[dependabot]

Bumps leaflet-geosearch from 4.4.0 to 5.2.0.

Release notes

Sourced from leaflet-geosearch's releases.

v5.2.0

5.2.0 (2026-10-27)

Features

• add an OpenGeocoding provider (#458) (d94833f)

---

5.2 adds the OpenGeocoding provider and fixes enter for results without coordinates.

• New OpenGeocodingProvider for the hosted OpenGeocoding API, built on Overture Maps, OpenStreetMap and other open data. Suggestions while typing are free and come without coordinates, a picked suggestion is looked up by its id. Reverse geocoding works too. See the docs page.
• The API key goes in an x-api-key header, never in the url. A host option lets you put a proxy in front that keeps the key on your server.
• Pressing enter on typed text threw Invalid LatLng object when the first result had no coordinates. Now that result is searched again, the same way as a picked suggestion. This applies to every provider whose results lack coordinates.
• Live tests run against the real API when OPENGEOCODING_API_KEY is set, and are skipped without it.

By @​Mokto in #458, with tests, the host option and docs by @​ramazansancar.

v5.1.0

5.1.0 (2026-10-22)

Features

• support Leaflet 2 (#451) (36a5306), closes #431

---

5.1 adds Leaflet 2 support. The same package works with Leaflet 1.6 and up and with Leaflet 2, there is no separate build and nothing to change for Leaflet 1 users.

• the control is an ES class with a constructor, imports Leaflet's classes by name, uses map.fire and lets Marker pick its default icon. All of that works on Leaflet 1 too
• the leaflet range is ^1.6.0 || ^2.0.0-alpha.1, so npm no longer installs a second copy of Leaflet 1 in a project that uses Leaflet 2
• options.marker.icon stays empty unless you pass an icon, the marker still gets Leaflet's default icon
• CI runs the tests against Leaflet 1.6 to 1.9.4, 2.0.0-alpha.1 and Leaflet's main branch
• how to use it with Leaflet 2: https://leaflet-geosearch.meijer.works/usage#leaflet-2

By @​ramazansancar in #451 and #454.

v5.0.0

5.0.0 (2026-10-22)

Features

• release 5.0 with search fixes, multi providers and new docs (74c072e), closes #90 #153 #156 #157 #167 #173 #176 #180 #191 #203 #220 #226 #245 #247 #253 #264 #288 #307 #314 #320 #324 #325 #330 #334 #347 #349 #358 #363 #365 #376 #432 #434 #214 #218 #308

BREAKING CHANGES

• The default resultFormat and popupFormat escape the label, so html in labels shows as text unless you pass your own formatters. A picked suggestion is shown without searching the provider again (requeryOnSelect: true restores that). Failed searches fire geosearch/error on the map instead of rejecting. autoClose keeps the marker of the result (showMarker: false hides it). The Google provider uses @​googlemaps/js-api-loader 2 and ignores the url, nonce, retries and id options. The Esri provider asks for up to 5 locations instead of 1. See https://leaflet-geosearch.meijer.works/upgrading/v5

... (truncated)

Commits

• d94833f feat: add an OpenGeocoding provider (#458)
• f758e1f ci: bump the actions group with 3 updates (#457)
• 27dd84e docs: README badges, CDN and install docs, and CI security hardening (#456)
• ca4d171 ci: cache Playwright's Chromium and install it without apt (#454)
• 36a5306 feat: support Leaflet 2 (#451)
• 13abc10 docs: add ramazansancar as a contributor for doc, test, and infra (#453)
• 6e64430 ci: release with the workflow token instead of a personal one (#452)
• 74c072e feat: release 5.0 with search fixes, multi providers and new docs
• b83f039 docs: add jeremy-code as a contributor for code (#448)
• 880afc4 Update .leaflet-control-geosearch text to be dark mode compatible (#447)
• See full diff in compare view

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
indocafe	Error		Nov 4, 2026 8:34am UTC

[github-actions]

Thank you for submitting your pull request! 🙌 We'll review it as soon as possible. In the meantime, please ensure that your changes align with our CONTRIBUTING.md. If there are any specific instructions or feedback regarding your PR, we'll provide them here. Thanks again for your contribution! 😊