Wuast94/go-template
Watch
1
0
Fork
You've already forked go-template
 0
Code Issues 1 Pull requests 3 Projects Releases 390 Packages Wiki Activity Actions

[breaking] chore: update npm dependencies (4 updates) #516

Merged
Wuast94 merged 1 commit from updatarr/npm-dependencies-bac734c5b3 into main 2026-10-14 01:55:01 +02:00
Conversation 0 Commits 1 Files changed 2 +14 -14
Wuast94 commented 2026-10-12 11:14:15 +02:00
Owner

Updates npm dependencies.
Breaking change detected. Review the release notes before merging.

Automerge: Disabled because breaking change release notes were detected

Updates

Dependency From To Type Locations
@happy-dom/global-registrator 20.14.6 21.0.1 major web/package.json L26
@radix-ui/react-slot 1.4.0 1.5.0 minor web/package.json L16
@tanstack/react-router 1.170.42 1.170.44 patch web/package.json L17
lucide-react 1.55.0 1.56.0 minor web/package.json L19
Release notes: @happy-dom/global-registrator

v21.0.0 v21.0.0

💣 Breaking Changes

  • Disables CSS and IFrame loading by default to prevent server-side request forgery (SSRF) - By @capricorn86
    • An attacker could embed <iframe> or <link rel="stylesheet"> elements in untrusted HTML to make Happy DOM send HTTP requests from the server to attacker-chosen URLs, including internal services. This could allow access to otherwise unreachable endpoints or trigger unintended actions, depending on the application and its network access.
    • The settings property disableCSSFileLoading has been deprecated
    • Added the new settings properties enableCSSFileLoading and enableIframePageLoading

Source

Release

Compare source

v21.0.1 v21.0.1

👷‍♂️ Patch fixes

Source

Release

Compare source

Release notes: @radix-ui/react-slot

No release notes available.
Source comparison unavailable: source refs for this transition are not known.

Release notes: @tanstack/react-router

No release notes available.
Source comparison unavailable: source refs for this transition are not known.

Release notes: lucide-react

1.56.0 Version 1.56.0

What's Changed

New Contributors

Full Changelog: https://github.com/lucide-icons/lucide/compare/1.55.0...1.56.0

Source

Release

Compare source

Updates <code>npm dependencies</code>. **Breaking change detected.** Review the release notes before merging. Automerge: Disabled because breaking change release notes were detected ### Updates | Dependency | From | To | Type | Locations | | --- | --- | --- | --- | --- | | <code>@happy-dom/global-registrator</code> | <code>20.14.6</code> | <code>21.0.1</code> | major | <code>web/package.json</code> L26 | | <code>@radix-ui/react-slot</code> | <code>1.4.0</code> | <code>1.5.0</code> | minor | <code>web/package.json</code> L16 | | <code>@tanstack/react-router</code> | <code>1.170.42</code> | <code>1.170.44</code> | patch | <code>web/package.json</code> L17 | | <code>lucide-react</code> | <code>1.55.0</code> | <code>1.56.0</code> | minor | <code>web/package.json</code> L19 | <details> <summary>Release notes: <code>@happy-dom/global-registrator</code></summary> #### <code>v21.0.0</code> <code>v21.0.0</code> ### :bomb: Breaking Changes - Disables CSS and IFrame loading by default to prevent [server-side request forgery (SSRF)](https://en.wikipedia.org/wiki/Server-side_request_forgery) - By **@capricorn86** - An attacker could embed `<iframe>` or `<link rel="stylesheet">` elements in untrusted HTML to make Happy DOM send HTTP requests from the server to attacker-chosen URLs, including internal services. This could allow access to otherwise unreachable endpoints or trigger unintended actions, depending on the application and its network access. - The settings property `disableCSSFileLoading` has been deprecated - Added the new settings properties [enableCSSFileLoading](https://github.com/capricorn86/happy-dom/wiki/IBrowserSettings#properties) and [enableIframePageLoading](https://github.com/capricorn86/happy-dom/wiki/IBrowserSettings#properties) <a href="https://github.com/capricorn86/happy-dom">Source</a> <a href="https://github.com/capricorn86/happy-dom/releases/tag/v21.0.0">Release</a> <a href="https://github.com/capricorn86/happy-dom/compare/v20.14.6...0a99c7525a1d0043e3182843ae33466ab7b19e74">Compare source</a> #### <code>v21.0.1</code> <code>v21.0.1</code> ### :construction_worker_man: Patch fixes - Adds alias for enabling CSS and iframe loading to [@happy-dom/server-renderer](https://github.com/capricorn86/happy-dom/wiki/Server-Renderer) - By **@capricorn86** <a href="https://github.com/capricorn86/happy-dom">Source</a> <a href="https://github.com/capricorn86/happy-dom/releases/tag/v21.0.1">Release</a> <a href="https://github.com/capricorn86/happy-dom/compare/v20.14.6...2b91e68e1748f2a1d597f650594a5c2f95b2a011">Compare source</a> </details> <details> <summary>Release notes: <code>@radix-ui/react-slot</code></summary> No release notes available. Source comparison unavailable: source refs for this transition are not known. </details> <details> <summary>Release notes: <code>@tanstack/react-router</code></summary> No release notes available. Source comparison unavailable: source refs for this transition are not known. </details> <details> <summary>Release notes: <code>lucide-react</code></summary> #### <code>1.56.0</code> <code>Version 1.56.0</code> ## What's Changed * feat(icons): added `server-nas` icon by @benhaube in https://github.com/lucide-icons/lucide/pull/4537 * fix(icons,categories): fix `notifications` category name and refine `circle-x` tags by @Rachit315 in https://github.com/lucide-icons/lucide/pull/4994 * feat(icons): add `message-circle-text` icon by @ericfennis in https://github.com/lucide-icons/lucide/pull/4898 ## New Contributors * @Rachit315 made their first contribution in https://github.com/lucide-icons/lucide/pull/4994 **Full Changelog**: https://github.com/lucide-icons/lucide/compare/1.55.0...1.56.0 <a href="https://github.com/lucide-icons/lucide">Source</a> <a href="https://github.com/lucide-icons/lucide/releases/tag/1.56.0">Release</a> <a href="https://github.com/lucide-icons/lucide/compare/1.55.0...440a1e1dfb1e712505308da46bead3c28b1f1398">Compare source</a> </details>
[breaking] chore: update npm dependencies (2 updates)
All checks were successful
CI / Quality (pull_request) Successful in 9m19s
Details
CI / Build (pull_request) Successful in 4m34s
Details
1660f4f92a
Wuast94 force-pushed updatarr/npm-dependencies-bac734c5b3 from 1660f4f92a
All checks were successful
CI / Quality (pull_request) Successful in 9m19s
Details
CI / Build (pull_request) Successful in 4m34s
Details
to 1e01e14f0a
All checks were successful
CI / Quality (pull_request) Successful in 5m51s
Details
CI / Build (pull_request) Successful in 9m48s
Details
2026-10-12 19:25:17 +02:00 Compare
Wuast94 force-pushed updatarr/npm-dependencies-bac734c5b3 from 1e01e14f0a
All checks were successful
CI / Quality (pull_request) Successful in 5m51s
Details
CI / Build (pull_request) Successful in 9m48s
Details
to b44e156baa
All checks were successful
CI / Quality (pull_request) Successful in 5m48s
Details
CI / Build (pull_request) Successful in 1m50s
Details
2026-10-12 23:00:23 +02:00 Compare
Wuast94 changed title from [breaking] chore: update npm dependencies (2 updates) to [breaking] chore: update npm dependencies (4 updates) 2026-10-13 11:49:59 +02:00
Wuast94 force-pushed updatarr/npm-dependencies-bac734c5b3 from b44e156baa
All checks were successful
CI / Quality (pull_request) Successful in 5m48s
Details
CI / Build (pull_request) Successful in 1m50s
Details
to 47a23ef609
All checks were successful
CI / Quality (pull_request) Successful in 7m22s
Details
CI / Build (pull_request) Successful in 7m16s
Details
2026-10-13 11:50:01 +02:00 Compare
Wuast94 deleted branch updatarr/npm-dependencies-bac734c5b3 2026-10-14 01:55:05 +02:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
Wuast94/go-template!516
No description provided.