[PR #1962] [MERGED] Bump ajv from 8.17.1 to 8.18.0 #3678

New issue

Closed

opened 2026-03-07 20:14:56 +03:00 by kerem · 0 comments

kerem commented

2026-03-07 20:14:56 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/DavidAnson/markdownlint/pull/1962
Author: @dependabot[bot]
Created: 2/16/2026
Status: ✅ Merged
Merged: 2/16/2026
Merged by: @DavidAnson

Base: next ← Head: dependabot/npm_and_yarn/next/ajv-8.18.0

📝 Commits (1)

eb7f0b0 Bump ajv from 8.17.1 to 8.18.0

📊 Changes

1 file changed (+1 additions, -1 deletions)

View changed files

📝 package.json (+1 -1)

📄 Description

Bumps ajv from 8.17.1 to 8.18.0.

Release notes

Sourced from ajv's releases.

v8.18.0

What's Changed

feat: allow tree-shaking by adding "sideEffects": false to package.json by @josdejong in ajv-validator/ajv#2480

fix: #2482 Infinity and NaN serialise to null by @jasoniangreen in ajv-validator/ajv#2487

fix: small grammatical error in managing-schemas.md by @monteiro-renato in ajv-validator/ajv#2508

fix: typos in schema-language.md by @monteiro-renato in ajv-validator/ajv#2507

fix(pattern): use configured RegExp engine with $data keyword to mitigate ReDoS attacks (CVE-2025-69873) by @epoberezkin in ajv-validator/ajv#2586

New Contributors

@josdejong made their first contribution in ajv-validator/ajv#2480

@monteiro-renato made their first contribution in ajv-validator/ajv#2508

Full Changelog: https://github.com/ajv-validator/ajv/compare/v8.17.1...v8.18.0

Commits

142ce84 8.18.0
720a23f fix(pattern): use configured RegExp engine with $data keyword to mitigate ReD...
82735a1 fix: typos in schema-language.md (#2507)
b17ec32 fix: small grammatical error in managing-schemas.md (#2508)
69568d0 fix: #2482 Infinity and NaN serialise to null (#2487)
f06766f feat: allow tree-shaking by adding ``"sideEffects": falsetopackage.json` ...
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/DavidAnson/markdownlint/pull/1962 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 2/16/2026 **Status:** ✅ Merged **Merged:** 2/16/2026 **Merged by:** [@DavidAnson](https://github.com/DavidAnson) **Base:** `next` ← **Head:** `dependabot/npm_and_yarn/next/ajv-8.18.0` --- ### 📝 Commits (1) - [`eb7f0b0`](https://github.com/DavidAnson/markdownlint/commit/eb7f0b0c8441d020472f841331247d441115d81d) Bump ajv from 8.17.1 to 8.18.0 ### 📊 Changes **1 file changed** (+1 additions, -1 deletions) <details> <summary>View changed files</summary> 📝 `package.json` (+1 -1) </details> ### 📄 Description Bumps [ajv](https://github.com/ajv-validator/ajv) from 8.17.1 to 8.18.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/ajv-validator/ajv/releases">ajv's releases</a>.</em></p> <blockquote> <h2>v8.18.0</h2> <h2>What's Changed</h2> <ul> <li>feat: allow tree-shaking by adding <code>"sideEffects": false</code> to <code>package.json</code> by <a href="https://github.com/josdejong"><code>@josdejong</code></a> in <a href="https://redirect.github.com/ajv-validator/ajv/pull/2480">ajv-validator/ajv#2480</a></li> <li>fix: <a href="https://redirect.github.com/ajv-validator/ajv/issues/2482">#2482</a> Infinity and NaN serialise to null by <a href="https://github.com/jasoniangreen"><code>@jasoniangreen</code></a> in <a href="https://redirect.github.com/ajv-validator/ajv/pull/2487">ajv-validator/ajv#2487</a></li> <li>fix: small grammatical error in managing-schemas.md by <a href="https://github.com/monteiro-renato"><code>@monteiro-renato</code></a> in <a href="https://redirect.github.com/ajv-validator/ajv/pull/2508">ajv-validator/ajv#2508</a></li> <li>fix: typos in schema-language.md by <a href="https://github.com/monteiro-renato"><code>@monteiro-renato</code></a> in <a href="https://redirect.github.com/ajv-validator/ajv/pull/2507">ajv-validator/ajv#2507</a></li> <li>fix(pattern): use configured RegExp engine with $data keyword to mitigate ReDoS attacks (CVE-2025-69873) by <a href="https://github.com/epoberezkin"><code>@epoberezkin</code></a> in <a href="https://redirect.github.com/ajv-validator/ajv/pull/2586">ajv-validator/ajv#2586</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/josdejong"><code>@josdejong</code></a> made their first contribution in <a href="https://redirect.github.com/ajv-validator/ajv/pull/2480">ajv-validator/ajv#2480</a></li> <li><a href="https://github.com/monteiro-renato"><code>@monteiro-renato</code></a> made their first contribution in <a href="https://redirect.github.com/ajv-validator/ajv/pull/2508">ajv-validator/ajv#2508</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/ajv-validator/ajv/compare/v8.17.1...v8.18.0">https://github.com/ajv-validator/ajv/compare/v8.17.1...v8.18.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/ajv-validator/ajv/commit/142ce84b807c4fe66e619c22480a28d0e4bd50fa"><code>142ce84</code></a> 8.18.0</li> <li><a href="https://github.com/ajv-validator/ajv/commit/720a23fa453ffae8340e92c9b0fe886c54cfe0d5"><code>720a23f</code></a> fix(pattern): use configured RegExp engine with $data keyword to mitigate ReD...</li> <li><a href="https://github.com/ajv-validator/ajv/commit/82735a15826a30cc51e97a1bbfb59b3d388e4b98"><code>82735a1</code></a> fix: typos in schema-language.md (<a href="https://redirect.github.com/ajv-validator/ajv/issues/2507">#2507</a>)</li> <li><a href="https://github.com/ajv-validator/ajv/commit/b17ec32cd97542e90ae27231d8a8bce88b9e53b6"><code>b17ec32</code></a> fix: small grammatical error in managing-schemas.md (<a href="https://redirect.github.com/ajv-validator/ajv/issues/2508">#2508</a>)</li> <li><a href="https://github.com/ajv-validator/ajv/commit/69568d08564303e2c32a2de61feb833b41075f96"><code>69568d0</code></a> fix: <a href="https://redirect.github.com/ajv-validator/ajv/issues/2482">#2482</a> Infinity and NaN serialise to null (<a href="https://redirect.github.com/ajv-validator/ajv/issues/2487">#2487</a>)</li> <li><a href="https://github.com/ajv-validator/ajv/commit/f06766f33ed7291f84c19f22a1286a34475fbdaf"><code>f06766f</code></a> feat: allow tree-shaking by adding ``"sideEffects": false<code>to</code>package.json` ...</li> <li>See full diff in <a href="https://github.com/ajv-validator/ajv/compare/v8.17.1...v8.18.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=ajv&package-manager=npm_and_yarn&previous-version=8.17.1&new-version=8.18.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>