Ilya Kreymer
80fbc448e3
deps: update to wabac.js 2.25.3 to fix WACZ loading bug ( #484 )
...
ci: update npm release action for npm authorized builds bump to 2.4.1
2026-02-12 00:35:40 -08:00
dependabot[bot]
e4fd230694
build(deps): bump lodash from 4.17.21 to 4.17.23 ( #478 )
...
Bumps [lodash](https://github.com/lodash/lodash ) from 4.17.21 to
4.17.23.
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-11 14:32:14 -08:00
dependabot[bot]
5921bc485c
build(deps-dev): bump webpack from 5.91.0 to 5.104.1 ( #480 )
...
Bumps [webpack](https://github.com/webpack/webpack ) from 5.91.0 to
5.104.1.
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-11 14:30:35 -08:00
Ilya Kreymer and dependabot[bot]
a5e7ec642f
dependency update for 2.24.0 ( #472 )
...
- update wabac to 2.25.2, playwright test to 1.57.0, electron to 39.2.6, other dependabot deps
---------
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-05 14:29:49 -08:00
Ilya Kreymer and Tessa Walsh
916b154688
Add resources download button + click to download picker in replay ( #469 )
...
Fixes #467
- Add a download button on the resource page for each entry to allow
downloading each resource no matter what type.
- Add a new 'click to download' image or media picker that allows
highlighting + clicking on image/media to download on the page (to get
around 'Save Image As...) not working. Also supports inline svgs +
background images - should work better than Save Image As...
- Location bar shows a popup indicating in 'click to download' mode,
which can be canceled. Otherwise, mode remains until user downloads
something.
- Type fixes: Untangle Page and URLResource types for better type
checking.
- Deps: bump to wabac.js 2.25.1 for new download mode support
---------
Co-authored-by: Tessa Walsh <tessa@bitarchivist.net >
2025-12-05 09:21:17 -08:00
Ilya Kreymer
d2524ab26f
deps: update to wabac.js to 2.24.5, wombat fixes ( #465 )
2025-11-02 08:22:45 -08:00
Ilya Kreymer
460b67a784
deps: update to wabac 2.24.4 + wombat 3.10.0 ( #464 )
...
- additional fixes for new sync xhr system, support for deduping xhr
cached resources
- formatting pass
2025-10-30 15:54:50 -07:00
Ilya Kreymer
7cc3f9dc67
fidelity improvements via wabac.js 2.24.3 ( #463 )
...
fidelity: Better loading of pages that have sync XHR (via wombat.js)
loading: Truncate loading of URLs that have very large POST requests
(via wabac.js) bump to wabac.js 2.24.3
bump to 2.3.22
2025-10-29 16:29:12 -07:00
Ilya Kreymer
fceeb0245a
deps: update to wabac.js 2.24.2 ( #461 )
...
more complete cdx loading for query fuzzy matching, fixes #457
bump to 2.3.21
2025-10-12 12:52:32 -07:00
Ilya Kreymer
d509baa494
deps: update to latest electron, fixes #456 ( #459 )
...
bump to 2.3.20
2025-10-03 22:40:02 -07:00
Ilya Kreymer
09b7288beb
deps: update to wabac.js 2.24.1 ( #454 )
...
fidelity: fix rewriting of embed tags (via wabac.js) bump to 2.3.19
2025-09-19 17:05:37 -07:00
Ilya Kreymer
62a0f018b4
deps update: update to wabac.js 2.24.0 ( #452 )
...
- fidelity: Better detection of UTF-8 charset (via wabac.js 2.24.0)
- fidelity: Web Worker module rewriting improvements (via wabac.js
2.24.0)
- fixes #445
2025-09-12 16:11:49 -07:00
dependabot[bot]
1c45384376
build(deps-dev): bump electron from 36.3.2 to 36.8.1 ( #447 )
...
Bumps [electron](https://github.com/electron/electron ) from 36.3.2 to
36.8.1.
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-04 18:56:26 -07:00
Ilya Kreymer
5a4fb5a8a6
deps: update to wabac.js 2.23.11 for eval() rewriting fix + xss security fix on not found page ( #448 )
...
bump to 2.3.17
2025-09-04 12:18:31 -07:00
dependabot[bot]
048aa8eeee
build(deps-dev): bump webpack-dev-server from 5.0.4 to 5.2.1 ( #442 )
...
Bumps
[webpack-dev-server](https://github.com/webpack/webpack-dev-server ) from
5.0.4 to 5.2.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/webpack/webpack-dev-server/releases ">webpack-dev-server's
releases</a>.</em></p>
<blockquote>
<h2>v5.2.1</h2>
<h2><a
href="https://github.com/webpack/webpack-dev-server/compare/v5.2.0...v6.0.0 ">5.2.1</a>
(2025-03-26)</h2>
<h3>Security</h3>
<ul>
<li>cross-origin requests are not allowed unless allowed by
<code>Access-Control-Allow-Origin</code> header</li>
<li>requests with an IP addresses in the <code>Origin</code> header are
not allowed to connect to WebSocket server unless configured by
<code>allowedHosts</code> or it different from the <code>Host</code>
header</li>
</ul>
<p>The above changes may make the dev server not work if you relied on
such behavior, but unfortunately they carry security risks, so they were
considered as fixes.</p>
<h3>Bug Fixes</h3>
<ul>
<li>prevent overlay for errors caught by React error boundaries (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5431 ">#5431</a>)
(<a
href="https://github.com/webpack/webpack-dev-server/commit/8c1abc903ab444d9ce99e567b9a6c603e1ec06be ">8c1abc9</a>)</li>
<li>take the first network found instead of the last one, this restores
the same behavior as 5.0.4 (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5411 ">#5411</a>)
(<a
href="https://github.com/webpack/webpack-dev-server/commit/ffd0b86b790d372f90e17aea92cfd9def83fee96 ">ffd0b86</a>)</li>
</ul>
<h2>v5.2.0</h2>
<h2><a
href="https://github.com/webpack/webpack-dev-server/compare/v5.1.0...v5.2.0 ">5.2.0</a>
(2024-12-11)</h2>
<h3>Features</h3>
<ul>
<li>added <code>getClientEntry</code> and <code>getClientHotEntry</code>
methods to get clients entries (<a
href="https://github.com/webpack/webpack-dev-server/commit/dc642a832d45c23c5c7a08fbf29995e0db7e0d95 ">dc642a8</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>speed up initial client bundling (<a
href="https://github.com/webpack/webpack-dev-server/commit/145b5d01610a16468fc32719a20366682b0e8572 ">145b5d0</a>)</li>
</ul>
<h2>v5.1.0</h2>
<h2><a
href="https://github.com/webpack/webpack-dev-server/compare/v5.0.4...v5.1.0 ">5.1.0</a>
(2024-09-03)</h2>
<h3>Features</h3>
<ul>
<li>add visual progress indicators (<a
href="https://github.com/webpack/webpack-dev-server/commit/a8f40b74e6439a8281b9fe8868eb9db7e4c5de50 ">a8f40b7</a>)</li>
<li>added the <code>app</code> option to be <code>Function</code> (by
default only with <code>connect</code> compatibility frameworks) (<a
href="https://github.com/webpack/webpack-dev-server/commit/3096148746c906105c4424352f5b5ad1bff0fd4f ">3096148</a>)</li>
<li>allow the <code>server</code> option to be <code>Function</code> (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5275 ">#5275</a>)
(<a
href="https://github.com/webpack/webpack-dev-server/commit/02a1c6d788f5fc47c11cc7d910fd1b5e17aed886 ">02a1c6d</a>)</li>
<li>http2 support for <code>connect</code> and <code>connect</code>
compatibility frameworks which support HTTP2 (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5267 ">#5267</a>)
(<a
href="https://github.com/webpack/webpack-dev-server/commit/6509a3fd3eb5decb61f60a9f2db97d76f71ecb99 ">6509a3f</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>check the <code>platform</code> property to determinate the target
(<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5269 ">#5269</a>)
(<a
href="https://github.com/webpack/webpack-dev-server/commit/c3b532c6360317319793dcda22c76fbfc05fbdcf ">c3b532c</a>)</li>
<li>ipv6 output (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5270 ">#5270</a>)
(<a
href="https://github.com/webpack/webpack-dev-server/commit/06005e7cb99e4c412b968ed3fb786acfb8c2e037 ">06005e7</a>)</li>
<li>replace <code>rimraf</code> with <code>rm</code> (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5162 ">#5162</a>)
(<a
href="https://github.com/webpack/webpack-dev-server/commit/1a1561f09bdfa7a98434d7d9cd62e323b887dfbf ">1a1561f</a>)</li>
<li>replace default gateway (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5255 ">#5255</a>)
(<a
href="https://github.com/webpack/webpack-dev-server/commit/f5f09024ff4fe6625aa94bcd69439462d74013f0 ">f5f0902</a>)</li>
<li>support <code>devServer: false</code> (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5272 ">#5272</a>)
(<a
href="https://github.com/webpack/webpack-dev-server/commit/8b341cb8c1dc01cef62c70959620cd0cbd87fee7 ">8b341cb</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/webpack/webpack-dev-server/blob/master/CHANGELOG.md ">webpack-dev-server's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/webpack/webpack-dev-server/compare/v5.2.0...v6.0.0 ">5.2.1</a>
(2025-03-26)</h2>
<h3>Security</h3>
<ul>
<li>cross-origin requests are not allowed unless allowed by
<code>Access-Control-Allow-Origin</code> header</li>
<li>requests with an IP addresses in the <code>Origin</code> header are
not allowed to connect to WebSocket server unless configured by
<code>allowedHosts</code> or it different from the <code>Host</code>
header</li>
</ul>
<p>The above changes may make the dev server not work if you relied on
such behavior, but unfortunately they carry security risks, so they were
considered as fixes.</p>
<h3>Bug Fixes</h3>
<ul>
<li>prevent overlay for errors caught by React error boundaries (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5431 ">#5431</a>)
(<a
href="https://github.com/webpack/webpack-dev-server/commit/8c1abc903ab444d9ce99e567b9a6c603e1ec06be ">8c1abc9</a>)</li>
<li>take the first network found instead of the last one, this restores
the same behavior as 5.0.4 (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5411 ">#5411</a>)
(<a
href="https://github.com/webpack/webpack-dev-server/commit/ffd0b86b790d372f90e17aea92cfd9def83fee96 ">ffd0b86</a>)</li>
</ul>
<h2><a
href="https://github.com/webpack/webpack-dev-server/compare/v5.1.0...v5.2.0 ">5.2.0</a>
(2024-12-11)</h2>
<h3>Features</h3>
<ul>
<li>added <code>getClientEntry</code> and <code>getClientHotEntry</code>
methods to get clients entries (<a
href="https://github.com/webpack/webpack-dev-server/commit/dc642a832d45c23c5c7a08fbf29995e0db7e0d95 ">dc642a8</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>speed up initial client bundling (<a
href="https://github.com/webpack/webpack-dev-server/commit/145b5d01610a16468fc32719a20366682b0e8572 ">145b5d0</a>)</li>
</ul>
<h2><a
href="https://github.com/webpack/webpack-dev-server/compare/v5.0.4...v5.1.0 ">5.1.0</a>
(2024-09-03)</h2>
<h3>Features</h3>
<ul>
<li>add visual progress indicators (<a
href="https://github.com/webpack/webpack-dev-server/commit/a8f40b74e6439a8281b9fe8868eb9db7e4c5de50 ">a8f40b7</a>)</li>
<li>added the <code>app</code> option to be <code>Function</code> (by
default only with <code>connect</code> compatibility frameworks) (<a
href="https://github.com/webpack/webpack-dev-server/commit/3096148746c906105c4424352f5b5ad1bff0fd4f ">3096148</a>)</li>
<li>allow the <code>server</code> option to be <code>Function</code> (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5275 ">#5275</a>)
(<a
href="https://github.com/webpack/webpack-dev-server/commit/02a1c6d788f5fc47c11cc7d910fd1b5e17aed886 ">02a1c6d</a>)</li>
<li>http2 support for <code>connect</code> and <code>connect</code>
compatibility frameworks which support HTTP2 (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5267 ">#5267</a>)
(<a
href="https://github.com/webpack/webpack-dev-server/commit/6509a3fd3eb5decb61f60a9f2db97d76f71ecb99 ">6509a3f</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>check the <code>platform</code> property to determinate the target
(<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5269 ">#5269</a>)
(<a
href="https://github.com/webpack/webpack-dev-server/commit/c3b532c6360317319793dcda22c76fbfc05fbdcf ">c3b532c</a>)</li>
<li>ipv6 output (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5270 ">#5270</a>)
(<a
href="https://github.com/webpack/webpack-dev-server/commit/06005e7cb99e4c412b968ed3fb786acfb8c2e037 ">06005e7</a>)</li>
<li>replace <code>rimraf</code> with <code>rm</code> (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5162 ">#5162</a>)
(<a
href="https://github.com/webpack/webpack-dev-server/commit/1a1561f09bdfa7a98434d7d9cd62e323b887dfbf ">1a1561f</a>)</li>
<li>replace default gateway (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5255 ">#5255</a>)
(<a
href="https://github.com/webpack/webpack-dev-server/commit/f5f09024ff4fe6625aa94bcd69439462d74013f0 ">f5f0902</a>)</li>
<li>support <code>devServer: false</code> (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5272 ">#5272</a>)
(<a
href="https://github.com/webpack/webpack-dev-server/commit/8b341cb8c1dc01cef62c70959620cd0cbd87fee7 ">8b341cb</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/webpack/webpack-dev-server/commit/0d22a08cc96deeb4421251ff41a915dcda1b59c5 "><code>0d22a08</code></a>
chore(release): 5.2.1</li>
<li><a
href="https://github.com/webpack/webpack-dev-server/commit/6045b1e9d63078fb24cac52eb361b7356944cddd "><code>6045b1e</code></a>
chore(deps): update (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5444 ">#5444</a>)</li>
<li><a
href="https://github.com/webpack/webpack-dev-server/commit/ffd0b86b790d372f90e17aea92cfd9def83fee96 "><code>ffd0b86</code></a>
fix: take the first network found instead of the last one, this restores
the ...</li>
<li><a
href="https://github.com/webpack/webpack-dev-server/commit/9ea7b0856a72b92b1444ef6a0087f90b883500dd "><code>9ea7b08</code></a>
ci: update dependency-review-action (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5442 ">#5442</a>)</li>
<li><a
href="https://github.com/webpack/webpack-dev-server/commit/5c9378bb01276357d7af208a0856ca2163db188e "><code>5c9378b</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/webpack/webpack-dev-server/commit/d2575ad8dfed9207ed810b5ea0ccf465115a2239 "><code>d2575ad</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/webpack/webpack-dev-server/commit/8c1abc903ab444d9ce99e567b9a6c603e1ec06be "><code>8c1abc9</code></a>
fix: prevent overlay for errors caught by React error boundaries (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5431 ">#5431</a>)</li>
<li><a
href="https://github.com/webpack/webpack-dev-server/commit/5a39c7099ab2908251ff759f311e1d4e85b4b3e8 "><code>5a39c70</code></a>
ci: update codecov/codecov-action to v5 (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5406 ">#5406</a>)</li>
<li><a
href="https://github.com/webpack/webpack-dev-server/commit/55220a800ba4e30dbde2d98785ecf4c80b32f711 "><code>55220a8</code></a>
chore(deps-dev): bump the dependencies group across 1 directory with 4
update...</li>
<li><a
href="https://github.com/webpack/webpack-dev-server/commit/09f6f8eb46abce836acbc1b8c892e348106c924e "><code>09f6f8e</code></a>
chore(deps): bump the dependencies group across 1 directory with 2
updates (#...</li>
<li>Additional commits viewable in <a
href="https://github.com/webpack/webpack-dev-server/compare/v5.0.4...v5.2.1 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/webrecorder/replayweb.page/network/alerts ).
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-07-25 00:10:26 -07:00
dependabot[bot]
39c2723e90
build(deps): bump serialize-javascript from 6.0.0 to 6.0.2 ( #401 )
...
Bumps
[serialize-javascript](https://github.com/yahoo/serialize-javascript )
from 6.0.0 to 6.0.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/yahoo/serialize-javascript/releases ">serialize-javascript's
releases</a>.</em></p>
<blockquote>
<h2>v6.0.2</h2>
<ul>
<li>fix: serialize URL string contents to prevent XSS (<a
href="https://redirect.github.com/yahoo/serialize-javascript/issues/173 ">#173</a>)
f27d65d</li>
<li>Bump <code>@babel/traverse</code> from 7.10.1 to 7.23.7 (<a
href="https://redirect.github.com/yahoo/serialize-javascript/issues/171 ">#171</a>)
02499c0</li>
<li>docs: update readme with URL support (<a
href="https://redirect.github.com/yahoo/serialize-javascript/issues/146 ">#146</a>)
0d88527</li>
<li>chore: update node version and lock file e2a3a91</li>
<li>fix typo (<a
href="https://redirect.github.com/yahoo/serialize-javascript/issues/164 ">#164</a>)
5a1fa64</li>
</ul>
<p><a
href="https://github.com/yahoo/serialize-javascript/compare/v6.0.1...v6.0.2 ">https://github.com/yahoo/serialize-javascript/compare/v6.0.1...v6.0.2 </a></p>
<h2>v6.0.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Bump mocha from 9.0.1 to 9.0.2 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/126 ">yahoo/serialize-javascript#126</a></li>
<li>Bump mocha from 9.0.2 to 9.0.3 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/127 ">yahoo/serialize-javascript#127</a></li>
<li>Bump path-parse from 1.0.6 to 1.0.7 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/129 ">yahoo/serialize-javascript#129</a></li>
<li>Bump mocha from 9.0.3 to 9.1.0 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/130 ">yahoo/serialize-javascript#130</a></li>
<li>Bump mocha from 9.1.0 to 9.1.1 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/131 ">yahoo/serialize-javascript#131</a></li>
<li>Bump mocha from 9.1.1 to 9.1.2 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/132 ">yahoo/serialize-javascript#132</a></li>
<li>Bump mocha from 9.1.2 to 9.1.3 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/133 ">yahoo/serialize-javascript#133</a></li>
<li>Bump mocha from 9.1.3 to 9.1.4 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/137 ">yahoo/serialize-javascript#137</a></li>
<li>Bump mocha from 9.1.4 to 9.2.0 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/138 ">yahoo/serialize-javascript#138</a></li>
<li>Bump chai from 4.3.4 to 4.3.6 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/140 ">yahoo/serialize-javascript#140</a></li>
<li>Bump ansi-regex from 5.0.0 to 5.0.1 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/141 ">yahoo/serialize-javascript#141</a></li>
<li>Bump mocha from 9.2.0 to 9.2.2 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/143 ">yahoo/serialize-javascript#143</a></li>
<li>Bump minimist from 1.2.5 to 1.2.6 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/144 ">yahoo/serialize-javascript#144</a></li>
<li>Bump mocha from 9.2.2 to 10.0.0 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/145 ">yahoo/serialize-javascript#145</a></li>
<li>Bump mocha from 10.0.0 to 10.1.0 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/149 ">yahoo/serialize-javascript#149</a></li>
<li>Bump chai from 4.3.6 to 4.3.7 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/150 ">yahoo/serialize-javascript#150</a></li>
<li>ci: test.yml - actions bump by <a
href="https://github.com/piwysocki "><code>@piwysocki</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/151 ">yahoo/serialize-javascript#151</a></li>
<li>Bump minimatch from 3.0.4 to 3.1.2 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/152 ">yahoo/serialize-javascript#152</a></li>
<li>Bump mocha from 10.1.0 to 10.2.0 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/153 ">yahoo/serialize-javascript#153</a></li>
<li>Bump json5 from 2.1.3 to 2.2.3 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/155 ">yahoo/serialize-javascript#155</a></li>
<li>Fix serialization issue for 0n. by <a
href="https://github.com/momocow "><code>@momocow</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/156 ">yahoo/serialize-javascript#156</a></li>
<li>Release v6.0.1 by <a
href="https://github.com/okuryu "><code>@okuryu</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/157 ">yahoo/serialize-javascript#157</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/piwysocki "><code>@piwysocki</code></a>
made their first contribution in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/151 ">yahoo/serialize-javascript#151</a></li>
<li><a href="https://github.com/momocow "><code>@momocow</code></a> made
their first contribution in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/156 ">yahoo/serialize-javascript#156</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/yahoo/serialize-javascript/compare/v6.0.0...v6.0.1 ">https://github.com/yahoo/serialize-javascript/compare/v6.0.0...v6.0.1 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/yahoo/serialize-javascript/commit/b71ec23841d7cf30847d3071d9da38ee0b397fc8 "><code>b71ec23</code></a>
6.0.2</li>
<li><a
href="https://github.com/yahoo/serialize-javascript/commit/f27d65d3de42affe2aac14607066c293891cec4e "><code>f27d65d</code></a>
fix: serialize URL string contents to prevent XSS (<a
href="https://redirect.github.com/yahoo/serialize-javascript/issues/173 ">#173</a>)</li>
<li><a
href="https://github.com/yahoo/serialize-javascript/commit/02499c0adfb40f48e1ebdcbe6fffc83b162b95e9 "><code>02499c0</code></a>
Bump <code>@babel/traverse</code> from 7.10.1 to 7.23.7 (<a
href="https://redirect.github.com/yahoo/serialize-javascript/issues/171 ">#171</a>)</li>
<li><a
href="https://github.com/yahoo/serialize-javascript/commit/0d885272f45069b1207189ae18a6f2726b4abaa9 "><code>0d88527</code></a>
docs: update readme with URL support (<a
href="https://redirect.github.com/yahoo/serialize-javascript/issues/146 ">#146</a>)</li>
<li><a
href="https://github.com/yahoo/serialize-javascript/commit/e2a3a9173e6770ee92e02d95d6a8e7958dfb419d "><code>e2a3a91</code></a>
chore: update node version and lock file</li>
<li><a
href="https://github.com/yahoo/serialize-javascript/commit/5a1fa646d9cbbe0b4f13c07f01c249fb2493e20f "><code>5a1fa64</code></a>
fix typo (<a
href="https://redirect.github.com/yahoo/serialize-javascript/issues/164 ">#164</a>)</li>
<li><a
href="https://github.com/yahoo/serialize-javascript/commit/7139f9251b4cad52136513cf3360869e1e645d6c "><code>7139f92</code></a>
Release v6.0.1 (<a
href="https://redirect.github.com/yahoo/serialize-javascript/issues/157 ">#157</a>)</li>
<li><a
href="https://github.com/yahoo/serialize-javascript/commit/7e23ae89e4b65ebf8836fcbaab637d49fb32ecb2 "><code>7e23ae8</code></a>
Fix serialization issue for 0n. (<a
href="https://redirect.github.com/yahoo/serialize-javascript/issues/156 ">#156</a>)</li>
<li><a
href="https://github.com/yahoo/serialize-javascript/commit/343abd98ff0a3f88f61fca35100762fdd6cb1963 "><code>343abd9</code></a>
Bump json5 from 2.1.3 to 2.2.3 (<a
href="https://redirect.github.com/yahoo/serialize-javascript/issues/155 ">#155</a>)</li>
<li><a
href="https://github.com/yahoo/serialize-javascript/commit/38d0e70e2d82662b2ec4fa2f7f3e1289db745db1 "><code>38d0e70</code></a>
Bump mocha from 10.1.0 to 10.2.0 (<a
href="https://redirect.github.com/yahoo/serialize-javascript/issues/153 ">#153</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/yahoo/serialize-javascript/compare/v6.0.0...v6.0.2 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
You can trigger a rebase of this PR by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/webrecorder/replayweb.page/network/alerts ).
</details>
> **Note**
> Automatic rebases have been disabled on this pull request as it has
been open for over 30 days.
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-07-25 00:09:42 -07:00
dependabot[bot]
c5f14b3b3f
build(deps): bump form-data from 4.0.0 to 4.0.4 ( #443 )
...
Bumps [form-data](https://github.com/form-data/form-data ) from 4.0.0 to
4.0.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/form-data/form-data/releases ">form-data's
releases</a>.</em></p>
<blockquote>
<h2>v4.0.4</h2>
<h2><a
href="https://github.com/form-data/form-data/compare/v4.0.3...v4.0.4 ">v4.0.4</a>
- 2025-07-16</h2>
<h3>Commits</h3>
<ul>
<li>[meta] add <code>auto-changelog</code> <a
href="https://github.com/form-data/form-data/commit/811f68282fab0315209d0e2d1c44b6c32ea0d479 "><code>811f682</code></a></li>
<li>[Tests] handle predict-v8-randomness failures in node < 17 and
node > 23 <a
href="https://github.com/form-data/form-data/commit/1d11a76434d101f22fdb26b8aef8615f28b98402 "><code>1d11a76</code></a></li>
<li>[Fix] Switch to using <code>crypto</code> random for boundary values
<a
href="https://github.com/form-data/form-data/commit/3d1723080e6577a66f17f163ecd345a21d8d0fd0 "><code>3d17230</code></a></li>
<li>[Tests] fix linting errors <a
href="https://github.com/form-data/form-data/commit/5e340800b5f8914213e4e0378c084aae71cfd73a "><code>5e34080</code></a></li>
<li>[meta] actually ensure the readme backup isn’t published <a
href="https://github.com/form-data/form-data/commit/316c82ba93fd4985af757b771b9a1f26d3b709ef "><code>316c82b</code></a></li>
<li>[Dev Deps] update <code>@ljharb/eslint-config</code> <a
href="https://github.com/form-data/form-data/commit/58c25d76406a5b0dfdf54045cf252563f2bbda8d "><code>58c25d7</code></a></li>
<li>[meta] fix readme capitalization <a
href="https://github.com/form-data/form-data/commit/2300ca19595b0ee96431e868fe2a40db79e41c61 "><code>2300ca1</code></a></li>
</ul>
<h2>v4.0.3</h2>
<h2><a
href="https://github.com/form-data/form-data/compare/v4.0.2...v4.0.3 ">v4.0.3</a>
- 2025-06-05</h2>
<h3>Fixed</h3>
<ul>
<li>[Fix] <code>append</code>: avoid a crash on nullish values <a
href="https://redirect.github.com/form-data/form-data/issues/577 "><code>[#577 ](https://github.com/form-data/form-data/issues/577 )</code></a></li>
</ul>
<h3>Commits</h3>
<ul>
<li>[eslint] use a shared config <a
href="https://github.com/form-data/form-data/commit/426ba9ac440f95d1998dac9a5cd8d738043b048f "><code>426ba9a</code></a></li>
<li>[eslint] fix some spacing issues <a
href="https://github.com/form-data/form-data/commit/20941917f0e9487e68c564ebc3157e23609e2939 "><code>2094191</code></a></li>
<li>[Refactor] use <code>hasown</code> <a
href="https://github.com/form-data/form-data/commit/81ab41b46fdf34f5d89d7ff30b513b0925febfaa "><code>81ab41b</code></a></li>
<li>[Fix] validate boundary type in <code>setBoundary()</code> method <a
href="https://github.com/form-data/form-data/commit/8d8e4693093519f7f18e3c597d1e8df8c493de9e "><code>8d8e469</code></a></li>
<li>[Tests] add tests to check the behavior of <code>getBoundary</code>
with non-strings <a
href="https://github.com/form-data/form-data/commit/837b8a1f7562bfb8bda74f3fc538adb7a5858995 "><code>837b8a1</code></a></li>
<li>[Dev Deps] remove unused deps <a
href="https://github.com/form-data/form-data/commit/870e4e665935e701bf983a051244ab928e62d58e "><code>870e4e6</code></a></li>
<li>[meta] remove local commit hooks <a
href="https://github.com/form-data/form-data/commit/e6e83ccb545a5619ed6cd04f31d5c2f655eb633e "><code>e6e83cc</code></a></li>
<li>[Dev Deps] update <code>eslint</code> <a
href="https://github.com/form-data/form-data/commit/4066fd6f65992b62fa324a6474a9292a4f88c916 "><code>4066fd6</code></a></li>
<li>[meta] fix scripts to use prepublishOnly <a
href="https://github.com/form-data/form-data/commit/c4bbb13c0ef669916657bc129341301b1d331d75 "><code>c4bbb13</code></a></li>
</ul>
<h2>v4.0.2</h2>
<h2><a
href="https://github.com/form-data/form-data/compare/v4.0.1...v4.0.2 ">v4.0.2</a>
- 2025-02-14</h2>
<h3>Merged</h3>
<ul>
<li>[Fix] set <code>Symbol.toStringTag</code> when available <a
href="https://redirect.github.com/form-data/form-data/pull/573 "><code>[#573 ](https://github.com/form-data/form-data/issues/573 )</code></a></li>
<li>[Fix] set <code>Symbol.toStringTag</code> when available <a
href="https://redirect.github.com/form-data/form-data/pull/573 "><code>[#573 ](https://github.com/form-data/form-data/issues/573 )</code></a></li>
<li>fix (npmignore): ignore temporary build files <a
href="https://redirect.github.com/form-data/form-data/pull/532 "><code>[#532 ](https://github.com/form-data/form-data/issues/532 )</code></a></li>
<li>fix (npmignore): ignore temporary build files <a
href="https://redirect.github.com/form-data/form-data/pull/532 "><code>[#532 ](https://github.com/form-data/form-data/issues/532 )</code></a></li>
</ul>
<h3>Fixed</h3>
<ul>
<li>[Fix] set <code>Symbol.toStringTag</code> when available (<a
href="https://redirect.github.com/form-data/form-data/issues/573 ">#573</a>)
<a
href="https://redirect.github.com/form-data/form-data/issues/396 "><code>[#396 ](https://github.com/form-data/form-data/issues/396 )</code></a></li>
<li>[Fix] set <code>Symbol.toStringTag</code> when available (<a
href="https://redirect.github.com/form-data/form-data/issues/573 ">#573</a>)
<a
href="https://redirect.github.com/form-data/form-data/issues/396 "><code>[#396 ](https://github.com/form-data/form-data/issues/396 )</code></a></li>
<li>[Fix] set <code>Symbol.toStringTag</code> when available <a
href="https://redirect.github.com/form-data/form-data/issues/396 "><code>[#396 ](https://github.com/form-data/form-data/issues/396 )</code></a></li>
</ul>
<h3>Commits</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/form-data/form-data/blob/master/CHANGELOG.md ">form-data's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/form-data/form-data/compare/v4.0.3...v4.0.4 ">v4.0.4</a>
- 2025-07-16</h2>
<h3>Commits</h3>
<ul>
<li>[meta] add <code>auto-changelog</code> <a
href="https://github.com/form-data/form-data/commit/811f68282fab0315209d0e2d1c44b6c32ea0d479 "><code>811f682</code></a></li>
<li>[Tests] handle predict-v8-randomness failures in node < 17 and
node > 23 <a
href="https://github.com/form-data/form-data/commit/1d11a76434d101f22fdb26b8aef8615f28b98402 "><code>1d11a76</code></a></li>
<li>[Fix] Switch to using <code>crypto</code> random for boundary values
<a
href="https://github.com/form-data/form-data/commit/3d1723080e6577a66f17f163ecd345a21d8d0fd0 "><code>3d17230</code></a></li>
<li>[Tests] fix linting errors <a
href="https://github.com/form-data/form-data/commit/5e340800b5f8914213e4e0378c084aae71cfd73a "><code>5e34080</code></a></li>
<li>[meta] actually ensure the readme backup isn’t published <a
href="https://github.com/form-data/form-data/commit/316c82ba93fd4985af757b771b9a1f26d3b709ef "><code>316c82b</code></a></li>
<li>[Dev Deps] update <code>@ljharb/eslint-config</code> <a
href="https://github.com/form-data/form-data/commit/58c25d76406a5b0dfdf54045cf252563f2bbda8d "><code>58c25d7</code></a></li>
<li>[meta] fix readme capitalization <a
href="https://github.com/form-data/form-data/commit/2300ca19595b0ee96431e868fe2a40db79e41c61 "><code>2300ca1</code></a></li>
</ul>
<h2><a
href="https://github.com/form-data/form-data/compare/v4.0.2...v4.0.3 ">v4.0.3</a>
- 2025-06-05</h2>
<h3>Fixed</h3>
<ul>
<li>[Fix] <code>append</code>: avoid a crash on nullish values <a
href="https://redirect.github.com/form-data/form-data/issues/577 "><code>[#577 ](https://github.com/form-data/form-data/issues/577 )</code></a></li>
</ul>
<h3>Commits</h3>
<ul>
<li>[eslint] use a shared config <a
href="https://github.com/form-data/form-data/commit/426ba9ac440f95d1998dac9a5cd8d738043b048f "><code>426ba9a</code></a></li>
<li>[eslint] fix some spacing issues <a
href="https://github.com/form-data/form-data/commit/20941917f0e9487e68c564ebc3157e23609e2939 "><code>2094191</code></a></li>
<li>[Refactor] use <code>hasown</code> <a
href="https://github.com/form-data/form-data/commit/81ab41b46fdf34f5d89d7ff30b513b0925febfaa "><code>81ab41b</code></a></li>
<li>[Fix] validate boundary type in <code>setBoundary()</code> method <a
href="https://github.com/form-data/form-data/commit/8d8e4693093519f7f18e3c597d1e8df8c493de9e "><code>8d8e469</code></a></li>
<li>[Tests] add tests to check the behavior of <code>getBoundary</code>
with non-strings <a
href="https://github.com/form-data/form-data/commit/837b8a1f7562bfb8bda74f3fc538adb7a5858995 "><code>837b8a1</code></a></li>
<li>[Dev Deps] remove unused deps <a
href="https://github.com/form-data/form-data/commit/870e4e665935e701bf983a051244ab928e62d58e "><code>870e4e6</code></a></li>
<li>[meta] remove local commit hooks <a
href="https://github.com/form-data/form-data/commit/e6e83ccb545a5619ed6cd04f31d5c2f655eb633e "><code>e6e83cc</code></a></li>
<li>[Dev Deps] update <code>eslint</code> <a
href="https://github.com/form-data/form-data/commit/4066fd6f65992b62fa324a6474a9292a4f88c916 "><code>4066fd6</code></a></li>
<li>[meta] fix scripts to use prepublishOnly <a
href="https://github.com/form-data/form-data/commit/c4bbb13c0ef669916657bc129341301b1d331d75 "><code>c4bbb13</code></a></li>
</ul>
<h2><a
href="https://github.com/form-data/form-data/compare/v4.0.1...v4.0.2 ">v4.0.2</a>
- 2025-02-14</h2>
<h3>Merged</h3>
<ul>
<li>[Fix] set <code>Symbol.toStringTag</code> when available <a
href="https://redirect.github.com/form-data/form-data/pull/573 "><code>[#573 ](https://github.com/form-data/form-data/issues/573 )</code></a></li>
<li>[Fix] set <code>Symbol.toStringTag</code> when available <a
href="https://redirect.github.com/form-data/form-data/pull/573 "><code>[#573 ](https://github.com/form-data/form-data/issues/573 )</code></a></li>
<li>fix (npmignore): ignore temporary build files <a
href="https://redirect.github.com/form-data/form-data/pull/532 "><code>[#532 ](https://github.com/form-data/form-data/issues/532 )</code></a></li>
<li>fix (npmignore): ignore temporary build files <a
href="https://redirect.github.com/form-data/form-data/pull/532 "><code>[#532 ](https://github.com/form-data/form-data/issues/532 )</code></a></li>
</ul>
<h3>Fixed</h3>
<ul>
<li>[Fix] set <code>Symbol.toStringTag</code> when available (<a
href="https://redirect.github.com/form-data/form-data/issues/573 ">#573</a>)
<a
href="https://redirect.github.com/form-data/form-data/issues/396 "><code>[#396 ](https://github.com/form-data/form-data/issues/396 )</code></a></li>
<li>[Fix] set <code>Symbol.toStringTag</code> when available (<a
href="https://redirect.github.com/form-data/form-data/issues/573 ">#573</a>)
<a
href="https://redirect.github.com/form-data/form-data/issues/396 "><code>[#396 ](https://github.com/form-data/form-data/issues/396 )</code></a></li>
<li>[Fix] set <code>Symbol.toStringTag</code> when available <a
href="https://redirect.github.com/form-data/form-data/issues/396 "><code>[#396 ](https://github.com/form-data/form-data/issues/396 )</code></a></li>
</ul>
<h3>Commits</h3>
<ul>
<li>Merge tags v2.5.3 and v3.0.3 <a
href="https://github.com/form-data/form-data/commit/92613b9208556eb4ebc482fdf599fae111626fb6 "><code>92613b9</code></a></li>
<li>[Tests] migrate from travis to GHA <a
href="https://github.com/form-data/form-data/commit/806eda77740e6e3c67c7815afb216f2e1f187ba5 "><code>806eda7</code></a></li>
<li>[Tests] migrate from travis to GHA <a
href="https://github.com/form-data/form-data/commit/8fdb3bc6b5d001f8909a9fca391d1d1d97ef1d79 "><code>8fdb3bc</code></a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/form-data/form-data/commit/41996f5ac73a867046d48512cab62e64fc846dad "><code>41996f5</code></a>
v4.0.4</li>
<li><a
href="https://github.com/form-data/form-data/commit/316c82ba93fd4985af757b771b9a1f26d3b709ef "><code>316c82b</code></a>
[meta] actually ensure the readme backup isn’t published</li>
<li><a
href="https://github.com/form-data/form-data/commit/2300ca19595b0ee96431e868fe2a40db79e41c61 "><code>2300ca1</code></a>
[meta] fix readme capitalization</li>
<li><a
href="https://github.com/form-data/form-data/commit/811f68282fab0315209d0e2d1c44b6c32ea0d479 "><code>811f682</code></a>
[meta] add <code>auto-changelog</code></li>
<li><a
href="https://github.com/form-data/form-data/commit/5e340800b5f8914213e4e0378c084aae71cfd73a "><code>5e34080</code></a>
[Tests] fix linting errors</li>
<li><a
href="https://github.com/form-data/form-data/commit/1d11a76434d101f22fdb26b8aef8615f28b98402 "><code>1d11a76</code></a>
[Tests] handle predict-v8-randomness failures in node < 17 and node
> 23</li>
<li><a
href="https://github.com/form-data/form-data/commit/58c25d76406a5b0dfdf54045cf252563f2bbda8d "><code>58c25d7</code></a>
[Dev Deps] update <code>@ljharb/eslint-config</code></li>
<li><a
href="https://github.com/form-data/form-data/commit/3d1723080e6577a66f17f163ecd345a21d8d0fd0 "><code>3d17230</code></a>
[Fix] Switch to using <code>crypto</code> random for boundary
values</li>
<li><a
href="https://github.com/form-data/form-data/commit/d8d67dc8ac79285154edf7d3f57dbab593b9a146 "><code>d8d67dc</code></a>
v4.0.3</li>
<li><a
href="https://github.com/form-data/form-data/commit/e6e83ccb545a5619ed6cd04f31d5c2f655eb633e "><code>e6e83cc</code></a>
[meta] remove local commit hooks</li>
<li>Additional commits viewable in <a
href="https://github.com/form-data/form-data/compare/v4.0.0...v4.0.4 ">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~ljharb ">ljharb</a>, a new releaser for
form-data since your current version.</p>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/webrecorder/replayweb.page/network/alerts ).
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-07-25 00:07:41 -07:00
dependabot[bot]
bbd0394503
build(deps): bump nanoid from 3.3.1 to 3.3.8 ( #388 )
...
Bumps [nanoid](https://github.com/ai/nanoid ) from 3.3.1 to 3.3.8.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/ai/nanoid/blob/main/CHANGELOG.md ">nanoid's
changelog</a>.</em></p>
<blockquote>
<h2>3.3.8</h2>
<ul>
<li>Fixed a way to break Nano ID by passing non-integer size (by <a
href="https://github.com/myndzi "><code>@myndzi</code></a>).</li>
</ul>
<h2>3.3.7</h2>
<ul>
<li>Fixed <code>node16</code> TypeScript support (by Saadi
Myftija).</li>
</ul>
<h2>3.3.6</h2>
<ul>
<li>Fixed package.</li>
</ul>
<h2>3.3.5</h2>
<ul>
<li>Backport funding information.</li>
</ul>
<h2>3.3.4</h2>
<ul>
<li>Fixed <code>--help</code> in CLI (by <a
href="https://github.com/Lete114 "><code>@Lete114</code></a>).</li>
</ul>
<h2>3.3.3</h2>
<ul>
<li>Reduced size (by Anton Khlynovskiy).</li>
</ul>
<h2>3.3.2</h2>
<ul>
<li>Fixed <code>enhanced-resolve</code> support.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/ai/nanoid/commit/3044cd5e73f4cf31795f61f6e6b961c8c0a5c744 "><code>3044cd5</code></a>
Release 3.3.8 version</li>
<li><a
href="https://github.com/ai/nanoid/commit/4fe34959c34e5b3573889ed4f24fe91d1d3e7231 "><code>4fe3495</code></a>
Update size limit</li>
<li><a
href="https://github.com/ai/nanoid/commit/d643045f40d6dc8afa000a644d857da1436ed08c "><code>d643045</code></a>
Fix pool pollution, infinite loop (<a
href="https://redirect.github.com/ai/nanoid/issues/510 ">#510</a>)</li>
<li><a
href="https://github.com/ai/nanoid/commit/89d82d2ce4b0411e73ac7ccfe57bc03e932416e2 "><code>89d82d2</code></a>
Release 3.3.7 version</li>
<li><a
href="https://github.com/ai/nanoid/commit/5022c35acaaedd9da4b56cad37b02bbcb87635e1 "><code>5022c35</code></a>
Update dual-publish</li>
<li><a
href="https://github.com/ai/nanoid/commit/3e7a8e557b9d93a582ef2c3bb9f7306fc339ef35 "><code>3e7a8e5</code></a>
Remove benchmark from CI for v3</li>
<li><a
href="https://github.com/ai/nanoid/commit/d3561446aee52fdf38325e1d30c905d989a8ccd2 "><code>d356144</code></a>
Fix CI for v3</li>
<li><a
href="https://github.com/ai/nanoid/commit/37b25dfac2edfd73d7bbc88886e4c6067fac8619 "><code>37b25df</code></a>
Move to pnpm 8</li>
<li><a
href="https://github.com/ai/nanoid/commit/d96f39222a800ea9a6a156db139992b64d4b0dca "><code>d96f392</code></a>
Release 3.3.6 version</li>
<li><a
href="https://github.com/ai/nanoid/commit/8210dfb9fc01efcf354c00a1b7e1948f1bebb32f "><code>8210dfb</code></a>
Release 3.3.5 version</li>
<li>Additional commits viewable in <a
href="https://github.com/ai/nanoid/compare/3.3.1...3.3.8 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
You can trigger a rebase of this PR by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/webrecorder/replayweb.page/network/alerts ).
</details>
> **Note**
> Automatic rebases have been disabled on this pull request as it has
been open for over 30 days.
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-07-25 00:01:19 -07:00
dependabot[bot]
9264b9a5b8
build(deps): bump cross-spawn from 7.0.3 to 7.0.6 ( #372 )
...
Bumps [cross-spawn](https://github.com/moxystudio/node-cross-spawn ) from
7.0.3 to 7.0.6.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/moxystudio/node-cross-spawn/blob/master/CHANGELOG.md ">cross-spawn's
changelog</a>.</em></p>
<blockquote>
<h3><a
href="https://github.com/moxystudio/node-cross-spawn/compare/v7.0.5...v7.0.6 ">7.0.6</a>
(2024-11-18)</h3>
<h3>Bug Fixes</h3>
<ul>
<li>update cross-spawn version to 7.0.5 in package-lock.json (<a
href="https://github.com/moxystudio/node-cross-spawn/commit/f700743918d901eff92960e15a8dd68f87bd4176 ">f700743</a>)</li>
</ul>
<h3><a
href="https://github.com/moxystudio/node-cross-spawn/compare/v7.0.4...v7.0.5 ">7.0.5</a>
(2024-11-07)</h3>
<h3>Bug Fixes</h3>
<ul>
<li>fix escaping bug introduced by backtracking (<a
href="https://github.com/moxystudio/node-cross-spawn/commit/640d391fde65388548601d95abedccc12943374f ">640d391</a>)</li>
</ul>
<h3><a
href="https://github.com/moxystudio/node-cross-spawn/compare/v7.0.3...v7.0.4 ">7.0.4</a>
(2024-11-07)</h3>
<h3>Bug Fixes</h3>
<ul>
<li>disable regexp backtracking (<a
href="https://redirect.github.com/moxystudio/node-cross-spawn/issues/160 ">#160</a>)
(<a
href="https://github.com/moxystudio/node-cross-spawn/commit/5ff3a07d9add449021d806e45c4168203aa833ff ">5ff3a07</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/moxystudio/node-cross-spawn/commit/77cd97f3ca7b62c904a63a698fc4a79bf41977d0 "><code>77cd97f</code></a>
chore(release): 7.0.6</li>
<li><a
href="https://github.com/moxystudio/node-cross-spawn/commit/6717de49ff1e5de49622488dcb9c33fb25370c85 "><code>6717de4</code></a>
chore: upgrade standard-version</li>
<li><a
href="https://github.com/moxystudio/node-cross-spawn/commit/f700743918d901eff92960e15a8dd68f87bd4176 "><code>f700743</code></a>
fix: update cross-spawn version to 7.0.5 in package-lock.json</li>
<li><a
href="https://github.com/moxystudio/node-cross-spawn/commit/9a7e3b2165917367f74b8365faad9873b30d7263 "><code>9a7e3b2</code></a>
chore: fix build status badge</li>
<li><a
href="https://github.com/moxystudio/node-cross-spawn/commit/085268352dcbcad8064c64c5efb25268b4023184 "><code>0852683</code></a>
chore(release): 7.0.5</li>
<li><a
href="https://github.com/moxystudio/node-cross-spawn/commit/640d391fde65388548601d95abedccc12943374f "><code>640d391</code></a>
fix: fix escaping bug introduced by backtracking</li>
<li><a
href="https://github.com/moxystudio/node-cross-spawn/commit/bff0c87c8b627c4e6d04ec2449e733048bebb464 "><code>bff0c87</code></a>
chore: remove codecov</li>
<li><a
href="https://github.com/moxystudio/node-cross-spawn/commit/a7c6abc6fee79641d45b452fe6217deaa1bd0973 "><code>a7c6abc</code></a>
chore: replace travis with github workflows</li>
<li><a
href="https://github.com/moxystudio/node-cross-spawn/commit/9b9246e0969e86656d7ccd527716bc3c18842a19 "><code>9b9246e</code></a>
chore(release): 7.0.4</li>
<li><a
href="https://github.com/moxystudio/node-cross-spawn/commit/5ff3a07d9add449021d806e45c4168203aa833ff "><code>5ff3a07</code></a>
fix: disable regexp backtracking (<a
href="https://redirect.github.com/moxystudio/node-cross-spawn/issues/160 ">#160</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/moxystudio/node-cross-spawn/compare/v7.0.3...v7.0.6 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
You can trigger a rebase of this PR by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/webrecorder/replayweb.page/network/alerts ).
</details>
> **Note**
> Automatic rebases have been disabled on this pull request as it has
been open for over 30 days.
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-07-25 00:00:16 -07:00
Ilya Kreymer
5779091011
deps: update wabac.js to 2.23.9 ( #441 )
...
bump to 2.3.16
2025-07-24 23:49:40 -07:00
Ilya Kreymer
039499d33a
deps: bump to wabac.js 2.23.7 ( #439 )
...
- replay fidelity fixes via wabac.js
bump to 2.3.15
2025-07-15 10:42:10 -07:00
Ilya Kreymer
2bca66e3ec
2.3.14 release ( #437 )
...
- update to wabac.js 2.23.4 to make hashing optional, not require wasm
- add tests with CSP policy in place
2025-06-17 20:51:56 -04:00
Ilya Kreymer
a33daf8c9b
rewrite: fix rewrite of HLS when only available bandwidth exceeds max… ( #435 )
...
… (via wabac.js 2.23.3), fixes #433
bump to 2.3.13
2025-06-14 15:06:02 -04:00
Ilya Kreymer
af7dc7a6c3
Electron app loading improvements + Windows paths fix ( #429 )
...
- Electron no longer allows Windows paths in URLs
(https://www.electronjs.org/docs/latest/breaking-changes#behavior-changed-custom-protocol-url-handling-on-windows ),
fixes with help of wabac.js to replace `C:\path\to\file` with
`C//path/to/file`
- Electron app cleanup: replace deprecated protocol handlers with new
protocol.handle() method, update types
- Electron app: ensure just filename is displayed on index page,
consistent with other platforms
- Update to wabac.js 2.23.2
- Update to Electron 36.3.2
- Fixes #427
- bump to 2.3.12
2025-05-30 13:15:54 -07:00
Ilya Kreymer
e4daded7d9
deps: actually update to wabac.js 2.23.1 ( #423 )
...
bump to 2.3.11
2025-05-15 19:01:31 -07:00
Ilya Kreymer
c575c4c8dd
deps: update electron + wabac.js to 2.23.1 ( #422 )
...
bump to 2.3.10
2025-05-15 18:42:25 -07:00
Ilya Kreymer
69983af3a8
Add multi browser tests + wabac.js update ( #420 )
...
Fidelity: Fix CSP issue with iframes in Firefox (via wabac.js 2.23.0)
Loading: Avoid unnecessary reloads of multiWACZ JSON, prune expired
multiWACZ collections
Testing improvements:
- add playwright multi browser tests with firefox and webkit
- add test of iframe replay with iframetest.wacz
deps: update to wabac.js 2.23.0
bump to 2.3.9
2025-05-14 21:26:01 -07:00
Ilya Kreymer
62c30e7838
Fix ruffle injection + disable gdrive in library build ( #419 )
...
library: disable GDrive integration in library build (for AWP use)
fidelity: Fix Ruffle injection, rewriting improvements (via wabac.js
2.22.17)
loading: Support .wacz.zip extension for loading WACZ files when .zip is
auto-added (eg. on Android devices)
deps: bump to wabac.js 2.22.17
bump to 2.3.8
2025-05-06 21:07:24 -07:00
Ilya Kreymer
c0c196c225
deps: update to wabac.js 2.22.16 ( #418 )
...
bump to 2.3.7
2025-05-02 18:26:33 -07:00
Ilya Kreymer
15a2ee4937
deps: update to wabac.js 2.22.15 for improved CSP hardening ( #417 )
...
bump to 2.3.6
2025-05-01 18:27:29 -07:00
Ilya Kreymer
052be327d1
deps: update to wabac.js 2.22.14 ( #415 )
2025-04-29 17:15:53 -07:00
Ilya Kreymer
e12497cb93
2.3.5 deps update ( #414 )
...
update to wabac.js 2.22.12, various fidelity improvements, fix for issue in
webrecorder/browsertrix-crawler#801
2025-04-24 12:26:21 -07:00
Ilya Kreymer and emma
592ccc5253
Add 'utils' module export ( #410 )
...
Export core utils and assets used by RWP in /utils.
Add serviceWorkerActivated() utility promise.
---------
Co-authored-by: emma <hi@emma.cafe >
2025-03-12 21:55:29 -07:00
Ilya Kreymer
2ef95985cd
downloadUrl support for multiWACZ + latest wabac ( #407 )
...
main menu tweaks:
- use downloadUrl for action menu download
- don't show download menu if downloadUrl is null
- don't show Archive Info if downloadUrl !== sourceUrl and in embed mode
improved loading: update to wabac.js 2.21.3
bump to 2.3.3, update CHANGES for release
2025-03-04 11:37:20 -08:00
Ilya Kreymer
4bbe9910e3
loading: fix dynamic page loading for pages with queries (via wabac.j… ( #403 )
...
…s 2.12.2)
version to 2.3.2
2025-02-26 23:16:01 -08:00
Ilya Kreymer
4c96ea6cb3
Additional fixes for dynamic page loading optimization ( #402 )
...
- Update to wabac.js 2.21.1
- Hide 'Show non-seed pages' when doing a dynamic query
- bump to 2.3.1
2025-02-24 18:01:29 -08:00
Ilya Kreymer
6ef8bf4973
Support for dynamic page loading for Multi-WACZs ( #399 )
...
Support querying pages dynamically via pages endpoint:
- If loaded pages < total pages, load additional pages via /pages
endpoint if canQueryPages is set to true on item
- If query provided, do `/pages?search=...` to search for pages. Use
pagination of 25 pages for now.
WACZ hash:
- if provided, store waczhash per page, and use for thumbnail, favicon
and top-level replay loading.
Embed: better support for force reloading, call delete with reload
directly in embed
Depends on webrecorder/wabac.js#220
2025-02-24 14:35:03 -08:00
Ilya Kreymer
6f495c94f9
bump to wabac.js 2.20.8 for 2.2.5 ( #389 )
...
add CHANGES for 2.2.5
2024-12-31 21:00:05 -08:00
sua yoo and emma
09239285a1
fix: Support description markdown and longer length ( #385 )
...
Fixes https://github.com/webrecorder/replayweb.page/issues/381
## Changes
- Renders description as markdown
- Shows "Collection name" and "About this collection" labels when
description is present
- Fixes overflow issue where bottom few pixels of embed is cut off
- Hides description in mobile view
Co-authored-by: emma <hi@emma.cafe >
2024-12-31 19:49:42 -08:00
Ilya Kreymer
9fa008bab2
Nested WACZ + embed reloading fix ( #374 )
...
- Loading: Fix for loading nested WACZ files (via wabac.js 2.20.7)
- Embeds: Support full reload on embeds via fullReload() call on embed
web component
2024-11-22 17:58:44 -08:00
Ilya Kreymer
bf6da1ed00
deps: update to wabac.js 2.20.6 for fb video + localStorage replay fixes ( #373 )
...
deps: update electron-updater
bump to 2.2.3
2024-11-21 15:12:41 -08:00
Ilya Kreymer
7fcb470962
deps: update to wabac.js 2.20.3 / wombat 3.8.6 for wombat typo fix ( #370 )
2024-11-14 19:17:50 -08:00
Ilya Kreymer
7e967cb14c
deps update: ( #369 )
...
bump wabac to 2.20.2, minor fidelity improvements via wombat
bump to 2.2.2
2024-11-14 18:17:27 -08:00
Ilya Kreymer
4d02878c6b
deps: bump to wabac.js 2.20.1, wombat 3.8.3 ( #367 )
...
fidelity: better handling of document.write() based frame detection (via
wabac.js 2.20.1, wombat 3.8.3)
bump to 2.2.1
2024-10-31 23:58:25 -07:00
Ilya Kreymer
95c9be6c5b
Support for import as module, wabac.js 2.20 ( #364 )
...
- Extensibility for AWP (customizable toolbar, pass replay iframe messages to parent)
- Support export as module, build separate index.js for module in addition to ui.js
- Update to wabac.js 2.20.0
- bump to 2.2.0
2024-10-16 20:22:11 -07:00
Ilya Kreymer
a1603c5a3c
fidelity improvements (instagram + always online) ( #362 )
...
- update rules for instagram
- disable online/offline events detection in replay, replay always
'online' deps: bump to wabac.js 2.19.9, wombat 3.8.2, electron 32.1.0
2024-09-17 20:37:13 -07:00
Ilya Kreymer
d9c7d55e9a
deps: update to wabac.js 2.19.7, ( #356 )
...
fidelity improvements to FB replay, eval() rewriting, 'object' tag
rewriting (via wabac.js 2.19.7, wombat 3.7.14)
bump to 2.1.4
2024-08-13 17:05:07 -07:00
Ilya Kreymer
9b42a032ae
deps fixes: actually bump version to 2.1.3, bump electron-updater to 6.3.2
2024-08-08 15:08:57 -07:00
dependabot[bot]
ab71c7e699
build(deps): bump electron-updater from 5.3.0 to 6.3.0 ( #353 )
2024-08-08 15:06:50 -07:00
Ilya Kreymer
923232f2df
rewriting improvements for a few edge-cases ( #355 )
...
edge-case rewriting improvements:
- avoid rewriting inside of strings (via wabac.js 2.19.5)
- detect old-html framesets (via wombat 3.7.12)
bump to 2.1.3
2024-08-08 14:54:07 -07:00
Ilya Kreymer