[dependabot]

Bumps the minor-and-patch group with 3 updates: dotenv, maplibre-gl and postcss.

Updates dotenv from 18.0.8 to 18.0.9

Changelog

Sourced from dotenv's changelog.

18.0.9 (2026-10-14)

Changed

• Permit DOTENV_PATH being empty string with the CLI (#1076)

Commits

• 8d1ab85 18.0.9
• 59a40ce changelog
• 88228bd Merge pull request #1076 from Enesuygurs/fix/cli-empty-dotenv-path
• bc6ef94 fix(cli): load the default .env when DOTENV_PATH is empty
• 6d6e6c5 Merge pull request #1075 from kory-kaai/test/fast-parser-branch-coverage
• 10218f1 test(parse-fast): cover the size-dependent and export-prefix branches
• See full diff in compare view

Updates maplibre-gl from 6.14.0 to 6.15.0

Release notes

Sourced from maplibre-gl's releases.

v6.15.0

✨ Features and improvements

• Add dragRotate: {around: 'pointer'} to turn and tilt the map around the point under the pointer, and {around: 'center', movement: 'circular' | 'linear'}, which replaces the deprecated aroundCenter (#8628) (by @​birkskyum)
• Redraw fewer layers on terrain when a custom layer's terrainTileRevision or a feature state changes (#8782) (by @​birkskyum)
• Support the hash option in a projection registered with addProjection (#8743) (by @​birkskyum)
• Add experimental addProjection, removeProjection, a built-in identity projection and a {bbox} tile URL token for maps in a custom planar CRS with its own quad tile grid (#168, #5764)
• Speed up tile loading by skipping point labels in the tile buffer, which the neighbouring tile draws (#8535) (by @​cherenkov)
• Project GeoJSON sources on a map in a registered CRS, in the workers, from a definition string and a projection handler (#8736) (by @​johncarmack1984)
• Support OpenType vert forms in vertical labels rendered with font-faces (#8489) (by @​NEKOYASAN)

🐞 Bug fixes

• Fix a map in a registered projection going blank when its center crosses 180° (#8802) (by @​birkskyum)
• Fix world projections like Equal Earth throwing and jumping when the mouse is in the space around the world (#8803) (by @​birkskyum)
• Work around a regression in Safari 26.6 and later where the map stops loading tiles after the page was in the background (#8780) (by @​birkskyum)
• Fix labels in Brahmic scripts such as Devanagari, Thai and Telugu mixing fonts or dropping letters when the style has a glyphs URL (#8741) (by @​crackalamoo)
• Fix setWorkerUrl treating a .cjs fragment or query marker as a module worker URL (#8769) (by @​Anandb71)
• Fix the terrain not finding a tile's own DEM data when the DEM source's maxzoom is below the terrain tile zoom (#8765) (by @​johncarmack1984)
• Fix the camera dropping to sea level while the terrain under the center of a jumpTo, easeTo or flyTo loads (#8549) (by @​johncarmack1984)
• Fix a grid of lines along tile borders in line layers of sliced overzoomed tiles when the source tile extent is larger than 4096, by scaling the clip buffer with the extent (#8705) (by @​tordans)
• Fix the globe drag rounding its rotation to single precision (#8784) (by @​johncarmack1984)
• Fix load and idle firing before the other tiles finish loading when one tile fails (#8785) (by @​johncarmack1984)
• Avoid using .innerHTML = … for the Popup close icon (#8795) (by @​k-yle)
• Fix a GeoJSON feature without coordinates staying out of the tiles after updateData gives it some, by updating geojson-vt to 6.3.0 (#8797) (by @​johncarmack1984)

Changelog

Sourced from maplibre-gl's changelog.

6.15.0

✨ Features and improvements

• Add dragRotate: {around: 'pointer'} to turn and tilt the map around the point under the pointer, and {around: 'center', movement: 'circular' | 'linear'}, which replaces the deprecated aroundCenter (#8628) (by @​birkskyum)
• Redraw fewer layers on terrain when a custom layer's terrainTileRevision or a feature state changes (#8782) (by @​birkskyum)
• Support the hash option in a projection registered with addProjection (#8743) (by @​birkskyum)
• Add experimental addProjection, removeProjection, a built-in identity projection and a {bbox} tile URL token for maps in a custom planar CRS with its own quad tile grid (#168, #5764)
• Speed up tile loading by skipping point labels in the tile buffer, which the neighbouring tile draws (#8535) (by @​cherenkov)
• Project GeoJSON sources on a map in a registered CRS, in the workers, from a definition string and a projection handler (#8736) (by @​johncarmack1984)
• Support OpenType vert forms in vertical labels rendered with font-faces (#8489) (by @​NEKOYASAN)

🐞 Bug fixes

• Fix a map in a registered projection going blank when its center crosses 180° (#8802) (by @​birkskyum)
• Fix world projections like Equal Earth throwing and jumping when the mouse is in the space around the world (#8803) (by @​birkskyum)
• Work around a regression in Safari 26.6 and later where the map stops loading tiles after the page was in the background (#8780) (by @​birkskyum)
• Fix labels in Brahmic scripts such as Devanagari, Thai and Telugu mixing fonts or dropping letters when the style has a glyphs URL (#8741) (by @​crackalamoo)
• Fix setWorkerUrl treating a .cjs fragment or query marker as a module worker URL (#8769) (by @​Anandb71)
• Fix the terrain not finding a tile's own DEM data when the DEM source's maxzoom is below the terrain tile zoom (#8765) (by @​johncarmack1984)
• Fix the camera dropping to sea level while the terrain under the center of a jumpTo, easeTo or flyTo loads (#8549) (by @​johncarmack1984)
• Fix a grid of lines along tile borders in line layers of sliced overzoomed tiles when the source tile extent is larger than 4096, by scaling the clip buffer with the extent (#8705) (by @​tordans)
• Fix the globe drag rounding its rotation to single precision (#8784) (by @​johncarmack1984)
• Fix load and idle firing before the other tiles finish loading when one tile fails (#8785) (by @​johncarmack1984)
• Avoid using .innerHTML = … for the Popup close icon (#8795) (by @​k-yle)
• Fix a GeoJSON feature without coordinates staying out of the tiles after updateData gives it some, by updating geojson-vt to 6.3.0 (#8797) (by @​johncarmack1984)

Commits

• 638b3f9 Bump js version to 6.15.0 (#8812)
• ddf4cc6 Fix registered projections going blank when the center crosses 180° (#8802)
• c8e4e34 fix: world projections throwing and wrapping past their edge (#8803)
• 7ec7535 first step towards supporting trusted-types (#8795)
• fc1aa1c docs: separate a registered CRS from the tile grid its sources are cut in (#8...
• 1897306 feat: support dragRotate around pointer (#8628)
• 17ad56d docs: show how custom layers place positions on a registered CRS (#8806)
• fe33962 fix: keep GeoJSON at the far pole of a polar projection off the map (#8798)
• 17eb78b chore: bump @​maplibre/geojson-vt to 6.3.0 and pass its coordinates and wrap o...
• 6c2784f refactor: rename CRSDefinition to CRS and its wkt to definition (#8787)
• Additional commits viewable in compare view

Updates postcss from 8.5.30 to 8.5.31

Release notes

Sourced from postcss's releases.

8.5.31

• Fix better source map on </style> escaping (by @​firefoxic).

Changelog

Sourced from postcss's changelog.

8.5.31

• Fix better source map on </style> escaping (by @​firefoxic).

Commits

• d190857 Release 8.5.31 version
• 4ef6d8c Update dependencies
• 6abd674 Call the builder with every node when the output is escaped (#2175)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: GeiserX/Pumperly
• Branch: main
• File: .coderabbit.yaml
• Commit: 5de96b2
• Layers: Repository YAML
• Review profile: CHILL
• Plan: Advanced
• Run ID: d361da50-b3e3-4704-a8a7-f70ef00b6c2a

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}