Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Apr 21, 2025

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
smol-toml 1.3.1 -> 1.3.3 age adoption passing confidence

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

squirrelchat/smol-toml (smol-toml)

v1.3.3

Compare Source

Follow up of v1.3.2, where the package is published in JavaScript instead of nocode. 🚀

image

v1.3.2

Compare Source

Fixes the issue reported in #​37 -- the library would fail to parse a document containing a one-line string, with an escaped double-quote, preceded by an escaped backslash, such as key = "value \\\" value".

Apologies for the lack of proper v1.3.1 tag; this release addressed GHSA-pqhp-25j4-6hq9 by adding a maximum depth while parsing.

Additionally, releases are now published to NPM with provenance attestations

What's Changed
  • fix: improve string end detection when preceded by an escaped backslash by @​cyyynthia
  • fix: enforce maximum depth when parsing/stringifying by @​cyyynthia

Full Changelog: squirrelchat/smol-toml@v1.3.0...v1.3.2


Configuration

📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the internal An internal refactor or improvement label Apr 21, 2025
@AlexWaygood AlexWaygood requested a review from MichaReiser April 21, 2025 15:36
@MichaReiser MichaReiser merged commit c458178 into main Apr 22, 2025
22 checks passed
@MichaReiser MichaReiser deleted the renovate/smol-toml-1.x-lockfile branch April 22, 2025 07:19
dcreager added a commit that referenced this pull request Apr 22, 2025
* main: (37 commits)
  [red-knot] Add list of failing/slow ecosystem projects (#17474)
  [red-knot] mypy_primer: extend ecosystem checks (#17544)
  [red-knot] Move `InstanceType` to its own submodule (#17525)
  [red-knot] mypy_primer: capture backtraces (#17543)
  [red-knot] mypy_primer: Use upstream repo (#17500)
  [red-knot] `typing.dataclass_transform` (#17445)
  Update dependency react-resizable-panels to v2.1.8 (#17513)
  Update dependency smol-toml to v1.3.3 (#17505)
  Update dependency uuid to v11.1.0 (#17517)
  Update actions/setup-node action to v4.4.0 (#17514)
  [red-knot] Fix variable name (#17532)
  [red-knot] Add basic subtyping between class literal and callable (#17469)
  [`pyupgrade`] Add fix safety section to docs (`UP030`) (#17443)
  [`perflint`] Allow list function calls to be replaced with a comprehension (`PERF401`) (#17519)
  Update pre-commit dependencies (#17506)
  [red-knot] Simplify visibility constraint handling for `*`-import definitions (#17486)
  [red-knot] Detect (some) invalid protocols (#17488)
  [red-knot] Correctly identify protocol classes (#17487)
  Update dependency ruff to v0.11.6 (#17516)
  Update Rust crate shellexpand to v3.1.1 (#17512)
  ...
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

internal An internal refactor or improvement

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants