Skip to content

chore(deps): sync dependency versions with upstream#1004

Closed
rmunoz33 wants to merge 31 commits into5e-bits:mainfrom
rmunoz33:chore/sync-upstream-deps
Closed

chore(deps): sync dependency versions with upstream#1004
rmunoz33 wants to merge 31 commits into5e-bits:mainfrom
rmunoz33:chore/sync-upstream-deps

Conversation

@rmunoz33
Copy link

Summary

  • Bump @types/node from ^25.0.6 to ^25.2.0
  • Bump @vitest/coverage-v8 from ^4.0.16 to ^4.0.18
  • Bump eslint-plugin-prettier from ^5.5.4 to ^5.5.5

Syncs dev/prod dependency versions with upstream 5e-bits/5e-database. Content data (src/2024) was already in sync from the Jan 18 sync (#5).

Test plan

  • npm test — all 4 tests passing

Rocky Munoz and others added 30 commits July 26, 2025 11:16
Add three new homebrew subraces:
- Forge Dwarf (STR +1, fire resistance, medium armor proficiency)
- Forest Elf (WIS +1, increased speed, forest camouflage)
- Shadow Elf (CHA +1, enhanced darkvision, shadow magic)

Implement source attribution system across all database files:
- Add "source" field to all 2,300+ items in database
- Mark existing SRD content with "source": "srd"
- Mark new homebrew content with "source": "homebrew-base"
- Enables filtering and querying by content origin

Add CLAUDE.md documentation for repository guidance.
Add new Ironfoot Halfling subrace with:
- Constitution +1 ability bonus
- Hardy Constitution trait (poison resistance and advantage on poison saves)
- Steadfast Vigor trait (+1 HP per level)

This provides a hardy, resilient halfling option as an alternative to the
Lightfoot Halfling from the SRD.
Add new Woodland Gnome subrace with:
- Dexterity +1 ability bonus
- Natural Trickster trait (minor illusion cantrip)
- Woodland Whisper trait (communicate with small beasts)

This provides a forest-dwelling, illusion-using gnome option as an
alternative to the Rock Gnome from the SRD.
Add homebrew subraces and source attribution system
Update GitHub Actions workflow to use rmunoz33/dnd-homebrew-database
instead of 5e-bits/5e-database. This enables automatic database
deployments when merging to main branch.
Add documentation for:
- MongoDB MCP integration capabilities
- GitHub Actions CI/CD pipeline workflow
- Manual database operation instructions
- Enhanced MongoDB setup notes including Atlas and .env usage
Prevent MongoDB connection strings and MCP configuration with
credentials from being committed to the repository.
Fix CI/CD deployment and update documentation
Updated the subraces arrays in the Races.json file to include all homebrew subraces:
- Dwarf: Added Forge Dwarf
- Elf: Added Forest Elf and Shadow Elf
- Halfling: Added Ironfoot Halfling
- Gnome: Added Woodland Gnome

This fixes the issue where race detail endpoints only returned SRD subraces, preventing homebrew subraces from appearing in the frontend race selection UI.
Fixed capitalization from 'Hand Crossbows' to 'Hand crossbows' to match the expected reference format in the Shadow Elf subrace proficiencies.
Added documentation explaining that db:update only processes files modified in the most recent commit, and when to use the Manual Database Refresh workflow to ensure all changes are deployed.
Added homebrew alternatives for each class to provide more variety:
- Barbarian: Primal Fury (elemental rage)
- Bard: Battle (warrior-poet)
- Cleric: Forge (divine smithing)
- Druid: Wildfire (destruction and renewal)
- Fighter: Weapon Master (tactical versatility)
- Monk: Veil (perception manipulation)
- Paladin: Retribution (punish evil)
- Ranger: Beastbound (mystical animal companion)
- Rogue: Shadowblade (stealth assassination)
- Sorcerer: Chaos Born (unpredictable magic)
- Warlock: Void (mind powers from beyond)
- Wizard: Foresight (time manipulation)

All subclasses use only SRD spells and avoid overlapping with existing class features. Each class now has 2 subclass options (1 SRD + 1 homebrew).
Adds homebrew alternatives for PHB cleric domains (Knowledge, Light, Nature, Tempest, Trickery) and DMG Death domain:
- Lore Domain (Knowledge alternative)
- Radiance Domain (Light alternative)
- Wild Domain (Nature alternative)
- Storm Domain (Tempest alternative)
- Shadow Domain (Trickery alternative)
- Doom Domain (Death alternative)

All domains use only SRD spells and include complete spell lists for levels 1, 3, 5, 7, and 9. Each domain has thematically appropriate spells and distinct mechanical identity to avoid duplication with existing domains.
Removes Wildfire druid subclass due to copyright conflict with official Circle of Wildfire from Tasha's Cauldron of Everything.

Adds Circle of Satellites as a homebrew alternative to Circle of the Moon, featuring celestial/orbital theme with spells focused on movement, gravity effects, and cosmic forces:
- Level 3: Faerie Fire, Longstrider
- Level 5: Moonbeam, Misty Step
- Level 7: Haste, Slow
- Level 9: Freedom of Movement, Stoneskin

This provides a distinct alternative to the wild shape-focused Moon circle while avoiding conflicts with official Tasha's content.
Adds Mystic Knight as a homebrew fighter martial archetype, providing an alternative to the PHB's Eldritch Knight subclass.

The Mystic Knight focuses on mystical/psychic abilities rather than traditional arcane spellcasting, channeling supernatural power through meditation and discipline. This creates a distinct magical fighter option that uses psychic energy and mental force instead of wizard-style evocation and abjuration magic.

The name "Mystic Knight" was verified to not conflict with any official D&D 5e content.
Adds Way of the Primal Spirit as a homebrew monk monastic tradition, providing an alternative to the PHB's Way of the Four Elements subclass.

Instead of directly commanding the four elements (air, earth, fire, water), Primal Spirit monks commune with nature spirits and channel the essence of beasts, plants, and natural phenomena. This creates a more animistic/spiritual approach to nature-based monk abilities, distinguishing it from the elemental magic focus of Four Elements.

The name was verified to not conflict with any official D&D 5e content.
Adds Oath of the Verdant as a homebrew paladin sacred oath, providing an alternative to the PHB's Oath of the Ancients.

While Ancients paladins preserve the light and beauty of the world against darkness, Verdant paladins actively cultivate growth, renewal, and transformation. They see themselves as gardeners of civilization, nurturing communities and helping them flourish through second chances and redemption.

Spell list focuses on growth and nature magic:
- Level 3: Entangle, Goodberry
- Level 5: Lesser Restoration, Spike Growth
- Level 9: Plant Growth, Speak with Plants
- Level 13: Wall of Thorns, Stoneskin
- Level 17: Commune With Nature, Tree Stride

The name was verified to not conflict with any official D&D 5e content.
Renames Shadowblade to Silent Eliminator to avoid confusion with Bladesinger wizard subclass from Tasha's, and adds Spellthief as an Arcane Trickster alternative.

**Silent Eliminator** (Assassin alternative):
- Renamed from Shadowblade for better clarity
- Focuses on assassination and stealth mastery
- Distinct from Bladesinger naming

**Spellthief** (Arcane Trickster alternative):
- New magic rogue subclass
- Manipulates and siphons magical energy from enemies
- Uses stolen magic opportunistically rather than traditional study
- Name verified safe (Arcane Trickster has "Spell Thief" as two words for level 17 ability)

Both names verified to not conflict with official D&D 5e content.
Added 59 complete feature definitions for today's homebrew subclasses:
- 6 Cleric domains: Lore, Radiance, Wild, Storm, Shadow, Doom (30 features)
- Druid Circle of Satellites (4 features)
- Fighter Mystic Knight (5 features)
- Monk Way of the Primal Spirit (5 features)
- Paladin Oath of the Verdant (5 features)
- Rogue Silent Eliminator (5 features)
- Rogue Spellthief (5 features)

All features include balanced mechanics, detailed descriptions, and proper
source attribution (homebrew-base). Features follow 5e power curve and resource
management patterns.
Added complete Twilight Council patron as Archfey alternative:
- Spell list: twilight/shadow/light themed (faerie fire, sleep, darkness,
  moonbeam, fear, hypnotic pattern, greater invisibility, guardian of faith,
  dream, mislead)
- 5 subclass features (levels 1, 6, 10, 14):
  * Veil of Twilight: dim light sphere with stealth advantage and reaction
    disadvantage
  * Eyes of Dusk and Dawn: enhanced darkvision, see through magical darkness,
    see invisible, choose radiant/necrotic damage
  * Step Between Shadows: teleport + attack/cantrip as bonus action
  * Eternal Twilight: transform into twilight form with resistance, advantage
    on saves, incorporeal movement, frighten on hit

Theme: Council of beings governing transitions between light/shadow,
dusk/dawn. Focuses on stealth, mobility, and damage type flexibility
(radiant/necrotic).
…d schools

Completes feature mechanics for 5 existing homebrew subclasses:
- Barbarian: Primal Fury (elemental rage with 4 features)
- Bard: College of Battle (warrior-poet with 4 features)
- Ranger: Beastbound (mystical companion with 4 features)
- Sorcerer: Chaos Born (unpredictable magic with 4 features)
- Wizard: Foresight (time manipulation with 5 features)

Adds 6 new wizard Arcane Traditions to complete the 8 schools:
- School of Warding (Abjuration alternative - barrier magic)
- School of Gateways (Conjuration alternative - portals)
- School of Compulsion (Enchantment alternative - domination)
- School of Phantasm (Illusion alternative - fear-based)
- School of Entropy (Necromancy alternative - decay/life drain)
- School of Metamorphosis (Transmutation alternative - self-transformation)

Total additions:
- 11 subclasses (5 completed + 6 new)
- 51 new features (21 + 30)
- All marked with source: homebrew-base
- Wizards now have 8 complete Arcane Traditions

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
feat(subclasses): add 18 homebrew subclasses with complete mechanics
Add classic-inspired backgrounds with unique names to avoid copyright issues:
- Underworld Operative, Veteran Warrior, Scholar, Aristocrat
- Performer, Local Champion, Recluse, Wilderness Wanderer
- Seafarer, Street Survivor, Confidence Artist, Tradesperson

Each includes proficiencies, equipment, feature, personality traits,
ideals, bonds, and flaws with source attribution as homebrew-base.
- vehicles-land → land-vehicles
- vehicles-water → water-vehicles
- knife-small → small-knife
- costume-clothes → clothes-costume
- Cook's Utensils → Cook's utensils
- Remove non-existent dragonchess-set and three-dragon-ante-set
feat(backgrounds): add 11 homebrew backgrounds
- Merge 80 commits from upstream 5e-bits/5e-database
- Migrate homebrew subraces to new schema (remove deprecated fields)
- Add 3 new proficiency traits for homebrew subraces:
  - forge-dwarf-combat-training
  - forest-elf-weapon-training
  - shadow-elf-weapon-training
- Include 2024 equipment data from upstream
- Keep semantic-release (reject release-please from upstream)

BREAKING CHANGE: Subraces no longer have starting_proficiencies,
languages, or language_options fields. This data is now in
racial_traits entries in the Traits collection.
* chore(deps-dev): bump @vitest/coverage-v8 from 4.0.13 to 4.0.14 (#967)

Bumps
[@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8)
from 4.0.13 to 4.0.14.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitest-dev/vitest/releases"><code>@​vitest/coverage-v8</code>'s
releases</a>.</em></p>
<blockquote>
<h2>v4.0.14</h2>
<h3>   🚀 Experimental Features</h3>
<ul>
<li><strong>browser</strong>: Expose
<code>utils.configurePrettyDOM</code>  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/9103">vitest-dev/vitest#9103</a>
<a href="https://github.com/vitest-dev/vitest/commit/2cc34e0d4"><!-- raw
HTML omitted -->(2cc34)<!-- raw HTML omitted --></a></li>
<li><strong>runner</strong>: Add full names to tasks  -  by <a
href="https://github.com/macarie"><code>@​macarie</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/9087">vitest-dev/vitest#9087</a>
<a href="https://github.com/vitest-dev/vitest/commit/821aa2002"><!-- raw
HTML omitted -->(821aa)<!-- raw HTML omitted --></a></li>
<li><strong>ui</strong>: Add tabbed failure view for
<code>toMatchScreenshot</code> with comparison slider  -  by <a
href="https://github.com/macarie"><code>@​macarie</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/8813">vitest-dev/vitest#8813</a>
<a href="https://github.com/vitest-dev/vitest/commit/c37c2eb0b"><!-- raw
HTML omitted -->(c37c2)<!-- raw HTML omitted --></a></li>
</ul>
<h3>   🐞 Bug Fixes</h3>
<ul>
<li>Externalize before caching  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/9077">vitest-dev/vitest#9077</a>
<a href="https://github.com/vitest-dev/vitest/commit/e1b2e086a"><!-- raw
HTML omitted -->(e1b2e)<!-- raw HTML omitted --></a></li>
<li>Collect the duration of external imports  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/9097">vitest-dev/vitest#9097</a>
<a href="https://github.com/vitest-dev/vitest/commit/3326cc9f4"><!-- raw
HTML omitted -->(3326c)<!-- raw HTML omitted --></a></li>
<li>Rename <code>collect</code> to <code>import</code>, remove
<code>prepare</code>  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/9091">vitest-dev/vitest#9091</a>
<a href="https://github.com/vitest-dev/vitest/commit/1256b5ca3"><!-- raw
HTML omitted -->(1256b)<!-- raw HTML omitted --></a></li>
<li><strong>browser</strong>:
<ul>
<li>Unsubscribe <code>onCancel</code> on rpc destroy  -  by <a
href="https://github.com/AriPerkkio"><code>@​AriPerkkio</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/9088">vitest-dev/vitest#9088</a>
<a href="https://github.com/vitest-dev/vitest/commit/f5b72374b"><!-- raw
HTML omitted -->(f5b72)<!-- raw HTML omitted --></a></li>
<li>Revert the viewport scaling in non-ui mode <a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8/issues/9018">#9018</a>
 -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/9072">vitest-dev/vitest#9072</a>
and <a
href="https://redirect.github.com/vitest-dev/vitest/issues/9018">vitest-dev/vitest#9018</a>
<a href="https://github.com/vitest-dev/vitest/commit/64502a2c4"><!-- raw
HTML omitted -->(64502)<!-- raw HTML omitted --></a></li>
</ul>
</li>
<li><strong>coverage</strong>:
<ul>
<li>Invalidate circular modules correctly on rerun with coverage  -  by
<a href="https://github.com/aicest"><code>@​aicest</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/9096">vitest-dev/vitest#9096</a>
<a href="https://github.com/vitest-dev/vitest/commit/6f22c675f"><!-- raw
HTML omitted -->(6f22c)<!-- raw HTML omitted --></a></li>
</ul>
</li>
<li><strong>expect</strong>:
<ul>
<li>Allow function as standard schema  -  by <a
href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/9099">vitest-dev/vitest#9099</a>
<a href="https://github.com/vitest-dev/vitest/commit/ed8a2ebbd"><!-- raw
HTML omitted -->(ed8a2)<!-- raw HTML omitted --></a></li>
</ul>
</li>
<li><strong>jsdom</strong>:
<ul>
<li>Reuse abort signals if possible  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/9090">vitest-dev/vitest#9090</a>
<a href="https://github.com/vitest-dev/vitest/commit/2c468ee95"><!-- raw
HTML omitted -->(2c468)<!-- raw HTML omitted --></a></li>
</ul>
</li>
<li><strong>pool</strong>:
<ul>
<li>Init <code>VITEST_POOL_ID</code> + <code>VITEST_WORKER_ID</code>
before environment setup  -  by <a
href="https://github.com/AriPerkkio"><code>@​AriPerkkio</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/9085">vitest-dev/vitest#9085</a>
<a href="https://github.com/vitest-dev/vitest/commit/379185b40"><!-- raw
HTML omitted -->(37918)<!-- raw HTML omitted --></a></li>
</ul>
</li>
<li><strong>web-worker</strong>:
<ul>
<li><code>postMessage</code> to send ports to workers  -  by <a
href="https://github.com/whitphx"><code>@​whitphx</code></a> and <a
href="https://github.com/AriPerkkio"><code>@​AriPerkkio</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/9078">vitest-dev/vitest#9078</a>
<a href="https://github.com/vitest-dev/vitest/commit/9d1763d11"><!-- raw
HTML omitted -->(9d176)<!-- raw HTML omitted --></a></li>
</ul>
</li>
</ul>
<h3>   🏎 Performance</h3>
<ul>
<li>Replace <code>debug</code> with <code>obug</code>  -  by <a
href="https://github.com/sxzz"><code>@​sxzz</code></a> and <a
href="https://github.com/AriPerkkio"><code>@​AriPerkkio</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/9057">vitest-dev/vitest#9057</a>
<a href="https://github.com/vitest-dev/vitest/commit/acc5152b9"><!-- raw
HTML omitted -->(acc51)<!-- raw HTML omitted --></a></li>
</ul>
<h5>    <a
href="https://github.com/vitest-dev/vitest/compare/v4.0.13...v4.0.14">View
changes on GitHub</a></h5>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vitest-dev/vitest/commit/9ca74cfb2060d8bc1c7a319ba3cba1578517adb0"><code>9ca74cf</code></a>
chore: release v4.0.14</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/acc5152b9690992e3ac0cff691db4347f2dccdf9"><code>acc5152</code></a>
perf: replace <code>debug</code> with <code>obug</code> (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8/issues/9057">#9057</a>)</li>
<li>See full diff in <a
href="https://github.com/vitest-dev/vitest/commits/v4.0.14/packages/coverage-v8">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@vitest/coverage-v8&package-manager=npm_and_yarn&previous-version=4.0.13&new-version=4.0.14)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-dev): bump @types/node from 24.10.0 to 24.10.1 (#966)

Bumps
[@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node)
from 24.10.0 to 24.10.1.
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@types/node&package-manager=npm_and_yarn&previous-version=24.10.0&new-version=24.10.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* fix(ci): Auto release (#969)

## What does this do?

Cleans up release and sets up auto release

* chore(deps-dev): bump redis from 5.9.0 to 5.10.0 (#963)

Bumps [redis](https://github.com/redis/node-redis) from 5.9.0 to 5.10.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/redis/node-redis/releases">redis's
releases</a>.</em></p>
<blockquote>
<h2>redis@5.10.0</h2>
<h1>Changes</h1>
<h2>🚀 New Features</h2>
<ul>
<li>Add MSETEX command support (<a
href="https://redirect.github.com/redis/node-redis/issues/3116">#3116</a>)</li>
<li>Add CLAIM attribute to XREADGROUP command (<a
href="https://redirect.github.com/redis/node-redis/issues/3122">#3122</a>)</li>
<li>Add index/query doc page examples (<a
href="https://redirect.github.com/redis/node-redis/issues/3109">#3109</a>)</li>
</ul>
<h2>🧪 Experimental Features</h2>
<ul>
<li>Add support for CAS/CAD, DELEX, DIGEST commands (<a
href="https://redirect.github.com/redis/node-redis/issues/3123">#3123</a>)</li>
<li>Add support for HYBRID search (<a
href="https://redirect.github.com/redis/node-redis/issues/3119">#3119</a>
<a
href="https://redirect.github.com/redis/node-redis/issues/3132">#3132</a>)</li>
<li>Add latency histogram (<a
href="https://redirect.github.com/redis/node-redis/issues/3099">#3099</a>)</li>
</ul>
<h2>🐛 Bug Fixes</h2>
<ul>
<li>Fix dist/package.json version bumping in release process (<a
href="https://redirect.github.com/redis/node-redis/issues/3125">#3125</a>)</li>
<li>Prevent false-ready state when socket errors during handshake (<a
href="https://redirect.github.com/redis/node-redis/issues/3128">#3128</a>)</li>
<li>Don't parse number properties in XREADGROUP (<a
href="https://redirect.github.com/redis/node-redis/issues/3133">#3133</a>)</li>
</ul>
<h2>🧰 Maintenance</h2>
<ul>
<li>Apply proxy improvements (<a
href="https://redirect.github.com/redis/node-redis/issues/3121">#3121</a>)</li>
<li>Mark 8.4 features as experimental (<a
href="https://redirect.github.com/redis/node-redis/issues/3134">#3134</a>)</li>
<li>Extract supported Redis versions into SUPPORTED_REDIS_VERSIONS.md
(<a
href="https://redirect.github.com/redis/node-redis/issues/3131">#3131</a>)</li>
<li>Bump test container image to 8.4.0 (<a
href="https://redirect.github.com/redis/node-redis/issues/3139">#3139</a>)</li>
</ul>
<hr />
<h2>Contributors</h2>
<p>We'd like to thank all the contributors who worked on this
release!</p>
<ul>
<li><a
href="https://github.com/andy-stark-redis"><code>@​andy-stark-redis</code></a></li>
<li><a
href="https://github.com/htemelski-redis"><code>@​htemelski-redis</code></a></li>
<li><a
href="https://github.com/nkaradzhov"><code>@​nkaradzhov</code></a></li>
<li><a
href="https://github.com/NaughtySora"><code>@​NaughtySora</code></a></li>
<li><a
href="https://github.com/PavelPashov"><code>@​PavelPashov</code></a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/redis/node-redis/compare/redis@5.9.0...redis@5.10.0">https://github.com/redis/node-redis/compare/redis@5.9.0...redis@5.10.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/redis/node-redis/commit/7c419e03c8945ab5e420e4ea0875ccb3caef94d8"><code>7c419e0</code></a>
Release redis@5.10.0</li>
<li><a
href="https://github.com/redis/node-redis/commit/4255467027e76caafa64984a145a0791bd9c24c8"><code>4255467</code></a>
Release entraid@5.10.0</li>
<li><a
href="https://github.com/redis/node-redis/commit/2820cd0f3866a5200a385f98c4cafbf0c3b73cdf"><code>2820cd0</code></a>
Release time-series@5.10.0</li>
<li><a
href="https://github.com/redis/node-redis/commit/a3b8146ffbbe6d2b3ff9f010da79aa4abbbd9ad3"><code>a3b8146</code></a>
Release search@5.10.0</li>
<li><a
href="https://github.com/redis/node-redis/commit/5c7dbd292b05e63ac4f8452d3ff9b8100cae91e6"><code>5c7dbd2</code></a>
Release json@5.10.0</li>
<li><a
href="https://github.com/redis/node-redis/commit/bc6892f2a165dcdcac51565ae48af593c7a8fc0a"><code>bc6892f</code></a>
Release bloom@5.10.0</li>
<li><a
href="https://github.com/redis/node-redis/commit/c7c387a3a04eeb522c6e6e8e67dd30c4da36d7c6"><code>c7c387a</code></a>
Release client@5.10.0</li>
<li><a
href="https://github.com/redis/node-redis/commit/a245ef44940d8929255559b1701f9d608964f87b"><code>a245ef4</code></a>
fix(xreadgroup): dont parse number props (<a
href="https://redirect.github.com/redis/node-redis/issues/3133">#3133</a>)</li>
<li><a
href="https://github.com/redis/node-redis/commit/ff91ecef81bd13f7bc7b0a33a955f4da5a4a1937"><code>ff91ece</code></a>
chore(tests): bump test container version 8.4.0 (<a
href="https://redirect.github.com/redis/node-redis/issues/3139">#3139</a>)</li>
<li><a
href="https://github.com/redis/node-redis/commit/539780caa88040b577bd6bbae8ee29315b2b67f4"><code>539780c</code></a>
bump test container version 8.4-GA-pre.3 (<a
href="https://redirect.github.com/redis/node-redis/issues/3136">#3136</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/redis/node-redis/compare/redis@5.9.0...redis@5.10.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=redis&package-manager=npm_and_yarn&previous-version=5.9.0&new-version=5.10.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-dev): bump glob from 11.1.0 to 13.0.0 (#964)

Bumps [glob](https://github.com/isaacs/node-glob) from 11.1.0 to 13.0.0.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/isaacs/node-glob/blob/main/changelog.md">glob's
changelog</a>.</em></p>
<blockquote>
<h1>changeglob</h1>
<h2>13</h2>
<ul>
<li>Move the CLI program out to a separate package,
<code>glob-bin</code>.
Install that if you'd like to continue using glob from the
command line.</li>
</ul>
<h2>12</h2>
<ul>
<li>Remove the unsafe <code>--shell</code> option. The
<code>--shell</code> option is now
ONLY supported on known shells where the behavior can be
implemented safely.</li>
</ul>
<h2>11.1</h2>
<p><a
href="https://github.com/isaacs/node-glob/security/advisories/GHSA-5j98-mcp5-4vw2">GHSA-5j98-mcp5-4vw2</a></p>
<ul>
<li>Add the <code>--shell</code> option for the command line, with a
warning
that this is unsafe. (It will be removed in v12.)</li>
<li>Add the <code>--cmd-arg</code>/<code>-g</code> as a way to
<em>safely</em> add positional
arguments to the command provided to the CLI tool.</li>
<li>Detect commands with space or quote characters on known shells,
and pass positional arguments to them safely, avoiding
<code>shell:true</code> execution.</li>
</ul>
<h2>11.0</h2>
<ul>
<li>Drop support for node before v20</li>
</ul>
<h2>10.4</h2>
<ul>
<li>Add <code>includeChildMatches: false</code> option</li>
<li>Export the <code>Ignore</code> class</li>
</ul>
<h2>10.3</h2>
<ul>
<li>Add <code>--default -p</code> flag to provide a default pattern</li>
<li>exclude symbolic links to directories when <code>follow</code> and
<code>nodir</code>
are both set</li>
</ul>
<h2>10.2</h2>
<ul>
<li>Add glob cli</li>
</ul>
<h2>10.1</h2>
<ul>
<li>Return <code>'.'</code> instead of the empty string <code>''</code>
when the current
working directory is returned as a match.</li>
<li>Add <code>posix: true</code> option to return <code>/</code>
delimited paths, even on</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/isaacs/node-glob/commit/3bfb9604fabcd372fd13bbacef90339d10d1aa92"><code>3bfb960</code></a>
13.0.0</li>
<li><a
href="https://github.com/isaacs/node-glob/commit/db31a63edaffa88b6361199267f155112f49f4fe"><code>db31a63</code></a>
Split the CLI out from the main project</li>
<li><a
href="https://github.com/isaacs/node-glob/commit/54934586bc33b3f90fde6c13c1ca5b719801ee78"><code>5493458</code></a>
ci: remove node 20</li>
<li><a
href="https://github.com/isaacs/node-glob/commit/3f7526c1f4843404a3548c5c5fc27aa2a329bca2"><code>3f7526c</code></a>
test: fix bin tests on windows (slashes)</li>
<li><a
href="https://github.com/isaacs/node-glob/commit/2b03ccaf9fc397b6054d639cd5fbe97104d36221"><code>2b03cca</code></a>
12.0.0</li>
<li><a
href="https://github.com/isaacs/node-glob/commit/d56203dc19a4af5c8f8177a3b67e63a14a246458"><code>d56203d</code></a>
prettier config</li>
<li><a
href="https://github.com/isaacs/node-glob/commit/bb521e5d188a8cbbe86d5cef3bf57a49fdee7c59"><code>bb521e5</code></a>
Remove --shell option where unsafe to use</li>
<li>See full diff in <a
href="https://github.com/isaacs/node-glob/compare/v11.1.0...v13.0.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=glob&package-manager=npm_and_yarn&previous-version=11.1.0&new-version=13.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(main): release 4.2.2 (#945)

:robot: I have created a release *beep* *boop*
---


##
[4.2.2](https://github.com/5e-bits/5e-database/compare/v4.2.1...v4.2.2)
(2025-12-17)


### Bug Fixes

* **ci:** Auto release
([#969](https://github.com/5e-bits/5e-database/issues/969))
([c94ccd3](https://github.com/5e-bits/5e-database/commit/c94ccd3e2a8b5777a22cf30296ad99679308113d))
* **release-please:** Include all commit types in changelog config
([c16433d](https://github.com/5e-bits/5e-database/commit/c16433dbd7b1bdd500733da5e1efe8f6de9c27fc))

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).

Co-authored-by: 5e-bits-deploy-bot[bot] <209387221+5e-bits-deploy-bot[bot]@users.noreply.github.com>

* fix(ci): Set repo on token to allow downstream trigger

* chore(main): release 4.2.3 (#970)

:robot: I have created a release *beep* *boop*
---


##
[4.2.3](https://github.com/5e-bits/5e-database/compare/v4.2.2...v4.2.3)
(2025-12-17)


### Bug Fixes

* **ci:** Set repo on token to allow downstream trigger
([d91315c](https://github.com/5e-bits/5e-database/commit/d91315c4f08651f99a58e6ce5c2a6607bf455a22))

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).

Co-authored-by: 5e-bits-deploy-bot[bot] <209387221+5e-bits-deploy-bot[bot]@users.noreply.github.com>

* feat(2024): Adding Backgrounds + related Feats and Proficiencies (#973)

## What does this do?

Adds Background and related Feats + Proficiences

## Here's a fun image for your troubles

<img width="910" height="732" alt="image"
src="https://github.com/user-attachments/assets/ce5b3228-3d8d-4895-82ee-00f0ef7b1ea7"
/>

---------

Co-authored-by: G.Ambatte <sean@robertson-family.nz>

* fix: add remaining 2024 Feats (#982)

## What does this do?

This PR adds the remaining feats from the 2024 SRD.

## How was it tested?

Local tests and local DB refresh completed successfully.

## Is there a Github issue this is resolving?

No, but this PR was discussed at some length via Discord.

## Did you update the docs in the API? Please link an associated PR if
applicable.

No.

## Here's a fun image for your troubles

For Halloween, I tortured my players with a Daggerheart one-shot, a
conversion of *Curse of Strahd*'s introductory adventure module, **Death
House**.

<img width="646" height="908" alt="image"
src="https://github.com/user-attachments/assets/be5ab688-49fa-4a8a-a863-f5d78d92c456"
/>

* chore(deps-dev): bump redis from 5.9.0 to 5.10.0 (#975)

Bumps [redis](https://github.com/redis/node-redis) from 5.9.0 to 5.10.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/redis/node-redis/releases">redis's
releases</a>.</em></p>
<blockquote>
<h2>redis@5.10.0</h2>
<h1>Changes</h1>
<h2>🚀 New Features</h2>
<ul>
<li>Add MSETEX command support (<a
href="https://redirect.github.com/redis/node-redis/issues/3116">#3116</a>)</li>
<li>Add CLAIM attribute to XREADGROUP command (<a
href="https://redirect.github.com/redis/node-redis/issues/3122">#3122</a>)</li>
<li>Add index/query doc page examples (<a
href="https://redirect.github.com/redis/node-redis/issues/3109">#3109</a>)</li>
</ul>
<h2>🧪 Experimental Features</h2>
<ul>
<li>Add support for CAS/CAD, DELEX, DIGEST commands (<a
href="https://redirect.github.com/redis/node-redis/issues/3123">#3123</a>)</li>
<li>Add support for HYBRID search (<a
href="https://redirect.github.com/redis/node-redis/issues/3119">#3119</a>
<a
href="https://redirect.github.com/redis/node-redis/issues/3132">#3132</a>)</li>
<li>Add latency histogram (<a
href="https://redirect.github.com/redis/node-redis/issues/3099">#3099</a>)</li>
</ul>
<h2>🐛 Bug Fixes</h2>
<ul>
<li>Fix dist/package.json version bumping in release process (<a
href="https://redirect.github.com/redis/node-redis/issues/3125">#3125</a>)</li>
<li>Prevent false-ready state when socket errors during handshake (<a
href="https://redirect.github.com/redis/node-redis/issues/3128">#3128</a>)</li>
<li>Don't parse number properties in XREADGROUP (<a
href="https://redirect.github.com/redis/node-redis/issues/3133">#3133</a>)</li>
</ul>
<h2>🧰 Maintenance</h2>
<ul>
<li>Apply proxy improvements (<a
href="https://redirect.github.com/redis/node-redis/issues/3121">#3121</a>)</li>
<li>Mark 8.4 features as experimental (<a
href="https://redirect.github.com/redis/node-redis/issues/3134">#3134</a>)</li>
<li>Extract supported Redis versions into SUPPORTED_REDIS_VERSIONS.md
(<a
href="https://redirect.github.com/redis/node-redis/issues/3131">#3131</a>)</li>
<li>Bump test container image to 8.4.0 (<a
href="https://redirect.github.com/redis/node-redis/issues/3139">#3139</a>)</li>
</ul>
<hr />
<h2>Contributors</h2>
<p>We'd like to thank all the contributors who worked on this
release!</p>
<ul>
<li><a
href="https://github.com/andy-stark-redis"><code>@​andy-stark-redis</code></a></li>
<li><a
href="https://github.com/htemelski-redis"><code>@​htemelski-redis</code></a></li>
<li><a
href="https://github.com/nkaradzhov"><code>@​nkaradzhov</code></a></li>
<li><a
href="https://github.com/NaughtySora"><code>@​NaughtySora</code></a></li>
<li><a
href="https://github.com/PavelPashov"><code>@​PavelPashov</code></a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/redis/node-redis/compare/redis@5.9.0...redis@5.10.0">https://github.com/redis/node-redis/compare/redis@5.9.0...redis@5.10.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/redis/node-redis/commit/7c419e03c8945ab5e420e4ea0875ccb3caef94d8"><code>7c419e0</code></a>
Release redis@5.10.0</li>
<li><a
href="https://github.com/redis/node-redis/commit/4255467027e76caafa64984a145a0791bd9c24c8"><code>4255467</code></a>
Release entraid@5.10.0</li>
<li><a
href="https://github.com/redis/node-redis/commit/2820cd0f3866a5200a385f98c4cafbf0c3b73cdf"><code>2820cd0</code></a>
Release time-series@5.10.0</li>
<li><a
href="https://github.com/redis/node-redis/commit/a3b8146ffbbe6d2b3ff9f010da79aa4abbbd9ad3"><code>a3b8146</code></a>
Release search@5.10.0</li>
<li><a
href="https://github.com/redis/node-redis/commit/5c7dbd292b05e63ac4f8452d3ff9b8100cae91e6"><code>5c7dbd2</code></a>
Release json@5.10.0</li>
<li><a
href="https://github.com/redis/node-redis/commit/bc6892f2a165dcdcac51565ae48af593c7a8fc0a"><code>bc6892f</code></a>
Release bloom@5.10.0</li>
<li><a
href="https://github.com/redis/node-redis/commit/c7c387a3a04eeb522c6e6e8e67dd30c4da36d7c6"><code>c7c387a</code></a>
Release client@5.10.0</li>
<li><a
href="https://github.com/redis/node-redis/commit/a245ef44940d8929255559b1701f9d608964f87b"><code>a245ef4</code></a>
fix(xreadgroup): dont parse number props (<a
href="https://redirect.github.com/redis/node-redis/issues/3133">#3133</a>)</li>
<li><a
href="https://github.com/redis/node-redis/commit/ff91ecef81bd13f7bc7b0a33a955f4da5a4a1937"><code>ff91ece</code></a>
chore(tests): bump test container version 8.4.0 (<a
href="https://redirect.github.com/redis/node-redis/issues/3139">#3139</a>)</li>
<li><a
href="https://github.com/redis/node-redis/commit/539780caa88040b577bd6bbae8ee29315b2b67f4"><code>539780c</code></a>
bump test container version 8.4-GA-pre.3 (<a
href="https://redirect.github.com/redis/node-redis/issues/3136">#3136</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/redis/node-redis/compare/redis@5.9.0...redis@5.10.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=redis&package-manager=npm_and_yarn&previous-version=5.9.0&new-version=5.10.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-dev): bump glob from 11.1.0 to 13.0.0 (#976)

Bumps [glob](https://github.com/isaacs/node-glob) from 11.1.0 to 13.0.0.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/isaacs/node-glob/blob/main/changelog.md">glob's
changelog</a>.</em></p>
<blockquote>
<h1>changeglob</h1>
<h2>13</h2>
<ul>
<li>Move the CLI program out to a separate package,
<code>glob-bin</code>.
Install that if you'd like to continue using glob from the
command line.</li>
</ul>
<h2>12</h2>
<ul>
<li>Remove the unsafe <code>--shell</code> option. The
<code>--shell</code> option is now
ONLY supported on known shells where the behavior can be
implemented safely.</li>
</ul>
<h2>11.1</h2>
<p><a
href="https://github.com/isaacs/node-glob/security/advisories/GHSA-5j98-mcp5-4vw2">GHSA-5j98-mcp5-4vw2</a></p>
<ul>
<li>Add the <code>--shell</code> option for the command line, with a
warning
that this is unsafe. (It will be removed in v12.)</li>
<li>Add the <code>--cmd-arg</code>/<code>-g</code> as a way to
<em>safely</em> add positional
arguments to the command provided to the CLI tool.</li>
<li>Detect commands with space or quote characters on known shells,
and pass positional arguments to them safely, avoiding
<code>shell:true</code> execution.</li>
</ul>
<h2>11.0</h2>
<ul>
<li>Drop support for node before v20</li>
</ul>
<h2>10.4</h2>
<ul>
<li>Add <code>includeChildMatches: false</code> option</li>
<li>Export the <code>Ignore</code> class</li>
</ul>
<h2>10.3</h2>
<ul>
<li>Add <code>--default -p</code> flag to provide a default pattern</li>
<li>exclude symbolic links to directories when <code>follow</code> and
<code>nodir</code>
are both set</li>
</ul>
<h2>10.2</h2>
<ul>
<li>Add glob cli</li>
</ul>
<h2>10.1</h2>
<ul>
<li>Return <code>'.'</code> instead of the empty string <code>''</code>
when the current
working directory is returned as a match.</li>
<li>Add <code>posix: true</code> option to return <code>/</code>
delimited paths, even on</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/isaacs/node-glob/commit/3bfb9604fabcd372fd13bbacef90339d10d1aa92"><code>3bfb960</code></a>
13.0.0</li>
<li><a
href="https://github.com/isaacs/node-glob/commit/db31a63edaffa88b6361199267f155112f49f4fe"><code>db31a63</code></a>
Split the CLI out from the main project</li>
<li><a
href="https://github.com/isaacs/node-glob/commit/54934586bc33b3f90fde6c13c1ca5b719801ee78"><code>5493458</code></a>
ci: remove node 20</li>
<li><a
href="https://github.com/isaacs/node-glob/commit/3f7526c1f4843404a3548c5c5fc27aa2a329bca2"><code>3f7526c</code></a>
test: fix bin tests on windows (slashes)</li>
<li><a
href="https://github.com/isaacs/node-glob/commit/2b03ccaf9fc397b6054d639cd5fbe97104d36221"><code>2b03cca</code></a>
12.0.0</li>
<li><a
href="https://github.com/isaacs/node-glob/commit/d56203dc19a4af5c8f8177a3b67e63a14a246458"><code>d56203d</code></a>
prettier config</li>
<li><a
href="https://github.com/isaacs/node-glob/commit/bb521e5d188a8cbbe86d5cef3bf57a49fdee7c59"><code>bb521e5</code></a>
Remove --shell option where unsafe to use</li>
<li>See full diff in <a
href="https://github.com/isaacs/node-glob/compare/v11.1.0...v13.0.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=glob&package-manager=npm_and_yarn&previous-version=11.1.0&new-version=13.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-dev): bump @vitest/coverage-v8 from 4.0.14 to 4.0.16 (#978)

Bumps
[@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8)
from 4.0.14 to 4.0.16.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitest-dev/vitest/releases"><code>@​vitest/coverage-v8</code>'s
releases</a>.</em></p>
<blockquote>
<h2>v4.0.16</h2>
<h3>   🐞 Bug Fixes</h3>
<ul>
<li>Fix browser mode default testTimeout back to 15 seconds  -  by <a
href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/9167">vitest-dev/vitest#9167</a>
<a href="https://github.com/vitest-dev/vitest/commit/da0ade249"><!-- raw
HTML omitted -->(da0ad)<!-- raw HTML omitted --></a></li>
<li>Avoid crashing on <code>process.versions</code> stub  -  by <a
href="https://github.com/AriPerkkio"><code>@​AriPerkkio</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/9174">vitest-dev/vitest#9174</a>
<a href="https://github.com/vitest-dev/vitest/commit/78cfbf99a"><!-- raw
HTML omitted -->(78cfb)<!-- raw HTML omitted --></a></li>
<li>Reject calling suite function inside test  -  by <a
href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/9198">vitest-dev/vitest#9198</a>
<a href="https://github.com/vitest-dev/vitest/commit/1a259c340"><!-- raw
HTML omitted -->(1a259)<!-- raw HTML omitted --></a></li>
<li>Allow inlining fully dynamic import  -  by <a
href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/9137">vitest-dev/vitest#9137</a>
<a href="https://github.com/vitest-dev/vitest/commit/568513ca6"><!-- raw
HTML omitted -->(56851)<!-- raw HTML omitted --></a></li>
<li>Fix module graph UI on html reporter with headless browser mode  - 
by <a href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/9219">vitest-dev/vitest#9219</a>
<a href="https://github.com/vitest-dev/vitest/commit/60642b304"><!-- raw
HTML omitted -->(60642)<!-- raw HTML omitted --></a></li>
<li>Log deprecated <code>test.poolOptions</code> if it's set  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/9226">vitest-dev/vitest#9226</a>
<a href="https://github.com/vitest-dev/vitest/commit/f7f6aa8ba"><!-- raw
HTML omitted -->(f7f6a)<!-- raw HTML omitted --></a></li>
<li><strong>browser</strong>:
<ul>
<li>Import <code>recordArtifact</code> from the vitest package  -  by <a
href="https://github.com/macarie"><code>@​macarie</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/9186">vitest-dev/vitest#9186</a>
<a href="https://github.com/vitest-dev/vitest/commit/01c56454d"><!-- raw
HTML omitted -->(01c56)<!-- raw HTML omitted --></a></li>
<li>Fix <code>import.meta.env</code> define  -  by <a
href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/9205">vitest-dev/vitest#9205</a>
<a href="https://github.com/vitest-dev/vitest/commit/01a9a58d9"><!-- raw
HTML omitted -->(01a9a)<!-- raw HTML omitted --></a></li>
<li>String formatting bug when including placeholders in console.log  - 
by <a
href="https://github.com/michael-debs"><code>@​michael-debs</code></a>
and <a href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/9030">vitest-dev/vitest#9030</a>
and <a
href="https://redirect.github.com/vitest-dev/vitest/issues/9131">vitest-dev/vitest#9131</a>
<a href="https://github.com/vitest-dev/vitest/commit/84a306210"><!-- raw
HTML omitted -->(84a30)<!-- raw HTML omitted --></a></li>
</ul>
</li>
<li><strong>coverage</strong>:
<ul>
<li>Istanbul untested files source maps are off  -  by <a
href="https://github.com/AriPerkkio"><code>@​AriPerkkio</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/9208">vitest-dev/vitest#9208</a>
<a href="https://github.com/vitest-dev/vitest/commit/372e86fde"><!-- raw
HTML omitted -->(372e8)<!-- raw HTML omitted --></a></li>
</ul>
</li>
<li><strong>experimental</strong>:
<ul>
<li>Export <code>setupEnvironment</code> for custom pools  -  by <a
href="https://github.com/AriPerkkio"><code>@​AriPerkkio</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/9187">vitest-dev/vitest#9187</a>
<a href="https://github.com/vitest-dev/vitest/commit/5d26b87b0"><!-- raw
HTML omitted -->(5d26b)<!-- raw HTML omitted --></a></li>
</ul>
</li>
</ul>
<h5>    <a
href="https://github.com/vitest-dev/vitest/compare/v4.0.15...v4.0.16">View
changes on GitHub</a></h5>
<h2>v4.0.15</h2>
<h3>   🚀 Experimental Features</h3>
<ul>
<li><strong>cache</strong>: Add opt-out on a plugin level, fix internal
root cache  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/9154">vitest-dev/vitest#9154</a>
<a href="https://github.com/vitest-dev/vitest/commit/a68f74e5e"><!-- raw
HTML omitted -->(a68f7)<!-- raw HTML omitted --></a></li>
<li><strong>reporters</strong>: Print import duration breakdown  -  by
<a href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a>
in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/9105">vitest-dev/vitest#9105</a>
<a href="https://github.com/vitest-dev/vitest/commit/122ff321c"><!-- raw
HTML omitted -->(122ff)<!-- raw HTML omitted --></a></li>
</ul>
<h3>   🐞 Bug Fixes</h3>
<ul>
<li>Keep built-in id as is in bun and deno  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/9117">vitest-dev/vitest#9117</a>
<a href="https://github.com/vitest-dev/vitest/commit/075ab3520"><!-- raw
HTML omitted -->(075ab)<!-- raw HTML omitted --></a></li>
<li>Use <code>optimizeDeps.rolldownOptions</code> to fix depreated
warning + fix <code>ssr.external: true</code>  -  by <a
href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/9121">vitest-dev/vitest#9121</a>
<a href="https://github.com/vitest-dev/vitest/commit/fd8bd6dee"><!-- raw
HTML omitted -->(fd8bd)<!-- raw HTML omitted --></a></li>
<li>Fix external behavior with <code>deps.optimizer</code>  -  by <a
href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/9125">vitest-dev/vitest#9125</a>
<a href="https://github.com/vitest-dev/vitest/commit/4c75492cc"><!-- raw
HTML omitted -->(4c754)<!-- raw HTML omitted --></a></li>
<li>Very minor typo in &quot;Chrome DevTools Protocol&quot;  -  by <a
href="https://github.com/HowToTestFrontend"><code>@​HowToTestFrontend</code></a>
in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/9146">vitest-dev/vitest#9146</a>
<a href="https://github.com/vitest-dev/vitest/commit/209976419"><!-- raw
HTML omitted -->(20997)<!-- raw HTML omitted --></a></li>
<li><strong>browser</strong>: Run <code>toMatchScreenshot</code> only
once when used with <code>expect.element</code>  -  by <a
href="https://github.com/macarie"><code>@​macarie</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/9132">vitest-dev/vitest#9132</a>
<a href="https://github.com/vitest-dev/vitest/commit/0d2e7e3e2"><!-- raw
HTML omitted -->(0d2e7)<!-- raw HTML omitted --></a></li>
<li><strong>coverage</strong>: Istanbul provider to not break source
maps  -  by <a
href="https://github.com/AriPerkkio"><code>@​AriPerkkio</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/9040">vitest-dev/vitest#9040</a>
<a href="https://github.com/vitest-dev/vitest/commit/e4ca917f1"><!-- raw
HTML omitted -->(e4ca9)<!-- raw HTML omitted --></a></li>
<li><strong>deps</strong>: Update dependency tinyexec to v1  -  in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/9122">vitest-dev/vitest#9122</a>
<a href="https://github.com/vitest-dev/vitest/commit/fd7860222"><!-- raw
HTML omitted -->(fd786)<!-- raw HTML omitted --></a></li>
<li><strong>docs</strong>: Remove <code>--browser.provider</code> from
docs  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/9115">vitest-dev/vitest#9115</a>
<a href="https://github.com/vitest-dev/vitest/commit/120b3dac1"><!-- raw
HTML omitted -->(120b3)<!-- raw HTML omitted --></a></li>
<li><strong>expect</strong>: Preserve <code>currentTestName</code> in
extended matchers  -  by <a
href="https://github.com/macarie"><code>@​macarie</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/9106">vitest-dev/vitest#9106</a>
<a href="https://github.com/vitest-dev/vitest/commit/e43458e02"><!-- raw
HTML omitted -->(e4345)<!-- raw HTML omitted --></a></li>
<li><strong>pool</strong>: Terminate workers on <code>CTRL+c</code>
forceful exits  -  by <a
href="https://github.com/AriPerkkio"><code>@​AriPerkkio</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/9140">vitest-dev/vitest#9140</a>
<a href="https://github.com/vitest-dev/vitest/commit/d57d8bf0a"><!-- raw
HTML omitted -->(d57d8)<!-- raw HTML omitted --></a></li>
<li><strong>reporters</strong>: Show project in github reporter  -  by
<a href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a>
in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/9138">vitest-dev/vitest#9138</a>
<a href="https://github.com/vitest-dev/vitest/commit/bb65e15c7"><!-- raw
HTML omitted -->(bb65e)<!-- raw HTML omitted --></a></li>
<li><strong>spy</strong>: Do not mock overriden method, if parent was
automocked  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/9116">vitest-dev/vitest#9116</a>
<a href="https://github.com/vitest-dev/vitest/commit/1a24607b4"><!-- raw
HTML omitted -->(1a246)<!-- raw HTML omitted --></a></li>
<li><strong>web-worker</strong>: MessagePort objects passed to
Worker.postMessage work when clone === &quot;native&quot;  -  by <a
href="https://github.com/whitphx"><code>@​whitphx</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/9118">vitest-dev/vitest#9118</a>
<a href="https://github.com/vitest-dev/vitest/commit/deee83e54"><!-- raw
HTML omitted -->(deee8)<!-- raw HTML omitted --></a></li>
</ul>
<h5>    <a
href="https://github.com/vitest-dev/vitest/compare/v4.0.14...v4.0.15">View
changes on GitHub</a></h5>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vitest-dev/vitest/commit/b46d7444cc3a14296c5a4db67232226dc094f35f"><code>b46d744</code></a>
chore: release v4.0.16</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/eb1abf08573032a532015b999ad3501c5e89e3bb"><code>eb1abf0</code></a>
chore: release v4.0.15</li>
<li>See full diff in <a
href="https://github.com/vitest-dev/vitest/commits/v4.0.16/packages/coverage-v8">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@vitest/coverage-v8&package-manager=npm_and_yarn&previous-version=4.0.14&new-version=4.0.16)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps): bump actions/create-github-app-token from 1 to 2 (#980)

Bumps
[actions/create-github-app-token](https://github.com/actions/create-github-app-token)
from 1 to 2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/create-github-app-token/releases">actions/create-github-app-token's
releases</a>.</em></p>
<blockquote>
<h2>v2.0.0</h2>
<h1><a
href="https://github.com/actions/create-github-app-token/compare/v1.12.0...v2.0.0">2.0.0</a>
(2025-04-03)</h1>
<ul>
<li>feat!: remove deprecated inputs (<a
href="https://redirect.github.com/actions/create-github-app-token/issues/213">#213</a>)
(<a
href="https://github.com/actions/create-github-app-token/commit/5cc811bc40176329bb642bff9e5d9e356099ad2a">5cc811b</a>)</li>
</ul>
<h3>BREAKING CHANGES</h3>
<ul>
<li>Removed deprecated inputs (<code>app_id</code>,
<code>private_key</code>, <code>skip_token_revoke</code>) and made
<code>app-id</code> and <code>private-key</code> required in the action
configuration.</li>
</ul>
<h2>v1.12.0</h2>
<h1><a
href="https://github.com/actions/create-github-app-token/compare/v1.11.7...v1.12.0">1.12.0</a>
(2025-03-27)</h1>
<h3>Features</h3>
<ul>
<li>permissions (<a
href="https://redirect.github.com/actions/create-github-app-token/issues/168">#168</a>)
(<a
href="https://github.com/actions/create-github-app-token/commit/0e0aa99a86bd82ec98421533ae985fef61554361">0e0aa99</a>)</li>
</ul>
<h2>v1.11.7</h2>
<h2><a
href="https://github.com/actions/create-github-app-token/compare/v1.11.6...v1.11.7">1.11.7</a>
(2025-03-20)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>deps:</strong> bump undici from 5.28.4 to 7.5.0 (<a
href="https://redirect.github.com/actions/create-github-app-token/issues/214">#214</a>)
(<a
href="https://github.com/actions/create-github-app-token/commit/a24b46a4626bf0f67abb297b82d863218920d5e2">a24b46a</a>)</li>
</ul>
<h2>v1.11.6</h2>
<h2><a
href="https://github.com/actions/create-github-app-token/compare/v1.11.5...v1.11.6">1.11.6</a>
(2025-03-03)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>deps:</strong> bump the production-dependencies group with 2
updates (<a
href="https://redirect.github.com/actions/create-github-app-token/issues/210">#210</a>)
(<a
href="https://github.com/actions/create-github-app-token/commit/1ff1dea6a9d1de5b4795e5314291e04acc63c38b">1ff1dea</a>)</li>
</ul>
<h2>v1.11.5</h2>
<h2><a
href="https://github.com/actions/create-github-app-token/compare/v1.11.4...v1.11.5">1.11.5</a>
(2025-02-15)</h2>
<h3>Bug Fixes</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/create-github-app-token/commit/29824e69f54612133e76f7eaac726eef6c875baf"><code>29824e6</code></a>
build(release): 2.2.1 [skip ci]</li>
<li><a
href="https://github.com/actions/create-github-app-token/commit/b212e6a739dec02d8488610fbaf8f049f82ee999"><code>b212e6a</code></a>
fix(deps): bump the production-dependencies group with 2 updates (<a
href="https://redirect.github.com/actions/create-github-app-token/issues/311">#311</a>)</li>
<li><a
href="https://github.com/actions/create-github-app-token/commit/8efbf9bf0ff7093c26fd1720e1722fd9cdd30fac"><code>8efbf9b</code></a>
ci: create stale workflow (<a
href="https://redirect.github.com/actions/create-github-app-token/issues/309">#309</a>)</li>
<li><a
href="https://github.com/actions/create-github-app-token/commit/7e473efe3cb98aa54f8d4bac15400b15fad77d94"><code>7e473ef</code></a>
build(release): 2.2.0 [skip ci]</li>
<li><a
href="https://github.com/actions/create-github-app-token/commit/dce3be8b284f45e65caed11a610e2bef738d15b4"><code>dce3be8</code></a>
fix(deps): bump p-retry from 6.2.1 to 7.1.0 (<a
href="https://redirect.github.com/actions/create-github-app-token/issues/294">#294</a>)</li>
<li><a
href="https://github.com/actions/create-github-app-token/commit/5480f4325a18c025ee16d7e081413854624e9edc"><code>5480f43</code></a>
fix(deps): bump glob from 10.4.5 to 10.5.0 (<a
href="https://redirect.github.com/actions/create-github-app-token/issues/305">#305</a>)</li>
<li><a
href="https://github.com/actions/create-github-app-token/commit/d90aa532332d33f6dc9656fd4491a98441595a37"><code>d90aa53</code></a>
feat: update permission inputs (<a
href="https://redirect.github.com/actions/create-github-app-token/issues/296">#296</a>)</li>
<li><a
href="https://github.com/actions/create-github-app-token/commit/55e2a4b2ccaaa8364303e6ab9f77e31ad02298e5"><code>55e2a4b</code></a>
fix(deps): bump the production-dependencies group with 2 updates (<a
href="https://redirect.github.com/actions/create-github-app-token/issues/292">#292</a>)</li>
<li><a
href="https://github.com/actions/create-github-app-token/commit/cc6f999683e9e6150699fa443589ab389e4d3334"><code>cc6f999</code></a>
ci(test): trigger on merge_group (<a
href="https://redirect.github.com/actions/create-github-app-token/issues/308">#308</a>)</li>
<li><a
href="https://github.com/actions/create-github-app-token/commit/40fa6b52b33cc945b40f86ff422cb3991908649f"><code>40fa6b5</code></a>
build(deps-dev): bump <code>@​sinonjs/fake-timers</code> from 14.0.0 to
15.0.0 (<a
href="https://redirect.github.com/actions/create-github-app-token/issues/295">#295</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/actions/create-github-app-token/compare/v1...v2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/create-github-app-token&package-manager=github_actions&previous-version=1&new-version=2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-dev): bump eslint from 9.39.1 to 9.39.2 (#977)

Bumps [eslint](https://github.com/eslint/eslint) from 9.39.1 to 9.39.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/eslint/eslint/releases">eslint's
releases</a>.</em></p>
<blockquote>
<h2>v9.39.2</h2>
<h2>Bug Fixes</h2>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/57058331946568164449c5caabe2cf206e4fb5d9"><code>5705833</code></a>
fix: warn when <code>eslint-env</code> configuration comments are found
(<a
href="https://redirect.github.com/eslint/eslint/issues/20381">#20381</a>)
(sethamus)</li>
</ul>
<h2>Build Related</h2>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/506f1549a64aa65bdddc75c71cb62f0ab94b5a23"><code>506f154</code></a>
build: add .scss files entry to knip (<a
href="https://redirect.github.com/eslint/eslint/issues/20391">#20391</a>)
(Milos Djermanovic)</li>
</ul>
<h2>Chores</h2>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/7ca0af7f9f89dd4a01736dae01931c45d528171b"><code>7ca0af7</code></a>
chore: upgrade to <code>@eslint/js@9.39.2</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/20394">#20394</a>)
(Francesco Trotta)</li>
<li><a
href="https://github.com/eslint/eslint/commit/c43ce24ff0ce073ec4ad691cd5a50171dfe6cf1e"><code>c43ce24</code></a>
chore: package.json update for <code>@​eslint/js</code> release
(Jenkins)</li>
<li><a
href="https://github.com/eslint/eslint/commit/4c9858e47bb9146cf20f546a562bc58a9ee3dae1"><code>4c9858e</code></a>
ci: add <code>v9.x-dev</code> branch (<a
href="https://redirect.github.com/eslint/eslint/issues/20382">#20382</a>)
(Milos Djermanovic)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/9278324aa0023d223874825b0d4b6ac75783096a"><code>9278324</code></a>
9.39.2</li>
<li><a
href="https://github.com/eslint/eslint/commit/542266ad3c58b47066d4b8ae61d419b423acee8f"><code>542266a</code></a>
Build: changelog update for 9.39.2</li>
<li><a
href="https://github.com/eslint/eslint/commit/7ca0af7f9f89dd4a01736dae01931c45d528171b"><code>7ca0af7</code></a>
chore: upgrade to <code>@eslint/js@9.39.2</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/20394">#20394</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/c43ce24ff0ce073ec4ad691cd5a50171dfe6cf1e"><code>c43ce24</code></a>
chore: package.json update for <code>@​eslint/js</code> release</li>
<li><a
href="https://github.com/eslint/eslint/commit/57058331946568164449c5caabe2cf206e4fb5d9"><code>5705833</code></a>
fix: warn when <code>eslint-env</code> configuration comments are found
(<a
href="https://redirect.github.com/eslint/eslint/issues/20381">#20381</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/506f1549a64aa65bdddc75c71cb62f0ab94b5a23"><code>506f154</code></a>
build: add .scss files entry to knip (<a
href="https://redirect.github.com/eslint/eslint/issues/20391">#20391</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/4c9858e47bb9146cf20f546a562bc58a9ee3dae1"><code>4c9858e</code></a>
ci: add <code>v9.x-dev</code> branch (<a
href="https://redirect.github.com/eslint/eslint/issues/20382">#20382</a>)</li>
<li>See full diff in <a
href="https://github.com/eslint/eslint/compare/v9.39.1...v9.39.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=eslint&package-manager=npm_and_yarn&previous-version=9.39.1&new-version=9.39.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will …
Bump @types/node ^25.0.6 → ^25.2.0, @vitest/coverage-v8 ^4.0.16 → ^4.0.18,
eslint-plugin-prettier ^5.5.4 → ^5.5.5
@rmunoz33 rmunoz33 requested a review from bagelbits as a code owner February 13, 2026 17:18
@rmunoz33 rmunoz33 closed this Feb 13, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant