chore(deps): bump the npm group in /frontend with 2 updates #3960

dependabot · 2025-08-26T18:34:41Z

Bumps the npm group in /frontend with 2 updates: bootstrap and sass.

Updates bootstrap from 5.1.1 to 5.3.7

Release notes

v5.3.7

📚 Documentation

Fixed broken "View on GitHub" URLs

Corrected HTML <head> content generated by the "Download examples" button

Refined sanitizer documentation for clarity and completeness

Improved accessibility in the "On this page" table of contents and section heading anchor links

Relocated ads to the right sidebar to minimize content reflow

Added a new section on the Download page for the Intelissence extension

Clarified the "Via JavaScript" usage example for Accordion Collapse

Made internal documentation improvements to support future maintenance (no visible user impact)

Mention CDN integrity and crossorigin attributes in introduction page

Enhance floating labels placeholder usage description

Add example of showing dynamic range value with output

🎨 Sass

Consolidated multiple 'none' values in the box-shadow Sass mixin for cleaner output

🤖 JavaScript

Fixed popover and tooltip behavior with a trigger: "hover click" configuration

🤝 Contributions

Added recommended VSCode extensions and settings configuration to the repository

v5.3.6

Highlights

Ported the docs from Hugo to Astro for our own sanity!

Added usage docs for Accordion JavaScript

Prevent .visually-hidden overflowing children to become focusable

Limit .card-group selectors to immediate children to fix some inheritance issues

Changes

docs: update readme to include bun install by @Electroid in twbs/bootstrap#41277

Docs: fix specification for getInstance by @fulldecent in twbs/bootstrap#41297

Mention npm install and npm run dist in CONTRIBUTING.md by @mdo in twbs/bootstrap#41340

docs: add Sass deprecations notice in docs by @MaxLardenois in twbs/bootstrap#41283

docs: Better indicate include options in sass setup. by @Kelketek in twbs/bootstrap#41143

docs: add 'skeleton loaders' to loading placeholders description by @MohamadSalman11 in twbs/bootstrap#41177

Update offcanvas.md To Mention Adding data-bs-target for Close Buttons in Offcanvas Components by @ASchoe311 in twbs/bootstrap#41325

Limit selectors in .card-group to immediate children to fix border-radius bug by @mscdex in twbs/bootstrap#41298

Docs: add Border radius section for Input group by @TommasoAllegretti in twbs/bootstrap#40776

Docs: use 'i.e.' instead of 'e.g.' in Floating Labels example description by @julien-deramond in twbs/bootstrap#41364

Docs: move Cheatsheet RTL example to the RTL category by @julien-deramond in twbs/bootstrap#41282

Doc: fix blockquote mismatch by @viniciusvts in twbs/bootstrap#41295

Removed broken translation links by @MasterPuffin in twbs/bootstrap#41359

Docs: migration from Hugo to Astro by @julien-deramond in twbs/bootstrap#41251

Update devDependencies by @julien-deramond in twbs/bootstrap#41383

Bump image-size from 1.0.2 to 2.0.2 by @julien-deramond in twbs/bootstrap#41384

Add switch attribute to docs for switch checkbox by @mdo in twbs/bootstrap#41396

... (truncated)

Commits

e0032ae Release v5.3.7 (#41509)
0f63de9 Build(deps-dev): Bump zod from 3.25.56 to 3.25.57
37f33ff Build(deps-dev): Bump the development-dependencies group with 2 updates (#41531)
03f27a2 Docs: add example of showing dynamic range value with output (#41516)
f04b980 Docs: enhance floating labels placeholder usage description (#41526)
1c00b1f Build(deps-dev): Bump the development-dependencies group with 3 updates (#41528)
590226f Build(deps-dev): Bump the development-dependencies group with 2 updates
0a9fa30 Build(deps-dev): Bump the development-dependencies group with 4 updates (#41525)
0b6c09a Build(deps-dev): Bump zod from 3.25.48 to 3.25.49 (#41513)
e6fdd27 Mentions CDN integrity and crossorigin attributes in Intro docs page (#41515)
Additional commits viewable in compare view

Updates sass from 1.49.9 to 1.91.0

Release notes

Sourced from sass's releases.

Dart Sass 1.91.0

To install Sass 1.91.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

Potentially breaking change: meta.inspect() (as well as other systems that use it such as @debug and certain error messages) now emits numbers with as high precision as is available instead of rounding to the nearest 1e⁻¹⁰ as we do when serializing to CSS. This better fits the purpose of meta.inspect(), which is to provide full information about the structure of a Sass value.

Passing a rest argument ($arg...) before a positional or named argument when calling a function or mixin is now deprecated. This was always outside the specified syntax, but it was historically treated the same as passing the rest argument at the end of the argument list whether or not that matched the visual order of the arguments.

See the full changelog for changes in earlier releases.

Dart Sass 1.90.0

To install Sass 1.90.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

Allow a @forwarded module to be loaded with a configuration when that module has already been loaded with a different configuration and the module doesn't define any variables that would have been configured anyway.

See the full changelog for changes in earlier releases.

Dart Sass 1.89.2

To install Sass 1.89.2, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

Embedded Host

Fixed a compilation error caused by an outdated buf dependency.

See the full changelog for changes in earlier releases.

Dart Sass 1.89.1

To install Sass 1.89.1, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

No user-visible changes.

... (truncated)

Changelog

Sourced from sass's changelog.

1.91.0

Potentially breaking change: meta.inspect() (as well as other systems that use it such as @debug and certain error messages) now emits numbers with as high precision as is available instead of rounding to the nearest 1e⁻¹⁰ as we do when serializing to CSS. This better fits the purpose of meta.inspect(), which is to provide full information about the structure of a Sass value.

Passing a rest argument ($arg...) before a positional or named argument when calling a function or mixin is now deprecated. This was always outside the specified syntax, but it was historically treated the same as passing the rest argument at the end of the argument list whether or not that matched the visual order of the arguments.

1.90.0

Allow a @forwarded module to be loaded with a configuration when that module has already been loaded with a different configuration and the module doesn't define any variables that would have been configured anyway.

1.89.2

Embedded Host

Fixed a compilation error caused by an outdated buf dependency.

1.89.1

No user-visible changes.

1.89.0

Allow the Node package importer to load files even when there are multiple potential resolutions, as long as those resolutions all point to the same file.

1.88.0

Allow custom properties with empty values (such as --var:;).

Fix a bug when calculating source spans for interpolations.

Dart and JS APIs

Potentially breaking bug fix: Throw an error when passing a function or mixin object from one compilation to another.

Dart API

... (truncated)

Commits

6878709 Deprecate misplaced rest arguments (#2623)
6607204 Use official dart riscv64 docker image (#2619)
1df71a5 Print non-integer number at full precision in inspect mode (#2615)
e0b2a50 Bump actions/checkout from 4 to 5 (#2620)
e55398a Bump actions/checkout from 4 to 5 in /.github/util/initialize (#2621)
8f1c24a Bump expect from 29.7.0 to 30.0.5 in /pkg/sass-parser (#2611)
d6f4f17 Allow unused configurations to go past @forward (#2600)
02fa098 Bump @types/jest from 29.5.14 to 30.0.0 in /pkg/sass-parser (#2591)
008bbef Update embedded-host-node release pipeline (#2609)
d3e1abf Bump jest from 29.7.0 to 30.0.4 in /pkg/sass-parser (#2603)
Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

dependabot · 2025-09-15T17:55:42Z

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

Bumps the npm group in /frontend with 2 updates: [bootstrap](https://github.com/twbs/bootstrap) and [sass](https://github.com/sass/dart-sass). Updates `bootstrap` from 5.1.1 to 5.3.7 - [Release notes](https://github.com/twbs/bootstrap/releases) - [Commits](twbs/bootstrap@v5.1.1...v5.3.7) Updates `sass` from 1.49.9 to 1.91.0 - [Release notes](https://github.com/sass/dart-sass/releases) - [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md) - [Commits](sass/dart-sass@1.49.9...1.91.0) --- updated-dependencies: - dependency-name: bootstrap dependency-version: 5.3.7 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm - dependency-name: sass dependency-version: 1.91.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot · 2025-11-17T06:46:40Z

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code minor labels Aug 26, 2025

dependabot bot force-pushed the dependabot/npm_and_yarn/frontend/npm-bba8152c92 branch from 88a14c0 to eca0fea Compare September 8, 2025 06:41

dependabot bot force-pushed the dependabot/npm_and_yarn/frontend/npm-bba8152c92 branch from eca0fea to 6e6d7ca Compare September 22, 2025 06:48

dependabot bot force-pushed the dependabot/npm_and_yarn/frontend/npm-bba8152c92 branch from 6e6d7ca to eb3e53e Compare November 3, 2025 06:43

dependabot bot force-pushed the dependabot/npm_and_yarn/frontend/npm-bba8152c92 branch from eb3e53e to a3877ce Compare November 10, 2025 06:47

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the npm group in /frontend with 2 updates #3960

chore(deps): bump the npm group in /frontend with 2 updates #3960

Uh oh!

dependabot bot commented on behalf of github Aug 26, 2025 •

edited

Loading

Uh oh!

dependabot bot commented on behalf of github Sep 15, 2025

Uh oh!

dependabot bot commented on behalf of github Nov 17, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

chore(deps): bump the npm group in /frontend with 2 updates #3960

Are you sure you want to change the base?

chore(deps): bump the npm group in /frontend with 2 updates #3960

Uh oh!

Conversation

dependabot bot commented on behalf of github Aug 26, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v5.3.7

📚 Documentation

🎨 Sass

🤖 JavaScript

🤝 Contributions

v5.3.6

Highlights

Changes

Dart Sass 1.91.0

Changes

Dart Sass 1.90.0

Changes

Dart Sass 1.89.2

Changes

Embedded Host

Dart Sass 1.89.1

Changes

1.91.0

1.90.0

1.89.2

Embedded Host

1.89.1

1.89.0

1.88.0

Dart and JS APIs

Dart API

Uh oh!

dependabot bot commented on behalf of github Sep 15, 2025

Uh oh!

dependabot bot commented on behalf of github Nov 17, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot bot commented on behalf of github Aug 26, 2025 •

edited

Loading