Skip to content

chore(deps): update dependency h3 to v1.15.8 - autoclosed#1749

Closed
renovate[bot] wants to merge 1 commit intomainfrom
renovate/h3
Closed

chore(deps): update dependency h3 to v1.15.8 - autoclosed#1749
renovate[bot] wants to merge 1 commit intomainfrom
renovate/h3

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Mar 9, 2026

This PR contains the following updates:

Package Change Age Confidence
h3 (source) ~1.15.5~1.15.8 age confidence
h3 (source) 1.15.51.15.8 age confidence

Release Notes

h3js/h3 (h3)

v1.15.8

Compare Source

compare changes

🩹 Fixes
  • Preserve %25 in pathname (1103df6)

v1.15.7

Compare Source

compare changes

🩹 Fixes
  • static: Narrow path traversal check to match .. as a path segment only (c049dc0)
  • app: Decode percent-encoded path segments to prevent auth bypass (313ea52)
💅 Refactors
  • Remove implicit event handler conversion warning (#​1340)
❤️ Contributors

v1.15.6

Compare Source

compare changes

🩹 Fixes
  • sse: Sanitize newlines in event stream fields to prevent SSE injection (840ac5c)
  • static: Prevent path traversal via percent-encoded dot segments (6465e1b)

Configuration

📅 Schedule: Branch creation - "on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested a review from wattanx as a code owner March 9, 2026 02:49
@pkg-pr-new
Copy link

pkg-pr-new bot commented Mar 9, 2026

Open in StackBlitz

npm i https://pkg.pr.new/@nuxt/bridge@1749
npm i https://pkg.pr.new/@nuxt/bridge-schema@1749

commit: 89debb5

@renovate renovate bot force-pushed the renovate/h3 branch 2 times, most recently from 90ff4cb to 8e67907 Compare March 15, 2026 07:13
@renovate renovate bot changed the title chore(deps): update dependency h3 to v1.15.6 chore(deps): update dependency h3 to v1.15.8 Mar 17, 2026
@renovate renovate bot changed the title chore(deps): update dependency h3 to v1.15.8 chore(deps): update dependency h3 to v1.15.8 - autoclosed Mar 18, 2026
@renovate renovate bot closed this Mar 18, 2026
@renovate renovate bot deleted the renovate/h3 branch March 18, 2026 20:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants