Bump ajv from 6.12.6 to 8.20.0 in /frontend/webcoder_ui

DE
6mo ago
+18-18

Bumps ajv from 6.12.6 to 8.20.0.

Release notes

Sourced from ajv's releases.

v8.20.0

What's Changed

Full Changelog: https://github.com/ajv-validator/ajv/compare/v8.19.0...v8.20.0

v8.19.0

What's Changed

Full Changelog: https://github.com/ajv-validator/ajv/compare/v8.18.0...v8.19.0

v8.18.0

What's Changed

New Contributors

Full Changelog: https://github.com/ajv-validator/ajv/compare/v8.17.1...v8.18.0

v8.17.1

What's Changed

Full Changelog: https://github.com/ajv-validator/ajv/compare/v8.17.0...v8.17.1

Plus everything in 8.17.0 which failed to release

The only functional change is to switch from uri-js (which is no longer supported), to fast-uri. This is the second attempt and the team on fast-uri have been really helpful addressing the issues we found last time.

Revert "Revert fast-uri change (ajv-validator/ajv#2444)" by @​gurgunday in ajv-validator/ajv#2448 fix: ignore new eslint error for @​typescript-eslint/no-extraneous-class by @​jasoniangreen in ajv-validator/ajv#2455 docs: clarify behaviour of addVocabulary by @​jasoniangreen in ajv-validator/ajv#2454 docs: refactor to improve legibility by @​blottn in ajv-validator/ajv#2432 Fix grammatical typo in managing-schemas.md by @​wetneb in ajv-validator/ajv#2305 docs: Fix broken strict-mode link by @​alexanderjsx in ajv-validator/ajv#2459 feat: add test for encoded refs and bump fast-uri by @​jasoniangreen in ajv-validator/ajv#2449 fix: changes for @​typescript-eslint/array-type rule by @​jasoniangreen in ajv-validator/ajv#2467 fixes ajv-validator/ajv#2217 - clarify custom keyword naming by @​jasoniangreen in ajv-validator/ajv#2457

v8.17.0

... (truncated)

Commits
Install script changes

This version modifies prepublish script that runs during installation. Review the package contents before updating.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Summary by cubic

Upgrade ajv in frontend/webcoder_ui to pick up security fixes and Node 22/24 support. This updates nested ajv packages to 8.20.0 and bumps the lockfile’s top-level ajv entry from 6.12.6 to 6.15.0.

  • Dependencies

    • ajv 8.20.0 applied to nested deps: @fastify/ajv-compiler, ajv-formats, fast-json-stringify, schema-utils, workbox-build.
    • Lockfile also updates ajv 6.12.6 → 6.15.0 for the top-level entry.
    • Includes fixes for ReDoS (pattern with $data) and prototype pollution via format.

  • Migration

    • If the app imports ajv directly, verify against v8 changes and run tests.
    • Ensure dev/CI uses Node 18+ (v8 drops Node 16/21).