chore: 🔨 Update dependency dtale to v3.22.0 [SECURITY]

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
dtale	3.21.0 → 3.22.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

D-Tale: Remote Code Execution through redis/shelf storage

CVE-2026-35052 / GHSA-436g-fhfc-9g5w

More information

Details

Impact

Users hosting D-Tale publicly while using a redis or shelf storage layer could be vulnerable to remote code execution allowing attackers to run malicious code on the server.

Patches

Users should upgrade to version 3.22.0.

Workarounds

There are no workarounds for versions < 3.22.0

Severity

• CVSS Score: 5.3 / 10 (Medium)
• Vector String: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N

References

• https://github.com/man-group/dtale/security/advisories/GHSA-436g-fhfc-9g5w
• https://nvd.nist.gov/vuln/detail/CVE-2026-35052
• https://github.com/advisories/GHSA-436g-fhfc-9g5w

This data is provided by the GitHub Advisory Database (CC-BY 4.0).

---

Release Notes

man-group/dtale (dtale)

v3.22.0

• Fix CWE-502: unsafe deserialization in Redis and Shelve storage backends
• Bump vulnerable transitive npm dependencies to patched versions

---

Configuration

📅 Schedule: (in timezone America/New_York)

• Branch creation
  • ""
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[semanticdiff-com]

Review changes with  

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 97.70%. Comparing base (6bed9a6) to head (1f405bb).

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #2103   +/-   ##
=======================================
  Coverage   97.70%   97.70%           
=======================================
  Files          63       63           
  Lines        6246     6246           
=======================================
  Hits         6102     6102           
  Misses        144      144           

Flag	Coverage Δ
unittests	97.70% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[stale]

This pull request has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

[renovate]

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update (>=3.17.0). You will get a PR once a newer version is released. To ignore this dependency forever, add it to the ignoreDeps array of your Renovate config.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.