[PR #1553] [MERGED] chore(deps): update all non-major dependencies #7116

New issue

Closed

opened 2026-03-01 17:15:42 +03:00 by kerem · 0 comments

kerem commented 2026-03-01 17:15:42 +03:00

Owner

Copy link

📋 Pull Request Information

Original PR: https://github.com/0xJacky/nginx-ui/pull/1553
Author: @renovate[bot]
Created: 2/9/2026
Status: ✅ Merged
Merged: 2/13/2026
Merged by: @renovate[bot]

Base: dev ← Head: renovate/all-minor-patch

---

📝 Commits (1)

• 6370533 chore(deps): update all non-major dependencies

📊 Changes

7 files changed (+583 additions, -546 deletions)

View changed files

📝 .github/workflows/build.yml (+3 -3)
📝 app/package.json (+15 -15)
📝 docs/package.json (+3 -3)
📝 go.mod (+10 -10)
📝 go.sum (+18 -0)
📝 pnpm-lock.yaml (+520 -501)
📝 pnpm-workspace.yaml (+14 -14)

📄 Description

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
@antfu/eslint-config	^7.2.0 → ^7.4.3			pnpm.catalog.default	minor
@antfu/eslint-config	^7.2.0 → ^7.4.3			devDependencies	minor
@types/node (source)	^24.10.10 → ^24.10.13			devDependencies	patch
@vue/compiler-sfc (source)	^3.5.27 → ^3.5.28			pnpm.catalog.default	patch
@vue/compiler-sfc (source)	^3.5.27 → ^3.5.28			devDependencies	patch
@vue/reactivity (source)	^3.5.27 → ^3.5.28			pnpm.catalog.default	patch
@vue/reactivity (source)	^3.5.27 → ^3.5.28			dependencies	patch
@vue/shared (source)	^3.5.27 → ^3.5.28			pnpm.catalog.default	patch
@vue/shared (source)	^3.5.27 → ^3.5.28			dependencies	patch
@vueuse/components (source)	^14.2.0 → ^14.2.1			pnpm.catalog.default	patch
@vueuse/components (source)	^14.2.0 → ^14.2.1			dependencies	patch
@vueuse/core (source)	^14.2.0 → ^14.2.1			pnpm.catalog.default	patch
@vueuse/core (source)	^14.2.0 → ^14.2.1			dependencies	patch
@vueuse/integrations (source)	^14.2.0 → ^14.2.1			pnpm.catalog.default	patch
@vueuse/integrations (source)	^14.2.0 → ^14.2.1			dependencies	patch
@vueuse/router (source)	^14.2.0 → ^14.2.1			pnpm.catalog.default	patch
@vueuse/router (source)	^14.2.0 → ^14.2.1			dependencies	patch
axios (source)	^1.13.4 → ^1.13.5			pnpm.catalog.default	patch
axios (source)	^1.13.4 → ^1.13.5			dependencies	patch
eslint-plugin-sonarjs (source)	^3.0.6 → ^3.0.7			pnpm.catalog.default	patch
eslint-plugin-sonarjs (source)	^3.0.6 → ^3.0.7			devDependencies	patch
github.com/alibabacloud-go/darabonba-openapi/v2	v2.1.14 → v2.1.15			require	patch
github.com/cloudflare/cloudflare-go/v6	v6.6.0 → v6.7.0			require	minor
github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common	v1.3.45 → v1.3.48			require	patch
go (source)	1.25.7 → 1.26.0			golang	minor
go	^1.25.7 → ^1.26.0			uses-with	minor
golang.org/x/crypto	v0.47.0 → v0.48.0			require	minor
golang.org/x/net	v0.49.0 → v0.50.0			require	minor
golang.org/x/oauth2	v0.34.0 → v0.35.0			require	minor
google.golang.org/grpc	v1.78.0 → v1.79.0			require	minor
marked (source)	^17.0.1 → ^17.0.2			pnpm.catalog.default	patch
marked (source)	^17.0.1 → ^17.0.2			dependencies	patch
pnpm (source)	10.28.2+sha512.41872f037ad22f7348e3b1debbaf7e867cfd448f2726d9cf74c08f19507c31d2c8e7a11525b983febc2df640b5438dee6023ebb1f84ed43cc2d654d2bc326264 → 10.29.3			packageManager	minor
sortablejs	^1.15.6 → ^1.15.7			pnpm.catalog.default	patch
sortablejs	^1.15.6 → ^1.15.7			dependencies	patch
sse.js	^2.7.2 → ^2.8.0			pnpm.catalog.default	minor
sse.js	^2.7.2 → ^2.8.0			dependencies	minor
vue (source)	^3.5.27 → ^3.5.28			pnpm.catalog.default	patch
vue (source)	^3.5.27 → ^3.5.28			dependencies	patch

---

Release Notes

antfu/eslint-config (@​antfu/eslint-config)

v7.4.3

Compare Source

   🐞 Bug Fixes

• Formating regression  -  by @​antfu (2ef8a)

    View changes on GitHub

v7.4.2

Compare Source

   🐞 Bug Fixes

• Relax eslint peer deps range  -  by @​antfu (b5f53)

    View changes on GitHub

v7.4.1

Compare Source

   🐞 Bug Fixes

• Ignore typescript files when typescript is off  -  by @​antfu (bda75)

    View changes on GitHub

v7.4.0

Compare Source

   🚀 Features

• Angular support  -  by @​St2r and @​antfu in #​804 (67b1b)

   🐞 Bug Fixes

• Update peer dependency requirement for eslint-plugin-react-refresh  -  by @​hyoban in #​813 (19a43)

    View changes on GitHub

v7.3.0

Compare Source

   🚀 Features

• Upgrade eslint-plugin-react-refresh, eslint-plugin-regexp  -  by @​antfu (610e7)
• react: Sync recommend rules  -  by @​hyoban in #​810 (1b870)

   🐞 Bug Fixes

• Use ConfigWithExtends instead of Linter.Config  -  by @​hyoban in #​809 (ad4e5)

    View changes on GitHub

vuejs/core (@​vue/compiler-sfc)

v3.5.28

Compare Source

Bug Fixes

• transition: avoid unexpected cancelled parameter in transition done callback (#​14391) (6798853)
• compiler-sfc: add resolution trying for .mts/.cts files (#​14402) (c09d41f), closes vuejs/router#2611
• compiler-sfc: no params were generated when using withDefaults (#​12823) (b0a1f05), closes #​12822
• reactivity: add __v_skip flag to EffectScope to prevent reactive conversion (#​14359) (48b7552), closes #​14357
• runtime-core: avoid retaining el on cached text vnodes during static traversal (#​14419) (4ace79a), closes #​14134
• runtime-core: prevent child component updates when style remains unchanged (#​12825) (57866b5), closes #​12826
• runtime-core: properly handle async component update before resolve (#​11619) (e71c26c), closes #​11617
• runtime-dom: handle null/undefined handler in withModifiers (#​14362) (261de54), closes #​14361
• teleport: properly handling disabled teleport target anchor (#​14417) (d7bcd85), closes #​14412
• transition-group: correct move translation under scale via element rect (#​14360) (0243a79), closes #​14356
• useTemplateRef: don't update setup ref for useTemplateRef key (#​12756) (fc40ca0), closes #​12749

vueuse/vueuse (@​vueuse/components)

v14.2.1

Compare Source

   🚀 Features

• Add skills at the root directory for skills cli  -  by @​antfu (c005d)
• skills: Transfer @vueuse/skills  -  by @​serkodev in #​5286 (532ac)

   🐞 Bug Fixes

• useRafFn: Resolve reactive null fpsLimit not being handled  -  by @​nemanjamalesija in #​5284 (8ce0d)

    View changes on GitHub

axios/axios (axios)

v1.13.5

Compare Source

Release 1.13.5

Highlights

• Security: Fixed a potential Denial of Service issue involving the __proto__ key in mergeConfig. (PR #​7369)
• Bug fix: Resolved an issue where AxiosError could be missing the status field on and after v1.13.3. (PR #​7368)

Changes

Security

• Fix Denial of Service via __proto__ key in mergeConfig. (PR #​7369)

Fixes

• Fix/5657. (PR #​7313)
• Ensure status is present in AxiosError on and after v1.13.3. (PR #​7368)

Features / Improvements

• Add input validation to isAbsoluteURL. (PR #​7326)
• Refactor: bump minor package versions. (PR #​7356)

Documentation

• Clarify object-check comment. (PR #​7323)
• Fix deprecated Buffer constructor usage and README formatting. (PR #​7371)

CI / Maintenance

• Chore: fix issues with YAML. (PR #​7355)
• CI: update workflow YAMLs. (PR #​7372)
• CI: fix run condition. (PR #​7373)
• Dev deps: bump karma-sourcemap-loader from 0.3.8 to 0.4.0. (PR #​7360)
• Chore(release): prepare release 1.13.5. (PR #​7379)

New Contributors

• @​sachin11063 (first contribution — PR #​7323)
• @​asmitha-16 (first contribution — PR #​7326)

Full Changelog: https://github.com/axios/axios/compare/v1.13.4...v1.13.5

SonarSource/SonarJS (eslint-plugin-sonarjs)

v3.0.7

Compare Source

alibabacloud-go/darabonba-openapi (github.com/alibabacloud-go/darabonba-openapi/v2)

v2.1.15

Compare Source

cloudflare/cloudflare-go (github.com/cloudflare/cloudflare-go/v6)

v6.7.0

Compare Source

6.7.0 (2026-02-10)

Full Changelog: v6.6.0...v6.7.0

Features

• fraud: add new fraud detection API package
• ai_gateway: add dynamic routing endpoints for AI Gateway
• ai_gateway: add provider configuration management
• ai_search: add chat completions endpoint
• ai_search: add search endpoint
• ai_search: add custom metadata field support
• ai_search: add specific sitemaps configuration for web crawler
• acm: add Update method for Total TLS settings (upsert pattern)
• images: add metadata filtering support for image listings with operators (eq, in) and nested fields
• magic_transit: add bond_id field to site LAN configuration
• cloudforce_one: add cursor-based pagination for threat events (for deep pagination beyond 100k records)
• cloudforce_one: add includeCreatedEvents option to bulk threat event creation
• cloudforce_one: add datasetId field to threat event responses
• zero_trust: add secure_web_gateway field to MCP portal configuration
• email_security: add ids field for bulk move operations (replaces postfix_ids)

Bug Fixes

• acm: rename New method to Edit for Total TLS settings to match API semantics
• ai: add missing string union variants for AI run response types
• ai: correct ToMarkdown transform method signature to use params instead of separate file parameter
• custom_certificates: make bundle_method and other fields optional in response
• custom_certificates: restructure edit params with proper union types
• kv: change value field to support binary data in namespace value updates
• d1: mark batch field as required for multiple queries
• email_security: update bulk move documentation to specify 100 message limit
• origin_tls_client_auth: restructure to use proper subresource pattern
• workflows: properly type timeout and delay fields as unions (string or number)
• workers: correct Mode types
• browser_rendering: correct test URLs
• cloudforce_one: remove preserveUuid parameter (replaced by includeCreatedEvents)
• cloudforce_one: remove uuid field from threat event creation parameters
• radar: correct CT data source constant name casing

Chores

• intel: remove deprecated IP list endpoint and associated types
• update version to 6.7.0
• tests: skip problematic AI ToMarkdown transform tests
• api: extensive API specification updates across all packages

tencentcloud/tencentcloud-sdk-go (github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common)

v1.3.48

Compare Source

v1.3.47

Compare Source

v1.3.46

Compare Source

golang/go (go)

v1.26.0

actions/go-versions (go)

v1.26.0: 1.26.0

Compare Source

Go 1.26.0

grpc/grpc-go (google.golang.org/grpc)

v1.79.0: Release 1.79.0

Compare Source

API Changes

• mem: Add experimental API SetDefaultBufferPool to change the default buffer pool. (#​8806)
  • Special Thanks: @​vanja-p
• experimental/stats: Update MetricsRecorder to require embedding the new UnimplementedMetricsRecorder (a no-op struct) in all implementations for forward compatibility. (#​8780)

Behavior Changes

• balancer/weightedtarget: Remove handling of Addresses and only handle Endpoints in resolver updates. (#​8841)

New Features

• experimental/stats: Add support for asynchronous gauge metrics through the new AsyncMetricReporter and RegisterAsyncReporter APIs. (#​8780)
• pickfirst: Add support for weighted random shuffling of endpoints, as described in gRFC A113.
  • This is enabled by default, and can be turned off using the environment variable GRPC_EXPERIMENTAL_PF_WEIGHTED_SHUFFLING. (#​8864)
• xds: Implement :authority rewriting, as specified in gRFC A81. (#​8779)
• balancer/randomsubsetting: Implement the random_subsetting LB policy, as specified in gRFC A68. (#​8650)
  • Special Thanks: @​marek-szews
• server: Include status detail headers, if available, when terminating a stream during request header processing. (#​8754)
  • Special Thanks: @​joybestourous

Bug Fixes

• credentials/tls: Fix a bug where the port was not stripped from the authority override before validation. (#​8726)
  • Special Thanks: @​Atul1710
• xds/priority: Fix a bug causing delayed failover to lower-priority clusters when a higher-priority cluster is stuck in CONNECTING state. (#​8813)
• health: Fix a bug where health checks failed for clients using legacy compression options (WithDecompressor or RPCDecompressor). (#​8765)
  • Special Thanks: @​sanki92
• transport: Fix an issue where the HTTP/2 server could skip header size checks when terminating a stream early. (#​8769)
  • Special Thanks: @​joybestourous

Performance Improvements

• credentials/alts: Optimize read buffer alignment to reduce copies. (#​8791)
• mem: Optimize pooling and creation of buffer objects. (#​8784)
• transport: Reduce slice re-allocations by reserving slice capacity. (#​8797)

markedjs/marked (marked)

v17.0.2

Compare Source

pnpm/pnpm (pnpm)

v10.29.3

Compare Source

v10.29.2

Compare Source

v10.29.1: pnpm 10.29.1

Compare Source

Minor Changes

• The pnpm dlx / pnpx command now supports the catalog: protocol. Example: pnpm dlx shx@catalog:.
• Support configuring auditLevel in the pnpm-workspace.yaml file #​10540.
• Support bare workspace: protocol without version specifier. It is now treated as workspace:* and resolves to the concrete version during publish #​10436.

Patch Changes

• Fixed pnpm list --json returning incorrect paths when using global virtual store #​10187.

• Fix pnpm store path and pnpm store status using workspace root for path resolution when storeDir is relative #​10290.

• Fixed pnpm run -r failing with "No projects matched the filters" when an empty pnpm-workspace.yaml exists #​10497.

• Fixed a bug where catalogMode: strict would write the literal string "catalog:" to pnpm-workspace.yaml instead of the resolved version specifier when re-adding an existing catalog dependency #​10176.

• Fixed the documentation URL shown in pnpm completion --help to point to the correct page at https://pnpm.io/completion #​10281.

• Skip local file: protocol dependencies during pnpm fetch. This fixes an issue where pnpm fetch would fail in Docker builds when local directory dependencies were not available #​10460.

• Fixed pnpm audit --json to respect the --audit-level setting for both exit code and output filtering #​10540.

• update tar to version 7.5.7 to fix security issue

  Updating the version of dependency tar to 7.5.7 because the previous one have a security vulnerability reported here: CVE-2026-24842

• Fix pnpm audit --fix replacing reference overrides (e.g. $foo) with concrete versions #​10325.

• Fix shamefullyHoist set via updateConfig in .pnpmfile.cjs not being converted to publicHoistPattern #​10271.

• pnpm help should correctly report if the currently running pnpm CLI is bundled with Node.js #​10561.

• Add a warning when the current directory contains the PATH delimiter character. On macOS, folder names containing forward slashes (/) appear as colons (:) at the Unix layer. Since colons are PATH separators in POSIX systems, this breaks PATH injection for node_modules/.bin, causing binaries to not be found when running commands like pnpm exec #​10457.

Platinum Sponsors

Gold Sponsors

SortableJS/Sortable (sortablejs)

v1.15.7

Compare Source

#​2431: Fix potential browser freezing bug
#​2369: Fix edge-case where inputs being erroneously re-checked when another sortable is destroyed

mpetazzoni/sse.js (sse.js)

v2.8.0: sse.js v2.8.0

Compare Source

This release improves SSE specification compliance: retry field now updates reconnect delay, id fields containing NULL are ignored, UTF-8 BOM at stream start is stripped, and lastEventId is updated even when no event is dispatched. Also includes comprehensive spec compliance tests.

---

Configuration

📅 Schedule: Branch creation - "after 2am and before 3am" (UTC), Automerge - "after 1am and before 2am" (UTC).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

---

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/0xJacky/nginx-ui/pull/1553 **Author:** [@renovate[bot]](https://github.com/apps/renovate) **Created:** 2/9/2026 **Status:** ✅ Merged **Merged:** 2/13/2026 **Merged by:** [@renovate[bot]](https://github.com/apps/renovate) **Base:** `dev` ← **Head:** `renovate/all-minor-patch` --- ### 📝 Commits (1) - [`6370533`](https://github.com/0xJacky/nginx-ui/commit/63705339c9fe42e575213cbe83764857bc15a08c) chore(deps): update all non-major dependencies ### 📊 Changes **7 files changed** (+583 additions, -546 deletions) <details> <summary>View changed files</summary> 📝 `.github/workflows/build.yml` (+3 -3) 📝 `app/package.json` (+15 -15) 📝 `docs/package.json` (+3 -3) 📝 `go.mod` (+10 -10) 📝 `go.sum` (+18 -0) 📝 `pnpm-lock.yaml` (+520 -501) 📝 `pnpm-workspace.yaml` (+14 -14) </details> ### 📄 Description This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | Type | Update | |---|---|---|---|---|---| | [@antfu/eslint-config](https://redirect.github.com/antfu/eslint-config) | [`^7.2.0` → `^7.4.3`](https://renovatebot.com/diffs/npm/@antfu%2feslint-config/7.2.0/7.4.3) |  |  | pnpm.catalog.default | minor | | [@antfu/eslint-config](https://redirect.github.com/antfu/eslint-config) | [`^7.2.0` → `^7.4.3`](https://renovatebot.com/diffs/npm/@antfu%2feslint-config/7.2.0/7.4.3) |  |  | devDependencies | minor | | [@types/node](https://redirect.github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node) ([source](https://redirect.github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node)) | [`^24.10.10` → `^24.10.13`](https://renovatebot.com/diffs/npm/@types%2fnode/24.10.10/24.10.13) |  |  | devDependencies | patch | | [@vue/compiler-sfc](https://redirect.github.com/vuejs/core/tree/main/packages/compiler-sfc#readme) ([source](https://redirect.github.com/vuejs/core/tree/HEAD/packages/compiler-sfc)) | [`^3.5.27` → `^3.5.28`](https://renovatebot.com/diffs/npm/@vue%2fcompiler-sfc/3.5.27/3.5.28) |  |  | pnpm.catalog.default | patch | | [@vue/compiler-sfc](https://redirect.github.com/vuejs/core/tree/main/packages/compiler-sfc#readme) ([source](https://redirect.github.com/vuejs/core/tree/HEAD/packages/compiler-sfc)) | [`^3.5.27` → `^3.5.28`](https://renovatebot.com/diffs/npm/@vue%2fcompiler-sfc/3.5.27/3.5.28) |  |  | devDependencies | patch | | [@vue/reactivity](https://redirect.github.com/vuejs/core/tree/main/packages/reactivity#readme) ([source](https://redirect.github.com/vuejs/core/tree/HEAD/packages/reactivity)) | [`^3.5.27` → `^3.5.28`](https://renovatebot.com/diffs/npm/@vue%2freactivity/3.5.27/3.5.28) |  |  | pnpm.catalog.default | patch | | [@vue/reactivity](https://redirect.github.com/vuejs/core/tree/main/packages/reactivity#readme) ([source](https://redirect.github.com/vuejs/core/tree/HEAD/packages/reactivity)) | [`^3.5.27` → `^3.5.28`](https://renovatebot.com/diffs/npm/@vue%2freactivity/3.5.27/3.5.28) |  |  | dependencies | patch | | [@vue/shared](https://redirect.github.com/vuejs/core/tree/main/packages/shared#readme) ([source](https://redirect.github.com/vuejs/core/tree/HEAD/packages/shared)) | [`^3.5.27` → `^3.5.28`](https://renovatebot.com/diffs/npm/@vue%2fshared/3.5.27/3.5.28) |  |  | pnpm.catalog.default | patch | | [@vue/shared](https://redirect.github.com/vuejs/core/tree/main/packages/shared#readme) ([source](https://redirect.github.com/vuejs/core/tree/HEAD/packages/shared)) | [`^3.5.27` → `^3.5.28`](https://renovatebot.com/diffs/npm/@vue%2fshared/3.5.27/3.5.28) |  |  | dependencies | patch | | [@vueuse/components](https://redirect.github.com/vueuse/vueuse/tree/main/packages/components#readme) ([source](https://redirect.github.com/vueuse/vueuse/tree/HEAD/packages/components)) | [`^14.2.0` → `^14.2.1`](https://renovatebot.com/diffs/npm/@vueuse%2fcomponents/14.2.0/14.2.1) |  |  | pnpm.catalog.default | patch | | [@vueuse/components](https://redirect.github.com/vueuse/vueuse/tree/main/packages/components#readme) ([source](https://redirect.github.com/vueuse/vueuse/tree/HEAD/packages/components)) | [`^14.2.0` → `^14.2.1`](https://renovatebot.com/diffs/npm/@vueuse%2fcomponents/14.2.0/14.2.1) |  |  | dependencies | patch | | [@vueuse/core](https://redirect.github.com/vueuse/vueuse) ([source](https://redirect.github.com/vueuse/vueuse/tree/HEAD/packages/core)) | [`^14.2.0` → `^14.2.1`](https://renovatebot.com/diffs/npm/@vueuse%2fcore/14.2.0/14.2.1) |  |  | pnpm.catalog.default | patch | | [@vueuse/core](https://redirect.github.com/vueuse/vueuse) ([source](https://redirect.github.com/vueuse/vueuse/tree/HEAD/packages/core)) | [`^14.2.0` → `^14.2.1`](https://renovatebot.com/diffs/npm/@vueuse%2fcore/14.2.0/14.2.1) |  |  | dependencies | patch | | [@vueuse/integrations](https://redirect.github.com/vueuse/vueuse/tree/main/packages/integrations#readme) ([source](https://redirect.github.com/vueuse/vueuse/tree/HEAD/packages/integrations)) | [`^14.2.0` → `^14.2.1`](https://renovatebot.com/diffs/npm/@vueuse%2fintegrations/14.2.0/14.2.1) |  |  | pnpm.catalog.default | patch | | [@vueuse/integrations](https://redirect.github.com/vueuse/vueuse/tree/main/packages/integrations#readme) ([source](https://redirect.github.com/vueuse/vueuse/tree/HEAD/packages/integrations)) | [`^14.2.0` → `^14.2.1`](https://renovatebot.com/diffs/npm/@vueuse%2fintegrations/14.2.0/14.2.1) |  |  | dependencies | patch | | [@vueuse/router](https://redirect.github.com/vueuse/vueuse/tree/main/packages/router#readme) ([source](https://redirect.github.com/vueuse/vueuse/tree/HEAD/packages/router)) | [`^14.2.0` → `^14.2.1`](https://renovatebot.com/diffs/npm/@vueuse%2frouter/14.2.0/14.2.1) |  |  | pnpm.catalog.default | patch | | [@vueuse/router](https://redirect.github.com/vueuse/vueuse/tree/main/packages/router#readme) ([source](https://redirect.github.com/vueuse/vueuse/tree/HEAD/packages/router)) | [`^14.2.0` → `^14.2.1`](https://renovatebot.com/diffs/npm/@vueuse%2frouter/14.2.0/14.2.1) |  |  | dependencies | patch | | [axios](https://axios-http.com) ([source](https://redirect.github.com/axios/axios)) | [`^1.13.4` → `^1.13.5`](https://renovatebot.com/diffs/npm/axios/1.13.4/1.13.5) |  |  | pnpm.catalog.default | patch | | [axios](https://axios-http.com) ([source](https://redirect.github.com/axios/axios)) | [`^1.13.4` → `^1.13.5`](https://renovatebot.com/diffs/npm/axios/1.13.4/1.13.5) |  |  | dependencies | patch | | [eslint-plugin-sonarjs](https://redirect.github.com/SonarSource/SonarJS/blob/master/packages/jsts/src/rules/README.md) ([source](https://redirect.github.com/SonarSource/SonarJS)) | [`^3.0.6` → `^3.0.7`](https://renovatebot.com/diffs/npm/eslint-plugin-sonarjs/3.0.6/3.0.7) |  |  | pnpm.catalog.default | patch | | [eslint-plugin-sonarjs](https://redirect.github.com/SonarSource/SonarJS/blob/master/packages/jsts/src/rules/README.md) ([source](https://redirect.github.com/SonarSource/SonarJS)) | [`^3.0.6` → `^3.0.7`](https://renovatebot.com/diffs/npm/eslint-plugin-sonarjs/3.0.6/3.0.7) |  |  | devDependencies | patch | | [github.com/alibabacloud-go/darabonba-openapi/v2](https://redirect.github.com/alibabacloud-go/darabonba-openapi) | `v2.1.14` → `v2.1.15` |  |  | require | patch | | [github.com/cloudflare/cloudflare-go/v6](https://redirect.github.com/cloudflare/cloudflare-go) | `v6.6.0` → `v6.7.0` |  |  | require | minor | | [github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common](https://redirect.github.com/tencentcloud/tencentcloud-sdk-go) | `v1.3.45` → `v1.3.48` |  |  | require | patch | | [go](https://go.dev/) ([source](https://redirect.github.com/golang/go)) | `1.25.7` → `1.26.0` |  |  | golang | minor | | [go](https://redirect.github.com/actions/go-versions) | `^1.25.7` → `^1.26.0` |  |  | uses-with | minor | | [golang.org/x/crypto](https://pkg.go.dev/golang.org/x/crypto) | [`v0.47.0` → `v0.48.0`](https://cs.opensource.google/go/x/crypto/+/refs/tags/v0.47.0...refs/tags/v0.48.0) |  |  | require | minor | | [golang.org/x/net](https://pkg.go.dev/golang.org/x/net) | [`v0.49.0` → `v0.50.0`](https://cs.opensource.google/go/x/net/+/refs/tags/v0.49.0...refs/tags/v0.50.0) |  |  | require | minor | | [golang.org/x/oauth2](https://pkg.go.dev/golang.org/x/oauth2) | [`v0.34.0` → `v0.35.0`](https://cs.opensource.google/go/x/oauth2/+/refs/tags/v0.34.0...refs/tags/v0.35.0) |  |  | require | minor | | [google.golang.org/grpc](https://redirect.github.com/grpc/grpc-go) | `v1.78.0` → `v1.79.0` |  |  | require | minor | | [marked](https://marked.js.org) ([source](https://redirect.github.com/markedjs/marked)) | [`^17.0.1` → `^17.0.2`](https://renovatebot.com/diffs/npm/marked/17.0.1/17.0.2) |  |  | pnpm.catalog.default | patch | | [marked](https://marked.js.org) ([source](https://redirect.github.com/markedjs/marked)) | [`^17.0.1` → `^17.0.2`](https://renovatebot.com/diffs/npm/marked/17.0.1/17.0.2) |  |  | dependencies | patch | | [pnpm](https://pnpm.io) ([source](https://redirect.github.com/pnpm/pnpm/tree/HEAD/pnpm)) | [`10.28.2+sha512.41872f037ad22f7348e3b1debbaf7e867cfd448f2726d9cf74c08f19507c31d2c8e7a11525b983febc2df640b5438dee6023ebb1f84ed43cc2d654d2bc326264` → `10.29.3`](https://renovatebot.com/diffs/npm/pnpm/10.28.2/10.29.3) |  |  | packageManager | minor | | [sortablejs](https://redirect.github.com/SortableJS/Sortable) | [`^1.15.6` → `^1.15.7`](https://renovatebot.com/diffs/npm/sortablejs/1.15.6/1.15.7) |  |  | pnpm.catalog.default | patch | | [sortablejs](https://redirect.github.com/SortableJS/Sortable) | [`^1.15.6` → `^1.15.7`](https://renovatebot.com/diffs/npm/sortablejs/1.15.6/1.15.7) |  |  | dependencies | patch | | [sse.js](https://redirect.github.com/mpetazzoni/sse.js) | [`^2.7.2` → `^2.8.0`](https://renovatebot.com/diffs/npm/sse.js/2.7.2/2.8.0) |  |  | pnpm.catalog.default | minor | | [sse.js](https://redirect.github.com/mpetazzoni/sse.js) | [`^2.7.2` → `^2.8.0`](https://renovatebot.com/diffs/npm/sse.js/2.7.2/2.8.0) |  |  | dependencies | minor | | [vue](https://redirect.github.com/vuejs/core/tree/main/packages/vue#readme) ([source](https://redirect.github.com/vuejs/core)) | [`^3.5.27` → `^3.5.28`](https://renovatebot.com/diffs/npm/vue/3.5.27/3.5.28) |  |  | pnpm.catalog.default | patch | | [vue](https://redirect.github.com/vuejs/core/tree/main/packages/vue#readme) ([source](https://redirect.github.com/vuejs/core)) | [`^3.5.27` → `^3.5.28`](https://renovatebot.com/diffs/npm/vue/3.5.27/3.5.28) |  |  | dependencies | patch | --- ### Release Notes <details> <summary>antfu/eslint-config (@&#8203;antfu/eslint-config)</summary> ### [`v7.4.3`](https://redirect.github.com/antfu/eslint-config/releases/tag/v7.4.3) [Compare Source](https://redirect.github.com/antfu/eslint-config/compare/v7.4.2...v7.4.3) #####    🐞 Bug Fixes - Formating regression  -  by [@&#8203;antfu](https://redirect.github.com/antfu) [<samp>(2ef8a)</samp>](https://redirect.github.com/antfu/eslint-config/commit/2ef8a00) #####     [View changes on GitHub](https://redirect.github.com/antfu/eslint-config/compare/v7.4.2...v7.4.3) ### [`v7.4.2`](https://redirect.github.com/antfu/eslint-config/releases/tag/v7.4.2) [Compare Source](https://redirect.github.com/antfu/eslint-config/compare/v7.4.1...v7.4.2) #####    🐞 Bug Fixes - Relax eslint peer deps range  -  by [@&#8203;antfu](https://redirect.github.com/antfu) [<samp>(b5f53)</samp>](https://redirect.github.com/antfu/eslint-config/commit/b5f53dc) #####     [View changes on GitHub](https://redirect.github.com/antfu/eslint-config/compare/v7.4.1...v7.4.2) ### [`v7.4.1`](https://redirect.github.com/antfu/eslint-config/releases/tag/v7.4.1) [Compare Source](https://redirect.github.com/antfu/eslint-config/compare/v7.4.0...v7.4.1) #####    🐞 Bug Fixes - Ignore typescript files when `typescript` is off  -  by [@&#8203;antfu](https://redirect.github.com/antfu) [<samp>(bda75)</samp>](https://redirect.github.com/antfu/eslint-config/commit/bda75b8) #####     [View changes on GitHub](https://redirect.github.com/antfu/eslint-config/compare/v7.4.0...v7.4.1) ### [`v7.4.0`](https://redirect.github.com/antfu/eslint-config/releases/tag/v7.4.0) [Compare Source](https://redirect.github.com/antfu/eslint-config/compare/v7.3.0...v7.4.0) #####    🚀 Features - Angular support  -  by [@&#8203;St2r](https://redirect.github.com/St2r) and [@&#8203;antfu](https://redirect.github.com/antfu) in [#&#8203;804](https://redirect.github.com/antfu/eslint-config/issues/804) [<samp>(67b1b)</samp>](https://redirect.github.com/antfu/eslint-config/commit/67b1be4) #####    🐞 Bug Fixes - Update peer dependency requirement for eslint-plugin-react-refresh  -  by [@&#8203;hyoban](https://redirect.github.com/hyoban) in [#&#8203;813](https://redirect.github.com/antfu/eslint-config/issues/813) [<samp>(19a43)</samp>](https://redirect.github.com/antfu/eslint-config/commit/19a4312) #####     [View changes on GitHub](https://redirect.github.com/antfu/eslint-config/compare/v7.3.0...v7.4.0) ### [`v7.3.0`](https://redirect.github.com/antfu/eslint-config/releases/tag/v7.3.0) [Compare Source](https://redirect.github.com/antfu/eslint-config/compare/v7.2.0...v7.3.0) #####    🚀 Features - Upgrade `eslint-plugin-react-refresh`, `eslint-plugin-regexp`  -  by [@&#8203;antfu](https://redirect.github.com/antfu) [<samp>(610e7)</samp>](https://redirect.github.com/antfu/eslint-config/commit/610e7b0) - **react**: Sync recommend rules  -  by [@&#8203;hyoban](https://redirect.github.com/hyoban) in [#&#8203;810](https://redirect.github.com/antfu/eslint-config/issues/810) [<samp>(1b870)</samp>](https://redirect.github.com/antfu/eslint-config/commit/1b87085) #####    🐞 Bug Fixes - Use ConfigWithExtends instead of Linter.Config  -  by [@&#8203;hyoban](https://redirect.github.com/hyoban) in [#&#8203;809](https://redirect.github.com/antfu/eslint-config/issues/809) [<samp>(ad4e5)</samp>](https://redirect.github.com/antfu/eslint-config/commit/ad4e54e) #####     [View changes on GitHub](https://redirect.github.com/antfu/eslint-config/compare/v7.2.0...v7.3.0) </details> <details> <summary>vuejs/core (@&#8203;vue/compiler-sfc)</summary> ### [`v3.5.28`](https://redirect.github.com/vuejs/core/blob/HEAD/CHANGELOG.md#3528-2026-02-09) [Compare Source](https://redirect.github.com/vuejs/core/compare/v3.5.27...v3.5.28) ##### Bug Fixes - **transition:** avoid unexpected `cancelled` parameter in transition `done` callback ([#&#8203;14391](https://redirect.github.com/vuejs/core/issues/14391)) ([6798853](https://redirect.github.com/vuejs/core/commit/67988530f6a3cfdd0d80bf967033cb9abf377174)) - **compiler-sfc:** add resolution trying for `.mts/.cts` files ([#&#8203;14402](https://redirect.github.com/vuejs/core/issues/14402)) ([c09d41f](https://redirect.github.com/vuejs/core/commit/c09d41ffe150903b1fcd69a6f6bdeea2d2c6c243)), closes [vuejs/router#2611](https://redirect.github.com/vuejs/router/issues/2611) - **compiler-sfc:** no params were generated when using withDefaults ([#&#8203;12823](https://redirect.github.com/vuejs/core/issues/12823)) ([b0a1f05](https://redirect.github.com/vuejs/core/commit/b0a1f0504a67fb1a6a110a5d05cdec0b878dde29)), closes [#&#8203;12822](https://redirect.github.com/vuejs/core/issues/12822) - **reactivity:** add `__v_skip` flag to `EffectScope` to prevent reactive conversion ([#&#8203;14359](https://redirect.github.com/vuejs/core/issues/14359)) ([48b7552](https://redirect.github.com/vuejs/core/commit/48b7552cce784725376a4fab078272676ce02d69)), closes [#&#8203;14357](https://redirect.github.com/vuejs/core/issues/14357) - **runtime-core:** avoid retaining el on cached text vnodes during static traversal ([#&#8203;14419](https://redirect.github.com/vuejs/core/issues/14419)) ([4ace79a](https://redirect.github.com/vuejs/core/commit/4ace79ac4c66a4f96cd330b47474ce117bc851ab)), closes [#&#8203;14134](https://redirect.github.com/vuejs/core/issues/14134) - **runtime-core:** prevent child component updates when style remains unchanged ([#&#8203;12825](https://redirect.github.com/vuejs/core/issues/12825)) ([57866b5](https://redirect.github.com/vuejs/core/commit/57866b5af1aff7ce1026b529443b81465c56f802)), closes [#&#8203;12826](https://redirect.github.com/vuejs/core/issues/12826) - **runtime-core:** properly handle async component update before resolve ([#&#8203;11619](https://redirect.github.com/vuejs/core/issues/11619)) ([e71c26c](https://redirect.github.com/vuejs/core/commit/e71c26c03d44c9c93569ed7ebfe7dabaf3bbdb06)), closes [#&#8203;11617](https://redirect.github.com/vuejs/core/issues/11617) - **runtime-dom:** handle null/undefined handler in withModifiers ([#&#8203;14362](https://redirect.github.com/vuejs/core/issues/14362)) ([261de54](https://redirect.github.com/vuejs/core/commit/261de547cd6685fc8862679941d93b530d504731)), closes [#&#8203;14361](https://redirect.github.com/vuejs/core/issues/14361) - **teleport:** properly handling disabled teleport target anchor ([#&#8203;14417](https://redirect.github.com/vuejs/core/issues/14417)) ([d7bcd85](https://redirect.github.com/vuejs/core/commit/d7bcd858883d90a1593b45cdc43f9fa55bc790bc)), closes [#&#8203;14412](https://redirect.github.com/vuejs/core/issues/14412) - **transition-group:** correct move translation under scale via element rect ([#&#8203;14360](https://redirect.github.com/vuejs/core/issues/14360)) ([0243a79](https://redirect.github.com/vuejs/core/commit/0243a792ac1cf8b0308f552927ed2ecd8627b839)), closes [#&#8203;14356](https://redirect.github.com/vuejs/core/issues/14356) - **useTemplateRef:** don't update setup ref for useTemplateRef key ([#&#8203;12756](https://redirect.github.com/vuejs/core/issues/12756)) ([fc40ca0](https://redirect.github.com/vuejs/core/commit/fc40ca0216a7028f6ec0195344c976423e239ef3)), closes [#&#8203;12749](https://redirect.github.com/vuejs/core/issues/12749) </details> <details> <summary>vueuse/vueuse (@&#8203;vueuse/components)</summary> ### [`v14.2.1`](https://redirect.github.com/vueuse/vueuse/releases/tag/v14.2.1) [Compare Source](https://redirect.github.com/vueuse/vueuse/compare/v14.2.0...v14.2.1) #####    🚀 Features - Add skills at the root directory for skills cli  -  by [@&#8203;antfu](https://redirect.github.com/antfu) [<samp>(c005d)</samp>](https://redirect.github.com/vueuse/vueuse/commit/c005dbef) - **skills**: Transfer `@vueuse/skills`  -  by [@&#8203;serkodev](https://redirect.github.com/serkodev) in [#&#8203;5286](https://redirect.github.com/vueuse/vueuse/issues/5286) [<samp>(532ac)</samp>](https://redirect.github.com/vueuse/vueuse/commit/532acd2d) #####    🐞 Bug Fixes - **useRafFn**: Resolve reactive null fpsLimit not being handled  -  by [@&#8203;nemanjamalesija](https://redirect.github.com/nemanjamalesija) in [#&#8203;5284](https://redirect.github.com/vueuse/vueuse/issues/5284) [<samp>(8ce0d)</samp>](https://redirect.github.com/vueuse/vueuse/commit/8ce0dae1) #####     [View changes on GitHub](https://redirect.github.com/vueuse/vueuse/compare/v14.2.0...v14.2.1) </details> <details> <summary>axios/axios (axios)</summary> ### [`v1.13.5`](https://redirect.github.com/axios/axios/releases/tag/v1.13.5) [Compare Source](https://redirect.github.com/axios/axios/compare/v1.13.4...v1.13.5) #### Release 1.13.5 ##### Highlights - **Security:** Fixed a potential **Denial of Service** issue involving the `__proto__` key in `mergeConfig`. (PR [#&#8203;7369](https://redirect.github.com/axios/axios/pull/7369)) - **Bug fix:** Resolved an issue where `AxiosError` could be missing the `status` field on and after **v1.13.3**. (PR [#&#8203;7368](https://redirect.github.com/axios/axios/pull/7368)) ##### Changes ##### Security - Fix Denial of Service via `__proto__` key in `mergeConfig`. (PR [#&#8203;7369](https://redirect.github.com/axios/axios/pull/7369)) ##### Fixes - Fix/5657. (PR [#&#8203;7313](https://redirect.github.com/axios/axios/pull/7313)) - Ensure `status` is present in `AxiosError` on and after v1.13.3. (PR [#&#8203;7368](https://redirect.github.com/axios/axios/pull/7368)) ##### Features / Improvements - Add input validation to `isAbsoluteURL`. (PR [#&#8203;7326](https://redirect.github.com/axios/axios/pull/7326)) - Refactor: bump minor package versions. (PR [#&#8203;7356](https://redirect.github.com/axios/axios/pull/7356)) ##### Documentation - Clarify object-check comment. (PR [#&#8203;7323](https://redirect.github.com/axios/axios/pull/7323)) - Fix deprecated `Buffer` constructor usage and README formatting. (PR [#&#8203;7371](https://redirect.github.com/axios/axios/pull/7371)) ##### CI / Maintenance - Chore: fix issues with YAML. (PR [#&#8203;7355](https://redirect.github.com/axios/axios/pull/7355)) - CI: update workflow YAMLs. (PR [#&#8203;7372](https://redirect.github.com/axios/axios/pull/7372)) - CI: fix run condition. (PR [#&#8203;7373](https://redirect.github.com/axios/axios/pull/7373)) - Dev deps: bump `karma-sourcemap-loader` from 0.3.8 to 0.4.0. (PR [#&#8203;7360](https://redirect.github.com/axios/axios/pull/7360)) - Chore(release): prepare release 1.13.5. (PR [#&#8203;7379](https://redirect.github.com/axios/axios/pull/7379)) ##### New Contributors - [@&#8203;sachin11063](https://redirect.github.com/sachin11063) (first contribution — PR [#&#8203;7323](https://redirect.github.com/axios/axios/pull/7323)) - [@&#8203;asmitha-16](https://redirect.github.com/asmitha-16) (first contribution — PR [#&#8203;7326](https://redirect.github.com/axios/axios/pull/7326)) **Full Changelog:** <https://github.com/axios/axios/compare/v1.13.4...v1.13.5> </details> <details> <summary>SonarSource/SonarJS (eslint-plugin-sonarjs)</summary> ### [`v3.0.7`](https://redirect.github.com/SonarSource/SonarJS/compare/858954f8762d01ad7d05db4e1ab09adf94f20e3c...ec9fc32d84fcb80aa65892b1ddec3056234ff10e) [Compare Source](https://redirect.github.com/SonarSource/SonarJS/compare/858954f8762d01ad7d05db4e1ab09adf94f20e3c...ec9fc32d84fcb80aa65892b1ddec3056234ff10e) </details> <details> <summary>alibabacloud-go/darabonba-openapi (github.com/alibabacloud-go/darabonba-openapi/v2)</summary> ### [`v2.1.15`](https://redirect.github.com/alibabacloud-go/darabonba-openapi/compare/v2.1.14...v2.1.15) [Compare Source](https://redirect.github.com/alibabacloud-go/darabonba-openapi/compare/v2.1.14...v2.1.15) </details> <details> <summary>cloudflare/cloudflare-go (github.com/cloudflare/cloudflare-go/v6)</summary> ### [`v6.7.0`](https://redirect.github.com/cloudflare/cloudflare-go/releases/tag/v6.7.0) [Compare Source](https://redirect.github.com/cloudflare/cloudflare-go/compare/v6.6.0...v6.7.0) #### 6.7.0 (2026-02-10) Full Changelog: [v6.6.0...v6.7.0](https://redirect.github.com/cloudflare/cloudflare-go/compare/v6.6.0...v6.7.0) ##### Features - **fraud:** add new fraud detection API package - **ai\_gateway:** add dynamic routing endpoints for AI Gateway - **ai\_gateway:** add provider configuration management - **ai\_search:** add chat completions endpoint - **ai\_search:** add search endpoint - **ai\_search:** add custom metadata field support - **ai\_search:** add specific sitemaps configuration for web crawler - **acm:** add Update method for Total TLS settings (upsert pattern) - **images:** add metadata filtering support for image listings with operators (eq, in) and nested fields - **magic\_transit:** add bond\_id field to site LAN configuration - **cloudforce\_one:** add cursor-based pagination for threat events (for deep pagination beyond 100k records) - **cloudforce\_one:** add includeCreatedEvents option to bulk threat event creation - **cloudforce\_one:** add datasetId field to threat event responses - **zero\_trust:** add secure\_web\_gateway field to MCP portal configuration - **email\_security:** add ids field for bulk move operations (replaces postfix\_ids) ##### Bug Fixes - **acm:** rename New method to Edit for Total TLS settings to match API semantics - **ai:** add missing string union variants for AI run response types - **ai:** correct ToMarkdown transform method signature to use params instead of separate file parameter - **custom\_certificates:** make bundle\_method and other fields optional in response - **custom\_certificates:** restructure edit params with proper union types - **kv:** change value field to support binary data in namespace value updates - **d1:** mark batch field as required for multiple queries - **email\_security:** update bulk move documentation to specify 100 message limit - **origin\_tls\_client\_auth:** restructure to use proper subresource pattern - **workflows:** properly type timeout and delay fields as unions (string or number) - **workers:** correct Mode types - **browser\_rendering:** correct test URLs - **cloudforce\_one:** remove preserveUuid parameter (replaced by includeCreatedEvents) - **cloudforce\_one:** remove uuid field from threat event creation parameters - **radar:** correct CT data source constant name casing ##### Chores - **intel:** remove deprecated IP list endpoint and associated types - update version to 6.7.0 - **tests:** skip problematic AI ToMarkdown transform tests - **api:** extensive API specification updates across all packages </details> <details> <summary>tencentcloud/tencentcloud-sdk-go (github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common)</summary> ### [`v1.3.48`](https://redirect.github.com/tencentcloud/tencentcloud-sdk-go/compare/v1.3.47...v1.3.48) [Compare Source](https://redirect.github.com/tencentcloud/tencentcloud-sdk-go/compare/v1.3.47...v1.3.48) ### [`v1.3.47`](https://redirect.github.com/tencentcloud/tencentcloud-sdk-go/compare/v1.3.46...v1.3.47) [Compare Source](https://redirect.github.com/tencentcloud/tencentcloud-sdk-go/compare/v1.3.46...v1.3.47) ### [`v1.3.46`](https://redirect.github.com/tencentcloud/tencentcloud-sdk-go/compare/v1.3.45...v1.3.46) [Compare Source](https://redirect.github.com/tencentcloud/tencentcloud-sdk-go/compare/v1.3.45...v1.3.46) </details> <details> <summary>golang/go (go)</summary> ### [`v1.26.0`](https://redirect.github.com/golang/go/compare/go1.25.7...go1.26rc2) </details> <details> <summary>actions/go-versions (go)</summary> ### [`v1.26.0`](https://redirect.github.com/actions/go-versions/releases/tag/1.26.0-21889650668): 1.26.0 [Compare Source](https://redirect.github.com/actions/go-versions/compare/1.25.7-21696103256...1.26.0-21889650668) Go 1.26.0 </details> <details> <summary>grpc/grpc-go (google.golang.org/grpc)</summary> ### [`v1.79.0`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.79.0): Release 1.79.0 [Compare Source](https://redirect.github.com/grpc/grpc-go/compare/v1.78.0...v1.79.0) ### API Changes - mem: Add experimental API `SetDefaultBufferPool` to change the default buffer pool. ([#&#8203;8806](https://redirect.github.com/grpc/grpc-go/issues/8806)) - Special Thanks: [@&#8203;vanja-p](https://redirect.github.com/vanja-p) - experimental/stats: Update `MetricsRecorder` to require embedding the new `UnimplementedMetricsRecorder` (a no-op struct) in all implementations for forward compatibility. ([#&#8203;8780](https://redirect.github.com/grpc/grpc-go/issues/8780)) ### Behavior Changes - balancer/weightedtarget: Remove handling of `Addresses` and only handle `Endpoints` in resolver updates. ([#&#8203;8841](https://redirect.github.com/grpc/grpc-go/issues/8841)) ### New Features - experimental/stats: Add support for asynchronous gauge metrics through the new `AsyncMetricReporter` and `RegisterAsyncReporter` APIs. ([#&#8203;8780](https://redirect.github.com/grpc/grpc-go/issues/8780)) - pickfirst: Add support for weighted random shuffling of endpoints, as described in [gRFC A113](https://redirect.github.com/grpc/proposal/pull/535). - This is enabled by default, and can be turned off using the environment variable `GRPC_EXPERIMENTAL_PF_WEIGHTED_SHUFFLING`. ([#&#8203;8864](https://redirect.github.com/grpc/grpc-go/issues/8864)) - xds: Implement `:authority` rewriting, as specified in [gRFC A81](https://redirect.github.com/grpc/proposal/blob/master/A81-xds-authority-rewriting.md). ([#&#8203;8779](https://redirect.github.com/grpc/grpc-go/issues/8779)) - balancer/randomsubsetting: Implement the `random_subsetting` LB policy, as specified in [gRFC A68](https://redirect.github.com/grpc/proposal/blob/master/A68-random-subsetting.md). ([#&#8203;8650](https://redirect.github.com/grpc/grpc-go/issues/8650)) - Special Thanks: [@&#8203;marek-szews](https://redirect.github.com/marek-szews) - server: Include status detail headers, if available, when terminating a stream during request header processing. ([#&#8203;8754](https://redirect.github.com/grpc/grpc-go/issues/8754)) - Special Thanks: [@&#8203;joybestourous](https://redirect.github.com/joybestourous) ### Bug Fixes - credentials/tls: Fix a bug where the port was not stripped from the authority override before validation. ([#&#8203;8726](https://redirect.github.com/grpc/grpc-go/issues/8726)) - Special Thanks: [@&#8203;Atul1710](https://redirect.github.com/Atul1710) - xds/priority: Fix a bug causing delayed failover to lower-priority clusters when a higher-priority cluster is stuck in `CONNECTING` state. ([#&#8203;8813](https://redirect.github.com/grpc/grpc-go/issues/8813)) - health: Fix a bug where health checks failed for clients using legacy compression options (`WithDecompressor` or `RPCDecompressor`). ([#&#8203;8765](https://redirect.github.com/grpc/grpc-go/issues/8765)) - Special Thanks: [@&#8203;sanki92](https://redirect.github.com/sanki92) - transport: Fix an issue where the HTTP/2 server could skip header size checks when terminating a stream early. ([#&#8203;8769](https://redirect.github.com/grpc/grpc-go/issues/8769)) - Special Thanks: [@&#8203;joybestourous](https://redirect.github.com/joybestourous) ### Performance Improvements - credentials/alts: Optimize read buffer alignment to reduce copies. ([#&#8203;8791](https://redirect.github.com/grpc/grpc-go/issues/8791)) - mem: Optimize pooling and creation of `buffer` objects. ([#&#8203;8784](https://redirect.github.com/grpc/grpc-go/issues/8784)) - transport: Reduce slice re-allocations by reserving slice capacity. ([#&#8203;8797](https://redirect.github.com/grpc/grpc-go/issues/8797)) </details> <details> <summary>markedjs/marked (marked)</summary> ### [`v17.0.2`](https://redirect.github.com/markedjs/marked/compare/v17.0.1...e8246208bc9dffcf550d5d3744746c6809ad2bdf) [Compare Source](https://redirect.github.com/markedjs/marked/compare/v17.0.1...v17.0.2) </details> <details> <summary>pnpm/pnpm (pnpm)</summary> ### [`v10.29.3`](https://redirect.github.com/pnpm/pnpm/compare/v10.29.2...v10.29.3) [Compare Source](https://redirect.github.com/pnpm/pnpm/compare/v10.29.2...v10.29.3) ### [`v10.29.2`](https://redirect.github.com/pnpm/pnpm/compare/v10.29.1...v10.29.2) [Compare Source](https://redirect.github.com/pnpm/pnpm/compare/v10.29.1...v10.29.2) ### [`v10.29.1`](https://redirect.github.com/pnpm/pnpm/releases/tag/v10.29.1): pnpm 10.29.1 [Compare Source](https://redirect.github.com/pnpm/pnpm/compare/v10.28.2...v10.29.1) #### Minor Changes - The `pnpm dlx` / `pnpx` command now supports the `catalog:` protocol. Example: `pnpm dlx shx@catalog:`. - Support configuring `auditLevel` in the `pnpm-workspace.yaml` file [#&#8203;10540](https://redirect.github.com/pnpm/pnpm/issues/10540). - Support bare `workspace:` protocol without version specifier. It is now treated as `workspace:*` and resolves to the concrete version during publish [#&#8203;10436](https://redirect.github.com/pnpm/pnpm/pull/10436). #### Patch Changes - Fixed `pnpm list --json` returning incorrect paths when using global virtual store [#&#8203;10187](https://redirect.github.com/pnpm/pnpm/issues/10187). - Fix `pnpm store path` and `pnpm store status` using workspace root for path resolution when `storeDir` is relative [#&#8203;10290](https://redirect.github.com/pnpm/pnpm/issues/10290). - Fixed `pnpm run -r` failing with "No projects matched the filters" when an empty `pnpm-workspace.yaml` exists [#&#8203;10497](https://redirect.github.com/pnpm/pnpm/issues/10497). - Fixed a bug where `catalogMode: strict` would write the literal string `"catalog:"` to `pnpm-workspace.yaml` instead of the resolved version specifier when re-adding an existing catalog dependency [#&#8203;10176](https://redirect.github.com/pnpm/pnpm/issues/10176). - Fixed the documentation URL shown in `pnpm completion --help` to point to the correct page at <https://pnpm.io/completion> [#&#8203;10281](https://redirect.github.com/pnpm/pnpm/issues/10281). - Skip local `file:` protocol dependencies during `pnpm fetch`. This fixes an issue where `pnpm fetch` would fail in Docker builds when local directory dependencies were not available [#&#8203;10460](https://redirect.github.com/pnpm/pnpm/issues/10460). - Fixed `pnpm audit --json` to respect the `--audit-level` setting for both exit code and output filtering [#&#8203;10540](https://redirect.github.com/pnpm/pnpm/issues/10540). - update tar to version 7.5.7 to fix security issue Updating the version of dependency tar to 7.5.7 because the previous one have a security vulnerability reported here: <a href="https://redirect.github.com/advisories/GHSA-34x7-hfp2-rc4v">CVE-2026-24842</a> - Fix `pnpm audit --fix` replacing reference overrides (e.g. `$foo`) with concrete versions [#&#8203;10325](https://redirect.github.com/pnpm/pnpm/issues/10325). - Fix `shamefullyHoist` set via `updateConfig` in `.pnpmfile.cjs` not being converted to `publicHoistPattern` [#&#8203;10271](https://redirect.github.com/pnpm/pnpm/issues/10271). - `pnpm help` should correctly report if the currently running pnpm CLI is bundled with Node.js [#&#8203;10561](https://redirect.github.com/pnpm/pnpm/issues/10561). - Add a warning when the current directory contains the PATH delimiter character. On macOS, folder names containing forward slashes (/) appear as colons (:) at the Unix layer. Since colons are PATH separators in POSIX systems, this breaks PATH injection for `node_modules/.bin`, causing binaries to not be found when running commands like `pnpm exec` [#&#8203;10457](https://redirect.github.com/pnpm/pnpm/issues/10457). #### Platinum Sponsors <table> <tbody> <tr> <td align="center" valign="middle"> <a href="https://bit.dev/?utm_source=pnpm&utm_medium=release_notes" target="_blank"><img src="https://pnpm.io/img/users/bit.svg" width="80" alt="Bit"></a> </td> </tr> </tbody> </table> #### Gold Sponsors <table> <tbody> <tr> <td align="center" valign="middle"> <a href="https://discord.com/?utm_source=pnpm&utm_medium=release_notes" target="_blank"> <picture> <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/discord.svg" /> <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/discord_light.svg" /> <img src="https://pnpm.io/img/users/discord.svg" width="220" alt="Discord" /> </picture> </a> </td> <td align="center" valign="middle"> <a href="https://coderabbit.ai/?utm_source=pnpm&utm_medium=release_notes" target="_blank"> <picture> <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/coderabbit.svg" /> <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/coderabbit_light.svg" /> <img src="https://pnpm.io/img/users/coderabbit.svg" width="220" alt="CodeRabbit" /> </picture> </a> </td> <td align="center" valign="middle"> <a href="https://workleap.com/?utm_source=pnpm&utm_medium=release_notes" target="_blank"> <picture> <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/workleap.svg" /> <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/workleap_light.svg" /> <img src="https://pnpm.io/img/users/workleap.svg" width="190" alt="Workleap" /> </picture> </a> </td> </tr> <tr> <td align="center" valign="middle"> <a href="https://stackblitz.com/?utm_source=pnpm&utm_medium=release_notes" target="_blank"> <picture> <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/stackblitz.svg" /> <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/stackblitz_light.svg" /> <img src="https://pnpm.io/img/users/stackblitz.svg" width="190" alt="Stackblitz" /> </picture> </a> </td> <td align="center" valign="middle"> <a href="https://vite.dev/?utm_source=pnpm&utm_medium=release_notes" target="_blank"> <img src="https://pnpm.io/img/users/vitejs.svg" width="42" alt="Vite"> </a> </td> </tr> </tbody> </table> </details> <details> <summary>SortableJS/Sortable (sortablejs)</summary> ### [`v1.15.7`](https://redirect.github.com/SortableJS/Sortable/releases/tag/1.15.7) [Compare Source](https://redirect.github.com/SortableJS/Sortable/compare/1.15.6...1.15.7) [#&#8203;2431](https://redirect.github.com/SortableJS/Sortable/issues/2431): Fix potential browser freezing bug [#&#8203;2369](https://redirect.github.com/SortableJS/Sortable/issues/2369): Fix edge-case where inputs being erroneously re-checked when another sortable is destroyed </details> <details> <summary>mpetazzoni/sse.js (sse.js)</summary> ### [`v2.8.0`](https://redirect.github.com/mpetazzoni/sse.js/releases/tag/v2.8.0): sse.js v2.8.0 [Compare Source](https://redirect.github.com/mpetazzoni/sse.js/compare/v2.7.2...v2.8.0) This release improves SSE specification compliance: `retry` field now updates reconnect delay, `id` fields containing NULL are ignored, UTF-8 BOM at stream start is stripped, and `lastEventId` is updated even when no event is dispatched. Also includes comprehensive spec compliance tests. </details> --- ### Configuration 📅 **Schedule**: Branch creation - "after 2am and before 3am" (UTC), Automerge - "after 1am and before 2am" (UTC). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/0xJacky/nginx-ui). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi45NS4yIiwidXBkYXRlZEluVmVyIjoiNDMuOC41IiwidGFyZ2V0QnJhbmNoIjoiZGV2IiwibGFiZWxzIjpbXX0=--> --- _{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

kerem 2026-03-01 17:15:42 +03:00

• closed this issue
• added the
  pull-request
  label

Sign in to join this conversation.

No Branch/Tag specified

Branches Tags

dev

weblate

main

renovate/uuid-14.x

renovate/typescript-6.x

renovate/all-minor-patch

cursor/interface-conversion-error-36ec

cursor/docker-api-stat-path-27ca

cursor/nginx-ui-disk-i-o-3d99

cursor/cloudflare-dns-comments-299c

cursor/access-log-dark-mode-font-dfdc

copilot/fix-ai-chat-title-error

cursor/propfind-method-logging-33b5

cursor/docker-client-version-update-d1b4

copilot/fix-nginx-ui-api-errors

cursor/update-x-forwarded-proto-header-handling-1223

cursor/fix-nginx-ui-issue-1455-gpt-5.1-codex-high-079c

cursor/update-nginx-ui-to-vue-3-gpt-5.1-codex-high-3100

cursor/investigate-nginx-ui-issue-1446-gpt-5.1-codex-high-2be0

v1

v2.3.8

v2.3.7

v2.3.6

v2.3.5

v2.3.4

v2.3.3

v2.3.2

v2.3.1

v2.3.0

v2.2.1

v2.2.0-patch.1

v2.2.0

v2.1.17

v2.1.16

v2.1.15

v2.1.14

v2.1.13

v2.1.12

v2.1.11

v2.1.10

v2.1.9

v2.1.8

v2.1.7

v2.1.6

v2.1.5

v2.1.4-patch.1

v2.1.4

v2.1.3

v2.1.2

v2.1.1

v2.1.0-patch.1

v2.1.0

v2.1.0-rc.3

v2.1.0-rc.2

v2.1.0-rc.1

v2.1.0-beta.1

v2.0.2

v2.0.1

v2.0.0

v2.0.0-rc.8-patch.1

v2.0.0-rc.8

v2.0.0-rc.7-patch.6

v2.0.0-rc.7-patch.7

v2.0.0-rc.7-patch.8

v2.0.0-rc.7-patch.5

v2.0.0-rc.7-patch.4

v2.0.0-rc.7-patch.3

v2.0.0-rc.7-patch.2

v2.0.0-rc.7-patch.1

v2.0.0-rc.7

v2.0.0-rc.6-patch.5

v2.0.0-rc.6-patch.4

v2.0.0-rc.6-patch.3

v2.0.0-rc.6-patch.2

v2.0.0-rc.6-patch.1

v2.0.0-rc.6

v2.0.0-rc.5

v2.0.0-rc.4-patch.3

v2.0.0-rc.4-patch.2

v2.0.0-rc.4-patch.1

v2.0.0-rc.4

v2.0.0-rc.3-patch.1

v2.0.0-rc.3

v2.0.0-rc.2

v2.0.0-rc.1-patch.2

v2.0.0-rc.1-patch.1

v2.0.0-rc.1

v2.0.0-beta.42

v2.0.0-beta.41

v2.0.0-beta.40

v2.0.0-beta.39-risefront.6

v2.0.0-beta.39-risefront.5

v2.0.0-beta.39-risefront.4

v2.0.0-beta.39-risefront.3

v2.0.0-beta.39-risefront.2

v2.0.0-beta.39-risefront

v2.0.0-beta.39

v2.0.0-beta.38

v2.0.0-beta.37-patch.5

v2.0.0-beta.37-patch.3

v2.0.0-beta.37-patch.4

v2.0.0-beta.37-patch.2

v2.0.0-beta.37-patch.1

v2.0.0-beta.37

v2.0.0-beta.36

v2.0.0-beta.35

v2.0.0-beta.34

v2.0.0-beta.33

v2.0.0-beta.32-patch.1

v2.0.0-beta.32

v2.0.0-beta.31

v2.0.0-beta.30

v2.0.0-beta.29

v2.0.0-beta.28

v2.0.0-beta.27

v2.0.0-beta.26

v2.0.0-beta.25-patch.2

v2.0.0-beta.25-patch.1

v2.0.0-beta.25

v2.0.0-beta.24

v2.0.0-beta.23-patch.2

v2.0.0-beta.23-patch.1

v2.0.0-beta.23

v2.0.0-beta.22

v2.0.0-beta.21

v2.0.0-beta.20

v2.0.0-beta.19

v2.0.0-beta.18-patch.2

v2.0.0-beta.18-patch.1

v2.0.0-beta.18

v2.0.0-beta.17

v2.0.0-beta.16

v2.0.0-beta.15

v2.0.0-beta.14

v2.0.0-beta.13-patch

v2.0.0-beta.13

v2.0.0-beta.12

v2.0.0-beta.11

v2.0.0-beta.10-patch

v2.0.0-beta.10

v2.0.0-beta.9

v2.0.0-beta.8-patch

v2.0.0-beta.8

v2.0.0-beta.7

v2.0.0-beta.6-patch.2

v2.0.0-beta.6-patch

v2.0.0-beta.6

v2.0.0-beta.5-patch

v2.0.0-beta.5

v2.0.0-beta.4-patch

v2.0.0-beta.4

v2.0.0-beta.3

v2.0.0-beta.2

v2.0.0-beta.1

v1.9.9-4

v1.9.9-3

v1.9.9-2

v1.9.9

v1.9.9-1

v1.8.4-patch

v1.8.4

v1.8.3

v1.8.2

v1.8.1

v1.8.0

v1.7.9

v1.7.8

v1.7.7

v1.7.6

v1.7.5

v1.7.4

v1.7.3

v1.7.2

v1.7.1

v1.7.0-patch

v1.7.0

v1.6.8

v1.6.7

v1.6.6

v1.6.5

v1.6.3

v1.6.2

v1.6.1

v1.6.0-fix

v1.6.0

v1.5.2

v1.5.1

v1.5.0

v1.5.0-beta9

v1.5.0-beta8

v1.5.0-beta7

v1.5.0-beta6

v1.5.0-beta5

v1.5.0-beta4-fix

v1.5.0-beta4

v1.5.0-beta3

v1.5.0-beta2

v1.5.0-beta1

v1.4.2

v1.4.1

v1.4.0

v1.4.0-rc1

v1.3.3-rc1

v1.3.2

v1.3.1-fix

v1.3.1

v1.3.0

v1.3.0-rc1

v1.2.2

v1.2.1

v1.2.0

v1.2.0-rc.3

v1.2.0-rc.2

v1.2.0-rc.1

v1.2.0-alpha.4

v1.2.0-alpha.3

v1.2.0-alpha.2

v1.1.0

Labels

Clear labels   

Q/A

  

bug

  

casdoor

  

dependencies

  

docker

  

documentation

  

duplicate

  

enhancement

  

help wanted

  

invalid

  

lego

  

platform:openwrt

  

platform:windows

  

pull-request

Mirrored from GitHub Pull Request

  

question

  

wontfix

No labels

Q/A

bug

casdoor

dependencies

docker

documentation

duplicate

enhancement

help wanted

invalid

lego

platform:openwrt

platform:windows

pull-request

question

wontfix

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

starred/nginx-ui#7116

No description provided.