Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 13, 2025

Bumps the javascript-minor group with 8 updates in the /client directory:

Package From To
@fortawesome/fontawesome-svg-core 7.0.0 7.1.0
@testing-library/jest-dom 6.7.0 6.9.1
core-js 3.45.0 3.46.0
dompurify 3.2.6 3.2.7
isomorphic-dompurify 2.26.0 2.28.0
luxon 3.7.1 3.7.2
react-tooltip 5.29.1 5.30.0
sass 1.90.0 1.93.2

Updates @fortawesome/fontawesome-svg-core from 7.0.0 to 7.1.0

Release notes

Sourced from @​fortawesome/fontawesome-svg-core's releases.

Release 7.1.0

Change log available at https://fontawesome.com/docs/changelog/

Release 7.0.1

Change log available at https://fontawesome.com/docs/changelog/

Commits

Updates @testing-library/jest-dom from 6.7.0 to 6.9.1

Release notes

Sourced from @​testing-library/jest-dom's releases.

v6.9.1

6.9.1 (2025-10-01)

Bug Fixes

v6.9.0

6.9.0 (2025-09-30)

Features

  • Add .toAppearBefore/.toAppearAfter matcher (#702) (95f870a)

v6.8.0

6.8.0 (2025-08-20)

Features

Commits

Updates core-js from 3.45.0 to 3.46.0

Changelog

Sourced from core-js's changelog.

3.46.0 - 2025.10.09

3.45.1 - 2025.08.20

  • Changes v3.45.0...v3.45.1 (30 commits)
  • Fixed a conflict of native methods from Map upsert proposal with polyfilled methods in the pure version
  • Added bugs fields to package.json of all packages
  • Compat data improvements:
    • Map upsert proposal features marked as shipped from Bun 1.2.20
    • Added Samsung Internet 29 compat data mapping
    • Added Electron 39 compat data mapping
Commits
  • 98d9dc4 v3.46.0
  • 38420bd add homepage field to package.jsons
  • a7aee4c some fixes
  • 12b441d Fix Iterator.zip and Iterator.zipKeyed behavior with mode: 'longest' op...
  • 15d7a7d update copyright
  • 9eaa6ad Merge pull request #1451 from zloirock/iterator-chunking-stage-2-7
  • 686808f clarify versions
  • a21ab8d FF WeakMap.prototype.getOrInsertComputed was fixed
  • 747e648 Fix object property creation for potential Symbol keys
  • 6bfb3cd move Iterator chunking proposal to stage 2.7
  • Additional commits viewable in compare view

Updates dompurify from 3.2.6 to 3.2.7

Release notes

Sourced from dompurify's releases.

DOMPurify 3.2.7

  • Added new attributes and elements to default allow-list, thanks @​elrion018
  • Added tagName parameter to custom element attributeNameCheck, thanks @​nelstrom
  • Added better check for animated href attributes, thanks @​llamakko
  • Updated and improved the bundled types, thanks @​ssi02014
  • Updated several tests to better align with new browser encoding behaviors
  • Improved the handling of potentially risky content inside CDATA elements, thanks @​securityMB & @​terjanq
  • Improved the regular expression for raw-text elements to cover textareas, thanks @​securityMB & @​terjanq
Commits
  • eaa0bdb Merge pull request #1144 from cure53/main
  • f712593 fix: removed a possibly dossy regex
  • eb9b3b6 Merge branch 'main' of github.com:cure53/DOMPurify
  • ce006f7 chore: Preparing 3.2.7 release
  • ef0e0cb chore: Preparing 3.2.6 release
  • 2f09cd3 Update README.md
  • 6a795bc Merge pull request #1142 from cure53/dependabot/github_actions/actions/setup-...
  • 2458bbd build(deps): bump actions/setup-node from 4 to 5
  • e43d3f3 Merge pull request #1136 from cure53/dependabot/github_actions/actions/checko...
  • 6f5be37 build(deps): bump actions/checkout from 4 to 5
  • Additional commits viewable in compare view

Updates isomorphic-dompurify from 2.26.0 to 2.28.0

Release notes

Sourced from isomorphic-dompurify's releases.

