Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
24 commits
Select commit Hold shift + click to select a range
2ed9139
chore: (deps): bump openai from 6.17.0 to 6.19.0
dependabot[bot] Feb 10, 2026
51dc428
Merge 2ed91398cc0be6c3f021a1ba6da733137447ae58 into 1dbb716021492d4b6…
dependabot[bot] Feb 10, 2026
ec705b1
docs: update release timestamp and changelog
github-actions[bot] Feb 10, 2026
0d8e368
chore: (deps): bump @csstools/css-syntax-patches-for-csstree
dependabot[bot] Feb 10, 2026
a569a31
Merge remote-tracking branch 'origin/dependabot/npm_and_yarn/csstools…
github-actions[bot] Feb 10, 2026
661ca89
docs: update release timestamp and changelog
github-actions[bot] Feb 10, 2026
127c532
chore: (deps): bump @csstools/css-calc from 3.0.0 to 3.0.1
dependabot[bot] Feb 11, 2026
2836144
docs: update release timestamp and changelog
github-actions[bot] Feb 11, 2026
caeb7f9
Merge remote-tracking branch 'origin/dependabot/npm_and_yarn/csstools…
github-actions[bot] Feb 11, 2026
1ae1aa3
docs: update release timestamp and changelog
github-actions[bot] Feb 11, 2026
dc8fd40
chore: (deps): bump lru-cache from 11.2.5 to 11.2.6
dependabot[bot] Feb 11, 2026
be0d1a3
Merge remote-tracking branch 'origin/dependabot/npm_and_yarn/lru-cach…
github-actions[bot] Feb 11, 2026
beac8ef
docs: update release timestamp and changelog
github-actions[bot] Feb 11, 2026
0031bd2
chore: (deps): bump @exodus/bytes from 1.12.0 to 1.14.0
dependabot[bot] Feb 12, 2026
904b6d3
Merge remote-tracking branch 'origin/dependabot/npm_and_yarn/exodus/b…
github-actions[bot] Feb 12, 2026
d6be80f
docs: update release timestamp and changelog
github-actions[bot] Feb 12, 2026
c2b3db0
chore: (deps): bump qs from 6.14.1 to 6.14.2
dependabot[bot] Feb 12, 2026
f2964a1
Merge remote-tracking branch 'origin/dependabot/npm_and_yarn/qs-6.14.…
github-actions[bot] Feb 12, 2026
41dbd9e
docs: update release timestamp and changelog
github-actions[bot] Feb 12, 2026
aeb735b
docs: update release timestamp and changelog
github-actions[bot] Feb 13, 2026
1181c83
docs: update release timestamp and changelog
github-actions[bot] Feb 13, 2026
524c98a
chore: (deps): bump qs in the npm_and_yarn group across 1 directory
dependabot[bot] Feb 14, 2026
66ea648
Merge remote-tracking branch 'origin/dependabot/npm_and_yarn/npm_and_…
github-actions[bot] Feb 14, 2026
1ceefa4
docs: update release timestamp and changelog
github-actions[bot] Feb 14, 2026
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
30 changes: 30 additions & 0 deletions CHANGELOG.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,16 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0

## [1.1.0] - 2026-01-31
### Added
- **2026-02-14 11:26 UTC**: Automated Security Batch Update (DependabotSecureFlow)
- **2026-02-13 06:16 UTC**: Automated Security Batch Update (DependabotSecureFlow)
- **2026-02-13 06:15 UTC**: Automated Security Batch Update (DependabotSecureFlow)
- **2026-02-12 06:17 UTC**: Automated Security Batch Update (DependabotSecureFlow)
- **2026-02-12 06:16 UTC**: Automated Security Batch Update (DependabotSecureFlow)
Comment on lines +10 to +14
Copy link

Copilot AI Feb 14, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

These timestamped "Automated Security Batch Update" entries appear under the 1.1.0 release (dated 2026-01-31) even though the entries are dated after the release, and there are duplicate timestamps (e.g., multiple 2026-02-11/2026-02-10 entries). Changelog entries should be deduplicated and recorded under the correct release (or an Unreleased section), ideally under a "Security" subsection rather than "Added".

Copilot uses AI. Check for mistakes.
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@copilot open a new pull request to apply changes based on this feedback

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@copilot open a new pull request to apply changes based on this feedback

- **2026-02-11 06:17 UTC**: Automated Security Batch Update (DependabotSecureFlow)
- **2026-02-11 06:16 UTC**: Automated Security Batch Update (DependabotSecureFlow)
- **2026-02-11 06:16 UTC**: Automated Security Batch Update (DependabotSecureFlow)
- **2026-02-10 06:16 UTC**: Automated Security Batch Update (DependabotSecureFlow)
- **2026-02-10 06:16 UTC**: Automated Security Batch Update (DependabotSecureFlow)
- **2026-02-09 06:35 UTC**: Automated Security Batch Update (DependabotSecureFlow)
- **2026-02-09 06:34 UTC**: Automated Security Batch Update (DependabotSecureFlow)
- **2026-02-09 06:33 UTC**: Automated Security Batch Update (DependabotSecureFlow)
Expand All @@ -29,6 +39,16 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0

## [1.2.0] - 2026-02-01
### Added
- **2026-02-14 11:26 UTC**: Automated Security Batch Update (DependabotSecureFlow)
- **2026-02-13 06:16 UTC**: Automated Security Batch Update (DependabotSecureFlow)
- **2026-02-13 06:15 UTC**: Automated Security Batch Update (DependabotSecureFlow)
- **2026-02-12 06:17 UTC**: Automated Security Batch Update (DependabotSecureFlow)
- **2026-02-12 06:16 UTC**: Automated Security Batch Update (DependabotSecureFlow)
Comment on lines +42 to +46
Copy link

Copilot AI Feb 14, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

These security batch update lines are duplicated across multiple release sections (including 1.2.0) with dates later than the section’s release date, which makes the changelog misleading. Please dedupe and move them to the appropriate version entry (or Unreleased), and consider using a dedicated "Security" section for dependency/security updates.

Copilot uses AI. Check for mistakes.
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@copilot open a new pull request to apply changes based on this feedback

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@copilot open a new pull request to apply changes based on this feedback

- **2026-02-11 06:17 UTC**: Automated Security Batch Update (DependabotSecureFlow)
- **2026-02-11 06:16 UTC**: Automated Security Batch Update (DependabotSecureFlow)
- **2026-02-11 06:16 UTC**: Automated Security Batch Update (DependabotSecureFlow)
- **2026-02-10 06:16 UTC**: Automated Security Batch Update (DependabotSecureFlow)
- **2026-02-10 06:16 UTC**: Automated Security Batch Update (DependabotSecureFlow)
- **2026-02-09 06:35 UTC**: Automated Security Batch Update (DependabotSecureFlow)
- **2026-02-09 06:34 UTC**: Automated Security Batch Update (DependabotSecureFlow)
- **2026-02-09 06:33 UTC**: Automated Security Batch Update (DependabotSecureFlow)
Expand Down Expand Up @@ -64,6 +84,16 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0

## [1.0.0] - 2025-12-10
### Added
- **2026-02-14 11:26 UTC**: Automated Security Batch Update (DependabotSecureFlow)
- **2026-02-13 06:16 UTC**: Automated Security Batch Update (DependabotSecureFlow)
- **2026-02-13 06:15 UTC**: Automated Security Batch Update (DependabotSecureFlow)
- **2026-02-12 06:17 UTC**: Automated Security Batch Update (DependabotSecureFlow)
- **2026-02-12 06:16 UTC**: Automated Security Batch Update (DependabotSecureFlow)
Comment on lines +87 to +91
Copy link

Copilot AI Feb 14, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This release section (1.0.0) is getting populated with dependency/security update entries dated in 2026, which doesn’t match the historical release timeline and is duplicated elsewhere. Please keep older releases immutable and move these entries to the current release/version where the dependency bump actually occurred (or to Unreleased).

Copilot uses AI. Check for mistakes.
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@copilot open a new pull request to apply changes based on this feedback

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@copilot open a new pull request to apply changes based on this feedback

- **2026-02-11 06:17 UTC**: Automated Security Batch Update (DependabotSecureFlow)
- **2026-02-11 06:16 UTC**: Automated Security Batch Update (DependabotSecureFlow)
- **2026-02-11 06:16 UTC**: Automated Security Batch Update (DependabotSecureFlow)
- **2026-02-10 06:16 UTC**: Automated Security Batch Update (DependabotSecureFlow)
- **2026-02-10 06:16 UTC**: Automated Security Batch Update (DependabotSecureFlow)
- **2026-02-09 06:35 UTC**: Automated Security Batch Update (DependabotSecureFlow)
- **2026-02-09 06:34 UTC**: Automated Security Batch Update (DependabotSecureFlow)
- **2026-02-09 06:33 UTC**: Automated Security Batch Update (DependabotSecureFlow)
Expand Down
38 changes: 19 additions & 19 deletions package-lock.json

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion package.json
Original file line number Diff line number Diff line change
Expand Up @@ -32,7 +32,7 @@
"isomorphic-dompurify": "^2.35.0",
"jimp": "^1.6.0",
"jsdom": "^28.0.0",
"openai": "^6.17.0",
"openai": "^6.19.0",
"rss-parser": "^3.13.0",
"sanitize-html": "^2.17.0"
},
Expand Down