FlowCrypt

Recent Commits

• martgil(02 Sept 26)

  #6285 Improve error messages rendering (#6286) * feat: improve error messages rendering * feat: update forbidden tags and attrs * wip: cleanup * wip: cleanup * wip * wip * wip * wip: improve purgeDangerousCss()

• dependabot[bot](31 Aug 26)

  build(deps-dev): bump the npm-deps group across 1 directory with 6 updates (#6284) * build(deps-dev): bump the npm-deps group across 1 directory with 6 updates Bumps the npm-deps group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@types/chrome](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/chrome) | `0.2.6` | `0.2.7` | | [eslint](https://github.com/eslint/eslint) | `10.8.1` | `10.9.1` | | [lint-staged](https://github.com/lint-staged/lint-staged) | `17.3.0` | `17.4.1` | | [mailparser](https://github.com/nodemailer/mailparser) | `3.9.15` | `3.9.17` | | [puppeteer](https://github.com/puppeteer/puppeteer) | `25.8.0` | `25.9.0` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.67.0` | `8.68.0` | Updates `@types/chrome` from 0.2.6 to 0.2.7 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/chrome) Updates `eslint` from 10.8.1 to 10.9.1 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](https://github.com/eslint/eslint/compare/v10.8.1...v10.9.1) Updates `lint-staged` from 17.3.0 to 17.4.1 - [Release notes](https://github.com/lint-staged/lint-staged/releases) - [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md) - [Commits](https://github.com/lint-staged/lint-staged/compare/v17.3.0...v17.4.1) Updates `mailparser` from 3.9.15 to 3.9.17 - [Release notes](https://github.com/nodemailer/mailparser/releases) - [Changelog](https://github.com/nodemailer/mailparser/blob/master/CHANGELOG.md) - [Commits](https://github.com/nodemailer/mailparser/compare/v3.9.15...v3.9.17) Updates `puppeteer` from 25.8.0 to 25.9.0 - [Release notes](https://github.com/puppeteer/puppeteer/releases) - [Changelog](https://github.com/puppeteer/puppeteer/blob/main/CHANGELOG.md) - [Commits](https://github.com/puppeteer/puppeteer/compare/puppeteer-v25.8.0...puppeteer-v25.9.0) Updates `typescript-eslint` from 8.67.0 to 8.68.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.68.0/packages/typescript-eslint) --- updated-dependencies: - dependency-name: "@types/chrome" dependency-version: 0.2.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-deps - dependency-name: eslint dependency-version: 10.9.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-deps - dependency-name: lint-staged dependency-version: 17.4.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-deps - dependency-name: mailparser dependency-version: 3.9.17 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-deps - dependency-name: puppeteer dependency-version: 25.9.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-deps - dependency-name: typescript-eslint dependency-version: 8.68.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-deps ... Signed-off-by: dependabot[bot] <[email protected]> * updates --------- Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Roma Sosnovsky <[email protected]>

• martgil(31 Aug 26)

  #6282 Re-audit source and sinks (#6283) * feat: re-audit source and sinks * wip: cleanup * refactor: sanitize rendered outputs --------- Co-authored-by: martgil <[email protected]>

• martgil(25 Aug 26)

  #6280 Improve validation of OpenPGP revocation signatures for contact keys (#6281) * fix: improve validation of OpenPGP revocation signatures for contact keys * fix: improve openpgp key detection for bogus key --------- Co-authored-by: martgil <[email protected]>

• martgil(25 Aug 26)

  #6276 Improve message parsing for signed message (#6277) * feat: improve message parsing for signed message * fix: unsafe non-null return values for getSubjectFromNode * fix: find nested signed nodes in getSubjectFromNode --------- Co-authored-by: martgil <[email protected]>

• dependabot[bot](23 Aug 26)

  build(deps): bump the npm-deps group with 4 updates (#6279) Bumps the npm-deps group with 4 updates: [dompurify](https://github.com/cure53/DOMPurify), [eslint-plugin-jsdoc](https://github.com/gajus/eslint-plugin-jsdoc), [globby](https://github.com/sindresorhus/globby) and [googleapis](https://github.com/googleapis/google-api-nodejs-client). Updates `dompurify` from 3.4.13 to 3.4.14 - [Release notes](https://github.com/cure53/DOMPurify/releases) - [Commits](https://github.com/cure53/DOMPurify/compare/3.4.13...3.4.14) Updates `eslint-plugin-jsdoc` from 64.2.0 to 64.2.1 - [Release notes](https://github.com/gajus/eslint-plugin-jsdoc/releases) - [Commits](https://github.com/gajus/eslint-plugin-jsdoc/compare/v64.2.0...v64.2.1) Updates `globby` from 16.2.3 to 16.2.4 - [Release notes](https://github.com/sindresorhus/globby/releases) - [Commits](https://github.com/sindresorhus/globby/compare/v16.2.3...v16.2.4) Updates `googleapis` from 174.0.1 to 176.0.0 - [Release notes](https://github.com/googleapis/google-api-nodejs-client/releases) - [Commits](https://github.com/googleapis/google-api-nodejs-client/compare/googleapis-v174.0.1...googleapis-v176.0.0) --- updated-dependencies: - dependency-name: dompurify dependency-version: 3.4.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-deps - dependency-name: eslint-plugin-jsdoc dependency-version: 64.2.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-deps - dependency-name: globby dependency-version: 16.2.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-deps - dependency-name: googleapis dependency-version: 176.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-deps ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

• dependabot[bot](17 Aug 26)

  build(deps): bump the npm-deps group with 7 updates (#6275) * build(deps): bump the npm-deps group with 7 updates Bumps the npm-deps group with 7 updates: | Package | From | To | | --- | --- | --- | | [@zxcvbn-ts/core](https://github.com/zxcvbn-ts/zxcvbn) | `4.1.2` | `4.2.0` | | [eslint](https://github.com/eslint/eslint) | `10.8.0` | `10.8.1` | | [eslint-plugin-jsdoc](https://github.com/gajus/eslint-plugin-jsdoc) | `63.3.3` | `64.1.0` | | [globby](https://github.com/sindresorhus/globby) | `16.2.2` | `16.2.3` | | [mailparser](https://github.com/nodemailer/mailparser) | `3.9.14` | `3.9.15` | | [puppeteer](https://github.com/puppeteer/puppeteer) | `25.5.0` | `25.7.0` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.66.0` | `8.67.0` | Updates `@zxcvbn-ts/core` from 4.1.2 to 4.2.0 - [Changelog](https://github.com/zxcvbn-ts/zxcvbn/blob/master/CHANGELOG.md) - [Commits](https://github.com/zxcvbn-ts/zxcvbn/compare/@zxcvbn-ts/[email protected]...@zxcvbn-ts/[email protected]) Updates `eslint` from 10.8.0 to 10.8.1 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](https://github.com/eslint/eslint/compare/v10.8.0...v10.8.1) Updates `eslint-plugin-jsdoc` from 63.3.3 to 64.1.0 - [Release notes](https://github.com/gajus/eslint-plugin-jsdoc/releases) - [Commits](https://github.com/gajus/eslint-plugin-jsdoc/compare/v63.3.3...v64.1.0) Updates `globby` from 16.2.2 to 16.2.3 - [Release notes](https://github.com/sindresorhus/globby/releases) - [Commits](https://github.com/sindresorhus/globby/compare/v16.2.2...v16.2.3) Updates `mailparser` from 3.9.14 to 3.9.15 - [Release notes](https://github.com/nodemailer/mailparser/releases) - [Changelog](https://github.com/nodemailer/mailparser/blob/master/CHANGELOG.md) - [Commits](https://github.com/nodemailer/mailparser/compare/v3.9.14...v3.9.15) Updates `puppeteer` from 25.5.0 to 25.7.0 - [Release notes](https://github.com/puppeteer/puppeteer/releases) - [Changelog](https://github.com/puppeteer/puppeteer/blob/main/CHANGELOG.md) - [Commits](https://github.com/puppeteer/puppeteer/compare/puppeteer-v25.5.0...puppeteer-v25.7.0) Updates `typescript-eslint` from 8.66.0 to 8.67.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.67.0/packages/typescript-eslint) --- updated-dependencies: - dependency-name: "@zxcvbn-ts/core" dependency-version: 4.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-deps - dependency-name: eslint dependency-version: 10.8.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-deps - dependency-name: eslint-plugin-jsdoc dependency-version: 64.1.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-deps - dependency-name: globby dependency-version: 16.2.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-deps - dependency-name: mailparser dependency-version: 3.9.15 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-deps - dependency-name: puppeteer dependency-version: 25.7.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-deps - dependency-name: typescript-eslint dependency-version: 8.67.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-deps ... Signed-off-by: dependabot[bot] <[email protected]> * updates --------- Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Roma Sosnovsky <[email protected]>

• martgil(11 Aug 26)

  #6269 Sanitize srcset on images (#6273) * feat: add srcset to forbidden HTML attribute * test: add test for #6269 case * feat: additional sanitation checks for image src attribute

• dependabot[bot](09 Aug 26)

  build(deps): bump the npm-deps group with 7 updates (#6272) Bumps the npm-deps group with 7 updates: | Package | From | To | | --- | --- | --- | | [dompurify](https://github.com/cure53/DOMPurify) | `3.4.12` | `3.4.13` | | [googleapis](https://github.com/googleapis/google-api-nodejs-client) | `173.0.0` | `174.0.1` | | [postcss-html](https://github.com/ota-meshi/postcss-html) | `1.8.1` | `2.0.0` | | [puppeteer](https://github.com/puppeteer/puppeteer) | `25.4.0` | `25.5.0` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.65.0` | `8.66.0` | | [undici-types](https://github.com/nodejs/undici) | `8.9.0` | `8.10.0` | | [web-ext](https://github.com/mozilla/web-ext) | `10.5.0` | `10.6.0` | Updates `dompurify` from 3.4.12 to 3.4.13 - [Release notes](https://github.com/cure53/DOMPurify/releases) - [Commits](https://github.com/cure53/DOMPurify/compare/3.4.12...3.4.13) Updates `googleapis` from 173.0.0 to 174.0.1 - [Release notes](https://github.com/googleapis/google-api-nodejs-client/releases) - [Commits](https://github.com/googleapis/google-api-nodejs-client/compare/googleapis-v173.0.0...googleapis-v174.0.1) Updates `postcss-html` from 1.8.1 to 2.0.0 - [Release notes](https://github.com/ota-meshi/postcss-html/releases) - [Commits](https://github.com/ota-meshi/postcss-html/compare/v1.8.1...v2.0.0) Updates `puppeteer` from 25.4.0 to 25.5.0 - [Release notes](https://github.com/puppeteer/puppeteer/releases) - [Changelog](https://github.com/puppeteer/puppeteer/blob/main/CHANGELOG.md) - [Commits](https://github.com/puppeteer/puppeteer/compare/puppeteer-v25.4.0...puppeteer-v25.5.0) Updates `typescript-eslint` from 8.65.0 to 8.66.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.66.0/packages/typescript-eslint) Updates `undici-types` from 8.9.0 to 8.10.0 - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](https://github.com/nodejs/undici/compare/v8.9.0...v8.10.0) Updates `web-ext` from 10.5.0 to 10.6.0 - [Release notes](https://github.com/mozilla/web-ext/releases) - [Commits](https://github.com/mozilla/web-ext/compare/10.5.0...10.6.0) --- updated-dependencies: - dependency-name: dompurify dependency-version: 3.4.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-deps - dependency-name: googleapis dependency-version: 174.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-deps - dependency-name: postcss-html dependency-version: 2.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-deps - dependency-name: puppeteer dependency-version: 25.5.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-deps - dependency-name: typescript-eslint dependency-version: 8.66.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-deps - dependency-name: undici-types dependency-version: 8.10.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-deps - dependency-name: web-ext dependency-version: 10.6.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-deps ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

• dependabot[bot](03 Aug 26)

  build(deps-dev): bump the npm-deps group with 4 updates (#6266) * build(deps-dev): bump the npm-deps group with 4 updates Bumps the npm-deps group with 4 updates: [eslint-plugin-jsdoc](https://github.com/gajus/eslint-plugin-jsdoc), [pdfjs-dist](https://github.com/mozilla/pdf.js), [puppeteer](https://github.com/puppeteer/puppeteer) and [webpack-cli](https://github.com/webpack/webpack-cli). Updates `eslint-plugin-jsdoc` from 63.3.1 to 63.3.2 - [Release notes](https://github.com/gajus/eslint-plugin-jsdoc/releases) - [Commits](https://github.com/gajus/eslint-plugin-jsdoc/compare/v63.3.1...v63.3.2) Updates `pdfjs-dist` from 6.1.200 to 6.2.108 - [Release notes](https://github.com/mozilla/pdf.js/releases) - [Commits](https://github.com/mozilla/pdf.js/compare/v6.1.200...v6.2.108) Updates `puppeteer` from 25.1.0 to 25.4.0 - [Release notes](https://github.com/puppeteer/puppeteer/releases) - [Changelog](https://github.com/puppeteer/puppeteer/blob/main/CHANGELOG.md) - [Commits](https://github.com/puppeteer/puppeteer/compare/puppeteer-v25.1.0...puppeteer-v25.4.0) Updates `webpack-cli` from 7.2.1 to 7.2.2 - [Release notes](https://github.com/webpack/webpack-cli/releases) - [Changelog](https://github.com/webpack/webpack-cli/blob/main/CHANGELOG.md) - [Commits](https://github.com/webpack/webpack-cli/compare/[email protected]@7.2.2) --- updated-dependencies: - dependency-name: eslint-plugin-jsdoc dependency-version: 63.3.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-deps - dependency-name: pdfjs-dist dependency-version: 6.2.108 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-deps - dependency-name: puppeteer dependency-version: 25.4.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-deps - dependency-name: webpack-cli dependency-version: 7.2.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-deps ... Signed-off-by: dependabot[bot] <[email protected]> * updates * fix tests * fix tests --------- Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Roma Sosnovsky <[email protected]>

• dependabot[bot](27 Jul 26)

  build(deps-dev): bump the npm-deps group with 8 updates (#6265) * build(deps-dev): bump the npm-deps group with 8 updates Bumps the npm-deps group with 8 updates: | Package | From | To | | --- | --- | --- | | [eslint](https://github.com/eslint/eslint) | `10.7.0` | `10.8.0` | | [eslint-plugin-jsdoc](https://github.com/gajus/eslint-plugin-jsdoc) | `63.2.0` | `63.3.0` | | [fs-extra](https://github.com/jprichardson/node-fs-extra) | `11.3.6` | `11.4.0` | | [lint-staged](https://github.com/lint-staged/lint-staged) | `17.1.0` | `17.2.0` | | [prettier](https://github.com/prettier/prettier) | `3.9.5` | `3.9.6` | | [puppeteer](https://github.com/puppeteer/puppeteer) | `25.1.0` | `25.3.0` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.64.0` | `8.65.0` | | [undici-types](https://github.com/nodejs/undici) | `8.7.0` | `8.9.0` | Updates `eslint` from 10.7.0 to 10.8.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](https://github.com/eslint/eslint/compare/v10.7.0...v10.8.0) Updates `eslint-plugin-jsdoc` from 63.2.0 to 63.3.0 - [Release notes](https://github.com/gajus/eslint-plugin-jsdoc/releases) - [Commits](https://github.com/gajus/eslint-plugin-jsdoc/compare/v63.2.0...v63.3.0) Updates `fs-extra` from 11.3.6 to 11.4.0 - [Changelog](https://github.com/jprichardson/node-fs-extra/blob/master/CHANGELOG.md) - [Commits](https://github.com/jprichardson/node-fs-extra/compare/11.3.6...11.4.0) Updates `lint-staged` from 17.1.0 to 17.2.0 - [Release notes](https://github.com/lint-staged/lint-staged/releases) - [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md) - [Commits](https://github.com/lint-staged/lint-staged/compare/v17.1.0...v17.2.0) Updates `prettier` from 3.9.5 to 3.9.6 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](https://github.com/prettier/prettier/compare/3.9.5...3.9.6) Updates `puppeteer` from 25.1.0 to 25.3.0 - [Release notes](https://github.com/puppeteer/puppeteer/releases) - [Changelog](https://github.com/puppeteer/puppeteer/blob/main/CHANGELOG.md) - [Commits](https://github.com/puppeteer/puppeteer/compare/puppeteer-v25.1.0...puppeteer-v25.3.0) Updates `typescript-eslint` from 8.64.0 to 8.65.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.65.0/packages/typescript-eslint) Updates `undici-types` from 8.7.0 to 8.9.0 - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](https://github.com/nodejs/undici/compare/v8.7.0...v8.9.0) --- updated-dependencies: - dependency-name: eslint dependency-version: 10.8.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-deps - dependency-name: eslint-plugin-jsdoc dependency-version: 63.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-deps - dependency-name: fs-extra dependency-version: 11.4.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-deps - dependency-name: lint-staged dependency-version: 17.2.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-deps - dependency-name: prettier dependency-version: 3.9.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-deps - dependency-name: puppeteer dependency-version: 25.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-deps - dependency-name: typescript-eslint dependency-version: 8.65.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-deps - dependency-name: undici-types dependency-version: 8.9.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-deps ... Signed-off-by: dependabot[bot] <[email protected]> * revert puppeteer --------- Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Roma Sosnovsky <[email protected]>

• dependabot[bot](25 Jul 26)

  build(deps-dev): bump fast-uri from 3.1.3 to 3.1.4 (#6264) Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.3 to 3.1.4. - [Release notes](https://github.com/fastify/fast-uri/releases) - [Commits](https://github.com/fastify/fast-uri/compare/v3.1.3...v3.1.4) --- updated-dependencies: - dependency-name: fast-uri dependency-version: 3.1.4 dependency-type: indirect ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

• dependabot[bot](20 Jul 26)

  build(deps): bump the npm-deps group with 7 updates (#6263) * build(deps): bump the npm-deps group with 7 updates Bumps the npm-deps group with 7 updates: | Package | From | To | | --- | --- | --- | | [@zxcvbn-ts/language-common](https://github.com/zxcvbn-ts/zxcvbn) | `4.1.2` | `4.1.3` | | [eslint-plugin-jsdoc](https://github.com/gajus/eslint-plugin-jsdoc) | `63.0.13` | `63.2.0` | | [globby](https://github.com/sindresorhus/globby) | `16.2.1` | `16.2.2` | | [lint-staged](https://github.com/lint-staged/lint-staged) | `17.0.8` | `17.1.0` | | [puppeteer](https://github.com/puppeteer/puppeteer) | `25.1.0` | `25.3.0` | | [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.63.0` | `8.64.0` | Updates `@zxcvbn-ts/language-common` from 4.1.2 to 4.1.3 - [Changelog](https://github.com/zxcvbn-ts/zxcvbn/blob/master/CHANGELOG.md) - [Commits](https://github.com/zxcvbn-ts/zxcvbn/compare/@zxcvbn-ts/[email protected]...@zxcvbn-ts/[email protected]) Updates `eslint-plugin-jsdoc` from 63.0.13 to 63.2.0 - [Release notes](https://github.com/gajus/eslint-plugin-jsdoc/releases) - [Commits](https://github.com/gajus/eslint-plugin-jsdoc/compare/v63.0.13...v63.2.0) Updates `globby` from 16.2.1 to 16.2.2 - [Release notes](https://github.com/sindresorhus/globby/releases) - [Commits](https://github.com/sindresorhus/globby/compare/v16.2.1...v16.2.2) Updates `lint-staged` from 17.0.8 to 17.1.0 - [Release notes](https://github.com/lint-staged/lint-staged/releases) - [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md) - [Commits](https://github.com/lint-staged/lint-staged/compare/v17.0.8...v17.1.0) Updates `puppeteer` from 25.1.0 to 25.3.0 - [Release notes](https://github.com/puppeteer/puppeteer/releases) - [Changelog](https://github.com/puppeteer/puppeteer/blob/main/CHANGELOG.md) - [Commits](https://github.com/puppeteer/puppeteer/compare/puppeteer-v25.1.0...puppeteer-v25.3.0) Updates `typescript` from 6.0.3 to 7.0.2 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](https://github.com/microsoft/TypeScript/commits) Updates `typescript-eslint` from 8.63.0 to 8.64.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.64.0/packages/typescript-eslint) --- updated-dependencies: - dependency-name: "@zxcvbn-ts/language-common" dependency-version: 4.1.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-deps - dependency-name: eslint-plugin-jsdoc dependency-version: 63.2.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-deps - dependency-name: globby dependency-version: 16.2.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-deps - dependency-name: lint-staged dependency-version: 17.1.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-deps - dependency-name: puppeteer dependency-version: 25.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-deps - dependency-name: typescript dependency-version: 7.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-deps - dependency-name: typescript-eslint dependency-version: 8.64.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-deps ... Signed-off-by: dependabot[bot] <[email protected]> * use typescript v7 * package.json fix * use puppeteer 25.1.0 --------- Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Roma Sosnovsky <[email protected]>

• martgil(20 Jul 26)

  #6261 Improve CSS sanitizer (#6262) * feat: improve css sanitizer * wip

• dependabot[bot](13 Jul 26)

  build(deps): bump the npm-deps group with 8 updates (#6260) * build(deps): bump the npm-deps group with 8 updates Bumps the npm-deps group with 8 updates: | Package | From | To | | --- | --- | --- | | [dompurify](https://github.com/cure53/DOMPurify) | `3.4.11` | `3.4.12` | | [filesize](https://github.com/avoidwork/filesize.js) | `11.0.19` | `11.0.22` | | [eslint](https://github.com/eslint/eslint) | `10.6.0` | `10.7.0` | | [eslint-plugin-jsdoc](https://github.com/gajus/eslint-plugin-jsdoc) | `63.0.12` | `63.0.13` | | [prettier](https://github.com/prettier/prettier) | `3.9.4` | `3.9.5` | | [puppeteer](https://github.com/puppeteer/puppeteer) | `25.1.0` | `25.3.0` | | [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` | | [web-ext](https://github.com/mozilla/web-ext) | `10.4.0` | `10.5.0` | Updates `dompurify` from 3.4.11 to 3.4.12 - [Release notes](https://github.com/cure53/DOMPurify/releases) - [Commits](https://github.com/cure53/DOMPurify/compare/3.4.11...3.4.12) Updates `filesize` from 11.0.19 to 11.0.22 - [Changelog](https://github.com/avoidwork/filesize.js/blob/master/CHANGELOG.md) - [Commits](https://github.com/avoidwork/filesize.js/compare/11.0.19...11.0.22) Updates `eslint` from 10.6.0 to 10.7.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](https://github.com/eslint/eslint/compare/v10.6.0...v10.7.0) Updates `eslint-plugin-jsdoc` from 63.0.12 to 63.0.13 - [Release notes](https://github.com/gajus/eslint-plugin-jsdoc/releases) - [Commits](https://github.com/gajus/eslint-plugin-jsdoc/compare/v63.0.12...v63.0.13) Updates `prettier` from 3.9.4 to 3.9.5 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](https://github.com/prettier/prettier/compare/3.9.4...3.9.5) Updates `puppeteer` from 25.1.0 to 25.3.0 - [Release notes](https://github.com/puppeteer/puppeteer/releases) - [Changelog](https://github.com/puppeteer/puppeteer/blob/main/CHANGELOG.md) - [Commits](https://github.com/puppeteer/puppeteer/compare/puppeteer-v25.1.0...puppeteer-v25.3.0) Updates `typescript` from 6.0.3 to 7.0.2 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](https://github.com/microsoft/TypeScript/commits) Updates `web-ext` from 10.4.0 to 10.5.0 - [Release notes](https://github.com/mozilla/web-ext/releases) - [Commits](https://github.com/mozilla/web-ext/compare/10.4.0...10.5.0) --- updated-dependencies: - dependency-name: dompurify dependency-version: 3.4.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-deps - dependency-name: filesize dependency-version: 11.0.22 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-deps - dependency-name: eslint dependency-version: 10.7.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-deps - dependency-name: eslint-plugin-jsdoc dependency-version: 63.0.13 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-deps - dependency-name: prettier dependency-version: 3.9.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-deps - dependency-name: puppeteer dependency-version: 25.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-deps - dependency-name: typescript dependency-version: 7.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-deps - dependency-name: web-ext dependency-version: 10.5.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-deps ... Signed-off-by: dependabot[bot] <[email protected]> * use typescript v6 --------- Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Roma Sosnovsky <[email protected]>

• Roma Sosnovsky(08 Jul 26)

  Fix live tests (#6252) * parse extension id from manifest in live tests * fix live tests logging * test fix * use puppeteer 25.1.0

• dependabot[bot](07 Jul 26)

  build(deps): bump the npm-deps group across 1 directory with 14 updates (#6258) * build(deps): bump the npm-deps group across 1 directory with 14 updates Bumps the npm-deps group with 14 updates in the / directory: | Package | From | To | | --- | --- | --- | | [filesize](https://github.com/avoidwork/filesize.js) | `11.0.17` | `11.0.19` | | [@types/chrome](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/chrome) | `0.2.0` | `0.2.2` | | [eslint](https://github.com/eslint/eslint) | `10.5.0` | `10.6.0` | | [eslint-plugin-jsdoc](https://github.com/gajus/eslint-plugin-jsdoc) | `63.0.7` | `63.0.12` | | [fs-extra](https://github.com/jprichardson/node-fs-extra) | `11.3.5` | `11.3.6` | | [globby](https://github.com/sindresorhus/globby) | `16.2.0` | `16.2.1` | | [mailparser](https://github.com/nodemailer/mailparser) | `3.9.11` | `3.9.14` | | [pdfjs-dist](https://github.com/mozilla/pdf.js) | `6.0.227` | `6.1.200` | | [prettier](https://github.com/prettier/prettier) | `3.8.4` | `3.9.4` | | [puppeteer](https://github.com/puppeteer/puppeteer) | `25.1.0` | `25.3.0` | | [stylelint](https://github.com/stylelint/stylelint) | `17.13.0` | `17.14.0` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.61.1` | `8.63.0` | | [undici-types](https://github.com/nodejs/undici) | `8.5.0` | `8.7.0` | | [webpack-cli](https://github.com/webpack/webpack-cli) | `7.0.3` | `7.2.1` | Updates `filesize` from 11.0.17 to 11.0.19 - [Changelog](https://github.com/avoidwork/filesize.js/blob/master/CHANGELOG.md) - [Commits](https://github.com/avoidwork/filesize.js/commits/11.0.19) Updates `@types/chrome` from 0.2.0 to 0.2.2 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/chrome) Updates `eslint` from 10.5.0 to 10.6.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](https://github.com/eslint/eslint/compare/v10.5.0...v10.6.0) Updates `eslint-plugin-jsdoc` from 63.0.7 to 63.0.12 - [Release notes](https://github.com/gajus/eslint-plugin-jsdoc/releases) - [Commits](https://github.com/gajus/eslint-plugin-jsdoc/compare/v63.0.7...v63.0.12) Updates `fs-extra` from 11.3.5 to 11.3.6 - [Changelog](https://github.com/jprichardson/node-fs-extra/blob/master/CHANGELOG.md) - [Commits](https://github.com/jprichardson/node-fs-extra/compare/11.3.5...11.3.6) Updates `globby` from 16.2.0 to 16.2.1 - [Release notes](https://github.com/sindresorhus/globby/releases) - [Commits](https://github.com/sindresorhus/globby/compare/v16.2.0...v16.2.1) Updates `mailparser` from 3.9.11 to 3.9.14 - [Release notes](https://github.com/nodemailer/mailparser/releases) - [Changelog](https://github.com/nodemailer/mailparser/blob/master/CHANGELOG.md) - [Commits](https://github.com/nodemailer/mailparser/compare/v3.9.11...v3.9.14) Updates `pdfjs-dist` from 6.0.227 to 6.1.200 - [Release notes](https://github.com/mozilla/pdf.js/releases) - [Commits](https://github.com/mozilla/pdf.js/compare/v6.0.227...v6.1.200) Updates `prettier` from 3.8.4 to 3.9.4 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](https://github.com/prettier/prettier/compare/3.8.4...3.9.4) Updates `puppeteer` from 25.1.0 to 25.3.0 - [Release notes](https://github.com/puppeteer/puppeteer/releases) - [Changelog](https://github.com/puppeteer/puppeteer/blob/main/CHANGELOG.md) - [Commits](https://github.com/puppeteer/puppeteer/compare/puppeteer-v25.1.0...puppeteer-v25.3.0) Updates `stylelint` from 17.13.0 to 17.14.0 - [Release notes](https://github.com/stylelint/stylelint/releases) - [Changelog](https://github.com/stylelint/stylelint/blob/main/CHANGELOG.md) - [Commits](https://github.com/stylelint/stylelint/compare/17.13.0...17.14.0) Updates `typescript-eslint` from 8.61.1 to 8.63.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.63.0/packages/typescript-eslint) Updates `undici-types` from 8.5.0 to 8.7.0 - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](https://github.com/nodejs/undici/compare/v8.5.0...v8.7.0) Updates `webpack-cli` from 7.0.3 to 7.2.1 - [Release notes](https://github.com/webpack/webpack-cli/releases) - [Changelog](https://github.com/webpack/webpack-cli/blob/main/CHANGELOG.md) - [Commits](https://github.com/webpack/webpack-cli/compare/[email protected]@7.2.1) --- updated-dependencies: - dependency-name: filesize dependency-version: 11.0.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-deps - dependency-name: "@types/chrome" dependency-version: 0.2.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-deps - dependency-name: eslint dependency-version: 10.6.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-deps - dependency-name: eslint-plugin-jsdoc dependency-version: 63.0.12 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-deps - dependency-name: fs-extra dependency-version: 11.3.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-deps - dependency-name: globby dependency-version: 16.2.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-deps - dependency-name: mailparser dependency-version: 3.9.14 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-deps - dependency-name: pdfjs-dist dependency-version: 6.1.200 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-deps - dependency-name: prettier dependency-version: 3.9.4 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-deps - dependency-name: puppeteer dependency-version: 25.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-deps - dependency-name: stylelint dependency-version: 17.14.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-deps - dependency-name: typescript-eslint dependency-version: 8.63.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-deps - dependency-name: undici-types dependency-version: 8.7.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-deps - dependency-name: webpack-cli dependency-version: 7.2.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-deps ... Signed-off-by: dependabot[bot] <[email protected]> * use puppeteer 25.1.0 --------- Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Roma Sosnovsky <[email protected]>

• martgil(07 Jul 26)

  #6256 Improve regex for checking remote image url (#6257) * feat: improve regex for checking remote image url * test: add test case for #6256 * test: fix incorrect threadId * wip * refactor: checkValidURL()

• Roma Sosnovsky(29 Jun 26)

  Improve semaphore.yml (#6253) * optimize semaphore.yml * revert some changes

• dependabot[bot](22 Jun 26)

  build(deps): bump the npm-deps group with 9 updates (#6248) * build(deps): bump the npm-deps group with 9 updates Bumps the npm-deps group with 9 updates: | Package | From | To | | --- | --- | --- | | [@zxcvbn-ts/core](https://github.com/zxcvbn-ts/zxcvbn) | `4.1.1` | `4.1.2` | | [@zxcvbn-ts/language-common](https://github.com/zxcvbn-ts/zxcvbn) | `4.1.1` | `4.1.2` | | [@zxcvbn-ts/language-en](https://github.com/zxcvbn-ts/zxcvbn) | `4.1.0` | `4.1.1` | | [@types/chrome](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/chrome) | `0.1.43` | `0.2.0` | | [eslint-plugin-jsdoc](https://github.com/gajus/eslint-plugin-jsdoc) | `63.0.2` | `63.0.7` | | [lint-staged](https://github.com/lint-staged/lint-staged) | `17.0.7` | `17.0.8` | | [mailparser](https://github.com/nodemailer/mailparser) | `3.9.9` | `3.9.11` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.61.0` | `8.61.1` | | [undici-types](https://github.com/nodejs/undici) | `8.4.1` | `8.5.0` | Updates `@zxcvbn-ts/core` from 4.1.1 to 4.1.2 - [Changelog](https://github.com/zxcvbn-ts/zxcvbn/blob/master/CHANGELOG.md) - [Commits](https://github.com/zxcvbn-ts/zxcvbn/compare/@zxcvbn-ts/[email protected]...@zxcvbn-ts/[email protected]) Updates `@zxcvbn-ts/language-common` from 4.1.1 to 4.1.2 - [Changelog](https://github.com/zxcvbn-ts/zxcvbn/blob/master/CHANGELOG.md) - [Commits](https://github.com/zxcvbn-ts/zxcvbn/compare/@zxcvbn-ts/[email protected]...@zxcvbn-ts/[email protected]) Updates `@zxcvbn-ts/language-en` from 4.1.0 to 4.1.1 - [Changelog](https://github.com/zxcvbn-ts/zxcvbn/blob/master/CHANGELOG.md) - [Commits](https://github.com/zxcvbn-ts/zxcvbn/compare/@zxcvbn-ts/[email protected]...@zxcvbn-ts/[email protected]) Updates `@types/chrome` from 0.1.43 to 0.2.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/chrome) Updates `eslint-plugin-jsdoc` from 63.0.2 to 63.0.7 - [Release notes](https://github.com/gajus/eslint-plugin-jsdoc/releases) - [Commits](https://github.com/gajus/eslint-plugin-jsdoc/compare/v63.0.2...v63.0.7) Updates `lint-staged` from 17.0.7 to 17.0.8 - [Release notes](https://github.com/lint-staged/lint-staged/releases) - [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md) - [Commits](https://github.com/lint-staged/lint-staged/compare/v17.0.7...v17.0.8) Updates `mailparser` from 3.9.9 to 3.9.11 - [Release notes](https://github.com/nodemailer/mailparser/releases) - [Changelog](https://github.com/nodemailer/mailparser/blob/master/CHANGELOG.md) - [Commits](https://github.com/nodemailer/mailparser/compare/v3.9.9...v3.9.11) Updates `typescript-eslint` from 8.61.0 to 8.61.1 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.61.1/packages/typescript-eslint) Updates `undici-types` from 8.4.1 to 8.5.0 - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](https://github.com/nodejs/undici/compare/v8.4.1...v8.5.0) --- updated-dependencies: - dependency-name: "@zxcvbn-ts/core" dependency-version: 4.1.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-deps - dependency-name: "@zxcvbn-ts/language-common" dependency-version: 4.1.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-deps - dependency-name: "@zxcvbn-ts/language-en" dependency-version: 4.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-deps - dependency-name: "@types/chrome" dependency-version: 0.2.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-deps - dependency-name: eslint-plugin-jsdoc dependency-version: 63.0.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-deps - dependency-name: lint-staged dependency-version: 17.0.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-deps - dependency-name: mailparser dependency-version: 3.9.11 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-deps - dependency-name: typescript-eslint dependency-version: 8.61.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-deps - dependency-name: undici-types dependency-version: 8.5.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-deps ... Signed-off-by: dependabot[bot] <[email protected]> * fix decrypt test * test fix --------- Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Roma Sosnovsky <[email protected]>

• martgil(22 Jun 26)

  #6246 Fix incorrectly deleted expired keys (#6249) * fix: correctly deletes expired keys * fix: eslint error * chore: remove comments --------- Co-authored-by: martgil <[email protected]>

• dependabot[bot](21 Jun 26)

  build(deps): bump actions/checkout from 6 to 7 (#6247) Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v6...v7) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

• dependabot[bot](19 Jun 26)

  build(deps): bump dompurify from 3.4.10 to 3.4.11 (#6244) Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.4.10 to 3.4.11. - [Release notes](https://github.com/cure53/DOMPurify/releases) - [Commits](https://github.com/cure53/DOMPurify/compare/3.4.10...3.4.11) --- updated-dependencies: - dependency-name: dompurify dependency-version: 3.4.11 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

• dependabot[bot](19 Jun 26)

  build(deps-dev): bump undici from 7.27.2 to 7.28.0 (#6245) Bumps [undici](https://github.com/nodejs/undici) from 7.27.2 to 7.28.0. - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](https://github.com/nodejs/undici/compare/v7.27.2...v7.28.0) --- updated-dependencies: - dependency-name: undici dependency-version: 7.28.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

• dependabot[bot](15 Jun 26)

  build(deps): bump the npm-deps group with 10 updates (#6242) * build(deps): bump the npm-deps group with 10 updates Bumps the npm-deps group with 10 updates: | Package | From | To | | --- | --- | --- | | [@zxcvbn-ts/core](https://github.com/zxcvbn-ts/zxcvbn) | `3.0.4` | `4.1.1` | | [@zxcvbn-ts/language-common](https://github.com/zxcvbn-ts/zxcvbn) | `3.0.4` | `4.1.1` | | [@zxcvbn-ts/language-en](https://github.com/zxcvbn-ts/zxcvbn) | `3.0.2` | `4.1.0` | | [dompurify](https://github.com/cure53/DOMPurify) | `3.4.8` | `3.4.10` | | [squire-rte](https://github.com/neilj/Squire) | `2.4.7` | `2.4.8` | | [eslint](https://github.com/eslint/eslint) | `10.4.1` | `10.5.0` | | [prettier](https://github.com/prettier/prettier) | `3.8.3` | `3.8.4` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.60.1` | `8.61.0` | | [undici-types](https://github.com/nodejs/undici) | `8.4.0` | `8.4.1` | | [web-ext](https://github.com/mozilla/web-ext) | `10.3.0` | `10.4.0` | Updates `@zxcvbn-ts/core` from 3.0.4 to 4.1.1 - [Changelog](https://github.com/zxcvbn-ts/zxcvbn/blob/master/CHANGELOG.md) - [Commits](https://github.com/zxcvbn-ts/zxcvbn/compare/@zxcvbn-ts/[email protected]...@zxcvbn-ts/[email protected]) Updates `@zxcvbn-ts/language-common` from 3.0.4 to 4.1.1 - [Changelog](https://github.com/zxcvbn-ts/zxcvbn/blob/master/CHANGELOG.md) - [Commits](https://github.com/zxcvbn-ts/zxcvbn/compare/@zxcvbn-ts/[email protected]...@zxcvbn-ts/[email protected]) Updates `@zxcvbn-ts/language-en` from 3.0.2 to 4.1.0 - [Changelog](https://github.com/zxcvbn-ts/zxcvbn/blob/master/CHANGELOG.md) - [Commits](https://github.com/zxcvbn-ts/zxcvbn/compare/@zxcvbn-ts/[email protected]...@zxcvbn-ts/[email protected]) Updates `dompurify` from 3.4.8 to 3.4.10 - [Release notes](https://github.com/cure53/DOMPurify/releases) - [Commits](https://github.com/cure53/DOMPurify/compare/3.4.8...3.4.10) Updates `squire-rte` from 2.4.7 to 2.4.8 - [Changelog](https://github.com/fastmail/Squire/blob/master/CHANGELOG.md) - [Commits](https://github.com/neilj/Squire/commits) Updates `eslint` from 10.4.1 to 10.5.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](https://github.com/eslint/eslint/compare/v10.4.1...v10.5.0) Updates `prettier` from 3.8.3 to 3.8.4 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](https://github.com/prettier/prettier/compare/3.8.3...3.8.4) Updates `typescript-eslint` from 8.60.1 to 8.61.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.61.0/packages/typescript-eslint) Updates `undici-types` from 8.4.0 to 8.4.1 - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](https://github.com/nodejs/undici/compare/v8.4.0...v8.4.1) Updates `web-ext` from 10.3.0 to 10.4.0 - [Release notes](https://github.com/mozilla/web-ext/releases) - [Commits](https://github.com/mozilla/web-ext/compare/10.3.0...10.4.0) --- updated-dependencies: - dependency-name: "@zxcvbn-ts/core" dependency-version: 4.1.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm-deps - dependency-name: "@zxcvbn-ts/language-common" dependency-version: 4.1.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm-deps - dependency-name: "@zxcvbn-ts/language-en" dependency-version: 4.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm-deps - dependency-name: dompurify dependency-version: 3.4.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-deps - dependency-name: squire-rte dependency-version: 2.4.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-deps - dependency-name: eslint dependency-version: 10.5.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-deps - dependency-name: prettier dependency-version: 3.8.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-deps - dependency-name: typescript-eslint dependency-version: 8.61.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-deps - dependency-name: undici-types dependency-version: 8.4.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-deps - dependency-name: web-ext dependency-version: 10.4.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-deps ... Signed-off-by: dependabot[bot] <[email protected]> * update package.json * migrate to zxcvbn-ts v4 --------- Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Roma Sosnovsky <[email protected]>

• Roma Sosnovsky(15 Jun 26)

  8.5.14: Improved OAuth flow, enhanced signature verification, security fixes (#6243) * update version to 8.5.14, add changelog * update firefox download url

• Roma Sosnovsky(09 Jun 26)

  #6240 Improve checksum mismatch validation (#6241)

• Roma Sosnovsky(09 Jun 26)

  Fix email encoding for path segments (#6239)

• martgil(08 Jun 26)

  #6233 Improve css validation (#6234) * fix: improve css validation * feat: strip usage of url() in css * fix: strict css style * fix: add global flag on forbidden css regex * wip: cleanup * fix: style sanitation * test: add test * feat: strip css comments * test: update test with css comment removal test * feat: enforce strict css normalization --------- Co-authored-by: martgil <[email protected]>

• Roma Sosnovsky(08 Jun 26)

  #6236 Improve URL paths handling (#6237) * #6236 Improve URL paths handling * add rootDir to tsconfig.json