Skip to content

Bump defu from 6.1.4 to 6.1.6#9

Open
dependabot[bot] wants to merge 80 commits into
mainfrom
dependabot/npm_and_yarn/defu-6.1.6
Open

Bump defu from 6.1.4 to 6.1.6#9
dependabot[bot] wants to merge 80 commits into
mainfrom
dependabot/npm_and_yarn/defu-6.1.6

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Apr 4, 2026

Bumps defu from 6.1.4 to 6.1.6.

Release notes

Sourced from defu's releases.

v6.1.6

compare changes

📦 Build

v6.1.5

compare changes

🩹 Fixes

  • Prevent prototype pollution via __proto__ in defaults (#156)
  • Ignore inherited enumerable properties (11ba022)

✅ Tests

  • Add more tests for plain objects (b65f603)

❤️ Contributors

Changelog

Sourced from defu's changelog.

v6.1.6

compare changes

📦 Build

❤️ Contributors

v6.1.5

compare changes

🩹 Fixes

  • Prevent prototype pollution via __proto__ in defaults (#156)
  • Ignore inherited enumerable properties (11ba022)

🏡 Chore

✅ Tests

  • Add more tests for plain objects (b65f603)

🤖 CI

❤️ Contributors

Commits
  • 001c290 chore(release): v6.1.6
  • 407b516 build: fix mixed types
  • 23e59e6 chore(release): v6.1.5
  • 11ba022 fix: ignore inherited enumerable properties
  • 3942bfb fix: prevent prototype pollution via __proto__ in defaults (#156)
  • d3ef16d chore(deps): update actions/checkout action to v6 (#151)
  • 869a053 chore(deps): update actions/setup-node action to v6 (#149)
  • a97310c chore(deps): update codecov/codecov-action action to v6 (#154)
  • 89df6bb chore: fix typecheck
  • 9237d9c ci: bump node
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

phaupt added 30 commits March 15, 2026 11:53
Keeps documentation guidance concise, publishable, and aligned with helper/app behavior.
Directory structure created for docs/public/blog/{fonts,img,media}.
generated assets (infographic, video, audio, PDF) require manual download.
- Clear leaked setTimeout in PasskeyLoginFlow on unmount
- Make AcrLevels descriptions accessible on touch/keyboard
- Add keyboard navigation (arrow keys) to AudioPlayer seek bar
- Make VideoEmbed play trigger keyboard-accessible with ARIA
Watermarks cropped from all images.
…ment examples

- Add new configuration.md with complete customer config, LDAP, geofencing,
  Fortinet VSA, MFA mapping, OTP, events, I18N error messages, and error
  code reference (cross-checked against source code)
- Update deployment.md with inline docker-compose.yml, nginx.conf, env file
  examples, and single-node (no Redis) deployment section
- Expand introduction.md feature list with detailed descriptions and add
  single-node deployment architecture section
- Add configuration page to VitePress sidebar
Replace blog layout with dedicated release-notes section including
multi-language support (EN/DE/FR/IT), language switcher, and new
components (ScreenshotStep, HybridAuthComparisonTable). Convert heavy
infographic PNGs to WebP (~93% size reduction). Remove unused blog
assets, placeholder media, and empty blog post.
phaupt and others added 23 commits March 28, 2026 11:34
…raphic

The use cases infographic was regenerated to eliminate SIM-method bias
and properly represent all authentication methods per scenario. The
static integration flow infographic is replaced by the interactive
EntraIntegrationFlow Vue component.
The interactive EntraIntegrationFlow Vue component already visualizes
the OIDC flow with correct provider-side framing.
Remove descriptive paragraph from passkey-typen graphic and
rename Passkeys column header to MobileID Passkeys in
methoden-szenarien graphic.
Align admin role guidance with Microsoft docs: Authentication Policy
Administrator for method/policy config, Privileged Role Administrator
for admin consent. Reword sentence that conflated Entra External MFA,
standard OIDC, and RADIUS into a single flow.
Regenerated both infographics from NotebookLM with updated source context:
- passkey-typen: reduced text clutter, cleaner layout with icons and table
- methoden-szenarien: corrected column header to "Mobile ID Passkeys",
  added method icons (fingerprint, SIM card, smartphone)
Replace native select element with custom dropdown featuring country
flags, animated chevron, checkmark for active language, smooth
open/close transitions, and click-outside/escape dismissal.
Rewrite release notes layouts and CSS to integrate seamlessly with the
VitePress docs theme. Key changes:

- Replace gradient hero and blog-specific typography with clean card feed
  using VitePress design tokens
- Fix content alignment: pull post grid into VPContent padding area so
  article text starts at the same horizontal position as doc pages
- Add VideoEmbed component to fix video loading on SPA navigation
- Convert language switcher from dropdown to inline segmented control
- Add custom sidebar navigation matching VitePress sidebar visual style
- Replicate has-sidebar CSS rules for navbar/content positioning on
  release notes pages via html.rn-page class toggle
Bumps [defu](https://github.com/unjs/defu) from 6.1.4 to 6.1.6.
- [Release notes](https://github.com/unjs/defu/releases)
- [Changelog](https://github.com/unjs/defu/blob/main/CHANGELOG.md)
- [Commits](unjs/defu@v6.1.4...v6.1.6)

---
updated-dependencies:
- dependency-name: defu
  dependency-version: 6.1.6
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 4, 2026
@phaupt phaupt force-pushed the main branch 3 times, most recently from 453cb13 to 0c9692d Compare April 17, 2026 05:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Development

Successfully merging this pull request may close these issues.

1 participant