chore(deps)(deps-dev): bump the development-dependencies group across 1 directory with 30 updates

[dependabot]

Bumps the development-dependencies group with 30 updates in the / directory:

Package	From	To
@types/node	20.19.33	20.19.43
prettier	3.8.1	3.8.4
tsx	4.21.0	4.22.4
@babel/helper-string-parser	7.27.1	7.29.7
@babel/parser	7.29.0	7.29.7
brace-expansion	1.1.12	1.1.15
minimatch	3.1.3	3.1.5
@istanbuljs/schema	0.1.3	0.1.6
@ungap/structured-clone	1.3.0	1.3.1
acorn	8.16.0	8.17.0
call-bind	1.0.8	1.0.9
es-abstract	1.24.1	1.24.2
eslint-import-resolver-node	0.3.9	0.3.10
eslint-module-utils	2.12.1	2.13.0
fflate	0.8.2	0.8.3
flatted	3.3.3	3.4.2
function.prototype.name	1.1.8	1.2.0
mlly	1.8.0	1.8.2
nanoid	3.3.11	3.3.12
picomatch	2.3.1	2.3.2
pidtree	0.6.0	0.6.1
postcss	8.5.6	8.5.15
rollup	4.59.0	4.62.0
safe-array-concat	1.1.3	1.1.4
string.prototype.trim	1.2.10	1.2.11
string.prototype.trimend	1.0.9	1.0.10
tinyglobby	0.2.15	0.2.17
typed-array-length	1.0.7	1.0.8
ufo	1.6.3	1.6.4
which-typed-array	1.1.20	1.1.22

Updates @types/node from 20.19.33 to 20.19.43

Commits

• See full diff in compare view

Updates prettier from 3.8.1 to 3.8.4

Release notes

Sourced from prettier's releases.

3.8.4

• Markdown: Fix blank lines between list items and nested sub-lists being removed in Markdown/MDX (prettier/prettier#17746 by @​byplayer)

🔗 Changelog

3.8.3

• SCSS: Prevent trailing comma in if() function (prettier/prettier#18471 by @​kovsu)

🔗 Changelog

3.8.2

• Support Angular v21.2

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.8.4

diff

Markdown: Fix blank lines between list items and nested sub-lists being removed in Markdown/MDX (#17746 by @​byplayer)

Prettier was removing blank lines between list items and their nested sub-lists, converting loose lists into tight lists and changing their semantic meaning.

<!-- Input -->
- a


b


c

d



<!-- Prettier 3.8.3 -->

a

b


c

d



<!-- Prettier 3.8.4 -->


a

b



c

d

3.8.3

diff

SCSS: Prevent trailing comma in if() function (#18471 by @​kovsu)

// Input
$value: if(sass(false): 1; else: -1);
// Prettier 3.8.2
$value: if(
sass(false): 1; else: -1,
</tr></table>

... (truncated)

Commits

• 1c6ba55 Release 3.8.4
• 4a673dc Fix blank lines between list items and nested sub-lists being removed in Mark...
• 074aaed Replace main branch in changelog link with tags (#19054)
• c22a003 Bump Prettier dependency to 3.8.3
• 07bad1f Clean changelog_unreleased
• d7108a7 Release 3.8.3
• 177f908 Prevent trailing comma in SCSS if() function (#18471)
• 1cd4066 Release @​prettier/plugin-oxc@​0.1.4
• a8700e2 Update oxc-parser to v0.125.0
• 752157c Fix tests
• Additional commits viewable in compare view

Updates tsx from 4.21.0 to 4.22.4

Release notes

Sourced from tsx's releases.

v4.22.4

4.22.4 (2026-05-31)

Bug Fixes

• resolve CommonJS directory requires inside dependencies (#803) (1ce8463)

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.22.3

4.22.3 (2026-05-19)

Bug Fixes

• decode typed loader source (dce02fc)
• preserve entrypoint with TypeScript preload hooks (68f72f3)

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.22.2

4.22.2 (2026-05-18)

Bug Fixes

• preserve CJS JSON require in ESM hooks (35b700b)
• preserve named exports from CommonJS TypeScript (11de737)
• support module.exports require(esm) interop (cf8f199)

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.22.1

4.22.1 (2026-05-17)

Bug Fixes

• resolve tsconfig path aliases containing a colon (#780) (6979f28)

---

This release is also available on:

• npm package (@​latest dist-tag)

... (truncated)

Commits

• 1ce8463 fix: resolve CommonJS directory requires inside dependencies (#803)
• dce02fc fix: decode typed loader source
• 68f72f3 fix: preserve entrypoint with TypeScript preload hooks
• 69455cf test: cover package exports for ambiguous ESM reexports
• 35b700b fix: preserve CJS JSON require in ESM hooks
• ef807db chore: update testing dependencies
• 3917090 test: document compatibility test taxonomy
• de8113f refactor: centralize Node capability facts
• c1f62db test: consolidate tsconfig path edge coverage
• 4e08174 test: consolidate loader hook coverage
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for tsx since your current version.

Updates @babel/helper-string-parser from 7.27.1 to 7.29.7

Release notes

Sourced from @​babel/helper-string-parser's releases.

v7.29.7 (2026-05-25)

Re-release all packages with npm provenance attestations

v7.29.6 (2026-05-25)

🐛 Bug Fix

• babel-generator
  • #18014 Catchup source map position in preserveFormat (@​nicolo-ribaudo)
• babel-core
  • #18001 [7.x packport]Improve input source map handling (@​JLHwung)
• babel-core, babel-generator
  • #17998 Preserve original identifier names from input sourcemaps (#17992) (@​Andarist)

Committers: 3

• Huáng Jùnliàng (@​JLHwung)
• Mateusz Burzyński (@​Andarist)
• Nicolò Ribaudo (@​nicolo-ribaudo)

v7.29.5 (2026-05-05)

🏠 Internal

• babel-preset-env
  • Update @babel/* dependencies

v7.29.4 (2026-05-05)

🐛 Bug Fix

• babel-plugin-transform-modules-systemjs
  • #17974 [7.x backport]fix(systemjs): improve module string name support (@​JLHwung)

Committers: 1

• Huáng Jùnliàng (@​JLHwung)

v7.29.3 (2026-04-30)

👓 Spec Compliance

• babel-parser
  • #17923 Support flow extends bound (@​JLHwung)

🐛 Bug Fix

• babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  • #17931 fix(decorators): replace super within all removed static elements (@​JLHwung)
• babel-register
  • #17915 Fix thread synchronization issues in @babel/register (@​liuxingbaoyu)
• babel-compat-data, babel-plugin-bugfix-safari-rest-destructuring-rhs-array, babel-preset-env
  • #17788 Add bugfix plugin for Safari array rest destructuring bug (@​JLHwung)

💅 Polish

• babel-parser

... (truncated)

Commits

• 4fba754 v7.29.7
• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​babel/helper-string-parser since your current version.

Updates @babel/parser from 7.29.0 to 7.29.7

Release notes

Sourced from @​babel/parser's releases.

v7.29.7 (2026-05-25)

Re-release all packages with npm provenance attestations

v7.29.6 (2026-05-25)

🐛 Bug Fix

• babel-generator
  • #18014 Catchup source map position in preserveFormat (@​nicolo-ribaudo)
• babel-core
  • #18001 [7.x packport]Improve input source map handling (@​JLHwung)
• babel-core, babel-generator
  • #17998 Preserve original identifier names from input sourcemaps (#17992) (@​Andarist)

Committers: 3

• Huáng Jùnliàng (@​JLHwung)
• Mateusz Burzyński (@​Andarist)
• Nicolò Ribaudo (@​nicolo-ribaudo)

v7.29.5 (2026-05-05)

🏠 Internal

• babel-preset-env
  • Update @babel/* dependencies

v7.29.4 (2026-05-05)

🐛 Bug Fix

• babel-plugin-transform-modules-systemjs
  • #17974 [7.x backport]fix(systemjs): improve module string name support (@​JLHwung)

Committers: 1

• Huáng Jùnliàng (@​JLHwung)

v7.29.3 (2026-04-30)

👓 Spec Compliance

• babel-parser
  • #17923 Support flow extends bound (@​JLHwung)

🐛 Bug Fix

• babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  • #17931 fix(decorators): replace super within all removed static elements (@​JLHwung)
• babel-register
  • #17915 Fix thread synchronization issues in @babel/register (@​liuxingbaoyu)
• babel-compat-data, babel-plugin-bugfix-safari-rest-destructuring-rhs-array, babel-preset-env
  • #17788 Add bugfix plugin for Safari array rest destructuring bug (@​JLHwung)

💅 Polish

• babel-parser

... (truncated)

Commits

• 4fba754 v7.29.7
• 183db7b v7.29.3
• 9bc522a Support flow extends bound (#17923)
• 69277a0 Improve trailing comma comment handling (#17782)
• 37d5595 v7.29.2
• f030ad3 [7.x backport] async x => {} must be in leading pos (#17840)
• See full diff in compare view

Updates brace-expansion from 1.1.12 to 1.1.15

Release notes

Sourced from brace-expansion's releases.

v1.1.15

• Backport v5.0.6 change to v1 (#111) 0b09384

---

juliangruber/brace-expansion@v1.1.14...v1.1.15

Commits

• 2203f4f 1.1.15
• 0b09384 Backport v5.0.6 change to v1 (#111)
• 10c05fc 1.1.14
• 1afa1b2 Add opt-in { max } mitigation to v1 legacy line (#103)
• 2fbb6a2 Revert "Backport fix for GHSA-7h2j-956f-4vf2 to v1 (#101)" (#102)
• 0d7652e Backport fix for GHSA-7h2j-956f-4vf2 to v1 (#101)
• 6c353ca 1.1.13
• 7fd684f Backport fix for GHSA-f886-m6hf-6m8v (#95)
• See full diff in compare view

Updates minimatch from 3.1.3 to 3.1.5

Commits

• 7bba978 3.1.5
• bd25942 docs: add warning about ReDoS
• 1a9c27c fix partial matching of globstar patterns
• 1a2e084 3.1.4
• ae24656 update lockfile
• b100374 limit recursion for **, improve perf considerably
• 26ffeaa lockfile update
• 9eca892 lock node version to 14
• See full diff in compare view

Updates @istanbuljs/schema from 0.1.3 to 0.1.6

Release notes

Sourced from @​istanbuljs/schema's releases.

v0.1.6

0.1.6 (2026-04-13)

Bug Fixes

• Undo change to schema in 0.1.x series (440f977)

v0.1.5

0.1.5 (2026-04-13)

Bug Fixes

• Re-add release-please (7c25461)

Changelog

Sourced from @​istanbuljs/schema's changelog.

0.1.6 (2026-04-13)

Bug Fixes

• Undo change to schema in 0.1.x series (440f977)

0.1.5 (2026-04-13)

Bug Fixes

• Re-add release-please (7c25461)

0.1.4 (2026-04-13)

Bug Fixes

• Remove development dependencies (a24b4c1)

Commits

• f870afe chore(master): release 0.1.6
• 440f977 fix: Undo change to schema in 0.1.x series
• d258e9e chore(master): release 0.1.5
• 7c25461 fix: Re-add release-please
• 75b89fd chore: Remove release-please
• 467c01f chore(master): release 0.1.4
• a24b4c1 fix: Remove development dependencies
• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​istanbuljs/schema since your current version.

Updates @ungap/structured-clone from 1.3.0 to 1.3.1

Commits

• 0c44108 1.3.1
• d4e42f8 Fix possible CWE-94
• See full diff in compare view

Maintainer changes

This version was pushed to npm by webreflection, a new releaser for @​ungap/structured-clone since your current version.

Updates acorn from 8.16.0 to 8.17.0

Commits

• 5b9d16c Mark version 8.17.0
• 449f9fa Make linter happy
• 9e1bced Add a strict option to turn on strict mode for scripts
• 8a47812 Convert stack overflow errors to SyntaxError instances
• 3bc83f9 Update maintainer email
• 3f40dbe Bump test262
• 8bd0290 Improve handling of using/await using in for loops
• f25fded Upgrade some dev dependencies
• 27781e4 Remove unnecessary test
• 2dded4b Forbid 'new super()'
• Additional commits viewable in compare view

Updates call-bind from 1.0.8 to 1.0.9

Changelog

Sourced from call-bind's changelog.

v1.0.9 - 2026-04-09

Commits

• [Fix] correct .length computation when partial args exceed function arity 95c406d
• [Dev Deps] update @ljharb/eslint-config, es-value-fixtures, eslint, for-each, has-strict-mode, npmignore, object-inspect 06a4e21
• [Deps] update call-bind-apply-helpers, es-define-property, get-intrinsic 3fea81e
• [readme] replace runkit CI badge with shields.io check-runs badge 23437d4

Commits

• 8d6a98c v1.0.9
• 95c406d [Fix] correct .length computation when partial args exceed function arity
• 3fea81e [Deps] update call-bind-apply-helpers, es-define-property, get-intrinsic
• 06a4e21 [Dev Deps] update @ljharb/eslint-config, es-value-fixtures, eslint, `fo...
• 23437d4 [readme] replace runkit CI badge with shields.io check-runs badge
• See full diff in compare view

Updates es-abstract from 1.24.1 to 1.24.2

Changelog

Sourced from es-abstract's changelog.

1.24.2 / 2026-04-07

• [Fix] IfAbruptCloseIterator: handle all abrupt completions, not just throw
• [Robustness] use +x instead of Number(x)
• [Robustness] use isFinite/parseInt intrinsics, and isNaN helper
• [Robustness] ensure undefined is undefined
• [patch] add a TODO to remove an unused helper
• [Dev Deps] update @ljharb/eslint-config, npmignore

Commits

• 9c40412 v1.24.2
• 5f9c0c1 [Robustness] use +x instead of Number(x)
• 9cb3440 [Fix] IfAbruptCloseIterator: handle all abrupt completions, not just throw
• 4a61750 [patch] add a TODO to remove an unused helper
• e69f21a [Robustness] use isFinite/parseInt intrinsics, and isNaN helper
• ff03c92 [Robustness] ensure undefined is undefined
• f4fc91c [Dev Deps] update @ljharb/eslint-config, npmignore
• See full diff in compare view

Updates eslint-import-resolver-node from 0.3.9 to 0.3.10

Release notes

Sourced from eslint-import-resolver-node's releases.

no-reassign

Added rule no-reassign, made some mistakes publishing to npm. 😳

Changelog

Sourced from eslint-import-resolver-node's changelog.

v0.3.10 - 2026-04-01

• [deps] update is-core-module, resolve
• [meta] add repository.directory field
• [refactor] avoid hoisting

Commits

• See full diff in compare view

Updates eslint-module-utils from 2.12.1 to 2.13.0

Changelog

Sourced from eslint-module-utils's changelog.

v2.13.0 - 2026-05-27

Added

• pass moduleSystem through resolve for exports-aware resolution

Commits

• e6f5c13 No relative parent imports rule (#1093)
• 82f67e6 bump utils to v2.2.0
• ab44320 changelog notes
• 6933fa4 no-cycle: initial docs + maxDepth option
• 864dbcf no-cycle: explicit CJS/AMD tests
• f7c48b5 no-cycle: real rule! first draft, perf is likely atrocious
• 8778d7c Fixes #1023 - Load exceptions in user resolvers are not reported
• 34e4b95 typescript: Always include comments when parsing
• 006ddeb Merge remote-tracking branch 'refs/remotes/benmosher/master'
• dac23a1 eslint-module-utils: v2.1.1 (bumping to re-publish to npm)
• Additional commits viewable in compare view

Updates fflate from 0.8.2 to 0.8.3

Release notes

Sourced from fflate's releases.

v0.8.3

• Fix buffer over-read for Zip64 extra fields
• Support sync flushes (Z_SYNC_FLUSH in zlib)
  • Allows for immediate decompression of all pushed bytes
  • Enables DEFLATE stream concatenation
• Fix zip/zipSync when using cross-realm Uint8Array
• Improve Zip64 support for streamed or undersized archives
• Update performance estimates in README
• Fix typings for TypeScript v5.7+
• Reduce memory consumption after compression stream completion

Changelog

Sourced from fflate's changelog.

0.8.3

• Fix buffer over-read for Zip64 extra fields
• Support sync flushes (Z_SYNC_FLUSH in zlib)
  • Allows for immediate decompression of all pushed bytes
  • Enables DEFLATE stream concatenation
• Fix zip/zipSync when using cross-realm Uint8Array
• Improve Zip64 support for streamed or undersized archives
• Update performance estimates in README
• Fix typings for TypeScript v5.7+
• Reduce memory consumption after compression stream completion

Commits

• dcb3714 0.8.3
• 31acfb8 prepare for v0.8.3
• 7b71e3c update dependencies
• 44ff62d fix zip64 header parsing
• 7235df5 Fix TypeScript issues (#242)
• a44eda0 release compression buffers after stream end (#213)
• d94deb6 allow cross-realm Uint8Array for zip/zipSync (#234)
• 2e1fb75 export package.json (#244)
• 0f430b4 support sync flushes for compression streams (#222)
• 4b7a6cb skip transferring pooled Node buffers (#227)
• Additional commits viewable in compare view

Updates flatted from 3.3.3 to 3.4.2

Commits

• 3bf0909 3.4.2
• 885ddcc fix CWE-1321
• 0bdba70 added flatted-view to the benchmark
• 2a02dce 3.4.1
• fba4e8f Merge pull request #89 from WebReflection/python-fix
• 5fe8648 added "when in Rome" also a test for PHP
• 53517ad some minor improvement
• b3e2a0c Fixing recursion issue in Python too
• c4b46db Add SECURITY.md for security policy and reporting
• f86d071 Create dependabot.yml for version updates
• Additional commits viewable in compare view

Updates function.prototype.name from 1.1.8 to 1.2.0

Changelog

Sourced from function.prototype.name's changelog.

v1.2.0 - 2026-06-11

Commits

• [New] add types 2536496
• [Dev Deps] update eslint fa6890a
• [Refactor] use is-document.all 7fe6fc3
• [Refactor] better support cjs-module-lexer 1552d61
• [Dev Deps] update @ljharb/eslint-config, auto-changelog, eslint, for-each, has-strict-mode, make-generator-function, npmignore, tape dc47ed5
• [Robustness] use es-errors, es-define-property ef06a13
• [Deps] update call-bind, call-bound, hasown 2f4d6f9
• [actions] update workflows 204f04f

Commits

• 99c8c07 v1.2.0
• 7fe6fc3 [Refactor] use is-document.all
• 1552d61 [Refactor] better support cjs-module-lexer
• 2536496 [New] add types
• ef06a13 [Robustness] use es-errors, es-define-property
• fa6890a [Dev Deps] update eslint
• 204f04f [actions] update workflows
• 2f4d6f9 [Deps] update call-bind, call-bound, hasown
• dc47ed5 [Dev Deps] update @ljharb/eslint-config, auto-changelog, eslint, `for-e...
• See full diff in compare view

Updates mlly from 1.8.0 to 1.8.2

Release notes

Sourced from mlly's releases.

v1.8.2

compare changes

🩹 Fixes

• Generic angle bracket parsing (#341)

📖 Documentation

• Fix typo (#333)

❤️ Contributors

• Florian Heuberger (@​Flo0806)
• AngelHdz (@​angelhdzmultimedia)

v1.8.1

compare changes

🩹 Fixes

• Extract variable names ignoring function calls (#336)

❤️ Contributors

• Daniel Roe (@​danielroe)

Changelog

Sourced from mlly's changelog.

v1.8.2

compare changes

🩹 Fixes

• Extract variable names ignoring function calls (#336)
• Generic angle bracket parsing (#341)

📖 Documentation

• Fix typo (#333)

🏡 Chore

• Update deps (12913db)
• Lint (33495f9)
• release: V1.8.1 (ed17783)
• Update deps (1b09363)

❤️ Contributors

• Florian Heuberger (@​Flo0806)
• Pooya Parsa (@​pi0)
• AngelHdz angel.hernandez.12@live.com
• Daniel Roe (@​danielroe)

v1.8.1

compare changes

🩹 Fixes

• Extract variable names ignoring function calls (#336)

🏡 Chore

• Update deps (12913db)
• Lint (33495f9)

❤️ Contributors

• Pooya Parsa (@​pi0)
• Daniel Roe (@​danielroe)

Commits

• c5ce4e5 chore(release): v1.8.2
• abef19c fix: generic angle bracket parsing (#341)
• 1b09363 chore: update deps
• ed17783 chore(release): v1.8.1
• 3f4c751 docs: fix typo (#333)
• 24bd871 chore(deps): update autofix-ci/action digest to 7a166d7 (#334)
• 938cf7e chore(deps): update actions/setup-node action to v6 (#328)
• 915dd32 chore(deps): update actions/checkout action to v6 (#332)
• 33495f9 chore: lint
• 12913db chore: update deps
• Additional commits viewable in compare view

Updates nanoid from 3.3.11 to 3.3.12

Release notes

Sourced from nanoid's releases.

3.3.12

• Fixed breaking Nano ID by requesting big ID.

Changelog

Sourced from nanoid's changelog.

3.3.12

• Fixed breaking Nano ID by requesting big ID.

Commits

• aa9c399 Release 3.3.12 version
• b0036ed Backport fix to CommonJS version too
• 08a19a4 Update test
• 821dfed Backport pool breaking fix
• 609646c Fix CI
• See full diff in compare view

Updates picomatch from 2.3.1 to 2.3.2

Release notes

Sourced from picomatch's releases.

2.3.2

This is a security release fixing several security relevant issues.

What's Changed

• fix: exception when glob pattern contains constructor by @​Jason3S in micromatch/picomatch#144
• Fix for CVE-2026-33671
• Fix for CVE-2026-33672

Full Changelog: micromatch/picomatch@2.3.1...2.3.2

Changelog

Sourced from picomatch's changelog.

Release history

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog and this project adheres to Semantic Versioning.

• Changelogs are for humans, not machines.
• There should be an entry for every single version.
• The same types of changes should be grouped.
• Versions and sections should be linkable.
• The latest version comes first.
• The release date of each versions is displayed.
• Mention whether you follow Semantic Versioning.

Changelog entries are classified using the following labels (from keep-a-changelog):

• Added for new features.
• Changed for changes in existing functionality.
• Deprecated for soon-to-be removed features.
• Removed for now removed features.
• Fixed for any bug fixes.
• Security in case of vulnerabilities.

4.0.0 (2024-02-07)

Fixes

• Fix bad text values in parse #126, thanks to @​connor4312

Changed

• Remove process global to work outside of node #129, thanks to @​styfle
• Add sideEffects to package.json #128, thanks to @​frandiox
• Removed os, make compatible browser environment. See #124, thanks to @​gwsbhqt

3.0.1

Fixes

... (truncated)

Commits

• 81cba8d Publish 2.3.2
• fc1f6b6 Merge commit from fork
• eec17ae Merge commit from fork
• 78f8ca4 Merge pull request #156 from micromatch/backport-144
• 3f4f10e Merge pull request #144 from Jason3S/jdent-object-properties
• See full diff in compare view

Updates pidtree from 0.6.0 to 0.6.1

Release notes

Sourced from pidtree's releases.

v0.6.1

0.6.1 (2026-06-08)

Bug Fixes

• PowerShell fallback when wmic is unavailable on Windows (0.6.1) (#32) (6df6555)

Commits

• 4f73839 chore(main): release 0.6.1 (#34)
• 712b53e ci: tag releases as vX.Y.Z without the package-name prefix (#35)
• 988c357 ci: automate releases with release-please and npm trusted publishing (#33)
• 6df6555 fix: PowerShell fallback when wmic is unavailable on Windows (0.6.1) (#32)
• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for pidtree since your current version.

Updates postcss from 8.5.6 to 8.5.15

Release notes

Sourced from postcss's releases.

8.5.15

• Fixed declaration parsing performance (by @​homanp).

8.5.14

• Fixed custom syntax regression (by @​43081j).

8.5.13

• Fixed postcss-scss commend regression.

8.5.12

• Fixed reading any file via user-generated CSS.
• Added opts.unsafeMap to disable checks.

8.5.11

• Fixed nested brackets parsing performance (by @​offset).

8.5.10

• Fixed XSS via unescaped </style> in non-bundler cases (by...

  Description has been truncated

[dependabot]

Assignees

The following users could not be added as assignees: llm-dev-ops/maintainers. Either the username does not exist or it does not have the correct permissions to be added as an assignee.

Labels

The following labels could not be found: automated, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[github-actions]

🔒 Security Scan Results

Scan Type	Status
Dependency Scan	⚠️ failure
CodeQL Analysis	✅ success
Secret Scan	✅ success
License Check	⚠️ failure
SAST	⚠️ failure

⚠️ Some security scans have warnings or failed. Please review the details.

---

Automated security scanning by GitHub Actions