[breaking] chore: update npm dependencies (3 updates) #335

Merged

Wuast94 merged 1 commit from updatarr/npm-dependencies-bac734c5b3 into main 2026-10-14 01:55:44 +02:00

Conversation 0 Commits 1 Files changed 2 +10 -10

Wuast94 commented 2026-10-12 11:18:51 +02:00

Owner

• Copy link
• Copy Markdown

Updates npm dependencies.
Breaking change detected. Review the release notes before merging.

Automerge: Disabled because breaking change release notes were detected

Updates

Dependency	From	To	Type	Locations
@happy-dom/global-registrator	20.14.6	21.0.1	major	web/package.json L25
@radix-ui/react-slot	1.4.0	1.5.0	minor	web/package.json L16
lucide-react	1.55.0	1.56.0	minor	web/package.json L18

Release notes: @happy-dom/global-registrator

v21.0.0 v21.0.0

💣 Breaking Changes

• Disables CSS and IFrame loading by default to prevent server-side request forgery (SSRF) - By @capricorn86
  • An attacker could embed <iframe> or <link rel="stylesheet"> elements in untrusted HTML to make Happy DOM send HTTP requests from the server to attacker-chosen URLs, including internal services. This could allow access to otherwise unreachable endpoints or trigger unintended actions, depending on the application and its network access.
  • The settings property disableCSSFileLoading has been deprecated
  • Added the new settings properties enableCSSFileLoading and enableIframePageLoading

Source

Release

Compare source

v21.0.1 v21.0.1

👷‍♂️ Patch fixes

• Adds alias for enabling CSS and iframe loading to @happy-dom/server-renderer - By @capricorn86

Source

Release

Compare source

Release notes: @radix-ui/react-slot

No release notes available.
Source comparison unavailable: source refs for this transition are not known.

Release notes: lucide-react

1.56.0 Version 1.56.0

What's Changed

• feat(icons): added server-nas icon by @benhaube in #4537
• fix(icons,categories): fix notifications category name and refine circle-x tags by @Rachit315 in #4994
• feat(icons): add message-circle-text icon by @ericfennis in #4898

New Contributors

• @Rachit315 made their first contribution in #4994

Full Changelog: 1.55.0...1.56.0

Source

Release

Compare source

Updates <code>npm dependencies</code>. **Breaking change detected.** Review the release notes before merging. Automerge: Disabled because breaking change release notes were detected ### Updates | Dependency | From | To | Type | Locations | | --- | --- | --- | --- | --- | | <code>@happy-dom/global-registrator</code> | <code>20.14.6</code> | <code>21.0.1</code> | major | <code>web/package.json</code> L25 | | <code>@radix-ui/react-slot</code> | <code>1.4.0</code> | <code>1.5.0</code> | minor | <code>web/package.json</code> L16 | | <code>lucide-react</code> | <code>1.55.0</code> | <code>1.56.0</code> | minor | <code>web/package.json</code> L18 | <details> <summary>Release notes: <code>@happy-dom/global-registrator</code></summary> #### <code>v21.0.0</code> <code>v21.0.0</code> <h3>💣 Breaking Changes</h3> <ul> <li>Disables CSS and IFrame loading by default to prevent <a href="https://en.wikipedia.org/wiki/Server-side_request_forgery" rel="nofollow">server-side request forgery (SSRF)</a> - By <strong><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/capricorn86/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/capricorn86">@capricorn86</a></strong> <ul> <li>An attacker could embed <code>&lt;iframe&gt;</code> or <code>&lt;link rel="stylesheet"&gt;</code> elements in untrusted HTML to make Happy DOM send HTTP requests from the server to attacker-chosen URLs, including internal services. This could allow access to otherwise unreachable endpoints or trigger unintended actions, depending on the application and its network access.</li> <li>The settings property <code>disableCSSFileLoading</code> has been deprecated</li> <li>Added the new settings properties <a href="https://github.com/capricorn86/happy-dom/wiki/IBrowserSettings#properties">enableCSSFileLoading</a> and <a href="https://github.com/capricorn86/happy-dom/wiki/IBrowserSettings#properties">enableIframePageLoading</a></li> </ul> </li> </ul> <a href="https://github.com/capricorn86/happy-dom">Source</a> <a href="https://github.com/capricorn86/happy-dom/releases/tag/v21.0.0">Release</a> <a href="https://github.com/capricorn86/happy-dom/compare/v20.14.6...v21.0.0">Compare source</a> #### <code>v21.0.1</code> <code>v21.0.1</code> <h3>👷‍♂️ Patch fixes</h3> <ul> <li>Adds alias for enabling CSS and iframe loading to <a href="https://github.com/capricorn86/happy-dom/wiki/Server-Renderer">@happy-dom/server-renderer</a> - By <strong><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/capricorn86/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/capricorn86">@capricorn86</a></strong></li> </ul> <a href="https://github.com/capricorn86/happy-dom">Source</a> <a href="https://github.com/capricorn86/happy-dom/releases/tag/v21.0.1">Release</a> <a href="https://github.com/capricorn86/happy-dom/compare/v20.14.6...v21.0.1">Compare source</a> </details> <details> <summary>Release notes: <code>@radix-ui/react-slot</code></summary> No release notes available. Source comparison unavailable: source refs for this transition are not known. </details> <details> <summary>Release notes: <code>lucide-react</code></summary> #### <code>1.56.0</code> <code>Version 1.56.0</code> <h2>What's Changed</h2> <ul> <li>feat(icons): added <code>server-nas</code> icon by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/benhaube/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/benhaube">@benhaube</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4877943982" data-permission-text="Title is private" data-url="https://github.com/lucide-icons/lucide/issues/4537" data-hovercard-type="pull_request" data-hovercard-url="/lucide-icons/lucide/pull/4537/hovercard" href="https://github.com/lucide-icons/lucide/pull/4537">#4537</a></li> <li>fix(icons,categories): fix <code>notifications</code> category name and refine <code>circle-x</code> tags by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Rachit315/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Rachit315">@Rachit315</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="5801599650" data-permission-text="Title is private" data-url="https://github.com/lucide-icons/lucide/issues/4994" data-hovercard-type="pull_request" data-hovercard-url="/lucide-icons/lucide/pull/4994/hovercard" href="https://github.com/lucide-icons/lucide/pull/4994">#4994</a></li> <li>feat(icons): add <code>message-circle-text</code> icon by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/ericfennis/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/ericfennis">@ericfennis</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="5524896851" data-permission-text="Title is private" data-url="https://github.com/lucide-icons/lucide/issues/4898" data-hovercard-type="pull_request" data-hovercard-url="/lucide-icons/lucide/pull/4898/hovercard" href="https://github.com/lucide-icons/lucide/pull/4898">#4898</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Rachit315/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Rachit315">@Rachit315</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="5801599650" data-permission-text="Title is private" data-url="https://github.com/lucide-icons/lucide/issues/4994" data-hovercard-type="pull_request" data-hovercard-url="/lucide-icons/lucide/pull/4994/hovercard" href="https://github.com/lucide-icons/lucide/pull/4994">#4994</a></li> </ul> <p><strong>Full Changelog</strong>: <a class="commit-link" href="https://github.com/lucide-icons/lucide/compare/1.55.0...1.56.0"><tt>1.55.0...1.56.0</tt></a></p> <a href="https://github.com/lucide-icons/lucide">Source</a> <a href="https://github.com/lucide-icons/lucide/releases/tag/1.56.0">Release</a> <a href="https://github.com/lucide-icons/lucide/compare/1.55.0...1.56.0">Compare source</a> </details>

Wuast94 added 1 commit 2026-10-12 11:18:51 +02:00

[breaking] chore: update npm dependencies (2 updates) 5a9c139b3c

Wuast94 force-pushed updatarr/npm-dependencies-bac734c5b3 from 5a9c139b3c to b0ac02cdf6 2026-10-12 19:35:23 +02:00 Compare

Wuast94 force-pushed updatarr/npm-dependencies-bac734c5b3 from b0ac02cdf6 to 10c6df0d2d 2026-10-12 23:08:04 +02:00 Compare

Wuast94 changed title from [breaking] chore: update npm dependencies (2 updates) to [breaking] chore: update npm dependencies (3 updates) 2026-10-13 11:58:44 +02:00

Wuast94 force-pushed updatarr/npm-dependencies-bac734c5b3 from 10c6df0d2d to 50a6d15862 2026-10-13 11:58:47 +02:00 Compare

Wuast94 force-pushed updatarr/npm-dependencies-bac734c5b3 from 50a6d15862 to d8a314d2a4 2026-10-14 00:40:46 +02:00 Compare

Wuast94 merged commit 88abfb7751 into main 2026-10-14 01:55:44 +02:00

Wuast94 referenced this pull request from a commit 2026-10-14 01:55:44 +02:00

Merge pull request '[breaking] chore: update npm dependencies (3 updates)' (#335) from updatarr/npm-dependencies-bac734c5b3 into main

Wuast94 deleted branch updatarr/npm-dependencies-bac734c5b3 2026-10-14 01:55:46 +02:00

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

Wuast94/traefik-dash!335

No description provided.