From 12b9ea2509bee210f423d3f30450bc1109e80df3 Mon Sep 17 00:00:00 2001 From: slicedearth <47583576+slicedearth@users.noreply.github.com> Date: Sun, 11 Oct 2026 00:21:38 +1100 Subject: [PATCH] Refresh compatible dependencies and reviewed browser sources Update exact application and development package pins plus compatible nested packages while retaining the supported compiler and runtime-type major lines. Refresh the separately locked package-manager graph without changing its original declarations, archive integrity or activation gates. Advance the paired security-analysis actions to the reviewed patch revision. Regenerate the bounded browser-source snapshot and append its release metadata events while preserving previous history, feature mappings and support data. Update source-version notes and browser provenance assertions consistently. Record licence, lifecycle-script, runtime and source-semantic review alongside local validation results, including the corrected stale browser assertions. Keep the separate runtime-setup update in its existing pull request and retain all publication, privacy and deployment approval boundaries. --- .github/workflows/codeql.yml | 4 +- README.md | 5 +- data/change-events.json | 42 +++++ data/selected-bcd.json | 45 +++-- data/source-history.json | 13 ++ docs/dependency-refresh-2026-10-11.md | 208 +++++++++++++++++++++ e2e/site.spec.ts | 6 +- package-lock.json | 251 +++++++++++++------------- package.json | 14 +- src/catalogue.ts | 4 +- tests/workflow-boundaries.test.ts | 2 +- tools/npm-toolchain/package-lock.json | 6 +- 12 files changed, 439 insertions(+), 161 deletions(-) create mode 100644 docs/dependency-refresh-2026-10-11.md diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 5e74cb0..4f45d5f 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -24,9 +24,9 @@ jobs: uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Initialise CodeQL - uses: github/codeql-action/init@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2 + uses: github/codeql-action/init@24c54180a607b1449ed407dd24f251e4e9147c8d # v4.38.3 with: languages: javascript-typescript - name: Analyse source - uses: github/codeql-action/analyze@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2 + uses: github/codeql-action/analyze@24c54180a607b1449ed407dd24f251e4e9147c8d # v4.38.3 diff --git a/README.md b/README.md index 7035230..e26d36a 100644 --- a/README.md +++ b/README.md @@ -132,8 +132,8 @@ boundary. The current selected dataset is generated from: -- `@mdn/browser-compat-data` 8.1.4; -- `web-features` 3.40.1; and +- `@mdn/browser-compat-data` 8.1.5; +- `web-features` 3.42.0; and - exact Web Platform Tests suite paths pinned to revision `af38980d2fcd74af19a226f5f651051cc15940ed`. @@ -235,6 +235,7 @@ with organisation-specific evidence. ## Documentation +- [Dependency and source refresh, 11 October 2026](docs/dependency-refresh-2026-10-11.md) - [PR32 optional follow-up and local validation](docs/pr32-optional-follow-up.md) - [Architecture](docs/architecture.md) diff --git a/data/change-events.json b/data/change-events.json index 665af87..10489da 100644 --- a/data/change-events.json +++ b/data/change-events.json @@ -3155,5 +3155,47 @@ "sourceTimestamp": "2026-10-01T10:12:15.059Z", "summary": "Edge 157 was added to the selected BCD release metadata.", "type": "browser_release_added" + }, + { + "after": { + "status": "planned", + "version": "158" + }, + "browser": "chrome", + "id": "0ea9ec0e0dc0be71c66c737c", + "observedInBcdVersion": "8.1.5", + "observedInWebFeaturesVersion": "3.42.0", + "schemaVersion": 1, + "sourceTimestamp": "2026-10-08T12:46:21.707Z", + "summary": "Chrome 158 was added to the selected BCD release metadata.", + "type": "browser_release_added" + }, + { + "after": { + "status": "planned", + "version": "158" + }, + "browser": "chrome_android", + "id": "12126cbf82c39376a5ac7282", + "observedInBcdVersion": "8.1.5", + "observedInWebFeaturesVersion": "3.42.0", + "schemaVersion": 1, + "sourceTimestamp": "2026-10-08T12:46:21.707Z", + "summary": "Chrome Android 158 was added to the selected BCD release metadata.", + "type": "browser_release_added" + }, + { + "after": { + "status": "planned", + "version": "158" + }, + "browser": "webview_android", + "id": "7b1c5b28c26f7913e25d9c18", + "observedInBcdVersion": "8.1.5", + "observedInWebFeaturesVersion": "3.42.0", + "schemaVersion": 1, + "sourceTimestamp": "2026-10-08T12:46:21.707Z", + "summary": "WebView Android 158 was added to the selected BCD release metadata.", + "type": "browser_release_added" } ] diff --git a/data/selected-bcd.json b/data/selected-bcd.json index aca1676..1d7b8bf 100644 --- a/data/selected-bcd.json +++ b/data/selected-bcd.json @@ -1,6 +1,6 @@ { - "bcdTimestamp": "2026-10-01T10:12:15.059Z", - "bcdVersion": "8.1.4", + "bcdTimestamp": "2026-10-08T12:46:21.707Z", + "bcdVersion": "8.1.5", "browsers": { "chrome": { "id": "chrome", @@ -768,22 +768,27 @@ }, { "releaseDate": "2026-09-22", - "status": "current", + "status": "retired", "version": "154" }, { "releaseDate": "2026-10-06", - "status": "beta", + "status": "current", "version": "155" }, { "releaseDate": "2026-10-20", - "status": "nightly", + "status": "beta", "version": "156" }, { - "status": "planned", + "releaseDate": "2026-11-03", + "status": "nightly", "version": "157" + }, + { + "status": "planned", + "version": "158" } ] }, @@ -1438,22 +1443,27 @@ }, { "releaseDate": "2026-09-22", - "status": "current", + "status": "retired", "version": "154" }, { "releaseDate": "2026-10-06", - "status": "beta", + "status": "current", "version": "155" }, { "releaseDate": "2026-10-20", - "status": "nightly", + "status": "beta", "version": "156" }, { - "status": "planned", + "releaseDate": "2026-11-03", + "status": "nightly", "version": "157" + }, + { + "status": "planned", + "version": "158" } ], "upstream": "chrome" @@ -4947,22 +4957,27 @@ }, { "releaseDate": "2026-09-22", - "status": "current", + "status": "retired", "version": "154" }, { "releaseDate": "2026-10-06", - "status": "beta", + "status": "current", "version": "155" }, { "releaseDate": "2026-10-20", - "status": "nightly", + "status": "beta", "version": "156" }, { - "status": "planned", + "releaseDate": "2026-11-03", + "status": "nightly", "version": "157" + }, + { + "status": "planned", + "version": "158" } ], "upstream": "chrome_android" @@ -7695,5 +7710,5 @@ }, "schemaFingerprint": "55e3832ebde9d4644e72e418bfda3bc9f2104f195a589da318a9fad1cde9a403", "schemaVersion": 2, - "webFeaturesVersion": "3.40.1" + "webFeaturesVersion": "3.42.0" } diff --git a/data/source-history.json b/data/source-history.json index 50d0619..13ae44a 100644 --- a/data/source-history.json +++ b/data/source-history.json @@ -77,6 +77,19 @@ "pathCount": 36, "schemaFingerprint": "55e3832ebde9d4644e72e418bfda3bc9f2104f195a589da318a9fad1cde9a403", "webFeaturesVersion": "3.40.1" + }, + { + "associatedEventCount": 3, + "baselineAssociationCount": 28, + "bcdTimestamp": "2026-10-08T12:46:21.707Z", + "bcdVersion": "8.1.5", + "browserCount": 9, + "catalogueVersion": "2.2.0", + "controlCount": 30, + "id": "f1c1456ef8c9ea84f5d21b71", + "pathCount": 36, + "schemaFingerprint": "55e3832ebde9d4644e72e418bfda3bc9f2104f195a589da318a9fad1cde9a403", + "webFeaturesVersion": "3.42.0" } ], "schemaVersion": 1 diff --git a/docs/dependency-refresh-2026-10-11.md b/docs/dependency-refresh-2026-10-11.md new file mode 100644 index 0000000..369cce5 --- /dev/null +++ b/docs/dependency-refresh-2026-10-11.md @@ -0,0 +1,208 @@ +# Dependency and source refresh — 11 October 2026 + +This review starts from merged `main` at +`aa1d54f8d4ee84249022bbaa7dc85c83a3cc50e2`. The checkout was clean before creating +`maintenance/dependency-refresh-2026-10-10`; the branch was created before the +local date changed. Existing PR32 corrections, optional follow-up work and +publication controls are retained. No reset, stash, lockfile replacement or +discard of existing work was used. + +## Reviewed updates + +| Direct package | Previous | Updated | +| -------------------------- | -------- | ------- | +| `@mdn/browser-compat-data` | 8.1.4 | 8.1.5 | +| `web-features` | 3.40.1 | 3.42.0 | +| `astro` | 7.3.6 | 7.3.8 | +| `@playwright/test` | 1.63.0 | 1.64.0 | +| `@types/node` | 24.19.1 | 24.19.2 | +| `prettier` | 3.9.9 | 3.9.10 | +| `prettier-plugin-astro` | 1.1.0 | 1.1.1 | + +Compatible nested updates include `@astrojs/language-server` 2.17.2, +`rolldown` and its platform bindings 1.2.13, `@oxc-project/types` 0.153.0, +`vite` 8.3.4 and `smol-toml` 1.9.1. The browser packages move together to 1.64.0. +The two existing `es-module-lexer` versions, 2.3.2 and 3.0.3, change their +hoisted locations without introducing a new version. The application lock +retains 516 package entries. + +The separate npm runtime lock updates only `p-map`, from 7.0.8 to 7.1.0, within +the upstream `^7.0.4` declaration. It retains 147 packages. npm 12.2.0, its +original runtime declarations, archive integrity and activation gates are +unchanged. There are no overrides or forced major upgrades. + +The paired security-analysis actions move from 4.38.2 to 4.38.3, pinned to +`24c54180a607b1449ed407dd24f251e4e9147c8d`. The release updates the default +analysis bundle to 2.27.2 and fixes per-language bundle selection. Permissions, +triggers, deployment gates and cache boundaries are unchanged. The separate +setup-node 7.1.0 update remains in PR34, as requested. + +Upstream notes reviewed: + +- [Framework 7.3.7](https://github.com/withastro/astro/releases/tag/astro%407.3.7) + and [7.3.8](https://github.com/withastro/astro/releases/tag/astro%407.3.8): + content, development-server and error-handler fixes; internal transforms move + to Oxc and Rolldown. The project still builds a static site. +- [Browser runner 1.64.0](https://github.com/microsoft/playwright/releases/tag/v1.64.0): + browser updates and screen-size forwarding from device descriptors. Existing + test configuration and fixture boundaries are preserved. +- [Formatter 3.9.10](https://github.com/prettier/prettier/releases/tag/3.9.10) + and [template plugin 1.1.1](https://github.com/withastro/prettier-plugin-astro/releases/tag/v1.1.1): + Markdown-table parsing and template-comment fixes. +- [Bundler 1.2.13](https://github.com/rolldown/rolldown/releases/tag/v1.2.13), + [build tooling 8.3.4](https://github.com/vitejs/vite/releases/tag/v8.3.4), + [TOML parser 1.9.1](https://github.com/squirrelchat/smol-toml/releases/tag/v1.9.1) + and [concurrency helper 7.1.0](https://github.com/sindresorhus/p-map/releases/tag/v7.1.0): + compatible fixes and additions reviewed with their owning dependency ranges. +- [Security action 4.38.3](https://github.com/github/codeql-action/releases/tag/v4.38.3): + the action tag is used, rather than a separately published bundle tag. + +## Source provenance and semantic changes + +Candidate source packages were downloaded at exact versions into a temporary +directory with lifecycle scripts disabled. The repository's semantic preview +ran before regeneration. + +[BCD 8.1.5](https://github.com/mdn/browser-compat-data/releases/tag/v8.1.5) +has source timestamp `2026-10-08T12:46:21.707Z`. The selected snapshot adds +planned version 158 for Chrome, Chrome Android and WebView Android. In those +three families, 154 becomes retired, 155 current, 156 beta and 157 nightly; +157 also gains the release date 3 November 2026. + +[Web Platform Features 3.41.0](https://github.com/web-platform-dx/web-features/releases/tag/v3.41.0) +adds upstream features and associations; +[3.42.0](https://github.com/web-platform-dx/web-features/releases/tag/v3.42.0) +allows