Repository navigation
merge from upstream 20261111 - #49
Merged
Merged
Conversation
NeiRo21
commented
Nov 11, 2026
Owner
- Bump nx from 22.6.0 to 22.7.8 (Bump nx from 22.6.0 to 22.7.8 inrupt/solid-client-authn-js#4347)
- Bump jose from 6.2.4 to 6.2.5 (Bump jose from 6.2.4 to 6.2.5 inrupt/solid-client-authn-js#4349)
- Bump the external-types group across 1 directory with 3 updates (Bump the external-types group across 1 directory with 3 updates inrupt/solid-client-authn-js#4351)
- Bump undici from 8.5.0 to 8.10.0 (Bump undici from 8.5.0 to 8.10.0 inrupt/solid-client-authn-js#4352)
- Bump ip-address from 10.2.0 to 10.4.0 (Bump ip-address from 10.2.0 to 10.4.0 inrupt/solid-client-authn-js#4354)
- Bump postcss and next (Bump postcss and next inrupt/solid-client-authn-js#4353)
- Bump jose from 6.2.5 to 6.2.8 (Bump jose from 6.2.5 to 6.2.8 inrupt/solid-client-authn-js#4358)
- Bump lerna from 9.0.7 to 10.0.0 (Bump lerna from 9.0.7 to 10.0.0 inrupt/solid-client-authn-js#4350)
- Bump @playwright/test from 1.62.0 to 1.62.1 (Bump @playwright/test from 1.62.0 to 1.62.1 inrupt/solid-client-authn-js#4357)
- Bump eslint-config-next from 16.2.12 to 16.3.0 (Bump eslint-config-next from 16.2.12 to 16.3.0 inrupt/solid-client-authn-js#4359)
- Upgrade TypeScript to v6 (Upgrade TypeScript to v6 inrupt/solid-client-authn-js#4361)
- Bump @types/node from 26.1.2 to 26.2.0 in the external-types group (Bump @types/node from 26.1.2 to 26.2.0 in the external-types group inrupt/solid-client-authn-js#4362)
- Bump esbuild from 0.28.1 to 0.28.2 (Bump esbuild from 0.28.1 to 0.28.2 inrupt/solid-client-authn-js#4363)
- Bump brace-expansion (Bump brace-expansion inrupt/solid-client-authn-js#4364)
- Bump lerna from 10.0.0 to 10.0.1 (Bump lerna from 10.0.0 to 10.0.1 inrupt/solid-client-authn-js#4369)
- Bump next from 16.3.0 to 16.3.1 (Bump next from 16.3.0 to 16.3.1 inrupt/solid-client-authn-js#4368)
- Bump uuid from 14.0.1 to 14.0.2 (Bump uuid from 14.0.1 to 14.0.2 inrupt/solid-client-authn-js#4365)
- Bump jose from 6.2.8 to 6.2.9 (Bump jose from 6.2.8 to 6.2.9 inrupt/solid-client-authn-js#4367)
- Bump eslint-config-next from 16.3.0 to 16.3.1 (Bump eslint-config-next from 16.3.0 to 16.3.1 inrupt/solid-client-authn-js#4366)
- Cleanup dependabot config (Cleanup dependabot config inrupt/solid-client-authn-js#4370)
- Bump re-actors/alls-green from 1.2.2 to 1.3.0 (Bump re-actors/alls-green from 1.2.2 to 1.3.0 inrupt/solid-client-authn-js#4374)
- Bump @nx/nx-win32-x64-msvc from 23.1.1 to 23.1.2 (Bump @nx/nx-win32-x64-msvc from 23.1.1 to 23.1.2 inrupt/solid-client-authn-js#4378)
- Bump eslint-config-next from 16.3.1 to 16.3.3 (Bump eslint-config-next from 16.3.1 to 16.3.3 inrupt/solid-client-authn-js#4377)
- Bump next from 16.3.1 to 16.3.3 (Bump next from 16.3.1 to 16.3.3 inrupt/solid-client-authn-js#4376)
- Bump the external-types group with 2 updates (Bump the external-types group across 1 directory with 2 updates inrupt/solid-client-authn-js#4375)
- Bump postcss-selector-parser from 7.1.1 to 7.1.5 (Bump postcss-selector-parser from 7.1.1 to 7.1.5 inrupt/solid-client-authn-js#4379)
- Bump browserslist from 4.25.1 to 4.28.8 (Bump browserslist from 4.25.1 to 4.28.8 inrupt/solid-client-authn-js#4380)
- Bump jose from 6.2.9 to 6.2.10 (Bump jose from 6.2.9 to 6.2.10 inrupt/solid-client-authn-js#4371)
- Bump @humanfs/node from 0.16.7 to 0.16.8 (Bump @humanfs/node from 0.16.7 to 0.16.8 inrupt/solid-client-authn-js#4381)
- Bump jest from 30.4.2 to 30.5.1 (Bump jest from 30.4.2 to 30.5.1 inrupt/solid-client-authn-js#4387)
- Bump jest-environment-jsdom from 30.4.1 to 30.5.1 (Bump jest-environment-jsdom from 30.4.1 to 30.5.1 inrupt/solid-client-authn-js#4386)
- Bump eslint-config-next from 16.3.3 to 16.3.4 (Bump eslint-config-next from 16.3.3 to 16.3.4 inrupt/solid-client-authn-js#4384)
- Bump @nx/nx-win32-x64-msvc from 23.1.2 to 23.2.0 (Bump @nx/nx-win32-x64-msvc from 23.1.2 to 23.2.0 inrupt/solid-client-authn-js#4385)
- Bump the external-types group across 1 directory with 2 updates (Bump the external-types group across 1 directory with 2 updates inrupt/solid-client-authn-js#4382)
