Skip to content

Bump @openclaw/carapace from v0.6.2 to v0.6.3 - #283

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/openclaw/carapace-v0.6.3
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/openclaw/carapace-v0.6.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 23, 2026

Copy link
Copy Markdown
Contributor

Bumps @openclaw/carapace from v0.6.2 to v0.6.3.

Release notes

Sourced from @​openclaw/carapace's releases.

v0.6.3

0.6.3 — 2026-10-20

Highlights: Recover safely from malformed chart hover data, with refreshed preview dependencies and Bun 1.4.3 validation.

  • Prevent malformed chart hover data from throwing during pointer movement, and allow initialization after empty or invalid data is corrected.
  • Route official OpenClaw support to the support forum.
  • Update the pinned Bun toolchain to 1.4.3 while retaining Bun 1.3.0 compatibility.
  • Update the terminal preview library to 0.3.10, Lucide to 1.59.0, React to 19.3.1, and CodeQL to 4.39.0; add a manual release validation that packs without publishing. Thanks @​dependabot[bot].
  • Update Lucide to 1.57.0 for the preview icon library. Thanks @​dependabot[bot].
  • Update Vite to 8.3.3 for HTML and development-server fixes, and Lucide to 1.53.0. Thanks @​dependabot[bot].
  • Update the terminal preview library to 0.3.9, Lucide to 1.52.0, and Vite to 8.3.2. Thanks @​dependabot[bot].
  • Refresh the terminal preview, icons, Vite, and CodeQL dependencies. Thanks @​dependabot[bot].
  • Refresh preview dependencies and the Bun toolchain, update CodeQL, and correct the Pages artifact action version labels.
Changelog

Sourced from @​openclaw/carapace's changelog.

0.6.3 — 2026-10-20

Highlights: Recover safely from malformed chart hover data, with refreshed preview dependencies and Bun 1.4.3 validation.

  • Prevent malformed chart hover data from throwing during pointer movement, and allow initialization after empty or invalid data is corrected.
  • Route official OpenClaw support to the support forum.
  • Update the pinned Bun toolchain to 1.4.3 while retaining Bun 1.3.0 compatibility.
  • Update the terminal preview library to 0.3.10, Lucide to 1.59.0, React to 19.3.1, and CodeQL to 4.39.0; add a manual release validation that packs without publishing. Thanks @​dependabot[bot].
  • Update Lucide to 1.57.0 for the preview icon library. Thanks @​dependabot[bot].
  • Update Vite to 8.3.3 for HTML and development-server fixes, and Lucide to 1.53.0. Thanks @​dependabot[bot].
  • Update the terminal preview library to 0.3.9, Lucide to 1.52.0, and Vite to 8.3.2. Thanks @​dependabot[bot].
  • Refresh the terminal preview, icons, Vite, and CodeQL dependencies. Thanks @​dependabot[bot].
  • Refresh preview dependencies and the Bun toolchain, update CodeQL, and correct the Pages artifact action version labels.
Commits
  • c3d76bc chore(release): prepare 0.6.3
  • c792b6b build(deps): update Bun to 1.4.3
  • 93a85c1 docs: route official OpenClaw support to the support forum (#103)
  • 610086e build(deps): refresh preview dependencies and CodeQL (#102)
  • 09d3707 ci: make ClawSweeper dispatch keyless (OIDC intake)
  • f822352 build(deps): update Lucide to 1.57.0
  • 5463792 build(deps-dev): bump lucide (#97)
  • 8bacd4d build(deps): bump actions/create-github-app-token (#96)
  • c49c89c build(deps-dev): bump the development group with 2 updates (#94)
  • 3c22cdd build(deps): bump the actions group with 2 updates (#95)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@openclaw/carapace](https://github.com/openclaw/carapace) from v0.6.2 to v0.6.3.
- [Release notes](https://github.com/openclaw/carapace/releases)
- [Changelog](https://github.com/openclaw/carapace/blob/main/CHANGELOG.md)
- [Commits](openclaw/carapace@6c38d2a...c3d76bc)

---
updated-dependencies:
- dependency-name: "@openclaw/carapace"
  dependency-version: c3d76bc75504c8289a16c9dc582c52d65f20207d
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from a team as a code owner October 23, 2026 18:54
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 23, 2026
@steipete

Copy link
Copy Markdown
Contributor

Thanks! This update landed in #292, including both markdown-it security fixes. Exact-head Docs Code CI, browser/Worker validation, CodeQL, workflow checks, the full remote shell build/smoke, and independent P3 review passed. Closing this superseded PR.

steipete added a commit that referenced this pull request Oct 27, 2026
Patch both markdown-it denial-of-service advisories with 15.0.3 and refresh Carapace, icons, animation and browser tooling under the two-day cooldown. Consolidates #283 and #291. Generated docs remain untouched.

Proof: independent P3 review clean; 294 helper/browser and 138 translation tests covered; complete 15,541-page shell build and smoke passed on Linux; exact-head Docs Code CI, browser/Worker validation, CodeQL and workflow shell checks passed.

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@steipete steipete closed this Oct 27, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 27, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/openclaw/carapace-v0.6.3 branch October 27, 2026 22:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant