Skip to content

Chore(deps): Bump liquidjs from 10.26.0 to 10.27.1 - #344

Merged
sofiachakir merged 1 commit into
mainfrom
dependabot/npm_and_yarn/liquidjs-10.27.1
Aug 11, 2026
Merged

Chore(deps): Bump liquidjs from 10.26.0 to 10.27.1#344
sofiachakir merged 1 commit into
mainfrom
dependabot/npm_and_yarn/liquidjs-10.27.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 27, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps liquidjs from 10.26.0 to 10.27.1.

Release notes

Sourced from liquidjs's releases.

v10.27.1

10.27.1 (2026-06-23)

Bug Fixes

  • improve round function; improvement to #873 (#901) (956b51e)
  • security: charge pop filter allocation to memoryLimit (#907) (8a0c74a)
  • strip_html: infinite loop for strip_html (5c3522f)

Performance Improvements

  • parser: memoize createTrie to avoid rebuilding tries per Tokenizer (#911) (3a0d80d)

v10.27.0

10.27.0 (2026-05-15)

Features

  • context: null-prototype scope frames via createScope (#899) (47d3f1b)
Changelog

Sourced from liquidjs's changelog.

10.27.1 (2026-06-23)

Bug Fixes

  • improve round function; improvement to #873 (#901) (956b51e)
  • security: charge pop filter allocation to memoryLimit (#907) (8a0c74a)
  • strip_html: infinite loop for strip_html (5c3522f)

Performance Improvements

  • parser: memoize createTrie to avoid rebuilding tries per Tokenizer (#911) (3a0d80d)

10.27.0 (2026-05-15)

Features

  • context: null-prototype scope frames via createScope (#899) (47d3f1b)
Commits
  • ed48986 chore(release): 10.27.1 [skip ci]
  • afec88b docs(readme): README overhaul, used-by grid, and docs homepage (#914)
  • 3a0d80d perf(parser): memoize createTrie to avoid rebuilding tries per Tokenizer (#911)
  • 956b51e fix: improve round function; improvement to #873 (#901)
  • 5c3522f fix(strip_html): infinite loop for strip_html
  • 6d00257 docs: add AGENTS.md and llms.txt for AI agents (#919)
  • 03a30e6 docs: replace CookieHub with cookieconsent (#918)
  • 4775227 docs(security): route vulnerability reports to GitHub Advisories (#913)
  • 8a0c74a fix(security): charge pop filter allocation to memoryLimit (#907)
  • ed15a52 docs: revisit wording & style for liquidjs.com (#906)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 27, 2026
@dependabot
Chore(deps): Bump liquidjs from 10.26.0 to 10.27.1
eba2280 
Bumps [liquidjs](https://github.com/harttle/liquidjs) from 10.26.0 to 10.27.1.
- [Release notes](https://github.com/harttle/liquidjs/releases)
- [Changelog](https://github.com/harttle/liquidjs/blob/master/CHANGELOG.md)
- [Commits](harttle/liquidjs@v10.26.0...v10.27.1)

---
updated-dependencies:
- dependency-name: liquidjs
  dependency-version: 10.27.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/liquidjs-10.27.1 branch from e4ffecd to eba2280 Compare August 11, 2026 12:23
@sofiachakir
sofiachakir merged commit 3ce32b0 into main Aug 11, 2026
6 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/liquidjs-10.27.1 branch August 11, 2026 12:44
sofiachakir pushed a commit that referenced this pull request Aug 11, 2026
@dependabot @sofiachakir
Chore(deps): Bump liquidjs from 10.26.0 to 10.27.1 (#344)
ca3a545 
Bumps [liquidjs](https://github.com/harttle/liquidjs) from 10.26.0 to 10.27.1.
- [Release notes](https://github.com/harttle/liquidjs/releases)
- [Changelog](https://github.com/harttle/liquidjs/blob/master/CHANGELOG.md)
- [Commits](harttle/liquidjs@v10.26.0...v10.27.1)

---
updated-dependencies:
- dependency-name: liquidjs
  dependency-version: 10.27.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Sofia Chakir <sofiachakir@gmail.com>
sofiachakir added a commit that referenced this pull request Aug 12, 2026
@sofiachakir @dependabot
Fix/security (#351)
c3b166a 
* chore(deps): bump tar to 7.5.19

Signed-off-by: Sofia Chakir <sofiachakir@gmail.com>

* chore(deps): bump immutable to 5.1.8

Signed-off-by: Sofia Chakir <sofiachakir@gmail.com>

* Chore(deps): Bump axios from 1.17.0 to 1.18.0 (#340)

Bumps [axios](https://github.com/axios/axios) from 1.17.0 to 1.18.0.
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.17.0...v1.18.0)

---
updated-dependencies:
- dependency-name: axios
  dependency-version: 1.18.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Sofia Chakir <sofiachakir@gmail.com>

* Chore(deps): Bump liquidjs from 10.26.0 to 10.27.1 (#344)

Bumps [liquidjs](https://github.com/harttle/liquidjs) from 10.26.0 to 10.27.1.
- [Release notes](https://github.com/harttle/liquidjs/releases)
- [Changelog](https://github.com/harttle/liquidjs/blob/master/CHANGELOG.md)
- [Commits](harttle/liquidjs@v10.26.0...v10.27.1)

---
updated-dependencies:
- dependency-name: liquidjs
  dependency-version: 10.27.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Sofia Chakir <sofiachakir@gmail.com>

* Chore(deps): Bump js-yaml from 4.2.0 to 4.3.1 (#349)

Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.2.0 to 4.3.1.
- [Changelog](https://github.com/nodeca/js-yaml/blob/4.3.1/CHANGELOG.md)
- [Commits](nodeca/js-yaml@4.2.0...4.3.1)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 4.3.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Sofia Chakir <sofiachakir@gmail.com>

* Chore(deps): Bump js-yaml from 3.14.2 to 4.3.1 (#350)

Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 3.14.2 to 4.3.1.
- [Changelog](https://github.com/nodeca/js-yaml/blob/4.3.1/CHANGELOG.md)
- [Commits](nodeca/js-yaml@3.14.2...4.3.1)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 4.3.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Sofia Chakir <sofiachakir@gmail.com>

* chore(deps): bump fast-uri to 3.1.5

Signed-off-by: Sofia Chakir <sofiachakir@gmail.com>

* chore(deps): override svgo to 4.0.2

Signed-off-by: Sofia Chakir <sofiachakir@gmail.com>

* chore(deps): bump @tootallnate/once to 2.0.1

Signed-off-by: Sofia Chakir <sofiachakir@gmail.com>

* chore(deps): bump js-yaml to patched versions

Signed-off-by: Sofia Chakir <sofiachakir@gmail.com>

* fix: build fails because of frozen lockfile

Signed-off-by: Sofia Chakir <sofiachakir@gmail.com>

* chore(deps): bump sharp to 0.35.3

Signed-off-by: Sofia Chakir <sofiachakir@gmail.com>

* feat: add changeset

Signed-off-by: Sofia Chakir <sofiachakir@gmail.com>

---------

Signed-off-by: Sofia Chakir <sofiachakir@gmail.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@sofiachakir sofiachakir sofiachakir approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@sofiachakir