Bump to 3.9.1 (#10555)

fix import helpers (#10552)

Bump to 3.9.0 (#10541)

* make link work in github itself
* fix dead link on reload or new tab
* bump to 3.9.0

feat: remove line element from scatter controller (#10439)

* feat: remove line element from scatter controller default config

* feat: move common controllers methods to helpers and add types

* feat: mark methods for scatter and line conntrollers as private

* fix: fix error when showline is true at root options and add tests

* feat: remove else inside scatter controller update

* fix: update getStartAndCountOFVisiblePoints helper code

Allow ESM files to be used in Node.js (#10479)

Allow ESM files to be used in Node.js

feat: pass some chart options to DateAdapter (#10528)

feat: pass some chart options to DateAdapter

docs: add docs for changing from time scale to logarithmic/linear scale (#10527)

Add circular prop to arc element (#10405)

* feat: add circular prop to arc element draw actions
* test: add test for arc element with circular:false prop
* feat: add circular prop to Arc element options
* docs: add decriptiption for new Polar area chart prop
* docs: fix circular prop description
* docs: add info about arc element circular prop to elements docs
* docs: move circular prop from general options to styling

Skip all borders if borderSkipped === true (#10530)

* Skip all borders if borderSkipped === true

This will allow you to skip all borders (not just one side) if you set borderSkipped to boolean true and so allow you to have a consistent legend marker even for bars without borders. Reason is that even if same colored borders are set there are artifacts that make the bar look bad and also even with inflateAmount the bars do look good when big but when only a few pixel in size they start to look bad too so this was the only way for me to make it work so legends are looking good and bars too.

* fix failing test, update docs and typings

* update typing comment

Co-authored-by: Istvan Petres <pijulius@users.noreply.github.com>

pass boxWidth only if pointStyleWidth presents (#10524)

fix: calc visible points on update #10467 (#10523)

Improve docs radial linear grid (#10518)

* make link work in github itself

* fix dead link on reload or new tab

* document the props for radial grid

* remove extra chart and space

Fix Stack Overflow tag: chart.js (#10522)

* Fix Stack Overflow tag: chart.js

The same fix as accepted in: #10520

The correct Stack Overflow tag name is chart.js and not chartjs

* Fix Stack Overflow tag: chart.js

The same fix as accepted in: #10520

The correct Stack Overflow tag name is chart.js and not chartjs

Fix Stack Overflow tag: chart.js (#10520)

parsing: support dot(s) in object keys (#10517)

Enable borderDash option in the grid as scriptable (#10519)

Fix dead link on reload or open in new tab (#10515)

* make link work in github itself

* fix dead link on reload or new tab

Clarifying threshold requirement in the docs for decimation (#10516)

Co-authored-by: Max Borkowski <max.borkowski@lexisnexisrisk.com>

Explicitly include package.json files for subpackages (#10513)

Remove redundant permissions on release CI to prevent a failure
Bump version to v3.8.2

Co-authored-by: Chart.js <>

Bump to 3.8.1 (#10509)

Resolve plugin defaults for local plugins (#10484)

draw tooltip with object borderwidth (#10489)

document defaults for plugins (#10490)

make link work in github itself (#10497)

Improve error message with id of the canvas (#10495)

* improve error message with id of the canvas
* update test

update typing of clip, allow it to be configurable in the options for typescript (#10494)

Bump terser from 4.8.0 to 4.8.1 (#10493)

Bumps [terser](https://github.com/terser/terser) from 4.8.0 to 4.8.1.
- [Release notes](https://github.com/terser/terser/releases)
- [Changelog](https://github.com/terser/terser/blob/master/CHANGELOG.md)
- [Commits](https://github.com/terser/terser/commits)

---
updated-dependencies:
- dependency-name: terser
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Add pointStyleWidth option for legend (#10412)

* add pointStyleWidth for legend

* add drawPointLegend to keep drawPoint signature

Add a stale version warning + a link to the latest version of docs (#10446)

* Add a stale version warning + a link to the latest version of docs

* Update docs/.vuepress/config.js

Co-authored-by: Jacco van den Berg <jaccoberg2281@gmail.com>
* Shorten the warning

* Revert master title

* Revert master title

Co-authored-by: Jacco van den Berg <jaccoberg2281@gmail.com>

Bump moment from 2.29.2 to 2.29.4 (#10471)

Bumps [moment](https://github.com/moment/moment) from 2.29.2 to 2.29.4.
- [Release notes](https://github.com/moment/moment/releases)
- [Changelog](https://github.com/moment/moment/blob/develop/CHANGELOG.md)
- [Commits](https://github.com/moment/moment/compare/2.29.2...2.29.4)

---
updated-dependencies:
- dependency-name: moment
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Lint before build & test, remove lint from test (#10462)

* Lint before build & test, remove lint from test
* should reconize test now
* test skip build in test step
* readd build step

Update integration.md (#10470)

Fixed grammatical error on line 93

Add dependencie updates under the development part in release drafter (#10445)

Fix options update when changing to shared opts (#10451)

Enforce maximum width on chart editor blocks in the docs (#10447)

* Enforce max width on chart editor blocks

* Shrink the chart view rather than the whole chart editor

Fix crash with skipNull and uneven datasets (#10454)

Update aspectRatio documentation (#10456)

Add index to legendItem interface (#10436)

* Add index to legendItem interface for doughnut, pie and polarArea charts. Make datasetIndex optional since the before named charts dont include it.

* Remove test to check if datasetIndex has been set in generateLabels function for legend

Update responsive.md (#10415)

* Update responsive.md

* Update docs/configuration/responsive.md

Co-authored-by: Jacco van den Berg <jaccoberg2281@gmail.com>
Co-authored-by: Jukka Kurkela <jukka.kurkela@gmail.com>
Co-authored-by: Jacco van den Berg <jaccoberg2281@gmail.com>

Respect `fill: false` with custom draw times (#10414)

* Resolve canvasgradient is not defined in node
* Remove trailing white space
* export isPaternOrGradient helper with typings
* fix lint failure, single qoute
* Respect `fill: false` with custom draw times
* correctly listen to fill property
* remove console log and lint errors
* implement feedback, still update control points

clarify helpers need to be imported when using bundlers (#10434)

Bump actions/setup-node from 2 to 3 (#10431)

* Bump actions/setup-node from 2 to 3

Bumps [actions/setup-node](https://github.com/actions/setup-node) from 2 to 3.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v2...v3)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
* Update .github/workflows/ci.yml

Co-authored-by: Jukka Kurkela <jukka.kurkela@gmail.com>
* Apply suggestions from code review

Co-authored-by: Jukka Kurkela <jukka.kurkela@gmail.com>
* Update .github/workflows/deploy-docs.yml

Co-authored-by: Jukka Kurkela <jukka.kurkela@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Evert Timberg <evert.timberg@gmail.com>
Co-authored-by: Jukka Kurkela <jukka.kurkela@gmail.com>
Co-authored-by: Jacco van den Berg <39033624+LeeLenaleee@users.noreply.github.com>

Bump actions/checkout from 2 to 3 (#10430)

Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v2...v3)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

chore: Included githubactions in the dependabot config (#10423)

This should help with keeping the GitHub actions updated on new releases. This will also help with keeping it secure.

Dependabot helps in keeping the supply chain secure https://docs.github.com/en/code-security/dependabot

GitHub actions up to date https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot

https://github.com/ossf/scorecard/blob/main/docs/checks.md#dependency-update-tool
Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>

chore: Set permissions for GitHub actions (#10399)

Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much.

- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions

https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions

https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs

[Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/)

Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>

Typo fix (#10410)

Add padding to pointLabels type, add type to scriptable context (#10404)

* Add padding to pointLabelTypings and add type field to context

* Use correct scriptable helper

* Remove trailing space

Fix default value of 'includeInvisible' option in the documentation (#10400)

Bump eventsource from 1.1.0 to 1.1.1 (#10393)

Bumps [eventsource](https://github.com/EventSource/eventsource) from 1.1.0 to 1.1.1.
- [Release notes](https://github.com/EventSource/eventsource/releases)
- [Changelog](https://github.com/EventSource/eventsource/blob/master/HISTORY.md)
- [Commits](https://github.com/EventSource/eventsource/compare/v1.1.0...v1.1.1)

---
updated-dependencies:
- dependency-name: eventsource
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

clarify api docs (#10392)

Allow for each dataset to be individually typed without a main type (#10387)

* allow for each dataset to be individually typed without a main type
* fix lint issues
* add extra test cases

Bump to 3.8.0 (#10377)

Types: Allow font to be partial scriptable and individually scriptable (#10364)

* allow font scriptable to return partial object and be scriptable
* add other elements as scriptable
* rename variable for context to resolve lint issue
* add duplicate font for non scriptable
* change to scriptableOptions
* fix parameter
* missing space
* Change name of helper function to match other helper function

Add option to include invisible points (#10362)

* Add option to include invisible points

* Minor fixes

* Add doc for newly added option

* Fix typo

* Add test for newly added option

* Improve description of the new option

* Update docs/configuration/interactions.md

Co-authored-by: Jacco van den Berg <39033624+LeeLenaleee@users.noreply.github.com>
* Apply suggestions from code review

Co-authored-by: Jacco van den Berg <39033624+LeeLenaleee@users.noreply.github.com>
Co-authored-by: Yiwen Wang 🌊 <yiwwan@microsoft.com>
Co-authored-by: Jacco van den Berg <39033624+LeeLenaleee@users.noreply.github.com>

Update to v0.2.1 color dependency to fix bug with invalid colours (#10371)

* Update to v0.2.0 color dependency to fix bug with invalid colours
* v0.2.1

Coveralls no longer runs on Windows CI (#10367)

Update scale polarArea correctly on data hide (#10340)

* give correct range back for polarArea
* added test
* tab to spaces

Add links to docs in all the samples (#10308)

Correct auto.esm.js import to allow use directly from the browser

Remove test job from windows runner (#10345)

* Remove test stop from windows runner

* consistent formatting

display tooltips only at points in chart area (#10289)

* show only points in chart area

* use the _isPointInArea helper function

Resolve canvasGradient is undefined in node (#10328)

* Resolve canvasgradient is not defined in node

* Remove trailing white space

* export isPaternOrGradient helper with typings

* fix lint failure, single qoute

* Allow for string inputs too to function

Use abs() when comparing for spanGaps (#10316)

* Use abs() when comparing for spanGaps

* tests for spanGaps w/ integer (boolean already covered)

* remove redundant default config from spanGaps tests

Bump async from 2.6.3 to 2.6.4 (#10320)

Bumps [async](https://github.com/caolan/async) from 2.6.3 to 2.6.4.
- [Release notes](https://github.com/caolan/async/releases)
- [Changelog](https://github.com/caolan/async/blob/v2.6.4/CHANGELOG.md)
- [Commits](https://github.com/caolan/async/compare/v2.6.3...v2.6.4)

---
updated-dependencies:
- dependency-name: async
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bump moment from 2.29.1 to 2.29.2 (#10290)

Bumps [moment](https://github.com/moment/moment) from 2.29.1 to 2.29.2.
- [Release notes](https://github.com/moment/moment/releases)
- [Changelog](https://github.com/moment/moment/blob/develop/CHANGELOG.md)
- [Commits](https://github.com/moment/moment/compare/2.29.1...2.29.2)

---
updated-dependencies:
- dependency-name: moment
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Trigger legend onLeave when the mouse leaves the canvas (#10301)

Enable configuration of radial scale point label border radius (#10293)

Types: add 'middle' to borderSkipped (#10283)

Allow time scale to offset using skipped ticks (#10278)

Document tooltip draw hooks and only call hooks when the tooltip draws (#10276)

* Document tooltip draw hooks and only call hooks when the tooltip draws

* Update tests

Export types for cartesian and radial tick options (#10275)

Fix a typo in data-structures.md (#10259)

Change `The provides labels can be` to `The provided labels can be`.

Co-authored-by: Akira Aso <44665462+akiorange@users.noreply.github.com>

add startangle to radial scale opts (#10269)

Correct chart initialization flow (#10266)

* update flow chart to reflect correct flow

* Update drawio file

Bump minimist from 1.2.5 to 1.2.6 (#10260)

Bumps [minimist](https://github.com/substack/minimist) from 1.2.5 to 1.2.6.
- [Release notes](https://github.com/substack/minimist/releases)
- [Commits](https://github.com/substack/minimist/compare/1.2.5...1.2.6)

---
updated-dependencies:
- dependency-name: minimist
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Interaction functions (#10046)

* Refactor get...Items functions to take events rather than positions

To work toward exposing something like the get...Items functions.

* Switch getAxisItems to use optimizedEvaluateItems

optimizedEvaluateItems falls back to evaluating all items for unsorted items, and sorting / optimizing ought to be okay, so this ought to be equivalent.

* Performance

* Consolidate getRelativePosition

helpers.dom.js's getRelativePosition already had logic to handle ChartEvent vs. Event (as demonstrated by the `native` check within `getCanvasPosition`), so it's redundant for core.interaction.js to have its own `native` check.

Update `getRelativePosition` to use the same `native` check as core.interaction.js's version.  As best as I can tell, the ChartEvent's x and y are populated from `getRelativePosition`, so the previous `getCanvasPosition` was effectively just duplicating `getRelativePosition'`s work.  I added a test to verify this; it depends on a local, not-yet-submitted change in chartjs-test-utils' `triggerMouseEvent` to return the mouse event that it triggers.

* Add an API to refactor duplicate isPointInArea

* Rename and update JSDoc to prepare for making this public

* Give functions a consistent, generic interface

* Export functions for discussion

* Code review feedback

Add a non-null assertion, as requested in code review.

Add JSDoc to clarify that `getCanvasPosition` now expects a native `Event`, not a `ChartEvent`.  Add `@ts-ignore`; `getCanvasPosition` relied on some loose conversions between `Event`, `TouchEvent`, and `Touch` that would require several changes to make TypeScript happy.

* Code review feedback

Return the event directly, to speed up the code a bit.  Add JSDoc to help communicate its intent.  Update various comments.

* Finalize exports; add docs and TypeScript

* Update src/helpers/helpers.dom.js

* Update src/helpers/helpers.dom.js

Only thing needed actually is the update of chartjs-test-utils to 0.4.0

* Bump chartjs-test-utils dependency

To get supporting work from https://github.com/chartjs/chartjs-test-utils/pull/19

Co-authored-by: Jukka Kurkela <jukka.kurkela@gmail.com>

Add missing fields to the ScriptableContext type (#10254)

Update link to filler plugin (#10250)

resolve circulair import (#10247)

Replace deprecated String.prototype.substr() (#10243)

String.prototype.substr() is deprecated (see https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/String/substr) so we replace it with similar functions which aren't deprecated.
Signed-off-by: Tobias Speicher <rootcommander@gmail.com>

Bump karma from 6.3.14 to 6.3.16 (#10204)

Bumps [karma](https://github.com/karma-runner/karma) from 6.3.14 to 6.3.16.
- [Release notes](https://github.com/karma-runner/karma/releases)
- [Changelog](https://github.com/karma-runner/karma/blob/master/CHANGELOG.md)
- [Commits](https://github.com/karma-runner/karma/compare/v6.3.14...v6.3.16)

---
updated-dependencies:
- dependency-name: karma
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bump url-parse from 1.5.7 to 1.5.10 (#10200)

Bumps [url-parse](https://github.com/unshiftio/url-parse) from 1.5.7 to 1.5.10.
- [Release notes](https://github.com/unshiftio/url-parse/releases)
- [Commits](https://github.com/unshiftio/url-parse/compare/1.5.7...1.5.10)

---
updated-dependencies:
- dependency-name: url-parse
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bump prismjs from 1.25.0 to 1.27.0 (#10198)

Bumps [prismjs](https://github.com/PrismJS/prism) from 1.25.0 to 1.27.0.
- [Release notes](https://github.com/PrismJS/prism/releases)
- [Changelog](https://github.com/PrismJS/prism/blob/master/CHANGELOG.md)
- [Commits](https://github.com/PrismJS/prism/compare/v1.25.0...v1.27.0)

---
updated-dependencies:
- dependency-name: prismjs
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Update animations.md (#10184)

Fix broken link to animations sample.

Allow individual chart controllers to opt-in to the decimation plugin (#10182)

* Allow individual chart controllers to opt-in to the decimation plugin

* Code review feedback

Allow array for line opts in dataset (#10179)

* fix line as array ts error

* added test

* implement only for the border,background color and radius

Bump url-parse from 1.5.3 to 1.5.7 (#10181)

Bumps [url-parse](https://github.com/unshiftio/url-parse) from 1.5.3 to 1.5.7.
- [Release notes](https://github.com/unshiftio/url-parse/releases)
- [Commits](https://github.com/unshiftio/url-parse/compare/1.5.3...1.5.7)

---
updated-dependencies:
- dependency-name: url-parse
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

remove hardcoded licenseYear in docs (#10158)

minimum bar length setting keeps bar base in view (#10157)

update link to license and bump license year (#10156)

* update link to license and bump license year
* another license year bump

Document scale update plugin hooks (#10154)

Bump karma from 6.3.9 to 6.3.14 (#10146)

Bumps [karma](https://github.com/karma-runner/karma) from 6.3.9 to 6.3.14.
- [Release notes](https://github.com/karma-runner/karma/releases)
- [Changelog](https://github.com/karma-runner/karma/blob/master/CHANGELOG.md)
- [Commits](https://github.com/karma-runner/karma/compare/v6.3.9...v6.3.14)

---
updated-dependencies:
- dependency-name: karma
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Make object notation usable for polarArea and radar (#10088)

* start to make object notation usable for polarArea
* enable object notation also for radar chart, test default key

Refactor filler plugin for easier maintenance (#10040)

Add new align 'inner' for X axis (#10106)

* Add new align for X axis

new align 'left-right' for options.scales['x'].ticks namespace will allow users to aling ticks: 'start" for first (left) tick and 'end' for last (right) tick

* corrected name of aligment to "inner", documentation and add test for inner labels

* delete unnecessary changes

* corrected logic for reverse axis, add tests for reverse axis and withoutY axis

* corrected chart paddings for "inner" tick align

* code clearness

* Update types/index.esm.d.ts

Co-authored-by: Jacco van den Berg <39033624+LeeLenaleee@users.noreply.github.com>
Co-authored-by: Talla2XLC <alexey.ivanov@epc.com.ru>
Co-authored-by: Jukka Kurkela <jukka.kurkela@gmail.com>
Co-authored-by: Jacco van den Berg <39033624+LeeLenaleee@users.noreply.github.com>

Bump log4js from 6.3.0 to 6.4.1 (#10150)

Bumps [log4js](https://github.com/log4js-node/log4js-node) from 6.3.0 to 6.4.1.
- [Release notes](https://github.com/log4js-node/log4js-node/releases)
- [Changelog](https://github.com/log4js-node/log4js-node/blob/master/CHANGELOG.md)
- [Commits](https://github.com/log4js-node/log4js-node/compare/v6.3.0...v6.4.1)

---
updated-dependencies:
- dependency-name: log4js
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bump engine.io from 6.1.0 to 6.1.2 (#10152)

Bumps [engine.io](https://github.com/socketio/engine.io) from 6.1.0 to 6.1.2.
- [Release notes](https://github.com/socketio/engine.io/releases)
- [Changelog](https://github.com/socketio/engine.io/blob/master/CHANGELOG.md)
- [Commits](https://github.com/socketio/engine.io/compare/6.1.0...6.1.2)

---
updated-dependencies:
- dependency-name: engine.io
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bump node-fetch from 2.6.6 to 2.6.7 (#10151)

Bumps [node-fetch](https://github.com/node-fetch/node-fetch) from 2.6.6 to 2.6.7.
- [Release notes](https://github.com/node-fetch/node-fetch/releases)
- [Commits](https://github.com/node-fetch/node-fetch/compare/v2.6.6...v2.6.7)

---
updated-dependencies:
- dependency-name: node-fetch
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bump follow-redirects from 1.14.6 to 1.14.8 (#10149)

Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.14.6 to 1.14.8.
- [Release notes](https://github.com/follow-redirects/follow-redirects/releases)
- [Commits](https://github.com/follow-redirects/follow-redirects/compare/v1.14.6...v1.14.8)

---
updated-dependencies:
- dependency-name: follow-redirects
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bump to 3.7.1 (#10148)