Skip to content

Bump handlebars, @hey-api/openapi-ts and @umbraco-cms/backoffice in /src/Umbraco.Community.Favourites/Client#6

Open
dependabot[bot] wants to merge 1 commit intov17/developfrom
dependabot/npm_and_yarn/src/Umbraco.Community.Favourites/Client/multi-e361a78417
Open

Bump handlebars, @hey-api/openapi-ts and @umbraco-cms/backoffice in /src/Umbraco.Community.Favourites/Client#6
dependabot[bot] wants to merge 1 commit intov17/developfrom
dependabot/npm_and_yarn/src/Umbraco.Community.Favourites/Client/multi-e361a78417

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Apr 9, 2026

Removes handlebars. It's no longer used after updating ancestor dependencies handlebars, @hey-api/openapi-ts and @umbraco-cms/backoffice. These dependencies need to be updated together.

Removes handlebars

Updates @hey-api/openapi-ts from 0.81.1 to 0.95.0

Release notes

Sourced from @​hey-api/openapi-ts's releases.

@​hey-api/openapi-ts@​0.95.0

Minor Changes

Validator request schemas

Valibot plugin no longer exports composite request Data schemas. Instead, each layer is exported as a separate schema. If you're using validators with SDKs, you can preserve the composite schema with shouldExtract:

export default {
  input: "hey-api/backend", // sign up at app.heyapi.dev
  output: "src/client",
  plugins: [
    // ...other plugins
    {
      name: "sdk",
      validator: "valibot",
    },
    {
      name: "valibot",
      requests: {
        shouldExtract: true,
      },
    },
  ],
};

Removed plugin.getSymbol() function

This function has been removed. You can use plugin.querySymbol() instead. It accepts the same arguments and returns the same result.

Validator request schemas

Zod plugin no longer exports composite request Data schemas. Instead, each layer is exported as a separate schema. If you're using validators with SDKs, you can preserve the composite schema with shouldExtract:

export default {
  input: "hey-api/backend", // sign up at app.heyapi.dev
  output: "src/client",
  plugins: [
    // ...other plugins
    {
      name: "sdk",
      validator: "zod",
</tr></table> 

... (truncated)

Commits
  • 5e1eaea Merge pull request #3664 from hey-api/changeset-release/main
  • acd0e9d ci: release
  • 632638f Merge pull request #3675 from hey-api/refactor/dsl-from-value
  • 8aa4698 refactor: rename fromValue file to from-value
  • 11db9af Merge pull request #3674 from hey-api/docs/sponsors-mintlify-3
  • a32e70b docs: remove Mintlify from sponsors
  • 3efbe9b Merge pull request #3673 from hey-api/docs/sponsors-mintlify-2
  • bd2bf6e docs: remove Mintlify from sponsors
  • 1162b4a Merge pull request #3672 from hey-api/docs/soon-to-vote
  • 5f696b7 docs: update soon label to vote
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​hey-api/openapi-ts since your current version.


Updates @umbraco-cms/backoffice from 16.3.4 to 17.3.1

Release notes

Sourced from @​umbraco-cms/backoffice's releases.

17.3.1

What's Changed

🐛 Bug Fixes

Full Changelog: umbraco/Umbraco-CMS@release-17.3.0...release-17.3.1

17.3.0

Upgrade Notes

In 17.3 we have upgraded our dependency on MailKit to 4.15.1. This is a minor version update, but we found a few changes we had to make in core to accommodate changes to nullability constraints. Unless using methods of this library, or it's transitive dependency MimeKit, it's unlikely projects will be affected. The update is necessary though, as the version we previously depended on now has a security vulnerability raised against it.

We have made a change to how we handle redirects which brings a significant performance improvement for publish time on large sites, when documents with many descendent nodes are published. If you have custom URL providers you should review this change, as there are some very rare cases where you'll need to adjust to ensure descendent redirects are correctly handled.

Note also that we now auto-generate HMAC secret key for new installs. This has been applied to make Umbraco more secure by default, but it's not been forced for upgrades.

What's Changed Since 17.3.0-rc3

Full Changelog: umbraco/Umbraco-CMS@release-17.3.0-rc3...release-17.3.0

What's Changed Since 17.3.0-rc2

📦 Dependencies

🐛 Bug Fixes

Full Changelog: umbraco/Umbraco-CMS@release-17.3.0-rc2...release-17.3.0-rc3

What's Changed Since 17.3.0-rc1

🐛 Bug Fixes

Full Changelog: umbraco/Umbraco-CMS@release-17.3.0-rc...release-17.3.0-rc2

... (truncated)

Commits
  • 6c089db Media Picker: Fix folder selection regression for developer-configured media ...
  • 70dd464 Builder Extensions: Make AddWebComponents() idempotent (closes #22344) (#22...
  • 8c5c6a8 Install: Ensure media directory exists before creating PhysicalFileProvider...
  • 2b3f468 Document URL Service: Batch delete of obsolete URL segment records to avoid S...
  • 727dd02 Bumped version to 17.3.1.
  • af4a94a Bump acceptance test version to 17.3.0.
  • 0c30d86 Merge branch 'release/17.3.0' of https://github.com/umbraco/Umbraco-CMS into ...
  • 55eda08 Bump version to 17.3.0.
  • 5d17ead Build: Pin CycloneDX SBOM generation to spec version 1.5 (#22305)
  • 851cc79 Build: Publish test helper to Myget (#22156)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 9, 2026
Removes [handlebars](https://github.com/handlebars-lang/handlebars.js). It's no longer used after updating ancestor dependencies [handlebars](https://github.com/handlebars-lang/handlebars.js), [@hey-api/openapi-ts](https://github.com/hey-api/openapi-ts) and [@umbraco-cms/backoffice](https://github.com/umbraco/Umbraco-CMS). These dependencies need to be updated together.


Removes `handlebars`

Updates `@hey-api/openapi-ts` from 0.81.1 to 0.95.0
- [Release notes](https://github.com/hey-api/openapi-ts/releases)
- [Changelog](https://github.com/hey-api/openapi-ts/blob/main/docs/CHANGELOG.md)
- [Commits](https://github.com/hey-api/openapi-ts/compare/@hey-api/openapi-ts@0.81.1...@hey-api/openapi-ts@0.95.0)

Updates `@umbraco-cms/backoffice` from 16.3.4 to 17.3.1
- [Release notes](https://github.com/umbraco/Umbraco-CMS/releases)
- [Commits](umbraco/Umbraco-CMS@release-16.3.4...release-17.3.1)

---
updated-dependencies:
- dependency-name: handlebars
  dependency-version: 
  dependency-type: indirect
- dependency-name: "@hey-api/openapi-ts"
  dependency-version: 0.95.0
  dependency-type: direct:development
- dependency-name: "@umbraco-cms/backoffice"
  dependency-version: 17.3.1
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the base branch from main to v17/develop April 15, 2026 11:58
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/src/Umbraco.Community.Favourites/Client/multi-e361a78417 branch from 754ac31 to e8d76d8 Compare April 15, 2026 11:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants