Skip to content

Bump picomatch from 2.3.1 to 2.3.2 - #18

Open
dependabot[bot] wants to merge 25 commits into
masterfrom
dependabot/npm_and_yarn/picomatch-2.3.2
Open

Bump picomatch from 2.3.1 to 2.3.2#18
dependabot[bot] wants to merge 25 commits into
masterfrom
dependabot/npm_and_yarn/picomatch-2.3.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Mar 25, 2026

Copy link
Copy Markdown

Bumps picomatch from 2.3.1 to 2.3.2.

Release notes

Sourced from picomatch's releases.

2.3.2

This is a security release fixing several security relevant issues.

What's Changed

Full Changelog: micromatch/picomatch@2.3.1...2.3.2

Changelog

Sourced from picomatch's changelog.

Release history

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog and this project adheres to Semantic Versioning.

  • Changelogs are for humans, not machines.
  • There should be an entry for every single version.
  • The same types of changes should be grouped.
  • Versions and sections should be linkable.
  • The latest version comes first.
  • The release date of each versions is displayed.
  • Mention whether you follow Semantic Versioning.

Changelog entries are classified using the following labels (from keep-a-changelog):

  • Added for new features.
  • Changed for changes in existing functionality.
  • Deprecated for soon-to-be removed features.
  • Removed for now removed features.
  • Fixed for any bug fixes.
  • Security in case of vulnerabilities.

4.0.0 (2024-02-07)

Fixes

Changed

3.0.1

Fixes

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

aadah and others added 25 commits March 20, 2025 03:37
- Move blog.ejs from views/main/ to views/blog/
- Create views/blog/ directory for better organization
- Update blog.js route to reference new template location

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
Create new blog-edit.js router with full CRUD operations:
- Draft management: save, publish, preview
- Published post management: save, tweak, reveal, hide, delete
- File system integration for manuscripts/blog/drafts/
- Database integration via publisher utilities
- Safe file operations with rollback mechanisms
- Dual-location post detection (drafts vs published)

Features:
- Live preview with iframe rendering
- Auto-save for draft posts only
- Keyboard shortcuts (Ctrl/Cmd+S) for drafts
- State-aware UI with conditional buttons
- Mobile-responsive editor with toggle views
- Integration with existing publisher.js utilities

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
- Mount blog-edit router at /blog/edit endpoint
- Update template path from views/main/blog to views/blog/blog
- Add blogEditRouter import and middleware integration
- Maintain existing blog functionality while adding editing capabilities

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
- Move bodyParser.urlencoded middleware before route definitions
- Ensure POST request body parsing works for blog editing forms
- Maintain existing puzzle route functionality

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
Implement comprehensive state management for blog editor:
- Monitor iframe preview for parsing errors via load events
- Automatically disable publish button when preview shows errors
- Add visual feedback (opacity, tooltip, cursor) for disabled state
- Block publish attempts with clear error messaging
- Handle cross-origin iframe access gracefully
- Ensure robust content validation before publishing

This prevents accidentally publishing posts with syntax errors
or other markup issues that would break the public blog display.

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
Replace duplicate newline-ending logic across all save operations
with a single ensureNewlineEnding() helper function:

- Consolidates 5 instances of identical logic into one function
- Improves maintainability and follows DRY principle
- Reduces code duplication while preserving functionality
- Ensures consistent behavior across all save operations
- Applied to: manual save, tweak, publish, auto-save, keyboard save

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
- Add grammars/new.txt with standard blog post structure
- Includes @title, @subtitle, @author metadata fields
- Provides starting content template for new posts

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
- Create views/blog/edit-new.ejs template for post creation
- Simple form with post ID input and create/cancel buttons
- Responsive design with consistent styling using CSS variables
- Auto-formatting of post ID input (lowercase, hyphens)
- Client-side validation and error handling
- Matches existing site design patterns

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
- Add GET /blog/edit/new route to display creation form
- Add POST /blog/edit/new route to handle post creation
- Validates post ID format (letters, numbers, hyphens, underscores)
- Checks for existing drafts and published posts to prevent duplicates
- Uses fs.copyFile to create new drafts from template
- Comprehensive error handling with specific error messages
- Integration with existing blog editing system

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
- Add POST /blog/edit/:postID/rename endpoint with safe file renaming logic
- Add rename button for draft mode posts in edit interface
- Include client-side validation and confirmation dialogs
- Redirect to renamed post ID after successful rename

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
- Extract all JavaScript handlers from edit-new.ejs and edit-post.ejs
- Create public/js/editor.js with top-level functions that accept parameters
- Update templates to use shared functions with EJS variables passed as arguments
- Maintain all existing functionality while eliminating code duplication

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
- Add DELETE endpoint for completely removing draft files at POST /blog/edit/:postId/draft/delete
- Add "Delete Draft" button to edit interface (draft posts only)
- Implement handleDeleteDraft() JavaScript handler with confirmation dialog
- Include proper error handling and user feedback with redirect to edit index

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
Bumps [picomatch](https://github.com/micromatch/picomatch) from 2.3.1 to 2.3.2.
- [Release notes](https://github.com/micromatch/picomatch/releases)
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md)
- [Commits](micromatch/picomatch@2.3.1...2.3.2)

---
updated-dependencies:
- dependency-name: picomatch
  dependency-version: 2.3.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 25, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant