Skip to content

chore(deps): bump devalue from 5.6.3 to 5.6.4 in /docs-site#10

Merged
ptone merged 1 commit intomainfrom
dependabot/npm_and_yarn/docs-site/devalue-5.6.4
Apr 10, 2026
Merged

chore(deps): bump devalue from 5.6.3 to 5.6.4 in /docs-site#10
ptone merged 1 commit intomainfrom
dependabot/npm_and_yarn/docs-site/devalue-5.6.4

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Mar 12, 2026

Bumps devalue from 5.6.3 to 5.6.4.

Release notes

Sourced from devalue's releases.

v5.6.4

Patch Changes

  • 87c1f3c: fix: reject __proto__ keys in malformed Object wrapper payloads

    This validates the "Object" parse path and throws when the wrapped value has an own __proto__ key.

  • 40f1db1: fix: ensure sparse array indices are integers

  • 87c1f3c: fix: disallow __proto__ keys in null-prototype object parsing

    This disallows __proto__ keys in the "null" parse path so null-prototype object hydration cannot carry that key through parse/unflatten.

Changelog

Sourced from devalue's changelog.

5.6.4

Patch Changes

  • 87c1f3c: fix: reject __proto__ keys in malformed Object wrapper payloads

    This validates the "Object" parse path and throws when the wrapped value has an own __proto__ key.

  • 40f1db1: fix: ensure sparse array indices are integers

  • 87c1f3c: fix: disallow __proto__ keys in null-prototype object parsing

    This disallows __proto__ keys in the "null" parse path so null-prototype object hydration cannot carry that key through parse/unflatten.

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [devalue](https://github.com/sveltejs/devalue) from 5.6.3 to 5.6.4.
- [Release notes](https://github.com/sveltejs/devalue/releases)
- [Changelog](https://github.com/sveltejs/devalue/blob/main/CHANGELOG.md)
- [Commits](sveltejs/devalue@v5.6.3...v5.6.4)

---
updated-dependencies:
- dependency-name: devalue
  dependency-version: 5.6.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 12, 2026
vamsiramakrishnan pushed a commit to vamsiramakrishnan/scion that referenced this pull request Mar 29, 2026
GoogleCloudPlatform#2 — Auto-tail hints after detached start:
- Show "Tip: Attach with: scion attach <name>" and
  "Tip: View logs with: scion logs <name> --follow" after detached start
- Eliminates "did it work?" anxiety for the most common usage pattern

GoogleCloudPlatform#3+6 — Empty state hints in scion list:
- When no agents found, show actionable getting-started commands:
  "Get started: scion start my-agent 'task' --attach"
  "Browse templates: scion templates list"
  "Install tools: scion marketplace list"

GoogleCloudPlatform#4 — Hub graceful fallback:
- Detect connection refused / no such host / timeout errors specifically
- Show clear remediation: check Hub is running, use --no-hub flag, or
  scion hub disable
- Differentiate auth failures from connectivity failures

GoogleCloudPlatform#5 — Optimized Dockerfile (Dockerfile.fast):
- Ubuntu 24.04 base with git-core PPA (Git >= 2.47 from packages)
- Downloads Go binary instead of compiling from source
- Single apt-get layer for all runtime dependencies
- Estimated build time: ~3 minutes (vs ~15 minutes for source compile)
- Usage: docker build -f Dockerfile.fast -t core-base:latest

GoogleCloudPlatform#7 — UUID-free output:
- Remove UUID from agent start success message
- Was: "Agent 'x' launched successfully (ID: f47ac10b-58cc-...)"
- Now: "Agent 'x' launched successfully."

GoogleCloudPlatform#8 — Jargon glossary in scion --help:
- Add "Key Concepts" section explaining grove, agent, template,
  harness, and profile in plain language
- Add "Getting Started" section with 4 essential commands
- First thing new users see when running scion --help

GoogleCloudPlatform#9 — scion doctor --fix:
- New --fix flag for auto-remediation
- Checks and fixes: machine init, image registry, credentials,
  grove context, shell completions
- Green checkmarks for healthy, warnings with fix commands for broken
- Runs config checks BEFORE system checks when --fix is enabled

GoogleCloudPlatform#10 — Gemini extension manifest generation:
- marketplace install now generates gemini-extension.json alongside
  Claude settings.json and Gemini settings.json
- Creates ~/.gemini/extensions/<name>/gemini-extension.json
- Manifest includes name, version, mcpServers config
- Compatible with `gemini extensions install` format

https://claude.ai/code/session_01TDLLMgpR2ZbfyPzgYqnJ1k
@ptone ptone merged commit f300b04 into main Apr 10, 2026
4 checks passed
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/docs-site/devalue-5.6.4 branch April 10, 2026 23:06
scion-gteam Bot pushed a commit to ptone/scion that referenced this pull request Apr 12, 2026
…oudPlatform#10)

Bumps [devalue](https://github.com/sveltejs/devalue) from 5.6.3 to 5.6.4.
- [Release notes](https://github.com/sveltejs/devalue/releases)
- [Changelog](https://github.com/sveltejs/devalue/blob/main/CHANGELOG.md)
- [Commits](sveltejs/devalue@v5.6.3...v5.6.4)

---
updated-dependencies:
- dependency-name: devalue
  dependency-version: 5.6.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
ptone added a commit that referenced this pull request Apr 17, 2026
- Remove dead `discordMaxEmbedTotal` constant and fix misleading docs
- Use case-insensitive, port-stripped host comparison in Validate()
- Fix short-read-prone body reads in Discord test handlers (io.ReadAll)
- Replace vacuous NotContains assertions with assert.Empty
- Rename mislabelled "github domain" test case to "slack domain"
- Remove vacuous 6000-char assertion from truncation test
- Add test coverage for username and avatar_url wire delivery
- Drain resp.Body on success path for HTTP keep-alive reuse
- Deduplicate role/user IDs in mention extractors
- Fold username/avatarURL into formatDiscordPayload signature
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant