fix(deps): update all non-major dependencies in package.json by renovate[bot] · Pull Request #469 · coreruleset/website

renovate · 2026-02-19T00:55:35Z

This PR contains the following updates:

Package	Type	Update	Change
autoprefixer	dependencies	patch	`10.4.24` → `10.4.27`
coreruleset-v4		minor	`4.23.0` → `4.24.1`
gohugoio/hugo		minor	`0.155.3` → `0.157.0`
hugo-extended	dependencies	minor	`^0.155.0` → `^0.157.0`
lycheeverse/lychee-action	action	minor	`v2.7.0` → `v2.8.0`
postcss (source)	dependencies	patch	`8.5.6` → `8.5.8`
subsite/docs (changelog)		digest	`3b66879` → `157f2d7`

Release Notes

postcss/autoprefixer (autoprefixer)

`v10.4.27`

Compare Source

Removed development key from package.json.

`v10.4.26`

Compare Source

Reduced package size.

`v10.4.25`

Compare Source

Fixed broken gradients on CSS Custom Properties (by @serger777).

coreruleset/coreruleset (coreruleset-v4)

`v4.24.1`

Compare Source

What's Changed

🆕 New features and detections 🎉

feat(930140): add AI coding assistant artifact protection by @etiennemunnich in #4519
feat: Expand Scanner Agents by @HackingRepo in #4532

Fixes

fix(942200): prevent matches against user agent strings by @theseion in #4537
fix(942480): don't inspect cookies twice by @touchweb-vincent in #4524

🧰 Other Changes

refactor: create 934130 .ra file by @Xhoenix in #4487
refactor: create 941330 .ra file by @fzipi in #4492
refactor: create 944300 .ra file by @fzipi in #4490
refactor: create 941320 .ra file by @fzipi in #4491
refactor: create 921160 .ra file by @fzipi in #4497
refactor: create 921120 .ra file by @fzipi in #4496
refactor: create 921110 .ra file by @fzipi in #4495
feat: move 930110 to regex-assembly by @fzipi in #4494
refactor: create 941190 .ra file by @fzipi in #4499
refactor: create 941400 .ra file by @fzipi in #4517
refactor: create 942250 .ra file by @fzipi in #4512
refactor: create 941370 .ra file by @fzipi in #4518
refactor: create 944260 .ra file by @fzipi in #4510
feat: move 943100 to regex-assembly by @fzipi in #4504
refactor: create 944120 .ra file by @fzipi in #4508
refactor: create 942450 .ra file by @fzipi in #4513
refactor: create 942510 and 942511 .ra files with shared include by @fzipi in #4516
refactor: create 944240 .ra file by @fzipi in #4509
docs: comment on threshold should be more alarming by @touchweb-vincent in #4330
chore: add missing regex-assembly comment blocks to rules by @fzipi in #4523
fix(913100): adding OWASP Nettacker to known scanners list by @securestep9 in #4529
refactor: create 941300 .ra file by @fzipi in #4521

New Contributors

@etiennemunnich made their first contribution in #4519
@securestep9 made their first contribution in #4529
@HackingRepo made their first contribution in #4532

Full Changelog: coreruleset/coreruleset@v4.24.0...v4.24.1

`v4.24.0`

Compare Source

What's Changed

🆕 New features and detections 🎉

feat(933100): add detection of smarty template php tag by @touchweb-vincent in #4447

🧰 Other Changes

fix(932130): use lazy regex by @fzipi in #3730
chore(943110): move to regex-assembly by @fzipi in #4431
fix(930130): reduce false positive by @touchweb-vincent in #4451
fix(920650): don't block on method override if it's not actually being overwritten by @EsadCetiner in #4455
fix(932340): Add more UNIX FP commands by @ssigwart in #4454
refactor(951210): convert maxDB leakage rule to regex-assembly by @fzipi in #4468
refactor(951190): convert Ingres leakage rule to regex-assembly by @fzipi in #4466
refactor(951140): convert EMC leakage rule to regex-assembly by @fzipi in #4464
refactor(951110): convert Access leakage rule to regex-assembly by @fzipi in #4463
fix: handle multi-byte UTF-8 chars in SQL special char detection by @fzipi in #4458
refactor(951200): convert Interbase leakage rule to regex-assembly by @fzipi in #4467
refactor(951180): convert Informix leakage rule to regex-assembly by @fzipi in #4465
refactor(951220): convert MSSQL leakage rule to regex-assembly by @fzipi in #4459
refactor(951250): convert SQLite leakage rule to regex-assembly by @fzipi in #4460
refactor(951260): convert Sybase leakage rule to regex-assembly by @fzipi in #4461
refactor(951130): convert DB2 leakage rule to regex-assembly by @fzipi in #4462
fix: don't block json variable names called profile on libmodsecurity3/coraza by @EsadCetiner in #4477
fix(933100): reduce false positive on Extensible Metadata Platform and xsl-stylesheets by @touchweb-vincent in #4445
feat: move 932190 to regex-assembly by @theseion in #4475
fix(942200): FP against comma and single quote in French addresses by @theseion in #4476
fix: add more exclusions for Google Funding Choices cookie by @azurit in #4484

Full Changelog: coreruleset/coreruleset@v4.23.0...v4.24.0

gohugoio/hugo (gohugoio/hugo)

`v0.157.0`

Compare Source

The notable new feature is GitInfo support for Hugo Modules. See this repo for a runnable demo where multiple versions of the same content is mounted into different versions.

Bug fixes

Fix menu pageRef resolution in multidimensional setups 3dff7c8 @bep #14566
docs: Regen and fix the imaging docshelper output 8e28668 @bep #14562
hugolib: Fix automatic section pages not replaced by sites.complements a18bec1 @bep #14540

Improvements

Handle GitInfo for modules where Origin is not set when running go list d98cd4a @bep #14564
commands: Update link to highlighting style examples 6805997 @jmooring #14556
Add AVIF, HEIF and HEIC partial support (only metadata for now) 49bfb10 @bep #14549
resources/images: Adjust WebP processing defaults b7203bb @jmooring
Add Page.GitInfo support for content from Git modules dfece5b @bep #14431 #5533
Add per-request timeout option to resources.GetRemote 2d691c7 @vanbroup
Update AI Watchdog action version in workflow b96d58a @bep
config: Skip taxonomy entries with empty keys or values 65b4287 @bep #14550
Add guideline for brevity in code and comments cc338a9 @bep
modules: Include JSON error info from go mod download in error messages 3850881 @bep #14543

Dependency Updates

build(deps): bump github.com/tdewolff/minify/v2 from 2.24.8 to 2.24.9 9869e71 @dependabot[bot]
build(deps): bump github.com/bep/imagemeta from 0.14.0 to 0.15.0 8f47fe8 @dependabot[bot]

`v0.156.0`

Compare Source

This release brings significant speedups of collections.Where and collections.Sort – but this is mostly a "spring cleaning" release, to make the API cleaner and simpler to understand/document.

Deprecated

Site.AllPages is Deprecated
Site.BuildDrafts is Deprecated
Site.Languages is Deprecated
Site.Data is deprecated, use hugo.Data
Page.Sites and Site.Sites is Deprecated, use hugo.Sites

See this topic for more info.

Removed

These have all been deprecated at least since v0.136.0 and any usage have been logged as an error for a long time:

Template functions

data.GetCSV / getCSV (use resources.GetRemote)
data.GetJSON / getJSON (use resources.GetRemote)
crypto.FNV32a (use hash.FNV32a)
resources.Babel (use js.Babel)
resources.PostCSS (use css.PostCSS)
resources.ToCSS (use css.Sass)

Page methods:

.Page.NextPage (use .Page.Next)
.Page.PrevPage (use .Page.Prev)

Paginator:

.Paginator.PageSize (use .Paginator.PagerSize)

Site methods:

.Site.LastChange (use .Site.Lastmod)
.Site.Author (use .Site.Params.Author)
.Site.Authors (use .Site.Params.Authors)
.Site.Social (use .Site.Params.Social)
.Site.IsMultiLingual (use hugo.IsMultilingual)
.Sites.First (use .Sites.Default)

Site config:

paginate (use pagination.pagerSize)
paginatePath (use pagination.path)

File caches:

getjson cache
getcsv cache

Notes

Remove items deprecated <= v0.136.0 (note) af5051e @bep
hugolib: Move site.Data to hugo.Data, deprecate Site.AllPages/BuildDrafts/Languages 86aa625 @bep #14521
hugolib: Add Page.Sites to Site.Sites deprecation notice 4148ede @jmooring #14532
resources/page: Deprecate cascade._target in favor of cascade.target 828ee72 @jmooring #14341
tpl/tplimpl: Throw error when calling gist shortcode 4384f9b @jmooring #14491
tpl/tplimpl: Throw error when calling twitter/twitter_simple shortcodes 55d136d @jmooring #14488

Bug fixes

tpl/internal: Replace deprecated parser.ParseDir and doc.New 4a641d1 @bep #14513
commands: Fix --panicOnWarning flag having no effect with module version warnings 3f9d0ad @bep #14524
paths: Fix handling of _ as a path name 32027e5 @khayyamsaleem #14344
docs: Fix lineNos default value in docs.yaml 498431d @jmooring
hugolib: Fix term title when taxonomy name contains spaces 773664b @bep #13422

Improvements

hugolib: Simplify sites collection bba2aed @bep
hugolib: Adjust hugo.Sites.Default 29b8e17 @bep #14531
Move common/hugo/HugoInfo to resources/page 3c82340 @bep
hugolib: Add hugo.Sites and .Site.IsDefault(), modify .Site.Sites ab62320 @jmooring #14479 #14481
output: Remove unused method 8d19f5a @bep #14522
Update AI assistance guidelines in CONTRIBUTING.md 7729473 @bep
tpl/collections: Speed up where and sort performance 47e39af @bep
commands: Skip chmod for files without owner-write permission 7850e7c @jmooring #14507
tpl/collections: Add some more benchmarks for where and sort 2e5132d @bep
all: Change site to project where appropriate 19ab3f5 @jmooring #14504
markup/highlight: Allow lineNos to be true, false, "inline", or "table" 3158a51 @jmooring #13481
Upgrade to Go 1.26 b358a65 @bep
tpl: Move from md5 to xxhash for some in memory keys 8ae5e1a @bep
testscripts/commands: Update 'future' date to far future e277659 @toddy15 #14486

Dependency Updates

build(deps): bump google.golang.org/api from 0.255.0 to 0.267.0 d8ec0ee @dependabot[bot]
build(deps): bump github.com/bep/textandbinarywriter 21be4af @dependabot[bot]
build(deps): bump github.com/bep/simplecobra from 0.6.1 to 0.7.0 e549016 @dependabot[bot]
build(deps): bump github.com/bep/tmc from 0.5.1 to 0.6.0 a392906 @dependabot[bot]
build(deps): bump github.com/gohugoio/hugo-goldmark-extensions/extras 86786c9 @dependabot[bot]
build(deps): bump github.com/gohugoio/hugo-goldmark-extensions/passthrough 7a7308a @dependabot[bot]
build(deps): bump golang.org/x/tools from 0.41.0 to 0.42.0 2d1d731 @dependabot[bot]
build(deps): bump github.com/bep/helpers from 0.6.0 to 0.7.0 b26fbf8 @dependabot[bot]
build(deps): bump golang.org/x/image from 0.35.0 to 0.36.0 7358309 @dependabot[bot]

Build Setup

snap: Stop building for ppc64el and s390x e6f01bb @jmooring #14519
Reapply "release: Support alpha, beta, and RC releases" de0c9f3 @jmooring #14466

Documentation

docs: Regenerate docs.yaml 8b7b6af @bep
docker: Add full tar and openssh-client to support GitHub Actions 7137714 @jmooring #14502

jakejarvis/hugo-extended (hugo-extended)

`v0.157.0`

Compare Source

`v0.156.0`

Compare Source

lycheeverse/lychee-action (lycheeverse/lychee-action)

`v2.8.0`

Compare Source

What's Changed

Update lycheeVersion to v0.23.0 by @github-actions[bot] in #324
Update args for lychee-action to use root-dir by @mre in #314
Update test to use --root-dir instead of the deprecated --base by @mre in #315
Bump actions/checkout from 5 to 6 by @dependabot[bot] in #316
Bump actions/cache from 4 to 5 by @dependabot[bot] in #319
Bump peter-evans/create-pull-request from 7 to 8 by @dependabot[bot] in #318
Add message with Summary report URL by @atteggiani in #326

New Contributors

@atteggiani made their first contribution in #326

Full Changelog: lycheeverse/lychee-action@v2.7.0...v2.8.0

postcss/postcss (postcss)

`v8.5.8`

Compare Source

Fixed Processor#version.

`v8.5.7`

Compare Source

Improved source map annotation cleaning performance (by CodeAnt AI).

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

cloudflare-workers-and-pages · 2026-02-19T00:55:37Z

Deploying website with Cloudflare Pages

Latest commit:	`0aa8c70`
Status:	✅ Deploy successful!
Preview URL:	https://5913ad33.website-1u6.pages.dev
Branch Preview URL:	https://renovate-all-minor-patch.website-1u6.pages.dev

View logs

renovate bot added dependencies Pull requests that update a dependency file github-releases minor labels Feb 19, 2026

renovate bot enabled auto-merge (squash) February 19, 2026 00:55

renovate-approve bot approved these changes Feb 19, 2026

View reviewed changes

renovate bot force-pushed the renovate/all-minor-patch branch from d60142c to 86ec933 Compare February 22, 2026 16:34

renovate bot changed the title ~~chore(deps): update all non-major dependencies in .github/workflows/test.yml~~ fix(deps): update all non-major dependencies in .github/workflows/test.yml Feb 22, 2026

renovate bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from facc927 to 6ef37a7 Compare February 28, 2026 21:06

renovate bot added npm patch and removed github-releases minor labels Feb 28, 2026

renovate bot changed the title ~~fix(deps): update all non-major dependencies in .github/workflows/test.yml~~ fix(deps): update all non-major dependencies in package.json Feb 28, 2026

renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 855582c to b71a968 Compare March 5, 2026 22:47

fix(deps): update all non-major dependencies in package.json

0aa8c70

renovate bot force-pushed the renovate/all-minor-patch branch from b71a968 to 0aa8c70 Compare March 9, 2026 17:33

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix(deps): update all non-major dependencies in package.json#469

fix(deps): update all non-major dependencies in package.json#469
renovate[bot] wants to merge 1 commit intomainfrom
renovate/all-minor-patch

renovate bot commented Feb 19, 2026 •

edited

Loading

Uh oh!

cloudflare-workers-and-pages bot commented Feb 19, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate bot commented Feb 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

🆕 New features and detections 🎉

Fixes

🧰 Other Changes

New Contributors

What's Changed

🆕 New features and detections 🎉

🧰 Other Changes

Bug fixes

Improvements

Dependency Updates

Deprecated

Removed

Notes

Bug fixes

Improvements

Dependency Updates

Build Setup

Documentation

What's Changed

New Contributors

Configuration

Uh oh!

cloudflare-workers-and-pages bot commented Feb 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Deploying website with Cloudflare Pages

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate bot commented Feb 19, 2026 •

edited

Loading

cloudflare-workers-and-pages bot commented Feb 19, 2026 •

edited

Loading