multiple features to share compatibility keys. The existing selected +source builder already retains multiple matching associations. For this +catalogue, all 36 selected feature records, 30 control mappings and 28 Baseline +associations are unchanged. The schema fingerprint is unchanged. + +Generation preserves all 64 previous change events and appends the three +release-added events, giving 67 events and one new source-history entry. +Release-status changes are also reviewed in the snapshot diff; the three-event +preview is not a complete count of every changed metadata field. The WPT source +revision and catalogue version remain unchanged. No runtime source fetching or +live-target collection was introduced. + +The two unsupported CSP nonce/hash mapping notes and browser provenance +assertions now name the reviewed source versions. BCD 8.1.5 still has no +standalone nonce/hash compatibility entries, so their explicit unsupported +mapping state is retained. + +## Compatibility, licences and reachability + +TypeScript remains at 6.0.3 because `typescript-eslint` 8.71.1 requires +`>=4.8.4 <6.1.0`; the available 7.0.2 compiler is outside that contract. +Node type definitions remain on 24.x to match the supported runtime floor, +rather than moving to the available 26.6.5. The remaining installed updates +reported within broad peer ranges refer only to these two deliberate holds. +Other newer nested releases are outside their owners' ranges or exact pins. +An `npm outdated` exit of 1 records these available releases and is not an audit +failure. + +Lockfile engine review accepts Node 24.15.0 for packages applicable to local +macOS arm64 and hosted Linux x64. An initial all-platform inventory flagged +the unchanged optional `@img/sharp-win32-ia32` 0.35.5 declaration (`^20.9.0`). +That binary is restricted to 32-bit Windows and is not installed on either +reviewed target; this refresh does not claim validation of that platform. + +Updated packages retain their previous licences. BCD remains CC0-1.0 and +Web Platform Features remains Apache-2.0. The lockfile adds no lifecycle-script +package: the exact esbuild 0.28.2 permission and denied optional fsevents scripts +are unchanged. The reconstructed npm graph has no install-script packages. +Existing third-party notices remain applicable. + +The datasets are bounded build inputs; framework, formatter, browser runner and +language tools execute during development or validation. The concurrency helper +is confined to the package-manager runtime. CLI-only signature-verification +dependencies, their trust target and their browser exclusion are unchanged. +Fresh advisory results below report no known vulnerabilities; they do not prove +benign code or reconcile every historical advisory independently. + +## Local validation + +Commands use Node 26.4.0 and a fresh reviewed npm 12.2.0 reconstruction. +`RUNTIME` denotes the temporary directory printed by the successful bootstrap; +its `executables` directory is first on PATH. Exact paths, outputs and exit codes +are retained in private local command logs. Build checks disable development +telemetry and use `CONTROLCURRENT_DEPLOY_TARGET=github-pages`; browser checks +clear that target and use only controlled loopback fixtures. + +| Command | Exit | Observed result | +| ------------------------------------------------------------------------------------------------------------------------- | ---- | --------------------------------------------------------------------------------- | +| `env -u GITHUB_PATH -u GITHUB_ENV node tools/bootstrap-npm.ts` | 0 | Fresh reconstruction passed version, audit and signature gates before activation. | +| `npm ci` | 0 | 414 packages installed, 415 audited; zero reported vulnerabilities. | +| `npm run source-update:preview --` with exact candidate package/data paths | 0 | Three release-added events; complete snapshot diff reviewed separately. | +| `npm run generate` | 0 | 36 selected paths and three new events. | +| `npm exec -- vitest run` with the eight focused source, toolchain, workflow, browser-config and language-audit test files | 0 | 78 tests passed in eight files. | +| `CONTROLCURRENT_DEPLOY_TARGET=github-pages npm run verify` | 0 | 396 tests in 44 files and every verification stage passed. | +| `npm audit --audit-level=high` | 0 | Required application audit: zero vulnerabilities. | +| `npm audit --audit-level=low --json` | 0 | Full application graph: zero vulnerabilities. | +| `npm audit --omit=dev --audit-level=low --json` | 0 | Production dependency query: zero vulnerabilities. | +| `npm audit signatures` | 0 | 414 registry signatures and 149 attestations verified. | +| `npm audit --prefix "$RUNTIME" --audit-level=low --json` | 0 | Separate package-manager graph: zero vulnerabilities. | +| `npm audit signatures --prefix "$RUNTIME"` | 0 | 147 registry signatures and 72 attestations verified. | +| `npm run test:e2e:install` | 0 | Installed matching Chromium and supporting browser binaries. | +| `npm exec -- playwright install firefox webkit` | 0 | Installed matching optional local browser binaries. | + +The application advisory metadata covers 516 lock-graph entries, including +optional platform packages; signatures cover 414 installed packages. Toolchain +success is separate from the application audit. Registry attestations are not +application evidence-attestation tests and do not establish truthful collection. + +The complete verification includes lint, formatting, strict types, 73 Astro +files with no diagnostics, unit coverage, repository audit, selected-source and +six-schema drift checks, a 45-page static build, public audit and language audit. +Coverage meets the unchanged thresholds: 88.82% statements, 79.32% branches, +94.21% functions and 90.48% lines. + +The focused unit command was: + +```sh +npm exec -- vitest run tests/source.test.ts tests/source-update-preview.test.ts tests/source-history.test.ts tests/changes.test.ts tests/npm-toolchain.test.ts tests/workflow-boundaries.test.ts tests/browser-config.test.ts tests/language-audit.test.ts +``` + +Actual launched browser versions are Chromium 156.0.8078.4 (revision 1248), +Firefox 157.0 (1555) and WebKit 27.2 (2370). Browser checks explicitly unset `CI`, +so retries are disabled. The default suite uses +`CONTROLCURRENT_BROWSER_SMOKE=0 CONTROLCURRENT_BROWSER_WORKFLOWS=0` and a cleared +deployment target. + +The initial `npm run test:e2e` exited 1 with 36 passes and two failures: source +provenance assertions still expected BCD 8.1.4 and Web Platform Features 3.40.1. +The rendered values correctly matched the refreshed packages. The assertions +were updated without weakening any checks. The focused rerun below exited 0 +with both tests passing, followed by a complete default `npm run test:e2e` +with exit 0 and all 38 tests passing, without skips, flakes or retries. + +```sh +env -u CI npm run test:e2e -- e2e/site.spec.ts --grep 'renders real source provenance|reduces a multi-surface evidence bundle' +``` + +The optional workflow run also exited 0: 60 tests passed, 20 each in Chromium, +Firefox and WebKit, without skips, flakes or retries. Its exact command was: + +```sh +CONTROLCURRENT_DEPLOY_TARGET= CONTROLCURRENT_BROWSER_SMOKE=0 CONTROLCURRENT_BROWSER_WORKFLOWS=1 env -u CI npm run test:e2e -- --grep '@smoke|@workflow' +``` + +This covers the existing tagged smoke and workflow cases. Full-suite parity +across all three engines and native 400% browser zoom remain unexecuted. Hosted +browser defaults and schedules are unchanged. The final staged tree must pass +the complete verification command before commit, including the repository and +language audits that enumerate tracked or unignored files. + +## Remote state and limits + +The six superseded dependency PRs, 12, 13, 16, 20, 22 and 23, were closed using +the `slicedearth` account after verifying their changes were already included +on merged main. PR34 remains open. The current default-branch dependency-alert +query returned zero open alerts. + +This record describes local checks. Hosted results must be checked for the +eventual pushed revision; a PR comparison run does not replace exact-main +release verification. Nothing in this refresh merges a PR, approves a deployment +environment, dispatches a hosted workflow, changes an account, scans a live +target or publishes raw evidence. Hashes and signatures retain their existing +limitations, and the maintained npm reconstruction is not an unmodified upstream +distribution. Compressed archive limits are not expanded disk quotas. diff --git a/e2e/site.spec.ts b/e2e/site.spec.ts index f722efa..e726c3e 100644 --- a/e2e/site.spec.ts +++ b/e2e/site.spec.ts @@ -19,8 +19,8 @@ test("renders real source provenance and makes no external request", async ({ pa ).toBeVisible(); await expect( page.getByText("MDN browser data", { exact: true }).first().locator("..") - ).toContainText("8.1.4"); - await expect(page.getByText("Web feature data").locator("..")).toContainText("3.40.1"); + ).toContainText("8.1.5"); + await expect(page.getByText("Web feature data").locator("..")).toContainText("3.42.0"); await expect(page.getByText("Server connection").locator("..")).toContainText("none"); expect(externalRequests).toEqual([]); @@ -504,7 +504,7 @@ test("reduces a multi-surface evidence bundle without exposing raw inputs @workf "captured 2026-07-20T09:05:00.000Z by example-ci (application_ci)" ); await expect(results.locator("#bundle-source")).toContainText( - "analyser 5.1.0 · catalogue 2.2.0 · BCD 8.1.4" + "analyser 5.1.0 · catalogue 2.2.0 · BCD 8.1.5" ); await expect( results.getByText("Supplied page list · Reviewed application route manifest") diff --git a/package-lock.json b/package-lock.json index b2eeddf..f830005 100644 --- a/package-lock.json +++ b/package-lock.json @@ -9,13 +9,13 @@ "version": "0.1.0", "license": "MIT", "dependencies": { - "@mdn/browser-compat-data": "8.1.4", + "@mdn/browser-compat-data": "8.1.5", "@sigstore/bundle": "5.0.0", "@sigstore/protobuf-specs": "0.5.2", "@sigstore/tuf": "5.0.0", "@sigstore/verify": "4.1.2", "parse5": "8.0.1", - "web-features": "3.40.1", + "web-features": "3.42.0", "zod": "4.6.5" }, "devDependencies": { @@ -23,13 +23,13 @@ "@astrojs/sitemap": "3.7.4", "@axe-core/playwright": "4.13.0", "@eslint/js": "10.0.1", - "@playwright/test": "1.63.0", - "@types/node": "24.19.1", + "@playwright/test": "1.64.0", + "@types/node": "24.19.2", "@vitest/coverage-v8": "5.0.3", - "astro": "7.3.6", + "astro": "7.3.8", "eslint": "10.12.0", - "prettier": "3.9.9", - "prettier-plugin-astro": "1.1.0", + "prettier": "3.9.10", + "prettier-plugin-astro": "1.1.1", "tsx": "4.23.15", "typescript": "6.0.3", "typescript-eslint": "8.71.1", @@ -310,13 +310,13 @@ } }, "node_modules/@astrojs/language-server": { - "version": "2.17.1", - "resolved": "https://registry.npmjs.org/@astrojs/language-server/-/language-server-2.17.1.tgz", - "integrity": "sha512-gG7bvMVNIXgoSe1pM9dI1HsSDLU1EIc/dSAYQ0DuReLyLkOBjsiqvaRYgQltWaldLxh0bNEqjgreLfjd9OnUxQ==", + "version": "2.17.2", + "resolved": "https://registry.npmjs.org/@astrojs/language-server/-/language-server-2.17.2.tgz", + "integrity": "sha512-WzqCBYo0RtKrkPLPMnTz2+UOQPosaFhoG/PvoSyPIgBU0BKeS6qeaYv7Rscq7P1LxJdoN0VosQF2h2TZTsIGHg==", "dev": true, "license": "MIT", "dependencies": { - "@astrojs/astro2tsx": "^0.1.0", + "@astrojs/astro2tsx": "^0.1.2", "@astrojs/yaml2ts": "^0.2.4", "@volar/kit": "~2.4.28", "@volar/language-core": "~2.4.28", @@ -2097,9 +2097,9 @@ "license": "MIT" }, "node_modules/@mdn/browser-compat-data": { - "version": "8.1.4", - "resolved": "https://registry.npmjs.org/@mdn/browser-compat-data/-/browser-compat-data-8.1.4.tgz", - "integrity": "sha512-Cgp3OP3u9x57kT1sZPI115SP5H1IyaBhdDPnvnHRYZ1988kW83wuqcIdcMinLJXlMKOL5Y2cufWHzngh5cVtow==", + "version": "8.1.5", + "resolved": "https://registry.npmjs.org/@mdn/browser-compat-data/-/browser-compat-data-8.1.5.tgz", + "integrity": "sha512-iNxW5XEJOA29iWbeog/8FX7eI1obR0PWV1SQbJOG9TnyTAqTUxBF5R5/rcz2qQiouCsiAqUVFErcN+gd0Fs3TQ==", "license": "CC0-1.0" }, "node_modules/@napi-rs/wasm-runtime": { @@ -2131,9 +2131,9 @@ "license": "MIT" }, "node_modules/@oxc-project/types": { - "version": "0.152.0", - "resolved": "https://registry.npmjs.org/@oxc-project/types/-/types-0.152.0.tgz", - "integrity": "sha512-oM/5rLBm2tPkg0iBgkH/FOeR3PCDpY19GTgAZjMFM8h9WI9VW7cLgzp6nwtarYKmovavIQZ+Fe/RKX/8C8O/Rw==", + "version": "0.153.0", + "resolved": "https://registry.npmjs.org/@oxc-project/types/-/types-0.153.0.tgz", + "integrity": "sha512-jSNrRIyvPVLL5E1z/tS5zLAprosGz/FuI1PWwEOz59j3E4TTTzSpqKb/RDGqJhhW0QHYISGXxq582wGx6T11Tw==", "dev": true, "license": "MIT", "funding": { @@ -2141,13 +2141,13 @@ } }, "node_modules/@playwright/test": { - "version": "1.63.0", - "resolved": "https://registry.npmjs.org/@playwright/test/-/test-1.63.0.tgz", - "integrity": "sha512-oxMK4vllB9RK5NQ2l1pq1IfOf2AvnEuj/vYGDj0H2nMtmtZpKtCwt/l00GEO6xjGfpBNAvjovvYdCm50dRQkpQ==", + "version": "1.64.0", + "resolved": "https://registry.npmjs.org/@playwright/test/-/test-1.64.0.tgz", + "integrity": "sha512-oTN9FNYuN6bqQMwiho6jJKLCG2/QOYCixGXuCjRmzOq23eODeukuY2XiAVoVpAECbuezMt1MHQjAiQxK8F+Y+g==", "dev": true, "license": "Apache-2.0", "dependencies": { - "playwright": "1.63.0" + "playwright": "1.64.0" }, "bin": { "playwright": "cli.js" @@ -2164,9 +2164,9 @@ "license": "MIT" }, "node_modules/@rolldown/binding-android-arm-eabi": { - "version": "1.2.12", - "resolved": "https://registry.npmjs.org/@rolldown/binding-android-arm-eabi/-/binding-android-arm-eabi-1.2.12.tgz", - "integrity": "sha512-dB/a1214qKfHMXCpgqR4OZT+jS4kTyEXbQGJPqzobt5EwH5rX080pxE37alt3RzvR1bf1Yz/yGqRfrYAxuPw0A==", + "version": "1.2.13", + "resolved": "https://registry.npmjs.org/@rolldown/binding-android-arm-eabi/-/binding-android-arm-eabi-1.2.13.tgz", + "integrity": "sha512-Vu/NICrgdRvUOeaJZIyB2FP63s6fO/4ud5l8dXmxDx9yDyn+mN0y+gsvsVviSli+T361Aqo0h46EuMoobrwawA==", "cpu": [ "arm" ], @@ -2181,9 +2181,9 @@ } }, "node_modules/@rolldown/binding-android-arm64": { - "version": "1.2.12", - "resolved": "https://registry.npmjs.org/@rolldown/binding-android-arm64/-/binding-android-arm64-1.2.12.tgz", - "integrity": "sha512-7KHFgQ5VJxIHcLlrwrc3Xbds7oTNQT7Pgi9gQCJKrd2VGab/UksIOYp6VD8MzCstGxOKMgNamPwUCfxPdP1OHg==", + "version": "1.2.13", + "resolved": "https://registry.npmjs.org/@rolldown/binding-android-arm64/-/binding-android-arm64-1.2.13.tgz", + "integrity": "sha512-6LEoIrGy5vvCd2boNnv2soPSUZj/PRvhp8R/t9KlX+mIZxThIE/ZqxrGXxmuNX0FuvQFvLdZr7S4HrYpYBVhEQ==", "cpu": [ "arm64" ], @@ -2198,9 +2198,9 @@ } }, "node_modules/@rolldown/binding-darwin-arm64": { - "version": "1.2.12", - "resolved": "https://registry.npmjs.org/@rolldown/binding-darwin-arm64/-/binding-darwin-arm64-1.2.12.tgz", - "integrity": "sha512-3YIhqHD96nA5SaYNRBR16HnGv4oavZvXfD/ayHM+oYZ0WD/8lBAtf6zQua4kEyAvpqrluKXl0lnOBoiNby7x9w==", + "version": "1.2.13", + "resolved": "https://registry.npmjs.org/@rolldown/binding-darwin-arm64/-/binding-darwin-arm64-1.2.13.tgz", + "integrity": "sha512-CaJSRzlQ6Q+zkDMVA9OkVxBjVoPRCDEE3v0FSJ9kIQBgRjFApA3Si4ijhbNVUji7ZJt+PfO0e46qy4nPInHUPA==", "cpu": [ "arm64" ], @@ -2215,9 +2215,9 @@ } }, "node_modules/@rolldown/binding-darwin-x64": { - "version": "1.2.12", - "resolved": "https://registry.npmjs.org/@rolldown/binding-darwin-x64/-/binding-darwin-x64-1.2.12.tgz", - "integrity": "sha512-UuuJ35MFw4gmFOrE9pEqIV+K3syIKveph+Qc1/ljHZVdoDW4pz/JHR/eMVom+TZGl/5OOvGJOWaOCVt3ZfqhxA==", + "version": "1.2.13", + "resolved": "https://registry.npmjs.org/@rolldown/binding-darwin-x64/-/binding-darwin-x64-1.2.13.tgz", + "integrity": "sha512-e4r340I5hxSzJkD3YJBxgzq/rJ3wwxwdLLb2FPt1Zpyem20nrQPT11DDEEkazwxaHumH8wpglsp/Ozgj/wT6mw==", "cpu": [ "x64" ], @@ -2232,9 +2232,9 @@ } }, "node_modules/@rolldown/binding-freebsd-x64": { - "version": "1.2.12", - "resolved": "https://registry.npmjs.org/@rolldown/binding-freebsd-x64/-/binding-freebsd-x64-1.2.12.tgz", - "integrity": "sha512-uMvssit0a4W+/7D8CbHUvG719mH3R2jwXAlh/XcPvuHTE0g++LymF88DCGNX0HM2rBOn0xrzgXktIB6fLSJBTQ==", + "version": "1.2.13", + "resolved": "https://registry.npmjs.org/@rolldown/binding-freebsd-x64/-/binding-freebsd-x64-1.2.13.tgz", + "integrity": "sha512-hoBWDZ4/K/mJKVMbsgUd1jfpA2DiOrJ54mpegObU9TBHBBrtX4FLIXJJQRDPZ/2Dn91GvPob+Z2hwKJzf4E5SQ==", "cpu": [ "x64" ], @@ -2249,9 +2249,9 @@ } }, "node_modules/@rolldown/binding-linux-arm-gnueabihf": { - "version": "1.2.12", - "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-arm-gnueabihf/-/binding-linux-arm-gnueabihf-1.2.12.tgz", - "integrity": "sha512-XcFu0R0xWnwzSf4IQgFH1rJIckPN1pLy2R+4r9IDB7Yfu/ys9cVqfa4pBrMHj7a3gl8mIR4nRNPg0e5IvEVs6g==", + "version": "1.2.13", + "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-arm-gnueabihf/-/binding-linux-arm-gnueabihf-1.2.13.tgz", + "integrity": "sha512-oF9fZu3vTWnTiVAkDFxU9PJLt1nh20K9RRpuHsR7ZnE2L7XookBbDBVLojCVSLGbvtSlxeUNnjAj6DbNsKyzbg==", "cpu": [ "arm" ], @@ -2266,9 +2266,9 @@ } }, "node_modules/@rolldown/binding-linux-arm64-gnu": { - "version": "1.2.12", - "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-arm64-gnu/-/binding-linux-arm64-gnu-1.2.12.tgz", - "integrity": "sha512-260UrKgn8tz39ak+SMDOirKzr7V04M9dWPw5llW00SwBivCZoWcRBKV1d8cXnRkUmSZA3BdiUmBHWk7734Ulpw==", + "version": "1.2.13", + "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-arm64-gnu/-/binding-linux-arm64-gnu-1.2.13.tgz", + "integrity": "sha512-DTpb/+jMiqWMPgphn4ksW1zW+XLJ6dJJ9FMvnIk9I291LhCctMPhMYJrP5t9p6C9qa3KXadDdUEZHBaPh3kNxQ==", "cpu": [ "arm64" ], @@ -2286,9 +2286,9 @@ } }, "node_modules/@rolldown/binding-linux-arm64-musl": { - "version": "1.2.12", - "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-arm64-musl/-/binding-linux-arm64-musl-1.2.12.tgz", - "integrity": "sha512-5YK1I9SqDkbPgc1IA8BgDl34suqUS2q0KWnBrirm0E51YjOs6eo6dV6jbQfNE/argHRSvd0QUGgtpIoYx+WWpw==", + "version": "1.2.13", + "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-arm64-musl/-/binding-linux-arm64-musl-1.2.13.tgz", + "integrity": "sha512-xU+Kvv9N2A3SY35zFh1FWWNjxbadE/BKeqnkXe7vScU4GZsw757BlVmDLITZEq8DPpk6m7uoDYkK7P+x/uU5Ow==", "cpu": [ "arm64" ], @@ -2306,9 +2306,9 @@ } }, "node_modules/@rolldown/binding-linux-ppc64-gnu": { - "version": "1.2.12", - "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-ppc64-gnu/-/binding-linux-ppc64-gnu-1.2.12.tgz", - "integrity": "sha512-Rkcrmp7eFRg74yL5fXEU91JEWbdEPLevWwGtXpmhbjlD1StScbWTmO94Bhly+Mo+ketKYkdmM1vNUKeWSlx8cQ==", + "version": "1.2.13", + "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-ppc64-gnu/-/binding-linux-ppc64-gnu-1.2.13.tgz", + "integrity": "sha512-XMk/hnhh25oQ756Lclb1Q11h4ll0xC0Esa5w4Vzp+mAE2S3AGJgeM0SonrIgY8fHhjarb6hcoTuwoFG0VVP2ig==", "cpu": [ "ppc64" ], @@ -2326,9 +2326,9 @@ } }, "node_modules/@rolldown/binding-linux-s390x-gnu": { - "version": "1.2.12", - "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-s390x-gnu/-/binding-linux-s390x-gnu-1.2.12.tgz", - "integrity": "sha512-qvK4DuAsQc2BSjlx+Xr+IzOIvvxbGZqxFwdWfG6F518Erj0GGISyQbJ6pIappnOxlNPzNHvo/L0BwB30GZ+zVw==", + "version": "1.2.13", + "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-s390x-gnu/-/binding-linux-s390x-gnu-1.2.13.tgz", + "integrity": "sha512-U1BoTHYmlywE2n3HUWjzZ+8EQsKr+OwpxYuDWaubx42tUL8QSL7nOqRz/NVHanibbFP3M1Rxuprz/wNcbMKjqw==", "cpu": [ "s390x" ], @@ -2346,9 +2346,9 @@ } }, "node_modules/@rolldown/binding-linux-x64-gnu": { - "version": "1.2.12", - "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-x64-gnu/-/binding-linux-x64-gnu-1.2.12.tgz", - "integrity": "sha512-Q9uLBO53Xd4QIq1WOycVQyPP1O4HhraEV2qqb3uTrnVw6QZih9duY4vNXOivL1xoUS1/z+W8eF4NMfl2a8Sdjw==", + "version": "1.2.13", + "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-x64-gnu/-/binding-linux-x64-gnu-1.2.13.tgz", + "integrity": "sha512-J4cm80Pc6wEwV5AZ42o62sIQgDk+Y7R2s646jIwuvO+4V46QB58N4vVuMPWCBaNgursXLpmUWJV//WQAkPvHBQ==", "cpu": [ "x64" ], @@ -2366,9 +2366,9 @@ } }, "node_modules/@rolldown/binding-linux-x64-musl": { - "version": "1.2.12", - "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-x64-musl/-/binding-linux-x64-musl-1.2.12.tgz", - "integrity": "sha512-3IBxWFMjbOZskDPKv8Lf9BCnahlKuHthWkYnyIxOH/QcJrFcS4EmcenthApkwr/5+nEqZlLzeYbxeMaX7A5u4g==", + "version": "1.2.13", + "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-x64-musl/-/binding-linux-x64-musl-1.2.13.tgz", + "integrity": "sha512-W0euZS40U4V6JkmEnVCIX9mcsL6cbXQ4X8c2w+MMOIjFg68TXUW+u3RT+2e1t1pv9mg/EP3pDtK3POXdQ7Rxyw==", "cpu": [ "x64" ], @@ -2386,9 +2386,9 @@ } }, "node_modules/@rolldown/binding-openharmony-arm64": { - "version": "1.2.12", - "resolved": "https://registry.npmjs.org/@rolldown/binding-openharmony-arm64/-/binding-openharmony-arm64-1.2.12.tgz", - "integrity": "sha512-xtX61xg4LKPkPWilZU1ynKClz5Gj4bf74LML4r3eVLWumKnGjoEr1OSHQhMdbBDoYTi+yjrujvpZe2pUnqCrrA==", + "version": "1.2.13", + "resolved": "https://registry.npmjs.org/@rolldown/binding-openharmony-arm64/-/binding-openharmony-arm64-1.2.13.tgz", + "integrity": "sha512-do/AF/4n9MRshia3a5aXoy8xM2c6mgfT6D7H/dY6my5z+hfCIR4ab7mk4IRj++nsEQpKy39kd0DQnDq+r692tw==", "cpu": [ "arm64" ], @@ -2403,9 +2403,9 @@ } }, "node_modules/@rolldown/binding-win32-arm64-msvc": { - "version": "1.2.12", - "resolved": "https://registry.npmjs.org/@rolldown/binding-win32-arm64-msvc/-/binding-win32-arm64-msvc-1.2.12.tgz", - "integrity": "sha512-At7fPB6PCaIjzgIhEZFxuT+BBFqiQibJDT4d3PhiR3f4E7bbMZF4aKblbFfEM3sETRDd1YiQx/+U/g/B/ou5Ew==", + "version": "1.2.13", + "resolved": "https://registry.npmjs.org/@rolldown/binding-win32-arm64-msvc/-/binding-win32-arm64-msvc-1.2.13.tgz", + "integrity": "sha512-6FtUf2cJZobutJdxnGYX8z0vtbgqU0b2v8vfBhkXb9wp2MppMFtkunE+IaOntyi01rkIQoPW2GHABtfzsC0BRQ==", "cpu": [ "arm64" ], @@ -2420,9 +2420,9 @@ } }, "node_modules/@rolldown/binding-win32-x64-msvc": { - "version": "1.2.12", - "resolved": "https://registry.npmjs.org/@rolldown/binding-win32-x64-msvc/-/binding-win32-x64-msvc-1.2.12.tgz", - "integrity": "sha512-WIw2haVKwjuYdXkHaoC0mF8Le71TuCBxjrdKqLbJGctbBABj+ClfmNvtbOnzpq3RokNo5+V1qhtSzJyXorsklQ==", + "version": "1.2.13", + "resolved": "https://registry.npmjs.org/@rolldown/binding-win32-x64-msvc/-/binding-win32-x64-msvc-1.2.13.tgz", + "integrity": "sha512-UKhFaZTeTcbKrb3iU82m17jVcPEAoqDkCN5MBqgPyZSwp/cQmib21crTS0DdH7T1B7wZRWEI89YQAOJMet5yhg==", "cpu": [ "x64" ], @@ -2720,9 +2720,9 @@ } }, "node_modules/@types/node": { - "version": "24.19.1", - "resolved": "https://registry.npmjs.org/@types/node/-/node-24.19.1.tgz", - "integrity": "sha512-aS3/DG0oM05K0RIXXP+hKjinGG5IgSSVGzswZxW3O0sS3pH4/fycXundUC9XsszgKCk4gHXylTEK6hyFxVxnoQ==", + "version": "24.19.2", + "resolved": "https://registry.npmjs.org/@types/node/-/node-24.19.2.tgz", + "integrity": "sha512-93d49wCWJkCyN87MxLpNN6KXPCwFw7bVUg79mGUV1OS40JGWwVCr8n61DXCSqz7CV6/VfPkb7xec7uP2M+QHWQ==", "dev": true, "license": "MIT", "dependencies": { @@ -3324,9 +3324,9 @@ } }, "node_modules/astro": { - "version": "7.3.6", - "resolved": "https://registry.npmjs.org/astro/-/astro-7.3.6.tgz", - "integrity": "sha512-3q0MKxfE4cpr5IoQ9EWrN0gwxeT5tkCaSVe3SrGlLR5fnTIywHqjVqFokQkQiZexfwpNtB9dtBdUcXV9FuD+4w==", + "version": "7.3.8", + "resolved": "https://registry.npmjs.org/astro/-/astro-7.3.8.tgz", + "integrity": "sha512-LHzDHSaV+YzZiR3EFndDYTLLeNeuMtP1qX1FLcCNUUHOCqTTIWPczy2UV3zpA5VqvJe5cWZolqM9Z8JFqR2i9w==", "dev": true, "license": "MIT", "dependencies": { @@ -3348,7 +3348,6 @@ "diff": "^9.0.0", "dset": "^3.1.4", "es-module-lexer": "^3.0.2", - "esbuild": "^0.28.0", "find-proc": "0.2.0", "flattie": "^1.1.1", "fontace": "~0.4.1", @@ -3408,13 +3407,6 @@ } } }, - "node_modules/astro/node_modules/es-module-lexer": { - "version": "3.0.3", - "resolved": "https://registry.npmjs.org/es-module-lexer/-/es-module-lexer-3.0.3.tgz", - "integrity": "sha512-yWGe1O/j+almnV4hOYrmZo8u58JdnmXEMneRQAYkWtqSiT86yoMIEKF4rpqEDj52tbYl3xceBD3DQIBwcsC9Pw==", - "dev": true, - "license": "MIT" - }, "node_modules/astro/node_modules/obug": { "version": "3.0.0", "resolved": "https://registry.npmjs.org/obug/-/obug-3.0.0.tgz", @@ -3985,9 +3977,9 @@ } }, "node_modules/es-module-lexer": { - "version": "2.3.2", - "resolved": "https://registry.npmjs.org/es-module-lexer/-/es-module-lexer-2.3.2.tgz", - "integrity": "sha512-poHGpORABojJJucnV9KbOavETW8lBVnphkW77ER5/BQ5Fz7oXSoCNek7IH3vR5nRjdsEz926ibFYX8KtLQmdyw==", + "version": "3.0.3", + "resolved": "https://registry.npmjs.org/es-module-lexer/-/es-module-lexer-3.0.3.tgz", + "integrity": "sha512-yWGe1O/j+almnV4hOYrmZo8u58JdnmXEMneRQAYkWtqSiT86yoMIEKF4rpqEDj52tbYl3xceBD3DQIBwcsC9Pw==", "dev": true, "license": "MIT" }, @@ -5547,13 +5539,13 @@ } }, "node_modules/playwright": { - "version": "1.63.0", - "resolved": "https://registry.npmjs.org/playwright/-/playwright-1.63.0.tgz", - "integrity": "sha512-+7ziBLidS4NaNCdt57SUDT+wYmmd5fmiQejUic/kb+YsYSCPyOOE9sebzMjNmQrsnNpDJqd4WHvV/8lfKfUDUg==", + "version": "1.64.0", + "resolved": "https://registry.npmjs.org/playwright/-/playwright-1.64.0.tgz", + "integrity": "sha512-kVzTnYFYEyQ9RGzBjNCd2+yEqWmVbxl3AHPynv3qQ6JTjv4a+kwRcnqQwIpuP3NnrnIrE/Q6wWAIAvMfIE2/Yg==", "dev": true, "license": "Apache-2.0", "dependencies": { - "playwright-core": "1.63.0" + "playwright-core": "1.64.0" }, "bin": { "playwright": "cli.js" @@ -5563,9 +5555,9 @@ } }, "node_modules/playwright-core": { - "version": "1.63.0", - "resolved": "https://registry.npmjs.org/playwright-core/-/playwright-core-1.63.0.tgz", - "integrity": "sha512-rYCsBF/M5HjUch52bbtVONEFjv6Xu8sm8h72dNlR5bzIE1fvC/bxgspzkjSfU+MweEMmPM8KJebG6nnyxo5mCg==", + "version": "1.64.0", + "resolved": "https://registry.npmjs.org/playwright-core/-/playwright-core-1.64.0.tgz", + "integrity": "sha512-T9r+MZkTECl2+oUcZ26YgZzTrYidTsIhYYkJix+6iDOymOb1FB2RLLSOxRGnZGv5DStt+aduIVbt+E8WygXYpg==", "dev": true, "license": "Apache-2.0", "bin": { @@ -5615,9 +5607,9 @@ } }, "node_modules/prettier": { - "version": "3.9.9", - "resolved": "https://registry.npmjs.org/prettier/-/prettier-3.9.9.tgz", - "integrity": "sha512-Z/CJHIkdujO/OtN7nXUii0Rf3VT5SRuhjBA82Xvu2XhBUgX3nhP67T0LHceBdQLex7OOFGTox+Q5Yg8Jk2Qivg==", + "version": "3.9.10", + "resolved": "https://registry.npmjs.org/prettier/-/prettier-3.9.10.tgz", + "integrity": "sha512-skGHTH1Yb9QvaTC4hWnRTzEYtCpApF0UMBPz+t/0ZPzP8ihefo/btKd+QA7pUE0fEwA1SbS/NmhyEcstdXOIdA==", "dev": true, "license": "MIT", "bin": { @@ -5631,9 +5623,9 @@ } }, "node_modules/prettier-plugin-astro": { - "version": "1.1.0", - "resolved": "https://registry.npmjs.org/prettier-plugin-astro/-/prettier-plugin-astro-1.1.0.tgz", - "integrity": "sha512-ujJ1VX+iin4eYJPHVCEbmXHzrEVsi1SaVehHtbAteTZv8VTrZyBiZPmYc6Ud6+fkr/UBMXuEu3N3+d49h7YfKw==", + "version": "1.1.1", + "resolved": "https://registry.npmjs.org/prettier-plugin-astro/-/prettier-plugin-astro-1.1.1.tgz", + "integrity": "sha512-ykymNFOinCFXY4z4yF0978GgAvg6GRtrzCYg3+R1Nv/dndACwuEsSrUpHkJohER9FiwYMPKuYT38FbjCLmwu9A==", "dev": true, "license": "MIT", "dependencies": { @@ -6018,13 +6010,13 @@ } }, "node_modules/rolldown": { - "version": "1.2.12", - "resolved": "https://registry.npmjs.org/rolldown/-/rolldown-1.2.12.tgz", - "integrity": "sha512-8wafseiaG80xmXSfqidUNqZcylTlhmPZZt+za2m+js2sFZ8dTNlhIOV2WcbIPx2hgwPBJpEUGFAMZ9bgBBLTSQ==", + "version": "1.2.13", + "resolved": "https://registry.npmjs.org/rolldown/-/rolldown-1.2.13.tgz", + "integrity": "sha512-/5apOkwWxtACcQtZ5WlrAsKS4JwXVThQPJZ3RqIruRY9UG9M8e0VlXN068xum/JRKA4aIUoJ13ghe/kGCvidiQ==", "dev": true, "license": "MIT", "dependencies": { - "@oxc-project/types": "=0.152.0", + "@oxc-project/types": "=0.153.0", "@rolldown/pluginutils": "^1.0.0" }, "bin": { @@ -6034,21 +6026,21 @@ "node": "^20.19.0 || >=22.12.0" }, "optionalDependencies": { - "@rolldown/binding-android-arm-eabi": "1.2.12", - "@rolldown/binding-android-arm64": "1.2.12", - "@rolldown/binding-darwin-arm64": "1.2.12", - "@rolldown/binding-darwin-x64": "1.2.12", - "@rolldown/binding-freebsd-x64": "1.2.12", - "@rolldown/binding-linux-arm-gnueabihf": "1.2.12", - "@rolldown/binding-linux-arm64-gnu": "1.2.12", - "@rolldown/binding-linux-arm64-musl": "1.2.12", - "@rolldown/binding-linux-ppc64-gnu": "1.2.12", - "@rolldown/binding-linux-s390x-gnu": "1.2.12", - "@rolldown/binding-linux-x64-gnu": "1.2.12", - "@rolldown/binding-linux-x64-musl": "1.2.12", - "@rolldown/binding-openharmony-arm64": "1.2.12", - "@rolldown/binding-win32-arm64-msvc": "1.2.12", - "@rolldown/binding-win32-x64-msvc": "1.2.12" + "@rolldown/binding-android-arm-eabi": "1.2.13", + "@rolldown/binding-android-arm64": "1.2.13", + "@rolldown/binding-darwin-arm64": "1.2.13", + "@rolldown/binding-darwin-x64": "1.2.13", + "@rolldown/binding-freebsd-x64": "1.2.13", + "@rolldown/binding-linux-arm-gnueabihf": "1.2.13", + "@rolldown/binding-linux-arm64-gnu": "1.2.13", + "@rolldown/binding-linux-arm64-musl": "1.2.13", + "@rolldown/binding-linux-ppc64-gnu": "1.2.13", + "@rolldown/binding-linux-s390x-gnu": "1.2.13", + "@rolldown/binding-linux-x64-gnu": "1.2.13", + "@rolldown/binding-linux-x64-musl": "1.2.13", + "@rolldown/binding-openharmony-arm64": "1.2.13", + "@rolldown/binding-win32-arm64-msvc": "1.2.13", + "@rolldown/binding-win32-x64-msvc": "1.2.13" } }, "node_modules/s.color": { @@ -6240,9 +6232,9 @@ } }, "node_modules/smol-toml": { - "version": "1.9.0", - "resolved": "https://registry.npmjs.org/smol-toml/-/smol-toml-1.9.0.tgz", - "integrity": "sha512-hpd+HLON7HdZXqYchMM/+LaTTbdK0AU3NngIJ4KVyWbY9bfQqdL9cD+4yf6dUoU2Ap4VsU0JkQi6FxAI1B2mXQ==", + "version": "1.9.1", + "resolved": "https://registry.npmjs.org/smol-toml/-/smol-toml-1.9.1.tgz", + "integrity": "sha512-j7WyPdf0CJoutMzMoPLF/bVXHtKZIT9Rb4eGeEbWw8X2t5oirjPgpL+OpaENZrILYaXqYwnVH+qgUwVbl+pUJQ==", "dev": true, "license": "BSD-3-Clause", "engines": { @@ -6895,16 +6887,16 @@ } }, "node_modules/vite": { - "version": "8.3.3", - "resolved": "https://registry.npmjs.org/vite/-/vite-8.3.3.tgz", - "integrity": "sha512-cTAldKPImjg6c+gk48U19POPn3GCBzZwpdsN8ZMEEcbpes+6/wvfqUd0C2y3qYY4wsj8PwgFwrZ/1jBPVttMSg==", + "version": "8.3.4", + "resolved": "https://registry.npmjs.org/vite/-/vite-8.3.4.tgz", + "integrity": "sha512-IftLE8phJhdNRIGNEV4JCCvfNScoZQVfcXaN8TQropWGJtOHcu+iAB9pHcuGvmEb/kddw0LBe/jS8ztdC6xdiQ==", "dev": true, "license": "MIT", "dependencies": { "lightningcss": "^1.33.0", "picomatch": "^4.0.7", - "postcss": "^8.5.28", - "rolldown": "~1.2.11", + "postcss": "^8.5.29", + "rolldown": "~1.2.12", "tinyglobby": "^0.2.17" }, "bin": { @@ -7075,6 +7067,13 @@ } } }, + "node_modules/vitest/node_modules/es-module-lexer": { + "version": "2.3.2", + "resolved": "https://registry.npmjs.org/es-module-lexer/-/es-module-lexer-2.3.2.tgz", + "integrity": "sha512-poHGpORABojJJucnV9KbOavETW8lBVnphkW77ER5/BQ5Fz7oXSoCNek7IH3vR5nRjdsEz926ibFYX8KtLQmdyw==", + "dev": true, + "license": "MIT" + }, "node_modules/volar-service-css": { "version": "0.0.71", "resolved": "https://registry.npmjs.org/volar-service-css/-/volar-service-css-0.0.71.tgz", @@ -7359,9 +7358,9 @@ "license": "MIT" }, "node_modules/web-features": { - "version": "3.40.1", - "resolved": "https://registry.npmjs.org/web-features/-/web-features-3.40.1.tgz", - "integrity": "sha512-HRdUYqZRNawtIEI39iKjk6E6g1yO/bct/8bFcD/O+bNGYsbG475PV80+HTrpkYOiZnoEaVSMu5Q/LTVwnBH5ag==", + "version": "3.42.0", + "resolved": "https://registry.npmjs.org/web-features/-/web-features-3.42.0.tgz", + "integrity": "sha512-Vq97bzyedg6EuPFnz1GIJqsI9me8CbxzwYrcBI/cNwjj66v77IsGmIZi9SxPHTu2t25F7ta4kZJPu4qvuYlhfQ==", "license": "Apache-2.0" }, "node_modules/which": { diff --git a/package.json b/package.json index 3c44340..824ebd7 100644 --- a/package.json +++ b/package.json @@ -37,13 +37,13 @@ "verify": "npm run lint && npm run format:check && npm run typecheck && npm run check && npm test && npm run audit:repository && npm run build && npm run audit:public && npm run audit:language" }, "dependencies": { - "@mdn/browser-compat-data": "8.1.4", + "@mdn/browser-compat-data": "8.1.5", "@sigstore/bundle": "5.0.0", "@sigstore/protobuf-specs": "0.5.2", "@sigstore/tuf": "5.0.0", "@sigstore/verify": "4.1.2", "parse5": "8.0.1", - "web-features": "3.40.1", + "web-features": "3.42.0", "zod": "4.6.5" }, "devDependencies": { @@ -51,13 +51,13 @@ "@astrojs/sitemap": "3.7.4", "@axe-core/playwright": "4.13.0", "@eslint/js": "10.0.1", - "@playwright/test": "1.63.0", - "@types/node": "24.19.1", + "@playwright/test": "1.64.0", + "@types/node": "24.19.2", "@vitest/coverage-v8": "5.0.3", - "astro": "7.3.6", + "astro": "7.3.8", "eslint": "10.12.0", - "prettier": "3.9.9", - "prettier-plugin-astro": "1.1.0", + "prettier": "3.9.10", + "prettier-plugin-astro": "1.1.1", "tsx": "4.23.15", "typescript": "6.0.3", "typescript-eslint": "8.71.1", diff --git a/src/catalogue.ts b/src/catalogue.ts index 9714a3d..990b51a 100644 --- a/src/catalogue.ts +++ b/src/catalogue.ts @@ -64,7 +64,7 @@ export const SECURITY_CONTROLS = [ "Use a carefully scoped CSP and avoid inline script where a nonce deployment cannot be validated.", mappingState: "unsupported", mappingNote: - "BCD 8.1.4 does not publish a standalone compatibility statement for CSP nonce source expressions.", + "BCD 8.1.5 does not publish a standalone compatibility statement for CSP nonce source expressions.", combination: "all", bcdPaths: [], specificationUrls: ["https://w3c.github.io/webappsec-csp/#grammardef-nonce-source"] @@ -87,7 +87,7 @@ export const SECURITY_CONTROLS = [ "Use nonces or external resources under a restrictive CSP when hash maintenance is unsuitable.", mappingState: "unsupported", mappingNote: - "BCD 8.1.4 does not publish a standalone compatibility statement for CSP hash source expressions.", + "BCD 8.1.5 does not publish a standalone compatibility statement for CSP hash source expressions.", combination: "all", bcdPaths: [], specificationUrls: ["https://w3c.github.io/webappsec-csp/#grammardef-hash-source"] diff --git a/tests/workflow-boundaries.test.ts b/tests/workflow-boundaries.test.ts index 8f64a50..c31c6ac 100644 --- a/tests/workflow-boundaries.test.ts +++ b/tests/workflow-boundaries.test.ts @@ -57,7 +57,7 @@ describe("publication workflow hardening", () => { const workflow = readFileSync(".github/workflows/codeql.yml", "utf8"); for (const action of ["init", "analyze"]) { expect(workflow).toContain( - `github/codeql-action/${action}@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2` + `github/codeql-action/${action}@24c54180a607b1449ed407dd24f251e4e9147c8d # v4.38.3` ); } }); diff --git a/tools/npm-toolchain/package-lock.json b/tools/npm-toolchain/package-lock.json index 1ab9378..2f52c6a 100644 --- a/tools/npm-toolchain/package-lock.json +++ b/tools/npm-toolchain/package-lock.json @@ -1435,9 +1435,9 @@ } }, "node_modules/p-map": { - "version": "7.0.8", - "resolved": "https://registry.npmjs.org/p-map/-/p-map-7.0.8.tgz", - "integrity": "sha512-MitaVsCuCFIvOLLPIU7NnfrZvS9H9h7kwMUkDo+T2pEISaJD48IV9S8iIdXB7PsvvdxyYcsSTTrr90XKsbulNw==", + "version": "7.1.0", + "resolved": "https://registry.npmjs.org/p-map/-/p-map-7.1.0.tgz", + "integrity": "sha512-HaSJ9hNZOxTUSATfB48Qi7U2+GF1eECjI39nkeLmCWQrSOYr1z4NepR0rpWiZO77pYwUWU2cJ5NIgsmoFCsYDQ==", "license": "MIT", "engines": { "node": ">=18"