[dependabot]

Bumps preact from 10.29.8 to 11.0.1.

Release notes

Sourced from preact's releases.

11.0.1

Fixes

• Keep suspended hydration within a component's own $s range (#5300, thanks @​JoviDeCroock)
• Keep ref cleanups on the element instead of the ref function (#5290, thanks @​JoviDeCroock)
• Unmount parked Suspense children when the boundary unmounts (#5295, thanks @​gengjiawen)

DX

• Log the component stack of errors no boundary handles (#5297, thanks @​JoviDeCroock)

Performance

• Key event listeners by prop name and stamp attach times per listener (#5272, thanks @​JoviDeCroock)

Maintenance

• Change repository field to object format (#5292, thanks @​piotr-cz)
• Fix the types of preact/compat/server and preact/compat/scheduler (#5282, thanks @​JoviDeCroock)

11.0.0

https://preactjs.com/blog/preact-11

Read the upgrade-guide over at https://preactjs.com/guide/v11/upgrade-guide

All other release notes can be seen at

• https://github.com/preactjs/preact/releases/tag/11.0.0-rc.2
• https://github.com/preactjs/preact/releases/tag/11.0.0-rc.1
• https://github.com/preactjs/preact/releases/tag/11.0.0-rc.0
• https://github.com/preactjs/preact/releases/tag/11.0.0-beta.2
• https://github.com/preactjs/preact/releases/tag/11.0.0-beta.1
• https://github.com/preactjs/preact/releases/tag/11.0.0-beta.0

Fixes

• Re-attach refs when a suspended subtree reveals (#5258, thanks @​JoviDeCroock)
• Map imageRendering to image-rendering (#5270, thanks @​kwy404)
• Append when the insertion reference node lives in another container (#5252, thanks @​JoviDeCroock)
• Only drop the insertion cursor when it's detached (#5273, thanks @​JoviDeCroock)
• Fall back to the global document for containers without an ownerDocument (#5274, thanks @​JoviDeCroock)
• Check for moveBefore() on the container instead of globally (#5275, thanks @​JoviDeCroock)
• Fix resuming into the DOM kept while a component was suspended (#5276, thanks @​JoviDeCroock)
• Stop DOM nesting validation at portal boundaries (#5277, thanks @​JoviDeCroock)
• Preserve the casing of camelCase custom event names (#5278, thanks @​JoviDeCroock)

Performance

• Remove cloneNode for top-level Fragments (#5271, thanks @​JoviDeCroock)

... (truncated)

Commits

• 04074e2 Merge pull request #5302 from preactjs/11.0.1
• 231d163 11.0.1
• f6c09df Merge pull request #5300 from preactjs/JoviDeCroock/suspense-hydration-siblin...
• 67a88d5 Keep suspended hydration within a component's own $s range
• f9facd3 Merge pull request #5297 from preactjs/JoviDeCroock/debug-uncaught-component-...
• e984524 Merge branch 'main' into JoviDeCroock/debug-uncaught-component-stack
• 5fd81d2 Merge pull request #5272 from preactjs/perf/event-listener-keys
• 66f38b7 Keep listener attach times outside _listeners
• 74e6239 Stamp the attach time per listener instead of per handler
• 7ed4fac Skip event name normalization when swapping handlers
• Additional commits viewable in compare view

[github-actions]

🛡️ Security Hardening Pipeline Results

Branch: dependabot/npm_and_yarn/beta/preact-11.0.1
Commit: b77fa30

Workflow Run: 569
Branch: dependabot/npm_and_yarn/beta/preact-11.0.1
Commit: b77fa30

Scan Status

Scanner	Status
bandit	⏭️ skipped
checkov	⏭️ skipped
clamav	⏭️ skipped
codeql	✅ PASS
container	⏭️ skipped
dependency-review	✅ PASS
gitleaks	✅ PASS
grype	⏭️ skipped
lint	⏭️ skipped
opengrep	⏭️ skipped
osv	✅ PASS
sbom	⏭️ skipped
supply-chain	⏭️ skipped
trivy-container	⏭️ skipped
trivy-iac	⏭️ skipped
zap	⏭️ skipped

✅ All enabled scanners completed successfully.

Summaries Collected: 4

Scanner Results

🔬 CodeQL SAST (Javascript)

Status: Completed

Findings Summary

Critical	High	Medium	Low	Total
0	0	0	0	0

No security findings detected for Javascript.

Artifacts: CodeQL Reports (Javascript)

🔗 Dependency Review

Status: ✅ No issues found

No vulnerable or license-violating dependencies detected in this PR.
📋 View full report

🔑 Gitleaks (Secrets)

No 🔑 Gitleaks (Secrets) findings summary was produced.

📦 OSV (Dependencies)

No 📦 OSV (Dependencies) findings summary was produced.

---

Generated by Argus

---

Generated by Argus