Merge branch 'master' into fix/jwt-verify-decode-jose

2026-07-17 09:27:02 +01:00 · 2026-07-17 09:27:02 +01:00 · 0d8b96adea
commit 0d8b96adea
parent e36c7a8c5d 9e59868b84
8 changed files with 212 additions and 128 deletions
--- a/.github/workflows/cla-close-stale.yml
+++ b/.github/workflows/cla-close-stale.yml
@ -23,7 +23,7 @@ jobs:
    runs-on: ubuntu-latest
    steps:
      - name: Close stale unsigned-CLA PRs
-        uses: actions/stale@eb5cf3af3ac0a1aa4c9c45633dd1ae542a27a899 #v10.3.0
+        uses: actions/stale@1e223db275d687790206a7acac4d1a11bd6fe629 #v10.4.0
        with:
          # ---- Guards: only act on PRs carrying the CLA label ----
          only-labels: 'awaiting cla'
--- a/.github/workflows/pull_requests.yml
+++ b/.github/workflows/pull_requests.yml
@ -61,14 +61,14 @@ jobs:

      - name: Set up Docker Buildx
        if: success()
-        uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0
+        uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0

      - name: Set up QEMU
-        uses: docker/setup-qemu-action@06116385d9baf250c9f4dcb4858b16962ea869c3 # v4.1.0
+        uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0

      - name: Production Image Build
        if: success()
        id: build-image
-        uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
+        uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
        with:
          platforms: linux/amd64,linux/arm64,linux/arm/v7
--- a/.github/workflows/releases.yml
+++ b/.github/workflows/releases.yml
@ -61,14 +61,14 @@ jobs:
          xvfb-run --server-args="-screen 0 1200x800x24" npx grunt testui

      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0
+        uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0

      - name: Set up QEMU
-        uses: docker/setup-qemu-action@06116385d9baf250c9f4dcb4858b16962ea869c3 # v4.1.0
+        uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0

      - name: Image Metadata
        id: image-metadata
-        uses: docker/metadata-action@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 # v6.1.0
+        uses: docker/metadata-action@dc802804100637a589fabce1cb79ff13a1411302 # v6.2.0
        with:
          images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
          tags: |
@ -77,14 +77,14 @@ jobs:
            type=semver,pattern={{version}}

      - name: Log in to GHCR
-        uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0
+        uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0
        with:
          registry: ${{ env.REGISTRY }}
          username: ${{ env.REGISTRY_USER }}
          password: ${{ env.REGISTRY_PASSWORD }}

      - name: Publish to GHCR
-        uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
+        uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
        with:
          context: .
          push: true
--- a/package-lock.json
+++ b/package-lock.json
@ -21,7 +21,7 @@
        "assert": "^2.1.0",
        "avsc": "^5.7.9",
        "bcryptjs": "^3.0.3",
-        "bignumber.js": "^11.1.4",
+        "bignumber.js": "^11.1.5",
        "blakejs": "^1.2.1",
        "bootstrap": "4.6.2",
        "bootstrap-colorpicker": "^3.4.0",
@ -72,7 +72,7 @@
        "loglevel-message-prefix": "^3.0.0",
        "lz-string": "^1.5.0",
        "lz4js": "^0.2.0",
-        "markdown-it": "^14.2.0",
+        "markdown-it": "^14.3.0",
        "moment": "^2.30.1",
        "moment-timezone": "^0.6.2",
        "ngeohash": "^0.6.3",
@ -86,7 +86,7 @@
        "path": "^0.12.7",
        "popper.js": "^1.16.1",
        "process": "^0.11.10",
-        "protobufjs": "^8.6.5",
+        "protobufjs": "^8.7.0",
        "punycode.js": "^2.3.1",
        "qr-image": "^3.2.0",
        "reflect-metadata": "^0.2.2",
@ -118,13 +118,13 @@
        "@codemirror/commands": "^6.10.4",
        "@codemirror/language": "^6.12.4",
        "@codemirror/search": "^6.7.1",
-        "@codemirror/state": "^6.5.4",
-        "@codemirror/view": "^6.43.4",
+        "@codemirror/state": "^6.7.1",
+        "@codemirror/view": "^6.43.6",
        "@puppeteer/browsers": "3.0.6",
        "autoprefixer": "^10.5.2",
        "babel-loader": "^10.1.1",
        "base64-loader": "^1.0.0",
-        "chromedriver": "^148.0.4",
+        "chromedriver": "^150.0.3",
        "cli-progress": "^3.12.0",
        "colors": "^1.4.0",
        "compression-webpack-plugin": "^12.0.0",
@ -157,10 +157,10 @@
        "postcss-loader": "^8.2.1",
        "prompt": "^1.3.0",
        "sitemap": "^9.0.1",
-        "terser": "^5.48.0",
-        "webpack": "^5.108.3",
+        "terser": "^5.49.0",
+        "webpack": "^5.108.4",
        "webpack-bundle-analyzer": "^5.3.0",
-        "webpack-dev-server": "^5.2.5",
+        "webpack-dev-server": "^5.2.6",
        "webpack-node-externals": "^3.0.0",
        "worker-loader": "^3.0.8"
      },
@ -1889,9 +1889,9 @@
      }
    },
    "node_modules/@codemirror/state": {
-      "version": "6.7.0",
-      "resolved": "https://registry.npmjs.org/@codemirror/state/-/state-6.7.0.tgz",
-      "integrity": "sha512-Zbl9NyscLMZkfXPQnNAIIAFftidrA1UbcJEIMp24C0Bukc2I5T8wJS0wsXYsnDOqCFJUeJ1BITGNs5CqPDSmSg==",
+      "version": "6.7.1",
+      "resolved": "https://registry.npmjs.org/@codemirror/state/-/state-6.7.1.tgz",
+      "integrity": "sha512-9QzNDgE4EYDnAHfrTlR2lwiPciiOymLtwKK+8yHQzCc7GXhAP9xdEbEJFy2IWB1j9UGUl9BsgMmTo/ImA02T7A==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
@ -1899,9 +1899,9 @@
      }
    },
    "node_modules/@codemirror/view": {
-      "version": "6.43.4",
-      "resolved": "https://registry.npmjs.org/@codemirror/view/-/view-6.43.4.tgz",
-      "integrity": "sha512-YImu23iyKfncJzT7sRy+rEqEhSc8RhOHqDxwy4WzXRKJwYm6iwf/9OJk5ctCAdZ6yi2ZqaGEvmf55fSVqMDrgg==",
+      "version": "6.43.6",
+      "resolved": "https://registry.npmjs.org/@codemirror/view/-/view-6.43.6.tgz",
+      "integrity": "sha512-EVunGSYN1wz1p75WY1s3Xg7t3i8Yol0kGZGizNdX9BUFgMFILYVe8/u6EVpo7Ff5PwbZuILb4QAq7IZoKzIEQA==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
@ -5129,9 +5129,9 @@
      }
    },
    "node_modules/adm-zip": {
-      "version": "0.5.17",
-      "resolved": "https://registry.npmjs.org/adm-zip/-/adm-zip-0.5.17.tgz",
-      "integrity": "sha512-+Ut8d9LLqwEvHHJl1+PIHqoyDxFgVN847JTVM3Izi3xHDWPE4UtzzXysMZQs64DMcrJfBeS/uoEP4AD3HQHnQQ==",
+      "version": "0.5.18",
+      "resolved": "https://registry.npmjs.org/adm-zip/-/adm-zip-0.5.18.tgz",
+      "integrity": "sha512-ufJnssQGbxzLNS1Ho9bCtX4rQKCCvoVuDLHoJyc3F9dOGDB4BkWs2Ci0kv53lqocAEQ/Cbi+I2XCsNYGqVYqng==",
      "dev": true,
      "license": "MIT",
      "engines": {
@ -5700,17 +5700,45 @@
      }
    },
    "node_modules/axios": {
-      "version": "1.16.0",
-      "resolved": "https://registry.npmjs.org/axios/-/axios-1.16.0.tgz",
-      "integrity": "sha512-6hp5CwvTPlN2A31g5dxnwAX0orzM7pmCRDLnZSX772mv8WDqICwFjowHuPs04Mc8deIld1+ejhtaMn5vp6b+1w==",
+      "version": "1.18.1",
+      "resolved": "https://registry.npmjs.org/axios/-/axios-1.18.1.tgz",
+      "integrity": "sha512-3nTvFlvpn9Zu/RkHUqtc7/+al4UpRW5az71ap5zccp6e8RAYEzhMTecX8Dz1wWDYrPpUoB1HAQEGEAEvUr7S9g==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
        "follow-redirects": "^1.16.0",
        "form-data": "^4.0.5",
+        "https-proxy-agent": "^5.0.1",
        "proxy-from-env": "^2.1.0"
      }
    },
+    "node_modules/axios/node_modules/agent-base": {
+      "version": "6.0.2",
+      "resolved": "https://registry.npmjs.org/agent-base/-/agent-base-6.0.2.tgz",
+      "integrity": "sha512-RZNwNclF7+MS/8bDg70amg32dyeZGZxiDuQmZxKLAlQjr3jGyLx+4Kkk58UO7D2QdgFIQCovuSuZESne6RG6XQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "debug": "4"
+      },
+      "engines": {
+        "node": ">= 6.0.0"
+      }
+    },
+    "node_modules/axios/node_modules/https-proxy-agent": {
+      "version": "5.0.1",
+      "resolved": "https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-5.0.1.tgz",
+      "integrity": "sha512-dFcAjpTQFgoLMzC2VwU+C/CbS7uRL0lWmxDITmqm7C+7F0Odmj6s9l6alZc6AELXhrnggM2CeWSXHGOdX2YtwA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "agent-base": "6",
+        "debug": "4"
+      },
+      "engines": {
+        "node": ">= 6"
+      }
+    },
    "node_modules/babel-loader": {
      "version": "10.1.1",
      "resolved": "https://registry.npmjs.org/babel-loader/-/babel-loader-10.1.1.tgz",
@ -5883,9 +5911,9 @@
      }
    },
    "node_modules/bignumber.js": {
-      "version": "11.1.4",
-      "resolved": "https://registry.npmjs.org/bignumber.js/-/bignumber.js-11.1.4.tgz",
-      "integrity": "sha512-AJ9dSeaUGj2xu7tEwmdqb51dqdb633xo4njI9K8ZFfcLrNr0XN8/EPkkZUNaF9fkCblGt2zVwZymesUdGynEkQ==",
+      "version": "11.1.5",
+      "resolved": "https://registry.npmjs.org/bignumber.js/-/bignumber.js-11.1.5.tgz",
+      "integrity": "sha512-6WmzCNtUnfKpbozq+hOgWaZMMzORmYBwF1xZScyoIX3QRYWeKTtxxwDOW5tIz7C9BdjkIYHGTcelCLkXg0mndw==",
      "license": "MIT"
    },
    "node_modules/binary-extensions": {
@ -6699,20 +6727,20 @@
      }
    },
    "node_modules/chromedriver": {
-      "version": "148.0.4",
-      "resolved": "https://registry.npmjs.org/chromedriver/-/chromedriver-148.0.4.tgz",
-      "integrity": "sha512-3UyptFDG4YF1Pyv3fzn95s1CN4K3zCpHSmE6g+6J4f2u9KxxOYzrwN2GApVyM2z02hlbSqzo9Ajn2hMi7LnvCw==",
+      "version": "150.0.3",
+      "resolved": "https://registry.npmjs.org/chromedriver/-/chromedriver-150.0.3.tgz",
+      "integrity": "sha512-i2L979d6YDTVVUDUPWXz75HGKKVhjNXo74gLiy/f8Adb5zHLU+h3ABdg8RRoiegtjJB0m9vUEiPTdecD0ifa3w==",
      "dev": true,
      "hasInstallScript": true,
      "license": "Apache-2.0",
      "dependencies": {
        "@testim/chrome-version": "^1.1.4",
-        "adm-zip": "^0.5.17",
-        "axios": "^1.16.0",
-        "compare-versions": "^6.1.0",
-        "proxy-agent": "^8.0.1",
-        "proxy-from-env": "^2.0.0",
-        "tcp-port-used": "^1.0.2"
+        "adm-zip": "^0.5.18",
+        "axios": "^1.18.1",
+        "compare-versions": "^6.1.1",
+        "proxy-agent": "^8.0.2",
+        "proxy-from-env": "^2.1.0",
+        "tcp-port-used": "^1.0.3"
      },
      "bin": {
        "chromedriver": "bin/chromedriver"
@ -10162,13 +10190,13 @@
      }
    },
    "node_modules/get-uri": {
-      "version": "8.0.0",
-      "resolved": "https://registry.npmjs.org/get-uri/-/get-uri-8.0.0.tgz",
-      "integrity": "sha512-CqtZlMKvfJeY0Zxv8wazDwXmSKmnMnsmNy8j8+wudi8EyG/pMUB1NqHc+Tv1QaNtpYsK9nOYjb7r7Ufu32RPSw==",
+      "version": "8.0.1",
+      "resolved": "https://registry.npmjs.org/get-uri/-/get-uri-8.0.1.tgz",
+      "integrity": "sha512-/5N/P4Lrh0p/mDwlDRi7Y1+P2o/OyzZI3l6Iz1Ov6XXwwm1y3RlZLuo3gVgML99djrEDtV980bBxSuOeHLk8ww==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
-        "basic-ftp": "^5.2.0",
+        "basic-ftp": "^5.3.1",
        "data-uri-to-buffer": "8.0.0",
        "debug": "^4.3.4"
      },
