archivalo-oss/replayweb.page
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
549 Commits 2 Branches 1 Tag
eaa65f58994f7ce9b13086a3958d8d7aa31318d1
Commit Graph
275 Commits
Author SHA1 Message Date
Ilya Kreymer eaa65f5899 deps: bump to wabac.js 2.25.4 for improved dedupe / revisit handling (#488) 
bump to 2.4.2
 2026-02-16 22:31:31 -08:00
Ilya Kreymer 80fbc448e3 deps: update to wabac.js 2.25.3 to fix WACZ loading bug (#484) 
ci: update npm release action for npm authorized builds bump to 2.4.1
 2026-02-12 00:35:40 -08:00
dependabot[bot] e4fd230694 build(deps): bump lodash from 4.17.21 to 4.17.23 (#478) 
Bumps [lodash](https://github.com/lodash/lodash) from 4.17.21 to
4.17.23.

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-02-11 14:32:14 -08:00
dependabot[bot] 5921bc485c build(deps-dev): bump webpack from 5.91.0 to 5.104.1 (#480) 
Bumps [webpack](https://github.com/webpack/webpack) from 5.91.0 to
5.104.1.

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-02-11 14:30:35 -08:00
Ilya Kreymeranddependabot[bot] a5e7ec642f dependency update for 2.24.0 (#472) 
- update wabac to 2.25.2, playwright test to 1.57.0, electron to 39.2.6, other dependabot deps

---------

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-12-05 14:29:49 -08:00
Ilya KreymerandTessa Walsh 916b154688 Add resources download button + click to download picker in replay (#469) 
Fixes #467 
- Add a download button on the resource page for each entry to allow
downloading each resource no matter what type.
- Add a new 'click to download' image or media picker that allows
highlighting + clicking on image/media to download on the page (to get
around 'Save Image As...) not working. Also supports inline svgs +
background images - should work better than Save Image As...
- Location bar shows a popup indicating in 'click to download' mode,
which can be canceled. Otherwise, mode remains until user downloads
something.
- Type fixes: Untangle Page and URLResource types for better type
checking.
- Deps: bump to wabac.js 2.25.1 for new download mode support

---------
Co-authored-by: Tessa Walsh <tessa@bitarchivist.net>
 2025-12-05 09:21:17 -08:00
Ilya Kreymer d2524ab26f deps: update to wabac.js to 2.24.5, wombat fixes (#465) 2025-11-02 08:22:45 -08:00
Ilya Kreymer 460b67a784 deps: update to wabac 2.24.4 + wombat 3.10.0 (#464) 
- additional fixes for new sync xhr system, support for deduping xhr
cached resources
- formatting pass
 2025-10-30 15:54:50 -07:00
Ilya Kreymer 7cc3f9dc67 fidelity improvements via wabac.js 2.24.3 (#463) 
fidelity: Better loading of pages that have sync XHR (via wombat.js)
loading: Truncate loading of URLs that have very large POST requests
(via wabac.js) bump to wabac.js 2.24.3
bump to 2.3.22
 2025-10-29 16:29:12 -07:00
Ilya Kreymer fceeb0245a deps: update to wabac.js 2.24.2 (#461) 
more complete cdx loading for query fuzzy matching, fixes #457

bump to 2.3.21
 2025-10-12 12:52:32 -07:00
Ilya Kreymer d509baa494 deps: update to latest electron, fixes #456 (#459) 
bump to 2.3.20
 2025-10-03 22:40:02 -07:00
Ilya Kreymer 09b7288beb deps: update to wabac.js 2.24.1 (#454) 
fidelity: fix rewriting of embed tags (via wabac.js) bump to 2.3.19
 2025-09-19 17:05:37 -07:00
Ilya Kreymer 62a0f018b4 deps update: update to wabac.js 2.24.0 (#452) 
- fidelity: Better detection of UTF-8 charset (via wabac.js 2.24.0)
- fidelity: Web Worker module rewriting improvements (via wabac.js
2.24.0)
- fixes #445
 2025-09-12 16:11:49 -07:00
dependabot[bot] 1c45384376 build(deps-dev): bump electron from 36.3.2 to 36.8.1 (#447) 
Bumps [electron](https://github.com/electron/electron) from 36.3.2 to
36.8.1.

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-09-04 18:56:26 -07:00
Ilya Kreymer 5a4fb5a8a6 deps: update to wabac.js 2.23.11 for eval() rewriting fix + xss security fix on not found page (#448) 
bump to 2.3.17
 2025-09-04 12:18:31 -07:00
dependabot[bot] 048aa8eeee build(deps-dev): bump webpack-dev-server from 5.0.4 to 5.2.1 (#442) 
Bumps
[webpack-dev-server](https://github.com/webpack/webpack-dev-server) from
5.0.4 to 5.2.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/webpack/webpack-dev-server/releases">webpack-dev-server's
releases</a>.</em></p>
<blockquote>
<h2>v5.2.1</h2>
<h2><a
href="https://github.com/webpack/webpack-dev-server/compare/v5.2.0...v6.0.0">5.2.1</a>
(2025-03-26)</h2>
<h3>Security</h3>
<ul>
<li>cross-origin requests are not allowed unless allowed by
<code>Access-Control-Allow-Origin</code> header</li>
<li>requests with an IP addresses in the <code>Origin</code> header are
not allowed to connect to WebSocket server unless configured by
<code>allowedHosts</code> or it different from the <code>Host</code>
header</li>
</ul>
<p>The above changes may make the dev server not work if you relied on
such behavior, but unfortunately they carry security risks, so they were
considered as fixes.</p>
<h3>Bug Fixes</h3>
<ul>
<li>prevent overlay for errors caught by React error boundaries (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5431">#5431</a>)
(<a
href="https://github.com/webpack/webpack-dev-server/commit/8c1abc903ab444d9ce99e567b9a6c603e1ec06be">8c1abc9</a>)</li>
<li>take the first network found instead of the last one, this restores
the same behavior as 5.0.4 (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5411">#5411</a>)
(<a
href="https://github.com/webpack/webpack-dev-server/commit/ffd0b86b790d372f90e17aea92cfd9def83fee96">ffd0b86</a>)</li>
</ul>
<h2>v5.2.0</h2>
<h2><a
href="https://github.com/webpack/webpack-dev-server/compare/v5.1.0...v5.2.0">5.2.0</a>
(2024-12-11)</h2>
<h3>Features</h3>
<ul>
<li>added <code>getClientEntry</code> and <code>getClientHotEntry</code>
methods to get clients entries (<a
href="https://github.com/webpack/webpack-dev-server/commit/dc642a832d45c23c5c7a08fbf29995e0db7e0d95">dc642a8</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>speed up initial client bundling (<a
href="https://github.com/webpack/webpack-dev-server/commit/145b5d01610a16468fc32719a20366682b0e8572">145b5d0</a>)</li>
</ul>
<h2>v5.1.0</h2>
<h2><a
href="https://github.com/webpack/webpack-dev-server/compare/v5.0.4...v5.1.0">5.1.0</a>
(2024-09-03)</h2>
<h3>Features</h3>
<ul>
<li>add visual progress indicators (<a
href="https://github.com/webpack/webpack-dev-server/commit/a8f40b74e6439a8281b9fe8868eb9db7e4c5de50">a8f40b7</a>)</li>
<li>added the <code>app</code> option to be <code>Function</code> (by
default only with <code>connect</code> compatibility frameworks) (<a
href="https://github.com/webpack/webpack-dev-server/commit/3096148746c906105c4424352f5b5ad1bff0fd4f">3096148</a>)</li>
<li>allow the <code>server</code> option to be <code>Function</code> (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5275">#5275</a>)
(<a
href="https://github.com/webpack/webpack-dev-server/commit/02a1c6d788f5fc47c11cc7d910fd1b5e17aed886">02a1c6d</a>)</li>
<li>http2 support for <code>connect</code> and <code>connect</code>
compatibility frameworks which support HTTP2 (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5267">#5267</a>)
(<a
href="https://github.com/webpack/webpack-dev-server/commit/6509a3fd3eb5decb61f60a9f2db97d76f71ecb99">6509a3f</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>check the <code>platform</code> property to determinate the target
(<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5269">#5269</a>)
(<a
href="https://github.com/webpack/webpack-dev-server/commit/c3b532c6360317319793dcda22c76fbfc05fbdcf">c3b532c</a>)</li>
<li>ipv6 output (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5270">#5270</a>)
(<a
href="https://github.com/webpack/webpack-dev-server/commit/06005e7cb99e4c412b968ed3fb786acfb8c2e037">06005e7</a>)</li>
<li>replace <code>rimraf</code> with <code>rm</code> (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5162">#5162</a>)
(<a
href="https://github.com/webpack/webpack-dev-server/commit/1a1561f09bdfa7a98434d7d9cd62e323b887dfbf">1a1561f</a>)</li>
<li>replace default gateway (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5255">#5255</a>)
(<a
href="https://github.com/webpack/webpack-dev-server/commit/f5f09024ff4fe6625aa94bcd69439462d74013f0">f5f0902</a>)</li>
<li>support <code>devServer: false</code> (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5272">#5272</a>)
(<a
href="https://github.com/webpack/webpack-dev-server/commit/8b341cb8c1dc01cef62c70959620cd0cbd87fee7">8b341cb</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/webpack/webpack-dev-server/blob/master/CHANGELOG.md">webpack-dev-server's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/webpack/webpack-dev-server/compare/v5.2.0...v6.0.0">5.2.1</a>
(2025-03-26)</h2>
<h3>Security</h3>
<ul>
<li>cross-origin requests are not allowed unless allowed by
<code>Access-Control-Allow-Origin</code> header</li>
<li>requests with an IP addresses in the <code>Origin</code> header are
not allowed to connect to WebSocket server unless configured by
<code>allowedHosts</code> or it different from the <code>Host</code>
header</li>
</ul>
<p>The above changes may make the dev server not work if you relied on
such behavior, but unfortunately they carry security risks, so they were
considered as fixes.</p>
<h3>Bug Fixes</h3>
<ul>
<li>prevent overlay for errors caught by React error boundaries (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5431">#5431</a>)
(<a
href="https://github.com/webpack/webpack-dev-server/commit/8c1abc903ab444d9ce99e567b9a6c603e1ec06be">8c1abc9</a>)</li>
<li>take the first network found instead of the last one, this restores
the same behavior as 5.0.4 (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5411">#5411</a>)
(<a
href="https://github.com/webpack/webpack-dev-server/commit/ffd0b86b790d372f90e17aea92cfd9def83fee96">ffd0b86</a>)</li>
</ul>
<h2><a
href="https://github.com/webpack/webpack-dev-server/compare/v5.1.0...v5.2.0">5.2.0</a>
(2024-12-11)</h2>
<h3>Features</h3>
<ul>
<li>added <code>getClientEntry</code> and <code>getClientHotEntry</code>
methods to get clients entries (<a
href="https://github.com/webpack/webpack-dev-server/commit/dc642a832d45c23c5c7a08fbf29995e0db7e0d95">dc642a8</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>speed up initial client bundling (<a
href="https://github.com/webpack/webpack-dev-server/commit/145b5d01610a16468fc32719a20366682b0e8572">145b5d0</a>)</li>
</ul>
<h2><a
href="https://github.com/webpack/webpack-dev-server/compare/v5.0.4...v5.1.0">5.1.0</a>
(2024-09-03)</h2>
<h3>Features</h3>
<ul>
<li>add visual progress indicators (<a
href="https://github.com/webpack/webpack-dev-server/commit/a8f40b74e6439a8281b9fe8868eb9db7e4c5de50">a8f40b7</a>)</li>
<li>added the <code>app</code> option to be <code>Function</code> (by
default only with <code>connect</code> compatibility frameworks) (<a
href="https://github.com/webpack/webpack-dev-server/commit/3096148746c906105c4424352f5b5ad1bff0fd4f">3096148</a>)</li>
<li>allow the <code>server</code> option to be <code>Function</code> (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5275">#5275</a>)
(<a
href="https://github.com/webpack/webpack-dev-server/commit/02a1c6d788f5fc47c11cc7d910fd1b5e17aed886">02a1c6d</a>)</li>
<li>http2 support for <code>connect</code> and <code>connect</code>
compatibility frameworks which support HTTP2 (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5267">#5267</a>)
(<a
href="https://github.com/webpack/webpack-dev-server/commit/6509a3fd3eb5decb61f60a9f2db97d76f71ecb99">6509a3f</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>check the <code>platform</code> property to determinate the target
(<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5269">#5269</a>)
(<a
href="https://github.com/webpack/webpack-dev-server/commit/c3b532c6360317319793dcda22c76fbfc05fbdcf">c3b532c</a>)</li>
<li>ipv6 output (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5270">#5270</a>)
(<a
href="https://github.com/webpack/webpack-dev-server/commit/06005e7cb99e4c412b968ed3fb786acfb8c2e037">06005e7</a>)</li>
<li>replace <code>rimraf</code> with <code>rm</code> (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5162">#5162</a>)
(<a
href="https://github.com/webpack/webpack-dev-server/commit/1a1561f09bdfa7a98434d7d9cd62e323b887dfbf">1a1561f</a>)</li>
<li>replace default gateway (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5255">#5255</a>)
(<a
href="https://github.com/webpack/webpack-dev-server/commit/f5f09024ff4fe6625aa94bcd69439462d74013f0">f5f0902</a>)</li>
<li>support <code>devServer: false</code> (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5272">#5272</a>)
(<a
href="https://github.com/webpack/webpack-dev-server/commit/8b341cb8c1dc01cef62c70959620cd0cbd87fee7">8b341cb</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/webpack/webpack-dev-server/commit/0d22a08cc96deeb4421251ff41a915dcda1b59c5"><code>0d22a08</code></a>
chore(release): 5.2.1</li>
<li><a
href="https://github.com/webpack/webpack-dev-server/commit/6045b1e9d63078fb24cac52eb361b7356944cddd"><code>6045b1e</code></a>
chore(deps): update (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5444">#5444</a>)</li>
<li><a
href="https://github.com/webpack/webpack-dev-server/commit/ffd0b86b790d372f90e17aea92cfd9def83fee96"><code>ffd0b86</code></a>
fix: take the first network found instead of the last one, this restores
the ...</li>
<li><a
href="https://github.com/webpack/webpack-dev-server/commit/9ea7b0856a72b92b1444ef6a0087f90b883500dd"><code>9ea7b08</code></a>
ci: update dependency-review-action (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5442">#5442</a>)</li>
<li><a
href="https://github.com/webpack/webpack-dev-server/commit/5c9378bb01276357d7af208a0856ca2163db188e"><code>5c9378b</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/webpack/webpack-dev-server/commit/d2575ad8dfed9207ed810b5ea0ccf465115a2239"><code>d2575ad</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/webpack/webpack-dev-server/commit/8c1abc903ab444d9ce99e567b9a6c603e1ec06be"><code>8c1abc9</code></a>
fix: prevent overlay for errors caught by React error boundaries (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5431">#5431</a>)</li>
<li><a
href="https://github.com/webpack/webpack-dev-server/commit/5a39c7099ab2908251ff759f311e1d4e85b4b3e8"><code>5a39c70</code></a>
ci: update codecov/codecov-action to v5 (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5406">#5406</a>)</li>
<li><a
href="https://github.com/webpack/webpack-dev-server/commit/55220a800ba4e30dbde2d98785ecf4c80b32f711"><code>55220a8</code></a>
chore(deps-dev): bump the dependencies group across 1 directory with 4
update...</li>
<li><a
href="https://github.com/webpack/webpack-dev-server/commit/09f6f8eb46abce836acbc1b8c892e348106c924e"><code>09f6f8e</code></a>
chore(deps): bump the dependencies group across 1 directory with 2
updates (#...</li>
<li>Additional commits viewable in <a
href="https://github.com/webpack/webpack-dev-server/compare/v5.0.4...v5.2.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=webpack-dev-server&package-manager=npm_and_yarn&previous-version=5.0.4&new-version=5.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/webrecorder/replayweb.page/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-07-25 00:10:26 -07:00
dependabot[bot] 39c2723e90 build(deps): bump serialize-javascript from 6.0.0 to 6.0.2 (#401) 
Bumps
[serialize-javascript](https://github.com/yahoo/serialize-javascript)
from 6.0.0 to 6.0.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/yahoo/serialize-javascript/releases">serialize-javascript's
releases</a>.</em></p>
<blockquote>
<h2>v6.0.2</h2>
<ul>
<li>fix: serialize URL string contents to prevent XSS (<a
href="https://redirect.github.com/yahoo/serialize-javascript/issues/173">#173</a>)
f27d65d</li>
<li>Bump <code>@​babel/traverse</code> from 7.10.1 to 7.23.7 (<a
href="https://redirect.github.com/yahoo/serialize-javascript/issues/171">#171</a>)
02499c0</li>
<li>docs: update readme with URL support (<a
href="https://redirect.github.com/yahoo/serialize-javascript/issues/146">#146</a>)
0d88527</li>
<li>chore: update node version and lock file  e2a3a91</li>
<li>fix typo (<a
href="https://redirect.github.com/yahoo/serialize-javascript/issues/164">#164</a>)
5a1fa64</li>
</ul>
<p><a
href="https://github.com/yahoo/serialize-javascript/compare/v6.0.1...v6.0.2">https://github.com/yahoo/serialize-javascript/compare/v6.0.1...v6.0.2</a></p>
<h2>v6.0.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Bump mocha from 9.0.1 to 9.0.2 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/126">yahoo/serialize-javascript#126</a></li>
<li>Bump mocha from 9.0.2 to 9.0.3 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/127">yahoo/serialize-javascript#127</a></li>
<li>Bump path-parse from 1.0.6 to 1.0.7 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/129">yahoo/serialize-javascript#129</a></li>
<li>Bump mocha from 9.0.3 to 9.1.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/130">yahoo/serialize-javascript#130</a></li>
<li>Bump mocha from 9.1.0 to 9.1.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/131">yahoo/serialize-javascript#131</a></li>
<li>Bump mocha from 9.1.1 to 9.1.2 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/132">yahoo/serialize-javascript#132</a></li>
<li>Bump mocha from 9.1.2 to 9.1.3 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/133">yahoo/serialize-javascript#133</a></li>
<li>Bump mocha from 9.1.3 to 9.1.4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/137">yahoo/serialize-javascript#137</a></li>
<li>Bump mocha from 9.1.4 to 9.2.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/138">yahoo/serialize-javascript#138</a></li>
<li>Bump chai from 4.3.4 to 4.3.6 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/140">yahoo/serialize-javascript#140</a></li>
<li>Bump ansi-regex from 5.0.0 to 5.0.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/141">yahoo/serialize-javascript#141</a></li>
<li>Bump mocha from 9.2.0 to 9.2.2 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/143">yahoo/serialize-javascript#143</a></li>
<li>Bump minimist from 1.2.5 to 1.2.6 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/144">yahoo/serialize-javascript#144</a></li>
<li>Bump mocha from 9.2.2 to 10.0.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/145">yahoo/serialize-javascript#145</a></li>
<li>Bump mocha from 10.0.0 to 10.1.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/149">yahoo/serialize-javascript#149</a></li>
<li>Bump chai from 4.3.6 to 4.3.7 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/150">yahoo/serialize-javascript#150</a></li>
<li>ci: test.yml - actions bump by <a
href="https://github.com/piwysocki"><code>@​piwysocki</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/151">yahoo/serialize-javascript#151</a></li>
<li>Bump minimatch from 3.0.4 to 3.1.2 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/152">yahoo/serialize-javascript#152</a></li>
<li>Bump mocha from 10.1.0 to 10.2.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/153">yahoo/serialize-javascript#153</a></li>
<li>Bump json5 from 2.1.3 to 2.2.3 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/155">yahoo/serialize-javascript#155</a></li>
<li>Fix serialization issue for 0n. by <a
href="https://github.com/momocow"><code>@​momocow</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/156">yahoo/serialize-javascript#156</a></li>
<li>Release v6.0.1 by <a
href="https://github.com/okuryu"><code>@​okuryu</code></a> in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/157">yahoo/serialize-javascript#157</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/piwysocki"><code>@​piwysocki</code></a>
made their first contribution in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/151">yahoo/serialize-javascript#151</a></li>
<li><a href="https://github.com/momocow"><code>@​momocow</code></a> made
their first contribution in <a
href="https://redirect.github.com/yahoo/serialize-javascript/pull/156">yahoo/serialize-javascript#156</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/yahoo/serialize-javascript/compare/v6.0.0...v6.0.1">https://github.com/yahoo/serialize-javascript/compare/v6.0.0...v6.0.1</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/yahoo/serialize-javascript/commit/b71ec23841d7cf30847d3071d9da38ee0b397fc8"><code>b71ec23</code></a>
6.0.2</li>
<li><a
href="https://github.com/yahoo/serialize-javascript/commit/f27d65d3de42affe2aac14607066c293891cec4e"><code>f27d65d</code></a>
fix: serialize URL string contents to prevent XSS (<a
href="https://redirect.github.com/yahoo/serialize-javascript/issues/173">#173</a>)</li>
<li><a
href="https://github.com/yahoo/serialize-javascript/commit/02499c0adfb40f48e1ebdcbe6fffc83b162b95e9"><code>02499c0</code></a>
Bump <code>@​babel/traverse</code> from 7.10.1 to 7.23.7 (<a
href="https://redirect.github.com/yahoo/serialize-javascript/issues/171">#171</a>)</li>
<li><a
href="https://github.com/yahoo/serialize-javascript/commit/0d885272f45069b1207189ae18a6f2726b4abaa9"><code>0d88527</code></a>
docs: update readme with URL support (<a
href="https://redirect.github.com/yahoo/serialize-javascript/issues/146">#146</a>)</li>
<li><a
href="https://github.com/yahoo/serialize-javascript/commit/e2a3a9173e6770ee92e02d95d6a8e7958dfb419d"><code>e2a3a91</code></a>
chore: update node version and lock file</li>
<li><a
href="https://github.com/yahoo/serialize-javascript/commit/5a1fa646d9cbbe0b4f13c07f01c249fb2493e20f"><code>5a1fa64</code></a>
fix typo (<a
href="https://redirect.github.com/yahoo/serialize-javascript/issues/164">#164</a>)</li>
<li><a
href="https://github.com/yahoo/serialize-javascript/commit/7139f9251b4cad52136513cf3360869e1e645d6c"><code>7139f92</code></a>
Release v6.0.1 (<a
href="https://redirect.github.com/yahoo/serialize-javascript/issues/157">#157</a>)</li>
<li><a
href="https://github.com/yahoo/serialize-javascript/commit/7e23ae89e4b65ebf8836fcbaab637d49fb32ecb2"><code>7e23ae8</code></a>
Fix serialization issue for 0n. (<a
href="https://redirect.github.com/yahoo/serialize-javascript/issues/156">#156</a>)</li>
<li><a
href="https://github.com/yahoo/serialize-javascript/commit/343abd98ff0a3f88f61fca35100762fdd6cb1963"><code>343abd9</code></a>
Bump json5 from 2.1.3 to 2.2.3 (<a
href="https://redirect.github.com/yahoo/serialize-javascript/issues/155">#155</a>)</li>
<li><a
href="https://github.com/yahoo/serialize-javascript/commit/38d0e70e2d82662b2ec4fa2f7f3e1289db745db1"><code>38d0e70</code></a>
Bump mocha from 10.1.0 to 10.2.0 (<a
href="https://redirect.github.com/yahoo/serialize-javascript/issues/153">#153</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/yahoo/serialize-javascript/compare/v6.0.0...v6.0.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=serialize-javascript&package-manager=npm_and_yarn&previous-version=6.0.0&new-version=6.0.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

You can trigger a rebase of this PR by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/webrecorder/replayweb.page/network/alerts).

</details>

> **Note**
> Automatic rebases have been disabled on this pull request as it has
been open for over 30 days.

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-07-25 00:09:42 -07:00
dependabot[bot] c5f14b3b3f build(deps): bump form-data from 4.0.0 to 4.0.4 (#443) 
Bumps [form-data](https://github.com/form-data/form-data) from 4.0.0 to
4.0.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/form-data/form-data/releases">form-data's
releases</a>.</em></p>
<blockquote>
<h2>v4.0.4</h2>
<h2><a
href="https://github.com/form-data/form-data/compare/v4.0.3...v4.0.4">v4.0.4</a>
- 2025-07-16</h2>
<h3>Commits</h3>
<ul>
<li>[meta] add <code>auto-changelog</code> <a
href="https://github.com/form-data/form-data/commit/811f68282fab0315209d0e2d1c44b6c32ea0d479"><code>811f682</code></a></li>
<li>[Tests] handle predict-v8-randomness failures in node &lt; 17 and
node &gt; 23 <a
href="https://github.com/form-data/form-data/commit/1d11a76434d101f22fdb26b8aef8615f28b98402"><code>1d11a76</code></a></li>
<li>[Fix] Switch to using <code>crypto</code> random for boundary values
<a
href="https://github.com/form-data/form-data/commit/3d1723080e6577a66f17f163ecd345a21d8d0fd0"><code>3d17230</code></a></li>
<li>[Tests] fix linting errors <a
href="https://github.com/form-data/form-data/commit/5e340800b5f8914213e4e0378c084aae71cfd73a"><code>5e34080</code></a></li>
<li>[meta] actually ensure the readme backup isn’t published <a
href="https://github.com/form-data/form-data/commit/316c82ba93fd4985af757b771b9a1f26d3b709ef"><code>316c82b</code></a></li>
<li>[Dev Deps] update <code>@ljharb/eslint-config</code> <a
href="https://github.com/form-data/form-data/commit/58c25d76406a5b0dfdf54045cf252563f2bbda8d"><code>58c25d7</code></a></li>
<li>[meta] fix readme capitalization <a
href="https://github.com/form-data/form-data/commit/2300ca19595b0ee96431e868fe2a40db79e41c61"><code>2300ca1</code></a></li>
</ul>
<h2>v4.0.3</h2>
<h2><a
href="https://github.com/form-data/form-data/compare/v4.0.2...v4.0.3">v4.0.3</a>
- 2025-06-05</h2>
<h3>Fixed</h3>
<ul>
<li>[Fix] <code>append</code>: avoid a crash on nullish values <a
href="https://redirect.github.com/form-data/form-data/issues/577"><code>[#577](https://github.com/form-data/form-data/issues/577)</code></a></li>
</ul>
<h3>Commits</h3>
<ul>
<li>[eslint] use a shared config <a
href="https://github.com/form-data/form-data/commit/426ba9ac440f95d1998dac9a5cd8d738043b048f"><code>426ba9a</code></a></li>
<li>[eslint] fix some spacing issues <a
href="https://github.com/form-data/form-data/commit/20941917f0e9487e68c564ebc3157e23609e2939"><code>2094191</code></a></li>
<li>[Refactor] use <code>hasown</code> <a
href="https://github.com/form-data/form-data/commit/81ab41b46fdf34f5d89d7ff30b513b0925febfaa"><code>81ab41b</code></a></li>
<li>[Fix] validate boundary type in <code>setBoundary()</code> method <a
href="https://github.com/form-data/form-data/commit/8d8e4693093519f7f18e3c597d1e8df8c493de9e"><code>8d8e469</code></a></li>
<li>[Tests] add tests to check the behavior of <code>getBoundary</code>
with non-strings <a
href="https://github.com/form-data/form-data/commit/837b8a1f7562bfb8bda74f3fc538adb7a5858995"><code>837b8a1</code></a></li>
<li>[Dev Deps] remove unused deps <a
href="https://github.com/form-data/form-data/commit/870e4e665935e701bf983a051244ab928e62d58e"><code>870e4e6</code></a></li>
<li>[meta] remove local commit hooks <a
href="https://github.com/form-data/form-data/commit/e6e83ccb545a5619ed6cd04f31d5c2f655eb633e"><code>e6e83cc</code></a></li>
<li>[Dev Deps] update <code>eslint</code> <a
href="https://github.com/form-data/form-data/commit/4066fd6f65992b62fa324a6474a9292a4f88c916"><code>4066fd6</code></a></li>
<li>[meta] fix scripts to use prepublishOnly <a
href="https://github.com/form-data/form-data/commit/c4bbb13c0ef669916657bc129341301b1d331d75"><code>c4bbb13</code></a></li>
</ul>
<h2>v4.0.2</h2>
<h2><a
href="https://github.com/form-data/form-data/compare/v4.0.1...v4.0.2">v4.0.2</a>
- 2025-02-14</h2>
<h3>Merged</h3>
<ul>
<li>[Fix] set <code>Symbol.toStringTag</code> when available <a
href="https://redirect.github.com/form-data/form-data/pull/573"><code>[#573](https://github.com/form-data/form-data/issues/573)</code></a></li>
<li>[Fix] set <code>Symbol.toStringTag</code> when available <a
href="https://redirect.github.com/form-data/form-data/pull/573"><code>[#573](https://github.com/form-data/form-data/issues/573)</code></a></li>
<li>fix (npmignore): ignore temporary build files <a
href="https://redirect.github.com/form-data/form-data/pull/532"><code>[#532](https://github.com/form-data/form-data/issues/532)</code></a></li>
<li>fix (npmignore): ignore temporary build files <a
href="https://redirect.github.com/form-data/form-data/pull/532"><code>[#532](https://github.com/form-data/form-data/issues/532)</code></a></li>
</ul>
<h3>Fixed</h3>
<ul>
<li>[Fix] set <code>Symbol.toStringTag</code> when available (<a
href="https://redirect.github.com/form-data/form-data/issues/573">#573</a>)
<a
href="https://redirect.github.com/form-data/form-data/issues/396"><code>[#396](https://github.com/form-data/form-data/issues/396)</code></a></li>
<li>[Fix] set <code>Symbol.toStringTag</code> when available (<a
href="https://redirect.github.com/form-data/form-data/issues/573">#573</a>)
<a
href="https://redirect.github.com/form-data/form-data/issues/396"><code>[#396](https://github.com/form-data/form-data/issues/396)</code></a></li>
<li>[Fix] set <code>Symbol.toStringTag</code> when available <a
href="https://redirect.github.com/form-data/form-data/issues/396"><code>[#396](https://github.com/form-data/form-data/issues/396)</code></a></li>
</ul>
<h3>Commits</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/form-data/form-data/blob/master/CHANGELOG.md">form-data's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/form-data/form-data/compare/v4.0.3...v4.0.4">v4.0.4</a>
- 2025-07-16</h2>
<h3>Commits</h3>
<ul>
<li>[meta] add <code>auto-changelog</code> <a
href="https://github.com/form-data/form-data/commit/811f68282fab0315209d0e2d1c44b6c32ea0d479"><code>811f682</code></a></li>
<li>[Tests] handle predict-v8-randomness failures in node &lt; 17 and
node &gt; 23 <a
href="https://github.com/form-data/form-data/commit/1d11a76434d101f22fdb26b8aef8615f28b98402"><code>1d11a76</code></a></li>
<li>[Fix] Switch to using <code>crypto</code> random for boundary values
<a
href="https://github.com/form-data/form-data/commit/3d1723080e6577a66f17f163ecd345a21d8d0fd0"><code>3d17230</code></a></li>
<li>[Tests] fix linting errors <a
href="https://github.com/form-data/form-data/commit/5e340800b5f8914213e4e0378c084aae71cfd73a"><code>5e34080</code></a></li>
<li>[meta] actually ensure the readme backup isn’t published <a
href="https://github.com/form-data/form-data/commit/316c82ba93fd4985af757b771b9a1f26d3b709ef"><code>316c82b</code></a></li>
<li>[Dev Deps] update <code>@ljharb/eslint-config</code> <a
href="https://github.com/form-data/form-data/commit/58c25d76406a5b0dfdf54045cf252563f2bbda8d"><code>58c25d7</code></a></li>
<li>[meta] fix readme capitalization <a
href="https://github.com/form-data/form-data/commit/2300ca19595b0ee96431e868fe2a40db79e41c61"><code>2300ca1</code></a></li>
</ul>
<h2><a
href="https://github.com/form-data/form-data/compare/v4.0.2...v4.0.3">v4.0.3</a>
- 2025-06-05</h2>
<h3>Fixed</h3>
<ul>
<li>[Fix] <code>append</code>: avoid a crash on nullish values <a
href="https://redirect.github.com/form-data/form-data/issues/577"><code>[#577](https://github.com/form-data/form-data/issues/577)</code></a></li>
</ul>
<h3>Commits</h3>
<ul>
<li>[eslint] use a shared config <a
href="https://github.com/form-data/form-data/commit/426ba9ac440f95d1998dac9a5cd8d738043b048f"><code>426ba9a</code></a></li>
<li>[eslint] fix some spacing issues <a
href="https://github.com/form-data/form-data/commit/20941917f0e9487e68c564ebc3157e23609e2939"><code>2094191</code></a></li>
<li>[Refactor] use <code>hasown</code> <a
href="https://github.com/form-data/form-data/commit/81ab41b46fdf34f5d89d7ff30b513b0925febfaa"><code>81ab41b</code></a></li>
<li>[Fix] validate boundary type in <code>setBoundary()</code> method <a
href="https://github.com/form-data/form-data/commit/8d8e4693093519f7f18e3c597d1e8df8c493de9e"><code>8d8e469</code></a></li>
<li>[Tests] add tests to check the behavior of <code>getBoundary</code>
with non-strings <a
href="https://github.com/form-data/form-data/commit/837b8a1f7562bfb8bda74f3fc538adb7a5858995"><code>837b8a1</code></a></li>
<li>[Dev Deps] remove unused deps <a
href="https://github.com/form-data/form-data/commit/870e4e665935e701bf983a051244ab928e62d58e"><code>870e4e6</code></a></li>
<li>[meta] remove local commit hooks <a
href="https://github.com/form-data/form-data/commit/e6e83ccb545a5619ed6cd04f31d5c2f655eb633e"><code>e6e83cc</code></a></li>
<li>[Dev Deps] update <code>eslint</code> <a
href="https://github.com/form-data/form-data/commit/4066fd6f65992b62fa324a6474a9292a4f88c916"><code>4066fd6</code></a></li>
<li>[meta] fix scripts to use prepublishOnly <a
href="https://github.com/form-data/form-data/commit/c4bbb13c0ef669916657bc129341301b1d331d75"><code>c4bbb13</code></a></li>
</ul>
<h2><a
href="https://github.com/form-data/form-data/compare/v4.0.1...v4.0.2">v4.0.2</a>
- 2025-02-14</h2>
<h3>Merged</h3>
<ul>
<li>[Fix] set <code>Symbol.toStringTag</code> when available <a
href="https://redirect.github.com/form-data/form-data/pull/573"><code>[#573](https://github.com/form-data/form-data/issues/573)</code></a></li>
<li>[Fix] set <code>Symbol.toStringTag</code> when available <a
href="https://redirect.github.com/form-data/form-data/pull/573"><code>[#573](https://github.com/form-data/form-data/issues/573)</code></a></li>
<li>fix (npmignore): ignore temporary build files <a
href="https://redirect.github.com/form-data/form-data/pull/532"><code>[#532](https://github.com/form-data/form-data/issues/532)</code></a></li>
<li>fix (npmignore): ignore temporary build files <a
href="https://redirect.github.com/form-data/form-data/pull/532"><code>[#532](https://github.com/form-data/form-data/issues/532)</code></a></li>
</ul>
<h3>Fixed</h3>
<ul>
<li>[Fix] set <code>Symbol.toStringTag</code> when available (<a
href="https://redirect.github.com/form-data/form-data/issues/573">#573</a>)
<a
href="https://redirect.github.com/form-data/form-data/issues/396"><code>[#396](https://github.com/form-data/form-data/issues/396)</code></a></li>
<li>[Fix] set <code>Symbol.toStringTag</code> when available (<a
href="https://redirect.github.com/form-data/form-data/issues/573">#573</a>)
<a
href="https://redirect.github.com/form-data/form-data/issues/396"><code>[#396](https://github.com/form-data/form-data/issues/396)</code></a></li>
<li>[Fix] set <code>Symbol.toStringTag</code> when available <a
href="https://redirect.github.com/form-data/form-data/issues/396"><code>[#396](https://github.com/form-data/form-data/issues/396)</code></a></li>
</ul>
<h3>Commits</h3>
<ul>
<li>Merge tags v2.5.3 and v3.0.3 <a
href="https://github.com/form-data/form-data/commit/92613b9208556eb4ebc482fdf599fae111626fb6"><code>92613b9</code></a></li>
<li>[Tests] migrate from travis to GHA <a
href="https://github.com/form-data/form-data/commit/806eda77740e6e3c67c7815afb216f2e1f187ba5"><code>806eda7</code></a></li>
<li>[Tests] migrate from travis to GHA <a
href="https://github.com/form-data/form-data/commit/8fdb3bc6b5d001f8909a9fca391d1d1d97ef1d79"><code>8fdb3bc</code></a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/form-data/form-data/commit/41996f5ac73a867046d48512cab62e64fc846dad"><code>41996f5</code></a>
v4.0.4</li>
<li><a
href="https://github.com/form-data/form-data/commit/316c82ba93fd4985af757b771b9a1f26d3b709ef"><code>316c82b</code></a>
[meta] actually ensure the readme backup isn’t published</li>
<li><a
href="https://github.com/form-data/form-data/commit/2300ca19595b0ee96431e868fe2a40db79e41c61"><code>2300ca1</code></a>
[meta] fix readme capitalization</li>
<li><a
href="https://github.com/form-data/form-data/commit/811f68282fab0315209d0e2d1c44b6c32ea0d479"><code>811f682</code></a>
[meta] add <code>auto-changelog</code></li>
<li><a
href="https://github.com/form-data/form-data/commit/5e340800b5f8914213e4e0378c084aae71cfd73a"><code>5e34080</code></a>
[Tests] fix linting errors</li>
<li><a
href="https://github.com/form-data/form-data/commit/1d11a76434d101f22fdb26b8aef8615f28b98402"><code>1d11a76</code></a>
[Tests] handle predict-v8-randomness failures in node &lt; 17 and node
&gt; 23</li>
<li><a
href="https://github.com/form-data/form-data/commit/58c25d76406a5b0dfdf54045cf252563f2bbda8d"><code>58c25d7</code></a>
[Dev Deps] update <code>@ljharb/eslint-config</code></li>
<li><a
href="https://github.com/form-data/form-data/commit/3d1723080e6577a66f17f163ecd345a21d8d0fd0"><code>3d17230</code></a>
[Fix] Switch to using <code>crypto</code> random for boundary
values</li>
<li><a
href="https://github.com/form-data/form-data/commit/d8d67dc8ac79285154edf7d3f57dbab593b9a146"><code>d8d67dc</code></a>
v4.0.3</li>
<li><a
href="https://github.com/form-data/form-data/commit/e6e83ccb545a5619ed6cd04f31d5c2f655eb633e"><code>e6e83cc</code></a>
[meta] remove local commit hooks</li>
<li>Additional commits viewable in <a
href="https://github.com/form-data/form-data/compare/v4.0.0...v4.0.4">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~ljharb">ljharb</a>, a new releaser for
form-data since your current version.</p>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=form-data&package-manager=npm_and_yarn&previous-version=4.0.0&new-version=4.0.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/webrecorder/replayweb.page/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-07-25 00:07:41 -07:00
dependabot[bot] bbd0394503 build(deps): bump nanoid from 3.3.1 to 3.3.8 (#388) 
Bumps [nanoid](https://github.com/ai/nanoid) from 3.3.1 to 3.3.8.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/ai/nanoid/blob/main/CHANGELOG.md">nanoid's
changelog</a>.</em></p>
<blockquote>
<h2>3.3.8</h2>
<ul>
<li>Fixed a way to break Nano ID by passing non-integer size (by <a
href="https://github.com/myndzi"><code>@​myndzi</code></a>).</li>
</ul>
<h2>3.3.7</h2>
<ul>
<li>Fixed <code>node16</code> TypeScript support (by Saadi
Myftija).</li>
</ul>
<h2>3.3.6</h2>
<ul>
<li>Fixed package.</li>
</ul>
<h2>3.3.5</h2>
<ul>
<li>Backport funding information.</li>
</ul>
<h2>3.3.4</h2>
<ul>
<li>Fixed <code>--help</code> in CLI (by <a
href="https://github.com/Lete114"><code>@​Lete114</code></a>).</li>
</ul>
<h2>3.3.3</h2>
<ul>
<li>Reduced size (by Anton Khlynovskiy).</li>
</ul>
<h2>3.3.2</h2>
<ul>
<li>Fixed <code>enhanced-resolve</code> support.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/ai/nanoid/commit/3044cd5e73f4cf31795f61f6e6b961c8c0a5c744"><code>3044cd5</code></a>
Release 3.3.8 version</li>
<li><a
href="https://github.com/ai/nanoid/commit/4fe34959c34e5b3573889ed4f24fe91d1d3e7231"><code>4fe3495</code></a>
Update size limit</li>
<li><a
href="https://github.com/ai/nanoid/commit/d643045f40d6dc8afa000a644d857da1436ed08c"><code>d643045</code></a>
Fix pool pollution, infinite loop (<a
href="https://redirect.github.com/ai/nanoid/issues/510">#510</a>)</li>
<li><a
href="https://github.com/ai/nanoid/commit/89d82d2ce4b0411e73ac7ccfe57bc03e932416e2"><code>89d82d2</code></a>
Release 3.3.7 version</li>
<li><a
href="https://github.com/ai/nanoid/commit/5022c35acaaedd9da4b56cad37b02bbcb87635e1"><code>5022c35</code></a>
Update dual-publish</li>
<li><a
href="https://github.com/ai/nanoid/commit/3e7a8e557b9d93a582ef2c3bb9f7306fc339ef35"><code>3e7a8e5</code></a>
Remove benchmark from CI for v3</li>
<li><a
href="https://github.com/ai/nanoid/commit/d3561446aee52fdf38325e1d30c905d989a8ccd2"><code>d356144</code></a>
Fix CI for v3</li>
<li><a
href="https://github.com/ai/nanoid/commit/37b25dfac2edfd73d7bbc88886e4c6067fac8619"><code>37b25df</code></a>
Move to pnpm 8</li>
<li><a
href="https://github.com/ai/nanoid/commit/d96f39222a800ea9a6a156db139992b64d4b0dca"><code>d96f392</code></a>
Release 3.3.6 version</li>
<li><a
href="https://github.com/ai/nanoid/commit/8210dfb9fc01efcf354c00a1b7e1948f1bebb32f"><code>8210dfb</code></a>
Release 3.3.5 version</li>
<li>Additional commits viewable in <a
href="https://github.com/ai/nanoid/compare/3.3.1...3.3.8">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=nanoid&package-manager=npm_and_yarn&previous-version=3.3.1&new-version=3.3.8)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

You can trigger a rebase of this PR by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/webrecorder/replayweb.page/network/alerts).

</details>

> **Note**
> Automatic rebases have been disabled on this pull request as it has
been open for over 30 days.

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-07-25 00:01:19 -07:00
dependabot[bot] 9264b9a5b8 build(deps): bump cross-spawn from 7.0.3 to 7.0.6 (#372) 
Bumps [cross-spawn](https://github.com/moxystudio/node-cross-spawn) from
7.0.3 to 7.0.6.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/moxystudio/node-cross-spawn/blob/master/CHANGELOG.md">cross-spawn's
changelog</a>.</em></p>
<blockquote>
<h3><a
href="https://github.com/moxystudio/node-cross-spawn/compare/v7.0.5...v7.0.6">7.0.6</a>
(2024-11-18)</h3>
<h3>Bug Fixes</h3>
<ul>
<li>update cross-spawn version to 7.0.5 in package-lock.json (<a
href="https://github.com/moxystudio/node-cross-spawn/commit/f700743918d901eff92960e15a8dd68f87bd4176">f700743</a>)</li>
</ul>
<h3><a
href="https://github.com/moxystudio/node-cross-spawn/compare/v7.0.4...v7.0.5">7.0.5</a>
(2024-11-07)</h3>
<h3>Bug Fixes</h3>
<ul>
<li>fix escaping bug introduced by backtracking (<a
href="https://github.com/moxystudio/node-cross-spawn/commit/640d391fde65388548601d95abedccc12943374f">640d391</a>)</li>
</ul>
<h3><a
href="https://github.com/moxystudio/node-cross-spawn/compare/v7.0.3...v7.0.4">7.0.4</a>
(2024-11-07)</h3>
<h3>Bug Fixes</h3>
<ul>
<li>disable regexp backtracking (<a
href="https://redirect.github.com/moxystudio/node-cross-spawn/issues/160">#160</a>)
(<a
href="https://github.com/moxystudio/node-cross-spawn/commit/5ff3a07d9add449021d806e45c4168203aa833ff">5ff3a07</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/moxystudio/node-cross-spawn/commit/77cd97f3ca7b62c904a63a698fc4a79bf41977d0"><code>77cd97f</code></a>
chore(release): 7.0.6</li>
<li><a
href="https://github.com/moxystudio/node-cross-spawn/commit/6717de49ff1e5de49622488dcb9c33fb25370c85"><code>6717de4</code></a>
chore: upgrade standard-version</li>
<li><a
href="https://github.com/moxystudio/node-cross-spawn/commit/f700743918d901eff92960e15a8dd68f87bd4176"><code>f700743</code></a>
fix: update cross-spawn version to 7.0.5 in package-lock.json</li>
<li><a
href="https://github.com/moxystudio/node-cross-spawn/commit/9a7e3b2165917367f74b8365faad9873b30d7263"><code>9a7e3b2</code></a>
chore: fix build status badge</li>
<li><a
href="https://github.com/moxystudio/node-cross-spawn/commit/085268352dcbcad8064c64c5efb25268b4023184"><code>0852683</code></a>
chore(release): 7.0.5</li>
<li><a
href="https://github.com/moxystudio/node-cross-spawn/commit/640d391fde65388548601d95abedccc12943374f"><code>640d391</code></a>
fix: fix escaping bug introduced by backtracking</li>
<li><a
href="https://github.com/moxystudio/node-cross-spawn/commit/bff0c87c8b627c4e6d04ec2449e733048bebb464"><code>bff0c87</code></a>
chore: remove codecov</li>
<li><a
href="https://github.com/moxystudio/node-cross-spawn/commit/a7c6abc6fee79641d45b452fe6217deaa1bd0973"><code>a7c6abc</code></a>
chore: replace travis with github workflows</li>
<li><a
href="https://github.com/moxystudio/node-cross-spawn/commit/9b9246e0969e86656d7ccd527716bc3c18842a19"><code>9b9246e</code></a>
chore(release): 7.0.4</li>
<li><a
href="https://github.com/moxystudio/node-cross-spawn/commit/5ff3a07d9add449021d806e45c4168203aa833ff"><code>5ff3a07</code></a>
fix: disable regexp backtracking (<a
href="https://redirect.github.com/moxystudio/node-cross-spawn/issues/160">#160</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/moxystudio/node-cross-spawn/compare/v7.0.3...v7.0.6">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=cross-spawn&package-manager=npm_and_yarn&previous-version=7.0.3&new-version=7.0.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

You can trigger a rebase of this PR by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/webrecorder/replayweb.page/network/alerts).

</details>

> **Note**
> Automatic rebases have been disabled on this pull request as it has
been open for over 30 days.

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-07-25 00:00:16 -07:00
Ilya Kreymer 5779091011 deps: update wabac.js to 2.23.9 (#441) 
bump to 2.3.16
 2025-07-24 23:49:40 -07:00
Ilya Kreymer 039499d33a deps: bump to wabac.js 2.23.7 (#439) 
- replay fidelity fixes via wabac.js
bump to 2.3.15
 2025-07-15 10:42:10 -07:00
Ilya Kreymer 2bca66e3ec 2.3.14 release (#437) 
- update to wabac.js 2.23.4 to make hashing optional, not require wasm
- add tests with CSP policy in place
 2025-06-17 20:51:56 -04:00
Ilya Kreymer a33daf8c9b rewrite: fix rewrite of HLS when only available bandwidth exceeds max… (#435) 
… (via wabac.js 2.23.3), fixes #433

bump to 2.3.13
 2025-06-14 15:06:02 -04:00
Ilya Kreymer af7dc7a6c3 Electron app loading improvements + Windows paths fix (#429) 
- Electron no longer allows Windows paths in URLs
(https://www.electronjs.org/docs/latest/breaking-changes#behavior-changed-custom-protocol-url-handling-on-windows),
fixes with help of wabac.js to replace `C:\path\to\file` with
`C//path/to/file`
- Electron app cleanup: replace deprecated protocol handlers with new
protocol.handle() method, update types
- Electron app: ensure just filename is displayed on index page,
consistent with other platforms
- Update to wabac.js 2.23.2
- Update to Electron 36.3.2
- Fixes #427
- bump to 2.3.12
 2025-05-30 13:15:54 -07:00
Ilya Kreymer e4daded7d9 deps: actually update to wabac.js 2.23.1 (#423) 
bump to 2.3.11
 2025-05-15 19:01:31 -07:00
Ilya Kreymer c575c4c8dd deps: update electron + wabac.js to 2.23.1 (#422) 
bump to 2.3.10
 2025-05-15 18:42:25 -07:00
Ilya Kreymer 69983af3a8 Add multi browser tests + wabac.js update (#420) 
Fidelity: Fix CSP issue with iframes in Firefox (via wabac.js 2.23.0)
Loading: Avoid unnecessary reloads of multiWACZ JSON, prune expired
multiWACZ collections

Testing improvements:
- add playwright multi browser tests with firefox and webkit
- add test of iframe replay with iframetest.wacz

deps: update to wabac.js 2.23.0
bump to 2.3.9
 2025-05-14 21:26:01 -07:00
Ilya Kreymer 62c30e7838 Fix ruffle injection + disable gdrive in library build (#419) 
library: disable GDrive integration in library build (for AWP use)
fidelity: Fix Ruffle injection, rewriting improvements (via wabac.js
2.22.17)
loading: Support .wacz.zip extension for loading WACZ files when .zip is
auto-added (eg. on Android devices)

deps: bump to wabac.js 2.22.17
bump to 2.3.8
 2025-05-06 21:07:24 -07:00
Ilya Kreymer c0c196c225 deps: update to wabac.js 2.22.16 (#418) 
bump to 2.3.7
 2025-05-02 18:26:33 -07:00
Ilya Kreymer 15a2ee4937 deps: update to wabac.js 2.22.15 for improved CSP hardening (#417) 
bump to 2.3.6
 2025-05-01 18:27:29 -07:00
Ilya Kreymer 052be327d1 deps: update to wabac.js 2.22.14 (#415) 2025-04-29 17:15:53 -07:00
Ilya Kreymer e12497cb93 2.3.5 deps update (#414) 
update to wabac.js 2.22.12, various fidelity improvements, fix for issue in 
webrecorder/browsertrix-crawler#801
 2025-04-24 12:26:21 -07:00
Ilya Kreymerandemma 592ccc5253 Add 'utils' module export (#410) 
Export core utils and assets used by RWP in /utils.
Add serviceWorkerActivated() utility promise.

---------

Co-authored-by: emma <hi@emma.cafe>
 2025-03-12 21:55:29 -07:00
Ilya Kreymer 2ef95985cd downloadUrl support for multiWACZ + latest wabac (#407) 
main menu tweaks:
- use downloadUrl for action menu download
- don't show download menu if downloadUrl is null
- don't show Archive Info if downloadUrl !== sourceUrl and in embed mode

improved loading: update to wabac.js 2.21.3

bump to 2.3.3, update CHANGES for release
 2025-03-04 11:37:20 -08:00
Ilya Kreymer 4bbe9910e3 loading: fix dynamic page loading for pages with queries (via wabac.j… (#403) 
…s 2.12.2)

version to 2.3.2
 2025-02-26 23:16:01 -08:00
Ilya Kreymer 4c96ea6cb3 Additional fixes for dynamic page loading optimization (#402) 
- Update to wabac.js 2.21.1
- Hide 'Show non-seed pages' when doing a dynamic query
- bump to 2.3.1
 2025-02-24 18:01:29 -08:00
Ilya Kreymer 6ef8bf4973 Support for dynamic page loading for Multi-WACZs (#399) 
Support querying pages dynamically via pages endpoint:
- If loaded pages < total pages, load additional pages via /pages
endpoint if canQueryPages is set to true on item
- If query provided, do `/pages?search=...` to search for pages. Use
pagination of 25 pages for now.

WACZ hash:
- if provided, store waczhash per page, and use for thumbnail, favicon
and top-level replay loading.

Embed: better support for force reloading, call delete with reload
directly in embed

Depends on webrecorder/wabac.js#220
 2025-02-24 14:35:03 -08:00
Ilya Kreymer 6f495c94f9 bump to wabac.js 2.20.8 for 2.2.5 (#389) 
add CHANGES for 2.2.5
 2024-12-31 21:00:05 -08:00
sua yooandemma 09239285a1 fix: Support description markdown and longer length (#385) 
Fixes https://github.com/webrecorder/replayweb.page/issues/381

## Changes

- Renders description as markdown
- Shows "Collection name" and "About this collection" labels when
description is present
- Fixes overflow issue where bottom few pixels of embed is cut off
- Hides description in mobile view

Co-authored-by: emma <hi@emma.cafe>
 2024-12-31 19:49:42 -08:00
Ilya Kreymer 9fa008bab2 Nested WACZ + embed reloading fix (#374) 
- Loading: Fix for loading nested WACZ files (via wabac.js 2.20.7)
- Embeds: Support full reload on embeds via fullReload() call on embed
web component
 2024-11-22 17:58:44 -08:00
Ilya Kreymer bf6da1ed00 deps: update to wabac.js 2.20.6 for fb video + localStorage replay fixes (#373) 
deps: update electron-updater
bump to 2.2.3
 2024-11-21 15:12:41 -08:00
Ilya Kreymer 7fcb470962 deps: update to wabac.js 2.20.3 / wombat 3.8.6 for wombat typo fix (#370) 2024-11-14 19:17:50 -08:00
Ilya Kreymer 7e967cb14c deps update: (#369) 
bump wabac to 2.20.2, minor fidelity improvements via wombat
bump to 2.2.2
 2024-11-14 18:17:27 -08:00
Ilya Kreymer 4d02878c6b deps: bump to wabac.js 2.20.1, wombat 3.8.3 (#367) 
fidelity: better handling of document.write() based frame detection (via
wabac.js 2.20.1, wombat 3.8.3)
bump to 2.2.1
 2024-10-31 23:58:25 -07:00
Ilya Kreymer 95c9be6c5b Support for import as module, wabac.js 2.20 (#364) 
- Extensibility for AWP (customizable toolbar, pass replay iframe messages to parent)
- Support export as module, build separate index.js for module in addition to ui.js
- Update to wabac.js 2.20.0
- bump to 2.2.0
 2024-10-16 20:22:11 -07:00
Ilya Kreymer a1603c5a3c fidelity improvements (instagram + always online) (#362) 
- update rules for instagram
- disable online/offline events detection in replay, replay always
'online' deps: bump to wabac.js 2.19.9, wombat 3.8.2, electron 32.1.0
 2024-09-17 20:37:13 -07:00
Ilya Kreymer d9c7d55e9a deps: update to wabac.js 2.19.7, (#356) 
fidelity improvements to FB replay, eval() rewriting, 'object' tag
rewriting (via wabac.js 2.19.7, wombat 3.7.14)

bump to 2.1.4
 2024-08-13 17:05:07 -07:00
Ilya Kreymer 9b42a032ae deps fixes: actually bump version to 2.1.3, bump electron-updater to 6.3.2 2024-08-08 15:08:57 -07:00
dependabot[bot] ab71c7e699 build(deps): bump electron-updater from 5.3.0 to 6.3.0 (#353) 2024-08-08 15:06:50 -07:00