github/boa - boa - 帆软第三方插件仓库

Commit Graph

Author	SHA1	Message	Date
dependabot[bot]	3549ea5046	Bump minimist from 1.2.5 to 1.2.6 (#1978 ) Bumps [minimist](https://github.com/substack/minimist) from 1.2.5 to 1.2.6. <details> <summary>Commits</summary> <ul> <li><a href="`7efb22a518`"><code>7efb22a</code></a> 1.2.6</li> <li><a href="`ef88b9325f`"><code>ef88b93</code></a> security notice for additional prototype pollution issue</li> <li><a href="`c2b981977f`"><code>c2b9819</code></a> isConstructorOrProto adapted from PR</li> <li><a href="`bc8ecee438`"><code>bc8ecee</code></a> test from prototype pollution PR</li> <li>See full diff in <a href="https://github.com/substack/minimist/compare/1.2.5...1.2.6">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=minimist&package-manager=npm_and_yarn&previous-version=1.2.5&new-version=1.2.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/boa-dev/boa/network/alerts). </details>	3 years ago
pd	4133801220	[perf][vm] (#1973 ) This Pull Request fixes/closes #1972 . It changes the following: - remove `format!` macro in `execute_instruction` and replace by `&'static str`	3 years ago
pd	e2630faf82	Fix panic in do while (#1968 ) `Node::DoWhileLoop` ast node had a buggy bytecode generation where `self.patch_jump(exit)` was called after emitting `LoopEnd` opcode. This would patch the loop exit to the instruction following the do while code, which would panic in cases where do while was enclosed in a block statement. This Pull Request fixes #1929. It changes the following: - Patch jump before emitting `Opcode::LoopEnd` - Add test which has do while statement inside a block statement to demonstrate that the change fixes the panic.	3 years ago
jedel1043	e1c2e14b6b	Preserve ints when executing int operations (#1964 ) This Pull Request fixes/closes #1962. It changes the following: - When executing arithmetic operations on `JsValue`s, try to use integer operations and fallback to `f64` operations on error. - Adds tests for serde_json conversions from integer operations.	3 years ago
dependabot[bot]	3ad9d18d74	Bump node-forge from 1.2.1 to 1.3.0 (#1969 ) Bumps [node-forge](https://github.com/digitalbazaar/forge) from 1.2.1 to 1.3.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/digitalbazaar/forge/blob/main/CHANGELOG.md">node-forge's changelog</a>.</em></p> <blockquote> <h2>1.3.0 - 2022-03-17</h2> <h3>Security</h3> <ul> <li>Three RSA PKCS#1 v1.5 signature verification issues were reported by Moosa Yahyazadeh (<a href="mailto:moosa-yahyazadeh@uiowa.edu">moosa-yahyazadeh@uiowa.edu</a>).</li> <li><strong>HIGH</strong>: Leniency in checking <code>digestAlgorithm</code> structure can lead to signature forgery. <ul> <li>The code is lenient in checking the digest algorithm structure. This can allow a crafted structure that steals padding bytes and uses unchecked portion of the PKCS#1 encoded message to forge a signature when a low public exponent is being used. For more information, please see <a href="https://mailarchive.ietf.org/arch/msg/openpgp/5rnE9ZRN1AokBVj3VqblGlP63QE/">"Bleichenbacher's RSA signature forgery based on implementation error"</a> by Hal Finney.</li> <li>CVE ID: <a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24771">CVE-2022-24771</a></li> <li>GHSA ID: <a href="https://github.com/digitalbazaar/forge/security/advisories/GHSA-cfm4-qjh2-4765">GHSA-cfm4-qjh2-4765</a></li> </ul> </li> <li><strong>HIGH</strong>: Failing to check tailing garbage bytes can lead to signature forgery. <ul> <li>The code does not check for tailing garbage bytes after decoding a <code>DigestInfo</code> ASN.1 structure. This can allow padding bytes to be removed and garbage data added to forge a signature when a low public exponent is being used. For more information, please see <a href="https://mailarchive.ietf.org/arch/msg/openpgp/5rnE9ZRN1AokBVj3VqblGlP63QE/">"Bleichenbacher's RSA signature forgery based on implementation error"</a> by Hal Finney.</li> <li>CVE ID: <a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24772">CVE-2022-24772</a></li> <li>GHSA ID: <a href="https://github.com/digitalbazaar/forge/security/advisories/GHSA-x4jg-mjrx-434g">GHSA-x4jg-mjrx-434g</a></li> </ul> </li> <li><strong>MEDIUM</strong>: Leniency in checking type octet. <ul> <li><code>DigestInfo</code> is not properly checked for proper ASN.1 structure. This can lead to successful verification with signatures that contain invalid structures but a valid digest.</li> <li>CVE ID: <a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24773">CVE-2022-24773</a></li> <li>GHSA ID: <a href="https://github.com/digitalbazaar/forge/security/advisories/GHSA-2r2c-g63r-vccr">GHSA-2r2c-g63r-vccr</a></li> </ul> </li> </ul> <h3>Fixed</h3> <ul> <li>[asn1] Add fallback to pretty print invalid UTF8 data.</li> <li>[asn1] <code>fromDer</code> is now more strict and will default to ensuring all input bytes are parsed or throw an error. A new option <code>parseAllBytes</code> can disable this behavior. <ul> <li><strong>NOTE</strong>: The previous behavior is being changed since it can lead to security issues with crafted inputs. It is possible that code doing custom DER parsing may need to adapt to this new behavior and optional flag.</li> </ul> </li> <li>[rsa] Add and use a validator to check for proper structure of parsed ASN.1 <code>RSASSA-PKCS-v1_5</code> <code>DigestInfo</code> data. Additionally check that the hash algorithm identifier is a known value from RFC 8017 <code>PKCS1-v1-5DigestAlgorithms</code>. An invalid <code>DigestInfo</code> or algorithm identifier will now throw an error. <ul> <li><strong>NOTE</strong>: The previous lenient behavior is being changed to be more strict since it could lead to security issues with crafted inputs. It is possible that code may have to handle the errors from these stricter checks.</li> </ul> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="`6c5b90133d`"><code>6c5b901</code></a> Release 1.3.0.</li> <li><a href="`0f3972ad58`"><code>0f3972a</code></a> Update changelog.</li> <li><a href="`dc77b39dd3`"><code>dc77b39</code></a> Fix error checking.</li> <li><a href="`bb822c02df`"><code>bb822c0</code></a> Add advisory links.</li> <li><a href="`d4395fec83`"><code>d4395fe</code></a> Update changelog.</li> <li><a href="`a4405bb9d6`"><code>a4405bb</code></a> Improve signature verification tests.</li> <li><a href="`aa9372d6dd`"><code>aa9372d</code></a> Add missing RFC 8017 algorithm identifiers.</li> <li><a href="`3f0b49a057`"><code>3f0b49a</code></a> Fix signature verification issues.</li> <li><a href="`c20f309311`"><code>c20f309</code></a> Adjust remaining length.</li> <li><a href="`e27f61230f`"><code>e27f612</code></a> Remove unused option.</li> <li>Additional commits viewable in <a href="https://github.com/digitalbazaar/forge/compare/v1.2.1...v1.3.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=node-forge&package-manager=npm_and_yarn&previous-version=1.2.1&new-version=1.3.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/boa-dev/boa/network/alerts). </details>	3 years ago
dependabot[bot]	6c9e210088	Bump peter-evans/create-or-update-comment from 1.4.5 to 2 (#1967 ) Bumps [peter-evans/create-or-update-comment](https://github.com/peter-evans/create-or-update-comment) from 1.4.5 to 2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/peter-evans/create-or-update-comment/releases">peter-evans/create-or-update-comment's releases</a>.</em></p> <blockquote> <h2>Create or Update Comment v2.0.0</h2> <h2>What's new</h2> <ul> <li>Updated runtime to Node.js 16 <ul> <li>The action now requires a minimum version of v2.285.0 for the <a href="https://github.com/actions/runner/releases/tag/v2.285.0">Actions Runner</a>.</li> <li>If using GitHub Enterprise Server, the action requires <a href="https://docs.github.com/en/enterprise-server@3.4/admin/release-notes">GHES 3.4</a> or later.</li> </ul> </li> </ul> <h2>What's Changed</h2> <ul> <li>Use double quotes to preserve adjacent spaces correctly by <a href="https://github.com/mfn"><code>@mfn</code></a> in <a href="https://github-redirect.dependabot.com/peter-evans/create-or-update-comment/pull/95">peter-evans/create-or-update-comment#95</a></li> <li>Remove workflow by <a href="https://github.com/peter-evans"><code>@peter-evans</code></a> in <a href="https://github-redirect.dependabot.com/peter-evans/create-or-update-comment/pull/101">peter-evans/create-or-update-comment#101</a></li> <li>Update runtime to node 16 by <a href="https://github.com/peter-evans"><code>@peter-evans</code></a> in <a href="https://github-redirect.dependabot.com/peter-evans/create-or-update-comment/pull/105">peter-evans/create-or-update-comment#105</a></li> <li>7 dependency updates by <a href="https://github.com/actions-bot"><code>@actions-bot</code></a> and <a href="https://github.com/dependabot"><code>@dependabot</code></a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/mfn"><code>@mfn</code></a> made their first contribution in <a href="https://github-redirect.dependabot.com/peter-evans/create-or-update-comment/pull/95">peter-evans/create-or-update-comment#95</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/peter-evans/create-or-update-comment/compare/v1.4.5...v2.0.0">https://github.com/peter-evans/create-or-update-comment/compare/v1.4.5...v2.0.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="`c9fcb64660`"><code>c9fcb64</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/peter-evans/create-or-update-comment/issues/105">#105</a> from peter-evans/v2</li> <li><a href="`862a968b68`"><code>862a968</code></a> Update runtime to node 16</li> <li><a href="`63e171afd5`"><code>63e171a</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/peter-evans/create-or-update-comment/issues/101">#101</a> from peter-evans/rm-workflow</li> <li><a href="`741ee28404`"><code>741ee28</code></a> Remove workflow</li> <li><a href="`ad0c5a2102`"><code>ad0c5a2</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/peter-evans/create-or-update-comment/issues/97">#97</a> from peter-evans/update-distribution</li> <li><a href="`d7438411f0`"><code>d743841</code></a> Update distribution</li> <li><a href="`fed340e087`"><code>fed340e</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/peter-evans/create-or-update-comment/issues/94">#94</a> from peter-evans/update-dependencies</li> <li><a href="`dacf24c705`"><code>dacf24c</code></a> Update dependencies</li> <li><a href="`85a7ce6345`"><code>85a7ce6</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/peter-evans/create-or-update-comment/issues/95">#95</a> from mfn/mfn-bash-fixes</li> <li><a href="`6484e4d98f`"><code>6484e4d</code></a> Use double quotes to preserve adjacent spaces correctly</li> <li>Additional commits viewable in <a href="https://github.com/peter-evans/create-or-update-comment/compare/v1.4.5...v2">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=peter-evans/create-or-update-comment&package-manager=github_actions&previous-version=1.4.5&new-version=2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>	3 years ago
dependabot[bot]	8bf1e31dc7	Bump peter-evans/find-comment from 1.3.0 to 2 (#1965 ) Bumps [peter-evans/find-comment](https://github.com/peter-evans/find-comment) from 1.3.0 to 2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/peter-evans/find-comment/releases">peter-evans/find-comment's releases</a>.</em></p> <blockquote> <h2>Find Comment v2.0.0</h2> <h2>What's new</h2> <ul> <li>Updated runtime to Node.js 16 <ul> <li>The action now requires a minimum version of v2.285.0 for the <a href="https://github.com/actions/runner/releases/tag/v2.285.0">Actions Runner</a>.</li> <li>If using GitHub Enterprise Server, the action requires <a href="https://docs.github.com/en/enterprise-server@3.4/admin/release-notes">GHES 3.4</a> or later.</li> </ul> </li> </ul> <h2>What's Changed</h2> <ul> <li>ci: remove workflow by <a href="https://github.com/peter-evans"><code>@peter-evans</code></a> in <a href="https://github-redirect.dependabot.com/peter-evans/find-comment/pull/59">peter-evans/find-comment#59</a></li> <li>Update runtime to node 16 by <a href="https://github.com/peter-evans"><code>@peter-evans</code></a> in <a href="https://github-redirect.dependabot.com/peter-evans/find-comment/pull/62">peter-evans/find-comment#62</a></li> <li>4 dependency updates by <a href="https://github.com/actions-bot"><code>@actions-bot</code></a> and <a href="https://github.com/dependabot"><code>@dependabot</code></a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/peter-evans/find-comment/compare/v1.3.0...v2.0.0">https://github.com/peter-evans/find-comment/compare/v1.3.0...v2.0.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="`1769778a0c`"><code>1769778</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/peter-evans/find-comment/issues/62">#62</a> from peter-evans/v2</li> <li><a href="`d261a413a5`"><code>d261a41</code></a> Update runtime to node 16</li> <li><a href="`2dc3b39a5e`"><code>2dc3b39</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/peter-evans/find-comment/issues/59">#59</a> from peter-evans/rm-workflow</li> <li><a href="`7bdc44ad46`"><code>7bdc44a</code></a> ci: remove workflow</li> <li><a href="`838d65d395`"><code>838d65d</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/peter-evans/find-comment/issues/56">#56</a> from peter-evans/update-distribution</li> <li><a href="`f54cec0188`"><code>f54cec0</code></a> build: update distribution</li> <li><a href="`8911be80c2`"><code>8911be8</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/peter-evans/find-comment/issues/55">#55</a> from peter-evans/update-dependencies</li> <li><a href="`6a0aec69cd`"><code>6a0aec6</code></a> chore: update dependencies</li> <li><a href="`9156830668`"><code>9156830</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/peter-evans/find-comment/issues/53">#53</a> from peter-evans/dependabot/npm_and_yarn/ansi-regex-5.0.1</li> <li><a href="`e134adbe1d`"><code>e134adb</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/peter-evans/find-comment/issues/54">#54</a> from peter-evans/update-distribution</li> <li>Additional commits viewable in <a href="https://github.com/peter-evans/find-comment/compare/v1.3.0...v2">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=peter-evans/find-comment&package-manager=github_actions&previous-version=1.3.0&new-version=2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>	3 years ago
dependabot[bot]	2d01d122a3	Bump actions/cache from 2.1.7 to 3 (#1966 ) Bumps [actions/cache](https://github.com/actions/cache) from 2.1.7 to 3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/cache/releases">actions/cache's releases</a>.</em></p> <blockquote> <h2>v3.0.0</h2> <ul> <li> <p>This change adds a minimum runner version(node12 -> node16), which can break users using an out-of-date/fork of the runner. This would be most commonly affecting users on GHES 3.3 or before, as those runners do not support node16 actions and they can use actions from github.com via <a href="https://docs.github.com/en/enterprise-server@3.0/admin/github-actions/managing-access-to-actions-from-githubcom/enabling-automatic-access-to-githubcom-actions-using-github-connect">github connect</a> or manually copying the repo to their GHES instance.</p> </li> <li> <p>Few dependencies and cache action usage examples have also been updated.</p> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="`4b0cf6cc46`"><code>4b0cf6c</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/actions/cache/issues/769">#769</a> from actions/users/ashwinsangem/bump_major_version</li> <li><a href="`60c606a2b4`"><code>60c606a</code></a> Update licensed files</li> <li><a href="`b6e9a919a7`"><code>b6e9a91</code></a> Revert "Updated to the latest version."</li> <li><a href="`c842503583`"><code>c842503</code></a> Updated to the latest version.</li> <li><a href="`2b7da2a62c`"><code>2b7da2a</code></a> Bumped up to a major version.</li> <li><a href="`deae296ab3`"><code>deae296</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/actions/cache/issues/651">#651</a> from magnetikonline/fix-golang-windows-example</li> <li><a href="`c7c46bcb6d`"><code>c7c46bc</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/actions/cache/issues/707">#707</a> from duxtland/main</li> <li><a href="`6535c5fb5f`"><code>6535c5f</code></a> Regenerated <code>examples.md</code> TOC</li> <li><a href="`3fdafa472e`"><code>3fdafa4</code></a> Update GitHub Actions status badge markdown in <code>README.md</code></li> <li><a href="`341e6d75d9`"><code>341e6d7</code></a> Merge branch 'actions:main' into fix-golang-windows-example</li> <li>Additional commits viewable in <a href="https://github.com/actions/cache/compare/v2.1.7...v3">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/cache&package-manager=github_actions&previous-version=2.1.7&new-version=3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>	3 years ago
Magic Panda	5fa16685ec	migrated to clap 3 (#1957 ) This Pull Request fixes/closes #1955. It changes the following: - changes structopt to clap	3 years ago
Taras Boiko	e73c3fd65a	Fix panic on AST dump in JSON format (#1959 ) Some of the fields in AST structs were both 1. Arrays 2. Marked as 'flatten' This is illegal per serde docs (and doesn't really make sense). The fix is to remove the attribute. See: https://serde.rs/attr-flatten.html Fixes: #1920 Co-authored-by: Taras Boiko <me@tboiko.com>	3 years ago
jedel1043	f25ce46a1e	Migrate to NPM and cleanup Playground (#1951 ) This Pull Request closes #1912 by migrating to a NPM based build, hopefully making it easier to contribute to the Playground. Also, reduces the number of features of the editor, since most of them were support for other languages or features that don't make sense in a playground environment. This considerably reduces the number of fetched files per page load and the total size of the playground.	3 years ago
Ademílson F. Tonato	3b4708ce2f	docs: update README by structuring the topics (#1958 ) It changes the following: - Updates (structuring) the readme to make it easier for first-time users to read the repository.	3 years ago
Aaron Ross	6498216c3f	convert inner datetime to local in `to_date_string` (#1953 ) This Pull Request fixes/closes #1942. `Date.prototype.toDateString` should return a value representing the local date. The Rust `Date` inner value represents UTC time, so it should be adjusted to local time before formatting (see equivalent conversions performed by `to_string` and `to_time_string`). To verify this is working as intended, run the test suite with your OS timezone set to `GMT+0`, then again with `GMT+10`. The test `date_proto_to_date_string` should pass for each. For me (Ubuntu via WSL), this can be done with `sudo dpkg-reconfigure tzdata`. This PR also fixes a couple other test cases that used the wrong month value (as noted at the top of the file, JS months are 0-based while `chrono` months are 1-based).	3 years ago
Aaron Ross	520b81ea66	add README for crates.io publish (#1952 ) This Pull Request closes #1948. It changes the following: - set `readme` in `boa_engine` so `README.md` will be published to crates.io - remove unnecessary `exclude` field from `Cargo.toml` in all apps I was unsure whether using a path outside of the workspace root was allowed for `readme` since it [doesn't get included in the release tarball](https://github.com/rust-lang/cargo/issues/5911), but this exact path is used by [juniper](https://github.com/graphql-rust/juniper/blob/master/juniper/Cargo.toml#L13) and [seems to work there](https://crates.io/crates/juniper). I believe `cargo publish` does a bit more than just uploading the tarball, including pulling the `readme` from any arbitrary path. The default behaviour of `cargo package`/`cargo publish` if neither `exclude` or `include` is specified is to include all files from the package root, excluding - dotfiles - .gitignore'd files - subpackages (any subdirectory with a `Cargo.toml` file) - the `/target` directory There's no need to explicitly exclude files from the parent directory since they're already excluded by default. This can be verified by running `cargo package --list` inside any workspace app: ```plain $ cd boa_wasm $ cargo package --list .gitignore Cargo.toml Cargo.toml.orig src/lib.rs ``` You can read more [here](https://doc.rust-lang.org/cargo/reference/manifest.html#the-exclude-and-include-fields).	3 years ago
dependabot[bot]	aaa07cf826	Bump prettier from 2.5.1 to 2.6.0 (#1945 ) Bumps [prettier](https://github.com/prettier/prettier) from 2.5.1 to 2.6.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/prettier/prettier/releases">prettier's releases</a>.</em></p> <blockquote> <h2>2.6.0</h2> <p>🔗 <a href="https://prettier.io/blog/2022/03/16/2.6.0.html">Release note</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/prettier/prettier/blob/main/CHANGELOG.md">prettier's changelog</a>.</em></p> <blockquote> <h1>2.6.0</h1> <p><a href="https://github.com/prettier/prettier/compare/2.5.1...2.6.0">diff</a></p> <p>🔗 <a href="https://prettier.io/blog/2022/03/16/2.6.0.html">Release Notes</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="`cba25e6b09`"><code>cba25e6</code></a> Release 2.6.0</li> <li><a href="`4cae7e15a7`"><code>4cae7e1</code></a> Build: Remove an extra new line in UMD bundle (<a href="https://github-redirect.dependabot.com/prettier/prettier/issues/12467">#12467</a>)</li> <li><a href="`9a070503a3`"><code>9a07050</code></a> Build: Remove <code>mainFields</code> override (<a href="https://github-redirect.dependabot.com/prettier/prettier/issues/12466">#12466</a>)</li> <li><a href="`6cdf21af08`"><code>6cdf21a</code></a> Fix comment (<a href="https://github-redirect.dependabot.com/prettier/prettier/issues/12464">#12464</a>)</li> <li><a href="`b26a24558a`"><code>b26a245</code></a> Build(deps-dev): Bump esbuild from 0.14.26 to 0.14.27 (<a href="https://github-redirect.dependabot.com/prettier/prettier/issues/12461">#12461</a>)</li> <li><a href="`34dcd96922`"><code>34dcd96</code></a> Build: Add a plugin to throw unexpected warnings (<a href="https://github-redirect.dependabot.com/prettier/prettier/issues/12463">#12463</a>)</li> <li><a href="`6fa3966d8a`"><code>6fa3966</code></a> Build(deps-dev): Bump <code>@typescript-eslint/eslint-plugin</code> (<a href="https://github-redirect.dependabot.com/prettier/prettier/issues/12457">#12457</a>)</li> <li><a href="`901c219155`"><code>901c219</code></a> Build(deps): Bump <code>@typescript-eslint/typescript-estree</code> (<a href="https://github-redirect.dependabot.com/prettier/prettier/issues/12458">#12458</a>)</li> <li><a href="`1bf2fa32a2`"><code>1bf2fa3</code></a> Build(deps-dev): Bump <code>@babel/core</code> from 7.17.5 to 7.17.7 (<a href="https://github-redirect.dependabot.com/prettier/prettier/issues/12459">#12459</a>)</li> <li><a href="`cae195187f`"><code>cae1951</code></a> Fix <code>diff</code> package import (<a href="https://github-redirect.dependabot.com/prettier/prettier/issues/12462">#12462</a>)</li> <li>Additional commits viewable in <a href="https://github.com/prettier/prettier/compare/2.5.1...2.6.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=prettier&package-manager=npm_and_yarn&previous-version=2.5.1&new-version=2.6.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>	3 years ago
raskad	dbfd42d0a9	Fix link to the playground (#1947 ) Fixes the link to the playground in the Readme	3 years ago
dependabot[bot]	ebf2bc64cb	Bump dyn-clone from 1.0.4 to 1.0.5 (#1946 ) Bumps [dyn-clone](https://github.com/dtolnay/dyn-clone) from 1.0.4 to 1.0.5. <details> <summary>Commits</summary> <ul> <li><a href="`1500eb86a6`"><code>1500eb8</code></a> Release 1.0.5</li> <li><a href="`91b11c3e66`"><code>91b11c3</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/dtolnay/dyn-clone/issues/14">#14</a> from dtolnay/compiletest</li> <li><a href="`6872508710`"><code>6872508</code></a> Add ui test for missing DynClone supertrait</li> <li><a href="`358e75127e`"><code>358e751</code></a> Detect warnings in CI</li> <li><a href="`61ddd087b6`"><code>61ddd08</code></a> Track raw pointers in miri CI run</li> <li><a href="`c5d644a3fa`"><code>c5d644a</code></a> Add a miri test job in CI</li> <li><a href="`6c2e4585f2`"><code>6c2e458</code></a> Declare minimum Rust version in Cargo metadata</li> <li><a href="`943c9296d4`"><code>943c929</code></a> Resolve semicolon_if_nothing_returned pedantic clippy lint</li> <li><a href="`07b1c418d7`"><code>07b1c41</code></a> Run clippy on test suite too</li> <li><a href="`15c588114a`"><code>15c5881</code></a> Skip clippy job on pull requests</li> <li>Additional commits viewable in <a href="https://github.com/dtolnay/dyn-clone/compare/1.0.4...1.0.5">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=dyn-clone&package-manager=cargo&previous-version=1.0.4&new-version=1.0.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>	3 years ago
jedel1043	ebab0ecd67	Deploy playground to custom destination dir (#1943 )	3 years ago
jasonwilliams	8f5d9ce8b2	try gh-pages action	3 years ago
jasonwilliams	bbd6529f65	remove push	3 years ago
jasonwilliams	44aed97038	remove deps	3 years ago
jasonwilliams	afe3c28202	comment out publish job	3 years ago
jasonwilliams	199912b960	change order	3 years ago
jasonwilliams	ea33772de6	move to args	3 years ago
jasonwilliams	abce76c674	remove cd into boa_engine	3 years ago
jasonwilliams	bdab5e2b98	add boa_engine as argument	3 years ago
jasonwilliams	16f3a0bd29	give everything a version	3 years ago
Jason Williams	be901735e5	generated changelog for 0.14 (#1882 ) Co-authored-by: João Borges <rageknify@gmail.com>	3 years ago
Halid Odat	17a6c8661e	Fix `BigInt` and `Number` comparison (#1887 ) Fixes `BigInt` and `Number` comparison, and vice versa. Before we were removing the decimal point of the floating-point number which was causing cases like `0.000001 > 0n` (or `0n < 0.000001`) to fail.	3 years ago
dependabot[bot]	40e35f101b	Bump test262 from `f7fb969` to `0bccacd` (#1928 ) Bumps [test262](https://github.com/tc39/test262) from `f7fb969` to `0bccacd`. <details> <summary>Commits</summary> <ul> <li><a href="`0bccacda69`"><code>0bccacd</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/tc39/test262/issues/3429">#3429</a> from Igalia/roundingmode-invalid-string</li> <li><a href="`104e5e8fab`"><code>104e5e8</code></a> Test more invalid values for roundingMode.</li> <li><a href="`51ce1fa00f`"><code>51ce1fa</code></a> Expand some Duration#toString() tests.</li> <li><a href="`c6c31c8dac`"><code>c6c31c8</code></a> Add and expand tests for Duration constructor / from().</li> <li><a href="`d45476b9fd`"><code>d45476b</code></a> Add a test for observable calls in Temporal.Duration constructor.</li> <li><a href="`50dc96e59e`"><code>50dc96e</code></a> Split Array.prototype.Symbol.unscopables tests for features</li> <li><a href="`d8fb00d741`"><code>d8fb00d</code></a> Add missing feature flag array-grouping</li> <li><a href="`5fb0f5b6d2`"><code>5fb0f5b</code></a> Remove SPACES before features</li> <li><a href="`bc4af482b0`"><code>bc4af48</code></a> Fix features by removing leading space</li> <li>See full diff in <a href="`f7fb969cc4...0bccacda69`">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>	3 years ago
dependabot[bot]	48f23b3c77	Bump monaco-editor from 0.32.1 to 0.33.0 (#1927 ) Bumps [monaco-editor](https://github.com/microsoft/monaco-editor) from 0.32.1 to 0.33.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/microsoft/monaco-editor/blob/main/CHANGELOG.md">monaco-editor's changelog</a>.</em></p> <blockquote> <h2>[0.33.0]</h2> <h3>Breaking Changes</h3> <ul> <li><code>InlayHintKind.Other</code> is removed.</li> </ul> <h3>Thank you</h3> <p>Contributions to <code>monaco-editor</code>:</p> <ul> <li><a href="https://github.com/Dan1ve"><code>@Dan1ve (Daniel Veihelmann)</code></a>: Make Vite sample code Firefox compatible [PR <a href="https://github-redirect.dependabot.com/microsoft/monaco-editor/issues/2991">#2991</a>](<a href="https://github-redirect.dependabot.com/microsoft/monaco-editor/pull/2991">microsoft/monaco-editor#2991</a>)</li> <li><a href="https://github.com/philipturner"><code>@philipturner (Philip Turner)</code></a>: Add <code>@noDerivative</code> modifier to Swift [PR <a href="https://github-redirect.dependabot.com/microsoft/monaco-editor/issues/2957">#2957</a>](<a href="https://github-redirect.dependabot.com/microsoft/monaco-editor/pull/2957">microsoft/monaco-editor#2957</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/microsoft/monaco-editor/commits">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=monaco-editor&package-manager=npm_and_yarn&previous-version=0.32.1&new-version=0.33.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>	3 years ago
raskad	23711a638b	Refresh vm docs and fix bytecode trace output (#1921 ) It changes the following: - Refreshes the vm and debugging docs to represent the current state - Fix some bytecode trace output - Rename a field in the `CodeBlock`	3 years ago
Nikodem Rabuliński	9eb6a78abc	Implement Array.from (#1831 ) <!--- Thank you for contributing to Boa! Please fill out the template below, and remove or add any information as you feel neccesary. ---> This Pull Request fixes/closes #1784. There're still a few tests failing, notably: - `iter-set-elem-prop-non-writable` - we don't have generator functions implemented - `calling-from-valid-1-noStrict`, `iter-map-fn-this-non-strict` - `thisArg` in non-strict mode, when undefined, should be inherited (that's what I'm guessing, I haven't confirmed this, but strict counterparts do pass with `thisArg` being `undefined`) - `source-array-boundary`, `elements-deleted-after` - ~~Not sure yet, still investigating, but they also include thisArg, so perhaps function calling has an underlying issue?~~ Failing because `this` on the top level evaluates to an empty object instead of containing everything from the top scope Co-authored-by: HalidOdat <halidodat@gmail.com>	3 years ago
Iban Eguia	128f836680	Added funding information to the repository (#1871 ) This will add the "Sponsor" button to the repository, which will redirect to the OpenCollective platform.	3 years ago
dependabot[bot]	09bfabb0b0	Bump git2 from 0.14.1 to 0.14.2 (#1919 ) Bumps [git2](https://github.com/rust-lang/git2-rs) from 0.14.1 to 0.14.2. <details> <summary>Commits</summary> <ul> <li><a href="`0443adb538`"><code>0443adb</code></a> Bump libgit2-sys to 0.13.2 (<a href="https://github-redirect.dependabot.com/rust-lang/git2-rs/issues/820">#820</a>)</li> <li><a href="`871788d261`"><code>871788d</code></a> Add binding for git_odb_exists_ext (<a href="https://github-redirect.dependabot.com/rust-lang/git2-rs/issues/818">#818</a>)</li> <li><a href="`d703dd940f`"><code>d703dd9</code></a> Update to 1.4.2 (<a href="https://github-redirect.dependabot.com/rust-lang/git2-rs/issues/815">#815</a>)</li> <li><a href="`8c6a26bd74`"><code>8c6a26b</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/rust-lang/git2-rs/issues/814">#814</a> from weihanglo/git2-curl-0.15.0</li> <li><a href="`ce54dacf98`"><code>ce54dac</code></a> Bump version of git2-curl</li> <li><a href="`64d849b843`"><code>64d849b</code></a> Update to 1.4.1 (<a href="https://github-redirect.dependabot.com/rust-lang/git2-rs/issues/811">#811</a>)</li> <li><a href="`af6fc41c29`"><code>af6fc41</code></a> Bump libgit2 in version probe and readme (<a href="https://github-redirect.dependabot.com/rust-lang/git2-rs/issues/808">#808</a>)</li> <li><a href="`509fe5832e`"><code>509fe58</code></a> Bump libgit2 to 1.4.0 (<a href="https://github-redirect.dependabot.com/rust-lang/git2-rs/issues/806">#806</a>)</li> <li><a href="`58ed9c32e1`"><code>58ed9c3</code></a> <code>libgit2-sys</code>: use <code>src</code> instead <code>.git</code> as vendored indicator (<a href="https://github-redirect.dependabot.com/rust-lang/git2-rs/issues/801">#801</a>)</li> <li><a href="`ae02afdbf0`"><code>ae02afd</code></a> Harmonize commitish and committish in docstrings (<a href="https://github-redirect.dependabot.com/rust-lang/git2-rs/issues/799">#799</a>)</li> <li>Additional commits viewable in <a href="https://github.com/rust-lang/git2-rs/compare/git2-curl-0.14.1...0.14.2">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=git2&package-manager=cargo&previous-version=0.14.1&new-version=0.14.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>	3 years ago
raskad	0027f26d21	Use function name from identifiers in assignment expressions (#1908 ) Use function name from identifiers in assignment expressions, when a function expressions does not contain a name.	3 years ago
jedel1043	51f75d8ccb	Update `yarn.lock` and add `build:prod` command (#1910 ) <!--- Thank you for contributing to Boa! Please fill out the template below, and remove or add any information as you feel neccesary. ---> This Pull Request makes it easier to build the Boa playground in production mode, with a new `build:prod` command.	3 years ago
raskad	a44be7073b	Fix postfix increment and decrement return values (#1913 ) This fixes a bug with the postfix increment and decrement. Before those operators would return the left-hand-side value, but the spec specifies they should return ToNumeric(left-had-side value).	3 years ago
dependabot[bot]	51ae856c83	Bump css-loader from 6.7.0 to 6.7.1 (#1914 ) Bumps [css-loader](https://github.com/webpack-contrib/css-loader) from 6.7.0 to 6.7.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/webpack-contrib/css-loader/releases">css-loader's releases</a>.</em></p> <blockquote> <h2>v6.7.1</h2> <h3><a href="https://github.com/webpack-contrib/css-loader/compare/v6.7.0...v6.7.1">6.7.1</a> (2022-03-08)</h3> <h3>Bug Fixes</h3> <ul> <li>defaultGetLocalIdent export (<a href="https://github-redirect.dependabot.com/webpack-contrib/css-loader/issues/1427">#1427</a>) (<a href="`74dac1e428`">74dac1e</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/webpack-contrib/css-loader/blob/master/CHANGELOG.md">css-loader's changelog</a>.</em></p> <blockquote> <h3><a href="https://github.com/webpack-contrib/css-loader/compare/v6.7.0...v6.7.1">6.7.1</a> (2022-03-08)</h3> <h3>Bug Fixes</h3> <ul> <li>defaultGetLocalIdent export (<a href="https://github-redirect.dependabot.com/webpack-contrib/css-loader/issues/1427">#1427</a>) (<a href="`74dac1e428`">74dac1e</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="`830fe2ce37`"><code>830fe2c</code></a> chore(release): 6.7.1</li> <li><a href="`74dac1e428`"><code>74dac1e</code></a> fix: defaultGetLocalIdent export (<a href="https://github-redirect.dependabot.com/webpack-contrib/css-loader/issues/1427">#1427</a>)</li> <li>See full diff in <a href="https://github.com/webpack-contrib/css-loader/compare/v6.7.0...v6.7.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=css-loader&package-manager=npm_and_yarn&previous-version=6.7.0&new-version=6.7.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>	3 years ago
dependabot[bot]	f7920cdca8	Bump regex from 1.5.4 to 1.5.5 (#1915 ) Bumps [regex](https://github.com/rust-lang/regex) from 1.5.4 to 1.5.5. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/rust-lang/regex/blob/master/CHANGELOG.md">regex's changelog</a>.</em></p> <blockquote> <h1>1.5.5 (2022-03-08)</h1> <p>This releases fixes a security bug in the regex compiler. This bug permits a vector for a denial-of-service attack in cases where the regex being compiled is untrusted. There are no known problems where the regex is itself trusted, including in cases of untrusted haystacks.</p> <ul> <li><a href="https://github.com/rust-lang/regex/security/advisories/GHSA-m5pq-gvj9-9vr8">SECURITY #GHSA-m5pq-gvj9-9vr8</a>: Fixes a bug in the regex compiler where empty sub-expressions subverted the existing mitigations in place to enforce a size limit on compiled regexes. The Rust Security Response WG published an advisory about this: <a href="https://groups.google.com/g/rustlang-security-announcements/c/NcNNL1Jq7Yw">https://groups.google.com/g/rustlang-security-announcements/c/NcNNL1Jq7Yw</a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="`d130381b15`"><code>d130381</code></a> 1.5.5</li> <li><a href="`ae70b41d4f`"><code>ae70b41</code></a> security: fix denial-of-service bug in compiler</li> <li><a href="`b92ffd5471`"><code>b92ffd5</code></a> cargo: use SPDX license format</li> <li><a href="`f6e52dafde`"><code>f6e52da</code></a> syntax: fix 'unused' warnings</li> <li><a href="`5197f21287`"><code>5197f21</code></a> fuzz: do not use inherits in Cargo.toml</li> <li><a href="`3662851482`"><code>3662851</code></a> doc: fix typo</li> <li><a href="`63ee6699a2`"><code>63ee669</code></a> syntax/doc: fix 'their' typo</li> <li><a href="`d6bc7a4c3b`"><code>d6bc7a4</code></a> readme: remove broken badge</li> <li><a href="`bd7466034f`"><code>bd74660</code></a> fuzz: try to fix build issue</li> <li><a href="`bd0a14231b`"><code>bd0a142</code></a> readme: fix badges</li> <li>Additional commits viewable in <a href="https://github.com/rust-lang/regex/compare/1.5.4...1.5.5">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=regex&package-manager=cargo&previous-version=1.5.4&new-version=1.5.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>	3 years ago
Addison Crump	92dbba6c5d	Prevent breaks without loop or switch from causing panics (#1860 ) This PR changes the following: - Replaces a panic with a syntax error when a break is used outside of a loop or switch - Adds a test for that	3 years ago
raskad	7f90829f88	Compile StatementList after parse passes on negative tests (#1906 ) This fixes an issue with 262 negative tests, that should produce a syntax errors. Currently we only parse the test code is such cases. If the parsing does not return an error, we do not compile the code further. This caused some panics. Most of them are fixed by now, the last ones will be fixed with #1860.	3 years ago
Jason Williams	44b5617d8d	Added boa examples (#1161 ) Added boa examples as per issue #446 Overtaken https://github.com/boa-dev/boa/pull/634 Somehow screwed that branch up by rebasing it and losing access pings @elasmojs This Pull Request fixes/closes #446 . Co-authored-by: Jason Williams <jase.williams@gmail.com> Co-authored-by: Iban Eguia (Razican) <razican@protonmail.ch> Co-authored-by: jasonwilliams <jase.williams@gmail.com> Co-authored-by: jedel1043 <jedel0124@gmail.com>	3 years ago
raskad	6ff36fb2a3	Implement destructing assignments for assignment expressions (#1895 ) It changes the following: - Implement destructing assignments for assignment expressions	3 years ago
jedel1043	9f9e36c910	Fix try/catch/finally related bugs and add tests (#1901 ) <!--- Thank you for contributing to Boa! Please fill out the template below, and remove or add any information as you feel neccesary. ---> This Pull Request fixes some bugs related to try blocks: - Fixes a panic when a finally block contained variable declarations. (Thanks to @VTCAKAVSMoACE for the report!) - Fixes a bug where try blocks in the last position of a statement list didn't return its inner last value as the result of the evaluation. - Add tests for both cases and two other common cases. - Extract and cleanup some code.	3 years ago
jedel1043	2a6ea9dad6	Deny const declarations without initializer inside for loops (#1903 ) <!--- Thank you for contributing to Boa! Please fill out the template below, and remove or add any information as you feel neccesary. ---> This Pull Request fixes/closes #1897. It changes the following: - Rejects uninitialized const declarations inside the init value of a for loop statement. - Adds test for the case.	3 years ago
dependabot[bot]	a49b57beb7	Bump css-loader from 6.6.0 to 6.7.0 (#1904 ) Bumps [css-loader](https://github.com/webpack-contrib/css-loader) from 6.6.0 to 6.7.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/webpack-contrib/css-loader/releases">css-loader's releases</a>.</em></p> <blockquote> <h2>v6.7.0</h2> <h2><a href="https://github.com/webpack-contrib/css-loader/compare/v6.6.0...v6.7.0">6.7.0</a> (2022-03-04)</h2> <h3>Features</h3> <ul> <li>re-export defaultGetLocalIdent (<a href="https://github-redirect.dependabot.com/webpack-contrib/css-loader/issues/1423">#1423</a>) (<a href="`207cf36d54`">207cf36</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/webpack-contrib/css-loader/blob/master/CHANGELOG.md">css-loader's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/webpack-contrib/css-loader/compare/v6.6.0...v6.7.0">6.7.0</a> (2022-03-04)</h2> <h3>Features</h3> <ul> <li>re-export defaultGetLocalIdent (<a href="https://github-redirect.dependabot.com/webpack-contrib/css-loader/issues/1423">#1423</a>) (<a href="`207cf36d54`">207cf36</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="`84b552ad8b`"><code>84b552a</code></a> chore(release): 6.7.0</li> <li><a href="`207cf36d54`"><code>207cf36</code></a> feat: re-export defaultGetLocalIdent (<a href="https://github-redirect.dependabot.com/webpack-contrib/css-loader/issues/1423">#1423</a>)</li> <li><a href="`f0e20e63fb`"><code>f0e20e6</code></a> chore: upgrade dependencies to the latest version (<a href="https://github-redirect.dependabot.com/webpack-contrib/css-loader/issues/1425">#1425</a>)</li> <li><a href="`4dede5553f`"><code>4dede55</code></a> docs(readme): added types (<a href="https://github-redirect.dependabot.com/webpack-contrib/css-loader/issues/1418">#1418</a>)</li> <li><a href="`e16ba4d15c`"><code>e16ba4d</code></a> chore(deps): bump nanoid from 3.1.30 to 3.2.0 (<a href="https://github-redirect.dependabot.com/webpack-contrib/css-loader/issues/1412">#1412</a>)</li> <li><a href="`76ad29f38e`"><code>76ad29f</code></a> docs: add yarn and pnpm installation commands (<a href="https://github-redirect.dependabot.com/webpack-contrib/css-loader/issues/1417">#1417</a>)</li> <li><a href="`67bb937e10`"><code>67bb937</code></a> chore: upgrade dependencies to the latest version (<a href="https://github-redirect.dependabot.com/webpack-contrib/css-loader/issues/1416">#1416</a>)</li> <li>See full diff in <a href="https://github.com/webpack-contrib/css-loader/compare/v6.6.0...v6.7.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=css-loader&package-manager=npm_and_yarn&previous-version=6.6.0&new-version=6.7.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>	3 years ago
dependabot[bot]	6378204052	Bump test262 from `18ce639` to `f7fb969` (#1905 ) Bumps [test262](https://github.com/tc39/test262) from `18ce639` to `f7fb969`. <details> <summary>Commits</summary> <ul> <li><a href="`f7fb969cc4`"><code>f7fb969</code></a> Add tests for T time designator prefix not allowing space</li> <li><a href="`131c396b6a`"><code>131c396</code></a> Remove number test (yields a different error, not an exception)</li> <li><a href="`8ff1e510b9`"><code>8ff1e51</code></a> Add a couple more types</li> <li><a href="`9c6e3aff38`"><code>9c6e3af</code></a> Move to more sensible location</li> <li><a href="`10f9a69295`"><code>10f9a69</code></a> Move test to a more sensible location</li> <li><a href="`ecd24faa82`"><code>ecd24fa</code></a> Fix buggy error message</li> <li><a href="`918cefcd09`"><code>918cefc</code></a> Check <code>formatRange</code> on many pairs of invalid arguments</li> <li><a href="`2f592de0aa`"><code>2f592de</code></a> Port tests for PlainTime.</li> <li>See full diff in <a href="`18ce639a4c...f7fb969cc4`">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>	3 years ago
Addison Crump	cc755db485	Continue panic fixes (#1896 ) This PR changes the following: - Fixes the panics induced by incorrect continues. - Adds tests which demonstrate the various panics induced. - Actually rustfmts correctly?	3 years ago
Addison Crump	7fa37b50bc	Fix unreachable panics in compile_access (#1861 ) This PR changes the following: - More elegantly handles illegal access statements in compile_access - Adds a slew of previously unhandled illegal access test cases ### Caveats It is very, very likely that you will want to simply restrict unary and assignment operations in the AST. However, this prevents crashes in the meantime with a error that is just slightly less detailed than if it were implemented in AST.	3 years ago

1 2 3 4 5 ...

1642 Commits (5002b9b8e40708952f10ca238abb5bb0d7ecaabc) All Branches Search

1642 Commits (5002b9b8e40708952f10ca238abb5bb0d7ecaabc)

All Branches