chore(deps): bump adm-zip and @module-federation/enhanced in /clients/ui/frontend

[dependabot]

Bumps adm-zip to 0.6.1 and updates ancestor dependency @module-federation/enhanced. These dependencies need to be updated together.

Updates adm-zip from 0.6.0 to 0.6.1

Release notes

Sourced from adm-zip's releases.

v0.6.1

Full Changelog: cthackers/adm-zip@v0.6.0...v0.6.1

• Updated dev dependencies
• Fixed uncaught crash in async decompression on malformed DEFLATE data
• Fixed addLocalFolder following symlinks out of the archived folder
• Stripped setuid/setgid/sticky bits from extracted file permissions
• Enforced the decompression size cap on the async path and for size 0
• Rejected archives with duplicate entry names
• Blocked extraction from writing through symlinks inside the target
• Routed malformed-header parse errors through the async callback
• Rejected zip entries whose declared data extent runs past the buffer
• Fixed addLocalFolderPromise hanging on empty folders and swallowing errors
• Fixed addLocalFolderAsync2 mangling local paths on Windows

Commits

• cb2cf9b Fixed addLocalFolderAsync2 mangling local paths on Windows
• 54902b6 Fixed addLocalFolderPromise hanging on empty folders and swallowing errors
• 73131bd Fixed CI
• 758898d Rejected zip entries whose declared data extent runs past the buffer
• 74b6e9f Routed malformed-header parse errors through the async callback
• eaa35fa Blocked extraction from writing through symlinks inside the target
• 1e015e3 Increment version
• 05101d4 Rejected archives with duplicate entry names
• 4916006 Enforced the decompression size cap on the async path and for size 0
• 6a63c33 Stripped setuid/setgid/sticky bits from extracted file permissions
• Additional commits viewable in compare view

Updates @module-federation/enhanced from 2.8.2 to 2.9.2

Release notes

Sourced from @​module-federation/enhanced's releases.

Release v2.9.2

What's Changed

Bug Fixes 🐞

• fix(bridge-react): deduplicate lazy component loading by @​2heal1 in module-federation/core#5092
• fix(runtime-core): import ResourceLoadContext in the remote handler by @​ScriptedAlchemy in module-federation/core#5114
• fix(enhanced): report a missing expose as a build error instead of exiting by @​ScriptedAlchemy in module-federation/core#5117
• fix(enhanced): wait for addEntry in SharedContainerPlugin make by @​ScriptedAlchemy in module-federation/core#5122
• fix(enhanced): restore missing expose diagnostics by @​ScriptedAlchemy in module-federation/core#5146
• fix(esbuild): resolve paths from absWorkingDir instead of process.cwd() by @​ScriptedAlchemy in module-federation/core#5148
• fix(deps): upgrade undici to 7.29.1 by @​ScriptedAlchemy in module-federation/core#5150

Document 📖

• docs(skills): add sokra-mode skill for webpack plugin architecture by @​ScriptedAlchemy in module-federation/core#5113

Other Changes

• chore: release v2.9.1 by @​2heal1 in module-federation/core#5108
• chore(deps): upgrades adm-zip to 0.6.1 by @​deiga in module-federation/core#5103
• chore(deps-dev): bump eslint-plugin-import from 2.31.0 to 2.32.0 by @​dependabot[bot] in module-federation/core#5017
• chore(deps-dev): bump eslint-plugin-prettier from 5.2.1 to 5.5.6 by @​dependabot[bot] in module-federation/core#5020
• chore(deps): bump react-router-dom from 6.30.3 to 6.30.6 in /apps/router-demo/router-remote4-2004 by @​dependabot[bot] in module-federation/core#5041
• chore(deps): bump hono from 4.13.1 to 4.13.5 by @​dependabot[bot] in module-federation/core#5043
• chore(deps): bump sharp from 0.35.0 to 0.35.4 by @​dependabot[bot] in module-federation/core#5057
• chore(deps-dev): bump vitest from 3.2.6 to 4.1.11 by @​dependabot[bot] in module-federation/core#5056
• chore(deps): move the repo to @​rspack/core 2 by @​ScriptedAlchemy in module-federation/core#5126

New Contributors

• @​deiga made their first contribution in module-federation/core#5103

Full Changelog: module-federation/core@v2.9.1...v2.9.2

Browser extension

Download Browser extension

For extension-capable embedded browsers. Extract the ZIP, load the directory containing manifest.json, and refresh the page.

Installation and WebMCP guide

Extension version: 2.9.2. Source commit: b78935690208c1a75ecb23969a514597543c20c1.

SHA-256: 436e021c800533808c5dd57b3587b3eacf6b67454fbb6ad9d96f9633b98d1bcc

Release v2.9.1

What's Changed

New Features 🎉

• feat(devtools): add WebMCP, browser builds and release downloads by @​2heal1 in module-federation/core#5106

... (truncated)

Changelog

Sourced from @​module-federation/enhanced's changelog.

2.9.2

Patch Changes

• 412f62e: Restore BUILD-001 logging and diagnostic context when an expose cannot resolve. Webpack still reports the build error, and container.get() rejects the missing expose.
• c130946: An exposed module that fails to resolve no longer exits the Node process during code generation. The build finishes with webpack's "Module not found" error in compilation.errors, and the container's get() for that expose throws MODULE_NOT_FOUND, as in upstream webpack. Watch mode and dev servers keep running.
• 923b55d: Fix the tree-shaking shared entry build finishing its make phase before the shared entry module tree was built. Large shared packages with a filesystem cache could crash in createModuleAssets or emit a fallback bundle with missing modules, and an entry error was thrown instead of reported.
• Updated dependencies [000f3fa]
• Updated dependencies [7f0ac8b]
  • @​module-federation/dts-plugin@​2.9.2
  • @​module-federation/cli@​2.9.2
  • @​module-federation/manifest@​2.9.2
  • @​module-federation/rspack@​2.9.2
  • @​module-federation/runtime-tools@​2.9.2
  • @​module-federation/webpack-bundler-runtime@​2.9.2
  • @​module-federation/inject-external-runtime-core-plugin@​2.9.2
  • @​module-federation/sdk@​2.9.2
  • @​module-federation/managers@​2.9.2
  • @​module-federation/bridge-react-webpack-plugin@​2.9.2
  • @​module-federation/error-codes@​2.9.2

2.9.1

Patch Changes

• Updated dependencies [796d6ad]
  • @​module-federation/dts-plugin@​2.9.1
  • @​module-federation/cli@​2.9.1
  • @​module-federation/manifest@​2.9.1
  • @​module-federation/rspack@​2.9.1
  • @​module-federation/runtime-tools@​2.9.1
  • @​module-federation/webpack-bundler-runtime@​2.9.1
  • @​module-federation/inject-external-runtime-core-plugin@​2.9.1
  • @​module-federation/sdk@​2.9.1
  • @​module-federation/managers@​2.9.1
  • @​module-federation/bridge-react-webpack-plugin@​2.9.1
  • @​module-federation/error-codes@​2.9.1

2.9.0

Patch Changes

• Updated dependencies [df8b40f]
  • @​module-federation/webpack-bundler-runtime@​2.9.0
  • @​module-federation/dts-plugin@​2.9.0
  • @​module-federation/runtime-tools@​2.9.0
  • @​module-federation/rspack@​2.9.0
  • @​module-federation/inject-external-runtime-core-plugin@​2.9.0
  • @​module-federation/sdk@​2.9.0
  • @​module-federation/managers@​2.9.0

... (truncated)

Commits

• b789356 chore: release v2.9.2
• 412f62e fix(enhanced): restore missing expose diagnostics (#5146)
• 923b55d fix(enhanced): wait for addEntry in SharedContainerPlugin make (#5122)
• c130946 fix(enhanced): report a missing expose as a build error instead of exiting (#...
• 07a2157 chore: release v2.9.1 (#5108)
• dc7be59 Release v2.9.0 (#5003)
• 51ae6c3 chore: remove dead code and stale commented blocks (#4985)
• 2120d66 refactor: reuse normalizeSharedOptions and shared createBundlerLogger (#4987)
• 219315c chore(deps): bump nanoid from 5.1.6 to 5.1.16 in /packages/enhanced/test/conf...
• b022032 Release v2.8.2 (#4967)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[google-oss-prow]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign ederign for approval. For more information see the Kubernetes Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• clients/ui/OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment