Drop-OSS/drop
1
0
Fork 0
mirror of https://github.com/Drop-OSS/drop.git synced 2026-07-21 08:06:16 -04:00
Code Issues 77 Packages Projects Releases 10 Wiki Activity

[PR #409] chore(deps): bump nitropack from 2.12.9 to 2.13.4 in /desktop/main #395

New Issue
Open
opened 2026-06-05 14:22:41 -04:00 by yindo · 0 comments
yindo commented 2026-06-05 14:22:41 -04:00
Owner
Copy Link
Copy Source

📋 Pull Request Information

Original PR: https://github.com/Drop-OSS/drop/pull/409
Author: @dependabot[bot]
Created: 5/8/2026
Status: 🔄 Open

Base: develop ← Head: dependabot/npm_and_yarn/desktop/main/nitropack-2.13.4

📝 Commits (1)

  • 869ca2d chore(deps): bump nitropack from 2.12.9 to 2.13.4 in /desktop/main

📊 Changes

1 file changed (+47 additions, -4 deletions)

View changed files

📝 desktop/main/pnpm-lock.yaml (+47 -4)

📄 Description

Bumps nitropack from 2.12.9 to 2.13.4.

Release notes

Sourced from nitropack's releases.

v2.13.4

compare changes

[!IMPORTANT] This release patches two medium-severity vulnerabilities in proxy and redirect route rules. Users relying on either are strongly encouraged to upgrade. See GHSA-5w89-w975-hf9q and GHSA-9phm-9p8f-hw5m for details.

🚀 Enhancements

  • Add version meta (#4194)

🩹 Fixes

  • route-rules: Reject out-of-scope requests (#4223)
  • route-rules: Prevent open redirect via protocol-relative url bypass (8d6bfb0b)

🏡 Chore

❤️ Contributors

v2.13.3

compare changes

📦 Dependency Updates

Package From To
httpxy ^0.3.1 ^0.5.0
h3 ^1.15.9 ^1.15.10
esbuild ^0.27.4 ^0.27.5
rollup ^4.59.0 ^4.60.1
@vercel/nft ^1.4.0 ^1.5.0
c12 ^3.3.3 ^3.3.4
citty ^0.2.1 ^0.2.2
defu ^6.1.4 ^6.1.6
globby ^16.1.1 ^16.2.0
listhen ^1.9.0 ^1.9.1
unstorage ^1.17.4 ^1.17.5
cookie-es ^2.0.0 ^2.0.1
youch ^4.1.0 ^4.1.1

v2.13.2

compare changes

[!NOTE] This release upgrades h3 to latest 1.15.9 which contains security fixes.

🩹 Fixes

... (truncated)

Commits
  • f92e684 chore: apply automated updates
  • 112e215 chore: basic dist-diff script
  • 932f628 chore: ignore vite7 from pnpm outdated
  • 705069f chore: update deps
  • bc1dd9d fix(route-rules): prevent open redirect via protocol-relative url bypass (#4236)
  • 6edbf84 chore(deps): update all non-major dependencies (#4227)
  • feebdc1 refactor: use built-in escapeRegExp util (#4109)
  • f8cf6cc feat(tracing): enable tracing channels for unstorage (#4226)
  • 0bbbb79 docs: improve jsdocs (#4199)
  • d0d8d91 types(vite): make experimental.vite optional (#4225)
  • Additional commits viewable in compare view

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/Drop-OSS/drop/pull/409 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 5/8/2026 **Status:** 🔄 Open **Base:** `develop` ← **Head:** `dependabot/npm_and_yarn/desktop/main/nitropack-2.13.4` --- ### 📝 Commits (1) - [`869ca2d`](https://github.com/Drop-OSS/drop/commit/869ca2d1d1467243ad89127b7c18a72ec24468b8) chore(deps): bump nitropack from 2.12.9 to 2.13.4 in /desktop/main ### 📊 Changes **1 file changed** (+47 additions, -4 deletions) <details> <summary>View changed files</summary> 📝 `desktop/main/pnpm-lock.yaml` (+47 -4) </details> ### 📄 Description Bumps [nitropack](https://github.com/nitrojs/nitro) from 2.12.9 to 2.13.4. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/nitrojs/nitro/releases">nitropack's releases</a>.</em></p> <blockquote> <h2>v2.13.4</h2> <p><a href="https://github.com/nitrojs/nitro/compare/v2.13.2...v2.13.4">compare changes</a></p> <blockquote> <p>[!IMPORTANT] This release patches two medium-severity vulnerabilities in <code>proxy</code> and <code>redirect</code> route rules. Users relying on either are strongly encouraged to upgrade. See <a href="https://github.com/nitrojs/nitro/security/advisories/GHSA-5w89-w975-hf9q">GHSA-5w89-w975-hf9q</a> and <a href="https://github.com/nitrojs/nitro/security/advisories/GHSA-9phm-9p8f-hw5m">GHSA-9phm-9p8f-hw5m</a> for details.</p> </blockquote> <h3>🚀 Enhancements</h3> <ul> <li>Add version meta (<a href="https://redirect.github.com/nitrojs/nitro/pull/4194">#4194</a>)</li> </ul> <h3>🩹 Fixes</h3> <ul> <li><strong>route-rules:</strong> Reject out-of-scope requests (<a href="https://redirect.github.com/nitrojs/nitro/pull/4223">#4223</a>)</li> <li><strong>route-rules:</strong> Prevent open redirect via protocol-relative url bypass (<a href="https://github.com/nitrojs/nitro/commit/8d6bfb0b">8d6bfb0b</a>)</li> </ul> <h3>🏡 Chore</h3> <h3>❤️ Contributors</h3> <ul> <li>Pooya Parsa (<a href="https://github.com/pi0"><code>@​pi0</code></a>)</li> <li>Rihan Arfan (<a href="https://github.com/RihanArfan"><code>@​RihanArfan</code></a>)</li> </ul> <h2>v2.13.3</h2> <p><a href="https://github.com/nitrojs/nitro/compare/v2.13.2...v2.13.3">compare changes</a></p> <h3>📦 Dependency Updates</h3> <table> <thead> <tr> <th>Package</th> <th>From</th> <th>To</th> </tr> </thead> <tbody> <tr> <td><code>httpxy</code></td> <td>^0.3.1</td> <td><strong>^0.5.0</strong></td> </tr> <tr> <td><code>h3</code></td> <td>^1.15.9</td> <td>^1.15.10</td> </tr> <tr> <td><code>esbuild</code></td> <td>^0.27.4</td> <td>^0.27.5</td> </tr> <tr> <td><code>rollup</code></td> <td>^4.59.0</td> <td>^4.60.1</td> </tr> <tr> <td><code>@vercel/nft</code></td> <td>^1.4.0</td> <td>^1.5.0</td> </tr> <tr> <td><code>c12</code></td> <td>^3.3.3</td> <td>^3.3.4</td> </tr> <tr> <td><code>citty</code></td> <td>^0.2.1</td> <td>^0.2.2</td> </tr> <tr> <td><code>defu</code></td> <td>^6.1.4</td> <td>^6.1.6</td> </tr> <tr> <td><code>globby</code></td> <td>^16.1.1</td> <td>^16.2.0</td> </tr> <tr> <td><code>listhen</code></td> <td>^1.9.0</td> <td>^1.9.1</td> </tr> <tr> <td><code>unstorage</code></td> <td>^1.17.4</td> <td>^1.17.5</td> </tr> <tr> <td><code>cookie-es</code></td> <td>^2.0.0</td> <td>^2.0.1</td> </tr> <tr> <td><code>youch</code></td> <td>^4.1.0</td> <td>^4.1.1</td> </tr> </tbody> </table> <h2>v2.13.2</h2> <p><a href="https://github.com/nitrojs/nitro/compare/v2.13.1...v2.13.2">compare changes</a></p> <blockquote> <p>[!NOTE] This release upgrades h3 to latest <code>1.15.9</code> which contains security fixes.</p> </blockquote> <h3>🩹 Fixes</h3> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/nitrojs/nitro/commit/f92e684736169f8b1d563fd6154060643d05f4bb"><code>f92e684</code></a> chore: apply automated updates</li> <li><a href="https://github.com/nitrojs/nitro/commit/112e2155f903f27ca1595e5d3e9734231cd8d75e"><code>112e215</code></a> chore: basic dist-diff script</li> <li><a href="https://github.com/nitrojs/nitro/commit/932f62856c6f8a6db589473417307a1f9d7738e7"><code>932f628</code></a> chore: ignore vite7 from pnpm outdated</li> <li><a href="https://github.com/nitrojs/nitro/commit/705069fef5b632e469ad15e07663b61d21c4d036"><code>705069f</code></a> chore: update deps</li> <li><a href="https://github.com/nitrojs/nitro/commit/bc1dd9dcd76ec08cbc029024edb2622d256da1dc"><code>bc1dd9d</code></a> fix(route-rules): prevent open redirect via protocol-relative url bypass (<a href="https://redirect.github.com/nitrojs/nitro/issues/4236">#4236</a>)</li> <li><a href="https://github.com/nitrojs/nitro/commit/6edbf84906a5d57df044ebfdbf6b9628cb74bf90"><code>6edbf84</code></a> chore(deps): update all non-major dependencies (<a href="https://redirect.github.com/nitrojs/nitro/issues/4227">#4227</a>)</li> <li><a href="https://github.com/nitrojs/nitro/commit/feebdc1e4b8624ab743e6f90af9bb047eb9056ca"><code>feebdc1</code></a> refactor: use built-in escapeRegExp util (<a href="https://redirect.github.com/nitrojs/nitro/issues/4109">#4109</a>)</li> <li><a href="https://github.com/nitrojs/nitro/commit/f8cf6ccc9e18d015b6c5bf1bc59d5510189d8bd1"><code>f8cf6cc</code></a> feat(tracing): enable tracing channels for unstorage (<a href="https://redirect.github.com/nitrojs/nitro/issues/4226">#4226</a>)</li> <li><a href="https://github.com/nitrojs/nitro/commit/0bbbb798d743177dda2a2c283bab41b61181a6a1"><code>0bbbb79</code></a> docs: improve jsdocs (<a href="https://redirect.github.com/nitrojs/nitro/issues/4199">#4199</a>)</li> <li><a href="https://github.com/nitrojs/nitro/commit/d0d8d9119a5e76db6f47f99c97a6fec67e426ce8"><code>d0d8d91</code></a> types(vite): make <code>experimental.vite</code> optional (<a href="https://redirect.github.com/nitrojs/nitro/issues/4225">#4225</a>)</li> <li>Additional commits viewable in <a href="https://github.com/nitrojs/nitro/compare/v2.12.9...v2.13.4">compare view</a></li> </ul> </details> <br /> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
yindo added the pull-request label 2026-06-05 14:22:41 -04:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
bug
confirmed
duplicate
feature
feature
good first issue
needs-triage
pull-request
Mirrored from GitHub Pull Request
 qol
support
No Label pull-request
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
yindo
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: Drop-OSS/drop#395
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?