Commit Graph
563 Commits
Author SHA1 Message Date
Ilya Kreymer 71f2a65479 Upgrade Electron Build Pipeline + Windows Signing (#543)
- Adds Windows signing (via Azure Artifact Signing) instead of old
expired cert!
- Updates to native Windows build to use Artifact Signing, Instead of
old wine image
- Updates CI action and ruffle update to run on windows, update all
actions in buildapp
- Update to electron-builder 27 alpha to use Azure signing, builder
schema migration
- Fixes #146
2026-08-10 10:40:14 -07:00
Ilya Kreymer c5c2f2a57c deps update for 2.5.0: (#542)
- bump to 2.5.0-rc.3
- update to electron 43 and wabac.js 2.27.0
- also update electron-updater
2026-08-07 19:12:38 -07:00
141d35d687 v2.5.0 (#527)
Closes https://github.com/webrecorder/replayweb.page/issues/523, closes
https://github.com/webrecorder/replayweb.page/issues/396, closes
https://github.com/webrecorder/replayweb.page/issues/470, closes
https://github.com/webrecorder/replayweb.page/issues/237

## Changes

https://github.com/webrecorder/replayweb.page/pull/521
- Adds public `navigateReplayTo` method in `<replay-app-main>` that
allows embeds to control replay navigation directly without reloading
entire UI.
- Enables reloading `<wr-coll-replay>` iframe even if source URL hasn't
changed.
- Refactors lifecycle events to prevent unnecessary re-renders.

https://github.com/webrecorder/replayweb.page/pull/524
- Fixes incorrect page count shown
- Enables non-seed pages by default
- Improves UX and accessibility of scrolling to load more by displaying
help text

https://github.com/webrecorder/replayweb.page/pull/525
- Updates general styles and icons throughout to match Browsertrix
styles
- Allows deep customization of components with `part` and `exportparts`

https://github.com/webrecorder/replayweb.page/pull/526
- Enables importing Shoelace (ie Bootstrap) icons as inline SVG
- Updates location bar buttons to use Bootstrap icons
- Replaces deprecated raw-loader with Webpack-native asset rule

https://github.com/webrecorder/replayweb.page/pull/529
- Allows hiding collection metadata in embed.
- Moves non-seed toggle next to search bar to match resources controls
and enable hiding entire column when metadata is hidden.

https://github.com/webrecorder/replayweb.page/pull/533
- Fix non-seed pages toggle

https://github.com/webrecorder/replayweb.page/pull/535,
https://github.com/webrecorder/replayweb.page/pull/534
- Upgrade to Node 22 and Yarn 4

---------

Co-authored-by: Ilya Kreymer <ikreymer@gmail.com>
Co-authored-by: Misty De Méo <hi@mistydemeo.com>
2026-08-07 16:05:09 -07:00
Ilya Kreymer 830468e03a deps: update to wabac.js 2.26.6 (#540)
bump to 2.4.7
2026-07-29 18:16:43 -07:00
mark beasley 6bf1cc8f31 ruffle: forward useRuffle to the sw.js registration in embed mode (#537)
ensure ruffle embed options needed for ruffle (injectScripts and allowProxyPaths) are added to the service worker query args in embed.ts
2026-07-29 18:16:03 -07:00
Misty De Méo 8c752e6e27 docs: document using local wabac.js (#539)
I realized this wasn't documented, and I thought it'd be helpful to
provide the nudge for anyone else who needs to test it.
2026-07-29 17:59:54 -07:00
sua yoo 7221df43da ci: Tag prerelease (#531)
Tags prerelease when running `npm publish` in GitHub Action to fix errors
2026-07-06 15:51:39 -07:00
Ilya Kreymer b3f3df109d deps: bump wabac.js 2.26.4 for fidelity fixes (#515)
bump to 2.4.6
2026-04-29 23:27:48 +02:00
Sawood Alam 97a431b4b6 Fixed precision in progress percentage display (#512)
Currently, when loading a file for processing, the percentage display
underneath the progress bar jumps around with arbitrary float precision.
Fixing it to 2 decimal places would make it more readable.
2026-04-29 23:22:50 +02:00
Ilya Kreymer 45e36a4a00 deps: update to wabac.js 2.26.3 (#513)
bump to 2.4.5
2026-04-25 10:28:17 +02:00
Ilya Kreymer ef448aaff6 ui: ensure iso string 'ts' is parsed into timestamp ts + wabac.js 2.26.0 (#501)
deps: update to wabac.js 2.26.0 for optimizations for wacz loading +
proxy rewrite mode
2026-04-01 00:15:36 -07:00
Ilya Kreymer 458e363f92 deps: bump wabac.js to 2.26.0-beta.0 for testing (#498) 2026-03-28 14:04:23 -07:00
Ilya Kreymer ca1136694f deps: bump to wabac.js 2.25.5 includes: (#490)
fidelity: fix rewriting of absoute URLs in module scripts in html
(webrecorder/wabac.js#311)
bump to 2.4.3
2026-02-19 23:45:50 -08:00
Ilya Kreymer 724964ecc9 follow-up to #460, propagate theme to embed iframe as well (#489) 2026-02-19 17:36:03 -08:00
Ilya Kreymer eaa65f5899 deps: bump to wabac.js 2.25.4 for improved dedupe / revisit handling (#488)
bump to 2.4.2
2026-02-16 22:31:31 -08:00
Ilya Kreymer be01451f5f ci: bump macos to macos-14 as macos-13 has been removed 2026-02-12 12:13:28 -08:00
Ilya Kreymer 2afe301984 add option to disable the "Select Media to Download" for embeds (#485)
- Fixes #486 
- Adding `nomediadownload` attr, eg. `<replay-web-page nomediadownload
...>` will hide the new option in the main menu.
- Add a general EmbedOpts that setting that can be used to configure
other embedding options.
2026-02-12 11:44:31 -08:00
Ilya Kreymer 80fbc448e3 deps: update to wabac.js 2.25.3 to fix WACZ loading bug (#484)
ci: update npm release action for npm authorized builds bump to 2.4.1
2026-02-12 00:35:40 -08:00
sua yoo 17539f3084 feat: Add "not found" error detail on page load (#482)
Resolves https://github.com/webrecorder/replayweb.page/issues/481 with
workaround
Related to https://github.com/webrecorder/browsertrix/issues/2865

## Changes

- Includes `replayNotFoundError` in `"page-loading"` event when page is
finished loading as a workaround for the actual `replayNotFoundError`
value not being available on `urlchange`.
- Minor refactor to more strongly typed events.
2026-02-11 23:58:28 -08:00
dependabot[bot] e4fd230694 build(deps): bump lodash from 4.17.21 to 4.17.23 (#478)
Bumps [lodash](https://github.com/lodash/lodash) from 4.17.21 to
4.17.23.

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-11 14:32:14 -08:00
dependabot[bot] 5921bc485c build(deps-dev): bump webpack from 5.91.0 to 5.104.1 (#480)
Bumps [webpack](https://github.com/webpack/webpack) from 5.91.0 to
5.104.1.

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-11 14:30:35 -08:00
Ilya Kreymeranddependabot[bot] a5e7ec642f dependency update for 2.24.0 (#472)
- update wabac to 2.25.2, playwright test to 1.57.0, electron to 39.2.6, other dependabot deps

---------

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-05 14:29:49 -08:00
Ilya KreymerandTessa Walsh 916b154688 Add resources download button + click to download picker in replay (#469)
Fixes #467 
- Add a download button on the resource page for each entry to allow
downloading each resource no matter what type.
- Add a new 'click to download' image or media picker that allows
highlighting + clicking on image/media to download on the page (to get
around 'Save Image As...) not working. Also supports inline svgs +
background images - should work better than Save Image As...
- Location bar shows a popup indicating in 'click to download' mode,
which can be canceled. Otherwise, mode remains until user downloads
something.
- Type fixes: Untangle Page and URLResource types for better type
checking.
- Deps: bump to wabac.js 2.25.1 for new download mode support

---------
Co-authored-by: Tessa Walsh <tessa@bitarchivist.net>
2025-12-05 09:21:17 -08:00
Ilya Kreymer d2524ab26f deps: update to wabac.js to 2.24.5, wombat fixes (#465) 2025-11-02 08:22:45 -08:00
Ilya Kreymer 460b67a784 deps: update to wabac 2.24.4 + wombat 3.10.0 (#464)
- additional fixes for new sync xhr system, support for deduping xhr
cached resources
- formatting pass
2025-10-30 15:54:50 -07:00
Ilya Kreymer 7cc3f9dc67 fidelity improvements via wabac.js 2.24.3 (#463)
fidelity: Better loading of pages that have sync XHR (via wombat.js)
loading: Truncate loading of URLs that have very large POST requests
(via wabac.js) bump to wabac.js 2.24.3
bump to 2.3.22
2025-10-29 16:29:12 -07:00
Ilya Kreymer fceeb0245a deps: update to wabac.js 2.24.2 (#461)
more complete cdx loading for query fuzzy matching, fixes #457

bump to 2.3.21
2025-10-12 12:52:32 -07:00
Ilya Kreymer 1b56d3e03a ui/replay fidelity: add 'color-theme: light dark' to replay container (#460)
allows propagating the theme to replay iframe!

fixes part of issues with webrecorder/archiveweb.page#320 where
different resources are loaded based on theme
2025-10-12 12:43:45 -07:00
Ilya Kreymer d509baa494 deps: update to latest electron, fixes #456 (#459)
bump to 2.3.20
2025-10-03 22:40:02 -07:00
Emma Segal-Grossman 3660c3b89e Ensure icon size is applied just to outer SVG (#458)
Due to changes in chrome (https://issues.chromium.org/issues/40409865),
width and height presentation attributes within nested SVGs are now
respected, which breaks icons styling in RWP. This fixes that by
ensuring that the styling that sets width and height on the outer icon
SVG _only_ applies to the outer SVG, allowing the inner SVG's
intrinsic/declared size to be respected properly.

Tested in latest chrome, firefox, and safari on macos.

Fixes #457
2025-10-03 12:30:55 -07:00
Pierre fc6daf131d docs: add archipelago to list of projects using replayweb.page (#453)
[Archipelago](https://archipelago.nyc/) uses replayweb.page and could be
mentioned in the documentation, @DiegoPino is this an accurate
description?

> Digital Object Repository developed by the Metropolitan New York
Library Council.
2025-09-19 17:36:30 -07:00
Ilya Kreymer 09b7288beb deps: update to wabac.js 2.24.1 (#454)
fidelity: fix rewriting of embed tags (via wabac.js) bump to 2.3.19
2025-09-19 17:05:37 -07:00
Ilya Kreymer 62a0f018b4 deps update: update to wabac.js 2.24.0 (#452)
- fidelity: Better detection of UTF-8 charset (via wabac.js 2.24.0)
- fidelity: Web Worker module rewriting improvements (via wabac.js
2.24.0)
- fixes #445
2025-09-12 16:11:49 -07:00
dependabot[bot] 1c45384376 build(deps-dev): bump electron from 36.3.2 to 36.8.1 (#447)
Bumps [electron](https://github.com/electron/electron) from 36.3.2 to
36.8.1.

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-04 18:56:26 -07:00
Ilya Kreymer 5a4fb5a8a6 deps: update to wabac.js 2.23.11 for eval() rewriting fix + xss security fix on not found page (#448)
bump to 2.3.17
2025-09-04 12:18:31 -07:00
dependabot[bot] 048aa8eeee build(deps-dev): bump webpack-dev-server from 5.0.4 to 5.2.1 (#442)
Bumps
[webpack-dev-server](https://github.com/webpack/webpack-dev-server) from
5.0.4 to 5.2.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/webpack/webpack-dev-server/releases">webpack-dev-server's
releases</a>.</em></p>
<blockquote>
<h2>v5.2.1</h2>
<h2><a
href="https://github.com/webpack/webpack-dev-server/compare/v5.2.0...v6.0.0">5.2.1</a>
(2025-03-26)</h2>
<h3>Security</h3>
<ul>
<li>cross-origin requests are not allowed unless allowed by
<code>Access-Control-Allow-Origin</code> header</li>
<li>requests with an IP addresses in the <code>Origin</code> header are
not allowed to connect to WebSocket server unless configured by
<code>allowedHosts</code> or it different from the <code>Host</code>
header</li>
</ul>
<p>The above changes may make the dev server not work if you relied on
such behavior, but unfortunately they carry security risks, so they were
considered as fixes.</p>
<h3>Bug Fixes</h3>
<ul>
<li>prevent overlay for errors caught by React error boundaries (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5431">#5431</a>)
(<a
href="https://github.com/webpack/webpack-dev-server/commit/8c1abc903ab444d9ce99e567b9a6c603e1ec06be">8c1abc9</a>)</li>
<li>take the first network found instead of the last one, this restores
the same behavior as 5.0.4 (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5411">#5411</a>)
(<a
href="https://github.com/webpack/webpack-dev-server/commit/ffd0b86b790d372f90e17aea92cfd9def83fee96">ffd0b86</a>)</li>
</ul>
<h2>v5.2.0</h2>
<h2><a
href="https://github.com/webpack/webpack-dev-server/compare/v5.1.0...v5.2.0">5.2.0</a>
(2024-12-11)</h2>
<h3>Features</h3>
<ul>
<li>added <code>getClientEntry</code> and <code>getClientHotEntry</code>
methods to get clients entries (<a
href="https://github.com/webpack/webpack-dev-server/commit/dc642a832d45c23c5c7a08fbf29995e0db7e0d95">dc642a8</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>speed up initial client bundling (<a
href="https://github.com/webpack/webpack-dev-server/commit/145b5d01610a16468fc32719a20366682b0e8572">145b5d0</a>)</li>
</ul>
<h2>v5.1.0</h2>
<h2><a
href="https://github.com/webpack/webpack-dev-server/compare/v5.0.4...v5.1.0">5.1.0</a>
(2024-09-03)</h2>
<h3>Features</h3>
<ul>
<li>add visual progress indicators (<a
href="https://github.com/webpack/webpack-dev-server/commit/a8f40b74e6439a8281b9fe8868eb9db7e4c5de50">a8f40b7</a>)</li>
<li>added the <code>app</code> option to be <code>Function</code> (by
default only with <code>connect</code> compatibility frameworks) (<a
href="https://github.com/webpack/webpack-dev-server/commit/3096148746c906105c4424352f5b5ad1bff0fd4f">3096148</a>)</li>
<li>allow the <code>server</code> option to be <code>Function</code> (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5275">#5275</a>)
(<a
href="https://github.com/webpack/webpack-dev-server/commit/02a1c6d788f5fc47c11cc7d910fd1b5e17aed886">02a1c6d</a>)</li>
<li>http2 support for <code>connect</code> and <code>connect</code>
compatibility frameworks which support HTTP2 (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5267">#5267</a>)
(<a
href="https://github.com/webpack/webpack-dev-server/commit/6509a3fd3eb5decb61f60a9f2db97d76f71ecb99">6509a3f</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>check the <code>platform</code> property to determinate the target
(<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5269">#5269</a>)
(<a
href="https://github.com/webpack/webpack-dev-server/commit/c3b532c6360317319793dcda22c76fbfc05fbdcf">c3b532c</a>)</li>
<li>ipv6 output (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5270">#5270</a>)
(<a
href="https://github.com/webpack/webpack-dev-server/commit/06005e7cb99e4c412b968ed3fb786acfb8c2e037">06005e7</a>)</li>
<li>replace <code>rimraf</code> with <code>rm</code> (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5162">#5162</a>)
(<a
href="https://github.com/webpack/webpack-dev-server/commit/1a1561f09bdfa7a98434d7d9cd62e323b887dfbf">1a1561f</a>)</li>
<li>replace default gateway (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5255">#5255</a>)
(<a
href="https://github.com/webpack/webpack-dev-server/commit/f5f09024ff4fe6625aa94bcd69439462d74013f0">f5f0902</a>)</li>
<li>support <code>devServer: false</code> (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5272">#5272</a>)
(<a
href="https://github.com/webpack/webpack-dev-server/commit/8b341cb8c1dc01cef62c70959620cd0cbd87fee7">8b341cb</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/webpack/webpack-dev-server/blob/master/CHANGELOG.md">webpack-dev-server's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/webpack/webpack-dev-server/compare/v5.2.0...v6.0.0">5.2.1</a>
(2025-03-26)</h2>
<h3>Security</h3>
<ul>
<li>cross-origin requests are not allowed unless allowed by
<code>Access-Control-Allow-Origin</code> header</li>
<li>requests with an IP addresses in the <code>Origin</code> header are
not allowed to connect to WebSocket server unless configured by
<code>allowedHosts</code> or it different from the <code>Host</code>
header</li>
</ul>
<p>The above changes may make the dev server not work if you relied on
such behavior, but unfortunately they carry security risks, so they were
considered as fixes.</p>
<h3>Bug Fixes</h3>
<ul>
<li>prevent overlay for errors caught by React error boundaries (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5431">#5431</a>)
(<a
href="https://github.com/webpack/webpack-dev-server/commit/8c1abc903ab444d9ce99e567b9a6c603e1ec06be">8c1abc9</a>)</li>
<li>take the first network found instead of the last one, this restores
the same behavior as 5.0.4 (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5411">#5411</a>)
(<a
href="https://github.com/webpack/webpack-dev-server/commit/ffd0b86b790d372f90e17aea92cfd9def83fee96">ffd0b86</a>)</li>
</ul>
<h2><a
href="https://github.com/webpack/webpack-dev-server/compare/v5.1.0...v5.2.0">5.2.0</a>
(2024-12-11)</h2>
<h3>Features</h3>
<ul>
<li>added <code>getClientEntry</code> and <code>getClientHotEntry</code>
methods to get clients entries (<a
href="https://github.com/webpack/webpack-dev-server/commit/dc642a832d45c23c5c7a08fbf29995e0db7e0d95">dc642a8</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>speed up initial client bundling (<a
href="https://github.com/webpack/webpack-dev-server/commit/145b5d01610a16468fc32719a20366682b0e8572">145b5d0</a>)</li>
</ul>
<h2><a
href="https://github.com/webpack/webpack-dev-server/compare/v5.0.4...v5.1.0">5.1.0</a>
(2024-09-03)</h2>
<h3>Features</h3>
<ul>
<li>add visual progress indicators (<a
href="https://github.com/webpack/webpack-dev-server/commit/a8f40b74e6439a8281b9fe8868eb9db7e4c5de50">a8f40b7</a>)</li>
<li>added the <code>app</code> option to be <code>Function</code> (by
default only with <code>connect</code> compatibility frameworks) (<a
href="https://github.com/webpack/webpack-dev-server/commit/3096148746c906105c4424352f5b5ad1bff0fd4f">3096148</a>)</li>
<li>allow the <code>server</code> option to be <code>Function</code> (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5275">#5275</a>)
(<a
href="https://github.com/webpack/webpack-dev-server/commit/02a1c6d788f5fc47c11cc7d910fd1b5e17aed886">02a1c6d</a>)</li>
<li>http2 support for <code>connect</code> and <code>connect</code>
compatibility frameworks which support HTTP2 (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5267">#5267</a>)
(<a
href="https://github.com/webpack/webpack-dev-server/commit/6509a3fd3eb5decb61f60a9f2db97d76f71ecb99">6509a3f</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>check the <code>platform</code> property to determinate the target
(<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5269">#5269</a>)
(<a
href="https://github.com/webpack/webpack-dev-server/commit/c3b532c6360317319793dcda22c76fbfc05fbdcf">c3b532c</a>)</li>
<li>ipv6 output (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5270">#5270</a>)
(<a
href="https://github.com/webpack/webpack-dev-server/commit/06005e7cb99e4c412b968ed3fb786acfb8c2e037">06005e7</a>)</li>
<li>replace <code>rimraf</code> with <code>rm</code> (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5162">#5162</a>)
(<a
href="https://github.com/webpack/webpack-dev-server/commit/1a1561f09bdfa7a98434d7d9cd62e323b887dfbf">1a1561f</a>)</li>
<li>replace default gateway (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5255">#5255</a>)
(<a
href="https://github.com/webpack/webpack-dev-server/commit/f5f09024ff4fe6625aa94bcd69439462d74013f0">f5f0902</a>)</li>
<li>support <code>devServer: false</code> (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5272">#5272</a>)
(<a
href="https://github.com/webpack/webpack-dev-server/commit/8b341cb8c1dc01cef62c70959620cd0cbd87fee7">8b341cb</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/webpack/webpack-dev-server/commit/0d22a08cc96deeb4421251ff41a915dcda1b59c5"><code>0d22a08</code></a>
chore(release): 5.2.1</li>
<li><a
href="https://github.com/webpack/webpack-dev-server/commit/6045b1e9d63078fb24cac52eb361b7356944cddd"><code>6045b1e</code></a>
chore(deps): update (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5444">#5444</a>)</li>
<li><a
href="https://github.com/webpack/webpack-dev-server/commit/ffd0b86b790d372f90e17aea92cfd9def83fee96"><code>ffd0b86</code></a>
fix: take the first network found instead of the last one, this restores
the ...</li>
<li><a
href="https://github.com/webpack/webpack-dev-server/commit/9ea7b0856a72b92b1444ef6a0087f90b883500dd"><code>9ea7b08</code></a>
ci: update dependency-review-action (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5442">#5442</a>)</li>
<li><a
href="https://github.com/webpack/webpack-dev-server/commit/5c9378bb01276357d7af208a0856ca2163db188e"><code>5c9378b</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/webpack/webpack-dev-server/commit/d2575ad8dfed9207ed810b5ea0ccf465115a2239"><code>d2575ad</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/webpack/webpack-dev-server/commit/8c1abc903ab444d9ce99e567b9a6c603e1ec06be"><code>8c1abc9</code></a>
fix: prevent overlay for errors caught by React error boundaries (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5431">#5431</a>)</li>
<li><a
href="https://github.com/webpack/webpack-dev-server/commit/5a39c7099ab2908251ff759f311e1d4e85b4b3e8"><code>5a39c70</code></a>
ci: update codecov/codecov-action to v5 (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5406">#5406</a>)</li>
<li><a
href="https://github.com/webpack/webpack-dev-server/commit/55220a800ba4e30dbde2d98785ecf4c80b32f711"><code>55220a8</code></a>
chore(deps-dev): bump the dependencies group across 1 directory with 4
update...</li>
<li><a
href="https://github.com/webpack/webpack-dev-server/commit/09f6f8eb46abce836acbc1b8c892e348106c924e"><code>09f6f8e</code></a>
chore(deps): bump the dependencies group across 1 directory with 2
updates (#...</li>
<li>Additional commits viewable in <a
href="https://github.com/webpack/webpack-dev-server/compare/v5.0.4...v5.2.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=webpack-dev-server&package-manager=npm_and_yarn&previous-version=5.0.4&new-version=5.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/webrecorder/replayweb.page/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-07-25 00:10:26 -07:00
dependabot[bot] 39c2723e90 build(deps): bump serialize-javascript from 6.0.0 to 6.0.2 (#401)
Bumps
[serialize-javascript](https://github.com/yahoo/serialize-javascript)
from 6.0.0 to 6.0.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/yahoo/serialize-javascript/releases">serialize-javascript's
releases</a>.</em></p>
<blockquote>
<h2>v6.0.2</h2>
<ul>
<li>fix: serialize URL string contents to prevent XSS (<a
href="https://redirect.github.com/yahoo/serialize-javascript/issues/173">#173</a>)
f27d65d</li>
<li>Bump <code>@​babel/traverse</code> from 7.10.1 to 7.23.7 (<a
href="https://redirect.github.com/yahoo/serialize-javascript/issues/171">#171</a>)
02499c0</li>
<li>docs: update readme with URL support (<a
href="https://redirect.github.com/yahoo/serialize-javascript/issues/146">#146</a>)
0d88527</li>
<li>chore: update node version and lock file  e2a3a91</li>
<li>fix typo (<a
href="https://redirect.github.com/yahoo/serialize-javascript/issues/164">#164</a>)
5a1fa64</li>
</ul>
<p><a
href="https://github.com/yahoo/serialize-javascript/compare/v6.0.1...v6.0.2">https://github.com/yahoo/serialize-javascript/compare/v6.0.1...v6.0.2</a></p>
<h2>v6.0.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Bump mocha from 9.0.1 to 9.0.2 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/126">yahoo/serialize-javascript#126</a></li>
<li>Bump mocha from 9.0.2 to 9.0.3 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/127">yahoo/serialize-javascript#127</a></li>
<li>Bump path-parse from 1.0.6 to 1.0.7 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/129">yahoo/serialize-javascript#129</a></li>
<li>Bump mocha from 9.0.3 to 9.1.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/130">yahoo/serialize-javascript#130</a></li>
<li>Bump mocha from 9.1.0 to 9.1.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/131">yahoo/serialize-javascript#131</a></li>
<li>Bump mocha from 9.1.1 to 9.1.2 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/132">yahoo/serialize-javascript#132</a></li>
<li>Bump mocha from 9.1.2 to 9.1.3 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/133">yahoo/serialize-javascript#133</a></li>
<li>Bump mocha from 9.1.3 to 9.1.4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/137">yahoo/serialize-javascript#137</a></li>
<li>Bump mocha from 9.1.4 to 9.2.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/138">yahoo/serialize-javascript#138</a></li>
<li>Bump chai from 4.3.4 to 4.3.6 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/140">yahoo/serialize-javascript#140</a></li>
<li>Bump ansi-regex from 5.0.0 to 5.0.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/141">yahoo/serialize-javascript#141</a></li>
<li>Bump mocha from 9.2.0 to 9.2.2 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/143">yahoo/serialize-javascript#143</a></li>
<li>Bump minimist from 1.2.5 to 1.2.6 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/144">yahoo/serialize-javascript#144</a></li>
<li>Bump mocha from 9.2.2 to 10.0.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/145">yahoo/serialize-javascript#145</a></li>
<li>Bump mocha from 10.0.0 to 10.1.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/149">yahoo/serialize-javascript#149</a></li>
<li>Bump chai from 4.3.6 to 4.3.7 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/150">yahoo/serialize-javascript#150</a></li>
<li>ci: test.yml - actions bump by <a
href="https://github.com/piwysocki"><code>@​piwysocki</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/151">yahoo/serialize-javascript#151</a></li>
<li>Bump minimatch from 3.0.4 to 3.1.2 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/152">yahoo/serialize-javascript#152</a></li>
<li>Bump mocha from 10.1.0 to 10.2.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/153">yahoo/serialize-javascript#153</a></li>
<li>Bump json5 from 2.1.3 to 2.2.3 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/155">yahoo/serialize-javascript#155</a></li>
<li>Fix serialization issue for 0n. by <a
href="https://github.com/momocow"><code>@​momocow</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/156">yahoo/serialize-javascript#156</a></li>
<li>Release v6.0.1 by <a
href="https://github.com/okuryu"><code>@​okuryu</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/157">yahoo/serialize-javascript#157</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/piwysocki"><code>@​piwysocki</code></a>
made their first contribution in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/151">yahoo/serialize-javascript#151</a></li>
<li><a href="https://github.com/momocow"><code>@​momocow</code></a> made
their first contribution in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/156">yahoo/serialize-javascript#156</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/yahoo/serialize-javascript/compare/v6.0.0...v6.0.1">https://github.com/yahoo/serialize-javascript/compare/v6.0.0...v6.0.1</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/yahoo/serialize-javascript/commit/b71ec23841d7cf30847d3071d9da38ee0b397fc8"><code>b71ec23</code></a>
6.0.2</li>
<li><a
href="https://github.com/yahoo/serialize-javascript/commit/f27d65d3de42affe2aac14607066c293891cec4e"><code>f27d65d</code></a>
fix: serialize URL string contents to prevent XSS (<a
href="https://redirect.github.com/yahoo/serialize-javascript/issues/173">#173</a>)</li>
<li><a
href="https://github.com/yahoo/serialize-javascript/commit/02499c0adfb40f48e1ebdcbe6fffc83b162b95e9"><code>02499c0</code></a>
Bump <code>@​babel/traverse</code> from 7.10.1 to 7.23.7 (<a
href="https://redirect.github.com/yahoo/serialize-javascript/issues/171">#171</a>)</li>
<li><a
href="https://github.com/yahoo/serialize-javascript/commit/0d885272f45069b1207189ae18a6f2726b4abaa9"><code>0d88527</code></a>
docs: update readme with URL support (<a
href="https://redirect.github.com/yahoo/serialize-javascript/issues/146">#146</a>)</li>
<li><a
href="https://github.com/yahoo/serialize-javascript/commit/e2a3a9173e6770ee92e02d95d6a8e7958dfb419d"><code>e2a3a91</code></a>
chore: update node version and lock file</li>
<li><a
href="https://github.com/yahoo/serialize-javascript/commit/5a1fa646d9cbbe0b4f13c07f01c249fb2493e20f"><code>5a1fa64</code></a>
fix typo (<a
href="https://redirect.github.com/yahoo/serialize-javascript/issues/164">#164</a>)</li>
<li><a
href="https://github.com/yahoo/serialize-javascript/commit/7139f9251b4cad52136513cf3360869e1e645d6c"><code>7139f92</code></a>
Release v6.0.1 (<a
href="https://redirect.github.com/yahoo/serialize-javascript/issues/157">#157</a>)</li>
<li><a
href="https://github.com/yahoo/serialize-javascript/commit/7e23ae89e4b65ebf8836fcbaab637d49fb32ecb2"><code>7e23ae8</code></a>
Fix serialization issue for 0n. (<a
href="https://redirect.github.com/yahoo/serialize-javascript/issues/156">#156</a>)</li>
<li><a
href="https://github.com/yahoo/serialize-javascript/commit/343abd98ff0a3f88f61fca35100762fdd6cb1963"><code>343abd9</code></a>
Bump json5 from 2.1.3 to 2.2.3 (<a
href="https://redirect.github.com/yahoo/serialize-javascript/issues/155">#155</a>)</li>
<li><a
href="https://github.com/yahoo/serialize-javascript/commit/38d0e70e2d82662b2ec4fa2f7f3e1289db745db1"><code>38d0e70</code></a>
Bump mocha from 10.1.0 to 10.2.0 (<a
href="https://redirect.github.com/yahoo/serialize-javascript/issues/153">#153</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/yahoo/serialize-javascript/compare/v6.0.0...v6.0.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=serialize-javascript&package-manager=npm_and_yarn&previous-version=6.0.0&new-version=6.0.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

You can trigger a rebase of this PR by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/webrecorder/replayweb.page/network/alerts).

</details>

> **Note**
> Automatic rebases have been disabled on this pull request as it has
been open for over 30 days.

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-07-25 00:09:42 -07:00
dependabot[bot] c5f14b3b3f build(deps): bump form-data from 4.0.0 to 4.0.4 (#443)
Bumps [form-data](https://github.com/form-data/form-data) from 4.0.0 to
4.0.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/form-data/form-data/releases">form-data's
releases</a>.</em></p>
<blockquote>
<h2>v4.0.4</h2>
<h2><a
href="https://github.com/form-data/form-data/compare/v4.0.3...v4.0.4">v4.0.4</a>
- 2025-07-16</h2>
<h3>Commits</h3>
<ul>
<li>[meta] add <code>auto-changelog</code> <a
href="https://github.com/form-data/form-data/commit/811f68282fab0315209d0e2d1c44b6c32ea0d479"><code>811f682</code></a></li>
<li>[Tests] handle predict-v8-randomness failures in node &lt; 17 and
node &gt; 23 <a
href="https://github.com/form-data/form-data/commit/1d11a76434d101f22fdb26b8aef8615f28b98402"><code>1d11a76</code></a></li>
<li>[Fix] Switch to using <code>crypto</code> random for boundary values
<a
href="https://github.com/form-data/form-data/commit/3d1723080e6577a66f17f163ecd345a21d8d0fd0"><code>3d17230</code></a></li>
<li>[Tests] fix linting errors <a
href="https://github.com/form-data/form-data/commit/5e340800b5f8914213e4e0378c084aae71cfd73a"><code>5e34080</code></a></li>
<li>[meta] actually ensure the readme backup isn’t published <a
href="https://github.com/form-data/form-data/commit/316c82ba93fd4985af757b771b9a1f26d3b709ef"><code>316c82b</code></a></li>
<li>[Dev Deps] update <code>@ljharb/eslint-config</code> <a
href="https://github.com/form-data/form-data/commit/58c25d76406a5b0dfdf54045cf252563f2bbda8d"><code>58c25d7</code></a></li>
<li>[meta] fix readme capitalization <a
href="https://github.com/form-data/form-data/commit/2300ca19595b0ee96431e868fe2a40db79e41c61"><code>2300ca1</code></a></li>
</ul>
<h2>v4.0.3</h2>
<h2><a
href="https://github.com/form-data/form-data/compare/v4.0.2...v4.0.3">v4.0.3</a>
- 2025-06-05</h2>
<h3>Fixed</h3>
<ul>
<li>[Fix] <code>append</code>: avoid a crash on nullish values <a
href="https://redirect.github.com/form-data/form-data/issues/577"><code>[#577](https://github.com/form-data/form-data/issues/577)</code></a></li>
</ul>
<h3>Commits</h3>
<ul>
<li>[eslint] use a shared config <a
href="https://github.com/form-data/form-data/commit/426ba9ac440f95d1998dac9a5cd8d738043b048f"><code>426ba9a</code></a></li>
<li>[eslint] fix some spacing issues <a
href="https://github.com/form-data/form-data/commit/20941917f0e9487e68c564ebc3157e23609e2939"><code>2094191</code></a></li>
<li>[Refactor] use <code>hasown</code> <a
href="https://github.com/form-data/form-data/commit/81ab41b46fdf34f5d89d7ff30b513b0925febfaa"><code>81ab41b</code></a></li>
<li>[Fix] validate boundary type in <code>setBoundary()</code> method <a
href="https://github.com/form-data/form-data/commit/8d8e4693093519f7f18e3c597d1e8df8c493de9e"><code>8d8e469</code></a></li>
<li>[Tests] add tests to check the behavior of <code>getBoundary</code>
with non-strings <a
href="https://github.com/form-data/form-data/commit/837b8a1f7562bfb8bda74f3fc538adb7a5858995"><code>837b8a1</code></a></li>
<li>[Dev Deps] remove unused deps <a
href="https://github.com/form-data/form-data/commit/870e4e665935e701bf983a051244ab928e62d58e"><code>870e4e6</code></a></li>
<li>[meta] remove local commit hooks <a
href="https://github.com/form-data/form-data/commit/e6e83ccb545a5619ed6cd04f31d5c2f655eb633e"><code>e6e83cc</code></a></li>
<li>[Dev Deps] update <code>eslint</code> <a
href="https://github.com/form-data/form-data/commit/4066fd6f65992b62fa324a6474a9292a4f88c916"><code>4066fd6</code></a></li>
<li>[meta] fix scripts to use prepublishOnly <a
href="https://github.com/form-data/form-data/commit/c4bbb13c0ef669916657bc129341301b1d331d75"><code>c4bbb13</code></a></li>
</ul>
<h2>v4.0.2</h2>
<h2><a
href="https://github.com/form-data/form-data/compare/v4.0.1...v4.0.2">v4.0.2</a>
- 2025-02-14</h2>
<h3>Merged</h3>
<ul>
<li>[Fix] set <code>Symbol.toStringTag</code> when available <a
href="https://redirect.github.com/form-data/form-data/pull/573"><code>[#573](https://github.com/form-data/form-data/issues/573)</code></a></li>
<li>[Fix] set <code>Symbol.toStringTag</code> when available <a
href="https://redirect.github.com/form-data/form-data/pull/573"><code>[#573](https://github.com/form-data/form-data/issues/573)</code></a></li>
<li>fix (npmignore): ignore temporary build files <a
href="https://redirect.github.com/form-data/form-data/pull/532"><code>[#532](https://github.com/form-data/form-data/issues/532)</code></a></li>
<li>fix (npmignore): ignore temporary build files <a
href="https://redirect.github.com/form-data/form-data/pull/532"><code>[#532](https://github.com/form-data/form-data/issues/532)</code></a></li>
</ul>
<h3>Fixed</h3>
<ul>
<li>[Fix] set <code>Symbol.toStringTag</code> when available (<a
href="https://redirect.github.com/form-data/form-data/issues/573">#573</a>)
<a
href="https://redirect.github.com/form-data/form-data/issues/396"><code>[#396](https://github.com/form-data/form-data/issues/396)</code></a></li>
<li>[Fix] set <code>Symbol.toStringTag</code> when available (<a
href="https://redirect.github.com/form-data/form-data/issues/573">#573</a>)
<a
href="https://redirect.github.com/form-data/form-data/issues/396"><code>[#396](https://github.com/form-data/form-data/issues/396)</code></a></li>
<li>[Fix] set <code>Symbol.toStringTag</code> when available <a
href="https://redirect.github.com/form-data/form-data/issues/396"><code>[#396](https://github.com/form-data/form-data/issues/396)</code></a></li>
</ul>
<h3>Commits</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/form-data/form-data/blob/master/CHANGELOG.md">form-data's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/form-data/form-data/compare/v4.0.3...v4.0.4">v4.0.4</a>
- 2025-07-16</h2>
<h3>Commits</h3>
<ul>
<li>[meta] add <code>auto-changelog</code> <a
href="https://github.com/form-data/form-data/commit/811f68282fab0315209d0e2d1c44b6c32ea0d479"><code>811f682</code></a></li>
<li>[Tests] handle predict-v8-randomness failures in node &lt; 17 and
node &gt; 23 <a
href="https://github.com/form-data/form-data/commit/1d11a76434d101f22fdb26b8aef8615f28b98402"><code>1d11a76</code></a></li>
<li>[Fix] Switch to using <code>crypto</code> random for boundary values
<a
href="https://github.com/form-data/form-data/commit/3d1723080e6577a66f17f163ecd345a21d8d0fd0"><code>3d17230</code></a></li>
<li>[Tests] fix linting errors <a
href="https://github.com/form-data/form-data/commit/5e340800b5f8914213e4e0378c084aae71cfd73a"><code>5e34080</code></a></li>
<li>[meta] actually ensure the readme backup isn’t published <a
href="https://github.com/form-data/form-data/commit/316c82ba93fd4985af757b771b9a1f26d3b709ef"><code>316c82b</code></a></li>
<li>[Dev Deps] update <code>@ljharb/eslint-config</code> <a
href="https://github.com/form-data/form-data/commit/58c25d76406a5b0dfdf54045cf252563f2bbda8d"><code>58c25d7</code></a></li>
<li>[meta] fix readme capitalization <a
href="https://github.com/form-data/form-data/commit/2300ca19595b0ee96431e868fe2a40db79e41c61"><code>2300ca1</code></a></li>
</ul>
<h2><a
href="https://github.com/form-data/form-data/compare/v4.0.2...v4.0.3">v4.0.3</a>
- 2025-06-05</h2>
<h3>Fixed</h3>
<ul>
<li>[Fix] <code>append</code>: avoid a crash on nullish values <a
href="https://redirect.github.com/form-data/form-data/issues/577"><code>[#577](https://github.com/form-data/form-data/issues/577)</code></a></li>
</ul>
<h3>Commits</h3>
<ul>
<li>[eslint] use a shared config <a
href="https://github.com/form-data/form-data/commit/426ba9ac440f95d1998dac9a5cd8d738043b048f"><code>426ba9a</code></a></li>
<li>[eslint] fix some spacing issues <a
href="https://github.com/form-data/form-data/commit/20941917f0e9487e68c564ebc3157e23609e2939"><code>2094191</code></a></li>
<li>[Refactor] use <code>hasown</code> <a
href="https://github.com/form-data/form-data/commit/81ab41b46fdf34f5d89d7ff30b513b0925febfaa"><code>81ab41b</code></a></li>
<li>[Fix] validate boundary type in <code>setBoundary()</code> method <a
href="https://github.com/form-data/form-data/commit/8d8e4693093519f7f18e3c597d1e8df8c493de9e"><code>8d8e469</code></a></li>
<li>[Tests] add tests to check the behavior of <code>getBoundary</code>
with non-strings <a
href="https://github.com/form-data/form-data/commit/837b8a1f7562bfb8bda74f3fc538adb7a5858995"><code>837b8a1</code></a></li>
<li>[Dev Deps] remove unused deps <a
href="https://github.com/form-data/form-data/commit/870e4e665935e701bf983a051244ab928e62d58e"><code>870e4e6</code></a></li>
<li>[meta] remove local commit hooks <a
href="https://github.com/form-data/form-data/commit/e6e83ccb545a5619ed6cd04f31d5c2f655eb633e"><code>e6e83cc</code></a></li>
<li>[Dev Deps] update <code>eslint</code> <a
href="https://github.com/form-data/form-data/commit/4066fd6f65992b62fa324a6474a9292a4f88c916"><code>4066fd6</code></a></li>
<li>[meta] fix scripts to use prepublishOnly <a
href="https://github.com/form-data/form-data/commit/c4bbb13c0ef669916657bc129341301b1d331d75"><code>c4bbb13</code></a></li>
</ul>
<h2><a
href="https://github.com/form-data/form-data/compare/v4.0.1...v4.0.2">v4.0.2</a>
- 2025-02-14</h2>
<h3>Merged</h3>
<ul>
<li>[Fix] set <code>Symbol.toStringTag</code> when available <a
href="https://redirect.github.com/form-data/form-data/pull/573"><code>[#573](https://github.com/form-data/form-data/issues/573)</code></a></li>
<li>[Fix] set <code>Symbol.toStringTag</code> when available <a
href="https://redirect.github.com/form-data/form-data/pull/573"><code>[#573](https://github.com/form-data/form-data/issues/573)</code></a></li>
<li>fix (npmignore): ignore temporary build files <a
href="https://redirect.github.com/form-data/form-data/pull/532"><code>[#532](https://github.com/form-data/form-data/issues/532)</code></a></li>
<li>fix (npmignore): ignore temporary build files <a
href="https://redirect.github.com/form-data/form-data/pull/532"><code>[#532](https://github.com/form-data/form-data/issues/532)</code></a></li>
</ul>
<h3>Fixed</h3>
<ul>
<li>[Fix] set <code>Symbol.toStringTag</code> when available (<a
href="https://redirect.github.com/form-data/form-data/issues/573">#573</a>)
<a
href="https://redirect.github.com/form-data/form-data/issues/396"><code>[#396](https://github.com/form-data/form-data/issues/396)</code></a></li>
<li>[Fix] set <code>Symbol.toStringTag</code> when available (<a
href="https://redirect.github.com/form-data/form-data/issues/573">#573</a>)
<a
href="https://redirect.github.com/form-data/form-data/issues/396"><code>[#396](https://github.com/form-data/form-data/issues/396)</code></a></li>
<li>[Fix] set <code>Symbol.toStringTag</code> when available <a
href="https://redirect.github.com/form-data/form-data/issues/396"><code>[#396](https://github.com/form-data/form-data/issues/396)</code></a></li>
</ul>
<h3>Commits</h3>
<ul>
<li>Merge tags v2.5.3 and v3.0.3 <a
href="https://github.com/form-data/form-data/commit/92613b9208556eb4ebc482fdf599fae111626fb6"><code>92613b9</code></a></li>
<li>[Tests] migrate from travis to GHA <a
href="https://github.com/form-data/form-data/commit/806eda77740e6e3c67c7815afb216f2e1f187ba5"><code>806eda7</code></a></li>
<li>[Tests] migrate from travis to GHA <a
href="https://github.com/form-data/form-data/commit/8fdb3bc6b5d001f8909a9fca391d1d1d97ef1d79"><code>8fdb3bc</code></a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/form-data/form-data/commit/41996f5ac73a867046d48512cab62e64fc846dad"><code>41996f5</code></a>
v4.0.4</li>
<li><a
href="https://github.com/form-data/form-data/commit/316c82ba93fd4985af757b771b9a1f26d3b709ef"><code>316c82b</code></a>
[meta] actually ensure the readme backup isn’t published</li>
<li><a
href="https://github.com/form-data/form-data/commit/2300ca19595b0ee96431e868fe2a40db79e41c61"><code>2300ca1</code></a>
[meta] fix readme capitalization</li>
<li><a
href="https://github.com/form-data/form-data/commit/811f68282fab0315209d0e2d1c44b6c32ea0d479"><code>811f682</code></a>
[meta] add <code>auto-changelog</code></li>
<li><a
href="https://github.com/form-data/form-data/commit/5e340800b5f8914213e4e0378c084aae71cfd73a"><code>5e34080</code></a>
[Tests] fix linting errors</li>
<li><a
href="https://github.com/form-data/form-data/commit/1d11a76434d101f22fdb26b8aef8615f28b98402"><code>1d11a76</code></a>
[Tests] handle predict-v8-randomness failures in node &lt; 17 and node
&gt; 23</li>
<li><a
href="https://github.com/form-data/form-data/commit/58c25d76406a5b0dfdf54045cf252563f2bbda8d"><code>58c25d7</code></a>
[Dev Deps] update <code>@ljharb/eslint-config</code></li>
<li><a
href="https://github.com/form-data/form-data/commit/3d1723080e6577a66f17f163ecd345a21d8d0fd0"><code>3d17230</code></a>
[Fix] Switch to using <code>crypto</code> random for boundary
values</li>
<li><a
href="https://github.com/form-data/form-data/commit/d8d67dc8ac79285154edf7d3f57dbab593b9a146"><code>d8d67dc</code></a>
v4.0.3</li>
<li><a
href="https://github.com/form-data/form-data/commit/e6e83ccb545a5619ed6cd04f31d5c2f655eb633e"><code>e6e83cc</code></a>
[meta] remove local commit hooks</li>
<li>Additional commits viewable in <a
href="https://github.com/form-data/form-data/compare/v4.0.0...v4.0.4">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~ljharb">ljharb</a>, a new releaser for
form-data since your current version.</p>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=form-data&package-manager=npm_and_yarn&previous-version=4.0.0&new-version=4.0.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/webrecorder/replayweb.page/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-07-25 00:07:41 -07:00
dependabot[bot] bbd0394503 build(deps): bump nanoid from 3.3.1 to 3.3.8 (#388)
Bumps [nanoid](https://github.com/ai/nanoid) from 3.3.1 to 3.3.8.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/ai/nanoid/blob/main/CHANGELOG.md">nanoid's
changelog</a>.</em></p>
<blockquote>
<h2>3.3.8</h2>
<ul>
<li>Fixed a way to break Nano ID by passing non-integer size (by <a
href="https://github.com/myndzi"><code>@​myndzi</code></a>).</li>
</ul>
<h2>3.3.7</h2>
<ul>
<li>Fixed <code>node16</code> TypeScript support (by Saadi
Myftija).</li>
</ul>
<h2>3.3.6</h2>
<ul>
<li>Fixed package.</li>
</ul>
<h2>3.3.5</h2>
<ul>
<li>Backport funding information.</li>
</ul>
<h2>3.3.4</h2>
<ul>
<li>Fixed <code>--help</code> in CLI (by <a
href="https://github.com/Lete114"><code>@​Lete114</code></a>).</li>
</ul>
<h2>3.3.3</h2>
<ul>
<li>Reduced size (by Anton Khlynovskiy).</li>
</ul>
<h2>3.3.2</h2>
<ul>
<li>Fixed <code>enhanced-resolve</code> support.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/ai/nanoid/commit/3044cd5e73f4cf31795f61f6e6b961c8c0a5c744"><code>3044cd5</code></a>
Release 3.3.8 version</li>
<li><a
href="https://github.com/ai/nanoid/commit/4fe34959c34e5b3573889ed4f24fe91d1d3e7231"><code>4fe3495</code></a>
Update size limit</li>
<li><a
href="https://github.com/ai/nanoid/commit/d643045f40d6dc8afa000a644d857da1436ed08c"><code>d643045</code></a>
Fix pool pollution, infinite loop (<a
href="https://redirect.github.com/ai/nanoid/issues/510">#510</a>)</li>
<li><a
href="https://github.com/ai/nanoid/commit/89d82d2ce4b0411e73ac7ccfe57bc03e932416e2"><code>89d82d2</code></a>
Release 3.3.7 version</li>
<li><a
href="https://github.com/ai/nanoid/commit/5022c35acaaedd9da4b56cad37b02bbcb87635e1"><code>5022c35</code></a>
Update dual-publish</li>
<li><a
href="https://github.com/ai/nanoid/commit/3e7a8e557b9d93a582ef2c3bb9f7306fc339ef35"><code>3e7a8e5</code></a>
Remove benchmark from CI for v3</li>
<li><a
href="https://github.com/ai/nanoid/commit/d3561446aee52fdf38325e1d30c905d989a8ccd2"><code>d356144</code></a>
Fix CI for v3</li>
<li><a
href="https://github.com/ai/nanoid/commit/37b25dfac2edfd73d7bbc88886e4c6067fac8619"><code>37b25df</code></a>
Move to pnpm 8</li>
<li><a
href="https://github.com/ai/nanoid/commit/d96f39222a800ea9a6a156db139992b64d4b0dca"><code>d96f392</code></a>
Release 3.3.6 version</li>
<li><a
href="https://github.com/ai/nanoid/commit/8210dfb9fc01efcf354c00a1b7e1948f1bebb32f"><code>8210dfb</code></a>
Release 3.3.5 version</li>
<li>Additional commits viewable in <a
href="https://github.com/ai/nanoid/compare/3.3.1...3.3.8">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=nanoid&package-manager=npm_and_yarn&previous-version=3.3.1&new-version=3.3.8)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

You can trigger a rebase of this PR by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/webrecorder/replayweb.page/network/alerts).

</details>

> **Note**
> Automatic rebases have been disabled on this pull request as it has
been open for over 30 days.

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-07-25 00:01:19 -07:00
dependabot[bot] 9264b9a5b8 build(deps): bump cross-spawn from 7.0.3 to 7.0.6 (#372)
Bumps [cross-spawn](https://github.com/moxystudio/node-cross-spawn) from
7.0.3 to 7.0.6.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/moxystudio/node-cross-spawn/blob/master/CHANGELOG.md">cross-spawn's
changelog</a>.</em></p>
<blockquote>
<h3><a
href="https://github.com/moxystudio/node-cross-spawn/compare/v7.0.5...v7.0.6">7.0.6</a>
(2024-11-18)</h3>
<h3>Bug Fixes</h3>
<ul>
<li>update cross-spawn version to 7.0.5 in package-lock.json (<a
href="https://github.com/moxystudio/node-cross-spawn/commit/f700743918d901eff92960e15a8dd68f87bd4176">f700743</a>)</li>
</ul>
<h3><a
href="https://github.com/moxystudio/node-cross-spawn/compare/v7.0.4...v7.0.5">7.0.5</a>
(2024-11-07)</h3>
<h3>Bug Fixes</h3>
<ul>
<li>fix escaping bug introduced by backtracking (<a
href="https://github.com/moxystudio/node-cross-spawn/commit/640d391fde65388548601d95abedccc12943374f">640d391</a>)</li>
</ul>
<h3><a
href="https://github.com/moxystudio/node-cross-spawn/compare/v7.0.3...v7.0.4">7.0.4</a>
(2024-11-07)</h3>
<h3>Bug Fixes</h3>
<ul>
<li>disable regexp backtracking (<a
href="https://redirect.github.com/moxystudio/node-cross-spawn/issues/160">#160</a>)
(<a
href="https://github.com/moxystudio/node-cross-spawn/commit/5ff3a07d9add449021d806e45c4168203aa833ff">5ff3a07</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/moxystudio/node-cross-spawn/commit/77cd97f3ca7b62c904a63a698fc4a79bf41977d0"><code>77cd97f</code></a>
chore(release): 7.0.6</li>
<li><a
href="https://github.com/moxystudio/node-cross-spawn/commit/6717de49ff1e5de49622488dcb9c33fb25370c85"><code>6717de4</code></a>
chore: upgrade standard-version</li>
<li><a
href="https://github.com/moxystudio/node-cross-spawn/commit/f700743918d901eff92960e15a8dd68f87bd4176"><code>f700743</code></a>
fix: update cross-spawn version to 7.0.5 in package-lock.json</li>
<li><a
href="https://github.com/moxystudio/node-cross-spawn/commit/9a7e3b2165917367f74b8365faad9873b30d7263"><code>9a7e3b2</code></a>
chore: fix build status badge</li>
<li><a
href="https://github.com/moxystudio/node-cross-spawn/commit/085268352dcbcad8064c64c5efb25268b4023184"><code>0852683</code></a>
chore(release): 7.0.5</li>
<li><a
href="https://github.com/moxystudio/node-cross-spawn/commit/640d391fde65388548601d95abedccc12943374f"><code>640d391</code></a>
fix: fix escaping bug introduced by backtracking</li>
<li><a
href="https://github.com/moxystudio/node-cross-spawn/commit/bff0c87c8b627c4e6d04ec2449e733048bebb464"><code>bff0c87</code></a>
chore: remove codecov</li>
<li><a
href="https://github.com/moxystudio/node-cross-spawn/commit/a7c6abc6fee79641d45b452fe6217deaa1bd0973"><code>a7c6abc</code></a>
chore: replace travis with github workflows</li>
<li><a
href="https://github.com/moxystudio/node-cross-spawn/commit/9b9246e0969e86656d7ccd527716bc3c18842a19"><code>9b9246e</code></a>
chore(release): 7.0.4</li>
<li><a
href="https://github.com/moxystudio/node-cross-spawn/commit/5ff3a07d9add449021d806e45c4168203aa833ff"><code>5ff3a07</code></a>
fix: disable regexp backtracking (<a
href="https://redirect.github.com/moxystudio/node-cross-spawn/issues/160">#160</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/moxystudio/node-cross-spawn/compare/v7.0.3...v7.0.6">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=cross-spawn&package-manager=npm_and_yarn&previous-version=7.0.3&new-version=7.0.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

You can trigger a rebase of this PR by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/webrecorder/replayweb.page/network/alerts).

</details>

> **Note**
> Automatic rebases have been disabled on this pull request as it has
been open for over 30 days.

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-07-25 00:00:16 -07:00
Ilya Kreymer 5779091011 deps: update wabac.js to 2.23.9 (#441)
bump to 2.3.16
2025-07-24 23:49:40 -07:00
Ilya Kreymer 039499d33a deps: bump to wabac.js 2.23.7 (#439)
- replay fidelity fixes via wabac.js
bump to 2.3.15
2025-07-15 10:42:10 -07:00
Ilya Kreymer 8f10357e1b version: bump to 2.3.14 2025-06-17 23:12:50 -04:00
Ilya Kreymer 2bca66e3ec 2.3.14 release (#437)
- update to wabac.js 2.23.4 to make hashing optional, not require wasm
- add tests with CSP policy in place
2025-06-17 20:51:56 -04:00
Ilya Kreymer 05d117f374 linux build: add gtk version flag to fix incompatibility, fixes #430 (#436) 2025-06-14 19:45:32 -04:00
Ilya Kreymer 6ee91ad4d7 Fix s3:// resolving, don't use origin for non-standard URLs, fixes #432 (#434) 2025-06-14 15:06:12 -04:00
Ilya Kreymer a33daf8c9b rewrite: fix rewrite of HLS when only available bandwidth exceeds max… (#435)
… (via wabac.js 2.23.3), fixes #433

bump to 2.3.13
2025-06-14 15:06:02 -04:00
Ilya Kreymer af7dc7a6c3 Electron app loading improvements + Windows paths fix (#429)
- Electron no longer allows Windows paths in URLs
(https://www.electronjs.org/docs/latest/breaking-changes#behavior-changed-custom-protocol-url-handling-on-windows),
fixes with help of wabac.js to replace `C:\path\to\file` with
`C//path/to/file`
- Electron app cleanup: replace deprecated protocol handlers with new
protocol.handle() method, update types
- Electron app: ensure just filename is displayed on index page,
consistent with other platforms
- Update to wabac.js 2.23.2
- Update to Electron 36.3.2
- Fixes #427
- bump to 2.3.12
2025-05-30 13:15:54 -07:00
Ilya Kreymer e4daded7d9 deps: actually update to wabac.js 2.23.1 (#423)
bump to 2.3.11
2025-05-15 19:01:31 -07:00
Ilya Kreymer c575c4c8dd deps: update electron + wabac.js to 2.23.1 (#422)
bump to 2.3.10
2025-05-15 18:42:25 -07:00