Bump js-yaml from 4.1.1 to 4.3.0 - #46
Open
dependabot[bot] wants to merge 302 commits into
Open
dependabot[bot] wants to merge 302 commits into
dependabot[bot] wants to merge 302 commits into
Conversation
- Link Denver Streets Partnership to denverstreetspartnership.org - Add Denver Critical Mass line with links to website and Instagram - Replace emoji icons with SVGs for bike, Instagram, and chat (emojis rendered poorly in both light and dark modes) - Animated sun/moon dark mode toggle: sun circle morphs into crescent moon via SVG mask, rays fade and scale, whole icon rotates — inspired by Havard Brynjulfsen's CodePen - Re-sequence animation delays for new content
Replace the static PDF download with a styled, print-friendly HTML resume that shares the site's palette, dark mode, and copy patterns so it stays in sync with site edits without an export step. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Limit npm update PRs to direct dependencies only. Indirect/transitive deps no longer trigger PRs, eliminating stale-base churn from minor sub-dependency bumps that resolve themselves on the next npm install. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Introduce a dedicated print-only stylesheet so the printed/PDF resume renders at paper-friendly density (10.5pt body, tighter sections, scaled-down headings) regardless of screen theme. Handles @page geometry, dark-mode reset, page-break behavior, and quieter link styling that the inline print: variants couldn't cleanly express. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
The first pass kept the screen's two-column label-on-left layout in print, leaving section content squeezed into the right ~75%. Collapse print to a single column so each section label sits as a heading row above its content using the full page width. Bump H1 to 35pt for header impact, raise section labels and date metadata into a readable range, and override dark-mode pastel accent shades to their light-mode counterparts so the rose/sky/amber/lime/fuchsia labels stay legible on white paper if the user prints from dark mode. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
The Experience label was getting stranded at the bottom of page 1 when its first role (Gusto, the longest entry) couldn't fit and got pushed to page 2. Add break-after: avoid on every section label and break-before: avoid on the first content sibling so the label and its first row always stay together. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Firefox treats CSS grid track gaps as legal page-break locations, which caused the Experience label to keep getting orphaned even with break-after: avoid in place. Switch the labeled sections to display: block in print so there are no grid gap break candidates between the label and its content. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Applies the five outstanding Dependabot updates in one lockfile resolution rather than five separate merges, since each one would conflict with the others on package-lock.json. All checks pass (format, lint, vitest 4 run, vite 8 build). globals 15.15.0 -> 17.5.0 jsdom 26.1.0 -> 29.1.0 lint-staged 15.5.2 -> 16.4.0 vite 6.4.2 -> 8.0.10 vitest 3.2.4 -> 4.1.5 Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.1.1 to 4.3.0. - [Changelog](https://github.com/nodeca/js-yaml/blob/4.3.0/CHANGELOG.md) - [Commits](nodeca/js-yaml@4.1.1...4.3.0) --- updated-dependencies: - dependency-name: js-yaml dependency-version: 4.3.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps js-yaml from 4.1.1 to 4.3.0.
Changelog
Sourced from js-yaml's changelog.
Commits
33d05b54.3.0 released663bfabDrop demo publish, to not override new v5 one.1cb8c7bAdd v4-legacy tag for publish02f27afRestore umd builds back to es58be84edFix es5 compatibility59423c6ReplacemaxMergeSeqLengthoption withmaxTotalMergeKeys(more robust). Ba...6842ef6doc polish590dbab4.2.0 releasedf944dc5Add package.json funding fieldf692719Changelog updateDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.