Repository navigation
- Bugfix - Feature - Code style update (formatting, renaming) - Refactoring (no functional changes, no api changes) - Build related changes - Documentation content changes - #168
Open
ashcoft wants to merge 138 commits into
Conversation
- Updated appinfo/info.xml with Nextcloud 33 support (min-version 30). - Replaced internal OC\Files\Filesystem::isFileBlacklisted with OCP\Files\IFilenameValidator. - Fixed vite.config.js to correctly target src/main.ts. - Updated @nextcloud npm dependencies to latest compatible versions. - Verified frontend build and PHP linting. Co-authored-by: ashcoft <1115854+ashcoft@users.noreply.github.com>
- Updated appinfo/info.xml with Nextcloud 33 support (min-version 30). - Replaced internal OC\Files\Filesystem::isFileBlacklisted with OCP\Files\IFilenameValidator. - Fixed vite.config.js to correctly target src/main.ts. - Updated @nextcloud npm dependencies to latest compatible versions. - Verified frontend build and PHP linting. Co-authored-by: ashcoft <1115854+ashcoft@users.noreply.github.com>
- Updated appinfo/info.xml with Nextcloud 33 support (min-version 30). - Replaced internal OC\Files\Filesystem::isFileBlacklisted with OCP\Files\IFilenameValidator. - Fixed vite.config.js to correctly target src/main.ts. - Updated @nextcloud npm dependencies to latest compatible versions. - Verified frontend build and PHP linting. Co-authored-by: ashcoft <1115854+ashcoft@users.noreply.github.com>
- Updated appinfo/info.xml with Nextcloud 33 support (min-version 30). - Replaced internal OC\Files\Filesystem::isFileBlacklisted with OCP\Files\IFilenameValidator. - Fixed vite.config.js to correctly target src/main.ts. - Updated @nextcloud npm dependencies to latest compatible versions. - Verified frontend build and PHP linting. Co-authored-by: ashcoft <1115854+ashcoft@users.noreply.github.com>
…861883122648452809 Nextcloud 33 Compatibility Update for Extract App
- Update max-version to 34 in info.xml - Bump version to 3.1.0 - Update CHANGELOG.md Co-authored-by: openhands <openhands@all-hands.dev>
feat: Add NC33+ support
Update translations from Transifex
…dates Bumps the npm_and_yarn group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `7.1.5` | `7.3.5` | | [dompurify](https://github.com/cure53/DOMPurify) | `3.4.5` | `3.4.12` | | [form-data](https://github.com/form-data/form-data) | `4.0.5` | `4.0.6` | | [js-yaml](https://github.com/nodeca/js-yaml) | `4.1.1` | `4.3.0` | | [qs](https://github.com/ljharb/qs) | `6.14.0` | `6.15.3` | | [rollup](https://github.com/rollup/rollup) | `4.50.0` | `4.62.2` | Updates `vite` from 7.1.5 to 7.3.5 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v7.3.5/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v7.3.5/packages/vite) Updates `dompurify` from 3.4.5 to 3.4.12 - [Release notes](https://github.com/cure53/DOMPurify/releases) - [Commits](cure53/DOMPurify@3.4.5...3.4.12) Updates `form-data` from 4.0.5 to 4.0.6 - [Changelog](https://github.com/form-data/form-data/blob/master/CHANGELOG.md) - [Commits](form-data/form-data@v4.0.5...v4.0.6) Updates `js-yaml` from 4.1.1 to 4.3.0 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@4.1.1...4.3.0) Updates `qs` from 6.14.0 to 6.15.3 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.14.0...v6.15.3) Updates `rollup` from 4.50.0 to 4.62.2 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.50.0...v4.62.2) --- updated-dependencies: - dependency-name: vite dependency-version: 7.3.5 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: dompurify dependency-version: 3.4.12 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: form-data dependency-version: 4.0.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: js-yaml dependency-version: 4.3.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: qs dependency-version: 6.15.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: rollup dependency-version: 4.62.2 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
…sues Vite 7.3.5 with esbuild 0.27 cannot transform destructuring patterns for older browser targets (Chrome 109, Edge 109, iOS 11). This commit excludes these older browsers from the browserslist to fix the build failure in CI. Co-authored-by: openhands <openhands@all-hands.dev>
…rn-6ef150ff13 chore(deps): Bump the npm_and_yarn group across 1 directory with 6 updates
Bumps the npm_and_yarn group with 1 update in the / directory: [fast-uri](https://github.com/fastify/fast-uri). Updates `fast-uri` from 3.1.0 to 3.1.3 - [Release notes](https://github.com/fastify/fast-uri/releases) - [Commits](fastify/fast-uri@v3.1.0...v3.1.3) --- updated-dependencies: - dependency-name: fast-uri dependency-version: 3.1.3 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
…rn-85f100c75a chore(deps-dev): Bump fast-uri from 3.1.0 to 3.1.3 in the npm_and_yarn group across 1 directory
The @nextcloud/vite-config v2 requires vite ^7.1.4, but the merged PR updated vite to ^8.1.4 causing a peer dependency conflict. Updated @nextcloud/vite-config to ^3.0.0-beta.0 which supports vite v8. Co-authored-by: openhands <openhands@all-hands.dev>
fix: update @nextcloud/vite-config to v3 beta to support vite v8
- Update @nextcloud/eslint-config from 9.0.0-rc.5 to 9.0.1 (stable) - Update @nextcloud/stylelint-config from 3.1.0 to 3.2.2 - Update @nextcloud/browserslist-config from 3.0.1 to 3.1.2 - Update openapi-typescript from 7.9.1 to 7.13.0 - Update Node.js requirement to support ^20 || ^22 || ^24 - Update info.xml max-version to 35 for Nextcloud 35 support Co-authored-by: openhands <openhands@all-hands.dev>
- Change Nextcloud support from 30-35 to 33-34 - Change Node.js requirement to ^24 only - Update npm requirement to support npm 10 or 11 Co-authored-by: openhands <openhands@all-hands.dev>
- Update @nextcloud/eslint-config to 9.0.1 - Update @nextcloud/stylelint-config to 3.2.2 - Update @nextcloud/browserslist-config to 3.1.2 - Update openapi-typescript to 7.13.0 - Change Node.js requirement to ^24 - Change Nextcloud support to 33-34 - Update phpVersion in psalm.xml to 8.4 - Fix CI workflow to allow phpVersion >= minimum Co-authored-by: openhands <openhands@all-hands.dev>
chore: NC 33-34 and Node 24+ support
- Add .releaserc configuration for semantic versioning - Add GitHub Actions workflow to trigger releases on main branch - Workflow builds the Nextcloud app and attaches to GitHub release Co-authored-by: openhands <openhands@all-hands.dev>
Co-authored-by: openhands <openhands@all-hands.dev>
Co-authored-by: openhands <openhands@all-hands.dev>
Co-authored-by: openhands <openhands@all-hands.dev>
feat: add semantic-release workflow for auto releases
fix(l10n): Update translations from Transifex
The v3.1.2 release failed, so the tag exists but the release has no archives: @semantic-release/github -> Failed step "success" RequestError [HttpError]: Not Found GET https://api.github.com/repos/ashcoft/extract/pulls/165/commits The success step resolves each released commit to a pull request and fails the whole release with a 404 when a number cannot be resolved. Merging LibreCodeCoop/extract's history brought in commits whose messages reference pull requests that exist only upstream, for example: Merge pull request LibreCodeCoop#165 from LibreCodeCoop/fix/manage-npm-audit-through-librcode-catalog PR LibreCodeCoop#165 does not exist in this repository, so the lookup 404s. That commit is now permanently part of main, so every future release would fail the same way. Disable the comment and label side of the success step: - `successCommentCondition: false` skips the block that performs the PR lookup. The condition form is used rather than `successComment: false`, which the plugin logs as deprecated. - `releasedLabels: false` stops the step trying to label those same PRs. Nothing is lost here: the app is not published to npm and no issue or PR subscribers depend on release comments. Co-authored-by: openhands <openhands@all-hands.dev>
"Encryption is not supported yet" was shown for every user as soon as any
encryption module was enabled on the instance, even for archives that were not
encrypted. The check consulted the server-wide flag:
if ($this->encryptionManager->isEnabled()) { ...refuse... }
That flag only reports whether an encryption module is *available*, not whether
the file being extracted is encrypted, so it blocked a valid use case.
Extraction works with server-side encryption. The archive is read through
Storage::getLocalFile(), and the encryption storage wrapper serves that from a
decrypted temporary file: getLocalFile() calls getCachedFile(), which calls
toTmpFile(), which copies through fopen(). fopen() goes through the wrapper's
decryption path, so the bytes handed to 7za or ZipArchive are already
plaintext. Nothing in the extraction path needs to change.
Remove the refusal, the now-unused OCP\Encryption\IManager constructor
dependency and its import, and add a test asserting the refusal cannot return.
Update the README and appinfo/info.xml, which both advertised the old
limitation.
Password-protected archives remain unsupported; that is a separate limitation
and is still documented.
Co-authored-by: openhands <openhands@all-hands.dev>
fix(release): stop the release failing on upstream pull request numbers
## [3.1.3](v3.1.2...v3.1.3) (2026-10-30) ### Bug Fixes * **release:** stop the release failing on upstream pull request numbers ([3876977](3876977)), closes [LibreCodeCoop#165](https://github.com/ashcoft/extract/issues/165) [LibreCodeCoop/fix/manage-npm-audit-throu#librcode-catalog](https://github.com/LibreCodeCoop/fix/manage-npm-audit-throu/issues/librcode-catalog) [LibreCodeCoop#165](https://github.com/ashcoft/extract/issues/165)
Follow-up to the previous commit, which removed the encryption refusal. Two
review findings, both confirmed.
cubic P1: removing the refusal made a broken path reachable. The destination is
derived from the archive's local path:
$dir = dirname($file);
$extractTo = $dir . '/' . $fileName;
and postExtract() then expects Nextcloud to see the result there. That holds for
plain local storage, where getLocalFile() returns the file inside the data
directory. It does not hold with server-side encryption enabled or on object
storage: Encryption::getLocalFile() falls through to
LocalTempFileTrait::getCachedFile(), so the path is a TempManager file, $dir
becomes /tmp, and nothing is published. The user would get a success and no
folder.
Guard on Storage::isLocal() instead. That is the actual precondition: false both
when encryption is enabled (Wrapper\Encryption::isLocal() returns false) and for
object storage (Common::isLocal() documents "the common implementation returns a
temporary file by default"). The old encryption check missed object storage
entirely.
sourcery and cubic: the PHP rar path ignored $entry->extract() and returned
success, so a password-protected or damaged entry produced a partial result
reported as complete. It now fails the extraction and logs the entry.
Replace the source-text regression test with behavioural tests that drive
execute(): one asserts a non-local storage is refused before the service is
reached, the other that local storage passes the guard and reaches extraction.
tests/stubs/oc_hooks_emitter.php declared Emitter as a class, but the real type
is an interface, so the OCP interfaces could not be loaded outside a full
Nextcloud checkout. Corrected to an interface and loaded from the bootstrap.
Co-authored-by: openhands <openhands@all-hands.dev>
Codacy's comparison-operator check flags the bare boolean in the new storage ternary. Compare explicitly, matching the style used elsewhere in this file. Co-authored-by: openhands <openhands@all-hands.dev>
fix(extraction): allow extraction when server-side encryption is enabled
## [3.1.4](v3.1.3...v3.1.4) (2026-10-30) ### Bug Fixes * **extraction:** allow extraction when server-side encryption is enabled ([6924cc0](6924cc0)) * **extraction:** guard on local storage, and propagate rar failures ([df4d49b](df4d49b))
…orage "Extraction is only supported on local storage" was shown for every archive on object storage (S3, Swift, ...) and whenever server-side encryption was enabled. The guard added in df4d49b was correct about the symptom but refused the request instead of fixing it. The cause is that the extraction unpacks the archive next to the original file and then relies on Nextcloud seeing the result in the data directory. That only holds on real local storage, because getLocalFile() then returns a path inside the data directory. On object storage, or with the encryption storage wrapper, getLocalFile() returns a temporary copy instead (Encryption::getLocalFile() falls through to LocalTempFileTrait::getCachedFile(), and Common::isLocal() documents that "the common implementation returns a temporary file by default"). The destination then resolves to something like /tmp and nothing is published. Keep the local fast path, and add the import step the old code only documented: when the destination storage is not local, unpack into a request-owned temporary directory (ITempManager) and recreate the tree through the Nextcloud files API. Creating each folder and writing each file with Folder::newFile() produces the files-cache entries and write hooks as part of the copy, so the result is published without a storage scan. The temporary directory is removed after the request, and a failure while publishing is reported as a normal extraction failure instead of a success the user cannot see. While extracting the forbidden-name cleanup into its own method, fix the walk that visited `.` and `..`: the filename validator rejects those, so unlink() was called on a directory for every folder in the archive. Co-authored-by: openhands <openhands@all-hands.dev>
## [3.1.5](v3.1.4...v3.1.5) (2026-10-30) ### Bug Fixes * **extraction:** import the result on object storage and encrypted storage ([4048efb](4048efb))
fix(l10n): Update translations from Transifex
## [3.1.6](v3.1.5...v3.1.6) (2026-10-31) ### Bug Fixes * **l10n:** Update translations from Transifex ([f92d702](f92d702))
Add repository instructions that every change goes through a pull request and that nothing may be pushed directly to main. A direct push to main triggers the automated Release workflow, which publishes a release with no review step. Co-authored-by: openhands <openhands@all-hands.dev>
The reuse-compliance-check job failed because AGENTS.md carried no copyright or licence information. Add the standard SPDX comment block used by the other Markdown files. Also act on the review feedback: - Qualify the release warning. release.config.cjs marks maintenance commits (chore, docs, ci, refactor, style, test, build, revert) as no-release and the workflow is skipped when the head commit contains `skip release`, so not every direct push publishes a release. The rule stands because such a push still lands on main without review. - Document the `zlib` requirement: WrappedTarballExtractionTest builds its gzip fixtures with Phar::GZ, which needs zlib. - Say "PHP 8.1 through 8.x" to match the `^8.1` constraint in composer.json. - Note the REUSE requirement so a new file is not left without headers again. Co-authored-by: openhands <openhands@all-hands.dev>
docs: record the pull-request-only workflow in AGENTS.md
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.16.1 to 1.16.2. - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](follow-redirects/follow-redirects@v1.16.1...v1.16.2) --- updated-dependencies: - dependency-name: follow-redirects dependency-version: 1.16.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
…directs-1.16.2 chore(deps): Bump follow-redirects from 1.16.1 to 1.16.2
Bumps [fsfe/reuse-action](https://github.com/fsfe/reuse-action) from 5.0.0 to 6.0.0. - [Release notes](https://github.com/fsfe/reuse-action/releases) - [Commits](fsfe/reuse-action@bb774aa...676e2d5) --- updated-dependencies: - dependency-name: fsfe/reuse-action dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [skjnldsv/read-package-engines-version-actions](https://github.com/skjnldsv/read-package-engines-version-actions) from 3 to 4. - [Release notes](https://github.com/skjnldsv/read-package-engines-version-actions/releases) - [Commits](skjnldsv/read-package-engines-version-actions@v3...06d6db4) --- updated-dependencies: - dependency-name: skjnldsv/read-package-engines-version-actions dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [fsfe/reuse-action](https://github.com/fsfe/reuse-action) from 5.0.0 to 6.0.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/fsfe/reuse-action/releases">fsfe/reuse-action's releases</a>.</em></p> <blockquote> <h2>v6.0.0</h2> <ul> <li>Bump to v6 #(43)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/fsfe/reuse-action/commit/676e2d560c9a403aa252096d99fcab3e1132b0f5"><code>676e2d5</code></a> Bump to reuse v6</li> <li>See full diff in <a href="https://github.com/fsfe/reuse-action/compare/bb774aa972c2a89ff34781233d275075cbddf542...676e2d560c9a403aa252096d99fcab3e1132b0f5">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> <!-- This is an auto-generated description by cubic. --> --- ## Summary by cubic Updates the `fsfe/reuse-action` GitHub Action from v5.0.0 to v6.0.0 in the REUSE compliance check workflow. - This is a major version bump, so the REUSE compliance check may behave differently. <sup>Written for commit e76321c. Summary will update on new commits.</sup> <a href="https://cubic.dev/pr/ashcoft/extract/pull/64?utm_source=github" target="_blank" rel="noopener noreferrer" data-no-image-dialog="true"><picture><source media="(prefers-color-scheme: dark)" srcset="https://www.cubic.dev/buttons/review-in-cubic-dark.svg"><source media="(prefers-color-scheme: light)" srcset="https://www.cubic.dev/buttons/review-in-cubic-light.svg"><img alt="View guided diff" src="https://www.cubic.dev/buttons/review-in-cubic-light.svg"></picture></a> <!-- End of auto-generated description by cubic. -->
…3 to 4 (#65) Bumps [skjnldsv/read-package-engines-version-actions](https://github.com/skjnldsv/read-package-engines-version-actions) from 3 to 4. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/skjnldsv/read-package-engines-version-actions/releases">skjnldsv/read-package-engines-version-actions's releases</a>.</em></p> <blockquote> <h2>v4</h2> <blockquote> <p>[!WARNING] The action now runs on Node.js 24 (<code>using: node24</code>). Self-hosted runners and GHES instances need a runner version that supports node24. Stay on <code>@V3</code> until yours does.</p> </blockquote> <h2>What's Changed</h2> <ul> <li>chore(deps): bump skjnldsv/read-package-engines-version-actions from 2.2 to 3 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/skjnldsv/read-package-engines-version-actions/pull/167">skjnldsv/read-package-engines-version-actions#167</a></li> <li>chore(deps): bump actions/checkout from 4.1.1 to 4.1.4 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/skjnldsv/read-package-engines-version-actions/pull/171">skjnldsv/read-package-engines-version-actions#171</a></li> <li>chore(deps): bump actions/setup-node from 4.0.1 to 4.0.2 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/skjnldsv/read-package-engines-version-actions/pull/157">skjnldsv/read-package-engines-version-actions#157</a></li> <li>chore(deps): bump actions/checkout from 4.1.4 to 6.0.2 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/skjnldsv/read-package-engines-version-actions/pull/173">skjnldsv/read-package-engines-version-actions#173</a></li> <li>chore(deps): bump actions/setup-node from 4.0.2 to 6.4.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/skjnldsv/read-package-engines-version-actions/pull/174">skjnldsv/read-package-engines-version-actions#174</a></li> <li>chore(deps): upgrade dependencies by <a href="https://github.com/skjnldsv"><code>@skjnldsv</code></a> in <a href="https://redirect.github.com/skjnldsv/read-package-engines-version-actions/pull/175">skjnldsv/read-package-engines-version-actions#175</a></li> <li>feat: Use node24 instead of node20 and update all dependencies by <a href="https://github.com/DerDreschner"><code>@DerDreschner</code></a> in <a href="https://redirect.github.com/skjnldsv/read-package-engines-version-actions/pull/177">skjnldsv/read-package-engines-version-actions#177</a></li> <li>chore: drop redundant lint deps and config leftovers by <a href="https://github.com/skjnldsv"><code>@skjnldsv</code></a> in <a href="https://redirect.github.com/skjnldsv/read-package-engines-version-actions/pull/191">skjnldsv/read-package-engines-version-actions#191</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/DerDreschner"><code>@DerDreschner</code></a> made their first contribution in <a href="https://redirect.github.com/skjnldsv/read-package-engines-version-actions/pull/177">skjnldsv/read-package-engines-version-actions#177</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/skjnldsv/read-package-engines-version-actions/compare/v3...v4">https://github.com/skjnldsv/read-package-engines-version-actions/compare/v3...v4</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/skjnldsv/read-package-engines-version-actions/commit/06d6db44aa62f4609ba070f556ec24bc99fb85cb"><code>06d6db4</code></a> Merge pull request <a href="https://redirect.github.com/skjnldsv/read-package-engines-version-actions/issues/191">#191</a> from skjnldsv/fix/tooling-cleanup</li> <li><a href="https://github.com/skjnldsv/read-package-engines-version-actions/commit/4d0086a7b228ae8b47b5c1d7cd290487229d86db"><code>4d0086a</code></a> chore: drop redundant lint deps and config leftovers</li> <li><a href="https://github.com/skjnldsv/read-package-engines-version-actions/commit/d88fca0900fed6f04ff177e1a512cfab5ba7e081"><code>d88fca0</code></a> Merge pull request <a href="https://redirect.github.com/skjnldsv/read-package-engines-version-actions/issues/177">#177</a> from DerDreschner/main</li> <li><a href="https://github.com/skjnldsv/read-package-engines-version-actions/commit/27886ba2b720a619a91cbdd5a8a7df0e88fc72c3"><code>27886ba</code></a> feat: Use node24 instead of node20 and update all dependencies</li> <li><a href="https://github.com/skjnldsv/read-package-engines-version-actions/commit/4d14dc255cc4ac6d7237ad1f6af2614b4428e6fe"><code>4d14dc2</code></a> Merge pull request <a href="https://redirect.github.com/skjnldsv/read-package-engines-version-actions/issues/175">#175</a> from skjnldsv/chore/upgrade-dependencies</li> <li><a href="https://github.com/skjnldsv/read-package-engines-version-actions/commit/49e6823ac5843b6802b92cf84aafcd433ee0eae6"><code>49e6823</code></a> chore(deps): rebuild dist</li> <li><a href="https://github.com/skjnldsv/read-package-engines-version-actions/commit/7f8080ff914739be0995f3ccfa12f750b86ec056"><code>7f8080f</code></a> chore(deps): upgrade dependencies</li> <li><a href="https://github.com/skjnldsv/read-package-engines-version-actions/commit/2ea8df84fda064309193ec5fbf377730b39e5110"><code>2ea8df8</code></a> chore: open-pull-requests-limit for Dependabot</li> <li><a href="https://github.com/skjnldsv/read-package-engines-version-actions/commit/c660a39caae4cfb30c40c319ebd4da5e106f3af0"><code>c660a39</code></a> Merge pull request <a href="https://redirect.github.com/skjnldsv/read-package-engines-version-actions/issues/174">#174</a> from skjnldsv/dependabot/github_actions/actions/setup...</li> <li><a href="https://github.com/skjnldsv/read-package-engines-version-actions/commit/b0cb62702175d0eb88b94681e729ab1e73345040"><code>b0cb627</code></a> Merge pull request <a href="https://redirect.github.com/skjnldsv/read-package-engines-version-actions/issues/173">#173</a> from skjnldsv/dependabot/github_actions/actions/check...</li> <li>Additional commits viewable in <a href="https://github.com/skjnldsv/read-package-engines-version-actions/compare/v3...06d6db44aa62f4609ba070f556ec24bc99fb85cb">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> <!-- This is an auto-generated description by cubic. --> --- ## Summary by cubic Updates `skjnldsv/read-package-engines-version-actions` from v3 to v4 in four GitHub Actions workflows. v4 now runs on Node.js 24, so self-hosted runners or GHES instances must support node24; stay on v3 until they do. <sup>Written for commit f3aadfb. Summary will update on new commits.</sup> <a href="https://cubic.dev/pr/ashcoft/extract/pull/65?utm_source=github" target="_blank" rel="noopener noreferrer" data-no-image-dialog="true"><picture><source media="(prefers-color-scheme: dark)" srcset="https://www.cubic.dev/buttons/review-in-cubic-dark.svg"><source media="(prefers-color-scheme: light)" srcset="https://www.cubic.dev/buttons/review-in-cubic-light.svg"><img alt="View guided diff" src="https://www.cubic.dev/buttons/review-in-cubic-light.svg"></picture></a> <!-- End of auto-generated description by cubic. -->
fix(l10n): Update translations from Transifex
## [3.1.7](v3.1.6...v3.1.7) (2026-11-03) ### Bug Fixes * **l10n:** Update translations from Transifex ([94aa76a](94aa76a))
Bumps the npm_and_yarn group with 1 update: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite). Updates `vite` from 8.3.5 to 8.3.6 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.3.6/packages/vite) --- updated-dependencies: - dependency-name: vite dependency-version: 8.3.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps the github-actions group with 1 update: [icewind1991/nextcloud-version-matrix](https://github.com/icewind1991/nextcloud-version-matrix). Updates `icewind1991/nextcloud-version-matrix` from 1.3.3 to 1.3.4 - [Release notes](https://github.com/icewind1991/nextcloud-version-matrix/releases) - [Commits](nextcloud-libraries/nextcloud-version-matrix@cd0211f...71959de) --- updated-dependencies: - dependency-name: icewind1991/nextcloud-version-matrix dependency-version: 1.3.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>
…oup (#69) Bumps the npm_and_yarn group with 1 update: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite). Updates `vite` from 8.3.5 to 8.3.6 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vitejs/vite/releases">vite's releases</a>.</em></p> <blockquote> <h2>v8.3.6</h2> <h3>Bug Fixes</h3> <ul> <li>await overlapping plugin container close calls (<a href="https://redirect.github.com/vitejs/vite/issues/23935">#23935</a>) (<a href="https://github.com/vitejs/vite/commit/175bbeb231fe8bbf260b0b3866b30080690c4f5e">175bbeb</a>)</li> <li><strong>build:</strong> resolve dynamic imports with queries appended when collecting CSS dependencies (<a href="https://redirect.github.com/vitejs/vite/issues/23909">#23909</a>) (<a href="https://github.com/vitejs/vite/commit/df365589738866363fff7335ed58948a5c440580">df36558</a>)</li> <li><strong>build:</strong> use stable module ids in chunk import map hash signatures (fix <a href="https://redirect.github.com/vitejs/vite/issues/23975">#23975</a>) (<a href="https://redirect.github.com/vitejs/vite/issues/23976">#23976</a>) (<a href="https://github.com/vitejs/vite/commit/8069835ac32ae7682b34de55fdba6c5d2484bae0">8069835</a>)</li> <li><strong>bundled-dev:</strong> allow named imports from Node built-ins (<a href="https://redirect.github.com/vitejs/vite/issues/23858">#23858</a>) (<a href="https://github.com/vitejs/vite/commit/4260c756944a430e897f689efcfa4f8648953488">4260c75</a>)</li> <li><strong>bundled-dev:</strong> reload when hmr cannot run an entry again (<a href="https://redirect.github.com/vitejs/vite/issues/23849">#23849</a>) (<a href="https://github.com/vitejs/vite/commit/a236886026c3a5de0680ea616de7de830d7a90e7">a236886</a>)</li> <li><strong>deps:</strong> update <code>@rollup/plugin-alias</code> to v6.0.1 (<a href="https://redirect.github.com/vitejs/vite/issues/23862">#23862</a>) (<a href="https://github.com/vitejs/vite/commit/67c965b1df64249bceb747037e87d22f75b3e471">67c965b</a>)</li> <li><strong>deps:</strong> update all non-major dependencies (<a href="https://redirect.github.com/vitejs/vite/issues/23896">#23896</a>) (<a href="https://github.com/vitejs/vite/commit/46b91c5bf9c2901b8511c893bc3fc38b8bba6e4f">46b91c5</a>)</li> <li><strong>deps:</strong> update all non-major dependencies (<a href="https://redirect.github.com/vitejs/vite/issues/23966">#23966</a>) (<a href="https://github.com/vitejs/vite/commit/b3cb0575aff63004a71301a1ec798aeea2aa05d7">b3cb057</a>)</li> <li><strong>deps:</strong> update rolldown-related dependencies (<a href="https://redirect.github.com/vitejs/vite/issues/23868">#23868</a>) (<a href="https://github.com/vitejs/vite/commit/a63eb8722e7d47d1efb710b6410c8d5e5a04a18f">a63eb87</a>)</li> <li><strong>deps:</strong> update rolldown-related dependencies (<a href="https://redirect.github.com/vitejs/vite/issues/23967">#23967</a>) (<a href="https://github.com/vitejs/vite/commit/0105733e610dd5b770bb5397e8d9fbc54a9f6312">0105733</a>)</li> <li><strong>dev:</strong> escape ANSI escape sequence for <code>server.forwardConsole</code> (<a href="https://redirect.github.com/vitejs/vite/issues/23933">#23933</a>) (<a href="https://github.com/vitejs/vite/commit/4f340fdb1b619089bbf8ae5dc56c2c0866224306">4f340fd</a>)</li> <li><strong>html:</strong> remove adjacent module tags on the first line (<a href="https://redirect.github.com/vitejs/vite/issues/23823">#23823</a>) (<a href="https://github.com/vitejs/vite/commit/eab1dc2752fcccf7f06427afc9915794e256e3bc">eab1dc2</a>)</li> <li>ignore pnpm's .modules.yaml as a Vite Task input (<a href="https://redirect.github.com/vitejs/vite/issues/23634">#23634</a>) (<a href="https://github.com/vitejs/vite/commit/95c2daf1352b3509ec93e6e08a0eaabe23a61b28">95c2daf</a>)</li> <li><strong>optimizer:</strong> detect cache dir precisely (<a href="https://redirect.github.com/vitejs/vite/issues/23912">#23912</a>) (<a href="https://github.com/vitejs/vite/commit/cc9bc2131d471bb4d60364614b326ada3ca7d10d">cc9bc21</a>)</li> <li><strong>optimizer:</strong> resolve subpath imports (#) with Vite's resolver (<a href="https://redirect.github.com/vitejs/vite/issues/23959">#23959</a>) (<a href="https://github.com/vitejs/vite/commit/0fdd81e9460dd44806b2b6290603ee2c8366a54e">0fdd81e</a>)</li> <li>respect <code>build.sourcemap</code> from environment (<a href="https://redirect.github.com/vitejs/vite/issues/23879">#23879</a>) (<a href="https://github.com/vitejs/vite/commit/82e7aa0374a15e1c67594557ab5893c91578f897">82e7aa0</a>)</li> <li><strong>server:</strong> escape HTML attributes (<a href="https://redirect.github.com/vitejs/vite/issues/23995">#23995</a>) (<a href="https://github.com/vitejs/vite/commit/a27039101e3726498063c9662da9c0c097016bd1">a270391</a>)</li> <li><strong>server:</strong> preserve <code>$</code> patterns in static alias replacements (<a href="https://redirect.github.com/vitejs/vite/issues/23703">#23703</a>) (<a href="https://github.com/vitejs/vite/commit/1b6ed05397c0670e6114e3e1380188f0313ae590">1b6ed05</a>)</li> <li><strong>ssr:</strong> convert external require against built-in modules to import for <code>ssr.target=webworker</code> (<a href="https://redirect.github.com/vitejs/vite/issues/23759">#23759</a>) (<a href="https://github.com/vitejs/vite/commit/a711f1c6328ca7f59857ed99e32853cf49b19a15">a711f1c</a>)</li> <li>use top-level <code>input</code> for SSR build when <code>build.ssr: true</code> (<a href="https://redirect.github.com/vitejs/vite/issues/23898">#23898</a>) (<a href="https://github.com/vitejs/vite/commit/90bc034a97e7eccd0f3cbc69904fffa625a4c34d">90bc034</a>)</li> <li><strong>wasm:</strong> reject <code>.wasm</code> outside <code>server.fs</code> (<a href="https://redirect.github.com/vitejs/vite/issues/23914">#23914</a>) (<a href="https://github.com/vitejs/vite/commit/64e24670e49900c33a3d3e3c701a5ec4d76573f2">64e2467</a>)</li> <li>watch files that have a query or hash referenced with <code>new URL(..., import.meta.url)</code> (<a href="https://redirect.github.com/vitejs/vite/issues/23780">#23780</a>) (<a href="https://github.com/vitejs/vite/commit/e954a9cda0b5254be495a937333a0be1b8503d8f">e954a9c</a>)</li> <li><strong>worker:</strong> keep chunks conflicted with unused workers that are still used by a live worker (<a href="https://redirect.github.com/vitejs/vite/issues/23956">#23956</a>) (<a href="https://github.com/vitejs/vite/commit/7139ef35cf6c9c0979385a467e8499fc19dfd099">7139ef3</a>)</li> </ul> <h3>Performance Improvements</h3> <ul> <li><strong>build:</strong> remove preload link listeners on settle (fix <a href="https://redirect.github.com/vitejs/vite/issues/23920">#23920</a>) (<a href="https://redirect.github.com/vitejs/vite/issues/23922">#23922</a>) (<a href="https://github.com/vitejs/vite/commit/8109efd30319704224db3b7e3b7090348999effb">8109efd</a>)</li> <li><strong>css:</strong> index rendered modules once per output for <code>cssScopeTo</code> (<a href="https://redirect.github.com/vitejs/vite/issues/23889">#23889</a>) (<a href="https://github.com/vitejs/vite/commit/1b905e562aed9b47c3ab5959149bb1566eb7a9a5">1b905e5</a>)</li> </ul> <h3>Miscellaneous Chores</h3> <ul> <li>align charset case (<a href="https://redirect.github.com/vitejs/vite/issues/23863">#23863</a>) (<a href="https://github.com/vitejs/vite/commit/a976df38815d00102bb1d9fa32e0fec7c05d210a">a976df3</a>)</li> </ul> <h3>Build System</h3> <ul> <li>generate sourcemaps in import-meta-current-dirname plugin (<a href="https://redirect.github.com/vitejs/vite/issues/23904">#23904</a>) (<a href="https://github.com/vitejs/vite/commit/20d355a00b036499f4b9fd5aa99ff754ca3d4d06">20d355a</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md">vite's changelog</a>.</em></p> <blockquote> <h2><!-- raw HTML omitted --><a href="https://github.com/vitejs/vite/compare/v8.3.5...v8.3.6">8.3.6</a> (2026-11-05)<!-- raw HTML omitted --></h2> <h3>Bug Fixes</h3> <ul> <li>await overlapping plugin container close calls (<a href="https://redirect.github.com/vitejs/vite/issues/23935">#23935</a>) (<a href="https://github.com/vitejs/vite/commit/175bbeb231fe8bbf260b0b3866b30080690c4f5e">175bbeb</a>)</li> <li><strong>build:</strong> resolve dynamic imports with queries appended when collecting CSS dependencies (<a href="https://redirect.github.com/vitejs/vite/issues/23909">#23909</a>) (<a href="https://github.com/vitejs/vite/commit/df365589738866363fff7335ed58948a5c440580">df36558</a>)</li> <li><strong>build:</strong> use stable module ids in chunk import map hash signatures (fix <a href="https://redirect.github.com/vitejs/vite/issues/23975">#23975</a>) (<a href="https://redirect.github.com/vitejs/vite/issues/23976">#23976</a>) (<a href="https://github.com/vitejs/vite/commit/8069835ac32ae7682b34de55fdba6c5d2484bae0">8069835</a>)</li> <li><strong>bundled-dev:</strong> allow named imports from Node built-ins (<a href="https://redirect.github.com/vitejs/vite/issues/23858">#23858</a>) (<a href="https://github.com/vitejs/vite/commit/4260c756944a430e897f689efcfa4f8648953488">4260c75</a>)</li> <li><strong>bundled-dev:</strong> reload when hmr cannot run an entry again (<a href="https://redirect.github.com/vitejs/vite/issues/23849">#23849</a>) (<a href="https://github.com/vitejs/vite/commit/a236886026c3a5de0680ea616de7de830d7a90e7">a236886</a>)</li> <li><strong>deps:</strong> update <code>@rollup/plugin-alias</code> to v6.0.1 (<a href="https://redirect.github.com/vitejs/vite/issues/23862">#23862</a>) (<a href="https://github.com/vitejs/vite/commit/67c965b1df64249bceb747037e87d22f75b3e471">67c965b</a>)</li> <li><strong>deps:</strong> update all non-major dependencies (<a href="https://redirect.github.com/vitejs/vite/issues/23896">#23896</a>) (<a href="https://github.com/vitejs/vite/commit/46b91c5bf9c2901b8511c893bc3fc38b8bba6e4f">46b91c5</a>)</li> <li><strong>deps:</strong> update all non-major dependencies (<a href="https://redirect.github.com/vitejs/vite/issues/23966">#23966</a>) (<a href="https://github.com/vitejs/vite/commit/b3cb0575aff63004a71301a1ec798aeea2aa05d7">b3cb057</a>)</li> <li><strong>deps:</strong> update rolldown-related dependencies (<a href="https://redirect.github.com/vitejs/vite/issues/23868">#23868</a>) (<a href="https://github.com/vitejs/vite/commit/a63eb8722e7d47d1efb710b6410c8d5e5a04a18f">a63eb87</a>)</li> <li><strong>deps:</strong> update rolldown-related dependencies (<a href="https://redirect.github.com/vitejs/vite/issues/23967">#23967</a>) (<a href="https://github.com/vitejs/vite/commit/0105733e610dd5b770bb5397e8d9fbc54a9f6312">0105733</a>)</li> <li><strong>dev:</strong> escape ANSI escape sequence for <code>server.forwardConsole</code> (<a href="https://redirect.github.com/vitejs/vite/issues/23933">#23933</a>) (<a href="https://github.com/vitejs/vite/commit/4f340fdb1b619089bbf8ae5dc56c2c0866224306">4f340fd</a>)</li> <li><strong>html:</strong> remove adjacent module tags on the first line (<a href="https://redirect.github.com/vitejs/vite/issues/23823">#23823</a>) (<a href="https://github.com/vitejs/vite/commit/eab1dc2752fcccf7f06427afc9915794e256e3bc">eab1dc2</a>)</li> <li>ignore pnpm's .modules.yaml as a Vite Task input (<a href="https://redirect.github.com/vitejs/vite/issues/23634">#23634</a>) (<a href="https://github.com/vitejs/vite/commit/95c2daf1352b3509ec93e6e08a0eaabe23a61b28">95c2daf</a>)</li> <li><strong>optimizer:</strong> detect cache dir precisely (<a href="https://redirect.github.com/vitejs/vite/issues/23912">#23912</a>) (<a href="https://github.com/vitejs/vite/commit/cc9bc2131d471bb4d60364614b326ada3ca7d10d">cc9bc21</a>)</li> <li><strong>optimizer:</strong> resolve subpath imports (#) with Vite's resolver (<a href="https://redirect.github.com/vitejs/vite/issues/23959">#23959</a>) (<a href="https://github.com/vitejs/vite/commit/0fdd81e9460dd44806b2b6290603ee2c8366a54e">0fdd81e</a>)</li> <li>respect <code>build.sourcemap</code> from environment (<a href="https://redirect.github.com/vitejs/vite/issues/23879">#23879</a>) (<a href="https://github.com/vitejs/vite/commit/82e7aa0374a15e1c67594557ab5893c91578f897">82e7aa0</a>)</li> <li><strong>server:</strong> escape HTML attributes (<a href="https://redirect.github.com/vitejs/vite/issues/23995">#23995</a>) (<a href="https://github.com/vitejs/vite/commit/a27039101e3726498063c9662da9c0c097016bd1">a270391</a>)</li> <li><strong>server:</strong> preserve <code>$</code> patterns in static alias replacements (<a href="https://redirect.github.com/vitejs/vite/issues/23703">#23703</a>) (<a href="https://github.com/vitejs/vite/commit/1b6ed05397c0670e6114e3e1380188f0313ae590">1b6ed05</a>)</li> <li><strong>ssr:</strong> convert external require against built-in modules to import for <code>ssr.target=webworker</code> (<a href="https://redirect.github.com/vitejs/vite/issues/23759">#23759</a>) (<a href="https://github.com/vitejs/vite/commit/a711f1c6328ca7f59857ed99e32853cf49b19a15">a711f1c</a>)</li> <li>use top-level <code>input</code> for SSR build when <code>build.ssr: true</code> (<a href="https://redirect.github.com/vitejs/vite/issues/23898">#23898</a>) (<a href="https://github.com/vitejs/vite/commit/90bc034a97e7eccd0f3cbc69904fffa625a4c34d">90bc034</a>)</li> <li><strong>wasm:</strong> reject <code>.wasm</code> outside <code>server.fs</code> (<a href="https://redirect.github.com/vitejs/vite/issues/23914">#23914</a>) (<a href="https://github.com/vitejs/vite/commit/64e24670e49900c33a3d3e3c701a5ec4d76573f2">64e2467</a>)</li> <li>watch files that have a query or hash referenced with <code>new URL(..., import.meta.url)</code> (<a href="https://redirect.github.com/vitejs/vite/issues/23780">#23780</a>) (<a href="https://github.com/vitejs/vite/commit/e954a9cda0b5254be495a937333a0be1b8503d8f">e954a9c</a>)</li> <li><strong>worker:</strong> keep chunks conflicted with unused workers that are still used by a live worker (<a href="https://redirect.github.com/vitejs/vite/issues/23956">#23956</a>) (<a href="https://github.com/vitejs/vite/commit/7139ef35cf6c9c0979385a467e8499fc19dfd099">7139ef3</a>)</li> </ul> <h3>Performance Improvements</h3> <ul> <li><strong>build:</strong> remove preload link listeners on settle (fix <a href="https://redirect.github.com/vitejs/vite/issues/23920">#23920</a>) (<a href="https://redirect.github.com/vitejs/vite/issues/23922">#23922</a>) (<a href="https://github.com/vitejs/vite/commit/8109efd30319704224db3b7e3b7090348999effb">8109efd</a>)</li> <li><strong>css:</strong> index rendered modules once per output for <code>cssScopeTo</code> (<a href="https://redirect.github.com/vitejs/vite/issues/23889">#23889</a>) (<a href="https://github.com/vitejs/vite/commit/1b905e562aed9b47c3ab5959149bb1566eb7a9a5">1b905e5</a>)</li> </ul> <h3>Miscellaneous Chores</h3> <ul> <li>align charset case (<a href="https://redirect.github.com/vitejs/vite/issues/23863">#23863</a>) (<a href="https://github.com/vitejs/vite/commit/a976df38815d00102bb1d9fa32e0fec7c05d210a">a976df3</a>)</li> </ul> <h3>Build System</h3> <ul> <li>generate sourcemaps in import-meta-current-dirname plugin (<a href="https://redirect.github.com/vitejs/vite/issues/23904">#23904</a>) (<a href="https://github.com/vitejs/vite/commit/20d355a00b036499f4b9fd5aa99ff754ca3d4d06">20d355a</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vitejs/vite/commit/0fd9a29f57d49d496f39c952f44c1b5fc3e90769"><code>0fd9a29</code></a> release: v8.3.6 (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23996">#23996</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/eab1dc2752fcccf7f06427afc9915794e256e3bc"><code>eab1dc2</code></a> fix(html): remove adjacent module tags on the first line (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23823">#23823</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/a27039101e3726498063c9662da9c0c097016bd1"><code>a270391</code></a> fix(server): escape HTML attributes (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23995">#23995</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/7139ef35cf6c9c0979385a467e8499fc19dfd099"><code>7139ef3</code></a> fix(worker): keep chunks conflicted with unused workers that are still used b...</li> <li><a href="https://github.com/vitejs/vite/commit/0fdd81e9460dd44806b2b6290603ee2c8366a54e"><code>0fdd81e</code></a> fix(optimizer): resolve subpath imports (#) with Vite's resolver (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23959">#23959</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/8069835ac32ae7682b34de55fdba6c5d2484bae0"><code>8069835</code></a> fix(build): use stable module ids in chunk import map hash signatures (fix <a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/2">#2</a>...</li> <li><a href="https://github.com/vitejs/vite/commit/95c2daf1352b3509ec93e6e08a0eaabe23a61b28"><code>95c2daf</code></a> fix: ignore pnpm's .modules.yaml as a Vite Task input (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23634">#23634</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/b3cb0575aff63004a71301a1ec798aeea2aa05d7"><code>b3cb057</code></a> fix(deps): update all non-major dependencies (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23966">#23966</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/0105733e610dd5b770bb5397e8d9fbc54a9f6312"><code>0105733</code></a> fix(deps): update rolldown-related dependencies (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23967">#23967</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/90bc034a97e7eccd0f3cbc69904fffa625a4c34d"><code>90bc034</code></a> fix: use top-level <code>input</code> for SSR build when <code>build.ssr: true</code> (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23898">#23898</a>)</li> <li>Additional commits viewable in <a href="https://github.com/vitejs/vite/commits/v8.3.6/packages/vite">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> <!-- This is an auto-generated description by cubic. --> --- ## Summary by cubic Bumps the `vite` dev dependency from 8.3.5 to 8.3.6, a patch release that includes bug fixes and performance improvements. The update also pulls in newer transitive dependencies (`rolldown` 1.2.16 and `postcss` 8.5.32) via the lockfile. <sup>Written for commit 707fa7d. Summary will update on new commits.</sup> <a href="https://cubic.dev/pr/ashcoft/extract/pull/69?utm_source=github" target="_blank" rel="noopener noreferrer" data-no-image-dialog="true"><picture><source media="(prefers-color-scheme: dark)" srcset="https://www.cubic.dev/buttons/review-in-cubic-dark.svg"><source media="(prefers-color-scheme: light)" srcset="https://www.cubic.dev/buttons/review-in-cubic-light.svg"><img alt="View guided diff" src="https://www.cubic.dev/buttons/review-in-cubic-light.svg"></picture></a> <!-- End of auto-generated description by cubic. --> <!-- Reviewable:start --> - - - This change is [<img src="https://reviewable.io/review_button.svg" height="34" align="absmiddle" alt="Reviewable"/>](https://reviewable.io/reviews/ashcoft/extract/69) <!-- Reviewable:end -->
…1.3.4 in the github-actions group (#70) Bumps the github-actions group with 1 update: [icewind1991/nextcloud-version-matrix](https://github.com/icewind1991/nextcloud-version-matrix). Updates `icewind1991/nextcloud-version-matrix` from 1.3.3 to 1.3.4 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/icewind1991/nextcloud-version-matrix/releases">icewind1991/nextcloud-version-matrix's releases</a>.</em></p> <blockquote> <h2>v1.3.4</h2> <h2>What's Changed</h2> <ul> <li>chore(assets): Recompile assets by <a href="https://github.com/nickvergessen"><code>@nickvergessen</code></a> in <a href="https://redirect.github.com/nextcloud-libraries/nextcloud-version-matrix/pull/11">nextcloud-libraries/nextcloud-version-matrix#11</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/nextcloud-libraries/nextcloud-version-matrix/compare/v1.3.3...v1.3.4">https://github.com/nextcloud-libraries/nextcloud-version-matrix/compare/v1.3.3...v1.3.4</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/nextcloud-libraries/nextcloud-version-matrix/commit/71959de73c244b11ecbf4503b87c41d65b0f64ae"><code>71959de</code></a> 1.3.4</li> <li><a href="https://github.com/nextcloud-libraries/nextcloud-version-matrix/commit/acad0d760beb49fd643e8329a728bdb9372a5260"><code>acad0d7</code></a> Merge pull request <a href="https://redirect.github.com/icewind1991/nextcloud-version-matrix/issues/11">#11</a> from nickvergessen/bugfix/noid/rebuild-dist</li> <li><a href="https://github.com/nextcloud-libraries/nextcloud-version-matrix/commit/b01f59622a03b40c805b0ea693cdb5666e773d42"><code>b01f596</code></a> ci(workflow): Add github action to confirm dist was rebuild</li> <li><a href="https://github.com/nextcloud-libraries/nextcloud-version-matrix/commit/1107e18db5cc8da76ebd8566ac9ec1ea81881311"><code>1107e18</code></a> chore(assets): Recompile assets</li> <li>See full diff in <a href="https://github.com/icewind1991/nextcloud-version-matrix/compare/cd0211ffcef1065e2020cd579e4843b8746e7a58...71959de73c244b11ecbf4503b87c41d65b0f64ae">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> <!-- Reviewable:start --> - - - This change is [<img src="https://reviewable.io/review_button.svg" height="34" align="absmiddle" alt="Reviewable"/>](https://reviewable.io/reviews/ashcoft/extract/70) <!-- Reviewable:end --> <!-- This is an auto-generated description by cubic. --> --- ## Summary by cubic Bumps `icewind1991/nextcloud-version-matrix` from 1.3.3 to 1.3.4 in the GitHub Actions workflows (`lint-php-cs`, `lint-php`, `openapi`, and `psalm`). The release only recompiles assets, so no workflow behavior changes. <sup>Written for commit 3df3ad4. Summary will update on new commits.</sup> <a href="https://cubic.dev/pr/ashcoft/extract/pull/70?utm_source=github" target="_blank" rel="noopener noreferrer" data-no-image-dialog="true"><picture><source media="(prefers-color-scheme: dark)" srcset="https://www.cubic.dev/buttons/review-in-cubic-dark.svg"><source media="(prefers-color-scheme: light)" srcset="https://www.cubic.dev/buttons/review-in-cubic-light.svg"><img alt="View guided diff" src="https://www.cubic.dev/buttons/review-in-cubic-light.svg"></picture></a> <!-- End of auto-generated description by cubic. -->
Bumps [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) from 5.11.2 to 5.12.0. - [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases) - [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md) - [Commits](NaturalIntelligence/fast-xml-parser@v5.11.2...v5.12.0) --- updated-dependencies: - dependency-name: fast-xml-parser dependency-version: 5.12.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) from 5.11.2 to 5.12.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/NaturalIntelligence/fast-xml-parser/releases">fast-xml-parser's releases</a>.</em></p> <blockquote> <h2>v5.12.0</h2> <h2>What's Changed</h2> <ul> <li>fix: add endIndex to the CommonJS XMLMetaData declaration by <a href="https://github.com/dualfroz"><code>@dualfroz</code></a> in <a href="https://redirect.github.com/NaturalIntelligence/fast-xml-parser/pull/896">NaturalIntelligence/fast-xml-parser#896</a></li> <li>Bump zizmorcore/zizmor-action from 0.6.1 to 0.8.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/NaturalIntelligence/fast-xml-parser/pull/906">NaturalIntelligence/fast-xml-parser#906</a></li> <li>Bump actions/setup-node from 7.0.0 to 7.1.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/NaturalIntelligence/fast-xml-parser/pull/904">NaturalIntelligence/fast-xml-parser#904</a></li> <li>fix: preserve original metadata offsets for CRLF input by <a href="https://github.com/Sskift"><code>@Sskift</code></a> in <a href="https://redirect.github.com/NaturalIntelligence/fast-xml-parser/pull/911">NaturalIntelligence/fast-xml-parser#911</a></li> <li>docs: update NASA link in users list by <a href="https://github.com/CodeVertex55"><code>@CodeVertex55</code></a> in <a href="https://redirect.github.com/NaturalIntelligence/fast-xml-parser/pull/885">NaturalIntelligence/fast-xml-parser#885</a></li> <li>README.md: fix documentation links by <a href="https://github.com/maxlath"><code>@maxlath</code></a> in <a href="https://redirect.github.com/NaturalIntelligence/fast-xml-parser/pull/872">NaturalIntelligence/fast-xml-parser#872</a></li> <li>test: drop shadowed ignoreAttributes option by <a href="https://github.com/rajanpanth"><code>@rajanpanth</code></a> in <a href="https://redirect.github.com/NaturalIntelligence/fast-xml-parser/pull/863">NaturalIntelligence/fast-xml-parser#863</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/dualfroz"><code>@dualfroz</code></a> made their first contribution in <a href="https://redirect.github.com/NaturalIntelligence/fast-xml-parser/pull/896">NaturalIntelligence/fast-xml-parser#896</a></li> <li><a href="https://github.com/Sskift"><code>@Sskift</code></a> made their first contribution in <a href="https://redirect.github.com/NaturalIntelligence/fast-xml-parser/pull/911">NaturalIntelligence/fast-xml-parser#911</a></li> <li><a href="https://github.com/CodeVertex55"><code>@CodeVertex55</code></a> made their first contribution in <a href="https://redirect.github.com/NaturalIntelligence/fast-xml-parser/pull/885">NaturalIntelligence/fast-xml-parser#885</a></li> <li><a href="https://github.com/maxlath"><code>@maxlath</code></a> made their first contribution in <a href="https://redirect.github.com/NaturalIntelligence/fast-xml-parser/pull/872">NaturalIntelligence/fast-xml-parser#872</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.11.2...v5.12.0">https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.11.2...v5.12.0</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md">fast-xml-parser's changelog</a>.