- Bump next from 16.3.3 to 16.3.4 (Bump next from 16.3.3 to 16.3.4 inrupt/solid-client-authn-js#4383)
- Bump @nx/nx-win32-x64-msvc from 23.2.0 to 23.2.1 (Bump @nx/nx-win32-x64-msvc from 23.2.0 to 23.2.1 inrupt/solid-client-authn-js#4394)
- Bump react and @types/react (Bump react and @types/react inrupt/solid-client-authn-js#4391)
- Bump jose from 6.2.10 to 6.2.12 (Bump jose from 6.2.10 to 6.2.12 inrupt/solid-client-authn-js#4393)
- Bump @playwright/test from 1.62.1 to 1.63.0 (Bump @playwright/test from 1.62.1 to 1.63.0 inrupt/solid-client-authn-js#4390)
- Bump react-dom and @types/react-dom (Bump react-dom and @types/react-dom inrupt/solid-client-authn-js#4392)
- Bump @types/node from 26.4.1 to 26.5.1 in the external-types group (Bump @types/node from 26.4.1 to 26.5.1 in the external-types group across 1 directory inrupt/solid-client-authn-js#4389)
- chore: support merge queues in CI (chore: support merge queues in CI inrupt/solid-client-authn-js#4395)
- Disable install scripts (Disable install scripts inrupt/solid-client-authn-js#4396)
- Avoid duplicate CI runs on the merge queue (Avoid duplicate CI runs on the merge queue inrupt/solid-client-authn-js#4397)
- Bump @babel/core from 7.28.5 to 7.29.7 (Bump @babel/core from 7.28.5 to 7.29.7 inrupt/solid-client-authn-js#4399)
- Bump nanoid from 3.3.17 to 3.3.19 (Bump nanoid from 3.3.17 to 3.3.19 inrupt/solid-client-authn-js#4398)
- Bump prettier from 3.9.6 to 3.9.7 (Bump prettier from 3.9.6 to 3.9.7 inrupt/solid-client-authn-js#4402)
- Bump @types/node from 26.5.1 to 26.6.1 in the external-types group (Bump @types/node from 26.5.1 to 26.6.1 in the external-types group inrupt/solid-client-authn-js#4401)
- Bump SonarSource/sonarqube-scan-action from 8.2.1 to 8.2.2 (Bump SonarSource/sonarqube-scan-action from 8.2.1 to 8.2.2 inrupt/solid-client-authn-js#4400)
- Bump eslint-config-next from 16.3.4 to 16.3.5 (Bump eslint-config-next from 16.3.4 to 16.3.5 inrupt/solid-client-authn-js#4404)
- Bump next from 16.3.4 to 16.3.5 (Bump next from 16.3.4 to 16.3.5 inrupt/solid-client-authn-js#4403)
- ** Support registered clients in static Session ctor ( Support registered clients in static Session ctor inrupt/solid-client-authn-js#4388)**
- Remove redundant codeql workflow (Remove redundant codeql workflow inrupt/solid-client-authn-js#4405)
- Declare an exports map for @inrupt/oidc-client-ext (Declare an exports map for @inrupt/oidc-client-ext inrupt/solid-client-authn-js#4407)
- v5.0.1 (v5.0.1 inrupt/solid-client-authn-js#4408)
- Bump jest from 30.5.1 to 30.5.2 (Bump jest from 30.5.1 to 30.5.2 inrupt/solid-client-authn-js#4412)
- Bump prettier from 3.9.7 to 3.9.9 (Bump prettier from 3.9.7 to 3.9.9 inrupt/solid-client-authn-js#4413)
- Bump eslint-config-next from 16.3.5 to 16.3.6 (Bump eslint-config-next from 16.3.5 to 16.3.6 inrupt/solid-client-authn-js#4411)
- Bump @types/node from 26.6.1 to 26.6.2 in the external-types group (Bump @types/node from 26.6.1 to 26.6.2 in the external-types group inrupt/solid-client-authn-js#4410)
- Bump ip-address from 10.4.0 to 10.7.2 (Bump ip-address from 10.4.0 to 10.7.2 inrupt/solid-client-authn-js#4418)
- Bump undici from 8.10.0 to 8.11.2 (Bump undici from 8.10.0 to 8.11.2 inrupt/solid-client-authn-js#4419)
- Bump markdown-it from 14.3.0 to 14.3.2 (Bump markdown-it from 14.3.0 to 14.3.2 inrupt/solid-client-authn-js#4420)
- Bump ts-jest from 29.4.12 to 29.4.14 (Bump ts-jest from 29.4.12 to 29.4.14 inrupt/solid-client-authn-js#4415)
- Bump next from 16.3.5 to 16.3.6 (Bump next from 16.3.5 to 16.3.6 inrupt/solid-client-authn-js#4416)
- Bump jest-environment-jsdom from 30.5.1 to 30.5.2 (Bump jest-environment-jsdom from 30.5.1 to 30.5.2 inrupt/solid-client-authn-js#4417)
- Bump eslint-config-next from 16.3.6 to 16.3.8 (Bump eslint-config-next from 16.3.6 to 16.3.8 inrupt/solid-client-authn-js#4424)
- Bump next from 16.3.6 to 16.3.8 (Bump next from 16.3.6 to 16.3.8 inrupt/solid-client-authn-js#4423)
- Bump @types/node from 26.6.2 to 26.6.3 in the external-types group (Bump @types/node from 26.6.2 to 26.6.3 in the external-types group inrupt/solid-client-authn-js#4422)
- Bump SonarSource/sonarqube-scan-action from 8.2.2 to 8.3.0 (Bump SonarSource/sonarqube-scan-action from 8.2.2 to 8.3.0 inrupt/solid-client-authn-js#4421)
- Bump nx from 23.1.1 to 23.2.1 (Bump nx from 23.1.1 to 23.2.1 inrupt/solid-client-authn-js#4428)
- Bump source-map-js from 1.2.1 to 1.2.2 (Bump source-map-js from 1.2.1 to 1.2.2 inrupt/solid-client-authn-js#4427)
- Bump proxy-addr from 2.0.7 to 2.0.8 (Bump proxy-addr from 2.0.7 to 2.0.8 inrupt/solid-client-authn-js#4426)
- Bump postcss-selector-parser from 7.1.5 to 7.1.6 (Bump postcss-selector-parser from 7.1.5 to 7.1.6 inrupt/solid-client-authn-js#4425)
- Bump sharp from 0.35.4 to 0.35.5 (Bump sharp from 0.35.4 to 0.35.5 inrupt/solid-client-authn-js#4429)
- Bump handlebars and lerna (Bump handlebars and lerna inrupt/solid-client-authn-js#4435)
- Bump @playwright/test from 1.63.0 to 1.64.0 (Bump @playwright/test from 1.63.0 to 1.64.0 inrupt/solid-client-authn-js#4434)
- Bump @nx/nx-win32-x64-msvc from 23.2.1 to 23.3.0 (Bump @nx/nx-win32-x64-msvc from 23.2.1 to 23.3.0 inrupt/solid-client-authn-js#4433)
- Bump next from 16.3.8 to 16.4.0 (Bump next from 16.3.8 to 16.4.0 inrupt/solid-client-authn-js#4432)
- Bump eslint-config-next from 16.3.8 to 16.4.0 (Bump eslint-config-next from 16.3.8 to 16.4.0 inrupt/solid-client-authn-js#4431)
- Bump eslint-config-next from 16.4.0 to 16.4.1 (Bump eslint-config-next from 16.4.0 to 16.4.1 inrupt/solid-client-authn-js#4443)
- Bump lerna from 10.1.0 to 10.1.1 (Bump lerna from 10.1.0 to 10.1.1 inrupt/solid-client-authn-js#4442)
- Bump react from 19.3.0 to 19.3.1 (Bump react from 19.3.0 to 19.3.1 inrupt/solid-client-authn-js#4441)
- Bump ts-jest from 29.4.14 to 29.4.15 (Bump ts-jest from 29.4.14 to 29.4.15 inrupt/solid-client-authn-js#4439)
- Bump uuid from 14.0.2 to 14.0.3 (Bump uuid from 14.0.2 to 14.0.3 inrupt/solid-client-authn-js#4438)
- Bump @playwright/test from 1.64.0 to 1.64.1 (Bump @playwright/test from 1.64.0 to 1.64.1 inrupt/solid-client-authn-js#4437)
- Bump @types/node (Bump @types/node from 26.6.3 to 26.6.5 in the external-types group across 1 directory inrupt/solid-client-authn-js#4430)
- Bump react-dom from 19.3.0 to 19.3.1 (Bump react-dom from 19.3.0 to 19.3.1 inrupt/solid-client-authn-js#4436)
- Bump next from 16.4.0 to 16.4.2 (Bump next from 16.4.0 to 16.4.2 inrupt/solid-client-authn-js#4440)
- Bump follow-redirects and nx (Bump follow-redirects and nx inrupt/solid-client-authn-js#4444)
- Bump brace-expansion (Bump brace-expansion inrupt/solid-client-authn-js#4445)
- Bump js-yaml from 4.3.0 to 4.3.2 (Bump js-yaml from 4.3.0 to 4.3.2 inrupt/solid-client-authn-js#4447)
- Bump markdown-it from 14.3.2 to 14.3.3 (Bump markdown-it from 14.3.2 to 14.3.3 inrupt/solid-client-authn-js#4446)
- Bump jose from 6.2.12 to 6.2.13 (Bump jose from 6.2.12 to 6.2.13 inrupt/solid-client-authn-js#4454)
- Bump express from 5.2.1 to 5.3.0 (Bump express from 5.2.1 to 5.3.0 inrupt/solid-client-authn-js#4453)
- Bump @rollup/plugin-terser from 1.0.0 to 1.0.2 (Bump @rollup/plugin-terser from 1.0.0 to 1.0.2 inrupt/solid-client-authn-js#4452)
- Bump @nx/nx-win32-x64-msvc from 23.3.0 to 24.0.0 (Bump @nx/nx-win32-x64-msvc from 23.3.0 to 24.0.0 inrupt/solid-client-authn-js#4450)
- Bump undici from 8.11.2 to 8.12.3 (Bump undici from 8.11.2 to 8.12.3 inrupt/solid-client-authn-js#4455)
- Bump serialize-javascript from 7.0.5 to 7.1.4 (Bump serialize-javascript from 7.0.5 to 7.1.4 inrupt/solid-client-authn-js#4456)
- Bump eslint-config-next from 16.4.1 to 16.4.2 (Bump eslint-config-next from 16.4.1 to 16.4.2 inrupt/solid-client-authn-js#4451)
- Bump prettier from 3.9.9 to 3.9.10 (Bump prettier from 3.9.9 to 3.9.10 inrupt/solid-client-authn-js#4449)
- Prevent DPoP key from being extractable in browser (Prevent DPoP key from being extractable in browser inrupt/solid-client-authn-js#4459)
- Release 5.0.2 (Release 5.0.2 inrupt/solid-client-authn-js#4460)
- Text changes related to issue DPoP private key extractable from browser-based apps since v4.0.0 (public disclosure after expired CVD embargo) inrupt/solid-client-authn-js#4458 (SECURITY.md: describe the DPoP key and token protections accurately (#4458) inrupt/solid-client-authn-js#4461)
- Setup manual release workflow (Setup manual release workflow inrupt/solid-client-authn-js#4462)
- Remove unnecessary manual release action (Remove unnecessary manual release action inrupt/solid-client-authn-js#4463)
- Release v5.0.3 (Release v5.0.3 inrupt/solid-client-authn-js#4464)
- Bump next from 16.4.2 to 16.4.3 (Bump next from 16.4.2 to 16.4.3 inrupt/solid-client-authn-js#4468)
- Bump @nx/nx-win32-x64-msvc from 24.0.0 to 24.0.2 (Bump @nx/nx-win32-x64-msvc from 24.0.0 to 24.0.2 inrupt/solid-client-authn-js#4470)
- Bump eslint-config-next from 16.4.2 to 16.4.3 (Bump eslint-config-next from 16.4.2 to 16.4.3 inrupt/solid-client-authn-js#4469)
- Bump SonarSource/sonarqube-scan-action from 8.3.0 to 8.4.0 (Bump SonarSource/sonarqube-scan-action from 8.3.0 to 8.4.0 inrupt/solid-client-authn-js#4465)
- Bump jose from 6.2.13 to 6.2.14 (Bump jose from 6.2.13 to 6.2.14 inrupt/solid-client-authn-js#4467)
- Bump @types/node from 26.6.5 to 26.6.6 in the external-types group (Bump @types/node from 26.6.5 to 26.6.6 in the external-types group inrupt/solid-client-authn-js#4466)
- Fix version comment for pinned sonarqube-scan-action (Fix version comment for pinned sonarqube-scan-action inrupt/solid-client-authn-js#4471)
- Add Node 26 support (Add Node 26 support inrupt/solid-client-authn-js#4472)
- Bump @nx/nx-win32-x64-msvc from 24.0.2 to 24.0.4 (Bump @nx/nx-win32-x64-msvc from 24.0.2 to 24.0.4 inrupt/solid-client-authn-js#4474)
- Bump SonarSource/sonarqube-scan-action from 8.4.0 to 8.4.1 (Bump SonarSource/sonarqube-scan-action from 8.4.0 to 8.4.1 inrupt/solid-client-authn-js#4473)
- Fix Sonar coverage paths for monorepo packages (Fix Sonar coverage paths for monorepo packages inrupt/solid-client-authn-js#4480)
- Limit the number of Jest workers (Limit the number of Jest workers inrupt/solid-client-authn-js#4481)
Bumps [nx](https://github.com/nrwl/nx/tree/HEAD/packages/nx) from 22.6.0 to 22.7.8. - [Release notes](https://github.com/nrwl/nx/releases) - [Commits](https://github.com/nrwl/nx/commits/22.7.8/packages/nx) --- updated-dependencies: - dependency-name: nx dependency-version: 22.7.8 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [jose](https://github.com/panva/jose) from 6.2.4 to 6.2.5. - [Release notes](https://github.com/panva/jose/releases) - [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md) - [Commits](panva/jose@v6.2.4...v6.2.5) --- updated-dependencies: - dependency-name: jose dependency-version: 6.2.5 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…pt#4351) Bumps the external-types group with 3 updates in the / directory: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node), [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) and [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom). Updates `@types/node` from 26.1.1 to 26.1.2 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@types/react` from 19.2.17 to 19.2.18 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `@types/react-dom` from 19.2.3 to 19.2.4 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) --- updated-dependencies: - dependency-name: "@types/node" dependency-version: 26.1.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: external-types - dependency-name: "@types/react" dependency-version: 19.2.18 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: external-types - dependency-name: "@types/react-dom" dependency-version: 19.2.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: external-types ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [undici](https://github.com/nodejs/undici) from 8.5.0 to 8.10.0. - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](nodejs/undici@v8.5.0...v8.10.0) --- updated-dependencies: - dependency-name: undici dependency-version: 8.10.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [ip-address](https://github.com/beaugunderson/ip-address) from 10.2.0 to 10.4.0. - [Release notes](https://github.com/beaugunderson/ip-address/releases) - [Commits](beaugunderson/ip-address@v10.2.0...v10.4.0) --- updated-dependencies: - dependency-name: ip-address dependency-version: 10.4.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [postcss](https://github.com/postcss/postcss) to 8.5.23 and updates ancestor dependency [next](https://github.com/vercel/next.js). These dependencies need to be updated together. Updates `postcss` from 8.4.31 to 8.5.23 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.4.31...8.5.23) Updates `next` from 16.2.12 to 16.3.0 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v16.2.12...v16.3.0) --- updated-dependencies: - dependency-name: postcss dependency-version: 8.5.23 dependency-type: indirect - dependency-name: next dependency-version: 16.3.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [jose](https://github.com/panva/jose) from 6.2.5 to 6.2.8. - [Release notes](https://github.com/panva/jose/releases) - [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md) - [Commits](panva/jose@v6.2.5...v6.2.8) --- updated-dependencies: - dependency-name: jose dependency-version: 6.2.8 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [lerna](https://github.com/lerna/lerna/tree/HEAD/packages/lerna) from 9.0.7 to 10.0.0. - [Release notes](https://github.com/lerna/lerna/releases) - [Changelog](https://github.com/lerna/lerna/blob/main/packages/lerna/CHANGELOG.md) - [Commits](https://github.com/lerna/lerna/commits/v10.0.0/packages/lerna) --- updated-dependencies: - dependency-name: lerna dependency-version: 10.0.0 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [@playwright/test](https://github.com/microsoft/playwright) from 1.62.0 to 1.62.1. - [Release notes](https://github.com/microsoft/playwright/releases) - [Commits](microsoft/playwright@v1.62.0...v1.62.1) --- updated-dependencies: - dependency-name: "@playwright/test" dependency-version: 1.62.1 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) from 16.2.12 to 16.3.0. - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](https://github.com/vercel/next.js/commits/v16.3.0/packages/eslint-config-next) --- updated-dependencies: - dependency-name: eslint-config-next dependency-version: 16.3.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump TS to v6 * Remove macOS from CI matrix: The build process exceeds the macOS memory
…nrupt#4362) Bumps the external-types group with 1 update: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node). Updates `@types/node` from 26.1.2 to 26.2.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) --- updated-dependencies: - dependency-name: "@types/node" dependency-version: 26.2.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: external-types ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [esbuild](https://github.com/evanw/esbuild) from 0.28.1 to 0.28.2. - [Release notes](https://github.com/evanw/esbuild/releases) - [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md) - [Commits](evanw/esbuild@v0.28.1...v0.28.2) --- updated-dependencies: - dependency-name: esbuild dependency-version: 0.28.2 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps and [brace-expansion](https://github.com/juliangruber/brace-expansion). These dependencies needed to be updated together. Updates `brace-expansion` from 1.1.12 to 1.1.18 - [Release notes](https://github.com/juliangruber/brace-expansion/releases) - [Commits](juliangruber/brace-expansion@v1.1.12...v1.1.18) Updates `brace-expansion` from 5.0.6 to 5.0.9 - [Release notes](https://github.com/juliangruber/brace-expansion/releases) - [Commits](juliangruber/brace-expansion@v1.1.12...v1.1.18) Updates `brace-expansion` from 2.1.0 to 2.1.4 - [Release notes](https://github.com/juliangruber/brace-expansion/releases) - [Commits](juliangruber/brace-expansion@v1.1.12...v1.1.18) Updates `brace-expansion` from 5.0.4 to 5.0.9 - [Release notes](https://github.com/juliangruber/brace-expansion/releases) - [Commits](juliangruber/brace-expansion@v1.1.12...v1.1.18) Updates `brace-expansion` from 5.0.5 to 5.0.9 - [Release notes](https://github.com/juliangruber/brace-expansion/releases) - [Commits](juliangruber/brace-expansion@v1.1.12...v1.1.18) --- updated-dependencies: - dependency-name: brace-expansion dependency-version: 1.1.18 dependency-type: indirect - dependency-name: brace-expansion dependency-version: 5.0.9 dependency-type: indirect - dependency-name: brace-expansion dependency-version: 2.1.4 dependency-type: indirect - dependency-name: brace-expansion dependency-version: 5.0.9 dependency-type: indirect - dependency-name: brace-expansion dependency-version: 5.0.9 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [lerna](https://github.com/lerna/lerna/tree/HEAD/packages/lerna) from 10.0.0 to 10.0.1. - [Release notes](https://github.com/lerna/lerna/releases) - [Changelog](https://github.com/lerna/lerna/blob/main/packages/lerna/CHANGELOG.md) - [Commits](https://github.com/lerna/lerna/commits/v10.0.1/packages/lerna) --- updated-dependencies: - dependency-name: lerna dependency-version: 10.0.1 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [next](https://github.com/vercel/next.js) from 16.3.0 to 16.3.1. - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v16.3.0...v16.3.1) --- updated-dependencies: - dependency-name: next dependency-version: 16.3.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [uuid](https://github.com/uuidjs/uuid) from 14.0.1 to 14.0.2. - [Release notes](https://github.com/uuidjs/uuid/releases) - [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md) - [Commits](uuidjs/uuid@v14.0.1...v14.0.2) --- updated-dependencies: - dependency-name: uuid dependency-version: 14.0.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [jose](https://github.com/panva/jose) from 6.2.8 to 6.2.9. - [Release notes](https://github.com/panva/jose/releases) - [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md) - [Commits](panva/jose@v6.2.8...v6.2.9) --- updated-dependencies: - dependency-name: jose dependency-version: 6.2.9 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) from 16.3.0 to 16.3.1. - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](https://github.com/vercel/next.js/commits/v16.3.1/packages/eslint-config-next) --- updated-dependencies: - dependency-name: eslint-config-next dependency-version: 16.3.1 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [re-actors/alls-green](https://github.com/re-actors/alls-green) from 1.2.2 to 1.3.0. - [Release notes](https://github.com/re-actors/alls-green/releases) - [Commits](re-actors/alls-green@05ac938...b5b5b37) --- updated-dependencies: - dependency-name: re-actors/alls-green dependency-version: 1.3.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [@nx/nx-win32-x64-msvc](https://github.com/nrwl/nx/tree/HEAD/packages/nx/native-packages/win32-x64-msvc) from 23.1.1 to 23.1.2. - [Release notes](https://github.com/nrwl/nx/releases) - [Commits](https://github.com/nrwl/nx/commits/23.1.2/packages/nx/native-packages/win32-x64-msvc) --- updated-dependencies: - dependency-name: "@nx/nx-win32-x64-msvc" dependency-version: 23.1.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) from 16.3.1 to 16.3.3. - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](https://github.com/vercel/next.js/commits/v16.3.3/packages/eslint-config-next) --- updated-dependencies: - dependency-name: eslint-config-next dependency-version: 16.3.3 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [next](https://github.com/vercel/next.js) from 16.3.1 to 16.3.3. - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v16.3.1...v16.3.3) --- updated-dependencies: - dependency-name: next dependency-version: 16.3.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps the external-types group with 2 updates: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) and [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom). Updates `@types/node` from 26.2.0 to 26.4.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@types/react-dom` from 19.2.4 to 19.2.5 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) --- updated-dependencies: - dependency-name: "@types/node" dependency-version: 26.4.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: external-types - dependency-name: "@types/react-dom" dependency-version: 19.2.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: external-types ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [postcss-selector-parser](https://github.com/postcss/postcss-selector-parser) from 7.1.1 to 7.1.5. - [Release notes](https://github.com/postcss/postcss-selector-parser/releases) - [Changelog](https://github.com/postcss/postcss-selector-parser/blob/main/CHANGELOG.md) - [Commits](postcss/postcss-selector-parser@v7.1.1...7.1.5) --- updated-dependencies: - dependency-name: postcss-selector-parser dependency-version: 7.1.5 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [browserslist](https://github.com/browserslist/browserslist) from 4.25.1 to 4.28.8. - [Release notes](https://github.com/browserslist/browserslist/releases) - [Changelog](https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md) - [Commits](browserslist/browserslist@4.25.1...4.28.8) --- updated-dependencies: - dependency-name: browserslist dependency-version: 4.28.8 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [jose](https://github.com/panva/jose) from 6.2.9 to 6.2.10. - [Release notes](https://github.com/panva/jose/releases) - [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md) - [Commits](panva/jose@v6.2.9...v6.2.10) --- updated-dependencies: - dependency-name: jose dependency-version: 6.2.10 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [@humanfs/node](https://github.com/humanwhocodes/humanfs/tree/HEAD/packages/node) from 0.16.7 to 0.16.8. - [Release notes](https://github.com/humanwhocodes/humanfs/releases) - [Changelog](https://github.com/humanwhocodes/humanfs/blob/main/packages/node/CHANGELOG.md) - [Commits](https://github.com/humanwhocodes/humanfs/commits/node-v0.16.8/packages/node) --- updated-dependencies: - dependency-name: "@humanfs/node" dependency-version: 0.16.8 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) from 30.4.2 to 30.5.1. - [Release notes](https://github.com/jestjs/jest/releases) - [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/jestjs/jest/commits/v30.5.1/packages/jest) --- updated-dependencies: - dependency-name: jest dependency-version: 30.5.1 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [undici](https://github.com/nodejs/undici) from 8.11.2 to 8.12.3. - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](nodejs/undici@v8.11.2...v8.12.3) --- updated-dependencies: - dependency-name: undici dependency-version: 8.12.3 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [serialize-javascript](https://github.com/yahoo/serialize-javascript) from 7.0.5 to 7.1.4. - [Release notes](https://github.com/yahoo/serialize-javascript/releases) - [Commits](yahoo/serialize-javascript@v7.0.5...v7.1.4) --- updated-dependencies: - dependency-name: serialize-javascript dependency-version: 7.1.4 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) from 16.4.1 to 16.4.2. - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](https://github.com/vercel/next.js/commits/v16.4.2/packages/eslint-config-next) --- updated-dependencies: - dependency-name: eslint-config-next dependency-version: 16.4.2 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [prettier](https://github.com/prettier/prettier) from 3.9.9 to 3.9.10. - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.9.9...3.9.10) --- updated-dependencies: - dependency-name: prettier dependency-version: 3.9.10 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Prevent DPoP key from being extractable in browser Fixes inrupt#4458. The DPoP key was marked extractable by default, which is suitable for NodeJS deployments, but exposes the DPoP key to token exfiltration in in-browser app (in case of an active XSS vulnerability for instance). The DPoP key is now only extractable in the NodeJS (server-side) context. * Update changelog * Lint * fixup! Lint * Apply suggestion from @NSeydoux
* Release 5.0.2 * Update packages/core/src/authenticatedFetch/dpopUtils.ts Co-authored-by: Aaron Coburn <aaronc@inrupt.com> --------- Co-authored-by: Aaron Coburn <aaronc@inrupt.com>
Needed because the main release workflow applies a default 'latest' tag to releases, non-applicable for maintenance releases of bugfixes backports.
Manual releases are only needed exceptionnally, so they don't need to go through CD, they can run from a maintainer's machine.
This is an empty release to validate the publication pipeline.
Bumps [next](https://github.com/vercel/next.js) from 16.4.2 to 16.4.3. - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v16.4.2...v16.4.3) --- updated-dependencies: - dependency-name: next dependency-version: 16.4.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [@nx/nx-win32-x64-msvc](https://github.com/nrwl/nx/tree/HEAD/packages/nx/native-packages/win32-x64-msvc) from 24.0.0 to 24.0.2. - [Release notes](https://github.com/nrwl/nx/releases) - [Commits](https://github.com/nrwl/nx/commits/24.0.2/packages/nx/native-packages/win32-x64-msvc) --- updated-dependencies: - dependency-name: "@nx/nx-win32-x64-msvc" dependency-version: 24.0.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) from 16.4.2 to 16.4.3. - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](https://github.com/vercel/next.js/commits/v16.4.3/packages/eslint-config-next) --- updated-dependencies: - dependency-name: eslint-config-next dependency-version: 16.4.3 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [SonarSource/sonarqube-scan-action](https://github.com/sonarsource/sonarqube-scan-action) from 8.3.0 to 8.4.0. - [Release notes](https://github.com/sonarsource/sonarqube-scan-action/releases) - [Commits](SonarSource/sonarqube-scan-action@d209202...4d1dc0c) --- updated-dependencies: - dependency-name: SonarSource/sonarqube-scan-action dependency-version: 8.4.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [jose](https://github.com/panva/jose) from 6.2.13 to 6.2.14. - [Release notes](https://github.com/panva/jose/releases) - [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md) - [Commits](panva/jose@v6.2.13...v6.2.14) --- updated-dependencies: - dependency-name: jose dependency-version: 6.2.14 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…nrupt#4466) Bumps the external-types group with 1 update: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node). Updates `@types/node` from 26.6.5 to 26.6.6 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) --- updated-dependencies: - dependency-name: "@types/node" dependency-version: 26.6.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: external-types ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
The pinned SHA 4d1dc0c9 corresponds to v8.4.0, not v5.
Bumps [@nx/nx-win32-x64-msvc](https://github.com/nrwl/nx/tree/HEAD/packages/nx/native-packages/win32-x64-msvc) from 24.0.2 to 24.0.4. - [Release notes](https://github.com/nrwl/nx/releases) - [Commits](https://github.com/nrwl/nx/commits/24.0.4/packages/nx/native-packages/win32-x64-msvc) --- updated-dependencies: - dependency-name: "@nx/nx-win32-x64-msvc" dependency-version: 24.0.4 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [SonarSource/sonarqube-scan-action](https://github.com/sonarsource/sonarqube-scan-action) from 8.4.0 to 8.4.1. - [Release notes](https://github.com/sonarsource/sonarqube-scan-action/releases) - [Commits](SonarSource/sonarqube-scan-action@4d1dc0c...e805d87) --- updated-dependencies: - dependency-name: SonarSource/sonarqube-scan-action dependency-version: 8.4.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Jest now outputs a single coverage report per project instead of a unified report at the monorepo level. This aligns with SonarCloud scans expectations and fixes code coverage collection.
By default, Jest spawns one worker per CPU core minus one. Each worker compiles and instruments the sources, causing a high memory usage on local developers machines for no performance gains.
Dependency ReviewThe following issues were found:
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.