deps(npm)(deps): bump the js-non-major group with 10 updates#8
Closed
dependabot[bot] wants to merge 1 commit into
Closed
deps(npm)(deps): bump the js-non-major group with 10 updates#8dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the js-non-major group with 10 updates: | Package | From | To | | --- | --- | --- | | [axios](https://github.com/axios/axios) | `1.15.2` | `1.16.1` | | [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.2.5` | `19.2.6` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.14` | `19.2.15` | | [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.2.5` | `19.2.6` | | [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `7.14.2` | `7.15.1` | | [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `6.0.1` | `6.0.2` | | [eslint](https://github.com/eslint/eslint) | `10.2.1` | `10.4.0` | | [globals](https://github.com/sindresorhus/globals) | `17.5.0` | `17.6.0` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.59.1` | `8.59.4` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.0.10` | `8.0.14` | Updates `axios` from 1.15.2 to 1.16.1 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v1.15.2...v1.16.1) Updates `react` from 19.2.5 to 19.2.6 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.6/packages/react) Updates `@types/react` from 19.2.14 to 19.2.15 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `react-dom` from 19.2.5 to 19.2.6 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.6/packages/react-dom) Updates `react-router-dom` from 7.14.2 to 7.15.1 - [Release notes](https://github.com/remix-run/react-router/releases) - [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-dom/CHANGELOG.md) - [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.15.1/packages/react-router-dom) Updates `@types/react` from 19.2.14 to 19.2.15 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `@vitejs/plugin-react` from 6.0.1 to 6.0.2 - [Release notes](https://github.com/vitejs/vite-plugin-react/releases) - [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.0.2/packages/plugin-react) Updates `eslint` from 10.2.1 to 10.4.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v10.2.1...v10.4.0) Updates `globals` from 17.5.0 to 17.6.0 - [Release notes](https://github.com/sindresorhus/globals/releases) - [Commits](sindresorhus/globals@v17.5.0...v17.6.0) Updates `typescript-eslint` from 8.59.1 to 8.59.4 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.59.4/packages/typescript-eslint) Updates `vite` from 8.0.10 to 8.0.14 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.0.14/packages/vite) --- updated-dependencies: - dependency-name: axios dependency-version: 1.16.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: js-non-major - dependency-name: react dependency-version: 19.2.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: js-non-major - dependency-name: "@types/react" dependency-version: 19.2.15 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: js-non-major - dependency-name: react-dom dependency-version: 19.2.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: js-non-major - dependency-name: react-router-dom dependency-version: 7.15.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: js-non-major - dependency-name: "@types/react" dependency-version: 19.2.15 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: js-non-major - dependency-name: "@vitejs/plugin-react" dependency-version: 6.0.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: js-non-major - dependency-name: eslint dependency-version: 10.4.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: js-non-major - dependency-name: globals dependency-version: 17.6.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: js-non-major - dependency-name: typescript-eslint dependency-version: 8.59.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: js-non-major - dependency-name: vite dependency-version: 8.0.14 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: js-non-major ... Signed-off-by: dependabot[bot] <support@github.com>
Contributor
Author
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
Collaborator
|
Fechando: o Dependabot lê |
Contributor
Author
|
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests. To ignore these dependencies, configure ignore rules in dependabot.yml |
dependabot
Bot
deleted the
dependabot/npm_and_yarn/js-non-major-98f54c2d83
branch
GabeMarques-Intetsu
added a commit
that referenced
this pull request
Jun 4, 2026
Materializa as 8 constantes do algorithms specialist (invariantes #8, #9, #10, #12) e da DESIGN §2.4 (paginação) como settings configuráveis por env var. Nada literal espalhado em código. Constantes adicionadas (config/settings/base.py): - SEARCH_RECENCY_HALF_LIFE_DAYS=60 (Inv 10) - SEARCH_MAX_TOKENS=8 (Inv 8 — defesa A2) - SEARCH_MIN_Q_LENGTH=2, SEARCH_MAX_Q_LENGTH=200 - SEARCH_MAX_PAGINATION_DEPTH=50 (Inv 9 — defesa A3) - SEARCH_DEFAULT_PER_PAGE=20, SEARCH_MAX_PER_PAGE=50 - SEARCH_CANDIDATES_LIMIT=500 (M1 — CTE narrowing) - SEARCH_STATEMENT_TIMEOUT_MS=500 (Inv 12 — defesa T30.4.X9) - SEARCH_CACHE_TTL_SECONDS=300 - SEARCH_FEATURE_ENABLED=False (T30.1.X4 — cutover deliberado) - SEARCH_CURSOR_HMAC_SECRET (fallback SECRET_KEY em dev) Throttle scopes registrados em REST_FRAMEWORK.DEFAULT_THROTTLE_RATES (base + development.py): search_anon=30/min, search_user=60/min, search_global=500/min (ADR-024 + ADR-036). Dev relaxa para 10000/hour. test_settings.py: 11 testes verificando cada constante (defesa contra regressão silenciosa em refactor de settings). Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
GabeMarques-Intetsu
added a commit
that referenced
this pull request
Jun 4, 2026
Fecha o endpoint /api/v1/search/articles/ — Fase 2 backend leitura completa. Tasks: T30.1.8, T30.1.9, T30.1.X4 (feature flag), T30.4.X4 (cache key sha256+auth_tier). apps/search/serializers.py: - SearchQuerySerializer: valida query string -> QuerySpec (frozen DTO). Whitelist H-01: q deve casar ^[a-zA-Z0-9À-ſ\s\-]+$ (rejeita HTML chars ANTES de bater no DB). 2 ≤ len ≤ 200. per_page ≤ 50. validate() cruza de ≤ ate. to_query_spec() materializa DTO. - SearchResultItemSerializer + SearchResultPageSerializer: projeção JSON do response shape ADR-023 (id, title, slug, excerpt, published_at, author, category, cover_url, score, query_terms_expanded, took_ms). apps/search/views.py — SearchArticlesView (APIView, GET only, AllowAny): 1. Feature flag T30.1.X4: SEARCH_FEATURE_ENABLED=False -> 503 + Retry-After: 60 (cutover deliberado em prod). 2. SearchQuerySerializer.is_valid() -> 400 com erros estruturados. 3. Cache HIT/MISS via build_cache_key(spec, auth_tier) — H-04 ADR-037 garante isolamento anon vs user. 4. Service: InvalidCursorError -> 400 cursor_invalid (Inv #5); TooManyTokensError -> 400 query_too_complex (Inv #8). 5. Headers: Cache-Control public/max-age=60/swr=300, Vary: Authorization+ Accept-Encoding (separa CDN entre tiers), X-Robots-Tag noindex (T30.4.X11/L-05), X-Cache HIT|MISS. - Throttles: SearchAnonThrottle (30/min IP) + SearchUserThrottle (60/min user) + SearchGlobalThrottle (500/min global, defesa H-03 botnet). apps/search/urls.py + config/urls.py: - path('api/v1/search/', include('apps.search.urls')) - path('articles/', SearchArticlesView.as_view(), name='articles') Extensível: /search/comments/, /search/suggest/ futuros. Comment-locks anti-regressão: response function-pure de (q, filters, cursor) — NÃO adicionar campos por-usuário sem rever ADR-037 (H-04 cross-tier leak). test_views.py: 16 testes via DRF APIClient cobrindo: - Feature flag 503 + Retry-After - Validação serializer (q missing/short/long/HTML chars, per_page > 50, date range invertido) -> 400 - Cursor inválido -> 400 cursor_invalid (Inv #5) - 9 tokens -> 400 query_too_complex (Inv #8) - 200 OK happy path com response shape completo (Inv #11 honrado) - Stopwords-only -> 200 results=[] (Inv #7 early-exit) - Headers Cache-Control + Vary (H-04 CDN) + X-Robots-Tag (T30.4.X11) - Cache MISS -> HIT (segundo request bate em cache) - H-04 critical: anon e user com MESMA query produzem cache keys DIFERENTES (anon MISS-HIT-HIT; user MISS na própria chave separada) Smoke manual: - SEARCH_FEATURE_ENABLED=True + GET q=kpop -> 200 OK com headers OK - SEARCH_FEATURE_ENABLED=False + GET q=kpop -> 503 + Retry-After: 60 Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the js-non-major group with 10 updates:
1.15.21.16.119.2.519.2.619.2.1419.2.1519.2.519.2.67.14.27.15.16.0.16.0.210.2.110.4.017.5.017.6.08.59.18.59.48.0.108.0.14Updates
axiosfrom 1.15.2 to 1.16.1Release notes
Sourced from axios's releases.
... (truncated)
Changelog
Sourced from axios's changelog.
... (truncated)
Commits
1337d6bchore(release): prepare release 1.16.1 (#10877)858a790fix: remove all caches (#10882)34adfd9revert: "fix: support URL object as config.url input (#10866)" (#10874)847d89bfix: support URL object as config.url input (#10866)4094886fix(progress): guard malformed XHR upload events (#10868)44f0c5bchore: change sponsorship link and add Twicsy advertisement (#10869)64e1095chore: update PR and issue template to use h2 (#10865)3e6b4e1fix: error unexpected token in fetch JS compatibility issue with Webpack 4 (#...c4453bafix: add the ability to add additional sponsors to the process sponsors scrip...caa00a9fix: https data in cleartext to proxy (#10858)Updates
reactfrom 19.2.5 to 19.2.6Release notes
Sourced from react's releases.
Commits
eaf3e95Version 19.2.6Updates
@types/reactfrom 19.2.14 to 19.2.15Commits
Updates
react-domfrom 19.2.5 to 19.2.6Release notes
Sourced from react-dom's releases.
Commits
eaf3e95Version 19.2.6Updates
react-router-domfrom 7.14.2 to 7.15.1Changelog
Sourced from react-router-dom's changelog.
Commits
587d08fRelease v7.15.1 (#15038)97c8de7Release v7.15.0 (#15018)Updates
@types/reactfrom 19.2.14 to 19.2.15Commits
Updates
@vitejs/plugin-reactfrom 6.0.1 to 6.0.2Release notes
Sourced from @vitejs/plugin-react's releases.
Changelog
Sourced from @vitejs/plugin-react's changelog.
Commits
6535b55release: plugin-react@6.0.2bf0e43bfeat(react): whitelist debugging-options (#1189)3bd1f08feat: use carets for rolldown versions (#1216)2b8df67fix(deps): update all non-major dependencies (#1218)8fa9619fix(deps): update react 19.2.6 (#1211)a4296adfix(deps): update all non-major dependencies (#1209)323ccd7fix(deps): update all non-major dependencies (#1196)a7506e1chore(deps): update vite 8.0.10 (#1198)02cff2afix(deps): update all non-major dependencies (#1184)4b9c890fix(deps): update react 19.2.5 (#1181)Updates
eslintfrom 10.2.1 to 10.4.0Release notes
Sourced from eslint's releases.
... (truncated)
Commits
452c40110.4.0b6417e8Build: changelog update for 10.4.06616856chore: upgrade knip to v6 (#20875)d13b084ci: ensure auto-created PRs run CI (#20860)7e52a71docs: add mention of@eslint-react/eslint-plugin(#20869)e71c7afci: bump pnpm/action-setup from 6.0.5 to 6.0.7 (#20862)544c0c3fix: escape code path DOT labels in debug output (#20866)db3468bdocs: tweak wording around ambiguous CJS-vs-ESM config (#20865)d84393dtest: add unit tests for SuppressionsService.applySuppressions() (#20863)9084664docs: Update READMEUpdates
globalsfrom 17.5.0 to 17.6.0Release notes
Sourced from globals's releases.
Commits
6b1587017.6.000a4dd9Update globals (2026-05-01) (#343)Updates
typescript-eslintfrom 8.59.1 to 8.59.4Release notes
Sourced from typescript-eslint's releases.
Changelog
Sourced from typescript-eslint's changelog.
Commits
ca6ca14chore(release): publish 8.59.44b927c6fix(typescript-eslint): export Compatible* types from typescript-eslint to re...48e13c0chore(release): publish 8.59.344f9625chore(deps): update vitest monorepo to v4.1.5 (#12307)2ec35f1chore(release): publish 8.59.2Updates
vitefrom 8.0.10 to 8.0.14Release notes
Sourced from vite's releases.
Changelog
Sourced from vite's changelog.
... (truncated)
Commits
c917f1erelease: v8.0.145d94d1bfix(html): handle trailing slash paths in transformIndexHtml (#22480)98b8163fix(deps): update all non-major dependencies (#22471)96efc88feat: update rolldown to 1.0.2 (#22484)ebf39a0test(css): sass does not use main field (#22449)0ae2844refactor(glob): do not rewrite import path for absolute base (#22310)7cb728echore(deps): update rolldown-related dependencies (#22470)b3132dafix(optimizer): pass oxc jsx options to transformSync in dependency scan ...e8e9a34fix(dev): handle errors when sending messages to vite server (#22450)2c69495chore: remove irrelevant commits from changelogDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions