Skip to content

build(deps-dev): bump flatted from 3.3.3 to 3.4.2 in the npm_and_yarn group across 1 directory#1

Closed
dependabot[bot] wants to merge 102 commits into
mainfrom
dependabot/npm_and_yarn/npm_and_yarn-e5a595f223
Closed

build(deps-dev): bump flatted from 3.3.3 to 3.4.2 in the npm_and_yarn group across 1 directory#1
dependabot[bot] wants to merge 102 commits into
mainfrom
dependabot/npm_and_yarn/npm_and_yarn-e5a595f223

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Mar 20, 2026

Copy link
Copy Markdown

Bumps the npm_and_yarn group with 1 update in the / directory: flatted.

Updates flatted from 3.3.3 to 3.4.2

Commits
  • 3bf0909 3.4.2
  • 885ddcc fix CWE-1321
  • 0bdba70 added flatted-view to the benchmark
  • 2a02dce 3.4.1
  • fba4e8f Merge pull request #89 from WebReflection/python-fix
  • 5fe8648 added "when in Rome" also a test for PHP
  • 53517ad some minor improvement
  • b3e2a0c Fixing recursion issue in Python too
  • c4b46db Add SECURITY.md for security policy and reporting
  • f86d071 Create dependabot.yml for version updates
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

TG-TG-TG-TG-TG-TG and others added 30 commits August 11, 2025 22:52
Initial commit of the Aurora for ChatGPT extension, providing an ambient blurred background, chat visibility toggle, and legacy composer option. Includes content script, popup UI, icons, manifest, and styles for enhanced ChatGPT UI customization.
- Re-layer background stack:
  - image z-index: 0
  - black bottom overlay z-index: 1
  - NEW top-weighted white haze z-index: 2 (linear-gradient 16%→0%)
- Restores brightness lost after removing the gray header while keeping the dark bottom fade.
- Make `#page-header` fully transparent; drop box-shadow/pseudo paints.
- Add glass treatment to Radix popovers/dropdowns
  (`.popover.bg-token-main-surface-primary[data-radix-menu-content]`)
  with blur+saturation and subtle borders/shadows.
- Scope all glass to `html.cgpt-ambient-on:not(.cgpt-legacy-composer)` so
  “Keep legacy composer” disables it cleanly (dark-scheme tweaks included).
- No layout shifts; all overlays `pointer-events:none`.
(forgor to update version. so pushing it in this commit XD)
replaced MutationObserver with SPA URL listener for performance
Introduces sidebar.css for unified glass/blur and rounded corners in the sidebar, active only in non-legacy mode. Updates manifest.json to version 1.3.2 and includes sidebar.css in the extension's injected styles.
Increased brightness and luminance of glass backgrounds, overlays, and popovers in light mode by tweaking rgba values and gradients. These changes make the UI approximately 10% brighter and improve visual clarity in light mode.
…it message after 5 minutes. ' ( didnt tested yet ), UI: Applied the glass blur effect to the text boxes on the Customize ChatGPT settings ( experimentale ), added blur to the keyboard shortcut, added blur to the Custom instructions text boxes
…ation, Added an option to disable the animations. Cleaned up unnecessary comments from the CSS files. Applied a blur effect to the voice mode background. Added a matching blur effect to the extension's settings popup. Fixed console errors
big update : added 2 new features (that hopefully work), added the UI blur basically everywhere and new animation,
fixed light mode and added auto switch for the theme
Alfredo-Sandoval and others added 21 commits December 22, 2025 15:34
…remove dedicated UI, and optimize style updates.
- Introduced CSS variables for z-index layers in quick settings.
- Updated button styles to use currentColor for better theming.
- Added focus-visible outlines for buttons and controls to enhance accessibility.
- Improved scrollbar visibility and styling for better user experience.
- Refined switch input styles for better interaction feedback.
- Enhanced color variables for consistent theming across light and dark modes.
- Implemented keyframe animations for smoother transitions in the quick settings panel.
- Added reduced motion support for users with motion sensitivity preferences.
- Updated gradient effects and hover states for buttons and inputs to align with new design tokens.
- Introduced a maximum background blur limit of 150 pixels.
- Updated the blur slider in popup.html to reflect the new minimum and maximum values.
- Improved accessibility by adding ARIA attributes to various elements in popup.html and popup.js.
- Refactored blur value clamping logic to ensure values stay within defined limits.
- Added functions to sanitize background scaling values and ensure they are consistent across content and popup scripts.
- Enhanced event handling for custom select components to improve keyboard navigation and focus management.
- Implemented cleanup logic for runtime bindings to prevent memory leaks and ensure proper resource management.
Improve ChatGPT styling behavior across canvas/composer/menu surfaces and
stabilize quick settings interactions.

Add durable settings flows with local mirror snapshots plus manual
save/restore and JSON export/import controls in popup.

Tests: npm run lint && npm test
…fects

- Introduced a new skills.json file reference for better modularity.
- Updated styles.css to implement a scalable blur system with custom properties for various UI components, enhancing the glass effect.
- Added support for a super stars background with specific styles for ambient effects.
- Modified existing CSS rules to utilize new variables for consistency and maintainability.
- Enhanced tests in shared-utils.test.js to validate new background URL sanitization for additional keys.
Refine the project composer sizing for ChatGPT project pages so the
input stays usable across browser shells and smaller windows.

Also refresh generated skills metadata, add the post-commit hook, and
remove deprecated background preset handling in the popup.

Tests: npm run lint && npm test
The repo ignores package-lock.json, so the previous workflow could not
use setup-node npm caching or npm ci successfully.

Switch CI to npm install without writing a lockfile so the workflow
matches the repository's package policy.

Tests: npm install --no-package-lock && npm run lint && npm test
Prevent partial imports from wiping unspecified settings, keep the
visibility tab reachable in the popup, and honor ChatGPT's
explicit English locale selection.

Tests: npm test
Tests: npm run lint
Remove the unused content quick-settings controller copy from the
extension bundle so the runtime only ships the live implementation.

Tests: npm test
Tests: npm run lint
Track the lockfile again, switch CI back to npm ci, and refresh the
ESLint toolchain to clear transitive audit findings while keeping the
repo reproducible from a clean install.

Tests: npm ci
Tests: npm test
Tests: npm run lint
Tests: npm audit --json
…ilities; update content.js to remove shortcut proxies; enhance ESLint config for service worker globals; improve sidebar and styles for better glass effect and deep research card presentation.
- Simplified CSS selectors for hover and focus states in sidebar and history rows.
- Added support for new aether surface attributes in various components.
- Improved tooltip and alert styling with dedicated glass effects.
- Updated deep research and report viewer styles for better integration.
- Introduced new test cases for settings management and background presets.
- Ensured alignment of popup options and settings keys with default values.
Delay composer styling until ChatGPT mounts an editable input and re-measure compact project composers after SPA mutations so the prompt does not collapse on first load.

Tests: npm run lint

Tests: npm test
fix: update package.json to add CI command for ui audit with fail-on-warning option

chore: refactor package.sh for improved error handling and file copying

style: add load-error-banner styles to popup.css for better error visibility

feat: implement load error banner in popup.html and corresponding logic in popup.js

refactor: rewrite initial settings loading logic in popup.js for better error handling

chore: add repo_profile.yaml for repository configuration and tooling setup

fix: update ui-dynamic-audit.js to include fail-on-warning option and improve popup auditing

perf: cache background preset lookup results in shared-utils.js for efficiency

style: adjust CSS for research sidebar in styles.css for responsive design
- Updated i18n-loader.js to normalize locale messages and cache translations.
- Removed embedded fallback translations (DEFAULT_EN_TRANSLATIONS) to rely on loaded English locale.
- Introduced runtime-client.js for shared messaging between popup and content scripts.
- Updated popup.js to use runtime-client for settings updates instead of direct chrome.storage.sync.set calls.
- Modified package.sh to validate package contents and ensure required files are present.
- Added tests for content runtime, i18n contract, module loading, package validation, and settings write ownership.
- Updated manifest.json to include new content scripts and ensure proper loading order.
Bumps the npm_and_yarn group with 1 update in the / directory: [flatted](https://github.com/WebReflection/flatted).


Updates `flatted` from 3.3.3 to 3.4.2
- [Commits](WebReflection/flatted@v3.3.3...v3.4.2)

---
updated-dependencies:
- dependency-name: flatted
  dependency-version: 3.4.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 20, 2026
@dependabot
dependabot Bot requested a review from Alfredo-Sandoval as a code owner March 20, 2026 10:19
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 20, 2026
@dependabot @github

dependabot Bot commented on behalf of github May 3, 2026

Copy link
Copy Markdown
Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/npm_and_yarn-e5a595f223 branch May 3, 2026 08:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

7 participants