@ -11574,13 +11602,13 @@
      }
    },
    "node_modules/ip-regex": {
-      "version": "4.3.0",
-      "resolved": "https://registry.npmjs.org/ip-regex/-/ip-regex-4.3.0.tgz",
-      "integrity": "sha512-B9ZWJxHHOHUhUjCPrMpLD4xEq35bUTClHM1S6CBU5ixQnkZmwipwgc96vAd7AAGM9TGHvJR+Uss+/Ak6UphK+Q==",
+      "version": "2.1.0",
+      "resolved": "https://registry.npmjs.org/ip-regex/-/ip-regex-2.1.0.tgz",
+      "integrity": "sha512-58yWmlHpp7VYfcdTwMTvwMmqx/Elfxjd9RXTDyMsbL7lLWmhMylLEqiYVLKuLzOZqVgiWXD9MfR62Vv89VRxkw==",
      "dev": true,
      "license": "MIT",
      "engines": {
-        "node": ">=8"
+        "node": ">=4"
      }
    },
    "node_modules/ipaddr.js": {
@ -12192,15 +12220,15 @@
      }
    },
    "node_modules/is2": {
-      "version": "2.0.9",
-      "resolved": "https://registry.npmjs.org/is2/-/is2-2.0.9.tgz",
-      "integrity": "sha512-rZkHeBn9Zzq52sd9IUIV3a5mfwBY+o2HePMh0wkGBM4z4qjvy2GwVxQ6nNXSfw6MmVP6gf1QIlWjiOavhM3x5g==",
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/is2/-/is2-2.0.1.tgz",
+      "integrity": "sha512-+WaJvnaA7aJySz2q/8sLjMb2Mw14KTplHmSwcSpZ/fWJPkUmqw3YTzSWbPJ7OAwRvdYTWF2Wg+yYJ1AdP5Z8CA==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
        "deep-is": "^0.1.3",
-        "ip-regex": "^4.1.0",
-        "is-url": "^1.2.4"
+        "ip-regex": "^2.1.0",
+        "is-url": "^1.2.2"
      },
      "engines": {
        "node": ">=v0.10.0"
@ -12716,9 +12744,9 @@
      "license": "MIT"
    },
    "node_modules/linkify-it": {
-      "version": "5.0.1",
-      "resolved": "https://registry.npmjs.org/linkify-it/-/linkify-it-5.0.1.tgz",
-      "integrity": "sha512-wVoTjP4Q6R0NW5hiZkVJaFZPWgtXfoGF+6LucL3/FtiNjmcHhYjEr5f1Kqjirc1nBW07J/ZuRFumqr2oqccEWg==",
+      "version": "5.0.2",
+      "resolved": "https://registry.npmjs.org/linkify-it/-/linkify-it-5.0.2.tgz",
+      "integrity": "sha512-ONTm2jCMAVZjgQa/Fy1kScXsuOoF5NPTsoFBdE1KVIZ2vAh/r9+Bqo+0jINCBYnavTPQZz38QzFTme79ENoN3Q==",
      "funding": [
        {
          "type": "github",
@ -13010,9 +13038,9 @@
      }
    },
    "node_modules/markdown-it": {
-      "version": "14.2.0",
-      "resolved": "https://registry.npmjs.org/markdown-it/-/markdown-it-14.2.0.tgz",
-      "integrity": "sha512-1TGiQiJVRQ3NPmZH6sx5Cfnmg6GQm9jvC1ch4TK511NjSJvjzKLzn5pPfZRNZkRPZP0HqCioSndqH8v2nRaWVQ==",
+      "version": "14.3.0",
+      "resolved": "https://registry.npmjs.org/markdown-it/-/markdown-it-14.3.0.tgz",
+      "integrity": "sha512-RCEsPjR+sr0x+AuYp601tKTkgFG4YEPLCzHST3cQ/fhlJkqAkz1L2/Qbp1j9qw5SBwQHFBoW8+hoN5xssOF0Tw==",
      "funding": [
        {
          "type": "github",
@ -13026,8 +13054,8 @@
      "license": "MIT",
      "dependencies": {
        "argparse": "^2.0.1",
-        "entities": "^4.4.0",
-        "linkify-it": "^5.0.1",
+        "entities": "^4.5.0",
+        "linkify-it": "^5.0.2",
        "mdurl": "^2.0.0",
        "punycode.js": "^2.3.1",
        "uc.micro": "^2.1.0"
@ -14359,20 +14387,20 @@
      }
    },
    "node_modules/pac-proxy-agent": {
-      "version": "9.0.1",
-      "resolved": "https://registry.npmjs.org/pac-proxy-agent/-/pac-proxy-agent-9.0.1.tgz",
-      "integrity": "sha512-3ZOSpLboOlpW4yp8Cuv21KlTULRqyJ5Uuad3wXpSKFrxdNgcHEyoa22GRaZ2UlgCVuR6z+5BiavtYVvbajL/Yw==",
+      "version": "9.1.0",
+      "resolved": "https://registry.npmjs.org/pac-proxy-agent/-/pac-proxy-agent-9.1.0.tgz",
+      "integrity": "sha512-1aU+1mpj3DrQPfo3gh+3Gap3G5x+axnMx1P/y0ZF2ch7kb2meyOCAH8K2k9d27ROsTE7TnAerzxqF9aon2jqnA==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
        "agent-base": "9.0.0",
        "debug": "^4.3.4",
-        "get-uri": "8.0.0",
-        "http-proxy-agent": "9.0.0",
-        "https-proxy-agent": "9.0.0",
+        "get-uri": "8.0.1",
+        "http-proxy-agent": "9.1.0",
+        "https-proxy-agent": "9.1.0",
        "pac-resolver": "9.0.1",
        "quickjs-wasi": "^2.2.0",
-        "socks-proxy-agent": "10.0.0"
+        "socks-proxy-agent": "10.1.0"
      },
      "engines": {
        "node": ">= 20"
@ -14389,28 +14417,30 @@
      }
    },
    "node_modules/pac-proxy-agent/node_modules/http-proxy-agent": {
-      "version": "9.0.0",
-      "resolved": "https://registry.npmjs.org/http-proxy-agent/-/http-proxy-agent-9.0.0.tgz",
-      "integrity": "sha512-FcF8VhXYLQcxWCnt/cCpT2apKsRDUGeVEeMqGu4HSTu29U8Yw0TLOjdYIlDsYk3IkUh+taX4IDWpPcCqKDhCjA==",
+      "version": "9.1.0",
+      "resolved": "https://registry.npmjs.org/http-proxy-agent/-/http-proxy-agent-9.1.0.tgz",
+      "integrity": "sha512-2NxoveTT58mjYT4n3RPTEfCZGLMbidoO8XEieXfpSYxu+PQJ1qpx4ypwH6N+uF9twBPIvRRgvkvW5HUTYWENig==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
        "agent-base": "9.0.0",
-        "debug": "^4.3.4"
+        "debug": "^4.3.4",
+        "proxy-agent-negotiate": "1.1.0"
      },
      "engines": {
        "node": ">= 20"
      }
    },
    "node_modules/pac-proxy-agent/node_modules/https-proxy-agent": {
-      "version": "9.0.0",
-      "resolved": "https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-9.0.0.tgz",
-      "integrity": "sha512-/MVmHp58WkOypgFhCLk4fzpPcFQvTJ/e6LBI7irpIO2HfxUbpmYoHF+KzipzJpxxzJu7aJNWQ0xojJ/dzV2G5g==",
+      "version": "9.1.0",
+      "resolved": "https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-9.1.0.tgz",
+      "integrity": "sha512-ag87y7cJJ9/3+GxFr8Oy4O5faDsGRGnBGsJj/YjOSsSx/5eadKLYTMPlzuR6obgoCDDm0abAAZitXXQkMOPSpA==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
        "agent-base": "9.0.0",
-        "debug": "^4.3.4"
+        "debug": "^4.3.4",
+        "proxy-agent-negotiate": "1.1.0"
      },
      "engines": {
        "node": ">= 20"
@ -15168,9 +15198,9 @@
      "license": "MIT"
    },
    "node_modules/protobufjs": {
-      "version": "8.6.5",
-      "resolved": "https://registry.npmjs.org/protobufjs/-/protobufjs-8.6.5.tgz",
-      "integrity": "sha512-zeE5LPpencAGXvsxyOYmEgJhxzHY8IsmPAFzstZVhDSVT8QH03q6gMZwZRaQGApevZbAL6u28ugs4CC+YKB2jQ==",
+      "version": "8.7.0",
+      "resolved": "https://registry.npmjs.org/protobufjs/-/protobufjs-8.7.0.tgz",
+      "integrity": "sha512-uu52JNxLh3vsL7tXU/h0gDaywufvuUCTbGSi0NKQKBZ2ZopkmrWQJSQO/EFqzu/5YhiwgVM8rq/a/iVpx4eZ0g==",
      "license": "BSD-3-Clause",
      "dependencies": {
        "long": "^5.3.2"
@ -15204,25 +15234,43 @@
      }
    },
    "node_modules/proxy-agent": {
-      "version": "8.0.1",
-      "resolved": "https://registry.npmjs.org/proxy-agent/-/proxy-agent-8.0.1.tgz",
-      "integrity": "sha512-kccqGBqHZXR8onQhY/ganJjoO8QIKKRiFBhPOzbTZK16attzSZ/0XSmp9H7jrRxPKHjhGyx1q32lMPrJ3uLFgA==",
+      "version": "8.0.2",
+      "resolved": "https://registry.npmjs.org/proxy-agent/-/proxy-agent-8.0.2.tgz",
+      "integrity": "sha512-idLLRewuemWd7GH/BDJzGiB0dWGfT2SQs3jy6NtZtGWU9uPTTSdeC1/cdbqLwgzhfv027daGFuXX426e2Eg20A==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
        "agent-base": "9.0.0",
        "debug": "^4.3.4",
-        "http-proxy-agent": "9.0.0",
-        "https-proxy-agent": "9.0.0",
+        "http-proxy-agent": "9.1.0",
+        "https-proxy-agent": "9.1.0",
        "lru-cache": "^7.14.1",
-        "pac-proxy-agent": "9.0.1",
+        "pac-proxy-agent": "9.1.0",
        "proxy-from-env": "^2.0.0",
-        "socks-proxy-agent": "10.0.0"
+        "socks-proxy-agent": "10.1.0"
      },
      "engines": {
        "node": ">= 20"
      }
    },
+    "node_modules/proxy-agent-negotiate": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/proxy-agent-negotiate/-/proxy-agent-negotiate-1.1.0.tgz",
+      "integrity": "sha512-N8IBcM3UgCVzz2L2Lqv8DVntDnnC8/hiV4nEDUPkqq72TPUgYWjQc+bdZlBPZK9LzPAvOY//gAt0S0DApoOXWQ==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">= 20"
+      },
+      "peerDependencies": {
+        "kerberos": "^2.0.0"
+      },
+      "peerDependenciesMeta": {
+        "kerberos": {
+          "optional": true
+        }
+      }
+    },
    "node_modules/proxy-agent/node_modules/agent-base": {
      "version": "9.0.0",
      "resolved": "https://registry.npmjs.org/agent-base/-/agent-base-9.0.0.tgz",
@ -15234,28 +15282,30 @@
      }
    },
    "node_modules/proxy-agent/node_modules/http-proxy-agent": {
-      "version": "9.0.0",
-      "resolved": "https://registry.npmjs.org/http-proxy-agent/-/http-proxy-agent-9.0.0.tgz",
-      "integrity": "sha512-FcF8VhXYLQcxWCnt/cCpT2apKsRDUGeVEeMqGu4HSTu29U8Yw0TLOjdYIlDsYk3IkUh+taX4IDWpPcCqKDhCjA==",
+      "version": "9.1.0",
+      "resolved": "https://registry.npmjs.org/http-proxy-agent/-/http-proxy-agent-9.1.0.tgz",
+      "integrity": "sha512-2NxoveTT58mjYT4n3RPTEfCZGLMbidoO8XEieXfpSYxu+PQJ1qpx4ypwH6N+uF9twBPIvRRgvkvW5HUTYWENig==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
        "agent-base": "9.0.0",
-        "debug": "^4.3.4"
+        "debug": "^4.3.4",
+        "proxy-agent-negotiate": "1.1.0"
      },
      "engines": {
        "node": ">= 20"
      }
    },
    "node_modules/proxy-agent/node_modules/https-proxy-agent": {
-      "version": "9.0.0",
-      "resolved": "https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-9.0.0.tgz",
-      "integrity": "sha512-/MVmHp58WkOypgFhCLk4fzpPcFQvTJ/e6LBI7irpIO2HfxUbpmYoHF+KzipzJpxxzJu7aJNWQ0xojJ/dzV2G5g==",
+      "version": "9.1.0",
+      "resolved": "https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-9.1.0.tgz",
+      "integrity": "sha512-ag87y7cJJ9/3+GxFr8Oy4O5faDsGRGnBGsJj/YjOSsSx/5eadKLYTMPlzuR6obgoCDDm0abAAZitXXQkMOPSpA==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
        "agent-base": "9.0.0",
-        "debug": "^4.3.4"
+        "debug": "^4.3.4",
+        "proxy-agent-negotiate": "1.1.0"
      },
      "engines": {
        "node": ">= 20"
@ -16700,9 +16750,9 @@
      }
    },
    "node_modules/socks-proxy-agent": {
-      "version": "10.0.0",
-      "resolved": "https://registry.npmjs.org/socks-proxy-agent/-/socks-proxy-agent-10.0.0.tgz",
-      "integrity": "sha512-pyp2YR3mNxAMu0mGLtzs4g7O3uT4/9sQOLAKcViAkaS9fJWkud7nmaf6ZREFqQEi24IPkBcjfHjXhPTUWjo3uA==",
+      "version": "10.1.0",
+      "resolved": "https://registry.npmjs.org/socks-proxy-agent/-/socks-proxy-agent-10.1.0.tgz",
+      "integrity": "sha512-WlMj/67cEJ6MDI1OcsnjuYKDNDoyPCCYZ249kuuXPiMDw9F8PXkVaQ7YWu3siTydfQ/4BEZcvGzu+aYvz7dDCQ==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
@ -17140,14 +17190,14 @@
      }
    },
    "node_modules/tcp-port-used": {
-      "version": "1.0.2",
-      "resolved": "https://registry.npmjs.org/tcp-port-used/-/tcp-port-used-1.0.2.tgz",
-      "integrity": "sha512-l7ar8lLUD3XS1V2lfoJlCBaeoaWo/2xfYt81hM7VlvR4RrMVFqfmzfhLVk40hAb368uitje5gPtBRL1m/DGvLA==",
+      "version": "1.0.3",
+      "resolved": "https://registry.npmjs.org/tcp-port-used/-/tcp-port-used-1.0.3.tgz",
+      "integrity": "sha512-4CEQ3qRJYo+mtEbJ+OoQu3dF4TDkwaO3RDVC4UzP5cpAOIUWwuwPjD7sdxDFFqsMUjsXVVYBMlg/boAaloThMA==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
        "debug": "4.3.1",
-        "is2": "^2.0.6"
+        "is2": "2.0.1"
      }
    },
    "node_modules/tcp-port-used/node_modules/debug": {
@ -17176,9 +17226,9 @@
      "license": "MIT"
    },
    "node_modules/terser": {
-      "version": "5.48.0",
-      "resolved": "https://registry.npmjs.org/terser/-/terser-5.48.0.tgz",
-      "integrity": "sha512-J/9An6vs9Us6wKRriSFXBWdRZapREHqFzdNUKk0pmu804EMR6dr6winwo7e5JDxN4xahxQsuysyYFwlwj4XN/Q==",
+      "version": "5.49.0",
+      "resolved": "https://registry.npmjs.org/terser/-/terser-5.49.0.tgz",
+      "integrity": "sha512-SNiDnXyHSrxVcIOtVbULzcTmniUiwcV7Nwdyj1twVubeTmbjoa8p69KKDpfkdoOavuM4/GRm1+ykI8qqnavHoA==",
      "dev": true,
      "license": "BSD-2-Clause",
      "dependencies": {
@ -18004,9 +18054,9 @@
      }
    },
    "node_modules/webpack": {
-      "version": "5.108.3",
-      "resolved": "https://registry.npmjs.org/webpack/-/webpack-5.108.3.tgz",
-      "integrity": "sha512-hOpaCHmQVVY66IVTjofnH14IgSdmod2aquSGHGuYig/OIdWge01Hk2Wt988DZcwXumFUT4+FvJY5N+ikl8o/ww==",
+      "version": "5.108.4",
+      "resolved": "https://registry.npmjs.org/webpack/-/webpack-5.108.4.tgz",
+      "integrity": "sha512-yur8LyJoeiWh47dErD+Ok7vlbmDsJ3UbbRPAoxbGJ54WpE2y5yVo5G/inUzujnYgw3tPmBRdn+G7PoxXaYC33w==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
@ -18131,9 +18181,9 @@
      }
    },
    "node_modules/webpack-dev-server": {
-      "version": "5.2.5",
-      "resolved": "https://registry.npmjs.org/webpack-dev-server/-/webpack-dev-server-5.2.5.tgz",
-      "integrity": "sha512-4wZtCquSuv9CKX8oybo+mqxtxZqWz47uM1Ch94lxowBztOhWCbhqvRbfC/mODOwxgV2brY+JGZpHq58/SuVFYg==",
+      "version": "5.2.6",
+      "resolved": "https://registry.npmjs.org/webpack-dev-server/-/webpack-dev-server-5.2.6.tgz",
+      "integrity": "sha512-HNLRmamRvVavZQ+avceZifmv8hmdUjg43t6MI4SqJDwFdW7RPQwH5vzGhDRZSX59SgfbeHhLnq3g+uooWo7pVw==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
@ -18155,7 +18205,7 @@
        "graceful-fs": "^4.2.6",
        "http-proxy-middleware": "^2.0.9",
        "ipaddr.js": "^2.1.0",
-        "launch-editor": "^2.6.1",
+        "launch-editor": "^2.14.1",
        "open": "^10.0.3",
        "p-retry": "^6.2.0",
        "schema-utils": "^4.2.0",
@ -18289,9 +18339,9 @@
      }
    },
    "node_modules/websocket-driver": {
-      "version": "0.7.4",
-      "resolved": "https://registry.npmjs.org/websocket-driver/-/websocket-driver-0.7.4.tgz",
-      "integrity": "sha512-b17KeDIQVjvb0ssuSDF2cYXSg2iztliJ4B9WdsuB6J952qCPKmnVq4DyW5motImXHDC1cBT/1UezrJVsKw5zjg==",
+      "version": "0.7.5",
+      "resolved": "https://registry.npmjs.org/websocket-driver/-/websocket-driver-0.7.5.tgz",
+      "integrity": "sha512-ZL2+3c7kMBdIRCMz6l8jQMHyGVxj+UL+xVk74Ombiciboca8rHa15L86B19E5oh1pL9Ii/uj54gtsIrZGMo6zA==",
      "dev": true,
      "license": "Apache-2.0",
      "dependencies": {
--- a/package.json
+++ b/package.json
@ -47,13 +47,13 @@
    "@codemirror/commands": "^6.10.4",
    "@codemirror/language": "^6.12.4",
    "@codemirror/search": "^6.7.1",
-    "@codemirror/state": "^6.5.4",
-    "@codemirror/view": "^6.43.4",
+    "@codemirror/state": "^6.7.1",
+    "@codemirror/view": "^6.43.6",
    "@puppeteer/browsers": "3.0.6",
    "autoprefixer": "^10.5.2",
    "babel-loader": "^10.1.1",
    "base64-loader": "^1.0.0",
-    "chromedriver": "^148.0.4",
+    "chromedriver": "^150.0.3",
    "cli-progress": "^3.12.0",
    "colors": "^1.4.0",
    "compression-webpack-plugin": "^12.0.0",
@ -86,10 +86,10 @@
    "postcss-loader": "^8.2.1",
    "prompt": "^1.3.0",
    "sitemap": "^9.0.1",
-    "terser": "^5.48.0",
-    "webpack": "^5.108.3",
+    "terser": "^5.49.0",
+    "webpack": "^5.108.4",
    "webpack-bundle-analyzer": "^5.3.0",
-    "webpack-dev-server": "^5.2.5",
+    "webpack-dev-server": "^5.2.6",
    "webpack-node-externals": "^3.0.0",
    "worker-loader": "^3.0.8"
  },
@ -105,7 +105,7 @@
    "assert": "^2.1.0",
    "avsc": "^5.7.9",
    "bcryptjs": "^3.0.3",
-    "bignumber.js": "^11.1.4",
+    "bignumber.js": "^11.1.5",
    "blakejs": "^1.2.1",
    "bootstrap": "4.6.2",
    "bootstrap-colorpicker": "^3.4.0",
@ -156,7 +156,7 @@
    "loglevel-message-prefix": "^3.0.0",
    "lz-string": "^1.5.0",
    "lz4js": "^0.2.0",
-    "markdown-it": "^14.2.0",
+    "markdown-it": "^14.3.0",
    "moment": "^2.30.1",
    "moment-timezone": "^0.6.2",
    "ngeohash": "^0.6.3",
@ -170,7 +170,7 @@
    "path": "^0.12.7",
    "popper.js": "^1.16.1",
    "process": "^0.11.10",
-    "protobufjs": "^8.6.5",
+    "protobufjs": "^8.7.0",
    "punycode.js": "^2.3.1",
    "qr-image": "^3.2.0",
    "reflect-metadata": "^0.2.2",
--- a/src/core/operations/ToHTMLEntity.mjs
+++ b/src/core/operations/ToHTMLEntity.mjs
@ -405,7 +405,7 @@ const byteToEntity = {
    989: "&gammad;",
    1008: "&kappav;",
    1009: "&rhov;",
-    1013: "&epsi;,",
+    1013: "&epsi;",
    1014: "&bepsi;",
    1025: "&IOcy;",
    1026: "&DJcy;",
@ -660,7 +660,7 @@ const byteToEntity = {
    8649: "&rrarr;",
    8650: "&ddarr;",
    8651: "&lrhar;",
-    8652: "&rlhar;;",
+    8652: "&rlhar;",
    8653: "&nlArr;",
    8654: "&nhArr;",
    8655: "&nrArr;",
@ -782,7 +782,7 @@ const byteToEntity = {
    8814: "&nlt;",
    8815: "&ngt;",
    8816: "&nle;",
-    8817: "&nge;;",
+    8817: "&nge;",
    8818: "&lsim;",
    8819: "&gsim;",
    8820: "&nlsim;",
--- a/tests/node/index.mjs
+++ b/tests/node/index.mjs
@ -24,6 +24,7 @@ import "./tests/Dish.mjs";
 import "./tests/NodeDish.mjs";
 import "./tests/Utils.mjs";
 import "./tests/Categories.mjs";
+import "./tests/ToHTMLEntity.mjs";
 import "./tests/lib/BigIntUtils.mjs";
 import "./tests/lib/ChartsProtocolPrototypePollution.mjs";

--- a/tests/node/tests/ToHTMLEntity.mjs
+++ b/tests/node/tests/ToHTMLEntity.mjs
@ -0,0 +1,33 @@
+import TestRegister from "../../lib/TestRegister.mjs";
+import ToHTMLEntity from "../../../src/core/operations/ToHTMLEntity.mjs";
+import it from "../assertionHandler.mjs";
+import assert from "assert";
+
+TestRegister.addApiTests([
+    it("To HTML Entity: every named entity in the table is well-formed", () => {
+        // "Convert all characters" emits an entity for every code point, so a
+        // correct table yields an unbroken stream of entity tokens. A malformed
+        // value such as "&nge;;" or "&epsi;," leaves stray characters between
+        // tokens, which the walk below flags and reports with surrounding context.
+        let input = "";
+        for (let cp = 0; cp <= 0xFFFF; cp++) {
+            if (cp >= 0xD800 && cp <= 0xDFFF) continue; // skip surrogate range
+            input += String.fromCodePoint(cp);
+        }
+        const output = new ToHTMLEntity().run(input, [true, "Named entities"]);
+
+        const tokenRe = /&#[0-9]+;|&#x[0-9a-fA-F]+;|&[A-Za-z][A-Za-z0-9]*;/y;
+        const malformed = [];
+        let pos = 0;
+        while (pos < output.length) {
+            tokenRe.lastIndex = pos;
+            if (tokenRe.exec(output)) {
+                pos = tokenRe.lastIndex;
+            } else {
+                malformed.push(output.slice(Math.max(0, pos - 12), pos + 12));
+                pos++;
+            }
+        }
+        assert.deepStrictEqual(malformed, [], `Malformed entity value(s) near: ${JSON.stringify(malformed)}`);
+    }),
+]);