Skip to content

Bump psl from 1.9.0 to 1.15.0#17535

Merged
charlesBochet merged 1 commit intomainfrom
dependabot/npm_and_yarn/psl-1.15.0
Jan 29, 2026
Merged

Bump psl from 1.9.0 to 1.15.0#17535
charlesBochet merged 1 commit intomainfrom
dependabot/npm_and_yarn/psl-1.15.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Jan 29, 2026

Bumps psl from 1.9.0 to 1.15.0.

Release notes

Sourced from psl's releases.

v1.15.0

✨ Highlights

🆙 Updates public suffix list

Updates rules to up to publicsuffix/list#70df5fb (2 Dic 2024).

Changelog

  • 67e21de chore(dist): Updates dist files
  • 4e073c0 doc(readme): Fix CDN URLs in readme
  • a3eb7aa refactor(index): Replaces var with let/const and cleans up style. Closes #329
  • 4e1bba4 chore(dist): Updates rules and dist files
  • 9d1afc0 chore(deps): Updates dev dependencies
  • 0053742 doc(security): Adds security policy
  • b7d4290 chore(funding): Adds funding URL to package.json
  • 81d2864 chore(funding): Create FUNDING.yml

Full Changelog: lupomontero/psl@v1.14.0...v1.15.0

v1.14.0

✨ Highlights

⚡ Over 100x performance improvement

This release finally includes performance improvements originally proposed by @​gugu in #301 and #302, which were finally added in #334 in collaboration with @​lupomontero and @​mfdebian.

The change basically switches from an Array to a Map to store the rules (the parsed public suffic list) indexed by punySuffix so we no longer need to iterate over thousands of items to find a match every time.

🔧 Allow underscores in domain fragments

Underscores (_), aka low dashes, are now allowed in domain names. This had been raised a few times in issues like #26 and #185 and fixes had been proposed by @​taoyuan in #46 (the one that got merged) and @​tasinet in #286.

🆙 Updates public suffix list

Updates rules to up to publicsuffix/list#03c6a36 (28 Nov 2024).

New Contributors

Changelog

  • 06d9f02 chore(dist): Updates dist files
  • publicsuffix/list#03
  • 57214ec chore(deps): Updates depencies
  • 18a6d33 doc(readme): Updates install info and tested Node.js versions
  • 1fd3665 chore(dist): Updates dist files
  • a096d29 chore(index): Removes unused functions internals.reverse and internals.endsWith

... (truncated)

Commits
  • 22b6478 chore(release): Bump to 1.15.0
  • 67e21de chore(dist): Updates dist files
  • 4e073c0 doc(readme): Fix CDN URLs in readme
  • a3eb7aa refactor(index): Replaces var with let/const and cleans up style
  • 4e1bba4 chore(dist): Updates rules and dist files
  • 9d1afc0 chore(deps): Updates dev dependencies
  • 0053742 doc(security): Adds security policy
  • b7d4290 chore(funding): Adds funding URL to package.json
  • 81d2864 chore(funding): Create FUNDING.yml
  • 168a5a1 chore(release): Bump to 1.14.0
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [psl](https://github.com/lupomontero/psl) from 1.9.0 to 1.15.0.
- [Release notes](https://github.com/lupomontero/psl/releases)
- [Commits](lupomontero/psl@v1.9.0...v1.15.0)

---
updated-dependencies:
- dependency-name: psl
  dependency-version: 1.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jan 29, 2026
@greptile-apps
Copy link
Copy Markdown
Contributor

greptile-apps bot commented Jan 29, 2026

No reviewable files after applying ignore patterns.

Copy link
Copy Markdown
Contributor

@cubic-dev-ai cubic-dev-ai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 1 file

@socket-security
Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedpsl@​1.9.0 ⏵ 1.15.010010010080100

View full report

@charlesBochet charlesBochet merged commit 9ee6917 into main Jan 29, 2026
67 checks passed
@charlesBochet charlesBochet deleted the dependabot/npm_and_yarn/psl-1.15.0 branch January 29, 2026 09:00
@twenty-eng-sync
Copy link
Copy Markdown

Hey @charlesBochet! After you've done the QA of your Pull Request, you can mark it as done here. Thank you!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants