dependabot[bot]
ca12da6db1
chore(deps): bump ws from 8.18.1 to 8.20.1
...
Bumps [ws](https://github.com/websockets/ws ) from 8.18.1 to 8.20.1.
- [Release notes](https://github.com/websockets/ws/releases )
- [Commits](https://github.com/websockets/ws/compare/8.18.1...8.20.1 )
---
updated-dependencies:
- dependency-name: ws
dependency-version: 8.20.1
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-05-19 08:23:21 +00:00
Marc Durdin
6cb7cced76
Merge pull request #15868 from keymanapp/dependabot/npm_and_yarn/fast-xml-parser-5.7.1
...
chore(deps): bump fast-xml-parser from 5.3.8 to 5.7.1
2026-05-18 19:41:02 +10:00
Marc Durdin
3d21eaff4a
Merge pull request #15932 from keymanapp/dependabot/npm_and_yarn/fast-uri-3.1.2
...
chore(deps): bump fast-uri from 3.1.0 to 3.1.2
2026-05-18 19:40:22 +10:00
Marc Durdin
bea27ebf00
Merge pull request #15918 from keymanapp/dependabot/npm_and_yarn/multi-8b8c83898a
...
chore(deps): bump ip-address and socks
2026-05-18 19:36:07 +10:00
Marc Durdin
d142a26b5c
Merge pull request #15902 from keymanapp/dependabot/npm_and_yarn/multi-c6f6658ed3
...
chore(deps): bump path-to-regexp and express
2026-05-18 19:34:46 +10:00
Marc Durdin
7c90c640a8
Merge pull request #15866 from keymanapp/dependabot/npm_and_yarn/multi-2b9612f831
...
chore(deps): bump uuid and @actions/core
2026-05-14 01:26:45 +10:00
Marc Durdin
92a0938b88
chore: add @types/node to resources/build/version
...
Test-bot: skip
Build-bot: skip
2026-05-13 17:24:38 +02:00
Marc Durdin
9281f44eba
Merge pull request #15848 from keymanapp/dependabot/npm_and_yarn/basic-ftp-5.2.2
...
chore(deps-dev): bump basic-ftp from 5.0.5 to 5.2.2
2026-05-14 01:18:25 +10:00
Marc Durdin
152753738d
chore(developer): address review comments, move to fxp 5.8.0
Keyman Build Summary / Summarize build status checks (push) Has been cancelled
2026-05-13 14:46:11 +02:00
dependabot[bot]
09dde7d61d
chore(deps): bump fast-uri from 3.1.0 to 3.1.2
...
Bumps [fast-uri](https://github.com/fastify/fast-uri ) from 3.1.0 to 3.1.2.
- [Release notes](https://github.com/fastify/fast-uri/releases )
- [Commits](https://github.com/fastify/fast-uri/compare/v3.1.0...v3.1.2 )
---
updated-dependencies:
- dependency-name: fast-uri
dependency-version: 3.1.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-05-08 23:25:57 +00:00
dependabot[bot]
2afd679590
chore(deps): bump ip-address and socks
...
Bumps [ip-address](https://github.com/beaugunderson/ip-address ) and [socks](https://github.com/JoshGlazebrook/socks ). These dependencies needed to be updated together.
Updates `ip-address` from 9.0.5 to 10.2.0
- [Commits](https://github.com/beaugunderson/ip-address/commits )
Updates `socks` from 2.8.3 to 2.8.8
- [Release notes](https://github.com/JoshGlazebrook/socks/releases )
- [Commits](https://github.com/JoshGlazebrook/socks/compare/2.8.3...2.8.8 )
---
updated-dependencies:
- dependency-name: ip-address
dependency-version: 10.2.0
dependency-type: indirect
- dependency-name: socks
dependency-version: 2.8.8
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-05-06 18:17:30 +00:00
dependabot[bot]
c77dab10fc
chore(deps): bump path-to-regexp and express
...
Bumps [path-to-regexp](https://github.com/pillarjs/path-to-regexp ) to 0.1.13 and updates ancestor dependency [express](https://github.com/expressjs/express ). These dependencies need to be updated together.
Updates `path-to-regexp` from 0.1.12 to 0.1.13
- [Release notes](https://github.com/pillarjs/path-to-regexp/releases )
- [Changelog](https://github.com/pillarjs/path-to-regexp/blob/v.0.1.13/History.md )
- [Commits](https://github.com/pillarjs/path-to-regexp/compare/v0.1.12...v.0.1.13 )
Updates `express` from 4.21.2 to 4.22.1
- [Release notes](https://github.com/expressjs/express/releases )
- [Changelog](https://github.com/expressjs/express/blob/v4.22.1/History.md )
- [Commits](https://github.com/expressjs/express/compare/4.21.2...v4.22.1 )
---
updated-dependencies:
- dependency-name: path-to-regexp
dependency-version: 0.1.13
dependency-type: indirect
- dependency-name: express
dependency-version: 4.22.1
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-05-04 09:37:20 +00:00
dependabot[bot]
08f03a0d2b
chore(deps): bump fast-xml-parser from 5.3.8 to 5.7.1
...
Bumps [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser ) from 5.3.8 to 5.7.1.
- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases )
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md )
- [Commits](https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.3.8...v5.7.1 )
---
updated-dependencies:
- dependency-name: fast-xml-parser
dependency-version: 5.7.1
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-04-23 06:14:26 +00:00
dependabot[bot]
5ef1292648
chore(deps): bump uuid and @actions/core
...
Removes [uuid](https://github.com/uuidjs/uuid ). It's no longer used after updating ancestor dependency [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core ). These dependencies need to be updated together.
Removes `uuid`
Updates `@actions/core` from 1.9.1 to 1.11.1
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md )
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core )
---
updated-dependencies:
- dependency-name: uuid
dependency-version:
dependency-type: indirect
- dependency-name: "@actions/core"
dependency-version: 1.11.1
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-04-23 01:47:44 +00:00
dependabot[bot]
e5f56672e3
chore(deps-dev): bump basic-ftp from 5.0.5 to 5.2.2
...
Bumps [basic-ftp](https://github.com/patrickjuchli/basic-ftp ) from 5.0.5 to 5.2.2.
- [Release notes](https://github.com/patrickjuchli/basic-ftp/releases )
- [Changelog](https://github.com/patrickjuchli/basic-ftp/blob/master/CHANGELOG.md )
- [Commits](https://github.com/patrickjuchli/basic-ftp/compare/v5.0.5...v5.2.2 )
---
updated-dependencies:
- dependency-name: basic-ftp
dependency-version: 5.2.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-04-10 20:20:16 +00:00
dependabot[bot]
957d26e28f
chore(deps): bump lodash and @microsoft/api-extractor
...
Bumps [lodash](https://github.com/lodash/lodash ) to 4.18.1 and updates ancestor dependency [@microsoft/api-extractor](https://github.com/microsoft/rushstack/tree/HEAD/apps/api-extractor ). These dependencies need to be updated together.
Updates `lodash` from 4.17.23 to 4.18.1
- [Release notes](https://github.com/lodash/lodash/releases )
- [Commits](https://github.com/lodash/lodash/compare/4.17.23...4.18.1 )
Updates `@microsoft/api-extractor` from 7.57.6 to 7.58.1
- [Changelog](https://github.com/microsoft/rushstack/blob/main/apps/api-extractor/CHANGELOG.md )
- [Commits](https://github.com/microsoft/rushstack/commits/@microsoft/api-extractor_v7.58.1/apps/api-extractor )
---
updated-dependencies:
- dependency-name: lodash
dependency-version: 4.18.1
dependency-type: indirect
- dependency-name: "@microsoft/api-extractor"
dependency-version: 7.58.1
dependency-type: direct:development
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-04-08 17:07:46 +00:00
Marc Durdin
9702047e8f
Merge pull request #15773 from keymanapp/dependabot/npm_and_yarn/flatted-3.4.2
...
chore(deps-dev): bump flatted from 3.2.5 to 3.4.2
2026-03-28 03:24:57 +11:00
dependabot[bot]
2ece72e2f3
chore(deps): bump picomatch from 2.3.1 to 2.3.2
...
Bumps [picomatch](https://github.com/micromatch/picomatch ) from 2.3.1 to 2.3.2.
- [Release notes](https://github.com/micromatch/picomatch/releases )
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md )
- [Commits](https://github.com/micromatch/picomatch/compare/2.3.1...2.3.2 )
---
updated-dependencies:
- dependency-name: picomatch
dependency-version: 2.3.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-03-25 22:27:04 +00:00
dependabot[bot]
a0b7e507b9
chore(deps-dev): bump flatted from 3.2.5 to 3.4.2
...
Bumps [flatted](https://github.com/WebReflection/flatted ) from 3.2.5 to 3.4.2.
- [Commits](https://github.com/WebReflection/flatted/compare/v3.2.5...v3.4.2 )
---
updated-dependencies:
- dependency-name: flatted
dependency-version: 3.4.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-03-20 14:35:49 +00:00
Marc Durdin
00b0a98715
Merge pull request #15649 from keymanapp/dependabot/npm_and_yarn/fast-xml-parser-5.3.8
...
chore(deps): bump fast-xml-parser from 5.3.4 to 5.3.8
2026-03-09 11:55:08 +07:00
Marc Durdin
11e3e100a6
Merge pull request #15626 from keymanapp/fix/developer/15625-ngrok-upgrade
...
fix(developer): ngrok upgrade
2026-03-06 21:49:13 +07:00
Marc Durdin
659e85033a
Merge pull request #15665 from keymanapp/maint/developer/test-callbacks-cleanup
...
maint(developer): make `TestCompilerCallbacks` usage more consistent and simplify
2026-03-06 21:00:39 +07:00
dependabot[bot]
25c3490ecd
chore(deps): bump fast-xml-parser from 5.3.4 to 5.3.8
...
Bumps [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser ) from 5.3.4 to 5.3.8.
- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases )
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md )
- [Commits](https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.3.4...v5.3.8 )
---
updated-dependencies:
- dependency-name: fast-xml-parser
dependency-version: 5.3.8
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-03-06 13:58:59 +00:00
Marc Durdin
281e382171
chore(developer): Merge branch 'master' into fix/developer/15625-ngrok-upgrade
2026-03-06 14:52:41 +01:00
Marc Durdin
0ce96dbdcc
maint(common): rollback from Typescript 5.8.2 to 5.4.x
...
Pull request #15647 bumped our version of tsc from 5.4.5 to 5.8.2,
because api-extractor wanted it. We have not tested yet with 5.8.2 and
there are some incompatibility warnings and a new error that was patched
in #15689 .
We will upgrade to a later version of Typescript in due course, but now
is not the time.
With this patch, we rollback our Typescript version to 5.4.x.
Sample warning from build:
```
[web/src/engine/osk/gesture-processor/src/tools] ## build:test-module starting...
=============
WARNING: You are currently running a version of TypeScript which is not officially supported by @typescript-eslint/typescript-estree.
You may find that it works just fine, or you may not.
SUPPORTED TYPESCRIPT VERSIONS: >=4.7.4 <5.5.0
YOUR TYPESCRIPT VERSION: 5.8.2
Please only submit bug reports when using the officially supported version.
=============
```
Report of typescript version usage with this patch:
```
$ npm ls typescript
root@ D:\Projects\keyman\app
├─┬ @keymanapp/auto-history-action@ -> .\resources\build\version
│ └── typescript@5.4.5 deduped
├─┬ @keymanapp/common-test-resources@ -> .\common\test\resources
│ └── typescript@5.4.5 deduped
├─┬ @keymanapp/common-types@ -> .\common\web\types
│ └── typescript@5.4.5 deduped
├─┬ @keymanapp/developer-server@ -> .\developer\src\server
│ ├─┬ tsc-watch@4.6.2
│ │ └── typescript@5.4.5 deduped
│ └── typescript@5.4.5 deduped
├─┬ @keymanapp/developer-test-helpers@ -> .\developer\src\common\web\test-helpers
│ └── typescript@5.4.5 deduped
├─┬ @keymanapp/developer-utils@ -> .\developer\src\common\web\utils
│ └── typescript@5.4.5 deduped
├─┬ @keymanapp/gesture-recognizer@ -> .\web\src\engine\osk\gesture-processor
│ ├─┬ @keymanapp/web-utils@ -> .\web\src\engine\common\web-utils
│ │ └── typescript@5.4.5 deduped
│ └── typescript@5.4.5 deduped
├─┬ @keymanapp/keyman-version@ -> .\common\web\keyman-version
│ └── typescript@5.4.5 deduped
├─┬ @keymanapp/kmc-analyze@ -> .\developer\src\kmc-analyze
│ └── typescript@5.4.5 deduped
├─┬ @keymanapp/kmc-copy@ -> .\developer\src\kmc-copy
│ └── typescript@5.4.5 deduped
├─┬ @keymanapp/kmc-generate@ -> .\developer\src\kmc-generate
│ └── typescript@5.4.5 deduped
├─┬ @keymanapp/kmc-keyboard-info@ -> .\developer\src\kmc-keyboard-info
│ └── typescript@5.4.5 deduped
├─┬ @keymanapp/kmc-kmn@ -> .\developer\src\kmc-kmn
│ └── typescript@5.4.5 deduped
├─┬ @keymanapp/kmc-ldml@ -> .\developer\src\kmc-ldml
│ └── typescript@5.4.5 deduped
├─┬ @keymanapp/kmc-model-info@ -> .\developer\src\kmc-model-info
│ └── typescript@5.4.5 deduped
├─┬ @keymanapp/kmc-model@ -> .\developer\src\kmc-model
│ └── typescript@5.4.5 deduped
├─┬ @keymanapp/kmc-package@ -> .\developer\src\kmc-package
│ └── typescript@5.4.5 deduped
├─┬ @keymanapp/kmc@ -> .\developer\src\kmc
│ └── typescript@5.4.5 deduped
├─┬ @keymanapp/langtags@ -> .\common\web\langtags
│ └── typescript@5.4.5 deduped
├─┬ @keymanapp/lexical-model-layer@ -> .\web\src\engine\predictive-text\worker-main
│ └── typescript@5.4.5 deduped
├─┬ @keymanapp/lm-message-types@ -> .\web\src\engine\predictive-text\types
│ └── typescript@5.4.5 deduped
├─┬ @keymanapp/lm-worker@ -> .\web\src\engine\predictive-text\worker-thread
│ └── typescript@5.4.5 deduped
├─┬ @keymanapp/models-templates@ -> .\web\src\engine\predictive-text\templates
│ └── typescript@5.4.5 deduped
├─┬ @keymanapp/models-wordbreakers@ -> .\web\src\engine\predictive-text\wordbreakers
│ └── typescript@5.4.5 deduped
├─┬ @keymanapp/sourcemap-path-remapper@ -> .\common\tools\sourcemap-path-remapper
│ └── typescript@5.4.5 deduped
├─┬ @microsoft/api-extractor@7.57.6
│ └── typescript@5.8.2
├─┬ @typescript-eslint/eslint-plugin@7.13.1
│ └─┬ ts-api-utils@1.3.0
│ └── typescript@5.4.5 deduped
├─┬ eslint-config-love@53.0.0
│ └── typescript@5.4.5 deduped
├─┬ keyman@ -> .\web
│ ├─┬ @keymanapp/recorder-core@ -> .\web\src\tools\testing\recorder-core
│ │ └── typescript@5.4.5 deduped
│ └─┬ @keymanapp/web-sentry-manager@ -> .\web\src\engine\sentry-manager
│ └── typescript@5.4.5 deduped
└── typescript@5.4.5
```
Test-bot: skip
2026-03-06 09:57:36 +01:00
Marc Durdin
274d7891e6
Merge pull request #15681 from keymanapp/dependabot/npm_and_yarn/multer-2.1.1
...
chore(deps): bump multer from 2.0.2 to 2.1.1
2026-03-06 03:37:52 +07:00
Marc Durdin
ceeb2ef231
Merge pull request #15647 from keymanapp/dependabot/npm_and_yarn/multi-e17586116f
...
chore(deps): bump minimatch and @microsoft/api-extractor
2026-03-06 03:27:54 +07:00
Marc Durdin
746cfc7596
Merge pull request #15632 from keymanapp/dependabot/npm_and_yarn/rollup-4.59.0
...
chore(deps-dev): bump rollup from 4.22.4 to 4.59.0
2026-03-06 03:27:46 +07:00
dependabot[bot]
0700a3e444
chore(deps): bump multer from 2.0.2 to 2.1.1
...
Bumps [multer](https://github.com/expressjs/multer ) from 2.0.2 to 2.1.1.
- [Release notes](https://github.com/expressjs/multer/releases )
- [Changelog](https://github.com/expressjs/multer/blob/main/CHANGELOG.md )
- [Commits](https://github.com/expressjs/multer/compare/v2.0.2...v2.1.1 )
---
updated-dependencies:
- dependency-name: multer
dependency-version: 2.1.1
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-03-05 08:15:02 +00:00
Marc Durdin
529a49431e
maint(developer): make TestCompilerCallbacks usage more consistent and simplify
...
Simplify usage of `TestCompilerCallbacks` by making it responsible for
the `beforeEach` and `afterEach` incantations itself. There are a couple
of more complex usages of `TestCompilerCallbacks` which have been
excluded from this change on purpose.
Renamed `testCallbacks` to `callbacks` in the one place where it was
different.
Hoist @types/node and @types/mocha because inconsistent versions of
@types/mocha were causing compiler errors with this change.
Also added a cast to `fs.readFileSync` to `Uint8Array` to eliminate
compiler warnings/errors in test files.
Fixes : #15654
Test-bot: skip
2026-03-03 16:44:06 +01:00
dependabot[bot]
5d2f9bd65e
chore(deps): bump minimatch and @microsoft/api-extractor
...
Bumps [minimatch](https://github.com/isaacs/minimatch ) to 3.1.5 and updates ancestor dependencies [minimatch](https://github.com/isaacs/minimatch ) and [@microsoft/api-extractor](https://github.com/microsoft/rushstack/tree/HEAD/apps/api-extractor ). These dependencies need to be updated together.
Updates `minimatch` from 3.1.2 to 3.1.5
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md )
- [Commits](https://github.com/isaacs/minimatch/compare/v3.1.2...v3.1.5 )
Updates `minimatch` from 9.0.4 to 9.0.9
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md )
- [Commits](https://github.com/isaacs/minimatch/compare/v3.1.2...v3.1.5 )
Updates `minimatch` from 9.0.5 to 9.0.9
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md )
- [Commits](https://github.com/isaacs/minimatch/compare/v3.1.2...v3.1.5 )
Updates `minimatch` from 5.1.6 to 5.1.9
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md )
- [Commits](https://github.com/isaacs/minimatch/compare/v3.1.2...v3.1.5 )
Updates `@microsoft/api-extractor` from 7.47.3 to 7.57.6
- [Changelog](https://github.com/microsoft/rushstack/blob/main/apps/api-extractor/CHANGELOG.md )
- [Commits](https://github.com/microsoft/rushstack/commits/@microsoft/api-extractor_v7.57.6/apps/api-extractor )
---
updated-dependencies:
- dependency-name: minimatch
dependency-version: 3.1.5
dependency-type: indirect
- dependency-name: minimatch
dependency-version: 9.0.9
dependency-type: indirect
- dependency-name: minimatch
dependency-version: 9.0.9
dependency-type: indirect
- dependency-name: minimatch
dependency-version: 5.1.9
dependency-type: indirect
- dependency-name: "@microsoft/api-extractor"
dependency-version: 7.57.6
dependency-type: direct:development
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-02-28 02:58:16 +00:00
dependabot[bot]
01e3e32cae
chore(deps-dev): bump rollup from 4.22.4 to 4.59.0
...
Bumps [rollup](https://github.com/rollup/rollup ) from 4.22.4 to 4.59.0.
- [Release notes](https://github.com/rollup/rollup/releases )
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md )
- [Commits](https://github.com/rollup/rollup/compare/v4.22.4...v4.59.0 )
---
updated-dependencies:
- dependency-name: rollup
dependency-version: 4.59.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-02-26 10:09:46 +00:00
Marc Durdin
7d8e3978a1
fix(developer): ngrok upgrade
...
The existing ngrok package is no longer maintained, so this commit
switches to @ngrok/ngrok. However, this means a number of deployment
changes, as the new module uses a node binary module rather than a
standalone executable, and the path to the module is assumed to be on
the Node search path.
The new module also requires VC++ redistributable, so installation of
that has been added to the Server Options dialog.
Use of ngrok with Keyman Developer Server should be in theory possible
with non-Windows platforms with this change, if the user installs the
appropriate @ngrok binary package (e.g. @ngrok/ngrok-darwin-universal)
globally before starting the server.
Fixes : #15625
Build-bot: skip release:developer
2026-02-26 10:07:06 +01:00
dependabot[bot]
058e68db5a
chore(deps-dev): bump basic-ftp from 5.0.5 to 5.2.0
...
Bumps [basic-ftp](https://github.com/patrickjuchli/basic-ftp ) from 5.0.5 to 5.2.0.
- [Release notes](https://github.com/patrickjuchli/basic-ftp/releases )
- [Changelog](https://github.com/patrickjuchli/basic-ftp/blob/master/CHANGELOG.md )
- [Commits](https://github.com/patrickjuchli/basic-ftp/compare/v5.0.5...v5.2.0 )
---
updated-dependencies:
- dependency-name: basic-ftp
dependency-version: 5.2.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-02-25 22:36:05 +00:00
dependabot[bot]
13a59f124f
chore(deps): bump fast-xml-parser from 5.2.2 to 5.3.4
...
Bumps [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser ) from 5.2.2 to 5.3.4.
- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases )
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md )
- [Commits](https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.2.2...v5.3.4 )
---
updated-dependencies:
- dependency-name: fast-xml-parser
dependency-version: 5.3.4
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-01-30 20:48:02 +00:00
dependabot[bot]
c35414d767
chore(deps-dev): bump lodash from 4.17.21 to 4.17.23
...
Bumps [lodash](https://github.com/lodash/lodash ) from 4.17.21 to 4.17.23.
- [Release notes](https://github.com/lodash/lodash/releases )
- [Commits](https://github.com/lodash/lodash/compare/4.17.21...4.17.23 )
---
updated-dependencies:
- dependency-name: lodash
dependency-version: 4.17.23
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-01-21 23:12:45 +00:00
dependabot[bot]
cec4bfce89
chore(deps): bump js-yaml and @microsoft/api-documenter
...
Bumps [js-yaml](https://github.com/nodeca/js-yaml ) to 4.1.1 and updates ancestor dependencies [js-yaml](https://github.com/nodeca/js-yaml ) and [@microsoft/api-documenter](https://github.com/microsoft/rushstack/tree/HEAD/apps/api-documenter ). These dependencies need to be updated together.
Updates `js-yaml` from 4.1.0 to 4.1.1
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md )
- [Commits](https://github.com/nodeca/js-yaml/compare/4.1.0...4.1.1 )
Updates `js-yaml` from 3.14.1 to 3.14.2
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md )
- [Commits](https://github.com/nodeca/js-yaml/compare/4.1.0...4.1.1 )
Updates `@microsoft/api-documenter` from 7.23.31 to 7.28.0
- [Changelog](https://github.com/microsoft/rushstack/blob/main/apps/api-documenter/CHANGELOG.md )
- [Commits](https://github.com/microsoft/rushstack/commits/@microsoft/api-documenter_v7.28.0/apps/api-documenter )
---
updated-dependencies:
- dependency-name: js-yaml
dependency-version: 4.1.1
dependency-type: indirect
- dependency-name: js-yaml
dependency-version: 3.14.2
dependency-type: indirect
- dependency-name: "@microsoft/api-documenter"
dependency-version: 7.28.0
dependency-type: direct:development
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-11-18 22:23:18 +00:00
Marc Durdin
933ea5bb58
change(developer): remove kmlmc and kmlmp
...
These were replaced by kmc in v17.0. We kept them as legacy alternatives
in v18.0, but it is time to remove them now to reduce the maintenance of
having multiple entry points to kmc.
Fixes : #13181
Test-bot: skip
2025-10-31 17:08:56 +01:00
Marc Durdin
58b56f7ed1
Revert "chore(deps-dev): bump playwright from 1.46.1 to 1.56.1"
2025-10-23 11:02:53 +02:00
dependabot[bot]
006f0a57cf
chore(deps-dev): bump playwright from 1.46.1 to 1.56.1
...
Bumps [playwright](https://github.com/microsoft/playwright ) from 1.46.1 to 1.56.1.
- [Release notes](https://github.com/microsoft/playwright/releases )
- [Commits](https://github.com/microsoft/playwright/compare/v1.46.1...v1.56.1 )
---
updated-dependencies:
- dependency-name: playwright
dependency-version: 1.56.1
dependency-type: direct:development
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-10-20 18:55:50 +00:00
Eberhard Beilharz
229bdf8270
maint(resources): nest unit tests under parent block
...
This adds a modified `mocha-teamcity-reporter` that allows to nest the
unit tests under the parent block.
Fixes : #14839
Test-bot: skip
2025-10-06 16:09:47 +02:00
dependabot[bot]
ba38a27589
chore(deps-dev): bump tar-fs from 3.0.9 to 3.1.1
...
Bumps [tar-fs](https://github.com/mafintosh/tar-fs ) from 3.0.9 to 3.1.1.
- [Commits](https://github.com/mafintosh/tar-fs/compare/v3.0.9...v3.1.1 )
---
updated-dependencies:
- dependency-name: tar-fs
dependency-version: 3.1.1
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-09-24 21:37:11 +00:00
Joshua Horton
6263648e8e
maint: fix npm audit issues
...
```
# npm audit report
brace-expansion 1.0.0 - 1.1.11 || 2.0.0 - 2.0.1
brace-expansion Regular Expression Denial of Service vulnerability - https://github.com/advisories/GHSA-v6h2-p8h4-qcjw
brace-expansion Regular Expression Denial of Service vulnerability - https://github.com/advisories/GHSA-v6h2-p8h4-qcjw
fix available via `npm audit fix`
node_modules/brace-expansion
node_modules/mocha/node_modules/brace-expansion
form-data 4.0.0 - 4.0.3
Severity: critical
form-data uses unsafe random function in form-data for choosing boundary - https://github.com/advisories/GHSA-fjxv-7rqg-78g4
fix available via `npm audit fix`
node_modules/form-data
2 vulnerabilities (1 low, 1 critical)
```
2025-08-08 09:04:02 -05:00
dependabot[bot]
1525cd3058
build(deps): bump multer from 2.0.1 to 2.0.2
...
Bumps [multer](https://github.com/expressjs/multer ) from 2.0.1 to 2.0.2.
- [Release notes](https://github.com/expressjs/multer/releases )
- [Changelog](https://github.com/expressjs/multer/blob/main/CHANGELOG.md )
- [Commits](https://github.com/expressjs/multer/compare/v2.0.1...v2.0.2 )
---
updated-dependencies:
- dependency-name: multer
dependency-version: 2.0.2
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-18 02:03:46 +00:00
dependabot[bot]
70859f2d34
chore(deps): bump multer from 2.0.0 to 2.0.1
...
Bumps [multer](https://github.com/expressjs/multer ) from 2.0.0 to 2.0.1.
- [Release notes](https://github.com/expressjs/multer/releases )
- [Changelog](https://github.com/expressjs/multer/blob/main/CHANGELOG.md )
- [Commits](https://github.com/expressjs/multer/compare/v2.0.0...v2.0.1 )
---
updated-dependencies:
- dependency-name: multer
dependency-version: 2.0.1
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-06-05 05:08:54 +00:00
dependabot[bot]
edfa7ed2f9
chore(deps-dev): bump tar-fs from 3.0.8 to 3.0.9
...
Bumps [tar-fs](https://github.com/mafintosh/tar-fs ) from 3.0.8 to 3.0.9.
- [Commits](https://github.com/mafintosh/tar-fs/compare/v3.0.8...v3.0.9 )
---
updated-dependencies:
- dependency-name: tar-fs
dependency-version: 3.0.9
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-06-03 07:03:57 +00:00
Joshua Horton
bfb97ca0c6
maint(web): upgrade Sentry to 8.55.0
...
Fixes: KEYMAN-WEB-RX
(It was produced artificially after this PR's changes to validate them.)
Cross-reference with https://github.com/getsentry/sentry-javascript/blob/master/docs/migration/v7-to-v8.md in regard to minimum supported versions.
@keymanapp-test-bot skip
2025-05-22 14:02:16 +07:00
Marc Durdin
2d7484c84a
maint(developer): update multer to v2.0.0
...
Looks like dependabot did not cleanly upgrade multer (#13982 ). Possibly
a bug with workspaces? Removed from package.json, npm install, re-added,
npm install to fix the issue.
See-also: #13982
2025-05-21 10:58:29 +02:00
dependabot[bot]
87a9935c28
chore(deps): bump multer from 1.4.5-lts.1 to 2.0.0
...
Bumps [multer](https://github.com/expressjs/multer ) from 1.4.5-lts.1 to 2.0.0.
- [Release notes](https://github.com/expressjs/multer/releases )
- [Changelog](https://github.com/expressjs/multer/blob/v2.0.0/CHANGELOG.md )
- [Commits](https://github.com/expressjs/multer/compare/v1.4.5-lts.1...v2.0.0 )
---
updated-dependencies:
- dependency-name: multer
dependency-version: 2.0.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-05-20 01:45:05 +00:00
Joshua Horton
8991df3865
maint: update fast-json-parser
...
The `fast-json-parser` package is needed by `ajv-cli`, which is used during common/web/types/build.sh configure.
Test-bot: skip
2025-05-13 14:46:32 +07:00