Skip to content

chore: bump the deps group across 1 directory with 2 updates - #16

Closed
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/pub/dev/deps-a0c7636b9f
Closed

dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/pub/dev/deps-a0c7636b9f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 14, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the deps group with 2 updates in the / directory: html and test.

Updates html from 0.15.6 to 0.15.7

Release notes

Sourced from html's releases.

package:html v0.15.7

  • writeTextNodeAsHtml: Escape text inside <script> and <style>-like tags in foreign namespaces.
  • Fix the tokenizer failing to close CDATA blocks when encountering extra brackets
  • Require Dart 3.6
  • Limit "Noah's Ark" clause to avoid degenerate O(N^2) when parsing deeply nested formatting elements with unique attributes.
  • Added new textContent method to Node class that returns the text content of the node.
  • Fix XSS vulnerability in htmlToCodeMarkup() by escaping DOCTYPE, element, and attribute names.
Commits
  • c7f7a63 Prepare to publish packages (#2562)
  • 3b3b22c [extension_discovery] Fixup review comments (#2557)
  • 441ff29 [unified_analytics]Add an 'is_external' const to indicate external builds (#2...
  • 5f02a37 Fix trailing comma when adding to flow collections in yaml_edit (#2533)
  • 7a3be9a [unified_analytics] Prepare for 8.0.18 release (#2559)
  • 59c163c [unified_analytics] Add hostArch parameter to Event.flutterCommandResult (#2558)
  • 8108a7c [extension_discovery] Prevent config.yaml symlinks from escaping package boun...
  • 3de16a5 fix(coverage): reject file: URIs outside known roots in Resolver (#2534)
  • 1723b1e [html]: add minimal differential testing framework (#2554)
  • 7dc3279 fix: reconcile version mismatches in process and stack_trace (#2546)
  • Additional commits viewable in compare view

Updates test from 1.31.2 to 1.32.0

Release notes

Sourced from test's releases.

package:test v1.32.0

  • Precompiled browser tests: stop serving files from outside the precompiled root directory. The static handler no longer sets serveFilesOutsidePath, restoring path-containment parity with the dart2js and dart2wasm compilers.
  • Export TestFailure from package:test/scaffolding.dart.
  • Support --compiler cli with the vm-asan, vm-msan, and vm-tsan runtimes.
  • Add support for DART_TEST_REPORTER environment variable in test runner and when tests are run directly on platforms which support dart:io. The environment variable takes precedence over configuration in dart_test.yaml but is overridden by the --reporter flag when passed to the test runner.
  • Suppress dart2js compiler output for successful compiles.
  • Include output from passing tests messages within the Passing tests group in GithubReporter.
  • Only include VM debugger in output when using interactive debugging, suppress it when only using coverage.
  • Use a redirect html file for browser tests to avoid leaking websocket details through process starting arguments.
  • Migrate out of process VM tests communication channel from TCP sockets to Unix domain sockets inside a restricted temporary directory.
  • Pass Node.js test process connection configuration and secret token via a restricted temporary authentication file to prevent secret leakage in command line process arguments.
  • Enable asserts in the exe compiler.
  • Keep the CHROME_EXECUTABLE, MS_EDGE_EXECUTABLE, FIREFOX_EXECUTABLE, and SAFARI_EXECUTABLE overrides working when the browser is also configured through override_platforms or define_platforms. Any setting on those platforms used to drop the variable.
  • Fix race conditions in Chrome coverage collection where tests could finish before DevTools connection and coverage profiling were initialized.
  • Fix deadlock that may occur running tests with the exe compiler.
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the deps group with 2 updates in the / directory: [html](https://github.com/dart-lang/tools/tree/main/pkgs) and [test](https://github.com/dart-lang/test/tree/master/pkgs).


Updates `html` from 0.15.6 to 0.15.7
- [Release notes](https://github.com/dart-lang/tools/releases)
- [Commits](https://github.com/dart-lang/tools/commits/html-v0.15.7/pkgs)

Updates `test` from 1.31.2 to 1.32.0
- [Release notes](https://github.com/dart-lang/test/releases)
- [Commits](https://github.com/dart-lang/test/commits/test-v1.32.0/pkgs)

---
updated-dependencies:
- dependency-name: html
  dependency-version: 0.15.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: deps
- dependency-name: test
  dependency-version: 1.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Dependency version bump (auto) label Sep 14, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 12, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 12, 2026
@dependabot
dependabot Bot deleted the dependabot/pub/dev/deps-a0c7636b9f branch October 12, 2026 02:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependency version bump (auto)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant