Skip to content

chore(deps): update non-major dependencies - #7957

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch
Open

chore(deps): update non-major dependencies#7957
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch

Conversation

@renovate

@renovate renovate Bot commented Nov 7, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update
@apidevtools/json-schema-ref-parser (source) 16.0.5 → 16.0.6 age confidence dependencies patch
@datadog/browser-rum (source) 7.16.2 → 7.17.0 age confidence dependencies minor
@kong/kongponents (source) 9.66.12 → 9.66.13 age confidence dependencies patch
activesupport (source, changelog) 8.1.4 → 8.1.4.1 age confidence patch
docker/login-action v4.7.0 → v4.8.0 age confidence action minor
instantsearch.css 8.25.0 → 8.25.1 age confidence dependencies patch
jekyll-include-cache (changelog) 0.3.1 → 0.3.2 age confidence patch
liquid-c (source) 4.0.1 → 4.2.0 age confidence minor
playwright (source) 1.64.1 → 1.65.0 age confidence dependencies minor
ruby/setup-ruby v1.336.0 → v1.338.0 age confidence action minor
step-security/harden-runner v2.22.3 → v2.22.4 age confidence action patch
tough-cookie 6.0.2 → 6.1.0 age confidence dependencies minor
undici (source) 7.30.1 → 7.30.2 age confidence dependencies patch
vite (source) 8.3.5 → 8.3.6 age confidence devDependencies patch
vue (source) 3.5.44 → 3.5.45 age confidence dependencies patch
vue-instantsearch 4.31.0 → 4.32.0 age confidence dependencies minor

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

APIDevTools/json-schema-ref-parser (@​apidevtools/json-schema-ref-parser)

v16.0.6

Compare Source

Bug Fixes
  • preserve root and recursive references when bundling (daaacb8), closes #​434
DataDog/browser-sdk (@​datadog/browser-rum)

v7.17.0

Compare Source

Public Changes:

  • ✨ [DEBUG-6328] Default the Live Debugger service to the build plugin's (#​5148)
  • ✨ [RUM-18974] Allow setting user and account at init (#​5176)
  • 🐛 Round clocksOrigin timestamp when the time origin is fractional (#​5208)
  • 🐛 [RUM-19299] Only instrument the console APIs that are collected (#​5182)
  • 🐛 Don't break SDK init when document.cookie is not accessible (#​5178)
  • 🐛 [RUM-19391] Send oversized page-exit batches as several beacons (#​5218)
  • 🐛 Keep WebSocket constants when the page subclasses WebSocket before RUM loads (#​5170)
  • ⚡️ Halve the Live Debugger's capture time for objects with many keys (#​5217)
  • ⚗️ [RUM-17885] Use the Soft Navigation API for route_change FCP, CLS and INP (#​5167)
  • ⚗️ [RUM-19388] Hash and encode canvas captures in the worker (#​5201)
  • ⚗️ [RUM-19387] Support running parallel Session Replay workers (#​5200)
  • ⚗️ Collect masked click-target attributes in composed_path_selector (#​5073)

Internal Changes:

  • 👷 Update dependency minimatch to v11 [SECURITY] (#​5223)
  • 👷 Update dependency nuxt to v4.6.3 [SECURITY] (#​5222)
  • 👷 Update dependency node-forge to v1.4.1 [SECURITY] (#​5221)
  • 👷 Update dependency eslint-plugin-unicorn to v79 (#​5216)
  • 👷 Update all non-major dependencies (#​5215)
  • 👷 Fix handling-dependency-prs skill name and apply review follow-ups (#​5203)
  • 👷 Add handling-dependency-prs skill (#​5190)
  • 👷 move the pipeline category when closing or reopening a ticket in the triage skill (#​5191)
  • 👷 Update dependency @​playwright/test to v1.64.1 (#​5151)
  • 👷 add triaging-telemetry-errors skill (#​5169)
  • 👷 Update all non-major dependencies (#​5152)
  • 👷 Bump chrome to 156.0.8078.47-1 (#​5162)
  • 👷 Update dependency undici to v8.12.2 [SECURITY] (#​5174)
  • 👷 Update dependency next to v16.4.1 [SECURITY] (#​5173)
  • 👷 Update dependency nuxt to v4.6.2 [SECURITY] (#​5175)
  • ✅ [RUM-19516] Quarantine flaky image resource check in salesforce e2e (#​5236)
  • ✅ Ignore Shopify checkout OTLP requests in Shopify e2e console checks (#​5228)
  • ✅ [RUM-19391] Make flushEvents fire beforeunload in WebKit (#​5204)
  • 🔥 Remove CLAUDE.md stubs and outdated Cursor rules (#​5219)
Kong/kongponents (@​kong/kongponents)

v9.66.13

Compare Source

Bug Fixes
rails/rails (activesupport)

v8.1.4.1: 8.1.4.1

Compare Source

Active Support

  • ActiveSupport::MessagePack no longer deserializes an unsafe
    ActiveSupport::SafeBuffer as html_safe.

    A SafeBuffer that was no longer html_safe?, for example after an
    in-place gsub!, was deserialized as an html_safe SafeBuffer. It is now
    serialized with an unsafe marker and deserialized as a String. Earlier
    versions of Rails cannot read an unsafe buffer serialized this way.

    [GHSA-2w9f-fxwj-w2qf]

    Jean Boussier

  • ActiveSupport::Inflector#safe_constantize matches the constant name in a
    LoadError message as a literal string instead of building a Regexp
    from it.

    The name's segments were interpolated unescaped into the pattern, so input
    that reaches safe_constantize, such as the channel identifier in an Action
    Cable subscribe command, chose the source passed to the regexp compiler.

    [GHSA-8474-xrp6-wh69]

    Jeremy Daer

Active Model

  • No changes.

Active Record

  • No changes.

Action View

  • Skip attribute names in tag helpers that are blank once converted to a
    string.

    A Symbol such as :" " is not blank, because Symbol#blank? is
    Symbol#empty?, so it reached the escaping step and produced an attribute
    with no name. The asset helpers symbolize their keys, so an ordinary String
    key reached the same place.

    [GHSA-68p9-83h6-5wpj]

    Mike Dalessio

  • Fix strip_tags to encode " and ' in its output.

    strip_tags returns an html_safe string, but was not encoding quotation
    marks. The method now encodes all five HTML-significant characters (&,
    <, >, ", '), consistent with the existing html_safe convention.

    Output used outside HTML, such as in a text template or JSON, now contains
    &quot; and &#&#8203;39; where it contained " and '. CGI.unescapeHTML
    decodes them.

    [GHSA-rq8q-p985-fjq7]

    Mike Dalessio

  • Escape the matched phrase before substituting it into highlight's
    :highlighter.

    A match was copied into each \1 of the highlighter as it appeared in
    the sanitized text, which keeps " and ' as they are, so a match
    containing a quote ended a quoted attribute value such as the
    documented '<a href="search?q=\1">\1</a>' and added attributes of
    its own. Each substituted group now goes through
    ERB::Util.html_escape_once, so quotes in a match render as &quot;
    and &#&#8203;39;. Only the numbered placeholders \0 to \9 are expanded,
    and a match never replaces the > that closes a tag.

    [GHSA-v6rj-xm57-3p59]

    Jeremy Daer

  • Require rails-html-sanitizer 1.7.2 or later.

    With the HTML5 sanitizer, Nokogiri before 1.19.5 left < and >
    unescaped in attribute values. highlight and simple_format, which
    edit the sanitized HTML as a string, could then turn markup inside an
    attribute value into live elements. rails-html-sanitizer 1.7.2 requires
    Loofah 2.25.3, which requires Nokogiri 1.19.5.

    [GHSA-2p2f-4rq4-gjwc]

    Mike Dalessio

Action Pack

  • Apply config.action_dispatch.cookies_same_site_protection to every session
    store.

    ActionDispatch::Session::CacheStore, MemCacheStore and third-party
    stores built on AbstractStore or the session mixins sent session cookies
    with no SameSite attribute. Only CookieStore applied the configured
    default.

    [GHSA-gmj8-hvj3-49mw]

    Jean Boussier

  • Prevent ActionController::Live streams from blocking when a full buffer is
    closed or aborted.

    [GHSA-rwvh-fw6r-pwvp]

    Jeremy Daer

  • Set and extend the Vary header for rendered responses according to the
    request headers used in format negotiation.

    Vary: Accept was only added when the request carried a usable Accept
    header. A response to a request without one, negotiated to HTML or
    JavaScript, could be stored by a shared cache and served to later clients
    that requested a different representation.

    Responses now vary on Accept and X-Requested-With whenever the format is
    not given by the URL. XHR requests without Accept also vary on
    Content-Type, which Rails uses as a legacy format fallback. When
    config.action_dispatch.ignore_accept_header is enabled, responses vary
    only on X-Requested-With.

    These fields are appended to an existing Vary value without duplicating
    fields case-insensitively. Vary: * remains unchanged.

    [GHSA-r9jg-fmfx-2gv6]

    Jeremy Daer

  • Skip writing a CacheStore session that another request deleted while this
    one ran.

    A request that loaded a session from ActionDispatch::Session::CacheStore
    wrote it back when it finished, even after a concurrent reset_session or a
    server-side delete had removed it, so the old session ID worked again.

    [GHSA-2586-8ghr-69fj]

    Mike Dalessio

  • Don't write upgraded cookies to a response that skips the session.

    Reading a signed or encrypted cookie written under a rotated secret, or in
    the format a :hybrid serializer migrates from, writes it back in the
    current format. That write ignored request.session_options[:skip], so a
    response that skips the session, such as the Active Storage proxy's
    public, cacheable response, could still carry the session cookie in
    Set-Cookie. Such a response now leaves the cookie unchanged, and a later
    request that does not skip the session upgrades it. An application that
    skips the session on every request no longer upgrades its signed or
    encrypted cookies. Cookies the application sets are still written.

    [GHSA-x6mj-8jx9-qhqv]

    Mike Dalessio

  • Detect conflicts between the Forwarded and X-Forwarded-For headers in
    ActionDispatch::RemoteIp.

    When ip_spoofing_check is enabled (the default), requests carrying both
    headers with conflicting client addresses now raise
    ActionDispatch::RemoteIp::IpSpoofAttackError.

    [GHSA-2gff-2mmg-m73p]

    Gannon McGibbon, Mike Dalessio

  • ActionController::Parameters#each_key returns self when given a block.

    It returned the internal ActiveSupport::HashWithIndifferentAccess, which
    does not respond to permitted?, so passing that return value to mass
    assignment skipped the Strong Parameters check. each, each_pair and
    each_value already return self.

    Document that ActionController::Parameters#as_json returns every
    parameter, permitted or not, in a hash that mass assignment does not check.

    [GHSA-wm3x-v3qw-4jh3]

    Mike Dalessio

Active Job

  • No changes.

Action Mailer

  • No changes.

Action Cable

  • No changes.

Active Storage

  • Preserve committed proxy responses when a storage error interrupts a
    streamed download.

    [GHSA-4v2w-w6g6-f8f8]

    Jeremy Daer

  • Derive ActiveStorage::Filename#base and #extension from the sanitized
    filename.

    This prevents null bytes and invalid byte sequences in stored filename
    metadata from raising when a blob is opened or represented. Existing blob
    records are handled without a data migration.

    [GHSA-p2pm-g2h6-7j5j]

    Jeremy Daer

  • Ship an ImageMagick security policy and apply it to every ImageMagick
    process MiniMagick spawns.

    ImageMagick chooses a coder from the content of the file it is given, and
    some coders act on files named inside the image rather than on the image
    itself. Active Storage constrained none of them, so an uploaded file could
    reach any coder the host's policy allowed, through the ImageMagick analyzer
    at attach time, with no variant or analyze call in the application.

    Active Storage now ships a policy.xml in
    ActiveStorage::ImageMagick::POLICY_DIRECTORY and prepends that directory
    to MAGICK_CONFIGURE_PATH through MiniMagick.cli_env. ImageMagick applies
    every policy file on its search path, so the shipped policy adds to the
    host's policy rather than replacing it. A MAGICK_CONFIGURE_PATH set in the
    environment or in MiniMagick.cli_env, including by an initializer or
    dotenv, is kept after the shipped directory.

    The shipped policy denies the coders that script ImageMagick (MSL), read
    or delete files other than the image (TEXT, EPHEMERAL), fetch remote
    references (URL, HTTP, HTTPS, FTP), display to a screen (SHOW,
    WIN, PLT), or hand the file to Ghostscript (the PS, EPS, EPT and
    PDF coders, every alias of them, and the gs delegate), or reach a file
    directly (FILE, MPC, XPS, PCL), and it refuses @filename
    indirection. The policy applies to every ImageMagick command MiniMagick
    runs, not only Active Storage's.

    These applications must act:

    • One whose variant processor is :mini_magick has to use mini_magick 5.1
      or later, which applying the policy requires. With an older mini_magick,
      it raises at boot.
    • One that renders PostScript or PDF through ImageMagick has to re-allow
      the gs delegate and the coders it uses in the host's policy.xml. A
      host policy that allows a coder overrides the shipped deny.
    • One that replaces MiniMagick.cli_env after it boots, clears the
      environment with MiniMagick.cli_prefix, or installs its own
      MiniMagick::Shell never receives the shipped policy and has to carry
      its rules in ImageMagick's system policy. So does one that uses
      GraphicsMagick, which does not read ImageMagick policies.

    Every other application needs no change. See "ImageMagick Security Policy"
    in the Active Storage guide.

    [GHSA-f3w6-w445-fwh9]

    Mike Dalessio

  • Enforce the declared content length on Google Cloud Storage direct uploads.

    The signed URL now requires an x-goog-content-length-range header matching the blob's
    byte_size, so Cloud Storage rejects a body of any other size.

    Browsers send the new header, so a bucket's CORS configuration must list
    x-goog-content-length-range in responseHeader, or direct uploads from the browser fail.

    [GHSA-hfr4-8rjc-97m2]

    Mike Dalessio

  • Sign GCS direct uploads with V2 when cache_control is set.

    V4 signatures did not bind the Content-Type or Content-MD5 headers, so the uploader could
    choose the stored Content-Type. Direct-upload URLs with cache_control are no longer limited
    to 7 days, and the client sends Cache-Control unsigned.

    [GHSA-3w93-6hmw-whh4]

    Mike Dalessio

  • Stop an uploaded filename choosing the extension of the tempfile Active
    Storage hands to an external tool.

    ActiveStorage::Blob#open named its tempfile after the uploaded filename,
    extension and all. Tools that select a decoder from the extension alone,
    such as FFmpeg's AviSynth demuxer on .avs, therefore took their
    instructions from the uploader. The extension is now kept only when it
    denotes the blob's recorded media type, and dropped otherwise.

    [GHSA-v924-7rp8-4mxh]

    Mike Dalessio

  • Restrict the formats ffmpeg and ffprobe will open when previewing and
    analyzing video and audio.

    Active Storage now passes -format_whitelist before the input at every
    ffmpeg and ffprobe call site, limiting demuxer selection to common audio and
    video container formats. Configure the list with
    config.active_storage.ffmpeg_allowed_formats, or set it to nil to let
    ffmpeg choose any demuxer it was built with.

    Files in other formats, such as MXF, DV, AC3, WavPack, AU, W64, and raw
    H.264 or MPEG-1/2 video streams, now fail to preview with
    ActiveStorage::PreviewError, and their analysis stores no media metadata
    and logs a warning. Add their demuxers to the list to keep them.

    config.active_storage.ffmpeg_allowed_formats += %w[ mxf ]

    [GHSA-3f4q-8x5m-76v8]

    Mike Dalessio

Action Mailbox

  • Reject Mailgun inbound emails whose timestamp is more than 2 minutes ahead
    of local time.

    [GHSA-5957-c7qm-m469]

    Mike Dalessio

Action Text

  • No changes.

Railties

  • No changes.

Guides

  • No changes.
docker/login-action

v4.8.0

Compare Source

Full Changelog: docker/login-action@v4.7.0...v4.8.0

algolia/instantsearch (instantsearch.css)

v8.25.1

Compare Source

Bug Fixes
  • chat: scroll wide tables and code inside the message [FX-4057] (#​7331) (9905a80)
benbalter/jekyll-include-cache (jekyll-include-cache)

v0.3.2

Compare Source

Bug fixes
  • Include parameter names in the cache key, so include_cached calls that
    differ only by parameter name (for example color="red" and shade="red") no
    longer return each other's output (#​55, #​57).
    Thanks to @​aryangetsreal.
Documentation
  • Quote the string parameters in the README's include examples, which Liquid
    otherwise reads as undefined variables and renders as blanks (#​58, #​59).
    Thanks to @​azmi2409.
microsoft/playwright (playwright)

v1.65.0

Compare Source

🥟 Run tests with Bun

The test runner now runs under Bun. Bun transpiles your TypeScript test files itself, so Playwright does not use Babel or its compilation cache. Pass the --bun flag, because without it bunx playwright test runs on Node.js:

bunx --bun playwright test

Our CI runs the test runner tests under Bun 1.4.3 on Linux. Some features work differently under Bun:

  • There is no watch mode. UI mode does not run tests again when files change, and --only-changed does not follow imports.
  • Bun loads modules itself, so --tsconfig and the JSX options in tsconfig.json have no effect, and custom ESM loaders are not supported.
  • Stack traces do not include async frames, and API names do not include the class name: click instead of locator.click. This changes some step locations, step titles and error messages.
  • Console output of a test does not get into the trace and UI mode.

🚨 Reports with only failures

New failures reporter prints failures and successful retries as they occur, followed by a summary, without progress output.

New onlyFailures option of the HTML, JSON and JUnit reporters keeps only tests with unexpected outcomes, flaky tests and interrupted tests:

// playwright.config.ts
import { defineConfig } from '@playwright/test';

export default defineConfig({
  reporter: [
    ['failures'],
    ['html', { onlyFailures: true }],
  ],
});

🎯 Test runner

  • New built-in -exclusive- test lock runs a test only when no other tests are running. All other tests continue to run in parallel with each other:

    test('restart the server', { lock: '-exclusive-' }, async () => {
  // No other test runs while this one is running.
});

  • test.skip(), test.fixme(), test.fail() and test.slow() now accept only a description. It is recorded in the test annotation:

    test('upload a file', async ({ page }) => {
  test.skip('Not implemented yet');
});

  • New PLAYWRIGHT_TRANSFORM_CACHE_DIR environment variable sets the directory for transpiled test files, for example on a Linux machine shared with other users.

New APIs

Breaking Changes ⚠️

  • TypeScript class fields now follow useDefineForClassFields from your tsconfig.json, the same as tsc. It is enabled for ES2022 and later targets, and when target is not specified. A field initializer that reads a constructor parameter property now fails, because the initializer runs first:

    class LoginPage {
  // TypeError: Cannot read properties of undefined (reading 'getByRole')
  readonly submit = this.page.getByRole('button', { name: 'Submit' });

  constructor(private readonly page: Page) {}
}

    Move the initialization to the constructor, or set "useDefineForClassFields": false in your tsconfig.json.

  • Actions such as locator.click(), locator.check(), locator.tap(), locator.fill(), locator.clear() and locator.selectOption() now wait for the element to be not inert. An action on an element with the inert attribute, or inside such an element, now times out if the element stays inert.

  • A sharded run now fails with "No tests found" when no tests match across all shards. Pass --pass-with-no-tests to allow this. An empty shard still passes when other shards have tests.

  • Cookie matching now follows RFC 6265. With a URL, browserContext.cookies() and apiRequestContext.cookies() no longer return host-only cookies for subdomains or Path=/api cookies for /apiv2, and a Path=/foo/ cookie does not match /foo. APIRequestContext sends a cookie without a name as Cookie: x instead of Cookie: =x, and stores Set-Cookie: token as a cookie without a name.

  • Proxy credentials are no longer sent to websites. The credentials in the proxy option now answer only proxy challenges. To authenticate on a website, use httpCredentials.

  • Text that the browser does not render, such as text that is not assigned to a slot or text directly inside a closed <details>, is no longer part of accessible names and aria snapshots. This can change the results of page.getByRole() with a name, locator.ariaSnapshot() and expect(locator).toMatchAriaSnapshot().

  • String and URLSearchParams values of the params option in APIRequestContext requests are now appended to the query that the URL already has, instead of replacing it.

  • .css, .less and .scss imports in test files now load as empty modules instead of being removed, so the imported file must exist.

  • The blob reporter again deletes the content of its output directory before it writes the report. Playwright 1.64 kept reports with other names.

  • Test locations of imported calls such as test( in CommonJS output now point to the start of the callee, for example a.spec.ts:3:7 instead of a.spec.ts:3:11. This is the same as in ESM.

Announcements

  • ⚠️ Playwright no longer tests on Node.js 20. Use Node.js 22, 24 or 26, as listed in the system requirements.
  • 🐳 Docker images now include Node.js 26 instead of Node.js 24, and the latest patch of Chromium on the same branch.

Browser Versions

  • Chromium 158.0.8127.18
  • Mozilla Firefox 159.0
  • WebKit 27.2

This version was also tested against the following stable channels:

  • Google Chrome 157
  • Microsoft Edge 156
ruby/setup-ruby

v1.338.0

Compare Source

What's Changed

Full Changelog: ruby/setup-ruby@v1.337.0...v1.338.0

v1.337.0

Compare Source

What's Changed

Full Changelog: ruby/setup-ruby@v1.336.0...v1.337.0

step-security/harden-runner

v2.22.4

Compare Source

What's Changed

  • Fixed a Linux agent memory leak that could cause runners to run out of memory during jobs with heavy process or network activity.
  • The workaround for GitHub’s DNS resolver and outbound proxy experiment on GitHub-hosted Linux runners now defaults to enabled when feature flags can’t be fetched.
  • Improved HTTP/2 TLS interception on Linux (enterprise tier).
  • Added retries for failed monitoring API requests, improving reliability of monitoring initialization and raw-event uploads.

Full Changelog: step-security/harden-runner@v2.22.3...v2.22.4

salesforce/tough-cookie (tough-cookie)

v6.1.0

Compare Source

Notable changes

Secure cookies are rejected when set from an insecure origin (#​656, #​663)

CookieJar now refuses to store a Secure cookie set from a URL that isn't potentially trustworthy, such as plain http://example.com, per RFC 6265bis §5.7 step 13. https: and wss: URLs are still accepted, and so are localhost and loopback addresses while allowSecureOnLocal is enabled (the default). setCookie() now rejects with Cookie is Secure but this is not a secure connection, or drops the cookie silently when ignoreError: true is passed.

This changes behavior that existing v6 code may rely on. To keep storing Secure cookies no matter which origin set them, opt out with:

new CookieJar(store, { enforceSecureOriginOnStorage: false })

The opt-out applies only to storage. On retrieval, Secure cookies are still returned only for secure origins, the same as in v6.0.x. The setting survives serialize()/deserialize() and clone().

Other behavior changes
  • __Host- cookies now need an explicit Path=/ attribute. Having the default path come out as / is no longer enough (#​608).
  • Cookie.validate() now returns false for names that aren't valid HTTP tokens, such as empty names, names with separators or control characters, and non-ASCII names. Parsing and storage are unchanged (#​650).
  • An explicit SameSite=None is now kept when serializing with Cookie.toString() and getSetCookieStrings(); it used to be dropped (#​639).
  • An IPv4 address in the Domain attribute is now accepted instead of being treated as a public suffix (#​630).
Additions
  • New exported PrefixSecurityMode type for the prefixSecurity option (#​659, #​667).
  • The getCookiesSync, getCookieString*, getSetCookieStrings* and setCookieSync methods now accept a URL as well as a string, matching their async counterparts (#​655).

What's Changed

New Contributors

Full Changelog: salesforce/tough-cookie@v6.0.2...v6.1.0

nodejs/undici

[!IMPORTANT]
✂ PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "every weekend"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested a review from a team as a code owner November 7, 2026 02:57
@renovate renovate Bot added the review:tech label Nov 7, 2026
@netlify

netlify Bot commented Nov 7, 2026 •
edited
Loading

Copy link
Copy Markdown

✅ Deploy Preview for kongdeveloper ready!

Name Link
🔨 Latest commit 58c050c
🔍 Latest deploy log https://app.netlify.com/projects/kongdeveloper/deploys/6aef7158ea767b4dae5d4cbb
😎 Deploy Preview https://deploy-preview-7957--kongdeveloper.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.
🤖 Make changes Run an agent on this branch

To edit notification comments on pull requests, go to your Netlify project configuration.

@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from ec80231 to 58c050c Compare November 7, 2026 18:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

review:tech

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants