Skip to content

chore(deps): bump tracy/tracy from 2.11.3 to 2.11.4#27

Closed
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/composer/tracy/tracy-2.11.4
Closed

chore(deps): bump tracy/tracy from 2.11.3 to 2.11.4#27
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/composer/tracy/tracy-2.11.4

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 22, 2026

Bumps tracy/tracy from 2.11.3 to 2.11.4.

Release notes

Sourced from tracy/tracy's releases.

Released version 2.11.4

A maintenance release focused on CSP-friendly assets, mobile-friendly error pages, and a couple of handy API additions. Expect cleaner nonce handling, better behavior on phones, and a bar.js that no longer trips strict Content Security Policies.

  • script-src-elem support in Helpers::getNonce() – nonces are now also picked up from the script-src-elem CSP directive, not just script-src (#612).
  • CSP-friendly Tracy Bar – replaced the inline onload attribute in bar.js with a native addEventListener, eliminating a common CSP violation (#614).
  • FileSession::clean() – emits a warning when the session directory is not readable, making misconfigured storage easier to diagnose (#538).
  • Mobile-friendly error pages – BlueScreen and the 500 error template now include a proper viewport meta tag, so exceptions no longer render microscopically on phones (#604).
  • Improved PHPDoc descriptions and fixed PHPStan errors across the codebase.
  • open-in-editor on Windows – installer now registers the protocol via AutoLaunchProtocolsFromOrigins, suppressing the browser's "Open external app?" confirmation prompt (#573).
Commits
  • bbd4fa3 Released version 2.11.4
  • 7c20ebc create-phar: removed compression
  • 2dd01b0 tools: open-in-editor uses AutoLaunchProtocolsFromOrigins to suppress browser...
  • 3912f3a templates: added viewport meta tag for proper mobile scaling [Closes #604]
  • cada412 Helpers::getNonce() accepts optional $attr parameter to return HTML attribute...
  • b066a39 Helpers::getNonce() also parses nonce from script-src-elem CSP directive [Clo...
  • add5b59 replaced inline onload attribute with native addEventListener in bar.js [Clos...
  • a80736b latte templates: used native compiler
  • 7d0572f moved Renderer::jsonEncode() to Helpers::jsonEncode() and replaced all json_e...
  • 9b2aa43 improved PHPDoc descriptions
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [tracy/tracy](https://github.com/nette/tracy) from 2.11.3 to 2.11.4.
- [Release notes](https://github.com/nette/tracy/releases)
- [Commits](nette/tracy@v2.11.3...v2.11.4)

---
updated-dependencies:
- dependency-name: tracy/tracy
  dependency-version: 2.11.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update php code labels Apr 22, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 4, 2026

Superseded by #30.

@dependabot dependabot Bot closed this May 4, 2026
@dependabot dependabot Bot deleted the dependabot/composer/tracy/tracy-2.11.4 branch May 4, 2026 17:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file php Pull requests that update php code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants