Skip to content

Bump h3 from 1.15.5 to 1.15.11#365

Merged
jhroemer merged 1 commit intomainfrom
dependabot/npm_and_yarn/h3-1.15.11
Apr 18, 2026
Merged

Bump h3 from 1.15.5 to 1.15.11#365
jhroemer merged 1 commit intomainfrom
dependabot/npm_and_yarn/h3-1.15.11

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 18, 2026 •
edited
Loading

Bumps h3 from 1.15.5 to 1.15.11.

Release notes

Sourced from h3's releases.

v1.15.11

compare changes

🏡 Chore

v1.15.10

compare changes

🩹 Fixes

  • Preserve percent-encoded req.url in app event handler (#1355)

❤️ Contributors

v1.15.9

compare changes

🩹 Fixes

  • Preserve %25 in pathname (1103df6)
  • static: Prevent path traversal via double-encoded dot segments (%252e%252e) (c56683d)
  • sse: Sanitize carriage returns in event stream data and comments (ba3c3fe)

v1.15.8

compare changes

🩹 Fixes

  • Preserve %25 in pathname (1103df6)

v1.15.7

compare changes

🩹 Fixes

  • static: Narrow path traversal check to match .. as a path segment only (c049dc0)
  • app: Decode percent-encoded path segments to prevent auth bypass (313ea52)

💅 Refactors

  • Remove implicit event handler conversion warning (#1340)

❤️ Contributors

... (truncated)

Changelog

Sourced from h3's changelog.

v1.15.11

compare changes

🏡 Chore

❤️ Contributors

v1.15.10

compare changes

🩹 Fixes

  • Preserve percent-encoded req.url in app event handler (#1355)

🏡 Chore

❤️ Contributors

v1.15.9

compare changes

🩹 Fixes

  • Preserve %25 in pathname (1103df6)
  • static: Prevent path traversal via double-encoded dot segments (%252e%252e) (c56683d)
  • sse: Sanitize carriage returns in event stream data and comments (ba3c3fe)

🏡 Chore

❤️ Contributors

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 18, 2026
@github-actions
Copy link
Copy Markdown

github-actions Bot commented Apr 18, 2026 •
edited
Loading

⚠️ Duplicate Dependencies (found: 30, threshold: 1)

📦 Package 📋 Versions
semver
2 versions
  • jensroemer-astro@0.0.1
    • @astrojs/solid-js@5.1.3
      • vite-plugin-solid@2.11.10
        • @babel/core@7.28.5
          • @babel/helper-compilation-targets@7.27.2
            • semver@6.3.1

  • jensroemer-astro@0.0.1
    • astro@5.16.13
      • semver@7.7.3
lru-cache
2 versions
  • jensroemer-astro@0.0.1
    • astro@5.16.13
      • unstorage@1.17.4
        • lru-cache@11.2.4

  • jensroemer-astro@0.0.1
    • @astrojs/solid-js@5.1.3
      • vite-plugin-solid@2.11.10
        • @babel/core@7.28.5
          • @babel/helper-compilation-targets@7.27.2
            • lru-cache@5.1.1
@babel/helper-module-imports
2 versions
  • jensroemer-astro@0.0.1
    • @astrojs/solid-js@5.1.3
      • vite-plugin-solid@2.11.10
        • babel-preset-solid@1.9.10
          • babel-plugin-jsx-dom-expressions@0.40.3
            • @babel/helper-module-imports@7.18.6

  • jensroemer-astro@0.0.1
    • @astrojs/solid-js@5.1.3
      • vite-plugin-solid@2.11.10
        • @babel/core@7.28.5
          • @babel/helper-module-transforms@7.28.3
            • @babel/helper-module-imports@7.27.1
eslint-visitor-keys
3 versions
  • jensroemer-astro@0.0.1
    • eslint@9.39.2
      • @eslint-community/eslint-utils@4.9.1
        • eslint-visitor-keys@3.4.3

  • jensroemer-astro@0.0.1
    • eslint@9.39.2
      • @eslint/eslintrc@3.3.1
        • espree@10.4.0
          • eslint-visitor-keys@4.2.1

  • jensroemer-astro@0.0.1
    • eslint-plugin-astro@1.6.0
      • astro-eslint-parser@1.3.0
        • @typescript-eslint/scope-manager@8.57.2
          • @typescript-eslint/visitor-keys@8.57.2
            • eslint-visitor-keys@5.0.1
@humanwhocodes/retry
2 versions
  • jensroemer-astro@0.0.1
    • eslint@9.39.2
      • @humanfs/node@0.16.6
        • @humanwhocodes/retry@0.3.1

  • jensroemer-astro@0.0.1
    • eslint@9.39.2
      • @humanwhocodes/retry@0.4.2
estree-walker
2 versions
  • jensroemer-astro@0.0.1
    • astro@5.16.13
      • @rollup/pluginutils@5.3.0
        • estree-walker@2.0.2

  • jensroemer-astro@0.0.1
    • @astrojs/mdx@4.3.13
      • @mdx-js/mdx@3.1.1
        • estree-walker@3.0.3
tailwindcss
2 versions
  • jensroemer-astro@0.0.1
    • @tailwindcss/vite@4.1.18
      • @tailwindcss/node@4.1.18
        • tailwindcss@4.1.18

  • jensroemer-astro@0.0.1
    • tailwindcss@4.2.2
@types/unist
2 versions
  • jensroemer-astro@0.0.1
    • @astrojs/mdx@4.3.13
      • ...
        • mdast-util-mdx-jsx@3.2.0
          • parse-entities@4.0.2
            • @types/unist@2.0.11

  • jensroemer-astro@0.0.1
    • @astrojs/mdx@4.3.13
      • @astrojs/markdown-remark@6.3.10
        • hast-util-from-html@2.0.3
          • @types/hast@3.0.4
            • @types/unist@3.0.3
ignore
2 versions
  • jensroemer-astro@0.0.1
    • eslint@9.39.2
      • @eslint/eslintrc@3.3.1
        • ignore@5.3.2

  • jensroemer-astro@0.0.1
    • typescript-eslint@8.57.2
      • @typescript-eslint/eslint-plugin@8.57.2
        • ignore@7.0.5
balanced-match
2 versions
  • jensroemer-astro@0.0.1
    • eslint@9.39.2
      • @eslint/config-array@0.21.1
        • minimatch@3.1.2
          • brace-expansion@1.1.11
            • balanced-match@1.0.2

  • jensroemer-astro@0.0.1
    • typescript-eslint@8.57.2
      • ...
        • minimatch@10.2.4
          • brace-expansion@5.0.5
            • balanced-match@4.0.4
brace-expansion
2 versions
  • jensroemer-astro@0.0.1
    • eslint@9.39.2
      • @eslint/config-array@0.21.1
        • minimatch@3.1.2
          • brace-expansion@1.1.11

  • jensroemer-astro@0.0.1
    • typescript-eslint@8.57.2
      • ...
        • @typescript-eslint/typescript-estree@8.57.2
          • minimatch@10.2.4
            • brace-expansion@5.0.5
minimatch
2 versions
  • jensroemer-astro@0.0.1
    • typescript-eslint@8.57.2
      • @typescript-eslint/eslint-plugin@8.57.2
        • @typescript-eslint/type-utils@8.57.2
          • @typescript-eslint/typescript-estree@8.57.2
            • minimatch@10.2.4

  • jensroemer-astro@0.0.1
    • eslint@9.39.2
      • @eslint/config-array@0.21.1
        • minimatch@3.1.2
ansi-regex
2 versions
  • jensroemer-astro@0.0.1
    • astro@5.16.13
      • ...
        • string-width@4.2.3
          • strip-ansi@6.0.1
            • ansi-regex@5.0.1

  • jensroemer-astro@0.0.1
    • astro@5.16.13
      • boxen@8.0.1
        • string-width@7.2.0
          • strip-ansi@7.1.0
            • ansi-regex@6.1.0
emoji-regex
2 versions
  • jensroemer-astro@0.0.1
    • astro@5.16.13
      • boxen@8.0.1
        • string-width@7.2.0
          • emoji-regex@10.4.0

  • jensroemer-astro@0.0.1
    • astro@5.16.13
      • boxen@8.0.1
        • ansi-align@3.0.1
          • string-width@4.2.3
            • emoji-regex@8.0.0
string-width
2 versions
  • jensroemer-astro@0.0.1
    • astro@5.16.13
      • boxen@8.0.1
        • ansi-align@3.0.1
          • string-width@4.2.3

  • jensroemer-astro@0.0.1
    • astro@5.16.13
      • boxen@8.0.1
        • string-width@7.2.0
strip-ansi
2 versions
  • jensroemer-astro@0.0.1
    • astro@5.16.13
      • boxen@8.0.1
        • ansi-align@3.0.1
          • string-width@4.2.3
            • strip-ansi@6.0.1

  • jensroemer-astro@0.0.1
    • astro@5.16.13
      • boxen@8.0.1
        • string-width@7.2.0
          • strip-ansi@7.1.0
ansi-styles
2 versions
  • jensroemer-astro@0.0.1
    • eslint@9.39.2
      • chalk@4.1.2
        • ansi-styles@4.3.0

  • jensroemer-astro@0.0.1
    • astro@5.16.13
      • boxen@8.0.1
        • wrap-ansi@9.0.0
          • ansi-styles@6.2.1
picomatch
2 versions
  • jensroemer-astro@0.0.1
    • astro@5.16.13
      • unstorage@1.17.4
        • anymatch@3.1.3
          • picomatch@2.3.2

  • jensroemer-astro@0.0.1
    • @astrojs/solid-js@5.1.3
      • vite@6.4.2
        • picomatch@4.0.4
chalk
2 versions
  • jensroemer-astro@0.0.1
    • eslint@9.39.2
      • chalk@4.1.2

  • jensroemer-astro@0.0.1
    • astro@5.16.13
      • boxen@8.0.1
        • chalk@5.4.1
css-tree
2 versions
  • jensroemer-astro@0.0.1
    • astro@5.16.13
      • svgo@4.0.0
        • csso@5.0.5
          • css-tree@2.2.1

  • jensroemer-astro@0.0.1
    • astro@5.16.13
      • svgo@4.0.0
        • css-tree@3.1.0
mdn-data
2 versions
  • jensroemer-astro@0.0.1
    • astro@5.16.13
      • svgo@4.0.0
        • csso@5.0.5
          • css-tree@2.2.1
            • mdn-data@2.0.28

  • jensroemer-astro@0.0.1
    • astro@5.16.13
      • svgo@4.0.0
        • css-tree@3.1.0
          • mdn-data@2.12.2
entities
2 versions
  • jensroemer-astro@0.0.1
    • @astrojs/mdx@4.3.13
      • @astrojs/markdown-remark@6.3.10
        • hast-util-from-html@2.0.3
          • parse5@7.2.1
            • entities@4.5.0

  • jensroemer-astro@0.0.1
    • eslint-plugin-astro@1.6.0
      • astro-eslint-parser@1.3.0
        • entities@6.0.1
escape-string-regexp
2 versions
  • jensroemer-astro@0.0.1
    • eslint@9.39.2
      • escape-string-regexp@4.0.0

  • jensroemer-astro@0.0.1
    • @astrojs/mdx@4.3.13
      • ...
        • mdast-util-gfm-autolink-literal@2.0.1
          • mdast-util-find-and-replace@3.0.2
            • escape-string-regexp@5.0.0
globals
2 versions
  • jensroemer-astro@0.0.1
    • eslint@9.39.2
      • @eslint/eslintrc@3.3.1
        • globals@14.0.0

  • jensroemer-astro@0.0.1
    • eslint-plugin-astro@1.6.0
      • globals@16.5.0
glob-parent
2 versions
  • jensroemer-astro@0.0.1
    • eslint-plugin-astro@1.6.0
      • astro-eslint-parser@1.3.0
        • fast-glob@3.3.3
          • glob-parent@5.1.2

  • jensroemer-astro@0.0.1
    • eslint@9.39.2
      • glob-parent@6.0.2
fsevents
2 versions
  • jensroemer-astro@0.0.1
    • @astrojs/solid-js@5.1.3
      • vite@6.4.2
        • rollup@4.39.0
          • fsevents@2.3.2

  • jensroemer-astro@0.0.1
    • @astrojs/solid-js@5.1.3
      • vite@6.4.2
        • fsevents@2.3.3
property-information
2 versions
  • jensroemer-astro@0.0.1
    • @astrojs/mdx@4.3.13
      • ...
        • hast-util-raw@9.1.0
          • hast-util-to-parse5@8.0.0
            • property-information@6.5.0

  • jensroemer-astro@0.0.1
    • @astrojs/mdx@4.3.13
      • ...
        • hast-util-from-parse5@8.0.3
          • hastscript@9.0.1
            • property-information@7.0.0
nanoid
2 versions
  • jensroemer-astro@0.0.1
    • @astrojs/solid-js@5.1.3
      • vite@6.4.2
        • postcss@8.5.3
          • nanoid@3.3.11

  • jensroemer-astro@0.0.1
    • ts-generate-mock-data@0.0.2
      • nanoid@5.1.2
p-limit
2 versions
  • jensroemer-astro@0.0.1
    • eslint@9.39.2
      • find-up@5.0.0
        • locate-path@6.0.0
          • p-locate@5.0.0
            • p-limit@3.1.0

  • jensroemer-astro@0.0.1
    • astro@5.16.13
      • p-limit@6.2.0
yocto-queue
2 versions
  • jensroemer-astro@0.0.1
    • eslint@9.39.2
      • ...
        • p-locate@5.0.0
          • p-limit@3.1.0
            • yocto-queue@0.1.0

  • jensroemer-astro@0.0.1
    • astro@5.16.13
      • p-limit@6.2.0
        • yocto-queue@1.2.1

💡 To find out what depends on a specific package, run: npm ls example-package

@dependabot
Bump h3 from 1.15.5 to 1.15.11
f078d16 
Bumps [h3](https://github.com/h3js/h3) from 1.15.5 to 1.15.11.
- [Release notes](https://github.com/h3js/h3/releases)
- [Changelog](https://github.com/h3js/h3/blob/v1.15.11/CHANGELOG.md)
- [Commits](h3js/h3@v1.15.5...v1.15.11)

---
updated-dependencies:
- dependency-name: h3
  dependency-version: 1.15.11
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/h3-1.15.11 branch from 5e459e7 to f078d16 Compare April 18, 2026 19:24
@sonarqubecloud
Copy link
Copy Markdown

sonarqubecloud Bot commented Apr 18, 2026

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

@jhroemer jhroemer merged commit 03b0dfb into main Apr 18, 2026
4 checks passed
@jhroemer jhroemer deleted the dependabot/npm_and_yarn/h3-1.15.11 branch April 18, 2026 19:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@jhroemer