/756">#756</a></li>
</ul>
<h2>2.15.1</h2>
<h3>Improvements</h3>
<ul>
<li>The <code>instance.sleep</code> function will now also put the
<code>scrollbars.autoHide</code> timer to sleep.</li>
</ul>
<h2>2.15.0</h2>
<h3>Features</h3>
<ul>
<li>The option <code>options.scrollbars.clickScroll</code> now also
accepts a function which can be used to customize the click scroll
behavior. <a
href="https://redirect.github.com/KingSora/OverlayScrollbars/issues/754">#754</a></li>
<li>Added the <code>instance.sleep</code> function. Can be used to
optimize performance or visual feedback. (for example during animations)
<a
href="https://redirect.github.com/KingSora/OverlayScrollbars/pull/755">#755</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/KingSora/OverlayScrollbars/commit/dfa819688a529db0085c6416a94e816bfbaeaf29"><code>dfa8196</code></a>
v2.16.0</li>
<li><a
href="https://github.com/KingSora/OverlayScrollbars/commit/0157bf3992285b1ee7084ccbf17e3e74f8195011"><code>0157bf3</code></a>
deploy</li>
<li><a
href="https://github.com/KingSora/OverlayScrollbars/commit/c8a082756e5cc6734dc154862f8eb2de0dcaf7f0"><code>c8a0827</code></a>
improve tests and fix codecov</li>
<li><a
href="https://github.com/KingSora/OverlayScrollbars/commit/9ac5d684f3fe6b93535fffc58bbf720292e82fd8"><code>9ac5d68</code></a>
add animation test</li>
<li><a
href="https://github.com/KingSora/OverlayScrollbars/commit/85abc7c55c4b3eb5d22b9298597f6e819f6be017"><code>85abc7c</code></a>
make adjustMeasuredScrollCoordinates less 'strict'</li>
<li><a
href="https://github.com/KingSora/OverlayScrollbars/commit/7dc0f258c31835a4759bf5052968a8ce8ddb08b9"><code>7dc0f25</code></a>
fix getMeasuredScrollCoordinates short circuit</li>
<li><a
href="https://github.com/KingSora/OverlayScrollbars/commit/07535874718a217dce239310e4103b2c272e43fb"><code>0753587</code></a>
export more types</li>
<li><a
href="https://github.com/KingSora/OverlayScrollbars/commit/ade6e45d84e434355e075ed58add75c431eb3b3e"><code>ade6e45</code></a>
v2.15.1</li>
<li><a
href="https://github.com/KingSora/OverlayScrollbars/commit/9f6c8b2dc614ab4b3a7a6b659a4d3a895906966e"><code>9f6c8b2</code></a>
build & improve docs for v2.15.0</li>
<li><a
href="https://github.com/KingSora/OverlayScrollbars/commit/28d3588212ccf587fed4c7534f4f60006e12f7a4"><code>28d3588</code></a>
v2.15.0</li>
<li>Additional commits viewable in <a
href="https://github.com/KingSora/OverlayScrollbars/commits/v2.16.0/packages/overlayscrollbars">compare
view</a></li>
</ul>
</details>
<br />
Updates `react-frame-component` from 5.2.7 to 5.3.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/ryanseddon/react-frame-component/releases">react-frame-component's
releases</a>.</em></p>
<blockquote>
<h2>v5.3.2</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p>f191d58: Add types condition to package.json exports to fix
TypeScript resolution with TSGo and modern ESM tools</p>
</li>
<li>
<p>1820bc3: ## Fix race condition in getMountTarget() (issue <a
href="https://redirect.github.com/ryanseddon/react-frame-component/issues/250">#250</a>)</p>
<p>Fixed "Cannot read properties of null" errors when
<code>initialContent</code> changes rapidly by adding null checks for
<code>doc</code> and <code>doc.body</code> in
<code>getMountTarget()</code>.</p>
<h3>Changes</h3>
<ul>
<li><strong>src/Frame.jsx</strong>: Added null check in
<code>getMountTarget()</code> to handle cases when iframe document is
temporarily unavailable during rapid rerenders</li>
</ul>
</li>
</ul>
<h2>v5.3.0</h2>
<h2>What's Changed</h2>
<p>Add fallback to <code>document.write()</code> for initial frame
rendering via <code>dangerouslyUseDocWrite</code> prop to support
libraries like Repcaptcha and Google Maps that depend on the frame's
location/origin.</p>
<p><strong>PR <a
href="https://redirect.github.com/ryanseddon/react-frame-component/issues/248">#248</a>:</strong>
Add document.write() fallback (<a
href="https://github.com/andrewpye"><code>@andrewpye</code></a>)</p>
<hr />
<p><em>Previous releases: <a
href="https://github.com/ryanseddon/react-frame-component/releases">https://github.com/ryanseddon/react-frame-component/releases</a></em></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/ryanseddon/react-frame-component/blob/master/CHANGELOG.md">react-frame-component's
changelog</a>.</em></p>
<blockquote>
<h2>5.3.2</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p>f191d58: Add types condition to package.json exports to fix
TypeScript resolution with TSGo and modern ESM tools</p>
</li>
<li>
<p>1820bc3: ## Fix race condition in getMountTarget() (issue <a
href="https://redirect.github.com/ryanseddon/react-frame-component/issues/250">#250</a>)</p>
<p>Fixed "Cannot read properties of null" errors when
<code>initialContent</code> changes rapidly by adding null checks for
<code>doc</code> and <code>doc.body</code> in
<code>getMountTarget()</code>.</p>
<h3>Changes</h3>
<ul>
<li><strong>src/Frame.jsx</strong>: Added null check in
<code>getMountTarget()</code> to handle cases when iframe document is
temporarily unavailable during rapid rerenders</li>
</ul>
</li>
</ul>
<h2>5.3.1</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p>14c215c: Fix React 19 and Vite compatibility by externalizing
react/jsx-runtime</p>
<p>The ESM and UMD builds were incorrectly bundling react/jsx-runtime
inline from CommonJS source,
which caused two issues:</p>
<ol>
<li><strong>ESM builds contained
<code>__require("react")</code> calls</strong> - This failed
in browser ESM environments
with "Could not dynamically require react" errors when using
Vite.</li>
<li><strong>UMD builds referenced
<code>__SECRET_INTERNALS_DO_NOT_USE_OR_YOU_WILL_BE_FIRED.ReactCurrentOwner</code></strong>
-
This internal API was removed in React 19, causing "Cannot read
properties of undefined" errors.</li>
</ol>
<p>The fix adds <code>react/jsx-runtime</code> and
<code>react/jsx-dev-runtime</code> to the external dependencies list
in the Vite configuration. This ensures the JSX transform is loaded from
the proper module format
rather than being bundled inline from CJS source.</p>
<p><strong>Bundle size improvements:</strong></p>
<ul>
<li>ESM: 35.7 KB → 4.6 KB (-87%)</li>
<li>UMD: 37.9 KB → 6.8 KB (-82%)</li>
</ul>
<p>Fixes <a
href="https://redirect.github.com/ryanseddon/react-frame-component/issues/280">#280</a></p>
</li>
</ul>
<h2>5.3.0</h2>
<h3>Minor Changes</h3>
<ul>
<li>8d922c3: Add fallback to document.write() for initial frame
rendering via dangerouslyUseDocWrite prop to support libraries like
Repcaptcha and Google Maps that depend on the frame's
location/origin.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/ryanseddon/react-frame-component/commit/3f4cb97f4aed9671d7bfd5dcd67bdfed62aa661d"><code>3f4cb97</code></a>
Update npm to latest for OIDC trusted publishing (<a
href="https://redirect.github.com/ryanseddon/react-frame-component/issues/290">#290</a>)</li>
<li><a
href="https://github.com/ryanseddon/react-frame-component/commit/eddb677ed8f0d3648c95273d7c18de64cf57a14f"><code>eddb677</code></a>
Revert "Update npm to latest for OIDC trusted publishing"</li>
<li><a
href="https://github.com/ryanseddon/react-frame-component/commit/194d769e219b56f824b12762505736dabe136bba"><code>194d769</code></a>
Update npm to latest for OIDC trusted publishing</li>
<li><a
href="https://github.com/ryanseddon/react-frame-component/commit/ed62652358acbb135cbcc6489f233e37ea692716"><code>ed62652</code></a>
Version Packages (<a
href="https://redirect.github.com/ryanseddon/react-frame-component/issues/289">#289</a>)</li>
<li><a
href="https://github.com/ryanseddon/react-frame-component/commit/fb302a0993071eea968b694e2d457fe9696bf2dc"><code>fb302a0</code></a>
Bump follow-redirects from 1.15.0 to 1.15.11</li>
<li><a
href="https://github.com/ryanseddon/react-frame-component/commit/c44e3857fcf4c77b6236a90b6fb6821c83d8bc1b"><code>c44e385</code></a>
Merge pull request <a
href="https://redirect.github.com/ryanseddon/react-frame-component/issues/285">#285</a>
from ryanseddon/dependabot/npm_and_yarn/picomatch-2.3.2</li>
<li><a
href="https://github.com/ryanseddon/react-frame-component/commit/722560afb592337071dce9962a9f8b20e5fe1f2a"><code>722560a</code></a>
Bump picomatch from 2.3.1 to 2.3.2</li>
<li><a
href="https://github.com/ryanseddon/react-frame-component/commit/d6b8e309ab5a3de790d19ff0c8cbc61975ac4487"><code>d6b8e30</code></a>
Merge pull request <a
href="https://redirect.github.com/ryanseddon/react-frame-component/issues/288">#288</a>
from ryanseddon/fix/issue-287-types-exports</li>
<li><a
href="https://github.com/ryanseddon/react-frame-component/commit/f191d58422dc435879f611236affe8bb9644bbb2"><code>f191d58</code></a>
Add changeset</li>
<li><a
href="https://github.com/ryanseddon/react-frame-component/commit/1820bc3a5ca73bba5b687134f073451f7e519b01"><code>1820bc3</code></a>
fix: add null check in getMountTarget to prevent race condition (<a
href="https://redirect.github.com/ryanseddon/react-frame-component/issues/286">#286</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/ryanseddon/react-frame-component/compare/v5.2.7...v5.3.2">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new
releaser for react-frame-component since your current version.</p>
</details>
<br />
Updates `semver` from 7.7.3 to 7.8.4
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/npm/node-semver/releases">semver's
releases</a>.</em></p>
<blockquote>
<h2>v7.8.4</h2>
<h2><a
href="https://github.com/npm/node-semver/compare/v7.8.3...v7.8.4">7.8.4</a>
(2026-06-09)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><a
href="https://github.com/npm/node-semver/commit/e583226b165edd6530502cf731eda334527af6fe"><code>e583226</code></a>
<a href="https://redirect.github.com/npm/node-semver/pull/874">#874</a>
reject numeric segments after x-ranges (<a
href="https://github.com/pupuking723"><code>@pupuking723</code></a>)</li>
</ul>
<h2>v7.8.3</h2>
<h2><a
href="https://github.com/npm/node-semver/compare/v7.8.2...v7.8.3">7.8.3</a>
(2026-06-08)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><a
href="https://github.com/npm/node-semver/commit/046da7f527cc72a482b5dea8cb59392be65bf186"><code>046da7f</code></a>
<a href="https://redirect.github.com/npm/node-semver/pull/872">#872</a>
align caret includePrerelease lower bounds (<a
href="https://redirect.github.com/npm/node-semver/issues/872">#872</a>)
(<a
href="https://github.com/wayyoungboy"><code>@wayyoungboy</code></a>)</li>
</ul>
<h3>Chores</h3>
<ul>
<li><a
href="https://github.com/npm/node-semver/commit/3485ddadb2ca0d0691392ee5ce620072e1b1e040"><code>3485dda</code></a>
<a href="https://redirect.github.com/npm/node-semver/pull/866">#866</a>
bump <code>@npmcli/eslint-config</code> from 6.0.1 to 7.0.0 (<a
href="https://redirect.github.com/npm/node-semver/issues/866">#866</a>)
(<a
href="https://github.com/dependabot"><code>@dependabot</code></a>[bot])</li>
</ul>
<h2>v7.8.2</h2>
<h2><a
href="https://github.com/npm/node-semver/compare/v7.8.1...v7.8.2">7.8.2</a>
(2026-06-04)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><a
href="https://github.com/npm/node-semver/commit/bea6028694a75e840f48b288ac019e9644cfe6e8"><code>bea6028</code></a>
<a href="https://redirect.github.com/npm/node-semver/pull/870">#870</a>
increment dotted prerelease identifiers (<a
href="https://redirect.github.com/npm/node-semver/issues/870">#870</a>)
(<a href="https://github.com/liuzemei"><code>@liuzemei</code></a>, <a
href="https://github.com/SheldonNeo"><code>@SheldonNeo</code></a>)</li>
</ul>
<h2>v7.8.1</h2>
<h2><a
href="https://github.com/npm/node-semver/compare/v7.8.0...v7.8.1">7.8.1</a>
(2026-05-21)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><a
href="https://github.com/npm/node-semver/commit/17aa702d91166472b197a2ea768f085083bee2e4"><code>17aa702</code></a>
<a href="https://redirect.github.com/npm/node-semver/pull/869">#869</a>
strip build metadata before comparator trimming (<a
href="https://redirect.github.com/npm/node-semver/issues/869">#869</a>)
(<a
href="https://github.com/owlstronaut"><code>@owlstronaut</code></a>)</li>
<li><a
href="https://github.com/npm/node-semver/commit/5f3ca133e040210b6ea80c350a1d61d9da02e722"><code>5f3ca13</code></a>
<a href="https://redirect.github.com/npm/node-semver/pull/867">#867</a>
handle prerelease bounds in subset (<a
href="https://redirect.github.com/npm/node-semver/issues/867">#867</a>)
(<a
href="https://github.com/puneetdixit200"><code>@puneetdixit200</code></a>,
Puneet Dixit)</li>
</ul>
<h2>v7.8.0</h2>
<h2><a
href="https://github.com/npm/node-semver/compare/v7.7.4...v7.8.0">7.8.0</a>
(2026-05-08)</h2>
<h3>Features</h3>
<ul>
<li><a
href="https://github.com/npm/node-semver/commit/0d0a0a2582fb1486bc6cd255ba18819c441ed149"><code>0d0a0a2</code></a>
<a href="https://redirect.github.com/npm/node-semver/pull/855">#855</a>
Add <code>truncate</code> function (<a
href="https://redirect.github.com/npm/node-semver/issues/855">#855</a>)
(<a href="https://github.com/pjohnmeyer"><code>@pjohnmeyer</code></a>,
<a
href="https://github.com/owlstronaut"><code>@owlstronaut</code></a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><a
href="https://github.com/npm/node-semver/commit/3905343045dc293c3694d5e46170b1bb1fb5cf58"><code>3905343</code></a>
<a href="https://redirect.github.com/npm/node-semver/pull/859">#859</a>
Warn when defaulting to --inc=patch in CLI (<a
href="https://github.com/pjohnmeyer"><code>@pjohnmeyer</code></a>)</li>
</ul>
<h3>Documentation</h3>
<ul>
<li><a
href="https://github.com/npm/node-semver/commit/c368af612e521767e960419e6388c5129c857984"><code>c368af6</code></a>
<a href="https://redirect.github.com/npm/node-semver/pull/853">#853</a>
fix typos in documentation (<a
href="https://redirect.github.com/npm/node-semver/issues/853">#853</a>)
(<a
href="https://github.com/ankitkumar572005"><code>@ankitkumar572005</code></a>)</li>
<li><a
href="https://github.com/npm/node-semver/commit/37776c31e2f3448fd852c975888e37b03efe9afe"><code>37776c3</code></a>
<a href="https://redirect.github.com/npm/node-semver/pull/846">#846</a>
fix BNF grammar to distinguish prerelease from build identifiers (<a
href="https://redirect.github.com/npm/node-semver/issues/846">#846</a>)
(<a href="https://github.com/abhu85"><code>@abhu85</code></a>, <a
href="https://github.com/claude"><code>@claude</code></a>)</li>
</ul>
<h3>Chores</h3>
<ul>
<li><a
href="https://github.com/npm/node-semver/commit/9542e09ebcd89e916777d35eba868061dad9ed7d"><code>9542e09</code></a>
<a href="https://redirect.github.com/npm/node-semver/pull/860">#860</a>
template-oss-apply (<a
href="https://github.com/owlstronaut"><code>@owlstronaut</code></a>)</li>
<li><a
href="https://github.com/npm/node-semver/commit/937bc2cd8721db14745c9be123078c44e77a86ef"><code>937bc2c</code></a>
<a href="https://redirect.github.com/npm/node-semver/pull/860">#860</a>
<code>template-oss-apply@5.0.0</code> (<a
href="https://github.com/owlstronaut"><code>@owlstronaut</code></a>)</li>
<li><a
href="https://github.com/npm/node-semver/commit/6946fefa57bd5e191871a4738b28ca673e003527"><code>6946fef</code></a>
<a href="https://redirect.github.com/npm/node-semver/pull/852">#852</a>
bump <code>@npmcli/template-oss</code> from 4.29.0 to 4.30.0 (<a
href="https://redirect.github.com/npm/node-semver/issues/852">#852</a>)
(<a
href="https://github.com/dependabot"><code>@dependabot</code></a>[bot],
<a
href="https://github.com/npm-cli-bot"><code>@npm-cli-bot</code></a>)</li>
</ul>
<h2>v7.7.4</h2>
<h2><a
href="https://github.com/npm/node-semver/compare/v7.7.3...v7.7.4">7.7.4</a>
(2026-01-16)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><a
href="https://github.com/npm/node-semver/commit/a29faa5f3309a01c8e5aeb965fb5c02c4c4e80e2"><code>a29faa5</code></a>
<a href="https://redirect.github.com/npm/node-semver/pull/835">#835</a>
cli: pass options to semver.valid() for loose version validation (<a
href="https://redirect.github.com/npm/node-semver/issues/835">#835</a>)
(<a
href="https://github.com/mldangelo"><code>@mldangelo</code></a>)</li>
</ul>
<h3>Documentation</h3>
<ul>
<li><a
href="https://github.com/npm/node-semver/commit/1d28d5e82de16163daf721a7c76fff93e0d333ab"><code>1d28d5e</code></a>
<a href="https://redirect.github.com/npm/node-semver/pull/836">#836</a>
fix typos and update -n CLI option documentation (<a
href="https://redirect.github.com/npm/node-semver/issues/836">#836</a>)
(<a
href="https://github.com/mldangelo"><code>@mldangelo</code></a>)</li>
</ul>
<h3>Dependencies</h3>
<ul>
<li><a
href="https://github.com/npm/node-semver/commit/120968b76760cb0db85a72bde2adedd0e9628793"><code>120968b</code></a>
<a href="https://redirect.github.com/npm/node-semver/pull/840">#840</a>
<code>@npmcli/template-oss@4.29.0</code> (<a
href="https://redirect.github.com/npm/node-semver/issues/840">#840</a>)</li>
</ul>
<h3>Chores</h3>
<ul>
<li><a
href="https://github.com/npm/node-semver/commit/44d7130c60cedd3703048aa671bb1d659b79ab07"><code>44d7130</code></a>
<a href="https://redirect.github.com/npm/node-semver/pull/824">#824</a>
bump <code>@npmcli/eslint-config</code> from 5.1.0 to 6.0.0 (<a
href="https://redirect.github.com/npm/node-semver/issues/824">#824</a>)
(<a
href="https://github.com/dependabot"><code>@dependabot</code></a>[bot])</li>
<li><a
href="https://github.com/npm/node-semver/commit/70735767b68a1775eb67ac816b183b4a422101f4"><code>7073576</code></a>
<a href="https://redirect.github.com/npm/node-semver/pull/820">#820</a>
reorder parameters in invalid-versions.js test (<a
href="https://redirect.github.com/npm/node-semver/issues/820">#820</a>)
(<a href="https://github.com/reggi"><code>@reggi</code></a>)</li>
<li><a
href="https://github.com/npm/node-semver/commit/5816d4cfd6d85169527a2bc22fbd5bf4c64f34e3"><code>5816d4c</code></a>
<a href="https://redirect.github.com/npm/node-semver/pull/829">#829</a>
bump <code>@npmcli/template-oss</code> from 4.28.0 to 4.28.1 (<a
href="https://redirect.github.com/npm/node-semver/issues/829">#829</a>)
(<a
href="https://github.com/dependabot"><code>@dependabot</code></a>[bot],
<a
href="https://github.com/npm-cli-bot"><code>@npm-cli-bot</code></a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/npm/node-semver/blob/main/CHANGELOG.md">semver's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/npm/node-semver/compare/v7.8.3...v7.8.4">7.8.4</a>
(2026-06-09)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><a
href="https://github.com/npm/node-semver/commit/e583226b165edd6530502cf731eda334527af6fe"><code>e583226</code></a>
<a href="https://redirect.github.com/npm/node-semver/pull/874">#874</a>
reject numeric segments after x-ranges (<a
href="https://github.com/pupuking723"><code>@pupuking723</code></a>)</li>
</ul>
<h2><a
href="https://github.com/npm/node-semver/compare/v7.8.2...v7.8.3">7.8.3</a>
(2026-06-08)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><a
href="https://github.com/npm/node-semver/commit/046da7f527cc72a482b5dea8cb59392be65bf186"><code>046da7f</code></a>
<a href="https://redirect.github.com/npm/node-semver/pull/872">#872</a>
align caret includePrerelease lower bounds (<a
href="https://redirect.github.com/npm/node-semver/issues/872">#872</a>)
(<a
href="https://github.com/wayyoungboy"><code>@wayyoungboy</code></a>)</li>
</ul>
<h3>Chores</h3>
<ul>
<li><a
href="https://github.com/npm/node-semver/commit/3485ddadb2ca0d0691392ee5ce620072e1b1e040"><code>3485dda</code></a>
<a href="https://redirect.github.com/npm/node-semver/pull/866">#866</a>
bump <code>@npmcli/eslint-config</code> from 6.0.1 to 7.0.0 (<a
href="https://redirect.github.com/npm/node-semver/issues/866">#866</a>)
(<a
href="https://github.com/dependabot"><code>@dependabot</code></a>[bot])</li>
</ul>
<h2><a
href="https://github.com/npm/node-semver/compare/v7.8.1...v7.8.2">7.8.2</a>
(2026-06-04)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><a
href="https://github.com/npm/node-semver/commit/bea6028694a75e840f48b288ac019e9644cfe6e8"><code>bea6028</code></a>
<a href="https://redirect.github.com/npm/node-semver/pull/870">#870</a>
increment dotted prerelease identifiers (<a
href="https://redirect.github.com/npm/node-semver/issues/870">#870</a>)
(<a href="https://github.com/liuzemei"><code>@liuzemei</code></a>, <a
href="https://github.com/SheldonNeo"><code>@SheldonNeo</code></a>)</li>
</ul>
<h2><a
href="https://github.com/npm/node-semver/compare/v7.8.0...v7.8.1">7.8.1</a>
(2026-05-21)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><a
href="https://github.com/npm/node-semver/commit/17aa702d91166472b197a2ea768f085083bee2e4"><code>17aa702</code></a>
<a href="https://redirect.github.com/npm/node-semver/pull/869">#869</a>
strip build metadata before comparator trimming (<a
href="https://redirect.github.com/npm/node-semver/issues/869">#869</a>)
(<a
href="https://github.com/owlstronaut"><code>@owlstronaut</code></a>)</li>
<li><a
href="https://github.com/npm/node-semver/commit/5f3ca133e040210b6ea80c350a1d61d9da02e722"><code>5f3ca13</code></a>
<a href="https://redirect.github.com/npm/node-semver/pull/867">#867</a>
handle prerelease bounds in subset (<a
href="https://redirect.github.com/npm/node-semver/issues/867">#867</a>)
(<a
href="https://github.com/puneetdixit200"><code>@puneetdixit200</code></a>,
Puneet Dixit)</li>
</ul>
<h2><a
href="https://github.com/npm/node-semver/compare/v7.7.4...v7.8.0">7.8.0</a>
(2026-05-08)</h2>
<h3>Features</h3>
<ul>
<li><a
href="https://github.com/npm/node-semver/commit/0d0a0a2582fb1486bc6cd255ba18819c441ed149"><code>0d0a0a2</code></a>
<a href="https://redirect.github.com/npm/node-semver/pull/855">#855</a>
Add <code>truncate</code> function (<a
href="https://redirect.github.com/npm/node-semver/issues/855">#855</a>)
(<a href="https://github.com/pjohnmeyer"><code>@pjohnmeyer</code></a>,
<a
href="https://github.com/owlstronaut"><code>@owlstronaut</code></a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><a
href="https://github.com/npm/node-semver/commit/3905343045dc293c3694d5e46170b1bb1fb5cf58"><code>3905343</code></a>
<a href="https://redirect.github.com/npm/node-semver/pull/859">#859</a>
Warn when defaulting to --inc=patch in CLI (<a
href="https://github.com/pjohnmeyer"><code>@pjohnmeyer</code></a>)</li>
</ul>
<h3>Documentation</h3>
<ul>
<li><a
href="https://github.com/npm/node-semver/commit/c368af612e521767e960419e6388c5129c857984"><code>c368af6</code></a>
<a href="https://redirect.github.com/npm/node-semver/pull/853">#853</a>
fix typos in documentation (<a
href="https://redirect.github.com/npm/node-semver/issues/853">#853</a>)
(<a
href="https://github.com/ankitkumar572005"><code>@ankitkumar572005</code></a>)</li>
<li><a
href="https://github.com/npm/node-semver/commit/37776c31e2f3448fd852c975888e37b03efe9afe"><code>37776c3</code></a>
<a href="https://redirect.github.com/npm/node-semver/pull/846">#846</a>
fix BNF grammar to distinguish prerelease from build identifiers (<a
href="https://redirect.github.com/npm/node-semver/issues/846">#846</a>)
(<a href="https://github.com/abhu85"><code>@abhu85</code></a>, <a
href="https://github.com/claude"><code>@claude</code></a>)</li>
</ul>
<h3>Chores</h3>
<ul>
<li><a
href="https://github.com/npm/node-semver/commit/9542e09ebcd89e916777d35eba868061dad9ed7d"><code>9542e09</code></a>
<a href="https://redirect.github.com/npm/node-semver/pull/860">#860</a>
template-oss-apply (<a
href="https://github.com/owlstronaut"><code>@owlstronaut</code></a>)</li>
<li><a
href="https://github.com/npm/node-semver/commit/937bc2cd8721db14745c9be123078c44e77a86ef"><code>937bc2c</code></a>
<a href="https://redirect.github.com/npm/node-semver/pull/860">#860</a>
<code>template-oss-apply@5.0.0</code> (<a
href="https://github.com/owlstronaut"><code>@owlstronaut</code></a>)</li>
<li><a
href="https://github.com/npm/node-semver/commit/6946fefa57bd5e191871a4738b28ca673e003527"><code>6946fef</code></a>
<a href="https://redirect.github.com/npm/node-semver/pull/852">#852</a>
bump <code>@npmcli/template-oss</code> from 4.29.0 to 4.30.0 (<a
href="https://redirect.github.com/npm/node-semver/issues/852">#852</a>)
(<a
href="https://github.com/dependabot"><code>@dependabot</code></a>[bot],
<a
href="https://github.com/npm-cli-bot"><code>@npm-cli-bot</code></a>)</li>
</ul>
<h2><a
href="https://github.com/npm/node-semver/compare/v7.7.3...v7.7.4">7.7.4</a>
(2026-01-16)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><a
href="https://github.com/npm/node-semver/commit/a29faa5f3309a01c8e5aeb965fb5c02c4c4e80e2"><code>a29faa5</code></a>
<a href="https://redirect.github.com/npm/node-semver/pull/835">#835</a>
cli: pass options to semver.valid() for loose version validation (<a
href="https://redirect.github.com/npm/node-semver/issues/835">#835</a>)
(<a
href="https://github.com/mldangelo"><code>@mldangelo</code></a>)</li>
</ul>
<h3>Documentation</h3>
<ul>
<li><a
href="https://github.com/npm/node-semver/commit/1d28d5e82de16163daf721a7c76fff93e0d333ab"><code>1d28d5e</code></a>
<a href="https://redirect.github.com/npm/node-semver/pull/836">#836</a>
fix typos and update -n CLI option documentation (<a
href="https://redirect.github.com/npm/node-semver/issues/836">#836</a>)
(<a
href="https://github.com/mldangelo"><code>@mldangelo</code></a>)</li>
</ul>
<h3>Dependencies</h3>
<ul>
<li><a
href="https://github.com/npm/node-semver/commit/120968b76760cb0db85a72bde2adedd0e9628793"><code>120968b</code></a>
<a href="https://redirect.github.com/npm/node-semver/pull/840">#840</a>
<code>@npmcli/template-oss@4.29.0</code> (<a
href="https://redirect.github.com/npm/node-semver/issues/840">#840</a>)</li>
</ul>
<h3>Chores</h3>
<ul>
<li><a
href="https://github.com/npm/node-semver/commit/44d7130c60cedd3703048aa671bb1d659b79ab07"><code>44d7130</code></a>
<a href="https://redirect.github.com/npm/node-semver/pull/824">#824</a>
bump <code>@npmcli/eslint-config</code> from 5.1.0 to 6.0.0 (<a
href="https://redirect.github.com/npm/node-semver/issues/824">#824</a>)
(<a
href="https://github.com/dependabot"><code>@dependabot</code></a>[bot])</li>
<li><a
href="https://github.com/npm/node-semver/commit/70735767b68a1775eb67ac816b183b4a422101f4"><code>7073576</code></a>
<a href="https://redirect.github.com/npm/node-semver/pull/820">#820</a>
reorder parameters in invalid-versions.js test (<a
href="https://redirect.github.com/npm/node-semver/issues/820">#820</a>)
(<a href="https://github.com/reggi"><code>@reggi</code></a>)</li>
<li><a
href="https://github.com/npm/node-semver/commit/5816d4cfd6d85169527a2bc22fbd5bf4c64f34e3"><code>5816d4c</code></a>
<a href="https://redirect.github.com/npm/node-semver/pull/829">#829</a>
bump <code>@npmcli/template-oss</code> from 4.28.0 to 4.28.1 (<a
href="https://redirect.github.com/npm/node-semver/issues/829">#829</a>)
(<a
href="https://github.com/dependabot"><code>@dependabot</code></a>[bot],
<a
href="https://github.com/npm-cli-bot"><code>@npm-cli-bot</code></a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/npm/node-semver/commit/8640bd68f1653e504b53e9be4030eccdfe4c307a"><code>8640bd6</code></a>
chore: release 7.8.4 (<a
href="https://redirect.github.com/npm/node-semver/issues/875">#875</a>)</li>
<li><a
href="https://github.com/npm/node-semver/commit/e583226b165edd6530502cf731eda334527af6fe"><code>e583226</code></a>
fix: reject numeric segments after x-ranges</li>
<li><a
href="https://github.com/npm/node-semver/commit/6b77aa84a648a4b54ea32a21e6db60ebd54d5040"><code>6b77aa8</code></a>
chore: release 7.8.3 (<a
href="https://redirect.github.com/npm/node-semver/issues/873">#873</a>)</li>
<li><a
href="https://github.com/npm/node-semver/commit/3485ddadb2ca0d0691392ee5ce620072e1b1e040"><code>3485dda</code></a>
chore: bump <code>@npmcli/eslint-config</code> from 6.0.1 to 7.0.0 (<a
href="https://redirect.github.com/npm/node-semver/issues/866">#866</a>)</li>
<li><a
href="https://github.com/npm/node-semver/commit/046da7f527cc72a482b5dea8cb59392be65bf186"><code>046da7f</code></a>
fix: align caret includePrerelease lower bounds (<a
href="https://redirect.github.com/npm/node-semver/issues/872">#872</a>)</li>
<li><a
href="https://github.com/npm/node-semver/commit/efafcf8d029faa3d1ab74b5ec98d620112af859d"><code>efafcf8</code></a>
chore: release 7.8.2 (<a
href="https://redirect.github.com/npm/node-semver/issues/871">#871</a>)</li>
<li><a
href="https://github.com/npm/node-semver/commit/bea6028694a75e840f48b288ac019e9644cfe6e8"><code>bea6028</code></a>
fix: increment dotted prerelease identifiers (<a
href="https://redirect.github.com/npm/node-semver/issues/870">#870</a>)</li>
<li><a
href="https://github.com/npm/node-semver/commit/76416081a8413383cf6e24c82cafa438bd076d41"><code>7641608</code></a>
chore: release 7.8.1 (<a
href="https://redirect.github.com/npm/node-semver/issues/868">#868</a>)</li>
<li><a
href="https://github.com/npm/node-semver/commit/17aa702d91166472b197a2ea768f085083bee2e4"><code>17aa702</code></a>
fix: strip build metadata before comparator trimming (<a
href="https://redirect.github.com/npm/node-semver/issues/869">#869</a>)</li>
<li><a
href="https://github.com/npm/node-semver/commit/5f3ca133e040210b6ea80c350a1d61d9da02e722"><code>5f3ca13</code></a>
fix: handle prerelease bounds in subset (<a
href="https://redirect.github.com/npm/node-semver/issues/867">#867</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/npm/node-semver/compare/v7.7.3...v7.8.4">compare
view</a></li>
</ul>
</details>
<br />
Updates `tailwind-merge` from 3.5.0 to 3.6.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/dcastil/tailwind-merge/releases">tailwind-merge's
releases</a>.</em></p>
<blockquote>
<h2>v3.6.0</h2>
<h3>New Features</h3>
<ul>
<li>Add support for Tailwind CSS v4.3 by <a
href="https://github.com/dcastil"><code>@dcastil</code></a> in <a
href="https://redirect.github.com/dcastil/tailwind-merge/pull/677">dcastil/tailwind-merge#677</a>
<ul>
<li>Add <code>postfixLookupClassGroups</code> option to config to
support Tailwind utilities where a slash is part of the full class name,
like named container queries</li>
</ul>
</li>
<li>Add support for readonly array values by <a
href="https://github.com/unional"><code>@unional</code></a> in <a
href="https://redirect.github.com/dcastil/tailwind-merge/pull/652">dcastil/tailwind-merge#652</a></li>
</ul>
<h3>Documentation</h3>
<ul>
<li>Fix broken links in README by <a
href="https://github.com/maurer2"><code>@maurer2</code></a> in <a
href="https://redirect.github.com/dcastil/tailwind-merge/pull/662">dcastil/tailwind-merge#662</a></li>
</ul>
<h3>Other</h3>
<ul>
<li>Harden internal CI pipeline security by omitting git checkout by <a
href="https://github.com/dcastil"><code>@dcastil</code></a>, suggested
by <a
href="https://github.com/kyletaylored"><code>@kyletaylored</code></a>
in <a
href="https://github.com/dcastil/tailwind-merge/commit/6b2499c10cf52bed42426d30b4219e90374b30d6">https://github.com/dcastil/tailwind-merge/commit/6b2499c10cf52bed42426d30b4219e90374b30d6</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/dcastil/tailwind-merge/compare/v3.5.0...v3.6.0">https://github.com/dcastil/tailwind-merge/compare/v3.5.0...v3.6.0</a></p>
<p>Thanks to <a
href="https://github.com/brandonmcconnell"><code>@brandonmcconnell</code></a>,
<a href="https://github.com/manavm1990"><code>@manavm1990</code></a>,
<a href="https://github.com/langy"><code>@langy</code></a>, <a
href="https://github.com/roboflow"><code>@roboflow</code></a>, <a
href="https://github.com/syntaxfm"><code>@syntaxfm</code></a>, <a
href="https://github.com/getsentry"><code>@getsentry</code></a>, <a
href="https://github.com/codecov"><code>@codecov</code></a>, a private
sponsor, <a href="https://github.com/block"><code>@block</code></a>, <a
href="https://github.com/openclaw"><code>@openclaw</code></a>, <a
href="https://github.com/sourcegraph"><code>@sourcegraph</code></a>, <a
href="https://github.com/mike-healy"><code>@mike-healy</code></a> and
more via <a href="https://github.com/thnxdev"><code>@thnxdev</code></a>
for sponsoring tailwind-merge! ❤️</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/dcastil/tailwind-merge/commit/d54f7e5713c653d0171971405344f7c6e44d418f"><code>d54f7e5</code></a>
v3.6.0</li>
<li><a
href="https://github.com/dcastil/tailwind-merge/commit/638871a67a0a124ac9275eda77cd08b03f2f045e"><code>638871a</code></a>
Update README to add info about Tailwind CSS v4.3 support</li>
<li><a
href="https://github.com/dcastil/tailwind-merge/commit/39fc7b5e915493e5eb3ddb1ca615f5b2eeff2540"><code>39fc7b5</code></a>
Revert "v3.6.0"</li>
<li><a
href="https://github.com/dcastil/tailwind-merge/commit/bd8390f6ca387f93c9e989fb3fb09924fb843445"><code>bd8390f</code></a>
v3.6.0</li>
<li><a
href="https://github.com/dcastil/tailwind-merge/commit/802877c6e31f9fb64c627e5e760729a16cd0a69b"><code>802877c</code></a>
add v3.6.0 changelog</li>
<li><a
href="https://github.com/dcastil/tailwind-merge/commit/a35fedac7d1fc8756223da94290a83a32068d2ae"><code>a35feda</code></a>
Merge pull request <a
href="https://redirect.github.com/dcastil/tailwind-merge/issues/665">#665</a>
from dcastil/renovate/rollup-plugin-babel-7.x</li>
<li><a
href="https://github.com/dcastil/tailwind-merge/commit/940389cf89ed0da277ff5c01b98fd619687926e9"><code>940389c</code></a>
Merge pull request <a
href="https://redirect.github.com/dcastil/tailwind-merge/issues/667">#667</a>
from dcastil/renovate/release-drafter-release-drafter...</li>
<li><a
href="https://github.com/dcastil/tailwind-merge/commit/005af6df08cfbe2adac7ca6cb5a7be02b9261fbd"><code>005af6d</code></a>
pin to specific version</li>
<li><a
href="https://github.com/dcastil/tailwind-merge/commit/5816ced627ebcaefd497ad8e4202baf750dd545c"><code>5816ced</code></a>
implement breaking changes</li>
<li><a
href="https://github.com/dcastil/tailwind-merge/commit/17041e17c5b9c96fcb0f4758c718799cb3af14a6"><code>17041e1</code></a>
Merge pull request <a
href="https://redirect.github.com/dcastil/tailwind-merge/issues/676">#676</a>
from dcastil/dependabot/npm_and_yarn/babel/plugin-tra...</li>
<li>Additional commits viewable in <a
href="https://github.com/dcastil/tailwind-merge/compare/v3.5.0...v3.6.0">compare
view</a></li>
</ul>
</details>
<br />
Updates `yaml` from 2.8.3 to 2.9.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/eemeli/yaml/releases">yaml's
releases</a>.</em></p>
<blockquote>
<h2>v2.9.0</h2>
<p>The changes here are really only patches, but I'm releasing this as a
minor version to note a small change to the documentation of
<code>parseDocument()</code> and <code>parseAllDocuments()</code>: I've
removed the claim that they'll "never throw".</p>
<p>It remains the case that practically all non-malicious inputs will be
handled without emitting an error, but there is a decent chance that
code paths remain where e.g. a RangeError due to call stack exhaustion
can be triggered by malicious inputs. Up to now, I've considered these
as security vulnerabilities, and in fact it's the only category of error
for which <code>yaml</code> CVEs have been issued so far.</p>
<p>Starting from this release, I'll be considering such errors as bugs,
but not vulnerabilities. I do welcome people and/or LLMs looking for
them, but please report them as normal issues rather than suspected
security vulnerabilities. This also applies to previously undiscovered
bugs in earlier releases.</p>
<ul>
<li>fix: Avoid calling <code>Array.prototype.push.apply()</code> with
large source array</li>
<li>fix(lexer): Avoid recursive calls that may exhaust the call
stack</li>
</ul>
<h2>v2.8.4</h2>
<ul>
<li>Disable alias resolution with <code>maxAliasCount:0</code> (<a
href="https://redirect.github.com/eemeli/yaml/issues/677">#677</a>)</li>
<li>Handle invalid unicode escapes (e1a1a77)</li>
<li>Apply <code>minFractionDigits</code> only to decimal strings (<a
href="https://redirect.github.com/eemeli/yaml/issues/676">#676</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/eemeli/yaml/commit/ddb21b04cb889722cec8f89dc1b67f19d62d7f7d"><code>ddb21b0</code></a>
2.9.0</li>
<li><a
href="https://github.com/eemeli/yaml/commit/167365befdae1f03d53d47a8c6533140a9d48a75"><code>167365b</code></a>
docs: Clarify that not all errors can be avoided</li>
<li><a
href="https://github.com/eemeli/yaml/commit/6eca2a7087548f86c4edb6a7cf2cdfe548759f06"><code>6eca2a7</code></a>
fix: Avoid calling Array.prototype.push.apply() with large source
array</li>
<li><a
href="https://github.com/eemeli/yaml/commit/0543cd57fd61ea15a58e9f0ec2064b8b408177d8"><code>0543cd5</code></a>
fix(lexer): Avoid recursive calls that may exhaust the call stack</li>
<li><a
href="https://github.com/eemeli/yaml/commit/ccdf7439587544f64223429498a1d9ec514eaac1"><code>ccdf743</code></a>
2.8.4</li>
<li><a
href="https://github.com/eemeli/yaml/commit/f625789dbd971c936ff66fe5c49e368062ae7b41"><code>f625789</code></a>
fix: Disable alias resolution with maxAliasCount:0 (<a
href="https://redirect…1 parent d845941 commit c99022c
3 files changed
Lines changed: 84 additions & 54 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
75 | 75 | | |
76 | 76 | | |
77 | 77 | | |
78 | | - | |
| 78 | + | |
79 | 79 | | |
80 | 80 | | |
81 | 81 | | |
| |||
86 | 86 | | |
87 | 87 | | |
88 | 88 | | |
89 | | - | |
| 89 | + | |
90 | 90 | | |
91 | 91 | | |
92 | 92 | | |
| |||
98 | 98 | | |
99 | 99 | | |
100 | 100 | | |
101 | | - | |
102 | | - | |
| 101 | + | |
| 102 | + | |
103 | 103 | | |
104 | 104 | | |
105 | 105 | | |
| |||
108 | 108 | | |
109 | 109 | | |
110 | 110 | | |
111 | | - | |
| 111 | + | |
112 | 112 | | |
113 | 113 | | |
114 | 114 | | |
| |||
121 | 121 | | |
122 | 122 | | |
123 | 123 | | |
124 | | - | |
| 124 | + | |
125 | 125 | | |
126 | 126 | | |
127 | 127 | | |
128 | 128 | | |
129 | | - | |
| 129 | + | |
130 | 130 | | |
131 | 131 | | |
132 | 132 | | |
133 | 133 | | |
134 | 134 | | |
135 | 135 | | |
136 | | - | |
| 136 | + | |
137 | 137 | | |
138 | 138 | | |
139 | 139 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
24 | 24 | | |
25 | 25 | | |
26 | 26 | | |
27 | | - | |
| 27 | + | |
28 | 28 | | |
29 | 29 | | |
30 | 30 | | |
| |||
0 commit comments