2.28.0: Updated dompurify

Changelog

  • Updated dompurify.

See the complete changelog for more details.

Release

2.28.0

2.27.0: Updated jsdom dependency and dropped support for Node < 20

Changelog

  • Updated jsdom which dropped support for Node < 20.
  • Updated dev deps.

See the complete changelog for more details.

Release

2.27.0

Commits
  • 2a237c0 chore: Incremented project version.
  • 770f771 chore: Updated deps.
  • 65b7dd0 Merge pull request #354 from kkomelin/dependabot/npm_and_yarn/dompurify-3.2.7
  • 5ae71e3 chore(deps): bump dompurify from 3.2.6 to 3.2.7
  • a667dd5 chore: Updated deps. Dropped support for Node > 20 (by jsdom). Incremented pr...
  • 35f934b Merge pull request #352 from kkomelin/dependabot/npm_and_yarn/jsdom-27.0.0
  • bd4b650 chore(deps): bump jsdom from 26.1.0 to 27.0.0
  • d549d39 Merge pull request #351 from kkomelin/dependabot/npm_and_yarn/terser-5.44.0
  • 9d34d9d chore(deps-dev): bump terser from 5.43.1 to 5.44.0
  • aaa9cbe Removed bundlephobia badge from reamde because it's not been working for a wh...
  • See full diff in compare view

Updates luxon from 3.7.1 to 3.7.2

Changelog

Sourced from luxon's changelog.

3.7.2 (2025-07-09)

  • Fix ES6 packaging
Commits
  • 4262a38 Version 3.7.2
  • 738144d Fix the build ES6 code having the wrong file extension and use it in package....
  • See full diff in compare view

Updates react-tooltip from 5.29.1 to 5.30.0

Release notes

Sourced from react-tooltip's releases.

v5.30.0

If you like ReactTooltip, please give the project a star on GitHub 🌟

What's Changed

New Contributors

Full Changelog: ReactTooltip/react-tooltip@v5.29.1...v5.30.0

Commits

Updates sass from 1.90.0 to 1.93.2

Release notes

Sourced from sass's releases.

Dart Sass 1.93.2

To install Sass 1.93.2, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

  • No user-visible changes.

JavaScript API

  • Fix another error in the release process for @sass/types.

See the full changelog for changes in earlier releases.

Dart Sass 1.93.1

To install Sass 1.93.1, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

  • No user-visible changes.

JavaScript API

  • Fix an error in the release process for @sass/types.

See the full changelog for changes in earlier releases.

Dart Sass 1.93.0

To install Sass 1.93.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

  • Fix a crash when a style rule contains a nested @import, and the loaded file @uses a user-defined module as well as @includes a top-level mixin which emits top-level declarations.

JavaScript API

  • Release a @sass/types package which contains the type annotations used by both the sass and sass-embedded package without any additional code or dependencies.

See the full changelog for changes in earlier releases.

Dart Sass 1.92.1

To install Sass 1.92.1, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

... (truncated)

Changelog

Sourced from sass's changelog.

1.93.2

  • No user-visible changes.

JavaScript API

  • Fix another error in the release process for @sass/types.

1.93.1

  • No user-visible changes.

JavaScript API

  • Fix an error in the release process for @sass/types.

1.93.0

  • Fix a crash when a style rule contains a nested @import, and the loaded file @uses a user-defined module as well as @includes a top-level mixin which emits top-level declarations.

JavaScript API

  • Release a @sass/types package which contains the type annotations used by both the sass and sass-embedded package without any additional code or dependencies.

1.92.1

  • Fix a bug where variable definitions from one imported, forwarded module would not be passed as implicit configuration to a later imported, forwarded module.

1.92.0

  • Breaking change: Emit declarations, childless at-rules, and comments in the order they appear in the source even when they're interleaved with nested rules. This obsoletes the mixed-decls deprecation.

  • Breaking change: The function name type() is now fully reserved for the plain CSS function. This means that @function definitions with the name type will produce errors, while function calls will be parsed as special function strings.

