Skip to content

[dependency](deps): Bump rollup from 4.56.0 to 4.59.0 in /electron-app#185

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/electron-app/rollup-4.59.0
Closed

[dependency](deps): Bump rollup from 4.56.0 to 4.59.0 in /electron-app#185
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/electron-app/rollup-4.59.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Feb 26, 2026

Bumps rollup from 4.56.0 to 4.59.0.

Release notes

Sourced from rollup's releases.

v4.59.0

4.59.0

2026-02-22

Features

  • Throw when the generated bundle contains paths that would leave the output directory (#6276)

Pull Requests

v4.58.0

4.58.0

2026-02-20

Features

  • Also support __NO_SIDE_EFFECTS__ annotation before variable declarations declaring function expressions (#6272)

Pull Requests

v4.57.1

4.57.1

2026-01-30

Bug Fixes

  • Fix heap corruption issue in Windows (#6251)
  • Ensure exports of a dynamic import are fully included when called from a try...catch (#6254)

Pull Requests

... (truncated)

Changelog

Sourced from rollup's changelog.

4.59.0

2026-02-22

Features

  • Throw when the generated bundle contains paths that would leave the output directory (#6276)

Pull Requests

4.58.0

2026-02-20

Features

  • Also support __NO_SIDE_EFFECTS__ annotation before variable declarations declaring function expressions (#6272)

Pull Requests

4.57.1

2026-01-30

Bug Fixes

  • Fix heap corruption issue in Windows (#6251)
  • Ensure exports of a dynamic import are fully included when called from a try...catch (#6254)

Pull Requests

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [rollup](https://github.com/rollup/rollup) from 4.56.0 to 4.59.0.
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.56.0...v4.59.0)

---
updated-dependencies:
- dependency-name: rollup
  dependency-version: 4.59.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot requested a review from Nick2bad4u as a code owner February 26, 2026 02:15
@dependabot dependabot bot added dependabot Dependabot Pull Requests dependencies Pull requests that update a dependency file npm npm updates labels Feb 26, 2026
@Nick2bad4u
Copy link
Copy Markdown
Owner

Nick2bad4u commented Feb 26, 2026

Snyk checks have passed. No issues have been found so far.

Status Scanner Critical High Medium Low Total (0)
Open Source Security 0 0 0 0 0 issues
Code Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@github-actions
Copy link
Copy Markdown
Contributor

Summary of GitHub Pull Request: dependency: Bump rollup from 4.56.0 to 4.59.0 in /electron-app

Description:

This pull request upgrades the rollup dependency in the /electron-app from version 4.56.0 to 4.59.0. The update introduces new features, bug fixes, and minor improvements as documented in rollup's release notes and changelog.

Key Changes:

  1. Version 4.59.0:

    • New Feature: Added validation to prevent generated bundles from producing paths that leave the designated output directory (#6276).
    • Pull request related to this feature: #6275.
  2. Version 4.58.0:

@codecov
Copy link
Copy Markdown

codecov bot commented Feb 26, 2026

❌ 8 Tests Failed:

Tests completed Failed Passed Skipped
4489 8 4481 1
View the top 3 failed test(s) by shortest run time
tests/unit/utils/state/core/stateMiddleware.comprehensive.test.ts > StateMiddlewareManager - comprehensive coverage > persistence middleware saves specific paths to localStorage (happy and error paths)
Stack Traces | 0.00468s run time
AssertionError: expected "setItem" to be called at least once
 ❯ .../state/core/stateMiddleware.comprehensive.test.ts:263:28
tests/unit/utils/ui/controls/createPowerZoneControlsSimple.test.ts > createPowerZoneControlsSimple > initializes in collapsed state when stored preference exists
Stack Traces | 0.01s run time
AssertionError: expected '0' to be '0px' // Object.is equality

Expected: "0px"
Received: "0"

 ❯ .../ui/controls/createPowerZoneControlsSimple.test.ts:96:42
tests/strictTests/createChartStatusIndicatorFromCounts.test.ts > createChartStatusIndicatorFromCounts > Button Interactions > should remove outline after timeout
Stack Traces | 0.0276s run time
AssertionError: expected '0' to be '0px' // Object.is equality

Expected: "0px"
Received: "0"

 ❯ tests/strictTests/createChartStatusIndicatorFromCounts.test.ts:461:55
tests/unit/utils/charts/components/createChartStatusIndicator.test.ts > createChartStatusIndicator > click scrolls to fields section and briefly highlights it
Stack Traces | 0.0286s run time
AssertionError: expected '0' to be '0px' // Object.is equality

Expected: "0px"
Received: "0"

 ❯ .../charts/components/createChartStatusIndicator.test.ts:149:44
tests/unit/utils/ui/controls/createPowerZoneControlsSimple.test.ts > createPowerZoneControlsSimple > creates controls section with collapse toggle and persists state
Stack Traces | 0.0505s run time
AssertionError: expected '0' to be '0px' // Object.is equality

Expected: "0px"
Received: "0"

 ❯ .../ui/controls/createPowerZoneControlsSimple.test.ts:57:42
tests/unit/utils/ui/controls/createHRZoneControls.additional.test.ts > createHRZoneControls additional coverage > honors persisted collapse state and updates hover styles
Stack Traces | 0.0554s run time
AssertionError: expected '0' to be '0px' // Object.is equality

Expected: "0px"
Received: "0"

 ❯ .../ui/controls/createHRZoneControls.additional.test.ts:67:41
tests/strictTests/ui/controls/createPowerZoneControls.test.ts > createPowerZoneControls > creates section and toggles collapse state
Stack Traces | 0.416s run time
AssertionError: expected '0' to be '0px' // Object.is equality

Expected: "0px"
Received: "0"

 ❯ .../ui/controls/createPowerZoneControls.test.ts:26:41
tests/strictTests/ui/controls/createHRZoneControls.test.ts > createHRZoneControls > creates section and toggles collapse state
Stack Traces | 0.99s run time
AssertionError: expected '0' to be '0px' // Object.is equality

Expected: "0px"
Received: "0"

 ❯ .../ui/controls/createHRZoneControls.test.ts:28:41

To view more test analytics, go to the Test Analytics Dashboard
📋 Got 3 mins? Take this short survey to help us improve Test Analytics.

@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Feb 26, 2026

⚠️MegaLinter analysis: Success with warnings

Descriptor Linter Files Fixed Errors Warnings Elapsed time
✅ ACTION actionlint 42 0 0 1.04s
⚠️ BASH bash-exec 1 1 0 0.01s
✅ BASH shellcheck 1 0 0 0.05s
⚠️ BASH shfmt 1 1 0 0.01s
✅ COPYPASTE jscpd yes no no 51.63s
⚠️ CSS stylelint 9 306 0 17.85s
⚠️ HTML djlint 2 2 0 1.73s
✅ HTML htmlhint 2 0 0 0.62s
⚠️ JAVASCRIPT prettier 348 348 0 119.43s
⚠️ JSON jsonlint 28 2 0 5.15s
⚠️ JSON npm-package-json-lint yes 1 no 0.69s
⚠️ JSON prettier 28 23 0 10.29s
⚠️ JSON v8r 28 1 0 60.8s
⚠️ MARKDOWN markdownlint 37 8 0 22.34s
✅ MARKDOWN markdown-table-formatter 29 0 0 7.07s
⚠️ POWERSHELL powershell 5 2 0 7.6s
✅ POWERSHELL powershell_formatter 5 0 0 5.41s
✅ REPOSITORY checkov yes no no 55.12s
⚠️ REPOSITORY devskim yes no 1 9.06s
✅ REPOSITORY dustilock yes no no 4.21s
✅ REPOSITORY gitleaks yes no no 7.79s
✅ REPOSITORY git_diff yes no no 0.35s
⚠️ REPOSITORY grype yes 2 50 87.44s
⚠️ REPOSITORY kics yes 1 1 7.09s
✅ REPOSITORY kingfisher yes no no 7.98s
⚠️ REPOSITORY secretlint yes 3 no 21.76s
✅ REPOSITORY syft yes no no 28.47s
⚠️ REPOSITORY trivy yes 6 14 14.63s
✅ REPOSITORY trivy-sbom yes no no 6.32s
✅ REPOSITORY trufflehog yes no no 14.84s
⚠️ SPELL cspell 824 2975 0 1561.09s
⚠️ SPELL lychee 122 6 0 138.28s
⚠️ TYPESCRIPT ts-standard 311 311 0 125.34s
✅ XML xmllint 1 0 0 1.5s
⚠️ YAML prettier 54 52 104 21.29s
✅ YAML v8r 54 0 0 126.72s
⚠️ YAML yamllint 54 177 0 13.17s

Detailed Issues

⚠️ BASH / bash-exec - 1 error
Results of bash-exec linter (version 5.3.3)
See documentation on https://megalinter.io/9.3.0/descriptors/bash_bash_exec/
-----------------------------------------------

❌ [ERROR] .github/hooks/scripts/log-prompt.sh
    Error: File:[.github/hooks/scripts/log-prompt.sh] is not executable
⚠️ SPELL / cspell - 2975 errors
Results of cspell linter (version 9.4.0)
See documentation on https://megalinter.io/9.3.0/descriptors/spell_cspell/
-----------------------------------------------

✅ [SUCCESS] .checkov.yml
✅ [SUCCESS] .devskim.json
✅ [SUCCESS] .djlintrc
✅ [SUCCESS] .git/FETCH_HEAD
✅ [SUCCESS] .git/HEAD
❌ [ERROR] .git/config
    .git/config:11:13     - Unknown word (gitdir)     -- [includeIf "gitdir:/home/runner/work/FitFileView
    	 Suggestions: [gitdm, gilder, girder, gitter, giddier]
    .git/config:13:13     - Unknown word (gitdir)     -- [includeIf "gitdir:/home/runner/work/FitFileView
    	 Suggestions: [gitdm, gilder, girder, gitter, giddier]
    .git/config:13:71     - Unknown word (worktrees)  -- FileViewer/FitFileViewer/.git/worktrees/*"]
    	 Suggestions: [workers, worker's, workarea, workArea, worries]
    .git/config:15:13     - Unknown word (gitdir)     -- [includeIf "gitdir:.git
    	 Suggestions: [gitdm, gilder, girder, gitter, giddier]
    .git/config:17:13     - Unknown word (gitdir)     -- [includeIf "gitdir:.git
    	 Suggestions: [gitdm, gilder, girder, gitter, giddier]
    .git/config:17:43     - Unknown word (worktrees)  -- .git/worktrees/*"]
    	 Suggestions: [workers, worker's, workarea, workArea, worries]
    CSpell: Files checked: 1, Issues found: 6 in 1 file.

✅ [SUCCESS] .git/description
✅ [SUCCESS] .git/index
✅ [SUCCESS] .git/info/exclude
✅ [SUCCESS] .git/logs/HEAD
✅ [SUCCESS] .git/logs/refs/remotes/pull/185/merge
✅ [SUCCESS] .git/refs/remotes/pull/185/merge
✅ [SUCCESS] .git/shallow
❌ [ERROR] .github/.spellcheck.yml
    .github/.spellcheck.yml:6:11      - Unknown word (wordlists)  -- wordlists:
    	 Suggestions: [wordless, wordiest, worldliest, worsts, wrists]
    .github/.spellcheck.yml:7:18      - Unknown word (wordlist)   -- - .wordlist.txt
    	 Suggestions: [wordiest, wordless, worldliest, worlds, wordily]
    .github/.spellcheck.yml:10:17     - Unkn

(Truncated to 1904 characters out of 582034)
⚠️ REPOSITORY / devskim - 1 warning
[02:19:10 ERR] Failed to parse Data at the root level is invalid. Line 1, position 1. as a XML document: null
.devskim.json:41:46:41:55 [ManualReview] DS162092 Do not leave debug code in production
.devskim.json:47:66:47:75 [ManualReview] DS162092 Do not leave debug code in production
.devskim.json:53:61:53:70 [ManualReview] DS162092 Do not leave debug code in production
.devskim.json:59:61:59:70 [ManualReview] DS162092 Do not leave debug code in production
[02:19:11 ERR] Failed to parse Data at the root level is invalid. Line 1, position 1. as a XML document: null
[02:19:11 ERR] Failed to parse Data at the root level is invalid. Line 1, position 1. as a XML document: null
[02:19:11 ERR] Failed to parse Data at the root level is invalid. Line 1, position 1. as a XML document: null
electron-app/tests/strictTests/files/export/gpxExport.test.ts:49:27:49:48 [Moderate] DS137138 Insecure URL
electron-app/utils.js:545:0:546:49 [ManualReview] DS172411 Review setTimeout for untrusted data
electron-app/main-ui.js:285:12:295:65 [ManualReview] DS172411 Review setTimeout for untrusted data
electron-app/tests/unit/main.final-coverage.test.ts:225:20:227:68 [ManualReview] DS172411 Review setTimeout for untrusted data
electron-app/tests/unit/main.final-coverage.test.ts:232:16:232:55 [ManualReview] DS172411 Review setTimeout for untrusted data
electron-app/tests/unit/main.final-coverage.test.ts:237:12:239:21 [ManualReview] DS172411 Review setTimeout for untrusted data
electron-app/tests/unit/main.final-coverage.test.ts:785:20:786:67 [ManualReview] DS172411 Review setTimeout for untrusted data
electron-app/tests/unit/main.complete-coverage.test.ts:353:49:353:58 [ManualReview] DS162092 Do not leave debug code in production
electron-app/tests/unit/main.complete-coverage.test.ts:527:49:527:58 [ManualReview] DS162092 Do not leave debug code in production
[02:19:11 ERR] Failed to parse Data at t

(Truncated to 1904 characters out of 32627)
⚠️ HTML / djlint - 2 errors
Results of djlint linter (version 1.36.4)
See documentation on https://megalinter.io/9.3.0/descriptors/html_djlint/
-----------------------------------------------

❌ [ERROR] electron-app/ffv/index.html
    
    
    Linting 0/1 files ┈┈┈┈┈┈┈┈┈┈ 00:00    
                                          
    
    Linting 1/1 files ━━━━━━━━━━ 00:00    
    Linting 1/1 files ━━━━━━━━━━ 00:00    
    
    
    electron-app/ffv/index.html
    ───────────────────────────────────────────────────────────────────────────────
    H031 2:0 Consider adding meta keywords. <html lang="en"> 
    H037 7:41 Duplicate attribute found. initial-scale
    
    Linted 1 file, found 2 errors.

✅ [SUCCESS] electron-app/index.html
⚠️ REPOSITORY / grype - 2 errors
warning: A medium vulnerability in npm package: ajv, version 6.12.6 was found at: /docusaurus/package-lock.json

warning: A medium vulnerability in npm package: ajv, version 8.17.1 was found at: /docusaurus/package-lock.json

warning: A medium vulnerability in npm package: ajv, version 8.17.1 was found at: /electron-app/package-lock.json

error: A high vulnerability in npm package: minimatch, version 3.1.2 was found at: /docusaurus/package-lock.json

error: A high vulnerability in npm package: minimatch, version 9.0.5 was found at: /docusaurus/package-lock.json

warning: A medium vulnerability in npm package: lodash, version 4.17.21 was found at: /electron-app/package-lock.json

warning: A medium vulnerability in npm package: lodash, version 4.17.21 was found at: /docusaurus/package-lock.json

warning: A medium vulnerability in npm package: lodash-es, version 4.17.21 was found at: /docusaurus/package-lock.json

warning: A medium vulnerability in github-action package: step-security/harden-runner, version v2.14.1 was found at: /.github/workflows/rebase.yml

warning: A medium vulnerability in github-action package: step-security/harden-runner, version v2.14.1 was found at: /.github/workflows/scorecards.yml

warning: A medium vulnerability in github-action package: step-security/harden-runner, version v2.14.1 was found at: /.github/workflows/codeql.yml

warning: A medium vulnerability in github-action package: step-security/harden-runner, version v2.14.1 was found at: /.github/workflows/dependency-review.yml

warning: A medium vulnerability in github-action package: step-security/harden-runner, version v2.14.1 was found at: /.github/workflows/devskim.yml

warning: A medium vulnerability in github-action package: step-security/harden-runner, version v2.14.1 was found at: /.github/workflows/electronegativity.yml

warning: A medium vulnerability in github-action package: step-s

(Truncated to 1904 characters out of 7556)
⚠️ JSON / jsonlint - 2 errors
Results of jsonlint linter (version 16.0.0)
See documentation on https://megalinter.io/9.3.0/descriptors/json_jsonlint/
-----------------------------------------------

✅ [SUCCESS] .devskim.json
✅ [SUCCESS] .github/hooks/hooks.json
✅ [SUCCESS] .jscpd.json
✅ [SUCCESS] .markdown-link-check.json
✅ [SUCCESS] .markdownlint.json
✅ [SUCCESS] .ncurc.json
✅ [SUCCESS] .prettierrc.json
✅ [SUCCESS] .vscode/extensions.json
✅ [SUCCESS] .vscode/launch.json
✅ [SUCCESS] .vscode/settings.json
✅ [SUCCESS] .vscode/tasks.json
✅ [SUCCESS] cspell.json
✅ [SUCCESS] docusaurus/package-lock.json
✅ [SUCCESS] docusaurus/package.json
✅ [SUCCESS] docusaurus/tsconfig.json
✅ [SUCCESS] docusaurus/typedoc.json
✅ [SUCCESS] docusaurus/typedoc.local.json
✅ [SUCCESS] electron-app/.markdown-link-check.json
✅ [SUCCESS] electron-app/.markdownlint.json
✅ [SUCCESS] electron-app/.npmpackagejsonlintrc.json
✅ [SUCCESS] electron-app/.vscode/tasks.json
✅ [SUCCESS] electron-app/ffv/manifest.json
✅ [SUCCESS] electron-app/package-lock.json
✅ [SUCCESS] electron-app/package.json
❌ [ERROR] electron-app/tsconfig.json
    File: electron-app/tsconfig.json
    Parse error on line 57, column 9:
    ...ck": false,        // We use extensive ...
    ----------------------^
    Unexpected token "/"

❌ [ERROR] electron-app/tsconfig.vitest.json
    File: electron-app/tsconfig.vitest.json
    Parse error on line 4, column 9:
    ...Options": {        // Vitest's typechec...
    ----------------------^
    Unexpected token "/"

✅ [SUCCESS] mermaid.config.json
✅ [SUCCESS] package.json
⚠️ REPOSITORY / kics - 1 error
warning: Action is not pinned to a full length commit SHA.
   ┌─ .github/workflows/vitest.yml:92:1
   │
92 │               uses: codecov/test-results-action@v1
   │ ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
   │
   = Unpinned Actions Full Length Commit SHA
   = Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps mitigate the risk of a bad actor adding a backdoor to the action's repository, as they would need to generate a SHA-1 collision for a valid Git object payload. When selecting a SHA, you should verify it is from the action's repository and not a repository fork.

warning: 1 warnings emitted
⚠️ SPELL / lychee - 6 errors
Results of lychee linter (version 0.18.0)
See documentation on https://megalinter.io/9.3.0/descriptors/spell_lychee/
-----------------------------------------------

✅ [SUCCESS] .checkov.yml
✅ [SUCCESS] .devskim.json
✅ [SUCCESS] .github/.spellcheck.yml
✅ [SUCCESS] .github/CHANGELOG.md
✅ [SUCCESS] .github/ISSUE_TEMPLATE/bug_report.md
✅ [SUCCESS] .github/ISSUE_TEMPLATE/custom-issue.md
✅ [SUCCESS] .github/ISSUE_TEMPLATE/feature_request.md
✅ [SUCCESS] .github/PROMPTS/Consistency-Check.prompt.md
✅ [SUCCESS] .github/PROMPTS/Continue.prompt.md
✅ [SUCCESS] .github/PROMPTS/Do-ToDo.prompt.md
✅ [SUCCESS] .github/PROMPTS/Fix-Eslint-Errors.prompt.md
❌ [ERROR] .github/PROMPTS/Generate-100%-Test-Coverage.prompt.md
    [200] https://vitest.dev/api/assert.html
    [200] https://vitest.dev/api/
    [200] https://vitest.dev/guide/test-context.html
    [200] https://vitest.dev/guide/snapshot.html
    [200] https://vitest.dev/guide/mocking.html
    [ERROR] https://vitest.dev/guide/testing-types.html | Network error: error sending request for url (https://vitest.dev/guide/testing-types.html) Maybe a certificate error?
    [200] https://vitest.dev/config/#benchmark
    
    📝 Summary
    ---------------------
    🔍 Total............7
    ✅ Successful.......6
    ⏳ Timeouts.........0
    🔀 Redirected.......0
    👻 Excluded.........0
    ❓ Unknown..........0
    🚫 Errors...........1
    
    Errors in .github/PROMPTS/Generate-100%-Test-Coverage.prompt.md
    [ERROR] https://vitest.dev/guide/testing-types.html | Network error: error sending request for url (https://vitest.dev/guide/testing-types.html) Maybe a certificate error?

✅ [SUCCESS] .github/PROMPTS/Review.prompt.md
✅ [SUCCESS] .github/PULL_REQUEST_TEMPLATE/README.md
✅ [SUCCESS] .github/PULL_REQUEST_TEMPLATE/bugfix.md
✅ [SUCCESS] .github/PULL_REQUEST_TEMPLATE/documentation.md
✅ [SUCCESS] .github/PULL_REQUEST_TEMPLATE/feature.md
✅ [SUCCESS] 

(Truncated to 1904 characters out of 297499)
⚠️ MARKDOWN / markdownlint - 8 errors
Results of markdownlint linter (version 0.47.0)
See documentation on https://megalinter.io/9.3.0/descriptors/markdown_markdownlint/
-----------------------------------------------

✅ [SUCCESS] .github/CHANGELOG.md
✅ [SUCCESS] .github/ISSUE_TEMPLATE/bug_report.md
✅ [SUCCESS] .github/ISSUE_TEMPLATE/custom-issue.md
✅ [SUCCESS] .github/ISSUE_TEMPLATE/feature_request.md
✅ [SUCCESS] .github/PROMPTS/Consistency-Check.prompt.md
✅ [SUCCESS] .github/PROMPTS/Continue.prompt.md
❌ [ERROR] .github/PROMPTS/Do-ToDo.prompt.md
    .github/PROMPTS/Do-ToDo.prompt.md:21:124 error MD026/no-trailing-punctuation Trailing punctuation in heading [Punctuation: '.']

✅ [SUCCESS] .github/PROMPTS/Fix-Eslint-Errors.prompt.md
❌ [ERROR] .github/PROMPTS/Generate-100%-Test-Coverage.prompt.md
    .github/PROMPTS/Generate-100%-Test-Coverage.prompt.md:53:1 error MD029/ol-prefix Ordered list item prefix [Expected: 1; Actual: 6; Style: 1/2/3]
    .github/PROMPTS/Generate-100%-Test-Coverage.prompt.md:54:1 error MD029/ol-prefix Ordered list item prefix [Expected: 2; Actual: 7; Style: 1/2/3]
    .github/PROMPTS/Generate-100%-Test-Coverage.prompt.md:100:32 error MD026/no-trailing-punctuation Trailing punctuation in heading [Punctuation: ':']

✅ [SUCCESS] .github/PROMPTS/Review.prompt.md
✅ [SUCCESS] .github/PULL_REQUEST_TEMPLATE/README.md
✅ [SUCCESS] .github/PULL_REQUEST_TEMPLATE/bugfix.md
✅ [SUCCESS] .github/PULL_REQUEST_TEMPLATE/documentation.md
✅ [SUCCESS] .github/PULL_REQUEST_TEMPLATE/feature.md
✅ [SUCCESS] .github/PULL_REQUEST_TEMPLATE/maintenance.md
✅ [SUCCESS] .github/PULL_REQUEST_TEMPLATE/pull_request_template.md
✅ [SUCCESS] .github/PULL_REQUEST_TEMPLATE/quick-fix.md
✅ [SUCCESS] .github/agents/BeastMode.agent.md
✅ [SUCCESS] .github/copilot-commit-message-instructions.md
✅ [SUCCESS] .github/copilot-instructions.md
✅ [SUCCESS] CHANGELOG.md
✅ [SUCCESS] CODE_OF_CONDUCT.md
✅ [SUCCESS] CONTRIBUTING.md
✅ [SUCCESS] 

(Truncated to 1904 characters out of 3183)
⚠️ JSON / npm-package-json-lint - 1 error
./package.json
✖ require-version - node: version - version is required
1 error
⚠️ POWERSHELL / powershell - 2 errors
Results of powershell linter (version 7.5.4)
See documentation on https://megalinter.io/9.3.0/descriptors/powershell_powershell/
-----------------------------------------------

✅ [SUCCESS] .github/CleanReleases.ps1
✅ [SUCCESS] .github/RepoSize.ps1
✅ [SUCCESS] .github/Update-ChangeLogs.ps1
❌ [ERROR] .github/hooks/scripts/log-prompt.ps1
    
    Severity    RuleName                         ScriptName     Line Message
    --------    --------                         ----------     ---- -------
    Warning     PSUseBOMForUnicodeEncodedFile    log-prompt.ps1      Missing BOM encoding for non-ASCII encoded file 'log-prompt.ps1'
    Information PSAvoidUsingPositionalParameters log-prompt.ps1   17 Cmdlet 'Join-Path' has positional parameter. Please use named parameters instead of p
                                                                     ositional parameters when calling a command.

✅ [SUCCESS] .github/hooks/scripts/remove-temp.ps1
⚠️ JAVASCRIPT / prettier - 348 errors
Results of prettier linter (version 3.7.4)
See documentation on https://megalinter.io/9.3.0/descriptors/javascript_prettier/
-----------------------------------------------

❌ [ERROR] electron-app/__mocks__/electron.js
    Checking formatting...
    [error] Cannot find package 'prettier-plugin-packagejson' imported from noop.js

❌ [ERROR] electron-app/ffv/assets/Results-H2VOSWW7.js
    Checking formatting...
    [error] Cannot find package 'prettier-plugin-packagejson' imported from noop.js

❌ [ERROR] electron-app/ffv/assets/Sprite-BZ4Kwmf3.js
    Checking formatting...
    [error] Cannot find package 'prettier-plugin-packagejson' imported from noop.js

❌ [ERROR] electron-app/ffv/assets/binaryString-DLpsQS3c.js
    Checking formatting...
    [error] Cannot find package 'prettier-plugin-packagejson' imported from noop.js

❌ [ERROR] electron-app/ffv/assets/findFields-C7eiFatx.js
    Checking formatting...
    [error] Cannot find package 'prettier-plugin-packagejson' imported from noop.js

❌ [ERROR] electron-app/ffv/assets/getMessagesForName-CXPND5Gu.js
    Checking formatting...
    [error] Cannot find package 'prettier-plugin-packagejson' imported from noop.js

❌ [ERROR] electron-app/ffv/assets/index-B6xcXKpx.js
    Checking formatting...
    [error] Cannot find package 'prettier-plugin-packagejson' imported from noop.js

❌ [ERROR] electron-app/ffv/assets/index-C1xoUegX.js
    Checking formatting...
    [error] Cannot find package 'prettier-plugin-packagejson' imported from noop.js

❌ [ERROR] electron-app/ffv/assets/index-CQWboq_8.js
    Checking formatting...
    [error] Cannot find package 'prettier-plugin-packagejson' imported from noop.js

❌ [ERROR] electron-app/ffv/assets/index-D4CCfpM1.js
    Checking formatting...
    [error] Cannot find package 'prettier-plugin-packagejson' imported from noop.js

❌ [ERROR] electron-app/ffv/assets/index-LvWRIhnC.js
    Checking form

(Truncated to 1904 characters out of 60113)
⚠️ JSON / prettier - 23 errors
Results of prettier linter (version 3.7.4)
See documentation on https://megalinter.io/9.3.0/descriptors/json_prettier/
-----------------------------------------------

❌ [ERROR] .devskim.json
    Checking formatting...
    [warn] .devskim.json
    [warn] Code style issues found in the above file. Run Prettier with --write to fix.

❌ [ERROR] .github/hooks/hooks.json
    Checking formatting...
    [warn] .github/hooks/hooks.json
    [warn] Code style issues found in the above file. Run Prettier with --write to fix.

❌ [ERROR] .jscpd.json
    Checking formatting...
    [warn] .jscpd.json
    [warn] Code style issues found in the above file. Run Prettier with --write to fix.

❌ [ERROR] .markdown-link-check.json
    Checking formatting...
    [warn] .markdown-link-check.json
    [warn] Code style issues found in the above file. Run Prettier with --write to fix.

❌ [ERROR] .markdownlint.json
    Checking formatting...
    [warn] .markdownlint.json
    [warn] Code style issues found in the above file. Run Prettier with --write to fix.

❌ [ERROR] .ncurc.json
    Checking formatting...
    [warn] .ncurc.json
    [warn] Code style issues found in the above file. Run Prettier with --write to fix.

❌ [ERROR] .prettierrc.json
    Checking formatting...
    [warn] .prettierrc.json
    [warn] Code style issues found in the above file. Run Prettier with --write to fix.

❌ [ERROR] .vscode/extensions.json
    Checking formatting...
    [warn] .vscode/extensions.json
    [warn] Code style issues found in the above file. Run Prettier with --write to fix.

❌ [ERROR] .vscode/launch.json
    Checking formatting...
    [warn] .vscode/launch.json
    [warn] Code style issues found in the above file. Run Prettier with --write to fix.

❌ [ERROR] .vscode/settings.json
    Checking formatting...
    [warn] .vscode/settings.json
    [warn] Code style issues found in the above file. Run Prettier with -

(Truncated to 1904 characters out of 4614)
⚠️ YAML / prettier - 52 errors
Results of prettier linter (version 3.7.4)
See documentation on https://megalinter.io/9.3.0/descriptors/yaml_prettier/
-----------------------------------------------

❌ [ERROR] .checkov.yml
    Checking formatting...
    [warn] .checkov.yml
    [warn] Code style issues found in the above file. Run Prettier with --write to fix.

❌ [ERROR] .github/.spellcheck.yml
    Checking formatting...
    [warn] .github/.spellcheck.yml
    [warn] Code style issues found in the above file. Run Prettier with --write to fix.

❌ [ERROR] .github/dependabot.yml
    Checking formatting...
    [warn] .github/dependabot.yml
    [warn] Code style issues found in the above file. Run Prettier with --write to fix.

❌ [ERROR] .github/workflows/ActionLint.yml
    Checking formatting...
    [warn] .github/workflows/ActionLint.yml
    [warn] Code style issues found in the above file. Run Prettier with --write to fix.

❌ [ERROR] .github/workflows/Build.yml
    Checking formatting...
    [warn] .github/workflows/Build.yml
    [warn] Code style issues found in the above file. Run Prettier with --write to fix.

❌ [ERROR] .github/workflows/VirusTotal.yml
    Checking formatting...
    [warn] .github/workflows/VirusTotal.yml
    [warn] Code style issues found in the above file. Run Prettier with --write to fix.

❌ [ERROR] .github/workflows/build-win7.yml
    Checking formatting...
    [warn] .github/workflows/build-win7.yml
    [warn] Code style issues found in the above file. Run Prettier with --write to fix.

❌ [ERROR] .github/workflows/cleanReleases.yml
    Checking formatting...
    [warn] .github/workflows/cleanReleases.yml
    [warn] Code style issues found in the above file. Run Prettier with --write to fix.

❌ [ERROR] .github/workflows/codeql.yml
    Checking formatting...
    [warn] .github/workflows/codeql.yml
    [warn] Code style issues found in the above file. Run Prettier with --write to fix.


(Truncated to 1904 characters out of 10613)
⚠️ REPOSITORY / secretlint - 3 errors
error: found basic auth credential: *****************************
    ┌─ electron-app/tests/unit/main/ipc/registerExternalHandlers.test.js:201:47
    │
201 │                 shellOpenExternalHandler({}, "https://user:pass@example.com")
    │                                               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
    │
    = secretlint rule(@secretlint/secretlint-rule-preset-recommend > @secretlint/secretlint-rule-basicauth) error

error: found basic auth credential: *****************************
   ┌─ electron-app/tests/unit/main/security/externalUrlPolicy.test.ts:25:34
   │
25 │             validateExternalUrl("https://user:pass@example.com")
   │                                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
   │
   = secretlint rule(@secretlint/secretlint-rule-preset-recommend > @secretlint/secretlint-rule-basicauth) error

error: found basic auth credential: *****************************
   ┌─ electron-app/tests/unit/main/updater/setupAutoUpdater.test.ts:78:23
   │
78 │             feedURL: "https://user:pass@example.com/releases",
   │                       ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
   │
   = secretlint rule(@secretlint/secretlint-rule-preset-recommend > @secretlint/secretlint-rule-basicauth) error

error: 3 errors emitted
⚠️ BASH / shfmt - 1 error
Results of shfmt linter (version 3.12.0)
See documentation on https://megalinter.io/9.3.0/descriptors/bash_shfmt/
-----------------------------------------------

❌ [ERROR] .github/hooks/scripts/log-prompt.sh
    diff .github/hooks/scripts/log-prompt.sh.orig .github/hooks/scripts/log-prompt.sh
    --- .github/hooks/scripts/log-prompt.sh.orig
    +++ .github/hooks/scripts/log-prompt.sh
    @@ -13,9 +13,9 @@
     chmod 700 "$LOG_DIR"
     
     jq -n \
    -    --arg ts "$TIMESTAMP_MS" \
    -    --arg cwd "$CWD" \
    -    '{event:"userPromptSubmitted", timestampMs:$ts, cwd:$cwd}' \
    -    >> "$LOG_DIR/audit.jsonl"
    +	--arg ts "$TIMESTAMP_MS" \
    +	--arg cwd "$CWD" \
    +	'{event:"userPromptSubmitted", timestampMs:$ts, cwd:$cwd}' \
    +	>>"$LOG_DIR/audit.jsonl"
     
     exit 0
⚠️ CSS / stylelint - 306 errors
Results of stylelint linter (version 16.26.1)
See documentation on https://megalinter.io/9.3.0/descriptors/css_stylelint/
-----------------------------------------------

❌ [ERROR] docusaurus/src/components/GitHubStats/styles.module.css
    (node:6780) [MODULE_TYPELESS_PACKAGE_JSON] Warning: Module type of file://stylelint.config.js is not specified and it doesn't parse as CommonJS.
    Reparsing as ES module because module syntax was detected. This incurs a performance overhead.
    To eliminate this warning, add "type": "module" to package.json.
    (Use `node --trace-warnings ...` to show where the warning was created)
    
    docusaurus/src/components/GitHubStats/styles.module.css
       1:1  ✖  Expected class selector ".githubStats" to be kebab-case  selector-class-pattern
       8:1  ✖  Expected class selector ".statBadge" to be kebab-case    selector-class-pattern
      22:1  ✖  Expected class selector ".statBadge" to be kebab-case    selector-class-pattern
    
    ✖ 3 problems (3 errors, 0 warnings)

❌ [ERROR] docusaurus/src/components/HomepageFeatures/styles.module.css
    (node:6809) [MODULE_TYPELESS_PACKAGE_JSON] Warning: Module type of file://stylelint.config.js is not specified and it doesn't parse as CommonJS.
    Reparsing as ES module because module syntax was detected. This incurs a performance overhead.
    To eliminate this warning, add "type": "module" to package.json.
    (Use `node --trace-warnings ...` to show where the warning was created)
    
    docusaurus/src/components/HomepageFeatures/styles.module.css
       6:1  ✖  Expected class selector ".featuresTitle" to be kebab-case       selector-class-pattern
      13:1  ✖  Expected class selector ".featureCard" to be kebab-case         selector-class-pattern
      23:1  ✖  Expected class selector ".featureCard" to be kebab-case         selector-class-pattern
      29:1  ✖  Expected class selector

(Truncated to 1904 characters out of 49836)
⚠️ REPOSITORY / trivy - 6 errors
warning: Package: ajv
Installed Version: 6.12.6
Vulnerability CVE-2025-69873
Severity: MEDIUM
Fixed Version: 8.18.0, 6.14.0
Link: [CVE-2025-69873](https://avd.aquasec.com/nvd/cve-2025-69873)
     ┌─ docusaurus/package-lock.json:7254:1
     │  
7254 │ ╭         "node_modules/ajv": {
7255 │ │             "version": "6.12.6",
7256 │ │             "resolved": "https://registry.npmjs.org/ajv/-/ajv-6.12.6.tgz",
7257 │ │             "integrity": "sha512-j3fVLgvTo527anyYyJOGTYJbG+vnnQYvE0m5mmkc1TK+nxAppkCLMIL0aZ4dblVCNoGShhm+kzE4ZUykBoMg4g==",
     · │
7268 │ │             }
7269 │ │         },
     │ ╰^
     │  
     = ajv: ReDoS via $data reference
     = ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the $data option is enabled. The pattern keyword accepts runtime data via JSON Pointer syntax ($data reference), which is passed directly to the JavaScript RegExp() constructor without validation. An attacker can inject a malicious regex pattern (e.g., "^(a|a)*$") combined with crafted input to cause catastrophic backtracking. A 31-character payload causes approximately 44 seconds of CPU blocking, with each additional character doubling execution time. This enables complete denial of service with a single HTTP request against any API using ajv with $data: true for dynamic schema validation.

warning: Package: ajv
Installed Version: 8.17.1
Vulnerability CVE-2025-69873
Severity: MEDIUM
Fixed Version: 8.18.0, 6.14.0
Link: [CVE-2025-69873](https://avd.aquasec.com/nvd/cve-2025-69873)
      ┌─ docusaurus/package-lock.json:7287:1
      │  
 7287 │ ╭         "node_modules/ajv-formats/node_modules/ajv": {
 7288 │ │             "version": "8.17.1",
 7289 │ │             "resolved": "https://registry.npmjs.org/ajv/-/ajv-8.17.1.tgz",
 7290 │ │             "integrity": "sha512-B/gBuNg5SiMTrPkC+A2+cW0RszwxYmn6VYxB/inlBStS5nx6

(Truncated to 1904 characters out of 22032)
⚠️ TYPESCRIPT / ts-standard - 311 errors
Results of ts-standard linter (version 12.0.2)
See documentation on https://megalinter.io/9.3.0/descriptors/typescript_ts_standard/
-----------------------------------------------

❌ [ERROR] docusaurus/docusaurus.config.ts
    Unable to locate the project file. A project file (tsconfig.json or tsconfig.eslint.json) is required in order to use ts-standard.

❌ [ERROR] docusaurus/sidebars.ts
    Unable to locate the project file. A project file (tsconfig.json or tsconfig.eslint.json) is required in order to use ts-standard.

❌ [ERROR] docusaurus/src/js/modernEnhancements.ts
    Unable to locate the project file. A project file (tsconfig.json or tsconfig.eslint.json) is required in order to use ts-standard.

❌ [ERROR] electron-app/fitsdk.d.ts
    Unable to locate the project file. A project file (tsconfig.json or tsconfig.eslint.json) is required in order to use ts-standard.

❌ [ERROR] electron-app/global.d.ts
    Unable to locate the project file. A project file (tsconfig.json or tsconfig.eslint.json) is required in order to use ts-standard.

❌ [ERROR] electron-app/types/ffv/assets/Results-H2VOSWW7.d.ts
    Unable to locate the project file. A project file (tsconfig.json or tsconfig.eslint.json) is required in order to use ts-standard.

❌ [ERROR] electron-app/types/ffv/assets/Sprite-BZ4Kwmf3.d.ts
    Unable to locate the project file. A project file (tsconfig.json or tsconfig.eslint.json) is required in order to use ts-standard.

❌ [ERROR] electron-app/types/ffv/assets/binaryString-DLpsQS3c.d.ts
    Unable to locate the project file. A project file (tsconfig.json or tsconfig.eslint.json) is required in order to use ts-standard.

❌ [ERROR] electron-app/types/ffv/assets/findFields-C7eiFatx.d.ts
    Unable to locate the project file. A project file (tsconfig.json or tsconfig.eslint.json) is required in order to use ts-standard.

❌ [ERROR] electron-app/types/ffv/assets/getMessag

(Truncated to 1904 characters out of 63493)
⚠️ JSON / v8r - 1 error
Results of v8r linter (version 5.1.0)
See documentation on https://megalinter.io/9.3.0/descriptors/json_v8r/
-----------------------------------------------

✅ [SUCCESS] .devskim.json
✅ [SUCCESS] .github/hooks/hooks.json
✅ [SUCCESS] .jscpd.json
✅ [SUCCESS] .markdown-link-check.json
✅ [SUCCESS] .markdownlint.json
✅ [SUCCESS] .ncurc.json
✅ [SUCCESS] .prettierrc.json
✅ [SUCCESS] .vscode/extensions.json
✅ [SUCCESS] .vscode/launch.json
✅ [SUCCESS] .vscode/settings.json
❌ [ERROR] .vscode/tasks.json
    ℹ No config file found
    ℹ Pre-warming the cache
    ℹ Processing .vscode/tasks.json
    ℹ Found schema in https://www.schemastore.org/api/json/catalog.json ...
    ℹ Validating .vscode/tasks.json against schema from https://www.schemastore.org/task.json ...
    ✖ .vscode/tasks.json is invalid
    
    .vscode/tasks.json#/tasks/7/group must be object
    .vscode/tasks.json#/tasks/7/group must be equal to one of the allowed values
    .vscode/tasks.json#/tasks/7/group must match a schema in anyOf

✅ [SUCCESS] cspell.json
✅ [SUCCESS] docusaurus/package-lock.json
✅ [SUCCESS] docusaurus/package.json
✅ [SUCCESS] docusaurus/tsconfig.json
✅ [SUCCESS] docusaurus/typedoc.json
✅ [SUCCESS] docusaurus/typedoc.local.json
✅ [SUCCESS] electron-app/.markdown-link-check.json
✅ [SUCCESS] electron-app/.markdownlint.json
✅ [SUCCESS] electron-app/.npmpackagejsonlintrc.json
✅ [SUCCESS] electron-app/.vscode/tasks.json
✅ [SUCCESS] electron-app/ffv/manifest.json
✅ [SUCCESS] electron-app/package-lock.json
✅ [SUCCESS] electron-app/package.json
✅ [SUCCESS] electron-app/tsconfig.json
✅ [SUCCESS] electron-app/tsconfig.vitest.json
✅ [SUCCESS] mermaid.config.json
✅ [SUCCESS] package.json
⚠️ YAML / yamllint - 177 errors
Results of yamllint linter (version 1.37.1)
See documentation on https://megalinter.io/9.3.0/descriptors/yaml_yamllint/
-----------------------------------------------

✅ [SUCCESS] .checkov.yml
✅ [SUCCESS] .github/.spellcheck.yml
✅ [SUCCESS] .github/dependabot.yml
✅ [SUCCESS] .github/workflows/ActionLint.yml
❌ [ERROR] .github/workflows/Build.yml
    .github/workflows/Build.yml
      37:81     warning  line too long (106 > 80 characters)  (line-length)
      48:81     warning  line too long (98 > 80 characters)  (line-length)
      54:81     warning  line too long (86 > 80 characters)  (line-length)
      61:81     warning  line too long (88 > 80 characters)  (line-length)
      70:81     warning  line too long (122 > 80 characters)  (line-length)
      97:81     warning  line too long (101 > 80 characters)  (line-length)
      98:81     warning  line too long (82 > 80 characters)  (line-length)
      108:81    warning  line too long (86 > 80 characters)  (line-length)
      111:81    warning  line too long (95 > 80 characters)  (line-length)
      114:81    warning  line too long (98 > 80 characters)  (line-length)
      125:81    warning  line too long (121 > 80 characters)  (line-length)
      130:81    warning  line too long (106 > 80 characters)  (line-length)
      133:81    warning  line too long (96 > 80 characters)  (line-length)
      139:25    warning  wrong indentation: expected 20 but found 24  (indentation)
      145:1     error    trailing spaces  (trailing-spaces)
      148:81    warning  line too long (93 > 80 characters)  (line-length)
      161:81    warning  line too long (163 > 80 characters)  (line-length)
      185:81    warning  line too long (98 > 80 characters)  (line-length)
      190:81    warning  line too long (86 > 80 characters)  (line-length)
      197:81    warning  line too long (88 > 80 characters)  (line-length)
      206:81    warning 

(Truncated to 1904 characters out of 15907)

See detailed reports in MegaLinter artifacts

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

  • Documentation: Custom Flavors
  • Command: npx mega-linter-runner@9.3.0 --custom-flavor-setup --custom-flavor-linters ACTION_ACTIONLINT,BASH_EXEC,BASH_SHELLCHECK,BASH_SHFMT,COPYPASTE_JSCPD,CSS_STYLELINT,HTML_DJLINT,HTML_HTMLHINT,JAVASCRIPT_PRETTIER,JSON_JSONLINT,JSON_V8R,JSON_PRETTIER,JSON_NPM_PACKAGE_JSON_LINT,MARKDOWN_MARKDOWNLINT,MARKDOWN_MARKDOWN_TABLE_FORMATTER,POWERSHELL_POWERSHELL,POWERSHELL_POWERSHELL_FORMATTER,REPOSITORY_CHECKOV,REPOSITORY_DEVSKIM,REPOSITORY_DUSTILOCK,REPOSITORY_GIT_DIFF,REPOSITORY_GITLEAKS,REPOSITORY_GRYPE,REPOSITORY_KICS,REPOSITORY_SECRETLINT,REPOSITORY_SYFT,REPOSITORY_TRIVY,REPOSITORY_TRIVY_SBOM,REPOSITORY_TRUFFLEHOG,REPOSITORY_KINGFISHER,SPELL_CSPELL,SPELL_LYCHEE,TYPESCRIPT_STANDARD,XML_XMLLINT,YAML_PRETTIER,YAML_YAMLLINT,YAML_V8R

MegaLinter is graciously provided by OX Security

@Nick2bad4u Nick2bad4u closed this Feb 26, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Feb 26, 2026

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot bot deleted the dependabot/npm_and_yarn/electron-app/rollup-4.59.0 branch February 26, 2026 16:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependabot Dependabot Pull Requests dependencies Pull requests that update a dependency file npm npm updates

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant