mirror of
https://github.com/authelia/authelia.git
synced 2026-10-28 09:34:52 +08:00
build(deps): update dependency i18next-http-backend to v4.0.4 (#13522)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [i18next-http-backend](https://redirect.github.com/i18next/i18next-http-backend) | [`4.0.3` → `4.0.4`](https://renovatebot.com/diffs/npm/i18next-http-backend/4.0.3/4.0.4) |  |  | --- ### Release Notes <details> <summary>i18next/i18next-http-backend (i18next-http-backend)</summary> ### [`v4.0.4`](https://redirect.github.com/i18next/i18next-http-backend/blob/HEAD/CHANGELOG.md#404) [Compare Source](https://redirect.github.com/i18next/i18next-http-backend/compare/v4.0.3...v4.0.4) Security release. See advisory [GHSA-3cmx-xjww-583x](https://redirect.github.com/i18next/i18next-http-backend/security/advisories/GHSA-3cmx-xjww-583x). - security: also reject `&`, `=` and `;` in `lng` and `ns` values. With a query-shaped `loadPath` / `addPath` template such as `/locales/resources.json?lng={{lng}}&ns={{ns}}` (the multiload shape the README documents), a value like `de&ns=private&admin=true` added or overrode query parameters on the request (HTTP parameter pollution). The 3.0.5 fix only rejected `?`, which covers the path position. The default `/locales/{{lng}}/{{ns}}.json` and other path-only templates were not affected. No language code or usable namespace name contains these characters, and `+`-joined multiload values such as `de+en` keep working. </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNjQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjE2NC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImphdmFzY3JpcHQiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
This commit is contained in:
1 parent
6e71c39b6c
commit
4c60c7f972
2 files changed
+6
-6
No files matched your search
+1
-1
@@ -16,7 +16,7 @@
|
||||
"cn": "0.5.0",
|
||||
"i18next": "26.4.7",
|
||||
"i18next-browser-languagedetector": "8.2.1",
|
||||
"i18next-http-backend": "4.0.3",
|
||||
"i18next-http-backend": "4.0.4",
|
||||
"lucide-react": "1.59.0",
|
||||
"qrcode.react": "4.2.0",
|
||||
"react": "19.3.1",
|
||||
|
||||
Generated
+5
-5
@@ -44,8 +44,8 @@ importers:
|
||||
specifier: 8.2.1
|
||||
version: 8.2.1
|
||||
i18next-http-backend:
|
||||
specifier: 4.0.3
|
||||
version: 4.0.3
|
||||
specifier: 4.0.4
|
||||
version: 4.0.4
|
||||
lucide-react:
|
||||
specifier: 1.59.0
|
||||
version: 1.59.0(@types/react@19.3.0)(react@19.3.1)
|
||||
@@ -2529,8 +2529,8 @@ packages:
|
||||
i18next-browser-languagedetector@8.2.1:
|
||||
resolution: {integrity: sha512-bZg8+4bdmaOiApD7N7BPT9W8MLZG+nPTOFlLiJiT8uzKXFjhxw4v2ierCXOwB5sFDMtuA5G4kgYZ0AznZxQ/cw==}
|
||||
|
||||
i18next-http-backend@4.0.3:
|
||||
resolution: {integrity: sha512-B5GJysCsJwqiDQRpUcikWsut82Vmekix58WIyiCpYtxaZ/wY8kwJCicMRvVcMoIa1x84siiRl5vBt6iCBVO6zg==}
|
||||
i18next-http-backend@4.0.4:
|
||||
resolution: {integrity: sha512-nG9OQKvUsPiTVUBg1rCGmvmWhzxC9GOxVbGdTYyejHVMSUjutt1hiBNVSzhB/ZE7keL9Xkb880kUfhDovV5T5g==}
|
||||
engines: {node: '>=18'}
|
||||
|
||||
i18next@26.4.7:
|
||||
@@ -6513,7 +6513,7 @@ snapshots:
|
||||
dependencies:
|
||||
'@babel/runtime': 7.29.7
|
||||
|
||||
i18next-http-backend@4.0.3: {}
|
||||
i18next-http-backend@4.0.4: {}
|
||||
|
||||
i18next@26.4.7(@typescript/typescript6@6.0.2):
|
||||
optionalDependencies:
|
||||
|
||||
Reference in new issue
Block a user