chore(deps): update all dependencies

[doa-renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Update
cf (source)	1.0.0-beta.15 → 1.0.0-beta.16			patch
vectorim/element-web	v1.12.30 → v1.12.31			patch

---

Release Notes

cloudflare/cf (cf)

v1.0.0-beta.16

Compare Source

Minor Changes

• dda9acf: Generate commands with the new Forge and its WebAssembly plugin

  cf's command generator is now a Forge plugin that the native Forge binary runs.
  The command tree it produces differs from before in a few ways.

  Breaking: commands whose names came from camelCase or snake_case spec names
  are now kebab-case, like the rest of cf. For example:

  • cf accounts billing getCredits → cf accounts billing get-credits
  • cf addressing regional_hostnames list → cf addressing regional-hostnames list
  • cf analytics_engine sql query → cf analytics-engine sql query
  • cf csamScanner get → cf csam-scanner get
  • cf fieldExtractors get → cf field-extractors get
  • cf dls regional_services prefix_bindings list → cf dls regional-services prefix-bindings list

  This affects 42 commands across accounts billing, accounts subscriptions,
  addressing regional-hostnames, analytics-engine, billing profiles,
  cloudforce-one, csam-scanner, dls regional-services, field-extractors,
  managed-defense and user memberships.

  Breaking: --notification-email is no longer a flag on
  cf load-balancers pools bulk-edit or cf user load-balancers pools edit pools pools;
  pass it with --body.

  Commands also gain body flags they previously could only receive through
  --body, for example --allow-resource-types and --reject-resource-types on
  cf browser-run quick-action, the address and content flags on
  cf email-sending send, and --status on cf user memberships update and
  cf user invites respond. A few flags gain enum choices, and
  cf tunnels create --config-source no longer defaults to local.

element-hq/element-web (vectorim/element-web)

v1.12.31

Compare Source

✨ Features

• Do not allow skip device verification by default (#​35259). Contributed by @​mxandreas.
• Collection of EN string changes, Pt. 2 (#​35289). Contributed by @​dbkr.
• Show messages local echos in the new timeline (#​35269). Contributed by @​langleyd.
• Update wording of crypto stuff during sign-in (#​35239). Contributed by @​andybalaam.
• Add a Markdown viewer for .md attachments in the right panel (#​35203). Contributed by @​ZacksBot.
• Improve invite button UX in member list (#​35270). Contributed by @​florianduros.
• Collection of EN string changes, Pt.1 (#​35115). Contributed by @​dbkr.
• Show the open room in the room list before joining it (#​35207). Contributed by @​florianduros.
• Offer 'Sign out' on the verification page instead of 'Remove this device' (#​35211). Contributed by @​andybalaam.
• Move PDF viewer page controls left and zoom controls right, and show the zoom level (#​35229). Contributed by @​ZacksBot.
• Element call as a react component (#​34935). Contributed by @​toger5.
• Show but disable unusable verification buttons (#​35204). Contributed by @​andybalaam.
• Improve knocking workflow (#​35140). Contributed by @​florianduros.
• Pdf viewer zoom buttons (#​35145). Contributed by @​ZacksBot.
• Render PDFs in a usercontent iframe (#​35067). Contributed by @​ZacksBot.
• Add cross-room thread panels to Threads Activity Centre (#​32851). Contributed by @​nathanael-h.
• User status in RTE (wysiwyg) composer (#​35139). Contributed by @​dbkr.

🐛 Bug Fixes

• [Backport staging] Fix blank maps by bundling the maplibre-gl worker explicitly (#​35442). Contributed by @​RiotRobot.
• [Backport staging] Revert "Do not allow skip device verification by default (#​35259)" (#​35345). Contributed by @​RiotRobot.
• [Backport staging] Fix Debian control file Maintainer field (#​35344). Contributed by @​RiotRobot.
• Log getPickleKey() failures consistently (#​34955). Contributed by @​hughns.
• Fix message draft getting lost when a call ends (#​35261). Contributed by @​t3chguy.
• Fix clicks on pills closing the RoomView (#​35266). Contributed by @​t3chguy.
• Align own-message reactions with the bubble edge (#​35074). Contributed by @​langleyd.
• Reveal the add-reaction control when hovering anywhere on an event (#​35177). Contributed by @​langleyd.
• Accept dropped files in the right panel's chat timeline (#​35254). Contributed by @​ara4n.
• Only dismiss the incoming call toast when its own events are redacted (#​35238). Contributed by @​ara4n.
• Fix thread panel actions incorrectly triggering thread open (#​35263). Contributed by @​t3chguy.
• Fall back to origin_server_ts in call tombstone tiles without sender_ts (#​35186). Contributed by @​ara4n.
• Add no-cache header to /usercontent/ in default nginx config (#​35237). Contributed by @​t3chguy.
• Keep an incoming call ringing when a call in another room ends (#​35222). Contributed by @​ara4n.
• Keep thread reactions visible when hovering the message (#​35171). Contributed by @​langleyd.
• Stop escaping a plain text message which has no markdown in it when editing (#​34638). Contributed by @​hayaksi1.
• Stop presenting a PiP call when the widget closes it (#​35179). Contributed by @​ara4n.
• Fix edited message text being clipped when it contains a wide code block (#​35169). Contributed by @​langleyd.
• Fix spotlight alias text and notification badge in high contrast mode and deflake test (#​35037). Contributed by @​langleyd.
• Notify when you are invited to a room (#​34665). Contributed by @​hayaksi1.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.