build(deps): update dependency i18next-http-backend to v4.0.4 (#13522)

This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[i18next-http-backend](https://redirect.github.com/i18next/i18next-http-backend)
| [`4.0.3` →
`4.0.4`](https://renovatebot.com/diffs/npm/i18next-http-backend/4.0.3/4.0.4)
|
![age](https://developer.mend.io/api/mc/badges/age/npm/i18next-http-backend/4.0.4?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/i18next-http-backend/4.0.3/4.0.4?slim=true)
|

---

### Release Notes

<details>
<summary>i18next/i18next-http-backend (i18next-http-backend)</summary>

###
[`v4.0.4`](https://redirect.github.com/i18next/i18next-http-backend/blob/HEAD/CHANGELOG.md#404)

[Compare
Source](https://redirect.github.com/i18next/i18next-http-backend/compare/v4.0.3...v4.0.4)

Security release. See advisory
[GHSA-3cmx-xjww-583x](https://redirect.github.com/i18next/i18next-http-backend/security/advisories/GHSA-3cmx-xjww-583x).

- security: also reject `&`, `=` and `;` in `lng` and `ns` values. With
a query-shaped `loadPath` / `addPath` template such as
`/locales/resources.json?lng={{lng}}&ns={{ns}}` (the multiload shape the
README documents), a value like `de&ns=private&admin=true` added or
overrode query parameters on the request (HTTP parameter pollution). The
3.0.5 fix only rejected `?`, which covers the path position. The default
`/locales/{{lng}}/{{ns}}.json` and other path-only templates were not
affected. No language code or usable namespace name contains these
characters, and `+`-joined multiload values such as `de+en` keep
working.

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/authelia/authelia).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNjQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjE2NC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImphdmFzY3JpcHQiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
This commit is contained in:
renovate[bot] authored and GitHub committed 2026-10-19 09:08:44 +00:00
1 parent 6e71c39b6c
commit 4c60c7f972
2 files changed
+6 -6

No files matched your search

+1 -1
View File
@@ -16,7 +16,7 @@
"cn": "0.5.0",
"i18next": "26.4.7",
"i18next-browser-languagedetector": "8.2.1",
"i18next-http-backend": "4.0.3",
"i18next-http-backend": "4.0.4",
"lucide-react": "1.59.0",
"qrcode.react": "4.2.0",
"react": "19.3.1",
+5 -5
View File
@@ -44,8 +44,8 @@ importers:
specifier: 8.2.1
version: 8.2.1
i18next-http-backend:
specifier: 4.0.3
version: 4.0.3
specifier: 4.0.4
version: 4.0.4
lucide-react:
specifier: 1.59.0
version: 1.59.0(@types/react@19.3.0)(react@19.3.1)
@@ -2529,8 +2529,8 @@ packages:
i18next-browser-languagedetector@8.2.1:
resolution: {integrity: sha512-bZg8+4bdmaOiApD7N7BPT9W8MLZG+nPTOFlLiJiT8uzKXFjhxw4v2ierCXOwB5sFDMtuA5G4kgYZ0AznZxQ/cw==}
i18next-http-backend@4.0.3:
resolution: {integrity: sha512-B5GJysCsJwqiDQRpUcikWsut82Vmekix58WIyiCpYtxaZ/wY8kwJCicMRvVcMoIa1x84siiRl5vBt6iCBVO6zg==}
i18next-http-backend@4.0.4:
resolution: {integrity: sha512-nG9OQKvUsPiTVUBg1rCGmvmWhzxC9GOxVbGdTYyejHVMSUjutt1hiBNVSzhB/ZE7keL9Xkb880kUfhDovV5T5g==}
engines: {node: '>=18'}
i18next@26.4.7:
@@ -6513,7 +6513,7 @@ snapshots:
dependencies:
'@babel/runtime': 7.29.7
i18next-http-backend@4.0.3: {}
i18next-http-backend@4.0.4: {}
i18next@26.4.7(@typescript/typescript6@6.0.2):
optionalDependencies: