[PR #31186] chore(deps-dev): bump jsdom from 27.3.0 to 27.4.0 in /web #33129

Closed
opened 2026-02-21 20:52:42 -05:00 by yindo · 0 comments
Owner

Original Pull Request: https://github.com/langgenius/dify/pull/31186

State: closed
Merged: Yes


Bumps jsdom from 27.3.0 to 27.4.0.

Release notes

Sourced from jsdom's releases.

Version 27.4.0

  • Added TextEncoder and TextDecoder.
  • Improved decoding of HTML bytes by using the new @exodus/bytes package; it is now much more correct. (ChALkeR)
  • Improved decoding of XML bytes to use UTF-8 more often, instead of sniffing for <meta charset> or using the parent frame's encoding.
  • Fixed a memory leak when Ranges were used and then the elements referred to by those ranges were removed.
Changelog

Sourced from jsdom's changelog.

27.4.0

  • Added TextEncoder and TextDecoder.
  • Improved decoding of HTML bytes by using the new @exodus/bytes package; it is now much more correct. (ChALkeR)
  • Improved decoding of XML bytes to use UTF-8 more often, instead of sniffing for <meta charset> or using the parent frame's encoding.
  • Fixed a memory leak when Ranges were used and then the elements referred to by those ranges were removed.
Commits
  • 098d16d Version 27.4.0
  • 1cd029e Improve asciiLowercase/asciiUppercase performance
  • 83fcb62 Implement TextEncoder and TextDecoder; improve XML decoding
  • ddad97d Switch from iconv-lite to exodus/bytes for decoding
  • 25cb2a1 Use weak references for ranges
  • ed4f5ed Add currently-failing CSS regression tests
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
**Original Pull Request:** https://github.com/langgenius/dify/pull/31186 **State:** closed **Merged:** Yes --- Bumps [jsdom](https://github.com/jsdom/jsdom) from 27.3.0 to 27.4.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/jsdom/jsdom/releases">jsdom's releases</a>.</em></p> <blockquote> <h2>Version 27.4.0</h2> <ul> <li>Added <code>TextEncoder</code> and <code>TextDecoder</code>.</li> <li>Improved decoding of HTML bytes by using the new <a href="https://www.npmjs.com/package/@exodus/bytes"><code>@exodus/bytes</code></a> package; it is now much more correct. (ChALkeR)</li> <li>Improved decoding of XML bytes to use UTF-8 more often, instead of sniffing for <code>&lt;meta charset&gt;</code> or using the parent frame's encoding.</li> <li>Fixed a memory leak when <code>Range</code>s were used and then the elements referred to by those ranges were removed.</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/jsdom/jsdom/blob/main/Changelog.md">jsdom's changelog</a>.</em></p> <blockquote> <h2>27.4.0</h2> <ul> <li>Added <code>TextEncoder</code> and <code>TextDecoder</code>.</li> <li>Improved decoding of HTML bytes by using the new <a href="https://www.npmjs.com/package/@exodus/bytes"><code>@exodus/bytes</code></a> package; it is now much more correct. (ChALkeR)</li> <li>Improved decoding of XML bytes to use UTF-8 more often, instead of sniffing for <code>&lt;meta charset&gt;</code> or using the parent frame's encoding.</li> <li>Fixed a memory leak when <code>Range</code>s were used and then the elements referred to by those ranges were removed.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/jsdom/jsdom/commit/098d16d6b86c5f215d48658c3005cb54b1325603"><code>098d16d</code></a> Version 27.4.0</li> <li><a href="https://github.com/jsdom/jsdom/commit/1cd029efb72314840c46730d72f9684c60635c54"><code>1cd029e</code></a> Improve asciiLowercase/asciiUppercase performance</li> <li><a href="https://github.com/jsdom/jsdom/commit/83fcb627264def824fd80366b33c29ccb5c6dd01"><code>83fcb62</code></a> Implement TextEncoder and TextDecoder; improve XML decoding</li> <li><a href="https://github.com/jsdom/jsdom/commit/ddad97df73368768c5107e3d141b6bb994164c4d"><code>ddad97d</code></a> Switch from iconv-lite to exodus/bytes for decoding</li> <li><a href="https://github.com/jsdom/jsdom/commit/25cb2a1c2b2944ab218b347a602accb736cdaa92"><code>25cb2a1</code></a> Use weak references for ranges</li> <li><a href="https://github.com/jsdom/jsdom/commit/ed4f5ed66d0b5b3ee888389a27850fe17253c357"><code>ed4f5ed</code></a> Add currently-failing CSS regression tests</li> <li>See full diff in <a href="https://github.com/jsdom/jsdom/compare/27.3.0...27.4.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=jsdom&package-manager=npm_and_yarn&previous-version=27.3.0&new-version=27.4.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>
yindo added the pull-request label 2026-02-21 20:52:42 -05:00
yindo closed this issue 2026-02-21 20:52:43 -05:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: langgenius/dify#33129