[PR #363] [MERGED] chore(deps): Bump browserslist from 4.28.1 to 4.28.2 #362

New issue

Closed

opened 2026-05-06 12:16:35 +02:00 by BreizhHardware · 0 comments

BreizhHardware commented

2026-05-06 12:16:35 +02:00

Owner

📋 Pull Request Information

Original PR: https://github.com/BreizhHardware/portfolio/pull/363
Author: @dependabot[bot]
Created: 4/6/2026
Status: ✅ Merged
Merged: 4/15/2026
Merged by: @BreizhHardware

Base: dev ← Head: dependabot/npm_and_yarn/dev/browserslist-4.28.2

📝 Commits (1)

51ceb51 chore(deps): Bump browserslist from 4.28.1 to 4.28.2

📊 Changes

2 files changed (+29 additions, -56 deletions)

View changed files

📝 package.json (+1 -1)
📝 pnpm-lock.yaml (+28 -55)

📄 Description

Bumps browserslist from 4.28.1 to 4.28.2.

Release notes

Sourced from browserslist's releases.

4.28.2

Fix prototype pollution (by @chluo1997).

Changelog

Sourced from browserslist's changelog.

4.28.2

Fix prototype pollution (by @chluo1997).

Commits

502ea00 Release 4.28.2 version
4621a79 Re-use single constant
0b5a150 Update email
8e105c8 Process all files with oxfmt
a6247d5 Add oxfmt support
32e5cb1 Update dependencies
60c60b7 Merge pull request #926 from chluo1997/fix-pp
f263978 fix: prevent prototype pollution
2b97b75 Merge pull request #924 from SethFalco/custom-stats
f366165 docs: add more details on custom stats
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/BreizhHardware/portfolio/pull/363 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 4/6/2026 **Status:** ✅ Merged **Merged:** 4/15/2026 **Merged by:** [@BreizhHardware](https://github.com/BreizhHardware) **Base:** `dev` ← **Head:** `dependabot/npm_and_yarn/dev/browserslist-4.28.2` --- ### 📝 Commits (1) - [`51ceb51`](https://github.com/BreizhHardware/portfolio/commit/51ceb515adb2d2f44d0ea2d6ccd53b67fb82c9b1) chore(deps): Bump browserslist from 4.28.1 to 4.28.2 ### 📊 Changes **2 files changed** (+29 additions, -56 deletions) <details> <summary>View changed files</summary> 📝 `package.json` (+1 -1) 📝 `pnpm-lock.yaml` (+28 -55) </details> ### 📄 Description Bumps [browserslist](https://github.com/browserslist/browserslist) from 4.28.1 to 4.28.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/browserslist/browserslist/releases">browserslist's releases</a>.</em></p> <blockquote> <h2>4.28.2</h2> <ul> <li>Fix prototype pollution (by <a href="https://github.com/chluo1997"><code>@chluo1997</code></a>).</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md">browserslist's changelog</a>.</em></p> <blockquote> <h2>4.28.2</h2> <ul> <li>Fix prototype pollution (by <a href="https://github.com/chluo1997"><code>@chluo1997</code></a>).</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/browserslist/browserslist/commit/502ea0061d076fa92b7d5591ce4fa31f277a8e63"><code>502ea00</code></a> Release 4.28.2 version</li> <li><a href="https://github.com/browserslist/browserslist/commit/4621a79672cdc3552e809ec4b42d814ae5f4b7a4"><code>4621a79</code></a> Re-use single constant</li> <li><a href="https://github.com/browserslist/browserslist/commit/0b5a1504b325792fc209e1d7887dea211474c8ad"><code>0b5a150</code></a> Update email</li> <li><a href="https://github.com/browserslist/browserslist/commit/8e105c80ddda81b4d11426db5645d7b7a6a25a1e"><code>8e105c8</code></a> Process all files with oxfmt</li> <li><a href="https://github.com/browserslist/browserslist/commit/a6247d5af667c4c0999759c99061028449c2b288"><code>a6247d5</code></a> Add oxfmt support</li> <li><a href="https://github.com/browserslist/browserslist/commit/32e5cb1d09cc9a4c6e5eefce2b60e0ae4b010f6f"><code>32e5cb1</code></a> Update dependencies</li> <li><a href="https://github.com/browserslist/browserslist/commit/60c60b78803565b4c0489a515c9e0e01c74db2a7"><code>60c60b7</code></a> Merge pull request <a href="https://redirect.github.com/browserslist/browserslist/issues/926">#926</a> from chluo1997/fix-pp</li> <li><a href="https://github.com/browserslist/browserslist/commit/f263978b005ed7484c5bec14e2514da4ad72df76"><code>f263978</code></a> fix: prevent prototype pollution</li> <li><a href="https://github.com/browserslist/browserslist/commit/2b97b759fffa82699d361be79f4f7e463d270358"><code>2b97b75</code></a> Merge pull request <a href="https://redirect.github.com/browserslist/browserslist/issues/924">#924</a> from SethFalco/custom-stats</li> <li><a href="https://github.com/browserslist/browserslist/commit/f366165912190d48f51fe6e1fa4db398f5c8e7f2"><code>f366165</code></a> docs: add more details on custom stats</li> <li>Additional commits viewable in <a href="https://github.com/browserslist/browserslist/compare/4.28.1...4.28.2">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=browserslist&package-manager=npm_and_yarn&previous-version=4.28.1&new-version=4.28.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>