From 4072e7eae4cd71871d4034390c713c2787bf68f5 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Sun, 12 Apr 2026 10:43:25 +0000 Subject: [PATCH 1/3] Update dependency lodash-es to v4.18.1 [SECURITY] (#27353) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [lodash-es](https://lodash.com/custom-builds) ([source](https://redirect.github.com/lodash/lodash)) | [`4.17.23` → `4.18.1`](https://renovatebot.com/diffs/npm/lodash-es/4.17.23/4.18.1) | ![age](https://developer.mend.io/api/mc/badges/age/npm/lodash-es/4.18.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/lodash-es/4.17.23/4.18.1?slim=true) | ### GitHub Vulnerability Alerts #### [CVE-2026-2950](https://redirect.github.com/lodash/lodash/security/advisories/GHSA-f23m-r3pf-42rh) ### Impact Lodash versions 4.17.23 and earlier are vulnerable to prototype pollution in the `_.unset` and `_.omit` functions. The fix for [CVE-2025-13465](https://redirect.github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg) only guards against string key members, so an attacker can bypass the check by passing array-wrapped path segments. This allows deletion of properties from built-in prototypes such as `Object.prototype`, `Number.prototype`, and `String.prototype`. The issue permits deletion of prototype properties but does not allow overwriting their original behavior. ### Patches This issue is patched in 4.18.0. ### Workarounds None. Upgrade to the patched version. #### [CVE-2026-4800](https://redirect.github.com/lodash/lodash/security/advisories/GHSA-r5fr-rjxr-66jc) ### Impact The fix for [CVE-2021-23337](https://redirect.github.com/advisories/GHSA-35jh-r3h4-6jhm) added validation for the `variable` option in `_.template` but did not apply the same validation to `options.imports` key names. Both paths flow into the same `Function()` constructor sink. When an application passes untrusted input as `options.imports` key names, an attacker can inject default-parameter expressions that execute arbitrary code at template compilation time. Additionally, `_.template` uses `assignInWith` to merge imports, which enumerates inherited properties via `for..in`. If `Object.prototype` has been polluted by any other vector, the polluted keys are copied into the imports object and passed to `Function()`. ### Patches Users should upgrade to version 4.18.0. The fix applies two changes: 1. Validate `importsKeys` against the existing `reForbiddenIdentifierChars` regex (same check already used for the `variable` option) 2. Replace `assignInWith` with `assignWith` when merging imports, so only own properties are enumerated ### Workarounds Do not pass untrusted input as key names in `options.imports`. Only use developer-controlled, static key names. --- ### Release Notes
lodash/lodash (lodash-es) ### [`v4.18.1`](https://redirect.github.com/lodash/lodash/releases/tag/4.18.1) [Compare Source](https://redirect.github.com/lodash/lodash/compare/4.18.0...4.18.1) #### Bugs Fixes a `ReferenceError` issue in `lodash` `lodash-es` `lodash-amd` and `lodash.template` when using the `template` and `fromPairs` functions from the modular builds. See [#​6167 (comment)](https://redirect.github.com/lodash/lodash/issues/6167#issuecomment-4165269769) These defects were related to how lodash distributions are built from the main branch using . When internal dependencies change inside lodash functions, equivalent updates need to be made to a mapping in the lodash-cli. (hey, it was ahead of its time once upon a time!). We know this, but we missed it in the last release. It's the kind of thing that passes in CI, but fails bc the build is not the same thing you tested. There is no diff on main for this, but you can see the diffs for each of the npm packages on their respective branches: `lodash`: `lodash-es`: `lodash-amd`: `lodash.template` ### [`v4.18.0`](https://redirect.github.com/lodash/lodash/releases/tag/4.18.0) [Compare Source](https://redirect.github.com/lodash/lodash/compare/4.17.23...4.18.0) #### v4.18.0 **Full Changelog**: ##### Security **`_.unset` / `_.omit`**: Fixed prototype pollution via `constructor`/`prototype` path traversal ([GHSA-f23m-r3pf-42rh](https://redirect.github.com/lodash/lodash/security/advisories/GHSA-f23m-r3pf-42rh), [fe8d32e](https://redirect.github.com/lodash/lodash/commit/fe8d32eda854377349a4f922ab7655c8e5df9a0b)). Previously, array-wrapped path segments and primitive roots could bypass the existing guards, allowing deletion of properties from built-in prototypes. Now `constructor` and `prototype` are blocked unconditionally as non-terminal path keys, matching `baseSet`. Calls that previously returned `true` and deleted the property now return `false` and leave the target untouched. **`_.template`**: Fixed code injection via `imports` keys ([GHSA-r5fr-rjxr-66jc](https://redirect.github.com/lodash/lodash/security/advisories/GHSA-r5fr-rjxr-66jc), CVE-2026-4800, [879aaa9](https://redirect.github.com/lodash/lodash/commit/879aaa93132d78c2f8d20c60279da9f8b21576d6)). Fixes an incomplete patch for CVE-2021-23337. The `variable` option was validated against `reForbiddenIdentifierChars` but `importsKeys` was left unguarded, allowing code injection via the same `Function()` constructor sink. `imports` keys containing forbidden identifier characters now throw `"Invalid imports option passed into _.template"`. ##### Docs - Add security notice for `_.template` in threat model and API docs ([#​6099](https://redirect.github.com/lodash/lodash/pull/6099)) - Document `lower > upper` behavior in `_.random` ([#​6115](https://redirect.github.com/lodash/lodash/pull/6115)) - Fix quotes in `_.compact` jsdoc ([#​6090](https://redirect.github.com/lodash/lodash/pull/6090)) ##### `lodash.*` modular packages [Diff](https://redirect.github.com/lodash/lodash/pull/6157) We have also regenerated and published a select number of the `lodash.*` modular packages. These modular packages had fallen out of sync significantly from the minor/patch updates to lodash. Specifically, we have brought the following packages up to parity w/ the latest lodash release because they have had CVEs on them in the past: - [lodash.orderby](https://www.npmjs.com/package/lodash.orderby) - [lodash.tonumber](https://www.npmjs.com/package/lodash.tonumber) - [lodash.trim](https://www.npmjs.com/package/lodash.trim) - [lodash.trimend](https://www.npmjs.com/package/lodash.trimend) - [lodash.sortedindexby](https://www.npmjs.com/package/lodash.sortedindexby) - [lodash.zipobjectdeep](https://www.npmjs.com/package/lodash.zipobjectdeep) - [lodash.unset](https://www.npmjs.com/package/lodash.unset) - [lodash.omit](https://www.npmjs.com/package/lodash.omit) - [lodash.template](https://www.npmjs.com/package/lodash.template)
--- ### Configuration 📅 **Schedule**: (in timezone Etc/UTC) - Branch creation - "" - Automerge - Only on Sunday and Saturday (`* * * * 0,6`) - Between 12:00 AM and 12:59 PM, only on Monday (`* 0-12 * * 1`) - Between 10:00 PM and 11:59 PM, Monday through Friday (`* 22-23 * * 1-5`) - Between 12:00 AM and 04:59 AM, Tuesday through Saturday (`* 0-4 * * 2-6`) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/TryGhost/Ghost). Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- apps/admin-x-design-system/package.json | 2 +- apps/shade/package.json | 2 +- pnpm-lock.yaml | 114 +++--------------------- 3 files changed, 16 insertions(+), 102 deletions(-) diff --git a/apps/admin-x-design-system/package.json b/apps/admin-x-design-system/package.json index 63a5d270361..a6615d73603 100644 --- a/apps/admin-x-design-system/package.json +++ b/apps/admin-x-design-system/package.json @@ -55,7 +55,7 @@ "eslint-plugin-tailwindcss": "4.0.0-beta.0", "glob": "^10.5.0", "jsdom": "28.1.0", - "lodash-es": "4.17.23", + "lodash-es": "4.18.1", "postcss": "8.5.6", "postcss-import": "16.1.1", "react": "18.3.1", diff --git a/apps/shade/package.json b/apps/shade/package.json index 49781c35eb2..79314bd1413 100644 --- a/apps/shade/package.json +++ b/apps/shade/package.json @@ -94,7 +94,7 @@ "eslint-plugin-tailwindcss": "4.0.0-beta.0", "glob": "^10.5.0", "jsdom": "28.1.0", - "lodash-es": "4.17.23", + "lodash-es": "4.18.1", "postcss": "8.5.6", "rollup-plugin-node-builtins": "2.1.2", "sinon": "18.0.1", diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 57bf37a1a62..3aabcc6290f 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -432,8 +432,8 @@ importers: specifier: 28.1.0 version: 28.1.0(@noble/hashes@1.8.0) lodash-es: - specifier: 4.17.23 - version: 4.17.23 + specifier: 4.18.1 + version: 4.18.1 postcss: specifier: 8.5.6 version: 8.5.6 @@ -1234,8 +1234,8 @@ importers: specifier: 28.1.0 version: 28.1.0(@noble/hashes@1.8.0) lodash-es: - specifier: 4.17.23 - version: 4.17.23 + specifier: 4.18.1 + version: 4.18.1 postcss: specifier: 8.5.6 version: 8.5.6 @@ -1423,7 +1423,7 @@ importers: version: 3.3.0(rollup@4.60.0)(typescript@5.9.3)(vite@5.4.21(@types/node@25.6.0)(less@4.6.4)(lightningcss@1.31.1)(terser@5.46.1)) vitest: specifier: 3.2.4 - version: 3.2.4(@types/node@25.6.0)(@vitest/ui@3.2.4)(jiti@1.21.7)(jsdom@28.1.0(@noble/hashes@1.8.0))(less@4.6.4)(lightningcss@1.31.1)(msw@2.12.14(@types/node@25.6.0)(typescript@5.9.3))(terser@5.46.1)(tsx@4.21.0)(yaml@2.8.3) + version: 3.2.4(@types/node@25.6.0)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@28.1.0(@noble/hashes@1.8.0))(less@4.6.4)(lightningcss@1.31.1)(msw@2.12.14(@types/node@25.6.0)(typescript@5.9.3))(terser@5.46.1)(tsx@4.21.0)(yaml@2.8.3) apps/stats: dependencies: @@ -17196,6 +17196,9 @@ packages: lodash-es@4.17.23: resolution: {integrity: sha512-kVI48u3PZr38HdYz98UmfPnXl2DXrpdctLrFLCd3kOx1xUkOmpFPx7gCWWM5MPkL/fD8zb+Ph0QzjGFs4+hHWg==} + lodash-es@4.18.1: + resolution: {integrity: sha512-J8xewKD/Gk22OZbhpOVSwcs60zhd95ESDwezOFuA3/099925PdHJ7OFHNTGtajL3AlZkykD32HykiMo+BIBI8A==} + lodash._baseassign@3.2.0: resolution: {integrity: sha512-t3N26QR2IdSN+gqSy9Ds9pBu/J1EAFEshKlUHpJG3rvyJOYgcELIxcIeKKfZk7sjOz11cFfzJRsyFry/JyabJQ==} @@ -32573,7 +32576,7 @@ snapshots: std-env: 3.10.0 test-exclude: 7.0.2 tinyrainbow: 2.0.0 - vitest: 3.2.4(@types/node@25.6.0)(@vitest/ui@3.2.4)(jiti@1.21.7)(jsdom@28.1.0(@noble/hashes@1.8.0))(less@4.6.4)(lightningcss@1.31.1)(msw@2.12.14(@types/node@25.6.0)(typescript@5.9.3))(terser@5.46.1)(tsx@4.21.0)(yaml@2.8.3) + vitest: 3.2.4(@types/node@25.6.0)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@28.1.0(@noble/hashes@1.8.0))(less@4.6.4)(lightningcss@1.31.1)(msw@2.12.14(@types/node@25.6.0)(typescript@5.9.3))(terser@5.46.1)(tsx@4.21.0)(yaml@2.8.3) transitivePeerDependencies: - supports-color @@ -32607,15 +32610,6 @@ snapshots: chai: 6.2.2 tinyrainbow: 3.1.0 - '@vitest/mocker@3.2.4(msw@2.12.14(@types/node@25.6.0)(typescript@5.9.3))(vite@7.1.12(@types/node@25.6.0)(jiti@1.21.7)(less@4.6.4)(lightningcss@1.31.1)(terser@5.46.1)(tsx@4.21.0)(yaml@2.8.3))': - dependencies: - '@vitest/spy': 3.2.4 - estree-walker: 3.0.3 - magic-string: 0.30.21 - optionalDependencies: - msw: 2.12.14(@types/node@25.6.0)(typescript@5.9.3) - vite: 7.1.12(@types/node@25.6.0)(jiti@1.21.7)(less@4.6.4)(lightningcss@1.31.1)(terser@5.46.1)(tsx@4.21.0)(yaml@2.8.3) - '@vitest/mocker@3.2.4(msw@2.12.14(@types/node@25.6.0)(typescript@5.9.3))(vite@7.1.12(@types/node@25.6.0)(jiti@2.6.1)(less@4.6.4)(lightningcss@1.31.1)(terser@5.46.1)(tsx@4.21.0)(yaml@2.8.3))': dependencies: '@vitest/spy': 3.2.4 @@ -32709,7 +32703,7 @@ snapshots: sirv: 3.0.2 tinyglobby: 0.2.15 tinyrainbow: 2.0.0 - vitest: 3.2.4(@types/node@25.6.0)(@vitest/ui@3.2.4)(jiti@1.21.7)(jsdom@28.1.0(@noble/hashes@1.8.0))(less@4.6.4)(lightningcss@1.31.1)(msw@2.12.14(@types/node@25.6.0)(typescript@5.9.3))(terser@5.46.1)(tsx@4.21.0)(yaml@2.8.3) + vitest: 3.2.4(@types/node@25.6.0)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@28.1.0(@noble/hashes@1.8.0))(less@4.6.4)(lightningcss@1.31.1)(msw@2.12.14(@types/node@25.6.0)(typescript@5.9.3))(terser@5.46.1)(tsx@4.21.0)(yaml@2.8.3) '@vitest/utils@1.6.1': dependencies: @@ -37268,7 +37262,7 @@ snapshots: ember-destroyable-polyfill: 2.0.3(@babel/core@7.29.0) ember-get-config: 0.5.0 ember-inflector: 4.0.3(ember-source@3.24.0(@babel/core@7.29.0)) - lodash-es: 4.17.23 + lodash-es: 4.18.1 miragejs: 0.1.48 optionalDependencies: '@ember/test-helpers': 2.9.6(@babel/core@7.29.0)(ember-source@3.24.0(@babel/core@7.29.0)) @@ -42828,6 +42822,8 @@ snapshots: lodash-es@4.17.23: {} + lodash-es@4.18.1: {} + lodash._baseassign@3.2.0: dependencies: lodash._basecopy: 3.0.1 @@ -49386,27 +49382,6 @@ snapshots: - supports-color - terser - vite-node@3.2.4(@types/node@25.6.0)(jiti@1.21.7)(less@4.6.4)(lightningcss@1.31.1)(terser@5.46.1)(tsx@4.21.0)(yaml@2.8.3): - dependencies: - cac: 6.7.14 - debug: 4.4.3(supports-color@5.5.0) - es-module-lexer: 1.7.0 - pathe: 2.0.3 - vite: 7.1.12(@types/node@25.6.0)(jiti@1.21.7)(less@4.6.4)(lightningcss@1.31.1)(terser@5.46.1)(tsx@4.21.0)(yaml@2.8.3) - transitivePeerDependencies: - - '@types/node' - - jiti - - less - - lightningcss - - sass - - sass-embedded - - stylus - - sugarss - - supports-color - - terser - - tsx - - yaml - vite-node@3.2.4(@types/node@25.6.0)(jiti@2.6.1)(less@4.6.4)(lightningcss@1.31.1)(terser@5.46.1)(tsx@4.21.0)(yaml@2.8.3): dependencies: cac: 6.7.14 @@ -49527,24 +49502,6 @@ snapshots: lightningcss: 1.31.1 terser: 5.46.1 - vite@7.1.12(@types/node@25.6.0)(jiti@1.21.7)(less@4.6.4)(lightningcss@1.31.1)(terser@5.46.1)(tsx@4.21.0)(yaml@2.8.3): - dependencies: - esbuild: 0.25.12 - fdir: 6.5.0(picomatch@4.0.4) - picomatch: 4.0.4 - postcss: 8.5.6 - rollup: 4.60.0 - tinyglobby: 0.2.15 - optionalDependencies: - '@types/node': 25.6.0 - fsevents: 2.3.3 - jiti: 1.21.7 - less: 4.6.4 - lightningcss: 1.31.1 - terser: 5.46.1 - tsx: 4.21.0 - yaml: 2.8.3 - vite@7.1.12(@types/node@25.6.0)(jiti@2.6.1)(less@4.6.4)(lightningcss@1.31.1)(terser@5.46.1)(tsx@4.21.0)(yaml@2.8.3): dependencies: esbuild: 0.25.12 @@ -49703,49 +49660,6 @@ snapshots: - supports-color - terser - vitest@3.2.4(@types/node@25.6.0)(@vitest/ui@3.2.4)(jiti@1.21.7)(jsdom@28.1.0(@noble/hashes@1.8.0))(less@4.6.4)(lightningcss@1.31.1)(msw@2.12.14(@types/node@25.6.0)(typescript@5.9.3))(terser@5.46.1)(tsx@4.21.0)(yaml@2.8.3): - dependencies: - '@types/chai': 5.2.3 - '@vitest/expect': 3.2.4 - '@vitest/mocker': 3.2.4(msw@2.12.14(@types/node@25.6.0)(typescript@5.9.3))(vite@7.1.12(@types/node@25.6.0)(jiti@1.21.7)(less@4.6.4)(lightningcss@1.31.1)(terser@5.46.1)(tsx@4.21.0)(yaml@2.8.3)) - '@vitest/pretty-format': 3.2.4 - '@vitest/runner': 3.2.4 - '@vitest/snapshot': 3.2.4 - '@vitest/spy': 3.2.4 - '@vitest/utils': 3.2.4 - chai: 5.3.3 - debug: 4.4.3(supports-color@5.5.0) - expect-type: 1.3.0 - magic-string: 0.30.21 - pathe: 2.0.3 - picomatch: 4.0.4 - std-env: 3.10.0 - tinybench: 2.9.0 - tinyexec: 0.3.2 - tinyglobby: 0.2.15 - tinypool: 1.1.1 - tinyrainbow: 2.0.0 - vite: 7.1.12(@types/node@25.6.0)(jiti@1.21.7)(less@4.6.4)(lightningcss@1.31.1)(terser@5.46.1)(tsx@4.21.0)(yaml@2.8.3) - vite-node: 3.2.4(@types/node@25.6.0)(jiti@1.21.7)(less@4.6.4)(lightningcss@1.31.1)(terser@5.46.1)(tsx@4.21.0)(yaml@2.8.3) - why-is-node-running: 2.3.0 - optionalDependencies: - '@types/node': 25.6.0 - '@vitest/ui': 3.2.4(vitest@3.2.4) - jsdom: 28.1.0(@noble/hashes@1.8.0) - transitivePeerDependencies: - - jiti - - less - - lightningcss - - msw - - sass - - sass-embedded - - stylus - - sugarss - - supports-color - - terser - - tsx - - yaml - vitest@3.2.4(@types/node@25.6.0)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@28.1.0(@noble/hashes@1.8.0))(less@4.6.4)(lightningcss@1.31.1)(msw@2.12.14(@types/node@25.6.0)(typescript@5.9.3))(terser@5.46.1)(tsx@4.21.0)(yaml@2.8.3): dependencies: '@types/chai': 5.2.3 @@ -50351,7 +50265,7 @@ snapshots: '@babel/runtime': 7.29.2 '@types/lodash': 4.17.24 lodash: 4.17.23 - lodash-es: 4.17.23 + lodash-es: 4.18.1 nanoclone: 0.2.1 property-expr: 2.0.6 toposort: 2.0.2 From 73f516a1234ea4b0592e5d685975371e46241f4c Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Sun, 12 Apr 2026 14:42:42 +0000 Subject: [PATCH 2/3] Update dependency iconv-lite to v0.7.2 (#27335) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [iconv-lite](https://redirect.github.com/pillarjs/iconv-lite) | [`0.6.3` → `0.7.2`](https://renovatebot.com/diffs/npm/iconv-lite/0.6.3/0.7.2) | ![age](https://developer.mend.io/api/mc/badges/age/npm/iconv-lite/0.7.2?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/iconv-lite/0.6.3/0.7.2?slim=true) | --- ### Release Notes
pillarjs/iconv-lite (iconv-lite) ### [`v0.7.2`](https://redirect.github.com/pillarjs/iconv-lite/blob/HEAD/Changelog.md#072) [Compare Source](https://redirect.github.com/pillarjs/iconv-lite/compare/v0.7.1...v0.7.2) ##### 🐞 Bug fixes - Correction of CommonJS exports in TypeScript definitions - by [@​plbstl](https://redirect.github.com/plbstl) in [#​366](https://redirect.github.com/pillarjs/iconv-lite/pull/366) Fixed the TypeScript definitions to correctly represent the CommonJS exports of the library. This resolves issues where consumers using TypeScript would encounter errors due to incorrect type definitions that did not align with the actual module exports. ### [`v0.7.1`](https://redirect.github.com/pillarjs/iconv-lite/blob/HEAD/Changelog.md#071) [Compare Source](https://redirect.github.com/pillarjs/iconv-lite/compare/v0.7.0...v0.7.1) ##### 🚀 Improvements - types: improve type definitions and add missing APIs - by [@​plbstl](https://redirect.github.com/plbstl) and [@​bjohansebas](https://redirect.github.com/bjohansebas) in [#​330](https://redirect.github.com/pillarjs/iconv-lite/pull/330) ### [`v0.7.0`](https://redirect.github.com/pillarjs/iconv-lite/blob/HEAD/Changelog.md#070) [Compare Source](https://redirect.github.com/pillarjs/iconv-lite/compare/v0.6.3...v0.7.0) ##### 🐞 Bug fixes - Handle split surrogate pairs when encoding utf8 - by [@​yosion-p](https://redirect.github.com/yosion-p) and [@​ashtuchkin](https://redirect.github.com/ashtuchkin) in [#​282](https://redirect.github.com/ashtuchkin/iconv-lite/pull/282): Handle a case where streaming utf8 encoder (converting js strings -> buffers) encounters surrogate pairs split between chunks (last character of one chunk is high surrogate and first character of the next chunk is a low surrogate). - Avoid false positives in encodingExists by using objects without a prototype - by [@​bjohansebas](https://redirect.github.com/bjohansebas) in [#​328](https://redirect.github.com/ashtuchkin/iconv-lite/pull/328) The encodingExists method could return incorrect results if the lookup matched properties inherited from the prototype of the object that stores the encodings, such as constructor and others. This change replaces that object with one that has no prototype, ensuring that only explicitly defined valid encodings in the library are considered. In addition, the fix is applied to the internal cache system to avoid the same kind of false positives ##### 🚀 Improvements - Make explicit that decode() method supports Uint8Array input - by [@​jardicc](https://redirect.github.com/jardicc) in [#​271](https://redirect.github.com/ashtuchkin/iconv-lite/pull/271) - Remove compatibility check for StringDecoder.end method - by [@​bjohansebas](https://redirect.github.com/bjohansebas) in [#​331](https://redirect.github.com/ashtuchkin/iconv-lite/pull/331)
--- ### Configuration 📅 **Schedule**: (in timezone Etc/UTC) - Branch creation - Only on Sunday and Saturday (`* * * * 0,6`) - Between 12:00 AM and 12:59 PM, only on Monday (`* 0-12 * * 1`) - Between 09:00 PM and 11:59 PM, Monday through Friday (`* 21-23 * * 1-5`) - Between 12:00 AM and 04:59 AM, Tuesday through Saturday (`* 0-4 * * 2-6`) - Automerge - Only on Sunday and Saturday (`* * * * 0,6`) - Between 12:00 AM and 12:59 PM, only on Monday (`* 0-12 * * 1`) - Between 10:00 PM and 11:59 PM, Monday through Friday (`* 22-23 * * 1-5`) - Between 12:00 AM and 04:59 AM, Tuesday through Saturday (`* 0-4 * * 2-6`) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/TryGhost/Ghost). Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- ghost/core/package.json | 2 +- pnpm-lock.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/ghost/core/package.json b/ghost/core/package.json index 213c31b44b5..250d73e7ca3 100644 --- a/ghost/core/package.json +++ b/ghost/core/package.json @@ -173,7 +173,7 @@ "html-to-text": "5.1.1", "html5parser": "2.0.2", "human-number": "2.0.10", - "iconv-lite": "0.6.3", + "iconv-lite": "0.7.2", "image-size": "1.2.1", "intl": "1.2.5", "intl-messageformat": "5.4.3", diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 3aabcc6290f..49c7f3e5471 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -2279,8 +2279,8 @@ importers: specifier: 2.0.10 version: 2.0.10 iconv-lite: - specifier: 0.6.3 - version: 0.6.3 + specifier: 0.7.2 + version: 0.7.2 image-size: specifier: 1.2.1 version: 1.2.1 From b9ec001fe8a8ebefe6d9c72a3c05bf08e23b0245 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Sun, 12 Apr 2026 15:25:12 +0000 Subject: [PATCH 3/3] Update dependency lucide-react to v0.577.0 (#27336) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [lucide-react](https://lucide.dev) ([source](https://redirect.github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react)) | [`0.553.0` → `0.577.0`](https://renovatebot.com/diffs/npm/lucide-react/0.553.0/0.577.0) | ![age](https://developer.mend.io/api/mc/badges/age/npm/lucide-react/0.577.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/lucide-react/0.553.0/0.577.0?slim=true) | --- ### Release Notes
lucide-icons/lucide (lucide-react) ### [`v0.577.0`](https://redirect.github.com/lucide-icons/lucide/releases/tag/0.577.0): Version 0.577.0 [Compare Source](https://redirect.github.com/lucide-icons/lucide/compare/0.576.0...0.577.0) #### What's Changed - chore(deps): bump rollup from 4.53.3 to 4.59.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​4106](https://redirect.github.com/lucide-icons/lucide/pull/4106) - fix(repo): correctly ignore docs/releaseMetadata via .gitignore by [@​bhavberi](https://redirect.github.com/bhavberi) in [#​4100](https://redirect.github.com/lucide-icons/lucide/pull/4100) - feat(icons): added `ellipse` icon by [@​KISHORE-KUMAR-S](https://redirect.github.com/KISHORE-KUMAR-S) in [#​3749](https://redirect.github.com/lucide-icons/lucide/pull/3749) #### New Contributors - [@​bhavberi](https://redirect.github.com/bhavberi) made their first contribution in [#​4100](https://redirect.github.com/lucide-icons/lucide/pull/4100) - [@​KISHORE-KUMAR-S](https://redirect.github.com/KISHORE-KUMAR-S) made their first contribution in [#​3749](https://redirect.github.com/lucide-icons/lucide/pull/3749) **Full Changelog**: ### [`v0.576.0`](https://redirect.github.com/lucide-icons/lucide/releases/tag/0.576.0): Version 0.576.0 [Compare Source](https://redirect.github.com/lucide-icons/lucide/compare/0.575.0...0.576.0) #### What's Changed - Added zodiac signs by [@​karsa-mistmere](https://redirect.github.com/karsa-mistmere) in [#​712](https://redirect.github.com/lucide-icons/lucide/pull/712) - fix(icons): fixes guideline violations in `package-*` icons. by [@​karsa-mistmere](https://redirect.github.com/karsa-mistmere) in [#​4074](https://redirect.github.com/lucide-icons/lucide/pull/4074) - fix(icons): changed `receipt` icon by [@​karsa-mistmere](https://redirect.github.com/karsa-mistmere) in [#​4075](https://redirect.github.com/lucide-icons/lucide/pull/4075) - fix(icons): updated `cuboid` icon tags and categories by [@​karsa-mistmere](https://redirect.github.com/karsa-mistmere) in [#​4095](https://redirect.github.com/lucide-icons/lucide/pull/4095) - fix(icons): changed `cuboid` icon by [@​jamiemlaw](https://redirect.github.com/jamiemlaw) in [#​4098](https://redirect.github.com/lucide-icons/lucide/pull/4098) - fix(lucide-font, lucide-static): Fixing stable code points by [@​ericfennis](https://redirect.github.com/ericfennis) in [#​3894](https://redirect.github.com/lucide-icons/lucide/pull/3894) - feat(icons): added `fishing-rod` icon by [@​7ender](https://redirect.github.com/7ender) in [#​3839](https://redirect.github.com/lucide-icons/lucide/pull/3839) **Full Changelog**: ### [`v0.575.0`](https://redirect.github.com/lucide-icons/lucide/releases/tag/0.575.0): Version 0.575.0 [Compare Source](https://redirect.github.com/lucide-icons/lucide/compare/0.574.0...0.575.0) #### What's Changed - feat(icons): added `message-square-check` icon by [@​karsa-mistmere](https://redirect.github.com/karsa-mistmere) in [#​4076](https://redirect.github.com/lucide-icons/lucide/pull/4076) - fix(lucide): Fix ESM Module output path in build by [@​ericfennis](https://redirect.github.com/ericfennis) in [#​4084](https://redirect.github.com/lucide-icons/lucide/pull/4084) - feat(icons): added `metronome` icon by [@​edwloef](https://redirect.github.com/edwloef) in [#​4063](https://redirect.github.com/lucide-icons/lucide/pull/4063) - fix(icons): remove execution permission of SVG files by [@​duckafire](https://redirect.github.com/duckafire) in [#​4053](https://redirect.github.com/lucide-icons/lucide/pull/4053) - fix(icons): changed `file-pen-line` icon by [@​jguddas](https://redirect.github.com/jguddas) in [#​3970](https://redirect.github.com/lucide-icons/lucide/pull/3970) - feat(icons): added `square-arrow-right-exit` and `square-arrow-right-enter` icons by [@​EthanHazel](https://redirect.github.com/EthanHazel) in [#​3958](https://redirect.github.com/lucide-icons/lucide/pull/3958) - fix(icons): renamed `flip-*` to `square-centerline-dashed-*` by [@​jguddas](https://redirect.github.com/jguddas) in [#​3945](https://redirect.github.com/lucide-icons/lucide/pull/3945) #### New Contributors - [@​edwloef](https://redirect.github.com/edwloef) made their first contribution in [#​4063](https://redirect.github.com/lucide-icons/lucide/pull/4063) - [@​duckafire](https://redirect.github.com/duckafire) made their first contribution in [#​4053](https://redirect.github.com/lucide-icons/lucide/pull/4053) **Full Changelog**: ### [`v0.574.0`](https://redirect.github.com/lucide-icons/lucide/releases/tag/0.574.0): Version 0.574.0 [Compare Source](https://redirect.github.com/lucide-icons/lucide/compare/0.573.0...0.574.0) #### What's Changed - fix(icons): changed `rocking-chair` icon by [@​jamiemlaw](https://redirect.github.com/jamiemlaw) in [#​3445](https://redirect.github.com/lucide-icons/lucide/pull/3445) - fix(icons): flipped `coins` icon by [@​jguddas](https://redirect.github.com/jguddas) in [#​3158](https://redirect.github.com/lucide-icons/lucide/pull/3158) - feat(icons): added `x-line-top` icon by [@​jguddas](https://redirect.github.com/jguddas) in [#​2838](https://redirect.github.com/lucide-icons/lucide/pull/2838) - feat(icons): added `mouse-left` icon by [@​marvfash](https://redirect.github.com/marvfash) in [#​2788](https://redirect.github.com/lucide-icons/lucide/pull/2788) - feat(icons): added `mouse-right` icon by [@​marvfash](https://redirect.github.com/marvfash) in [#​2787](https://redirect.github.com/lucide-icons/lucide/pull/2787) #### New Contributors - [@​marvfash](https://redirect.github.com/marvfash) made their first contribution in [#​2788](https://redirect.github.com/lucide-icons/lucide/pull/2788) **Full Changelog**: ### [`v0.573.0`](https://redirect.github.com/lucide-icons/lucide/releases/tag/0.573.0): Version 0.573.0 [Compare Source](https://redirect.github.com/lucide-icons/lucide/compare/0.572.0...0.573.0) #### What's Changed - fix(icons): changed `rocking-chair` icon by [@​jamiemlaw](https://redirect.github.com/jamiemlaw) in [#​3445](https://redirect.github.com/lucide-icons/lucide/pull/3445) - fix(icons): flipped `coins` icon by [@​jguddas](https://redirect.github.com/jguddas) in [#​3158](https://redirect.github.com/lucide-icons/lucide/pull/3158) - feat(icons): added `x-line-top` icon by [@​jguddas](https://redirect.github.com/jguddas) in [#​2838](https://redirect.github.com/lucide-icons/lucide/pull/2838) - feat(icons): added `mouse-left` icon by [@​marvfash](https://redirect.github.com/marvfash) in [#​2788](https://redirect.github.com/lucide-icons/lucide/pull/2788) - feat(icons): added `mouse-right` icon by [@​marvfash](https://redirect.github.com/marvfash) in [#​2787](https://redirect.github.com/lucide-icons/lucide/pull/2787) #### New Contributors - [@​marvfash](https://redirect.github.com/marvfash) made their first contribution in [#​2788](https://redirect.github.com/lucide-icons/lucide/pull/2788) **Full Changelog**: ### [`v0.572.0`](https://redirect.github.com/lucide-icons/lucide/releases/tag/0.572.0): Version 0.572.0 [Compare Source](https://redirect.github.com/lucide-icons/lucide/compare/0.571.0...0.572.0) #### What's Changed - feat(icons): added `message-circle-check` icon by [@​Shrinks99](https://redirect.github.com/Shrinks99) in [#​3770](https://redirect.github.com/lucide-icons/lucide/pull/3770) #### New Contributors - [@​Shrinks99](https://redirect.github.com/Shrinks99) made their first contribution in [#​3770](https://redirect.github.com/lucide-icons/lucide/pull/3770) **Full Changelog**: ### [`v0.571.0`](https://redirect.github.com/lucide-icons/lucide/releases/tag/0.571.0): Version 0.571.0 [Compare Source](https://redirect.github.com/lucide-icons/lucide/compare/0.570.0...0.571.0) #### What's Changed - fix(icons): rearange `circle`-icons path and circle order by [@​adamlindqvist](https://redirect.github.com/adamlindqvist) in [#​3746](https://redirect.github.com/lucide-icons/lucide/pull/3746) - feat(icons): added `shelving-unit` icon by [@​karsa-mistmere](https://redirect.github.com/karsa-mistmere) in [#​3041](https://redirect.github.com/lucide-icons/lucide/pull/3041) #### New Contributors - [@​adamlindqvist](https://redirect.github.com/adamlindqvist) made their first contribution in [#​3746](https://redirect.github.com/lucide-icons/lucide/pull/3746) **Full Changelog**: ### [`v0.570.0`](https://redirect.github.com/lucide-icons/lucide/releases/tag/0.570.0): Version 0.570.0 [Compare Source](https://redirect.github.com/lucide-icons/lucide/compare/0.569.0...0.570.0) #### What's Changed - feat(icons): added `towel-rack` icon by [@​jguddas](https://redirect.github.com/jguddas) in [#​3350](https://redirect.github.com/lucide-icons/lucide/pull/3350) **Full Changelog**: ### [`v0.569.0`](https://redirect.github.com/lucide-icons/lucide/releases/tag/0.569.0): Version 0.569.0 [Compare Source](https://redirect.github.com/lucide-icons/lucide/compare/0.568.0...0.569.0) #### What's Changed - fix(icons): changed `clipboard-pen` icon by [@​Spleefies](https://redirect.github.com/Spleefies) in [#​4006](https://redirect.github.com/lucide-icons/lucide/pull/4006) - feat(icons): add `mirror-round` and `mirror-rectangular` by [@​Muhammad-Aqib-Bashir](https://redirect.github.com/Muhammad-Aqib-Bashir) in [#​3832](https://redirect.github.com/lucide-icons/lucide/pull/3832) **Full Changelog**: ### [`v0.568.0`](https://redirect.github.com/lucide-icons/lucide/releases/tag/0.568.0): Version 0.568.0 [Compare Source](https://redirect.github.com/lucide-icons/lucide/compare/0.567.0...0.568.0) #### What's Changed - fix(icons): adjusted `clapperboard` so slash is no longer protruding by [@​torfmuer](https://redirect.github.com/torfmuer) in [#​3764](https://redirect.github.com/lucide-icons/lucide/pull/3764) - feat(icons): Add `git-merge-conflict` icon by [@​timmy471](https://redirect.github.com/timmy471) in [#​3008](https://redirect.github.com/lucide-icons/lucide/pull/3008) #### New Contributors - [@​torfmuer](https://redirect.github.com/torfmuer) made their first contribution in [#​3764](https://redirect.github.com/lucide-icons/lucide/pull/3764) - [@​timmy471](https://redirect.github.com/timmy471) made their first contribution in [#​3008](https://redirect.github.com/lucide-icons/lucide/pull/3008) **Full Changelog**: ### [`v0.567.0`](https://redirect.github.com/lucide-icons/lucide/releases/tag/0.567.0): Version 0.567.0 [Compare Source](https://redirect.github.com/lucide-icons/lucide/compare/0.566.0...0.567.0) #### What's Changed - chore(tags): added tags to `info` by [@​jamiemlaw](https://redirect.github.com/jamiemlaw) in [#​4047](https://redirect.github.com/lucide-icons/lucide/pull/4047) - fix(icons): changed `gift` icon by [@​jguddas](https://redirect.github.com/jguddas) in [#​3977](https://redirect.github.com/lucide-icons/lucide/pull/3977) - feat(icons): added `line-dot-right-horizontal` icon by [@​nathan-de-pachtere](https://redirect.github.com/nathan-de-pachtere) in [#​3742](https://redirect.github.com/lucide-icons/lucide/pull/3742) **Full Changelog**: ### [`v0.566.0`](https://redirect.github.com/lucide-icons/lucide/releases/tag/0.566.0): Version 0.566.0 [Compare Source](https://redirect.github.com/lucide-icons/lucide/compare/0.565.0...0.566.0) #### What's Changed - fix(icons): changed `forklift` icon by [@​jguddas](https://redirect.github.com/jguddas) in [#​4069](https://redirect.github.com/lucide-icons/lucide/pull/4069) - fix(icons): changed `rocket` icon by [@​jguddas](https://redirect.github.com/jguddas) in [#​4067](https://redirect.github.com/lucide-icons/lucide/pull/4067) - feat(icons): added `globe-off` icon by [@​TimNekk](https://redirect.github.com/TimNekk) in [#​4051](https://redirect.github.com/lucide-icons/lucide/pull/4051) #### New Contributors - [@​TimNekk](https://redirect.github.com/TimNekk) made their first contribution in [#​4051](https://redirect.github.com/lucide-icons/lucide/pull/4051) **Full Changelog**: ### [`v0.565.0`](https://redirect.github.com/lucide-icons/lucide/releases/tag/0.565.0): Version 0.565.0 [Compare Source](https://redirect.github.com/lucide-icons/lucide/compare/0.564.0...0.565.0) #### What's Changed - feat(icons): add `lens-concave` and `lens-convex` by [@​Muhammad-Aqib-Bashir](https://redirect.github.com/Muhammad-Aqib-Bashir) in [#​3831](https://redirect.github.com/lucide-icons/lucide/pull/3831) **Full Changelog**: ### [`v0.564.0`](https://redirect.github.com/lucide-icons/lucide/releases/tag/0.564.0): Version 0.564.0 [Compare Source](https://redirect.github.com/lucide-icons/lucide/compare/0.563.0...0.564.0) #### What's Changed - chore(docs): Improve SEO icon detail pages by [@​ericfennis](https://redirect.github.com/ericfennis) in [#​4040](https://redirect.github.com/lucide-icons/lucide/pull/4040) - feat(icons): added `database-search` icon by [@​Spleefies](https://redirect.github.com/Spleefies) in [#​4003](https://redirect.github.com/lucide-icons/lucide/pull/4003) - fix(icons): changed `user-lock` icon by [@​jguddas](https://redirect.github.com/jguddas) in [#​3971](https://redirect.github.com/lucide-icons/lucide/pull/3971) - fix(icons): changed `bug-off` icon by [@​jguddas](https://redirect.github.com/jguddas) in [#​3972](https://redirect.github.com/lucide-icons/lucide/pull/3972) - fix(icons): changed `bell-dot` icon by [@​jguddas](https://redirect.github.com/jguddas) in [#​3973](https://redirect.github.com/lucide-icons/lucide/pull/3973) - fix(icons): changed `bandage` icon by [@​jguddas](https://redirect.github.com/jguddas) in [#​3967](https://redirect.github.com/lucide-icons/lucide/pull/3967) - fix(icons): changed `hard-drive` icon by [@​jguddas](https://redirect.github.com/jguddas) in [#​3622](https://redirect.github.com/lucide-icons/lucide/pull/3622) - fix(icons): changed `git-branch` icon by [@​jguddas](https://redirect.github.com/jguddas) in [#​3938](https://redirect.github.com/lucide-icons/lucide/pull/3938) - fix(icons): changed `file-cog` icon by [@​jguddas](https://redirect.github.com/jguddas) in [#​3965](https://redirect.github.com/lucide-icons/lucide/pull/3965) - fix(icons): changed `cloud-alert` and `cloud-check` icon by [@​jguddas](https://redirect.github.com/jguddas) in [#​3976](https://redirect.github.com/lucide-icons/lucide/pull/3976) - feat(icons): adds `user-key` and `user-round-key`, updates other `-key` icons to match by [@​karsa-mistmere](https://redirect.github.com/karsa-mistmere) in [#​4044](https://redirect.github.com/lucide-icons/lucide/pull/4044) #### New Contributors - [@​Spleefies](https://redirect.github.com/Spleefies) made their first contribution in [#​4003](https://redirect.github.com/lucide-icons/lucide/pull/4003) **Full Changelog**: ### [`v0.563.0`](https://redirect.github.com/lucide-icons/lucide/releases/tag/0.563.0): Version 0.563.0 [Compare Source](https://redirect.github.com/lucide-icons/lucide/compare/0.562.0...0.563.0) #### What's Changed - chore(dev): Enable ligatures in font build configuration by [@​dcxo](https://redirect.github.com/dcxo) in [#​3876](https://redirect.github.com/lucide-icons/lucide/pull/3876) - chore(repo): add Android to brand stopwords by [@​karsa-mistmere](https://redirect.github.com/karsa-mistmere) in [#​3895](https://redirect.github.com/lucide-icons/lucide/pull/3895) - fix(site): add missing titles and a title template by [@​taimar](https://redirect.github.com/taimar) in [#​3920](https://redirect.github.com/lucide-icons/lucide/pull/3920) - fix(site): unify and improve the styling of input fields by [@​taimar](https://redirect.github.com/taimar) in [#​3919](https://redirect.github.com/lucide-icons/lucide/pull/3919) - fix(icons): changed `star-off` icon by [@​jguddas](https://redirect.github.com/jguddas) in [#​3952](https://redirect.github.com/lucide-icons/lucide/pull/3952) - fix(icons): changed `tickets-plane` icon by [@​jguddas](https://redirect.github.com/jguddas) in [#​3928](https://redirect.github.com/lucide-icons/lucide/pull/3928) - fix(icons): changed `monitor-off` icon by [@​jguddas](https://redirect.github.com/jguddas) in [#​3962](https://redirect.github.com/lucide-icons/lucide/pull/3962) - fix(icons): changed `lasso` icon by [@​jguddas](https://redirect.github.com/jguddas) in [#​3961](https://redirect.github.com/lucide-icons/lucide/pull/3961) - fix(icons): changed `cloud-off` icon by [@​jguddas](https://redirect.github.com/jguddas) in [#​3942](https://redirect.github.com/lucide-icons/lucide/pull/3942) - docs(site): added lucide-web-components third-party package by [@​midesweb](https://redirect.github.com/midesweb) in [#​3948](https://redirect.github.com/lucide-icons/lucide/pull/3948) - chore(deps-dev): bump preact from 10.27.2 to 10.27.3 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​3955](https://redirect.github.com/lucide-icons/lucide/pull/3955) - feat(icon): add globe-x icon with metadata by [@​Muhammad-Aqib-Bashir](https://redirect.github.com/Muhammad-Aqib-Bashir) in [#​3827](https://redirect.github.com/lucide-icons/lucide/pull/3827) - fix(icons): changed `waypoints` icon by [@​karsa-mistmere](https://redirect.github.com/karsa-mistmere) in [#​3990](https://redirect.github.com/lucide-icons/lucide/pull/3990) - fix(icons): changed `bookmark` icon by [@​jguddas](https://redirect.github.com/jguddas) in [#​2906](https://redirect.github.com/lucide-icons/lucide/pull/2906) - fix(icons): changed `message-square-dashed` icon by [@​jguddas](https://redirect.github.com/jguddas) in [#​3959](https://redirect.github.com/lucide-icons/lucide/pull/3959) - fix(icons): changed `cloudy` icon by [@​jguddas](https://redirect.github.com/jguddas) in [#​3966](https://redirect.github.com/lucide-icons/lucide/pull/3966) - fix(github-actions): resolved spelling mistake in gh issue close command by [@​jguddas](https://redirect.github.com/jguddas) in [#​4000](https://redirect.github.com/lucide-icons/lucide/pull/4000) - Update LICENSE by [@​alxgraphy](https://redirect.github.com/alxgraphy) in [#​4009](https://redirect.github.com/lucide-icons/lucide/pull/4009) - feat(packages): Added aria-hidden fallback for decorative icons to all packages by [@​ericfennis](https://redirect.github.com/ericfennis) in [#​3604](https://redirect.github.com/lucide-icons/lucide/pull/3604) - chore(deps): bump lodash from 4.17.21 to 4.17.23 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​4020](https://redirect.github.com/lucide-icons/lucide/pull/4020) - chore(deps): bump lodash-es from 4.17.21 to 4.17.23 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​4019](https://redirect.github.com/lucide-icons/lucide/pull/4019) - Suggest anchoring to a specific lucide version when using a cdn by [@​drago1520](https://redirect.github.com/drago1520) in [#​3727](https://redirect.github.com/lucide-icons/lucide/pull/3727) - feat(docs): upgraded backers block by [@​karsa-mistmere](https://redirect.github.com/karsa-mistmere) in [#​4014](https://redirect.github.com/lucide-icons/lucide/pull/4014) - fix(site): hide native search input clear "X" icon by [@​epifaniofrancisco](https://redirect.github.com/epifaniofrancisco) in [#​3933](https://redirect.github.com/lucide-icons/lucide/pull/3933) - feat(icons): added `printer-x` icon by [@​lt25106](https://redirect.github.com/lt25106) in [#​3941](https://redirect.github.com/lucide-icons/lucide/pull/3941) #### New Contributors - [@​dcxo](https://redirect.github.com/dcxo) made their first contribution in [#​3876](https://redirect.github.com/lucide-icons/lucide/pull/3876) - [@​midesweb](https://redirect.github.com/midesweb) made their first contribution in [#​3948](https://redirect.github.com/lucide-icons/lucide/pull/3948) - [@​alxgraphy](https://redirect.github.com/alxgraphy) made their first contribution in [#​4009](https://redirect.github.com/lucide-icons/lucide/pull/4009) - [@​drago1520](https://redirect.github.com/drago1520) made their first contribution in [#​3727](https://redirect.github.com/lucide-icons/lucide/pull/3727) - [@​lt25106](https://redirect.github.com/lt25106) made their first contribution in [#​3941](https://redirect.github.com/lucide-icons/lucide/pull/3941) **Full Changelog**: ### [`v0.562.0`](https://redirect.github.com/lucide-icons/lucide/compare/0.561.0...0.562.0) [Compare Source](https://redirect.github.com/lucide-icons/lucide/compare/0.561.0...0.562.0) ### [`v0.561.0`](https://redirect.github.com/lucide-icons/lucide/releases/tag/0.561.0): Version 0.561.0 [Compare Source](https://redirect.github.com/lucide-icons/lucide/compare/0.560.0...0.561.0) #### What's Changed - fix(site): Small adjustments color picker and add clear button search bar by [@​ericfennis](https://redirect.github.com/ericfennis) in [#​3851](https://redirect.github.com/lucide-icons/lucide/pull/3851) - feat(icons): added `stone` icon by [@​Alportan](https://redirect.github.com/Alportan) in [#​3850](https://redirect.github.com/lucide-icons/lucide/pull/3850) **Full Changelog**: ### [`v0.560.0`](https://redirect.github.com/lucide-icons/lucide/releases/tag/0.560.0): Version 0.560.0 [Compare Source](https://redirect.github.com/lucide-icons/lucide/compare/0.559.0...0.560.0) #### What's Changed - feat(icons): added `cannabis-off` icon by [@​NickVeles](https://redirect.github.com/NickVeles) in [#​3748](https://redirect.github.com/lucide-icons/lucide/pull/3748) #### New Contributors - [@​NickVeles](https://redirect.github.com/NickVeles) made their first contribution in [#​3748](https://redirect.github.com/lucide-icons/lucide/pull/3748) **Full Changelog**: ### [`v0.559.0`](https://redirect.github.com/lucide-icons/lucide/releases/tag/0.559.0): Version 0.559.0 [Compare Source](https://redirect.github.com/lucide-icons/lucide/compare/0.558.0...0.559.0) #### What's Changed - feat(icons): added `fishing-hook` icon by [@​7ender](https://redirect.github.com/7ender) in [#​3837](https://redirect.github.com/lucide-icons/lucide/pull/3837) #### New Contributors - [@​7ender](https://redirect.github.com/7ender) made their first contribution in [#​3837](https://redirect.github.com/lucide-icons/lucide/pull/3837) **Full Changelog**: ### [`v0.558.0`](https://redirect.github.com/lucide-icons/lucide/releases/tag/0.558.0): Version 0.558.0 [Compare Source](https://redirect.github.com/lucide-icons/lucide/compare/0.557.0...0.558.0) #### What's Changed - feat(icons): added `hd` icon by [@​jamiemlaw](https://redirect.github.com/jamiemlaw) in [#​2958](https://redirect.github.com/lucide-icons/lucide/pull/2958) **Full Changelog**: ### [`v0.557.0`](https://redirect.github.com/lucide-icons/lucide/releases/tag/0.557.0): Version 0.557.0 [Compare Source](https://redirect.github.com/lucide-icons/lucide/compare/0.556.0...0.557.0) #### What's Changed - fix(github/workflows/ci): fixes linting issues by [@​karsa-mistmere](https://redirect.github.com/karsa-mistmere) in [#​3858](https://redirect.github.com/lucide-icons/lucide/pull/3858) - fix(icons): changed `memory-stick` icon by [@​karsa-mistmere](https://redirect.github.com/karsa-mistmere) in [#​3017](https://redirect.github.com/lucide-icons/lucide/pull/3017) - fix(icons): changed `microchip` icon by [@​karsa-mistmere](https://redirect.github.com/karsa-mistmere) in [#​3018](https://redirect.github.com/lucide-icons/lucide/pull/3018) - chore(repo): Update Node version and overal cleanup by [@​ericfennis](https://redirect.github.com/ericfennis) in [#​3861](https://redirect.github.com/lucide-icons/lucide/pull/3861) - fix(icons): changed `paint-bucket` icon by [@​jguddas](https://redirect.github.com/jguddas) in [#​3865](https://redirect.github.com/lucide-icons/lucide/pull/3865) - fix(icons): changed `brush-cleaning` icon by [@​jguddas](https://redirect.github.com/jguddas) in [#​3863](https://redirect.github.com/lucide-icons/lucide/pull/3863) - fix(icons): Swap `thumbs-up` `thumbs-down` paths to fix fill issue by [@​theianjones](https://redirect.github.com/theianjones) in [#​3873](https://redirect.github.com/lucide-icons/lucide/pull/3873) - fix(icons): changed `tickets` icon by [@​karsa-mistmere](https://redirect.github.com/karsa-mistmere) in [#​3859](https://redirect.github.com/lucide-icons/lucide/pull/3859) - feat(icons): added `layers-plus` icon by [@​juanisidoro](https://redirect.github.com/juanisidoro) in [#​3367](https://redirect.github.com/lucide-icons/lucide/pull/3367) - docs(dev): Fix code sample for vanilla JS by [@​wavebeem](https://redirect.github.com/wavebeem) in [#​3836](https://redirect.github.com/lucide-icons/lucide/pull/3836) - feat(icons): add `search-error` icon by [@​Veatec22](https://redirect.github.com/Veatec22) in [#​3292](https://redirect.github.com/lucide-icons/lucide/pull/3292) - feat(icons): Add `cloud-sync` and `cloud-backup` by [@​ericfennis](https://redirect.github.com/ericfennis) in [#​3466](https://redirect.github.com/lucide-icons/lucide/pull/3466) - feat(icons): added `circle-pile` icon by [@​nathan-de-pachtere](https://redirect.github.com/nathan-de-pachtere) in [#​3681](https://redirect.github.com/lucide-icons/lucide/pull/3681) - feat(icons): added `balloon` icon by [@​peteruithoven](https://redirect.github.com/peteruithoven) in [#​2519](https://redirect.github.com/lucide-icons/lucide/pull/2519) #### New Contributors - [@​theianjones](https://redirect.github.com/theianjones) made their first contribution in [#​3873](https://redirect.github.com/lucide-icons/lucide/pull/3873) - [@​juanisidoro](https://redirect.github.com/juanisidoro) made their first contribution in [#​3367](https://redirect.github.com/lucide-icons/lucide/pull/3367) - [@​wavebeem](https://redirect.github.com/wavebeem) made their first contribution in [#​3836](https://redirect.github.com/lucide-icons/lucide/pull/3836) - [@​Veatec22](https://redirect.github.com/Veatec22) made their first contribution in [#​3292](https://redirect.github.com/lucide-icons/lucide/pull/3292) **Full Changelog**: ### [`v0.556.0`](https://redirect.github.com/lucide-icons/lucide/releases/tag/0.556.0): Version 0.556.0 [Compare Source](https://redirect.github.com/lucide-icons/lucide/compare/0.555.0...0.556.0) #### What's Changed - feat(icon): add `book-search` icon ([#​3573](https://redirect.github.com/lucide-icons/lucide/issues/3573)) by [@​Muhammad-Aqib-Bashir](https://redirect.github.com/Muhammad-Aqib-Bashir) in [#​3580](https://redirect.github.com/lucide-icons/lucide/pull/3580) - chore(dependencies): Update dependencies by [@​ericfennis](https://redirect.github.com/ericfennis) in [#​3809](https://redirect.github.com/lucide-icons/lucide/pull/3809) - ci(workflows): Enable trusted publishing in release by [@​ericfennis](https://redirect.github.com/ericfennis) in [#​3808](https://redirect.github.com/lucide-icons/lucide/pull/3808) - feat(icons): added `scooter` icon by [@​Ahmed-Dghaies](https://redirect.github.com/Ahmed-Dghaies) in [#​3818](https://redirect.github.com/lucide-icons/lucide/pull/3818) - fix(icons): changed `plug` icon by [@​jamiemlaw](https://redirect.github.com/jamiemlaw) in [#​3841](https://redirect.github.com/lucide-icons/lucide/pull/3841) - fix(icons): changed `thermometer-sun` icon by [@​jguddas](https://redirect.github.com/jguddas) in [#​3773](https://redirect.github.com/lucide-icons/lucide/pull/3773) - fix(icons): Shrink square-scissors icons to match optical volume by [@​eden881](https://redirect.github.com/eden881) in [#​3603](https://redirect.github.com/lucide-icons/lucide/pull/3603) - feat(preview-comment): add symmetry preview by [@​jguddas](https://redirect.github.com/jguddas) in [#​3823](https://redirect.github.com/lucide-icons/lucide/pull/3823) - feat(icons): added `estimated-weight` icon by [@​nathan-de-pachtere](https://redirect.github.com/nathan-de-pachtere) in [#​3822](https://redirect.github.com/lucide-icons/lucide/pull/3822) - fix(icons): changed `flashlight` icons by [@​jamiemlaw](https://redirect.github.com/jamiemlaw) in [#​3843](https://redirect.github.com/lucide-icons/lucide/pull/3843) - fix(icons): changed `bubbles` icon by [@​jguddas](https://redirect.github.com/jguddas) in [#​3774](https://redirect.github.com/lucide-icons/lucide/pull/3774) - feat(site): add brand stop words to icon search by [@​karsa-mistmere](https://redirect.github.com/karsa-mistmere) in [#​3824](https://redirect.github.com/lucide-icons/lucide/pull/3824) - feat(icons): added `van` icon by [@​Ahmed-Dghaies](https://redirect.github.com/Ahmed-Dghaies) in [#​3821](https://redirect.github.com/lucide-icons/lucide/pull/3821) #### New Contributors - [@​Muhammad-Aqib-Bashir](https://redirect.github.com/Muhammad-Aqib-Bashir) made their first contribution in [#​3580](https://redirect.github.com/lucide-icons/lucide/pull/3580) - [@​Ahmed-Dghaies](https://redirect.github.com/Ahmed-Dghaies) made their first contribution in [#​3818](https://redirect.github.com/lucide-icons/lucide/pull/3818) - [@​eden881](https://redirect.github.com/eden881) made their first contribution in [#​3603](https://redirect.github.com/lucide-icons/lucide/pull/3603) - [@​nathan-de-pachtere](https://redirect.github.com/nathan-de-pachtere) made their first contribution in [#​3822](https://redirect.github.com/lucide-icons/lucide/pull/3822) **Full Changelog**: ### [`v0.555.0`](https://redirect.github.com/lucide-icons/lucide/releases/tag/0.555.0): Version 0.555.0 [Compare Source](https://redirect.github.com/lucide-icons/lucide/compare/0.554.0...0.555.0) #### What's Changed - fix(icons): changed `calendars` icon by [@​jguddas](https://redirect.github.com/jguddas) in [#​3795](https://redirect.github.com/lucide-icons/lucide/pull/3795) - fix(docs): correct package name and description for Flutter and Lustre package ([#​3701](https://redirect.github.com/lucide-icons/lucide/issues/3701)) by [@​epifaniofrancisco](https://redirect.github.com/epifaniofrancisco) in [#​3703](https://redirect.github.com/lucide-icons/lucide/pull/3703) - feat(angular): Angular V21 Support by [@​JeevanMahesha](https://redirect.github.com/JeevanMahesha) in [#​3807](https://redirect.github.com/lucide-icons/lucide/pull/3807) - chore(metadata): Adjust navigation category by [@​ericfennis](https://redirect.github.com/ericfennis) in [#​3461](https://redirect.github.com/lucide-icons/lucide/pull/3461) - feat(icons): Add `waves-arrow-up` and `waves-arrow-down` by [@​ericfennis](https://redirect.github.com/ericfennis) in [#​3463](https://redirect.github.com/lucide-icons/lucide/pull/3463) - fix(icons): changed `scale` icon by [@​jamiemlaw](https://redirect.github.com/jamiemlaw) in [#​3800](https://redirect.github.com/lucide-icons/lucide/pull/3800) - feat(icons): added `form` icon by [@​jguddas](https://redirect.github.com/jguddas) in [#​3558](https://redirect.github.com/lucide-icons/lucide/pull/3558) **Full Changelog**: ### [`v0.554.0`](https://redirect.github.com/lucide-icons/lucide/releases/tag/0.554.0): Version 0.554.0 [Compare Source](https://redirect.github.com/lucide-icons/lucide/compare/0.553.0...0.554.0) #### What's Changed - fix(icons): Rename fingerprint icon to fingerprint-pattern by [@​ericfennis](https://redirect.github.com/ericfennis) in [#​3767](https://redirect.github.com/lucide-icons/lucide/pull/3767) - feat(docs): added lucide-rails third-party package by [@​theiereman](https://redirect.github.com/theiereman) in [#​3769](https://redirect.github.com/lucide-icons/lucide/pull/3769) - fix(icons): changed `ampersand` icon by [@​jguddas](https://redirect.github.com/jguddas) in [#​3771](https://redirect.github.com/lucide-icons/lucide/pull/3771) - fix(icons): changed `folder-git-2` icon by [@​jguddas](https://redirect.github.com/jguddas) in [#​3790](https://redirect.github.com/lucide-icons/lucide/pull/3790) - fix(icons): update `anchor` icon by [@​jamiemlaw](https://redirect.github.com/jamiemlaw) in [#​2523](https://redirect.github.com/lucide-icons/lucide/pull/2523) - feat(icons): added `calendars` icon by [@​jguddas](https://redirect.github.com/jguddas) in [#​3788](https://redirect.github.com/lucide-icons/lucide/pull/3788) #### Breaking change For `lucide-react` and `lucide-solid`, imports for `Fingerprint` icon are changed to `FingerprintPattern`. ##### Lucide React ```diff - import { Fingerprint } from "lucide-react"; + import { FingerprintPattern } from "lucide-react"; ``` ##### Lucide Solid ```diff - import { Fingerprint } from "lucide/solid"; + import { FingerprintPattern } from "lucide/solid"; // Or - import Fingerprint from "lucide/solid/icons/fingerprint"; + import FingerprintPattern from "lucide/solid/icons/fingerprint-pattern"; ``` #### New Contributors - [@​theiereman](https://redirect.github.com/theiereman) made their first contribution in [#​3769](https://redirect.github.com/lucide-icons/lucide/pull/3769) **Full Changelog**:
--- ### Configuration 📅 **Schedule**: (in timezone Etc/UTC) - Branch creation - Only on Sunday and Saturday (`* * * * 0,6`) - Between 12:00 AM and 12:59 PM, only on Monday (`* 0-12 * * 1`) - Between 09:00 PM and 11:59 PM, Monday through Friday (`* 21-23 * * 1-5`) - Between 12:00 AM and 04:59 AM, Tuesday through Saturday (`* 0-4 * * 2-6`) - Automerge - Only on Sunday and Saturday (`* * * * 0,6`) - Between 12:00 AM and 12:59 PM, only on Monday (`* 0-12 * * 1`) - Between 10:00 PM and 11:59 PM, Monday through Friday (`* 22-23 * * 1-5`) - Between 12:00 AM and 04:59 AM, Tuesday through Saturday (`* 0-4 * * 2-6`) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/TryGhost/Ghost). Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- apps/admin-x-settings/package.json | 2 +- apps/shade/package.json | 2 +- pnpm-lock.yaml | 14 +++++++------- 3 files changed, 9 insertions(+), 9 deletions(-) diff --git a/apps/admin-x-settings/package.json b/apps/admin-x-settings/package.json index 720fe23af52..9d358ab52ef 100644 --- a/apps/admin-x-settings/package.json +++ b/apps/admin-x-settings/package.json @@ -52,7 +52,7 @@ "@tryghost/timezone-data": "0.4.18", "@uiw/react-codemirror": "4.25.2", "clsx": "2.1.1", - "lucide-react": "0.553.0", + "lucide-react": "0.577.0", "mingo": "2.5.3", "react": "18.3.1", "react-dom": "18.3.1", diff --git a/apps/shade/package.json b/apps/shade/package.json index 79314bd1413..e37e01c2963 100644 --- a/apps/shade/package.json +++ b/apps/shade/package.json @@ -142,7 +142,7 @@ "clsx": "2.1.1", "cmdk": "1.1.1", "color": "^5.0.3", - "lucide-react": "0.553.0", + "lucide-react": "0.577.0", "moment-timezone": "^0.5.48", "next-themes": "0.4.6", "react": "18.3.1", diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 49c7f3e5471..92c039bc7f6 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -613,8 +613,8 @@ importers: specifier: 2.1.1 version: 2.1.1 lucide-react: - specifier: 0.553.0 - version: 0.553.0(react@18.3.1) + specifier: 0.577.0 + version: 0.577.0(react@18.3.1) mingo: specifier: 2.5.3 version: 2.5.3 @@ -1119,8 +1119,8 @@ importers: specifier: ^5.0.3 version: 5.0.3 lucide-react: - specifier: 0.553.0 - version: 0.553.0(react@18.3.1) + specifier: 0.577.0 + version: 0.577.0(react@18.3.1) moment-timezone: specifier: 0.5.45 version: 0.5.45 @@ -17458,8 +17458,8 @@ packages: ltgt@2.2.1: resolution: {integrity: sha512-AI2r85+4MquTw9ZYqabu4nMwy9Oftlfa/e/52t9IjtfG+mGBbTNdAoZ3RQKLHR6r0wQnwZnPIEh/Ya6XTWAKNA==} - lucide-react@0.553.0: - resolution: {integrity: sha512-BRgX5zrWmNy/lkVAe0dXBgd7XQdZ3HTf+Hwe3c9WK6dqgnj9h+hxV+MDncM88xDWlCq27+TKvHGE70ViODNILw==} + lucide-react@0.577.0: + resolution: {integrity: sha512-4LjoFv2eEPwYDPg/CUdBJQSDfPyzXCRrVW1X7jrx/trgxnxkHFjnVZINbzvzxjN70dxychOfg+FTYwBiS3pQ5A==} peerDependencies: react: ^16.5.1 || ^17.0.0 || ^18.0.0 || ^19.0.0 @@ -43055,7 +43055,7 @@ snapshots: ltgt@2.2.1: {} - lucide-react@0.553.0(react@18.3.1): + lucide-react@0.577.0(react@18.3.1): dependencies: react: 18.3.1