  • Configuring private variables using @use ... with, @forward ... with, and meta.load-css(..., $with: ...) is now deprecated. Private variables were always intended to be fully encapsulated within the module that defines them, and this helps enforce that encapsulation.

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the javascript-minor group with 8 updates in the /client directory:

| Package | From | To |
| --- | --- | --- |
| [@fortawesome/fontawesome-svg-core](https://github.com/FortAwesome/Font-Awesome) | `7.0.0` | `7.1.0` |
| [@testing-library/jest-dom](https://github.com/testing-library/jest-dom) | `6.7.0` | `6.9.1` |
| [core-js](https://github.com/zloirock/core-js/tree/HEAD/packages/core-js) | `3.45.0` | `3.46.0` |
| [dompurify](https://github.com/cure53/DOMPurify) | `3.2.6` | `3.2.7` |
| [isomorphic-dompurify](https://github.com/kkomelin/isomorphic-dompurify) | `2.26.0` | `2.28.0` |
| [luxon](https://github.com/moment/luxon) | `3.7.1` | `3.7.2` |
| [react-tooltip](https://github.com/ReactTooltip/react-tooltip) | `5.29.1` | `5.30.0` |
| [sass](https://github.com/sass/dart-sass) | `1.90.0` | `1.93.2` |



Updates `@fortawesome/fontawesome-svg-core` from 7.0.0 to 7.1.0
- [Release notes](https://github.com/FortAwesome/Font-Awesome/releases)
- [Changelog](https://github.com/FortAwesome/Font-Awesome/blob/7.x/CHANGELOG.md)
- [Commits](FortAwesome/Font-Awesome@7.0.0...7.1.0)

Updates `@testing-library/jest-dom` from 6.7.0 to 6.9.1
- [Release notes](https://github.com/testing-library/jest-dom/releases)
- [Changelog](https://github.com/testing-library/jest-dom/blob/main/CHANGELOG.md)
- [Commits](testing-library/jest-dom@v6.7.0...v6.9.1)

Updates `core-js` from 3.45.0 to 3.46.0
- [Release notes](https://github.com/zloirock/core-js/releases)
- [Changelog](https://github.com/zloirock/core-js/blob/master/CHANGELOG.md)
- [Commits](https://github.com/zloirock/core-js/commits/v3.46.0/packages/core-js)

Updates `dompurify` from 3.2.6 to 3.2.7
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.2.6...3.2.7)

Updates `isomorphic-dompurify` from 2.26.0 to 2.28.0
- [Release notes](https://github.com/kkomelin/isomorphic-dompurify/releases)
- [Commits](kkomelin/isomorphic-dompurify@2.26.0...2.28.0)

Updates `luxon` from 3.7.1 to 3.7.2
- [Changelog](https://github.com/moment/luxon/blob/master/CHANGELOG.md)
- [Commits](moment/luxon@3.7.1...3.7.2)

Updates `react-tooltip` from 5.29.1 to 5.30.0
- [Release notes](https://github.com/ReactTooltip/react-tooltip/releases)
- [Changelog](https://github.com/ReactTooltip/react-tooltip/blob/master/CHANGELOG.md)
- [Commits](ReactTooltip/react-tooltip@v5.29.1...v5.30.0)

Updates `sass` from 1.90.0 to 1.93.2
- [Release notes](https://github.com/sass/dart-sass/releases)
- [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
- [Commits](sass/dart-sass@1.90.0...1.93.2)

---
updated-dependencies:
- dependency-name: "@fortawesome/fontawesome-svg-core"
  dependency-version: 7.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: javascript-minor
- dependency-name: "@testing-library/jest-dom"
  dependency-version: 6.9.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: javascript-minor
- dependency-name: core-js
  dependency-version: 3.46.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: javascript-minor
- dependency-name: dompurify
  dependency-version: 3.2.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: javascript-minor
- dependency-name: isomorphic-dompurify
  dependency-version: 2.28.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: javascript-minor
- dependency-name: luxon
  dependency-version: 3.7.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: javascript-minor
- dependency-name: react-tooltip
  dependency-version: 5.30.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: javascript-minor
- dependency-name: sass
  dependency-version: 1.93.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: javascript-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 13, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant