Repository navigation
chore(deps-dev): bump valibot from 1.3.1 to 1.5.0 - #154
dependabot[bot] wants to merge 1 commit into
Conversation
|
Important Review skippedBot user detected. To trigger a single review, invoke the ⚙️ Run configurationConfiguration used: defaults Review profile: CHILL Plan: Advanced Run ID: You can disable this status message by setting the Use the checkbox below for a quick retry:
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
Bundle Size Report
|
Bumps [valibot](https://github.com/open-circle/valibot) from 1.3.1 to 1.5.0. - [Release notes](https://github.com/open-circle/valibot/releases) - [Commits](open-circle/valibot@v1.3.1...v1.5.0) --- updated-dependencies: - dependency-name: valibot dependency-version: 1.5.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
7f4bf1b to
c4c8dc4
Compare
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
…#115) Clears every error-level trivy finding in bun.lock (25 -> 0) so `maina verify` passes without suppression. Workspace refresh (`bun update -r`, no majors for shipped code): - Runtime floors move only in approval/mcp (hono ^4.13.11, past the 4.12.x advisories) and mail (mimetext ^3.0.28, postal-mime ^2.7.6); patch changeset included. Peer ranges unchanged. - Folds in #153 (`@cloudflare/puppeteer` 1.4.0, dev-only) and #154 (`valibot` 1.5.0). Pairs react + react-dom 19.3, superseding #148. - Root override `@puppeteer/browsers` ^3.2.3 drops `extract-zip` 2.0.1 (symlink file-write CVEs, no upstream fix). Dev-only; browser/pdf tests pass 35/35 and 51/51. apps/docs (private, not published) — Astro 5 -> 7: - astro ^7.2.10, @astrojs/starlight ^0.42.4, @astrojs/react ^7, @astrojs/starlight-tailwind ^5, tailwindcss ^4 via @tailwindcss/vite; drops @astrojs/tailwind and tailwind.config.ts (CSS-first config). - Starlight 0.39+ sidebar: autogenerate moves into `items`. - `bg-gradient-to-r` -> `bg-linear-to-r` (Tailwind 4 rename). - Fixes the critical AVIF RCE plus SSRF/XSS advisories on astro. - Same 33 pages built; `astro check` 0 errors; landing + guide pages screenshot-compared against the Astro 5 build. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Bumps valibot from 1.3.1 to 1.5.0.
Release notes
Sourced from valibot's releases.
... (truncated)
Commits
5016198chore: prepare Valibot v1.5.0 release (#1627)1ffb038fix(intersect): skip inherited prototype props in _merge (#1621)1c4983ffix(ulid): restrict first character to 0-7 per ULID spec (#1498)5e449cdperf(url): use URL.canParse for validation (#1608)4acda1bMake sure that email validators don't match unintentional non-ASCII local par...95943abfix: handle object keys that collide with Object.prototype in object schemas ...d65438cfix(cache): clone cached issues to stop issue paths from accumulating (#1620)3ed804adependabot: bump the github-actions group across 1 directory with 2 updates (...0681f43fix: use SameValueZero equality for special numeric values (#1573)98ef8b4Improve perf by changing ~standard implementation (#1534)