chore(deps): bump the all-npm group with 5 updates by dependabot[bot] · Pull Request #273 · dorlugasigal/TermBeam

dependabot · 2026-07-20T16:55:29Z

Bumps the all-npm group with 5 updates:

Package	From	To
@github/copilot-sdk	`1.0.6`	`1.0.7`
express-rate-limit	`8.5.2`	`8.6.0`
ws	`8.21.0`	`8.21.1`
c8	`11.0.0`	`12.0.0`
lint-staged	`17.0.8`	`17.1.0`

Updates @github/copilot-sdk from 1.0.6 to 1.0.7

Release notes

Sourced from @github/copilot-sdk's releases.

GitHub Copilot SDK for Java 1.0.7

Installation

⚠️ Artifact versioning plan: Releases of this implementation track releases of the reference implementation. For each release of the reference implementation, there may follow a corresponding release of this implementation with the same number as the reference implementation. Release identifiers of the reference implementation are in the form vMaj.Min.Micro. For example v0.1.32. The corresponding maven version for the release will be Maj.Min.Micro-java.N, where Maj, Min and Micro are the corresponding numbers for the reference implementation release, and N is a monotonically increasing sequence number starting with 0 for each release. See the corresponding architectural decision record for more information in the docs/adr directory of the source code.

📦 [View on Maven Central](https://github.com/github/copilot-sdk/blob/HEAD/(central.sonatype.com/redacted)

📖 [Documentation](https://github.com/github/copilot-sdk/blob/HEAD/(github.github.io/redacted) · [Javadoc](https://github.com/github/copilot-sdk/blob/HEAD/(github.github.io/redacted)

Maven
<dependency>
    <groupId>com.github</groupId>
    <artifactId>copilot-sdk-java</artifactId>
    <version>1.0.7</version>
</dependency>
Gradle (Kotlin DSL)
implementation("com.github:copilot-sdk-java:1.0.7")
Gradle (Groovy DSL)
implementation 'com.github:copilot-sdk-java:1.0.7'
Feature: opaque metadata passthrough for tool definitions

Hosts can now attach namespaced, opaque metadata to tool definitions and have it forwarded verbatim over the session.create/resumeSession wire call. Use ToolDefinition.createWithMetadata(...) or the fluent .metadata(Map) builder, or express shallow flag maps via @CopilotTool.MetadataEntry annotations. (#1864)
ToolDefinition tool = ToolDefinition.create("search", "Search files", schema, handler)
    .metadata(Map.of("com.example:featureFlags", Map.of("streamResults", true)));
Feature: tool search configuration support

SessionConfig and ResumeSessionConfig now accept a ToolSearchConfig that enables server-side tool search and controls the deferral threshold. Tool results can also carry back toolReferences indicating which tools were consulted during search. (#1933)
SessionConfig config = new SessionConfig()
    .setToolSearch(new ToolSearchConfig().setEnabled(true).setDeferThreshold(5));
Other changes

feature: [Java] forward enableManagedSettings on SessionConfig/ResumeSessionConfig to opt into enterprise managed-settings enforcement at session bootstrap (#1925)

... (truncated)

Changelog

Sourced from @github/copilot-sdk's changelog.

v1.0.7 (2026-07-16)

Feature: in-process (FFI) transport

The SDK can now host the Copilot runtime in-process by loading the native runtime library via its C ABI (FFI), eliminating the overhead of spawning a child process. This experimental transport is available for Node.js, Rust, Python, and Go. (#1953, #1915, #1975, #1976)
const client = new CopilotClient({ connection: RuntimeConnection.forInProcess() });
var client = new CopilotClient(new CopilotClientOptions { Connection = RuntimeConnection.ForInProcess() });
Feature: tool search configuration

A new toolSearch session option controls how the SDK defers tools when the total tool count exceeds a threshold. When enabled (the default), excess MCP and external tools are surfaced on demand through the built-in tool_search_tool rather than pre-loaded into every prompt. Tool results can also include toolReferences to link cited sources back to the tool that produced them. (#1933)
const session = await client.createSession({
    toolSearch: { defer: "auto" },
});
var session = await client.CreateSessionAsync(new SessionConfig
{
    ToolSearch = new ToolSearchConfig { Defer = "auto" },
});
Feature: opaque metadata passthrough on tool definitions

Tool definitions now accept an optional metadata bag that is forwarded verbatim in session.create and session.resume RPC calls. This lets hosts attach namespaced, implementation-specific metadata to tools without expanding the typed public contract; unknown keys are preserved and round-tripped untouched. (#1864)
session.defineTool("my-tool", { metadata: { "myapp:priority": 1 } }, handler);
session.DefineTool("my-tool", new ToolOptions { Metadata = new() { ["myapp:priority"] = 1 } }, handler);
Other changes

feature: [All SDKs] add canvasProvider field to session create/resume config so hosts can supply a stable canvas-provider identity that survives cold resume (#1847)

feature: [All SDKs] forward enableManagedSettings flag in session create/resume for enterprise managed-settings enforcement (#1925)

feature: [All SDKs] propagate agentId, parentAgentId, and interactionType from LLM inference start frames into request-handler contexts (#1949)

improvement: [Rust] make tool schema and MCP server serialization deterministic by replacing HashMap with IndexMap (#1931)

improvement: [Rust] use native-tls for the build-time CLI download (#1964)

... (truncated)

Commits

d95cfac Update @github/copilot to 1.0.71 (#1998)
a023934 Avoid Windows in-process test teardown deadlock (#1997)
82b96a1 Add opaque metadata passthrough to SDK tool definitions (#1864)
ffb4d98 Remove HMAC key authentication method from public SDK auth docs (#1994)
6e3893c [maven-release-plugin] prepare for next development iteration
a4b7285 [maven-release-plugin] prepare release java/v1.0.7-preview.3
caba3e5 docs: update version references to 1.0.7-preview.3
9744fd5 Update @github/copilot to 1.0.71-2 (#1990)
584a239 docs: apply style guide conventions and fix trailing whitespace (#1979)
746fdd2 docs: update outdated gpt-4.1 model references in SDK docstrings (#1978)
Additional commits viewable in compare view

Updates express-rate-limit from 8.5.2 to 8.6.0

Release notes

Sourced from express-rate-limit's releases.

v8.6.0

You can view the changelog here.

Commits

fffb3c4 8.6.0
f366b2d docs: debugging guide, time constants, & v8.6.0 changelog (#652)
593ddd2 fix: make debug output easier to read (#653)
ef8c129 fix: Pin safe version of @asyncapi/specs dev dep (#659)
7b05e0d feat: add time constants to support more readable values for windowMs (#655)
863e730 chore(deps-dev): bump the development-dependencies group with 3 updates (#657)
e0e711e fix: correct wording in usage documentation for express-rate-limit (#656)
fcd3aa7 chore(deps-dev): bump the development-dependencies group with 3 updates (#651)
99d4298 feat: use debug for debug logging (#641)
23e4dde feat: Run validations once each (#650)
Additional commits viewable in compare view

Updates ws from 8.21.0 to 8.21.1

Release notes

Sourced from ws's releases.

8.21.1

Bug fixes

Empty fragments are now counted toward the limit (a2f4e7c0).

The default values of the maxBufferedChunks and maxFragments options have been reduced (f197ac65).

Commits

ae1de54 [dist] 8.21.1
8e9511b [ci] Trust Coveralls Homebrew tap
f197ac6 [fix] Lower default values of maxBufferedChunks and maxFragments
8df8265 [ci] Update actions/checkout action to v7
a2f4e7c [fix] Count empty fragments toward the limit (#2329)
e79f912 [pkg] Approve install scripts for bufferutil and utf-8-validate
4ea355d [doc] Document 32-bit signed integer coercion for option values
2120f4c [example] Remove uuid dependency
4c534a6 [security] Add latest vulnerability to SECURITY.md
See full diff in compare view

Updates c8 from 11.0.0 to 12.0.0

Release notes

Sourced from c8's releases.

v12.0.0

12.0.0 (2026-07-14)

⚠ BREAKING CHANGES

yargs enforces a stricter range of Node versions ^20.19.0 || ^22.12.0 || >=23

Features

update yargs to 18.x.x (#599) (dc2d6c8)

Changelog

Sourced from c8's changelog.

12.0.0 (2026-07-14)

⚠ BREAKING CHANGES

yargs enforces a stricter range of Node versions ^20.19.0 || ^22.12.0 || >=23

Features

update yargs to 18.x.x (#599) (dc2d6c8)

Commits

ae5a0cf chore(main): release 12.0.0 (#600)
dc2d6c8 feat!: update yargs to 18.x.x (#599)
ee2f1cf chore(deps): update dependency @types/node to v24 (#579)
923c238 build: go back to publishing manually
See full diff in compare view

Updates lint-staged from 17.0.8 to 17.1.0

Release notes

Sourced from lint-staged's releases.

v17.1.0

Minor Changes
#1816 7568d4f - The console output of lint-staged has been simplified so that there's less interactive spinners and more explicit messages like "Started…" -> "Done!". The primary purpose of this was to remove Listr2, a very large dependency.

Before:

Size of node_modules/ after installing: 1561.7 kB with 29 packages.

Fancy interactive spinners, but output dynamically changes:
✔ Backed up original state in git stash (0b191303)
✔ Running tasks for staged files...
✔ Staging changes from tasks...
✔ Cleaning up temporary files...
After:

Size of node_modules/ after installing: 974.0 kB with 5 packages (37.6 % smaller, 82.7 % less transitive dependencies).

Simpler but more explicit output:
⋯ Backing up original state…
✔ Done backing up original state (35b38ed1)!
⋯ Running tasks for staged files…
    *.js — 1 file
      ⋯ oxlint --fix
    *.{json,md} — 1 file
      ⋯ oxfmt --write
✔ oxfmt --write
✔ oxlint --fix
✔ Done running tasks for staged files!
⋯ Staging changes from tasks…
✔ Done staging changes from tasks!
⋯ Cleaning up temporary files…
✔ Done cleaning up temporary files!
Patch Changes

#1816 c19079d - Try to restore hidden unstaged changes when using --no-revert.

#1818 efb23a2 - Console output colors are enabled/disabled more consistently.

#1818 26112a1 - Failed JS function tasks now properly kill other tasks, unless --continue-on-error is used. Previously their failure didn't affect other tasks.

Changelog

Sourced from lint-staged's changelog.

17.1.0

Minor Changes
#1816 7568d4f - The console output of lint-staged has been simplified so that there's less interactive spinners and more explicit messages like "Started…" -> "Done!". The primary purpose of this was to remove Listr2, a very large dependency.

Before:

Size of node_modules/ after installing: 1561.7 kB with 29 packages.

Fancy interactive spinners, but output dynamically changes:
✔ Backed up original state in git stash (0b191303)
✔ Running tasks for staged files...
✔ Staging changes from tasks...
✔ Cleaning up temporary files...
After:

Size of node_modules/ after installing: 974.0 kB with 5 packages (37.6 % smaller, 82.7 % less transitive dependencies).

Simpler but more explicit output:
⋯ Backing up original state…
✔ Done backing up original state (35b38ed1)!
⋯ Running tasks for staged files…
    *.js — 1 file
      ⋯ oxlint --fix
    *.{json,md} — 1 file
      ⋯ oxfmt --write
✔ oxfmt --write
✔ oxlint --fix
✔ Done running tasks for staged files!
⋯ Staging changes from tasks…
✔ Done staging changes from tasks!
⋯ Cleaning up temporary files…
✔ Done cleaning up temporary files!
Patch Changes

#1816 c19079d - Try to restore hidden unstaged changes when using --no-revert.

#1818 efb23a2 - Console output colors are enabled/disabled more consistently.

... (truncated)

Commits

dd5a95f Merge pull request #1817 from lint-staged/changeset-release/main
aad7f3b chore(changeset): release
11b1d5c Merge pull request #1818 from lint-staged/fixes
efb23a2 fix: enable colors globally based on option
26112a1 fix: function task failure kills other tasks, unless --continue-on-error wa...
9b98b7f fix: handle error when calculating hash of unstaged changes
d43432b fix: do not allow NaN concurrency
bd4dcbf fix: do not drop backup stash when restoring unstaged changes fails and using...
9153a77 Merge pull request #1816 from lint-staged/replace-listr2
290e618 refactor: use common identity function
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all-npm group with 5 updates: | Package | From | To | | --- | --- | --- | | [@github/copilot-sdk](https://github.com/github/copilot-sdk) | `1.0.6` | `1.0.7` | | [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit) | `8.5.2` | `8.6.0` | | [ws](https://github.com/websockets/ws) | `8.21.0` | `8.21.1` | | [c8](https://github.com/bcoe/c8) | `11.0.0` | `12.0.0` | | [lint-staged](https://github.com/lint-staged/lint-staged) | `17.0.8` | `17.1.0` | Updates `@github/copilot-sdk` from 1.0.6 to 1.0.7 - [Release notes](https://github.com/github/copilot-sdk/releases) - [Changelog](https://github.com/github/copilot-sdk/blob/main/CHANGELOG.md) - [Commits](github/copilot-sdk@v1.0.6...v1.0.7) Updates `express-rate-limit` from 8.5.2 to 8.6.0 - [Release notes](https://github.com/express-rate-limit/express-rate-limit/releases) - [Commits](express-rate-limit/express-rate-limit@v8.5.2...v8.6.0) Updates `ws` from 8.21.0 to 8.21.1 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@8.21.0...8.21.1) Updates `c8` from 11.0.0 to 12.0.0 - [Release notes](https://github.com/bcoe/c8/releases) - [Changelog](https://github.com/bcoe/c8/blob/main/CHANGELOG.md) - [Commits](bcoe/c8@v11.0.0...v12.0.0) Updates `lint-staged` from 17.0.8 to 17.1.0 - [Release notes](https://github.com/lint-staged/lint-staged/releases) - [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md) - [Commits](lint-staged/lint-staged@v17.0.8...v17.1.0) --- updated-dependencies: - dependency-name: "@github/copilot-sdk" dependency-version: 1.0.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-npm - dependency-name: express-rate-limit dependency-version: 8.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-npm - dependency-name: ws dependency-version: 8.21.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-npm - dependency-name: c8 dependency-version: 12.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: all-npm - dependency-name: lint-staged dependency-version: 17.1.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-npm ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-07-20T16:57:43Z

Coverage Report

Status	Category	Percentage	Covered / Total
🔵	Lines	93.39%	8585 / 9192
🔵	Statements	93.39%	8585 / 9192
🔵	Functions	94.09%	223 / 237
🔵	Branches	87.92%	2192 / 2493

File Coverage

File	Stmts	Branches	Functions	Lines	Uncovered Lines
Unchanged Files
bin/termbeam.js	61.62%	76.31%	50%	61.62%	40-63, 82-83, 89-117, 128, 142-146, 150-151, 155-157
src/cli/client.js	100%	97.67%	88.88%	100%
src/cli/index.js	94.97%	89.51%	100%	94.97%	132-135, 214-216, 218-220, 307-309, 327-329, 335, 353-356
src/cli/interactive.js	100%	98.21%	100%	100%
src/cli/prompts.js	93.95%	94.66%	100%	93.95%	73-74, 109-111, 123-126, 137-138
src/cli/resume.js	99.04%	92.61%	88.88%	99.04%	42-43, 416, 419
src/cli/service.js	91.03%	84.97%	100%	91.03%	455-480, 498-499, 503-505, 507-512, 523-531, 540-546, 568-569, 642-655
src/server/auth.js	100%	96.87%	100%	100%
src/server/copilot-sdk.js	96.92%	93.78%	100%	96.92%	35-36, 52-59, 73-75, 89-90, 112-113, 203, 308
src/server/index.js	84.29%	81.73%	87.5%	84.29%	115-116, 251, 253, 258, 260-261, 263-264, 271-272, 275-277, 291-293, 296-323, 369-370, 373, 404-406, 414-415, 457-463, 512-535
src/server/preferences.js	95.42%	81.9%	100%	95.42%	97, 99-100, 105, 107-108, 245-246, 248-250, 269-270
src/server/preview.js	95.68%	90%	100%	95.68%	93-97
src/server/push.js	100%	92.85%	100%	100%
src/server/routes.js	89.64%	80.77%	70.58%	89.64%	33-34, 46-47, 68-70, 73-74, 130-132, 186-203, 275-286, 291-332, 347, 507-508, 529-530, 591-593, 605-607, 746-747, 807, 809-810, 856-857, 864-865, 893-894, 908-909, 955-956, 958-959, 1004-1005, 1024-1025, 1043-1045, 1095-1096, 1170-1172, 1201-1203, 1219-1221, 1241-1243, 1333-1334, 1340-1343, 1374-1375, 1396-1398, 1447-1448, 1463-1464, 1488-1489, 1517-1519, 1527-1529, 1544-1545, 1550-1551, 1559-1560, 1580-1581, 1597-1598
src/server/sessions.js	93.32%	90.24%	86.66%	93.32%	10-24, 65-71, 78-79, 182-184, 256-258, 275-276, 432-435
src/server/websocket.js	96.11%	91.95%	100%	96.11%	249, 302, 404-409, 428-429, 431-432, 439-440, 460-461, 464-465, 472-473
src/utils/agent-sessions.js	93.4%	81.92%	100%	93.4%	73-74, 130-138, 163-164, 172-174, 186-187, 278
src/utils/agents.js	100%	83.33%	100%	100%
src/utils/git.js	94.43%	91.13%	100%	94.43%	24, 30-31, 41-48, 63-64, 250-251, 368-380
src/utils/logger.js	100%	100%	100%	100%
src/utils/shells.js	100%	100%	100%	100%
src/utils/update-check.js	91.05%	84.05%	93.33%	91.05%	202-204, 341-355, 370-383, 399-402, 420-423
src/utils/update-executor.js	98.92%	95.06%	100%	98.92%	316-317, 334-335
src/utils/vapid.js	100%	100%	100%	100%
src/utils/version.js	97.77%	92.3%	100%	97.77%	86-87

Generated in workflow #965 for commit de18d93 by the Vitest Coverage Report Action

…via npm audit fix Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

github-actions · 2026-07-22T20:17:15Z

Commit pushed: 86512fd

Generated by Dependabot Auto-Fix · 92.5 AIC · ⌖ 12.2 AIC · ⊞ 6.9K

github-actions · 2026-07-22T20:17:18Z

Auto-fix applied

Failing check: npm audit (Security workflow) — high severity brace-expansion DoS vulnerability surfaced by the dependency update.

Root cause: The c8 v11→v12 bump pulled in brace-expansion ≥3.0.0 with a known DoS CVE (GHSA-3jxr-9vmj-r5cp) and body-parser 2.x with another DoS CVE (GHSA-v422-hmwv-36x6).

Fix: Ran npm audit fix to update transitive dependencies to patched versions. Only package-lock.json was changed — no application logic was modified.

Warning

Firewall blocked 2 domains

The following domains were blocked by the firewall during workflow execution:

awmgmcpg
releaseassets.githubusercontent.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"
    - "releaseassets.githubusercontent.com"

See Network Configuration for more information.

Generated by Dependabot Auto-Fix · 92.5 AIC · ⌖ 12.2 AIC · ⊞ 6.9K · ◷

dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 20, 2026

dependabot Bot requested a review from dorlugasigal as a code owner July 20, 2026 16:55

dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 20, 2026

dorlugasigal previously approved these changes Jul 20, 2026

View reviewed changes

dorlugasigal enabled auto-merge (squash) July 20, 2026 17:01

fix(deps): remediate brace-expansion and body-parser vulnerabilities …

86512fd

…via npm audit fix Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

github-actions Bot dismissed dorlugasigal’s stale review via 86512fd July 22, 2026 20:17

github-actions Bot added the agent-fixed label Jul 22, 2026

Merge branch 'main' into dependabot/npm_and_yarn/all-npm-164f09f6e7

ae256e5

dorlugasigal approved these changes Jul 22, 2026

View reviewed changes

Merge branch 'main' into dependabot/npm_and_yarn/all-npm-164f09f6e7

a24e469

dorlugasigal approved these changes Jul 22, 2026

View reviewed changes

Merge branch 'main' into dependabot/npm_and_yarn/all-npm-164f09f6e7

a6fbb0f

dorlugasigal approved these changes Jul 23, 2026

View reviewed changes

Merge branch 'main' into dependabot/npm_and_yarn/all-npm-164f09f6e7

de18d93

dorlugasigal approved these changes Jul 23, 2026

View reviewed changes

dorlugasigal merged commit b46176e into main Jul 23, 2026
21 checks passed

dorlugasigal deleted the dependabot/npm_and_yarn/all-npm-164f09f6e7 branch July 23, 2026 03:44

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the all-npm group with 5 updates - #273

chore(deps): bump the all-npm group with 5 updates#273
dorlugasigal merged 6 commits into
mainfrom
dependabot/npm_and_yarn/all-npm-164f09f6e7

dependabot Bot commented on behalf of github Jul 20, 2026

Uh oh!

github-actions Bot commented Jul 20, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Jul 22, 2026

Uh oh!

github-actions Bot commented Jul 22, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 20, 2026

GitHub Copilot SDK for Java 1.0.7

Installation

Maven

Gradle (Kotlin DSL)

Gradle (Groovy DSL)

Feature: opaque metadata passthrough for tool definitions

Feature: tool search configuration support

Other changes

v1.0.7 (2026-07-16)

Feature: in-process (FFI) transport

Feature: tool search configuration

Feature: opaque metadata passthrough on tool definitions

Other changes

v8.6.0

8.21.1

Bug fixes

v12.0.0

12.0.0 (2026-07-14)

⚠ BREAKING CHANGES

Features

12.0.0 (2026-07-14)

⚠ BREAKING CHANGES

Features

v17.1.0

Minor Changes

Patch Changes

17.1.0

Minor Changes

Patch Changes

Uh oh!

github-actions Bot commented Jul 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Coverage Report

Uh oh!

github-actions Bot commented Jul 22, 2026

Uh oh!

github-actions Bot commented Jul 22, 2026

Auto-fix applied

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

github-actions Bot commented Jul 20, 2026 •

edited

Loading