</em></p> <blockquote> <p><!-- raw HTML omitted -->Note: If you find missing information about particular minor version, that version must have been changed without any functional change in this library.<!-- raw HTML omitted --></p> <p>Note: Due to some last quick changes on v4, detail of v4.5.3 & v4.5.4 are not updated here. v4.5.4x is the last tag of v4 in github repository. I'm extremely sorry for the confusion</p> <p><strong>5.12.0 / 2026-11-03</strong></p> <ul> <li>perf improvement for stop node: After the first failure in a given stop node, the function stops using readTagExp and switches to a cheap fallback.</li> <li>devdep:jasmine 7.0</li> <li>deps: <ul> <li><code>@nodable/entities</code> v3.1.0</li> <li>fast-xml-builder v1.3.1</li> <li>is-unsafe v2.0.3</li> <li>strnum v2.5.1</li> </ul> </li> <li>fix cjs typing</li> <li>fix: preserve original metadata offsets for CRLF input (<a href="https://redirect.github.com/NaturalIntelligence/fast-xml-parser/issues/911">#911</a>) (By <a href="https://github.com/sskift">sskift</a>)</li> </ul> <p><strong>5.11.2 / 2026-09-29</strong></p> <ul> <li>fix (<a href="https://redirect.github.com/NaturalIntelligence/fast-xml-parser/issues/875">#875</a>): decode Uint8Array XML input as UTF-8 (By emme1t)</li> <li>fix (<a href="https://redirect.github.com/NaturalIntelligence/fast-xml-parser/issues/880">#880</a>) :type EntityDecoderOptions.setXmlVersion's version as a number (By Yevhenii Kotyrlo)</li> </ul> <p><strong>5.11.1 / 2026-08-27</strong></p> <ul> <li>fix: validator; Replace regex with a single-pass scanner for attribute tokens, eliminating quadratic behavior on long whitespace runs.</li> </ul> <p><strong>5.11.0 / 2026-08-16</strong></p> <ul> <li>feat: support for endIndex in node metadata (<a href="https://redirect.github.com/NaturalIntelligence/fast-xml-parser/issues/850">#850</a>) [By <a href="https://github.com/Wain-PC">Pavel Dranichnikov</a>]</li> <li>fix: don't crash on a closing tag with no matching opening tag (<a href="https://redirect.github.com/NaturalIntelligence/fast-xml-parser/issues/861">#861</a>) [By <a href="https://github.com/hdimer">Haïm Dimer</a>]</li> <li>fix: DOCTYPE to read SYSTEM/PUBLIC</li> <li>deps: strnum v2.4.2</li> </ul> <p><strong>5.10.1 / 2026-07-17</strong></p> <ul> <li>fix: multiple DOCTYPE declarations.</li> <li>deps: <code>@nodable/entities</code> for treeshaking</li> </ul> <p><strong>5.10.0 / 2026-07-11</strong></p> <ul> <li>upgrade: <ul> <li>xml-naming v0.3.0: cache support</li> <li>PEM v1.6.2: sibling bug fix</li> <li>is-unsafe v2.0.0: tree shaking</li> </ul> </li> </ul> <p>*<em>5.9.3 / 2026-06-19</em></p> <ul> <li>update strnum</li> </ul> <p>*<em>5.9.2 / 2026-06-17</em></p> <ul> <li>dummy release to test changes in github action</li> </ul> <p>*<em>5.9.1 / 2026-06-17</em></p> <ul> <li>dummy release to test release from github action</li> </ul> <p>*<em>5.9.0 / 2026-06-15</em></p> <ul> <li>update strnum to 2.3.0</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/NaturalIntelligence/fast-xml-parser/commit/976470f6100eac10304d80507bbd76fb739ba7f5"><code>976470f</code></a> 5.12.0</li> <li><a href="https://github.com/NaturalIntelligence/fast-xml-parser/commit/e6703ce7bf66769a1a1eade15067494a5b181d27"><code>e6703ce</code></a> update changelog</li> <li><a href="https://github.com/NaturalIntelligence/fast-xml-parser/commit/cad3004e6968e6da417e325f5f8c9a3099dfa724"><code>cad3004</code></a> update browser bundle</li> <li><a href="https://github.com/NaturalIntelligence/fast-xml-parser/commit/404b15ed04f2384ff38048ffe890fbe93a114649"><code>404b15e</code></a> deps update</li> <li><a href="https://github.com/NaturalIntelligence/fast-xml-parser/commit/1792392c725c65bbec7453a14102a31323dd6cd1"><code>1792392</code></a> devdep: jasmine 7</li> <li><a href="https://github.com/NaturalIntelligence/fast-xml-parser/commit/edea04304938135b4a1bab8b136074cbdfc5028f"><code>edea043</code></a> specs: No duplicate suit or test name</li> <li><a href="https://github.com/NaturalIntelligence/fast-xml-parser/commit/0c3659348364959da62954b73728fb3bd05ebcb4"><code>0c36593</code></a> perf: stopnode</li> <li><a href="https://github.com/NaturalIntelligence/fast-xml-parser/commit/56805655d9ed564352baf0ed51553fd446ab608a"><code>5680565</code></a> test: drop shadowed ignoreAttributes option (<a href="https://redirect.github.com/NaturalIntelligence/fast-xml-parser/issues/863">#863</a>)</li> <li><a href="https://github.com/NaturalIntelligence/fast-xml-parser/commit/6b855c2d117d678447bfbc4e8bfe15650cac5765"><code>6b855c2</code></a> README.md: fix documentation links (<a href="https://redirect.github.com/NaturalIntelligence/fast-xml-parser/issues/872">#872</a>)</li> <li><a href="https://github.com/NaturalIntelligence/fast-xml-parser/commit/4ad138826f78011a85579c1a837663254a0abbc8"><code>4ad1388</code></a> docs: update NASA link in users list (<a href="https://redirect.github.com/NaturalIntelligence/fast-xml-parser/issues/885">#885</a>)</li> <li>Additional commits viewable in <a href="https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.11.2...v5.12.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/ashcoft/extract/network/alerts). </details> <!-- Reviewable:start --> - - - This change is [<img src="https://reviewable.io/review_button.svg" height="34" align="absmiddle" alt="Reviewable"/>](https://reviewable.io/reviews/ashcoft/extract/72) <!-- Reviewable:end --> <!-- This is an auto-generated description by cubic. --> --- ## Summary by cubic Bumps `fast-xml-parser` from 5.11.2 to 5.12.0. This non-breaking update adds a performance improvement for stop nodes, fixes metadata offsets for CRLF input, and updates internal dependencies. <sup>Written for commit a4df9bc. Summary will update on new commits.</sup> <a href="https://cubic.dev/pr/ashcoft/extract/pull/72?utm_source=github" target="_blank" rel="noopener noreferrer" data-no-image-dialog="true"><picture><source media="(prefers-color-scheme: dark)" srcset="https://www.cubic.dev/buttons/review-in-cubic-dark.svg"><source media="(prefers-color-scheme: light)" srcset="https://www.cubic.dev/buttons/review-in-cubic-light.svg"><img alt="View guided diff" src="https://www.cubic.dev/buttons/review-in-cubic-light.svg"></picture></a> <!-- End of auto-generated description by cubic. -->
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
![https://www.cubic.dev/buttons/review-in-cubic-dark.svg"><source](https://www.cubic.dev/buttons/review-in-cubic-dark.svg"><source){kind=link}
![https://www.cubic.dev/buttons/review-in-cubic-light.svg"><img](https://www.cubic.dev/buttons/review-in-cubic-light.svg"><img){kind=link}
![https://www.cubic.dev/buttons/review-in-cubic-light.svg"></picture></a](https://www.cubic.dev/buttons/review-in-cubic-light.svg"></picture></a){kind=link}
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Pull Request Description
Related Issue
Issue Number:
Pull Request Type
Pull request checklist