Skip to content

chore(deps): bump lilconfig and tailwindcss in /telemetry/ui - #855

Merged
jernejfrank merged 1 commit into
mainfrom
dependabot/npm_and_yarn/telemetry/ui/multi-26128cacb2
Jul 26, 2026
Merged

chore(deps): bump lilconfig and tailwindcss in /telemetry/ui#855
jernejfrank merged 1 commit into
mainfrom
dependabot/npm_and_yarn/telemetry/ui/multi-26128cacb2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 26, 2026

Copy link
Copy Markdown
Contributor

Bumps lilconfig to 3.1.3 and updates ancestor dependency tailwindcss. These dependencies need to be updated together.

Updates lilconfig from 3.1.0 to 3.1.3

Release notes

Sourced from lilconfig's releases.

v3.1.3 Windows friendly

Default javascript loader can now imports absolute paths on Windows OS. Thanks to @​ajiho

v3.1.2 Webpack friendly

The new changes make lilconfig work as expected when a nodejs app is bundled using webpack.

Thanks @​CHC383

v3.1.1 Security release

  1. Fix security vulnerability by migrating from typescript to javascript with TSDoc comments. See #48
  2. Use tabs instead of spaces

Due to how typescript compilation works I had to use eval() to have a dynamic import in project compiled to commonjs in v3.1.0. Eval call introduced a security vulnerability as it was pointed out to me by kind people from Secfault Security. As there is currently no way to make typescript output dynamic import with a commonjs target I migrated the source code to be in javascript. This means that the code in this repository is the code that gets published to npm. The package still includes first party typescript types in index.d.ts file that gets published as well. The runtime code now uses TSDoc annotations to maintain type safety.

Commits
  • 77d7186 3.1.3
  • 672f1da do not duplicate github actions runs, run on push to master or full pull requ...
  • 0158ebe update reusable github actions steps
  • 8eb98d8 use node v22 by default and move node v20 to old node tests
  • bb876c3 run ci checks on pull request
  • 633192e extract coveralls to only run on push to main
  • 686fc79 fix linter
  • 4e892a4 modern setup node step
  • 0bf4aec ignore postinstall scripts for CI jobs that does not require biome
  • 0853887 Comment why we explicitly we need uvu tests
  • Additional commits viewable in compare view

Updates tailwindcss from 3.4.1 to 3.4.19

Release notes

Sourced from tailwindcss's releases.

v3.4.19

Fixed

  • Don’t break sibling-*() functions when used inside calc(…) (#19335)

v3.4.18

Fixed

  • Improve support for raw supports-[…] queries in arbitrary values (#13605)
  • Fix require.cache error when loaded through a TypeScript file in Node 22.18+ (#18665)
  • Support import.meta.resolve(…) in configs for new enough Node.js versions (#18938)
  • Allow using newer versions of postcss-load-config for better ESM and TypeScript PostCSS config support with the CLI (#18938)
  • Remove irrelevant utility rules when matching important classes (#19030)

v3.4.17

Fixed

  • Work around Node v22.12+ issue (#15421)

v3.4.16

Fixed

  • Ensure the TypeScript types for PluginsConfig allow undefined values (#14668)

Changed

  • Bumped lilconfig to v3.x (#15289)

v3.4.15

  • Bump versions for security vulnerabilities (#14697)
  • Ensure the TypeScript types for the boxShadow theme configuration allows arrays (#14856)
  • Set fallback for opacity variables to ensure setting colors with the selection:* variant works in Chrome 131 (#15003)

v3.4.14

Fixed

  • Don't set display: none on elements that use hidden="until-found" (#14625)

v3.4.13

Fixed

  • Improve source glob verification performance (#14481)

v3.4.12

Fixed

  • Ensure using @apply with utilities that use @defaults works with rules defined in the base layer when using optimizeUniversalDefaults (#14427)

v3.4.11

Fixed

... (truncated)

Changelog

Sourced from tailwindcss's changelog.

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [lilconfig](https://github.com/antonk52/lilconfig) to 3.1.3 and updates ancestor dependency [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss). These dependencies need to be updated together.


Updates `lilconfig` from 3.1.0 to 3.1.3
- [Release notes](https://github.com/antonk52/lilconfig/releases)
- [Commits](antonk52/lilconfig@v3.1.0...v3.1.3)

Updates `tailwindcss` from 3.4.1 to 3.4.19
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v3.4.19/packages/tailwindcss)

---
updated-dependencies:
- dependency-name: lilconfig
  dependency-version: 3.1.3
  dependency-type: indirect
- dependency-name: tailwindcss
  dependency-version: 3.4.19
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 26, 2026
@github-actions github-actions Bot added the area/ui Burr UI (telemetry frontend) label Jul 26, 2026
@jernejfrank
jernejfrank enabled auto-merge (squash) July 26, 2026 16:15
@jernejfrank
jernejfrank merged commit 0476e72 into main Jul 26, 2026
30 checks passed
@jernejfrank
jernejfrank deleted the dependabot/npm_and_yarn/telemetry/ui/multi-26128cacb2 branch July 26, 2026 16:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/ui Burr UI (telemetry frontend) dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant