Bump the npm_and_yarn group across 1 directory with 2 updates#172
Merged
Nick2bad4u merged 1 commit intomainfrom Feb 1, 2026
Merged
Conversation
dependabot
Bot
added
dependencies
Owner
✅ Snyk checks have passed. No issues have been found so far.
💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse. |
Contributor
Summary of the Pull RequestThis pull request proposes to update two dependencies in the
|
Contributor
Summary of Pull RequestTitle:Bump the Description:This is an automated pull request from Dependabot that updates two dependencies within the
|
Bumps the npm_and_yarn group with 2 updates in the /docusaurus directory: [qs](https://github.com/ljharb/qs) and [undici](https://github.com/nodejs/undici). Updates `qs` from 6.13.0 to 6.14.1 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.13.0...v6.14.1) Updates `undici` from 7.16.0 to 7.18.2 - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](nodejs/undici@v7.16.0...v7.18.2) --- updated-dependencies: - dependency-name: qs dependency-version: 6.14.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: undici dependency-version: 7.18.2 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/docusaurus/npm_and_yarn-d26ee0282b
branch
from
cb6b961 to
1cdbf10
Compare
Contributor
Summary of the GitHub Pull RequestTitle: Bump the npm_and_yarn group across 1 directory with 2 updates This pull request updates two npm dependencies ( ✨ Dependency Updates Overview:
|
Contributor
Summary of Pull RequestThe pull request updates two dependencies (
|
Contributor
|
Here’s a summary of the GitHub pull request tailored for the project owner: Summary of Pull Request:This pull request updates two dependencies (
|
❌ 1 Tests Failed:
View the top 1 failed test(s) by shortest run time
To view more test analytics, go to the Test Analytics Dashboard |
Contributor
✅
|
| Descriptor | Linter | Files | Fixed | Errors | Warnings | Elapsed time |
|---|---|---|---|---|---|---|
| ✅ ACTION | actionlint | 42 | 0 | 0 | 1.06s | |
| ✅ COPYPASTE | jscpd | yes | no | no | 53.92s | |
| stylelint | 9 | 306 | 0 | 16.86s | ||
| djlint | 2 | 3 | 0 | 3.78s | ||
| ✅ HTML | htmlhint | 2 | 0 | 0 | 0.48s | |
| prettier | 318 | 318 | 0 | 102.76s | ||
| jsonlint | 25 | 2 | 0 | 3.86s | ||
| prettier | 25 | 21 | 0 | 8.85s | ||
| v8r | 25 | 1 | 0 | 50.59s | ||
| markdownlint | 36 | 58 | 0 | 18.33s | ||
| ✅ MARKDOWN | markdown-table-formatter | 28 | 0 | 0 | 6.8s | |
| ✅ POWERSHELL | powershell | 3 | 0 | 0 | 5.86s | |
| ✅ POWERSHELL | powershell_formatter | 3 | 0 | 0 | 3.74s | |
| ✅ REPOSITORY | checkov | yes | no | no | 49.24s | |
| devskim | yes | 1 | 1 | 7.91s | ||
| ✅ REPOSITORY | dustilock | yes | no | no | 2.34s | |
| ✅ REPOSITORY | gitleaks | yes | no | no | 7.19s | |
| ✅ REPOSITORY | git_diff | yes | no | no | 0.31s | |
| grype | yes | no | 4 | 71.83s | ||
| kics | yes | 1 | 1 | 6.67s | ||
| secretlint | yes | 3 | no | 17.6s | ||
| ✅ REPOSITORY | syft | yes | no | no | 26.36s | |
| trivy | yes | 1 | 4 | 12.48s | ||
| ✅ REPOSITORY | trivy-sbom | yes | no | no | 6.16s | |
| ✅ REPOSITORY | trufflehog | yes | no | no | 14.48s | |
| cspell | 784 | 2883 | 0 | 1425.02s | ||
| lychee | 118 | 3 | 0 | 117.14s | ||
| ts-standard | 306 | 306 | 0 | 116.38s | ||
| ✅ XML | xmllint | 1 | 0 | 0 | 2.04s | |
| prettier | 54 | 52 | 104 | 20.18s | ||
| ✅ YAML | v8r | 54 | 0 | 0 | 118.69s | |
| ✅ YAML | yamllint | 54 | 0 | 0 | 12.27s |
Detailed Issues
⚠️ SPELL / cspell - 2883 errors
Results of cspell linter (version 9.3.2)
See documentation on https://megalinter.io/9.2.0/descriptors/spell_cspell/
-----------------------------------------------
✅ [SUCCESS] .checkov.yml
✅ [SUCCESS] .devskim.json
✅ [SUCCESS] .djlintrc
✅ [SUCCESS] .git/FETCH_HEAD
✅ [SUCCESS] .git/HEAD
❌ [ERROR] .git/config
.git/config:11:13 - Unknown word (gitdir) -- [includeIf "gitdir:/home/runner/work/FitFileView
Suggestions: [gilder, girder, giddier, libdir, outdir]
.git/config:13:13 - Unknown word (gitdir) -- [includeIf "gitdir:/home/runner/work/FitFileView
Suggestions: [gilder, girder, giddier, libdir, outdir]
.git/config:13:71 - Unknown word (worktrees) -- FileViewer/FitFileViewer/.git/worktrees/*"]
Suggestions: [workers, worker's, workarea, workArea, worries]
.git/config:15:13 - Unknown word (gitdir) -- [includeIf "gitdir:.git
Suggestions: [gilder, girder, giddier, libdir, outdir]
.git/config:17:13 - Unknown word (gitdir) -- [includeIf "gitdir:.git
Suggestions: [gilder, girder, giddier, libdir, outdir]
.git/config:17:43 - Unknown word (worktrees) -- .git/worktrees/*"]
Suggestions: [workers, worker's, workarea, workArea, worries]
CSpell: Files checked: 1, Issues found: 6 in 1 file.
✅ [SUCCESS] .git/description
✅ [SUCCESS] .git/index
✅ [SUCCESS] .git/info/exclude
✅ [SUCCESS] .git/logs/HEAD
✅ [SUCCESS] .git/logs/refs/heads/dependabot/npm_and_yarn/docusaurus/npm_and_yarn-d26ee0282b
✅ [SUCCESS] .git/logs/refs/remotes/origin/dependabot/npm_and_yarn/docusaurus/npm_and_yarn-d26ee0282b
✅ [SUCCESS] .git/refs/heads/dependabot/npm_and_yarn/docusaurus/npm_and_yarn-d26ee0282b
✅ [SUCCESS] .git/refs/remotes/origin/dependabot/npm_and_yarn/docusaurus/npm_and_yarn-d26ee0282b
✅ [SUCCESS] .git/shallow
❌ [ERROR] .github/.spellcheck.yml
.github/.spellcheck.yml:6:11 - Unknown word (wordlists) -- wordlists:
Suggestions: [wordless, wordiest, worldliest, worsts, wrists]
.github/.spellcheck.yml:7:18 - Unknown word (wordlist) -- - .wordlist.txt
Suggestions: [wordiest, wordless, worldliest, worlds, wordily]
.github/.spellcheck.yml:10:17 - Unknown word (pyspelling) -- - pyspelling.filters.markdown:
Suggestions: [propelling, pistolling]
.github/.spellcheck.yml:12:23 - Unknown word (pymdownx) -- - pymdownx.superfences
Suggestions: [mydown, myDown, putdown, putdowns]
.github/.spellcheck.yml:12:32 - Unknown word (superfence
(Truncated to 2500 characters out of 567444)
⚠️ REPOSITORY / devskim - 1 error
[05:27:16 ERR] Failed to parse Data at the root level is invalid. Line 1, position 1. as a XML document: null
[05:27:16 ERR] Failed to parse Data at the root level is invalid. Line 1, position 1. as a XML document: null
.devskim.json:41:46:41:55 [ManualReview] DS162092 Do not leave debug code in production
.devskim.json:47:66:47:75 [ManualReview] DS162092 Do not leave debug code in production
.devskim.json:53:61:53:70 [ManualReview] DS162092 Do not leave debug code in production
.devskim.json:59:61:59:70 [ManualReview] DS162092 Do not leave debug code in production
[05:27:16 ERR] Failed to parse Data at the root level is invalid. Line 1, position 1. as a XML document: null
electron-app/utils/ui/quickColorSwitcher.js:82:69:82:86 [Moderate] DS137138 Insecure URL
electron-app/utils/ui/quickColorSwitcher.js:110:49:110:66 [Moderate] DS137138 Insecure URL
electron-app/utils/ui/quickColorSwitcher.js:387:16:388:54 [ManualReview] DS172411 Review setTimeout for untrusted data
electron-app/utils/ui/settingsModal.js:38:8:38:21 [ManualReview] DS172411 Review setTimeout for untrusted data
electron-app/utils/ui/settingsModal.js:102:50:102:67 [Moderate] DS137138 Insecure URL
electron-app/utils/ui/settingsModal.js:108:50:108:67 [Moderate] DS137138 Insecure URL
electron-app/utils/ui/settingsModal.js:151:53:151:70 [Moderate] DS137138 Insecure URL
electron-app/utils/ui/settingsModal.js:409:8:409:21 [ManualReview] DS172411 Review setTimeout for untrusted data
electron-app/utils/net/networkUtils.js:22:35:22:70 [ManualReview] DS172411 Review setTimeout for untrusted data
electron-app/utils/debug/stateDevTools.js:589:43:589:52 [ManualReview] DS162092 Do not leave debug code in production
electron-app/utils/debug/stateDevTools.js:590:46:590:55 [ManualReview] DS162092 Do not leave debug code in production
electron-app/utils/ui/components/createSettingsHeader.js:547:12:547:25 [ManualReview] DS172411 Review setTimeout for untrusted data
electron-app/utils/ui/components/createSettingsHeader.js:1122:8:1123:44 [ManualReview] DS172411 Review setTimeout for untrusted data
electron-app/utils/ui/components/createSettingsHeader.js:1246:29:1246:42 [ManualReview] DS172411 Review setTimeout for untrusted data
electron-app/utils/ui/components/createSettingsHeader.js:1524:8:1525:44 [ManualReview] DS172411 Review setTimeout for untrusted data
electron-app/utils/ui/components/ensureChartSettingsDropdowns.js:69:8:71:41 [ManualReview] DS172411 Review setTimeout for untrusted data
electron-app/utils/u
(Truncated to 2500 characters out of 32428)
⚠️ HTML / djlint - 3 errors
Results of djlint linter (version 1.36.4)
See documentation on https://megalinter.io/9.2.0/descriptors/html_djlint/
-----------------------------------------------
❌ [ERROR] electron-app/ffv/index.html
Linting 0/1 files ┈┈┈┈┈┈┈┈┈┈ 00:00
Linting 1/1 files ━━━━━━━━━━ 00:00
Linting 1/1 files ━━━━━━━━━━ 00:00
electron-app/ffv/index.html
───────────────────────────────────────────────────────────────────────────────
H031 2:0 Consider adding meta keywords. <html lang="en">
H037 5:59 Duplicate attribute found. initial-scale
Linted 1 file, found 2 errors.
❌ [ERROR] electron-app/index.html
Linting 0/1 files ┈┈┈┈┈┈┈┈┈┈ 00:00
Linting 1/1 files ━━━━━━━━━━ 00:02
Linting 1/1 files ━━━━━━━━━━ 00:02
Linting 1/1 files ━━━━━━━━━━ 00:02
electron-app/index.html
───────────────────────────────────────────────────────────────────────────────
H006 93:24 Img tag should have height and width attributes. <img
Linted 1 file, found 1 error.
⚠️ REPOSITORY / grype - 4 warnings
warning: A medium vulnerability in npm package: lodash, version 4.17.21 was found at: /docusaurus/package-lock.json
warning: A medium vulnerability in npm package: lodash, version 4.17.21 was found at: /electron-app/package-lock.json
warning: A medium vulnerability in npm package: lodash-es, version 4.17.21 was found at: /docusaurus/package-lock.json
warning: A medium vulnerability in npm package: js-yaml, version 4.1.0 was found at: /electron-app/package-lock.json
warning: 4 warnings emitted
⚠️ JSON / jsonlint - 2 errors
Results of jsonlint linter (version 16.0.0)
See documentation on https://megalinter.io/9.2.0/descriptors/json_jsonlint/
-----------------------------------------------
✅ [SUCCESS] .devskim.json
✅ [SUCCESS] .jscpd.json
✅ [SUCCESS] .markdown-link-check.json
✅ [SUCCESS] .markdownlint.json
✅ [SUCCESS] .prettierrc.json
✅ [SUCCESS] .vscode/extensions.json
✅ [SUCCESS] .vscode/launch.json
✅ [SUCCESS] .vscode/settings.json
✅ [SUCCESS] .vscode/tasks.json
✅ [SUCCESS] cspell.json
✅ [SUCCESS] docusaurus/package-lock.json
✅ [SUCCESS] docusaurus/package.json
✅ [SUCCESS] docusaurus/tsconfig.json
✅ [SUCCESS] docusaurus/typedoc.json
✅ [SUCCESS] docusaurus/typedoc.local.json
✅ [SUCCESS] electron-app/.markdown-link-check.json
✅ [SUCCESS] electron-app/.markdownlint.json
✅ [SUCCESS] electron-app/.npmpackagejsonlintrc.json
✅ [SUCCESS] electron-app/.vscode/tasks.json
✅ [SUCCESS] electron-app/ffv/manifest.json
✅ [SUCCESS] electron-app/package-lock.json
✅ [SUCCESS] electron-app/package.json
❌ [ERROR] electron-app/tsconfig.json
File: electron-app/tsconfig.json
Parse error on line 57, column 9:
...ck": false, // We use extensive ...
----------------------^
Unexpected token "/"
❌ [ERROR] electron-app/tsconfig.vitest.json
File: electron-app/tsconfig.vitest.json
Parse error on line 5, column 9:
...Options": { // Vitest's typechec...
----------------------^
Unexpected token "/"
✅ [SUCCESS] mermaid.config.json
⚠️ REPOSITORY / kics - 1 error
warning: Action is not pinned to a full length commit SHA.
┌─ .github/workflows/vitest.yml:92:1
│
92 │ uses: codecov/test-results-action@v1
│ ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
│
= Unpinned Actions Full Length Commit SHA
= Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps mitigate the risk of a bad actor adding a backdoor to the action's repository, as they would need to generate a SHA-1 collision for a valid Git object payload. When selecting a SHA, you should verify it is from the action's repository and not a repository fork.
warning: 1 warnings emitted
⚠️ SPELL / lychee - 3 errors
Results of lychee linter (version 0.18.0)
See documentation on https://megalinter.io/9.2.0/descriptors/spell_lychee/
-----------------------------------------------
✅ [SUCCESS] .checkov.yml
✅ [SUCCESS] .devskim.json
✅ [SUCCESS] .github/.spellcheck.yml
✅ [SUCCESS] .github/CHANGELOG.md
✅ [SUCCESS] .github/ISSUE_TEMPLATE/bug_report.md
✅ [SUCCESS] .github/ISSUE_TEMPLATE/custom-issue.md
✅ [SUCCESS] .github/ISSUE_TEMPLATE/feature_request.md
✅ [SUCCESS] .github/PROMPTS/Consistency-Check.prompt.md
✅ [SUCCESS] .github/PROMPTS/Continue.prompt.md
✅ [SUCCESS] .github/PROMPTS/Do-ToDo.prompt.md
✅ [SUCCESS] .github/PROMPTS/Generate-100%-Test-Coverage.prompt.md
✅ [SUCCESS] .github/PROMPTS/Review.prompt.md
✅ [SUCCESS] .github/PULL_REQUEST_TEMPLATE/README.md
✅ [SUCCESS] .github/PULL_REQUEST_TEMPLATE/bugfix.md
✅ [SUCCESS] .github/PULL_REQUEST_TEMPLATE/documentation.md
✅ [SUCCESS] .github/PULL_REQUEST_TEMPLATE/feature.md
✅ [SUCCESS] .github/PULL_REQUEST_TEMPLATE/maintenance.md
✅ [SUCCESS] .github/PULL_REQUEST_TEMPLATE/pull_request_template.md
✅ [SUCCESS] .github/PULL_REQUEST_TEMPLATE/quick-fix.md
✅ [SUCCESS] .github/agents/BeastMode.agent.md
✅ [SUCCESS] .github/copilot-commit-message-instructions.md
✅ [SUCCESS] .github/copilot-instructions.md
✅ [SUCCESS] .github/dependabot.yml
✅ [SUCCESS] .github/workflows/ActionLint.yml
✅ [SUCCESS] .github/workflows/Build.yml
✅ [SUCCESS] .github/workflows/VirusTotal.yml
✅ [SUCCESS] .github/workflows/build-win7.yml
✅ [SUCCESS] .github/workflows/cleanReleases.yml
✅ [SUCCESS] .github/workflows/codeql.yml
✅ [SUCCESS] .github/workflows/dependency-review.yml
✅ [SUCCESS] .github/workflows/devskim.yml
✅ [SUCCESS] .github/workflows/docusaurus.yml
✅ [SUCCESS] .github/workflows/electronegativity.yml
✅ [SUCCESS] .github/workflows/eslint.yml
✅ [SUCCESS] .github/workflows/flatpak-build.yml
✅ [SUCCESS] .github/workflows/git-sizer-dispatch.yml
✅ [SUCCESS] .github/workflows/git-sizer.yml
✅ [SUCCESS] .github/workflows/gitleaks.yml
✅ [SUCCESS] .github/workflows/greetings.yml
✅ [SUCCESS] .github/workflows/jekyll-gh-pages.yml
✅ [SUCCESS] .github/workflows/mega-linter.yml
✅ [SUCCESS] .github/workflows/npm-audit.yml
✅ [SUCCESS] .github/workflows/osv-scanner.yml
✅ [SUCCESS] .github/workflows/prettier.yml
✅ [SUCCESS] .github/workflows/print-release-asset-sizes.yml
✅ [SUCCESS] .github/workflows/pssecret-scanner.yml
✅ [SUCCESS] .github/workflows/rebase.yml
✅ [SUCCESS] .github/workflows/release-stats.yml
✅ [SUCCESS] .github/workflows/repo-stats.yml
✅ [SUCCESS] .github
(Truncated to 2500 characters out of 238298)
⚠️ MARKDOWN / markdownlint - 58 errors
Results of markdownlint linter (version 0.45.0)
See documentation on https://megalinter.io/9.2.0/descriptors/markdown_markdownlint/
-----------------------------------------------
✅ [SUCCESS] .github/CHANGELOG.md
✅ [SUCCESS] .github/ISSUE_TEMPLATE/bug_report.md
✅ [SUCCESS] .github/ISSUE_TEMPLATE/custom-issue.md
✅ [SUCCESS] .github/ISSUE_TEMPLATE/feature_request.md
❌ [ERROR] .github/PROMPTS/Consistency-Check.prompt.md
.github/PROMPTS/Consistency-Check.prompt.md:54 MD032/blanks-around-lists Lists should be surrounded by blank lines [Context: "- Relevant file path(s) with c..."]
.github/PROMPTS/Consistency-Check.prompt.md:65 MD032/blanks-around-lists Lists should be surrounded by blank lines [Context: "- The preferred approach or ex..."]
.github/PROMPTS/Consistency-Check.prompt.md:72 MD032/blanks-around-lists Lists should be surrounded by blank lines [Context: "- **Quick Wins** – light stand..."]
.github/PROMPTS/Consistency-Check.prompt.md:87 MD032/blanks-around-lists Lists should be surrounded by blank lines [Context: "1. **Understand the Context**:..."]
.github/PROMPTS/Consistency-Check.prompt.md:98 MD032/blanks-around-lists Lists should be surrounded by blank lines [Context: "- Different naming conventions..."]
❌ [ERROR] .github/PROMPTS/Continue.prompt.md
.github/PROMPTS/Continue.prompt.md:9 MD041/first-line-heading/first-line-h1 First line in a file should be a top-level heading [Context: "- This is a generic continuati..."]
❌ [ERROR] .github/PROMPTS/Do-ToDo.prompt.md
.github/PROMPTS/Do-ToDo.prompt.md:9 MD041/first-line-heading/first-line-h1 First line in a file should be a top-level heading [Context: "- Begin by clearing any existi..."]
.github/PROMPTS/Do-ToDo.prompt.md:21:124 MD026/no-trailing-punctuation Trailing punctuation in heading [Punctuation: '.']
❌ [ERROR] .github/PROMPTS/Generate-100%-Test-Coverage.prompt.md
.github/PROMPTS/Generate-100%-Test-Coverage.prompt.md:53:1 MD029/ol-prefix Ordered list item prefix [Expected: 1; Actual: 6; Style: 1/2/3]
.github/PROMPTS/Generate-100%-Test-Coverage.prompt.md:54:1 MD029/ol-prefix Ordered list item prefix [Expected: 2; Actual: 7; Style: 1/2/3]
.github/PROMPTS/Generate-100%-Test-Coverage.prompt.md:100:32 MD026/no-trailing-punctuation Trailing punctuation in heading [Punctuation: ':']
❌ [ERROR] .github/PROMPTS/Review.prompt.md
.github/PROMPTS/Review.prompt.md:9 MD041/first-line-heading/first-line-h1 First line in a file should be a top-level heading [Conte
(Truncated to 2500 characters out of 9755)
⚠️ JAVASCRIPT / prettier - 318 errors
Results of prettier linter (version 3.6.2)
See documentation on https://megalinter.io/9.2.0/descriptors/javascript_prettier/
-----------------------------------------------
❌ [ERROR] electron-app/__mocks__/electron.js
Checking formatting...
[error] Cannot find package 'prettier-plugin-packagejson' imported from noop.js
❌ [ERROR] electron-app/ffv/assets/Results-H2VOSWW7.js
Checking formatting...
[error] Cannot find package 'prettier-plugin-packagejson' imported from noop.js
❌ [ERROR] electron-app/ffv/assets/Sprite-BZ4Kwmf3.js
Checking formatting...
[error] Cannot find package 'prettier-plugin-packagejson' imported from noop.js
❌ [ERROR] electron-app/ffv/assets/binaryString-DLpsQS3c.js
Checking formatting...
[error] Cannot find package 'prettier-plugin-packagejson' imported from noop.js
❌ [ERROR] electron-app/ffv/assets/findFields-C7eiFatx.js
Checking formatting...
[error] Cannot find package 'prettier-plugin-packagejson' imported from noop.js
❌ [ERROR] electron-app/ffv/assets/getMessagesForName-CXPND5Gu.js
Checking formatting...
[error] Cannot find package 'prettier-plugin-packagejson' imported from noop.js
❌ [ERROR] electron-app/ffv/assets/index-B6xcXKpx.js
Checking formatting...
[error] Cannot find package 'prettier-plugin-packagejson' imported from noop.js
❌ [ERROR] electron-app/ffv/assets/index-C1xoUegX.js
Checking formatting...
[error] Cannot find package 'prettier-plugin-packagejson' imported from noop.js
❌ [ERROR] electron-app/ffv/assets/index-CQWboq_8.js
Checking formatting...
[error] Cannot find package 'prettier-plugin-packagejson' imported from noop.js
❌ [ERROR] electron-app/ffv/assets/index-D4CCfpM1.js
Checking formatting...
[error] Cannot find package 'prettier-plugin-packagejson' imported from noop.js
❌ [ERROR] electron-app/ffv/assets/index-LvWRIhnC.js
Checking formatting...
[error] Cannot find package 'prettier-plugin-packagejson' imported from noop.js
❌ [ERROR] electron-app/ffv/assets/isUnknown-BvXlyTdW.js
Checking formatting...
[error] Cannot find package 'prettier-plugin-packagejson' imported from noop.js
❌ [ERROR] electron-app/ffv/assets/useMeasure-Df3vRnzU.js
Checking formatting...
[error] Cannot find package 'prettier-plugin-packagejson' imported from noop.js
❌ [ERROR] electron-app/ffv/assets/waypoint_icons_sprite-Dqa_dKt2.js
Checking formatting...
[error] Cannot find package 'prettier-plugin-packagejson' importe
(Truncated to 2500 characters out of 54832)
⚠️ JSON / prettier - 21 errors
Results of prettier linter (version 3.6.2)
See documentation on https://megalinter.io/9.2.0/descriptors/json_prettier/
-----------------------------------------------
❌ [ERROR] .devskim.json
Checking formatting...
[warn] .devskim.json
[warn] Code style issues found in the above file. Run Prettier with --write to fix.
❌ [ERROR] .jscpd.json
Checking formatting...
[warn] .jscpd.json
[warn] Code style issues found in the above file. Run Prettier with --write to fix.
❌ [ERROR] .markdown-link-check.json
Checking formatting...
[warn] .markdown-link-check.json
[warn] Code style issues found in the above file. Run Prettier with --write to fix.
❌ [ERROR] .markdownlint.json
Checking formatting...
[warn] .markdownlint.json
[warn] Code style issues found in the above file. Run Prettier with --write to fix.
❌ [ERROR] .prettierrc.json
Checking formatting...
[warn] .prettierrc.json
[warn] Code style issues found in the above file. Run Prettier with --write to fix.
❌ [ERROR] .vscode/extensions.json
Checking formatting...
[warn] .vscode/extensions.json
[warn] Code style issues found in the above file. Run Prettier with --write to fix.
❌ [ERROR] .vscode/launch.json
Checking formatting...
[warn] .vscode/launch.json
[warn] Code style issues found in the above file. Run Prettier with --write to fix.
❌ [ERROR] .vscode/settings.json
Checking formatting...
[warn] .vscode/settings.json
[warn] Code style issues found in the above file. Run Prettier with --write to fix.
❌ [ERROR] .vscode/tasks.json
Checking formatting...
[warn] .vscode/tasks.json
[warn] Code style issues found in the above file. Run Prettier with --write to fix.
❌ [ERROR] cspell.json
Checking formatting...
[warn] cspell.json
[warn] Code style issues found in the above file. Run Prettier with --write to fix.
✅ [SUCCESS] docusaurus/package-lock.json
✅ [SUCCESS] docusaurus/package.json
❌ [ERROR] docusaurus/tsconfig.json
Checking formatting...
[warn] docusaurus/tsconfig.json
[warn] Code style issues found in the above file. Run Prettier with --write to fix.
❌ [ERROR] docusaurus/typedoc.json
Checking formatting...
[warn] docusaurus/typedoc.json
[warn] Code style issues found in the above file. Run Prettier with --write to fix.
❌ [ERROR] docusaurus/typedoc.local.json
Checking formatting...
[warn] docusaurus/typedoc.local.json
[warn] Code style issues found
(Truncated to 2500 characters out of 4241)
⚠️ YAML / prettier - 52 errors
Results of prettier linter (version 3.6.2)
See documentation on https://megalinter.io/9.2.0/descriptors/yaml_prettier/
-----------------------------------------------
❌ [ERROR] .checkov.yml
Checking formatting...
[warn] .checkov.yml
[warn] Code style issues found in the above file. Run Prettier with --write to fix.
❌ [ERROR] .github/.spellcheck.yml
Checking formatting...
[warn] .github/.spellcheck.yml
[warn] Code style issues found in the above file. Run Prettier with --write to fix.
❌ [ERROR] .github/dependabot.yml
Checking formatting...
[warn] .github/dependabot.yml
[warn] Code style issues found in the above file. Run Prettier with --write to fix.
❌ [ERROR] .github/workflows/ActionLint.yml
Checking formatting...
[warn] .github/workflows/ActionLint.yml
[warn] Code style issues found in the above file. Run Prettier with --write to fix.
❌ [ERROR] .github/workflows/Build.yml
Checking formatting...
[warn] .github/workflows/Build.yml
[warn] Code style issues found in the above file. Run Prettier with --write to fix.
❌ [ERROR] .github/workflows/VirusTotal.yml
Checking formatting...
[warn] .github/workflows/VirusTotal.yml
[warn] Code style issues found in the above file. Run Prettier with --write to fix.
❌ [ERROR] .github/workflows/build-win7.yml
Checking formatting...
[warn] .github/workflows/build-win7.yml
[warn] Code style issues found in the above file. Run Prettier with --write to fix.
❌ [ERROR] .github/workflows/cleanReleases.yml
Checking formatting...
[warn] .github/workflows/cleanReleases.yml
[warn] Code style issues found in the above file. Run Prettier with --write to fix.
❌ [ERROR] .github/workflows/codeql.yml
Checking formatting...
[warn] .github/workflows/codeql.yml
[warn] Code style issues found in the above file. Run Prettier with --write to fix.
❌ [ERROR] .github/workflows/dependency-review.yml
Checking formatting...
[warn] .github/workflows/dependency-review.yml
[warn] Code style issues found in the above file. Run Prettier with --write to fix.
❌ [ERROR] .github/workflows/devskim.yml
Checking formatting...
[warn] .github/workflows/devskim.yml
[warn] Code style issues found in the above file. Run Prettier with --write to fix.
❌ [ERROR] .github/workflows/docusaurus.yml
Checking formatting...
[warn] .github/workflows/docusaurus.yml
[warn] Code style issues found in the above file. Run Prettier
(Truncated to 2500 characters out of 10629)
⚠️ REPOSITORY / secretlint - 3 errors
error: found basic auth credential: *****************************
┌─ electron-app/tests/unit/main/ipc/registerExternalHandlers.test.js:161:56
│
161 │ await expect(shellOpenExternalHandler({}, "https://user:pass@example.com")).rejects.toThrow(
│ ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
│
= secretlint rule(@secretlint/secretlint-rule-preset-recommend > @secretlint/secretlint-rule-basicauth) error
error: found basic auth credential: *****************************
┌─ electron-app/tests/unit/main/security/externalUrlPolicy.test.ts:20:43
│
20 │ expect(() => validateExternalUrl("https://user:pass@example.com")).toThrow();
│ ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
│
= secretlint rule(@secretlint/secretlint-rule-preset-recommend > @secretlint/secretlint-rule-basicauth) error
error: found basic auth credential: *****************************
┌─ electron-app/tests/unit/main/updater/setupAutoUpdater.test.ts:68:23
│
68 │ feedURL: "https://user:pass@example.com/releases",
│ ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
│
= secretlint rule(@secretlint/secretlint-rule-preset-recommend > @secretlint/secretlint-rule-basicauth) error
error: 3 errors emitted
⚠️ CSS / stylelint - 306 errors
Results of stylelint linter (version 16.26.0)
See documentation on https://megalinter.io/9.2.0/descriptors/css_stylelint/
-----------------------------------------------
❌ [ERROR] docusaurus/src/components/GitHubStats/styles.module.css
docusaurus/src/components/GitHubStats/styles.module.css
1:1 ✖ Expected class selector ".githubStats" to be kebab-case selector-class-pattern
8:1 ✖ Expected class selector ".statBadge" to be kebab-case selector-class-pattern
22:1 ✖ Expected class selector ".statBadge" to be kebab-case selector-class-pattern
✖ 3 problems (3 errors, 0 warnings)
❌ [ERROR] docusaurus/src/components/HomepageFeatures/styles.module.css
docusaurus/src/components/HomepageFeatures/styles.module.css
6:1 ✖ Expected class selector ".featuresTitle" to be kebab-case selector-class-pattern
13:1 ✖ Expected class selector ".featureCard" to be kebab-case selector-class-pattern
23:1 ✖ Expected class selector ".featureCard" to be kebab-case selector-class-pattern
29:1 ✖ Expected class selector ".featureIcon" to be kebab-case selector-class-pattern
35:1 ✖ Expected class selector ".featureTitle" to be kebab-case selector-class-pattern
42:1 ✖ Expected class selector ".featureDescription" to be kebab-case selector-class-pattern
✖ 6 problems (6 errors, 0 warnings)
❌ [ERROR] docusaurus/src/css/custom.css
docusaurus/src/css/custom.css
33:65 ✖ Expected "Roboto" to be "roboto" value-keyword-case
33:73 ✖ Expected "Ubuntu" to be "ubuntu" value-keyword-case
33:81 ✖ Expected "Cantarell" to be "cantarell" value-keyword-case
35:63 ✖ Expected "Menlo" to be "menlo" value-keyword-case
35:70 ✖ Expected "Monaco" to be "monaco" value-keyword-case
35:78 ✖ Expected "Consolas" to be "consolas" value-keyword-case
52:3 ✖ Unexpected empty line before custom property custom-property-empty-line-before
57:3 ✖ Unexpected empty line before custom property custom-property-empty-line-before
70:19 ✖ Expected "optimizeLegibility" to be "optimizelegibility"
(Truncated to 2500 characters out of 48264)
⚠️ REPOSITORY / trivy - 1 error
warning: Package: lodash
Installed Version: 4.17.21
Vulnerability CVE-2025-13465
Severity: MEDIUM
Fixed Version: 4.17.23
Link: [CVE-2025-13465](https://avd.aquasec.com/nvd/cve-2025-13465)
┌─ docusaurus/package-lock.json:12634:1
│
12634 │ ╭ "node_modules/lodash": {
12635 │ │ "version": "4.17.21",
12636 │ │ "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz",
12637 │ │ "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==",
12638 │ │ "license": "MIT"
12639 │ │ },
│ ╰^
│
= lodash: prototype pollution in _.unset and _.omit functions
= Lodash versions 4.0.0 through 4.17.22 are vulnerable to prototype pollution in the _.unset and _.omit functions. An attacker can pass crafted paths which cause Lodash to delete methods from global prototypes.
The issue permits deletion of properties but does not allow overwriting their original behavior.
This issue is patched on 4.17.23
warning: Package: lodash-es
Installed Version: 4.17.21
Vulnerability CVE-2025-13465
Severity: MEDIUM
Fixed Version: 4.17.23
Link: [CVE-2025-13465](https://avd.aquasec.com/nvd/cve-2025-13465)
┌─ docusaurus/package-lock.json:12640:1
│
12640 │ ╭ "node_modules/lodash-es": {
12641 │ │ "version": "4.17.21",
12642 │ │ "resolved": "https://registry.npmjs.org/lodash-es/-/lodash-es-4.17.21.tgz",
12643 │ │ "integrity": "sha512-mKnC+QJ9pWVzv+C4/U3rRsHapFfHvQFoFB92e52xeyGMcX6/OlIl78je1u8vePzYZSkkogMPJ2yjxxsb89cxyw==",
12644 │ │ "license": "MIT"
12645 │ │ },
│ ╰^
│
= lodash: prototype pollution in _.unset and _.omit functions
= Lodash versions 4.0.0 through 4.17.22 are vulnerable to prototype pollution in the _.unset and _.omit functions. An attacker can pass crafted paths which cause Lodash to delete methods from global prototypes.
The issue permits deletion of properties but does not allow overwriting their original behavior.
This issue is patched on 4.17.23
warning: Package: js-yaml
Installed Version: 4.1.0
Vulnerability CVE-2025-64718
Severity: MEDIUM
Fixed Version: 4.1.1, 3.14.2
Link: [CVE-2025-64718](https://avd.aquasec.com/nvd/cve-2025-64718)
┌─ electron-app/package-lock.json:12904:1
│
12904 │ ╭ "node_modules/js-yaml": {
12905 │ │
(Truncated to 2500 characters out of 4252)
⚠️ TYPESCRIPT / ts-standard - 306 errors
Results of ts-standard linter (version 12.0.2)
See documentation on https://megalinter.io/9.2.0/descriptors/typescript_ts_standard/
-----------------------------------------------
❌ [ERROR] docusaurus/docusaurus.config.ts
Unable to locate the project file. A project file (tsconfig.json or tsconfig.eslint.json) is required in order to use ts-standard.
❌ [ERROR] docusaurus/sidebars.ts
Unable to locate the project file. A project file (tsconfig.json or tsconfig.eslint.json) is required in order to use ts-standard.
❌ [ERROR] docusaurus/src/js/modernEnhancements.ts
Unable to locate the project file. A project file (tsconfig.json or tsconfig.eslint.json) is required in order to use ts-standard.
❌ [ERROR] electron-app/fitsdk.d.ts
Unable to locate the project file. A project file (tsconfig.json or tsconfig.eslint.json) is required in order to use ts-standard.
❌ [ERROR] electron-app/global.d.ts
Unable to locate the project file. A project file (tsconfig.json or tsconfig.eslint.json) is required in order to use ts-standard.
❌ [ERROR] electron-app/types/ffv/assets/Results-H2VOSWW7.d.ts
Unable to locate the project file. A project file (tsconfig.json or tsconfig.eslint.json) is required in order to use ts-standard.
❌ [ERROR] electron-app/types/ffv/assets/Sprite-BZ4Kwmf3.d.ts
Unable to locate the project file. A project file (tsconfig.json or tsconfig.eslint.json) is required in order to use ts-standard.
❌ [ERROR] electron-app/types/ffv/assets/binaryString-DLpsQS3c.d.ts
Unable to locate the project file. A project file (tsconfig.json or tsconfig.eslint.json) is required in order to use ts-standard.
❌ [ERROR] electron-app/types/ffv/assets/findFields-C7eiFatx.d.ts
Unable to locate the project file. A project file (tsconfig.json or tsconfig.eslint.json) is required in order to use ts-standard.
❌ [ERROR] electron-app/types/ffv/assets/getMessagesForName-CXPND5Gu.d.ts
Unable to locate the project file. A project file (tsconfig.json or tsconfig.eslint.json) is required in order to use ts-standard.
❌ [ERROR] electron-app/types/ffv/assets/index-B6xcXKpx.d.ts
Unable to locate the project file. A project file (tsconfig.json or tsconfig.eslint.json) is required in order to use ts-standard.
❌ [ERROR] electron-app/types/ffv/assets/index-C1xoUegX.d.ts
Unable to locate the project file. A project file (tsconfig.json or tsconfig.eslint.json) is required in order to use ts-standard.
❌ [ERROR] electron-app/types/ffv/assets/inde
(Truncated to 2500 characters out of 62473)
⚠️ JSON / v8r - 1 error
Results of v8r linter (version 5.1.0)
See documentation on https://megalinter.io/9.2.0/descriptors/json_v8r/
-----------------------------------------------
✅ [SUCCESS] .devskim.json
✅ [SUCCESS] .jscpd.json
✅ [SUCCESS] .markdown-link-check.json
✅ [SUCCESS] .markdownlint.json
✅ [SUCCESS] .prettierrc.json
✅ [SUCCESS] .vscode/extensions.json
✅ [SUCCESS] .vscode/launch.json
✅ [SUCCESS] .vscode/settings.json
❌ [ERROR] .vscode/tasks.json
ℹ No config file found
ℹ Pre-warming the cache
ℹ Processing .vscode/tasks.json
ℹ Found schema in https://www.schemastore.org/api/json/catalog.json ...
ℹ Validating .vscode/tasks.json against schema from https://www.schemastore.org/task.json ...
✖ .vscode/tasks.json is invalid
.vscode/tasks.json#/tasks/7/group must be object
.vscode/tasks.json#/tasks/7/group must be equal to one of the allowed values
.vscode/tasks.json#/tasks/7/group must match a schema in anyOf
✅ [SUCCESS] cspell.json
✅ [SUCCESS] docusaurus/package-lock.json
✅ [SUCCESS] docusaurus/package.json
✅ [SUCCESS] docusaurus/tsconfig.json
✅ [SUCCESS] docusaurus/typedoc.json
✅ [SUCCESS] docusaurus/typedoc.local.json
✅ [SUCCESS] electron-app/.markdown-link-check.json
✅ [SUCCESS] electron-app/.markdownlint.json
✅ [SUCCESS] electron-app/.npmpackagejsonlintrc.json
✅ [SUCCESS] electron-app/.vscode/tasks.json
✅ [SUCCESS] electron-app/ffv/manifest.json
✅ [SUCCESS] electron-app/package-lock.json
✅ [SUCCESS] electron-app/package.json
✅ [SUCCESS] electron-app/tsconfig.json
✅ [SUCCESS] electron-app/tsconfig.vitest.json
✅ [SUCCESS] mermaid.config.json
See detailed reports in MegaLinter artifacts
Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)
- Documentation: Custom Flavors
- Command:
npx mega-linter-runner@9.2.0 --custom-flavor-setup --custom-flavor-linters ACTION_ACTIONLINT,COPYPASTE_JSCPD,CSS_STYLELINT,HTML_DJLINT,HTML_HTMLHINT,JAVASCRIPT_PRETTIER,JSON_JSONLINT,JSON_V8R,JSON_PRETTIER,MARKDOWN_MARKDOWNLINT,MARKDOWN_MARKDOWN_TABLE_FORMATTER,POWERSHELL_POWERSHELL,POWERSHELL_POWERSHELL_FORMATTER,REPOSITORY_CHECKOV,REPOSITORY_DEVSKIM,REPOSITORY_DUSTILOCK,REPOSITORY_GIT_DIFF,REPOSITORY_GITLEAKS,REPOSITORY_GRYPE,REPOSITORY_KICS,REPOSITORY_SECRETLINT,REPOSITORY_SYFT,REPOSITORY_TRIVY,REPOSITORY_TRIVY_SBOM,REPOSITORY_TRUFFLEHOG,SPELL_CSPELL,SPELL_LYCHEE,TYPESCRIPT_STANDARD,XML_XMLLINT,YAML_PRETTIER,YAML_YAMLLINT,YAML_V8R
dependabot
Bot
deleted the
dependabot/npm_and_yarn/docusaurus/npm_and_yarn-d26ee0282b
branch
Nick2bad4u
added a commit
that referenced
this pull request
Feb 25, 2026
* 'main' of https://github.com/nick2bad4u/FitFileViewer: Bump the npm_and_yarn group across 1 directory with 2 updates (#172) [ci](deps): Bump the github-actions group with 14 updates (#175) Update metrics.repository.svg - [Skip GitHub Action]
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 2 updates in the /docusaurus directory: qs and undici.
Updates
qsfrom 6.13.0 to 6.14.1Changelog
Sourced from qs's changelog.
Commits
3fa11a5v6.14.1a626704[Dev Deps] updatenpmignore3086902[Fix] ensure arrayLength applies to[]notation as wellfc7930e[Dev Deps] updateeslint,@ljharb/eslint-config0b06aac[Dev Deps] update@ljharb/eslint-config64951f6[Refactor]parse: extract key segment splitting helpere1bd259[Dev Deps] update@ljharb/eslint-configf4b3d39[eslint] add eslint 9 optional peer dep6e94d95[Dev Deps] updateeslint,@ljharb/eslint-config,npmignore973dc3c[actions] add workflow permissionsUpdates
undicifrom 7.16.0 to 7.18.2Release notes
Sourced from undici's releases.
... (truncated)
Commits
7e5cb2dBumped v7.18.2 (#4730)b04e3cbfix(decompress): limit Content-Encoding chain to 5 to prevent resource exhaus...2bcb77bBumped v7.18.1 (#4728)58a12b7build(deps): bump actions/checkout from 6.0.0 to 6.0.1 (#4719)5fa2930build(deps): bump step-security/harden-runner from 2.13.1 to 2.14.0 (#4718)fbbe283docs: add security warning for strictContentLength option (#4726)ce12d9efix: do not crash if Node.js is compiled without SSL (#4727)ebe3e33Bumped v7.18.0 (#4725)4e9b88bfix: limit Content-Encoding chain to 5 to prevent resource exhaustiond560767Bumped v7.17.0 (#4724)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsYou can disable automated security fix PRs for this repo from the Security Alerts page.