Skip to content

Dependency updates and UI spacing fixes - #686

Merged
jb3 merged 10 commits into
masterfrom
deps/dependabot-roundup
Oct 14, 2026
Merged

jb3 merged 10 commits into
masterfrom
deps/dependabot-roundup

Conversation

@jb3

@jb3 jb3 commented Oct 14, 2026

Copy link
Copy Markdown
Member

Combines the open dependabot PRs (#685, #684, #675, #672) and bumps the remaining outdated dependencies except Django (staying on the 5.2 LTS): cssnano 9.8.0, postcss 8.5.30, gulp-postcss 10, markdown 3.11.1, pypdf 6.20.1, sentry-sdk 2.72.0.

Also includes two UI fixes:

  • consistent icon/label spacing in the front page menus
  • tidier layout for the user dropdown (avatar, name, email and logout)

dependabot Bot and others added 10 commits October 14, 2026 23:07
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 7 to 8.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@v7...v8)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 6 to 7.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v6...v7)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps the npm-minor-patch group with 1 update in the / directory: [cssnano](https://github.com/cssnano/cssnano).


Updates `cssnano` from 9.2.2 to 9.6.0
- [Release notes](https://github.com/cssnano/cssnano/releases)
- [Commits](https://github.com/cssnano/cssnano/compare/cssnano@9.2.2...cssnano@9.6.0)

---
updated-dependencies:
- dependency-name: cssnano
  dependency-version: 9.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [source-map-js](https://github.com/7rulnik/source-map-js) from 1.2.1 to 1.2.2.
- [Release notes](https://github.com/7rulnik/source-map-js/releases)
- [Changelog](https://github.com/7rulnik/source-map-js/blob/main/CHANGELOG.md)
- [Commits](7rulnik/source-map-js@v1.2.1...v1.2.2)

---
updated-dependencies:
- dependency-name: source-map-js
  dependency-version: 1.2.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
…r-patch-cf848ef80d' into deps/dependabot-roundup
…s/upload-artifact-6' into deps/dependabot-roundup
…s/download-artifact-7' into deps/dependabot-roundup
@jb3
jb3 merged commit 6613693 into master Oct 14, 2026
7 checks passed
@jb3
jb3 deleted the deps/dependabot-roundup branch October 14, 2026 23:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant