[dependabot]

Bumps the production-dependencies group with 2 updates in the /apps/browser-extension directory: i18next and tldts.

Updates i18next from 26.5.2 to 26.5.4

Release notes

Sourced from i18next's releases.

v26.5.4

• fix: with the default skipOnVariables: true, a {{placeholder}} inside an interpolated value now stays literal also when the same placeholder appears later in the translation. Each value was written with String.replace, which replaces the first copy of the placeholder text, and that could be the copy inside an earlier value: t('{{name}} has {{count}} items', { name: '{{count}}', count: 5 }) returned '5 has {{count}} items' instead of '{{count}} has 5 items'. The value is now written at the position of the matched placeholder. Results with skipOnVariables: false are unchanged. Thanks @​nk-batman21 (#2454, reported in #1595).
• fix: with useRawValueToEscape: true, a non-string value in an unescaped {{- var}} placeholder or with escapeValue: false no longer throws val.replace is not a function; it is converted to a string like any other value.

v26.5.3

• fix(types): with the selector API, a plural key now requires count also when the call passes an explicit ns. t(($) => $.item) already failed without count, but t(($) => $.item, { ns: 'items' }) compiled, although at runtime it looks up item instead of item_one / item_other and returns the key. It now fails the same way, also with ordinal: true, defaultValue, an ns array, a key prefix and i18n.t. Calls with count, context, returnObjects: true and arrays of selectors, as well as return types, are unchanged. Thanks @​nyarthan (#2452).

Changelog

Sourced from i18next's changelog.

26.5.4

• fix: with the default skipOnVariables: true, a {{placeholder}} inside an interpolated value now stays literal also when the same placeholder appears later in the translation. Each value was written with String.replace, which replaces the first copy of the placeholder text, and that could be the copy inside an earlier value: t('{{name}} has {{count}} items', { name: '{{count}}', count: 5 }) returned '5 has {{count}} items' instead of '{{count}} has 5 items'. The value is now written at the position of the matched placeholder. Results with skipOnVariables: false are unchanged. Thanks @​nk-batman21 (#2454, reported in #1595).
• fix: with useRawValueToEscape: true, a non-string value in an unescaped {{- var}} placeholder or with escapeValue: false no longer throws val.replace is not a function; it is converted to a string like any other value.

26.5.3

• fix(types): with the selector API, a plural key now requires count also when the call passes an explicit ns. t(($) => $.item) already failed without count, but t(($) => $.item, { ns: 'items' }) compiled, although at runtime it looks up item instead of item_one / item_other and returns the key. It now fails the same way, also with ordinal: true, defaultValue, an ns array, a key prefix and i18n.t. Calls with count, context, returnObjects: true and arrays of selectors, as well as return types, are unchanged. Thanks @​nyarthan (#2452).

Commits

• aadd75b 26.5.4
• a43c432 build
• 18fe95b changelog for 26.5.4
• 2aed559 fix: stringify raw interpolation values before inserting them
• 8994f03 fix: replace the matched placeholder, not an earlier copy inside a value (#2454)
• 3ae8f7c test: replace deprecated vitest toBeCalled* matchers (#2453)
• f7d9593 26.5.3
• a19e0f9 changelog for 26.5.3
• 124d04e fix(types): require count for explicit-ns plural selectors (#2452)
• See full diff in compare view

Updates tldts from 7.4.18 to 7.4.19

Release notes

Sourced from tldts's releases.

v7.4.19

📜 Update Public Suffix List

• tldts-experimental, tldts
  • Update upstream public suffix list #2718 (@​remusao)

🔩 Dependencies

• tldts-experimental
  • Bump typescript-eslint from 8.70.1 to 8.71.0 #2698 (@​dependabot[bot] @​remusao)

Authors: 2

• @​dependabot[bot]
• Rémi (@​remusao)

Changelog

Sourced from tldts's changelog.

v7.4.19 (Tue Oct 20 2026)

📜 Update Public Suffix List

• tldts-experimental, tldts
  • Update upstream public suffix list #2718 (@​remusao)

🔩 Dependencies

• tldts-experimental
  • Bump typescript-eslint from 8.70.1 to 8.71.0 #2698 (@​dependabot[bot] @​remusao)

Authors: 2

• @​dependabot[bot]
• Rémi (@​remusao)

---

v7.4.17 (Wed Oct 07 2026)

📜 Update Public Suffix List

• tldts-experimental, tldts-icann, tldts
  • Update upstream public suffix list #2708 (@​remusao)

🔩 Dependencies

• Bump mocha from 12.0.2 to 12.0.3 #2700 (@​dependabot[bot])
• Bump @​types/node from 26.6.2 to 26.6.4 #2701 (@​dependabot[bot])
• Bump globals from 17.12.0 to 17.13.0 #2702 (@​dependabot[bot])
• Bump chai from 6.2.2 to 6.3.0 #2703 (@​dependabot[bot])
• Bump rollup from 4.63.5 to 4.64.0 #2704 (@​dependabot[bot])
• Bump eslint from 10.11.0 to 10.12.0 #2705 (@​dependabot[bot])
• Bump postcss-selector-parser from 7.1.5 to 7.1.6 #2707 (@​dependabot[bot])
• Bump serialize-javascript from 7.1.1 to 7.1.2 #2706 (@​dependabot[bot])
• Bump ip-address from 10.4.0 to 10.7.2 #2697 (@​dependabot[bot])
• Bump prettier from 3.9.8 to 3.9.9 #2692 (@​dependabot[bot])
• Bump rollup-plugin-sourcemaps2 from 0.5.8 to 0.5.9 #2693 (@​dependabot[bot])
• Bump rollup from 4.63.4 to 4.63.5 #2694 (@​dependabot[bot])

Authors: 2

• @​dependabot[bot]
• Rémi (@​remusao)

---

v7.4.16 (Sun Sep 27 2026)

... (truncated)

Commits

• 4ecabd1 Bump version to: v7.4.19 [skip ci]
• 16329e8 Update CHANGELOG.md [skip ci]
• 9230c1c Update upstream public suffix list (#2718)
• 1073d06 Bump typescript-eslint from 8.70.1 to 8.71.0 (#2698)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated
header-tweaker	Skipped		Oct 24, 2026 10:16am UTC

[mkappelhof]

@dependabot rebase

[dependabot]

Looks like this PR is already up-to-date with master! If you'd still like to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

[mkappelhof]

@dependabot rebase

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.