b44f6f0ad2
Bump bootstrap from 5.2.1 to 5.2.2 ( #2322 )
...
Bumps [bootstrap](https://github.com/twbs/bootstrap ) from 5.2.1 to 5.2.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/twbs/bootstrap/releases ">bootstrap's releases</a>.</em></p>
<blockquote>
<h2>v5.2.2</h2>
<h2>Highlights</h2>
<ul>
<li><strong>Accordion</strong>
<ul>
<li>Use Sass variable for the accordion color instead of an invalid CSS variable</li>
</ul>
</li>
<li><strong>Buttons</strong>
<ul>
<li>Undo changes to <code>.btn:hover</code> from v5.2.1. We now explicitly target <code>.btn-check</code> styles instead.</li>
</ul>
</li>
<li><strong>Dropdowns</strong>
<ul>
<li>Temporarily restore ability for dropdowns to work without an explicit <code>data</code> attribute (will be removed again in v6)</li>
</ul>
</li>
<li><strong>Modals</strong>
<ul>
<li>Improve modal event listeners</li>
<li>Use <code><h1></code> for all <code>.modal-title</code> instances in our docs</li>
</ul>
</li>
<li><strong>Tables</strong>
<ul>
<li>Don't redefine <code>$border-color</code> in <code>table-variant()</code> mixin</li>
</ul>
</li>
<li><strong>Tabs</strong>
<ul>
<li>Tabs no longer autofocus and cause pages to jump on <code>tab.show()</code></li>
<li>Fix <code>.active</code> class toggling of tabs within dropdowns</li>
</ul>
</li>
<li><strong>Toasts</strong>
<ul>
<li>Properly set toast <code>z-index</code> on <code>.toast-container</code> as opposed to individual <code>.toast</code>s that don't receive any other positioning</li>
</ul>
</li>
<li><strong>Tooltips</strong>
<ul>
<li>Fix tooltip selectors with <code>title</code> attribute on dynamically created elements</li>
</ul>
</li>
</ul>
<h2>🎨 CSS</h2>
<ul>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/37118 ">#37118</a>: Set toast z-index variable in the correct spot</li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/37165 ">#37165</a>: Explicitly target <code>.btn-check</code> and undo <code>:hover</code></li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/37182 ">#37182</a>: Use Sass variable for accordion color</li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/37239 ">#37239</a>: Don't redefine <code>$border-color</code> in <code>table-variant</code> mixin</li>
</ul>
<h2>☕ ️ JavaScript</h2>
<ul>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/36914 ">#36914</a>: Fix tooltip selector usage</li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/37128 ">#37128</a>: Fix modal event listeners</li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/37146 ">#37146</a>: Drop tabs auto-focus</li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/37151 ">#37151</a>: Fix active class toggling of tabs within dropdown</li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/37189 ">#37189</a>: Enrich Tab Test for keyboard handler</li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/37190 ">#37190</a>: Dropdown: fix case with invalid markup</li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/37200 ">#37200</a>: Ensure Tab keyboard functionality after <a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/37146 ">#37146</a></li>
</ul>
<h2>📖 Docs</h2>
<ul>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/36899 ">#36899</a>: Slightly improve image compression</li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/37142 ">#37142</a>: Add informative note for Tooltip/Popover selector option</li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/37145 ">#37145</a>: Docs: minor fix for Navbar > Offcanvas examples</li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/37153 ">#37153</a>: Fix typo in docs - Configure Vite section</li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/37199 ">#37199</a>: Replace Webpack and Vite PNGs by SVGs</li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/37210 ">#37210</a>: Use <code><h1></code> for all <code>modal-title</code> examples/uses</li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/37214 ">#37214</a>: Docs: Change <code>view in GitHub</code> links inside <code>main</code></li>
</ul>
<h2>🌎 Accessibility</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="961d5ff984https://github-redirect.dependabot.com/twbs/bootstrap/issues/37236 ">#37236</a>)</li>
<li><a href="9edfed8a5ehttps://github-redirect.dependabot.com/twbs/bootstrap/issues/37239 ">#37239</a>)</li>
<li><a href="d49d8ce583https://github-redirect.dependabot.com/twbs/bootstrap/issues/37146 ">#37146</a> (<a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/37200 ">#37200</a>)</li>
<li><a href="0a5f6e078chttps://github-redirect.dependabot.com/twbs/bootstrap/issues/37210 ">#37210</a>)</li>
<li><a href="812f891bfchttps://github-redirect.dependabot.com/twbs/bootstrap/issues/37238 ">#37238</a>)</li>
<li><a href="da0fe8c8b2https://github-redirect.dependabot.com/twbs/bootstrap/issues/37215 ">#37215</a>)</li>
<li><a href="abb1cf529fhttps://github-redirect.dependabot.com/twbs/bootstrap/issues/37186 ">#37186</a>)</li>
<li><a href="f84d82ada0https://github-redirect.dependabot.com/twbs/bootstrap/issues/36421 ">#36421</a>)</li>
<li><a href="80482af57bhttps://github-redirect.dependabot.com/twbs/bootstrap/issues/37214 ">#37214</a>)</li>
<li><a href="597c402314https://github-redirect.dependabot.com/twbs/bootstrap/issues/37190 ">#37190</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/twbs/bootstrap/compare/v5.2.1...v5.2.2 ">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
2 years ago
a3062d1f45
Fixing CI ( #2302 )
...
This PR fixes the CI after the version bump.
2 years ago
f5be60975b
Updated dependencies for 0.16 release ( #2300 )
...
This Pull Request updates the dependencies for the 0.16 release.
Co-authored-by: José Julián Espina <jedel0124@gmail.com>
2 years ago
558477f97a
Bump webpack-dev-server from 4.11.0 to 4.11.1 ( #2292 )
...
Bumps [webpack-dev-server](https://github.com/webpack/webpack-dev-server ) from 4.11.0 to 4.11.1.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/webpack/webpack-dev-server/blob/master/CHANGELOG.md ">webpack-dev-server's changelog</a>.</em></p>
<blockquote>
<h3><a href="https://github.com/webpack/webpack-dev-server/compare/v4.11.0...v4.11.1 ">4.11.1</a> (2022-09-19)</h3>
<h3>Bug Fixes</h3>
<ul>
<li>respect <code>client.logging</code> option for all logs (<a href="https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4572 ">#4572</a>) (<a href="375835c926418e932004375835c926https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4572 ">#4572</a>)</li>
<li><a href="ef2f9e934bhttps://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4575 ">#4575</a>)</li>
<li><a href="7da73365615d4b3479c9https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4574 ">#4574</a>)</li>
<li><a href="87072c7a70https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4571 ">#4571</a>)</li>
<li><a href="28f6381e1bhttps://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4567 ">#4567</a>)</li>
<li><a href="595003b286https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4568 ">#4568</a>)</li>
<li><a href="67acc2e786https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4569 ">#4569</a>)</li>
<li><a href="ad2dcc5081https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4570 ">#4570</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/webpack/webpack-dev-server/compare/v4.11.0...v4.11.1 ">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
2 years ago
ba91449e00
Bump webpack-dev-server from 4.10.1 to 4.11.0 ( #2270 )
...
Bumps [webpack-dev-server](https://github.com/webpack/webpack-dev-server ) from 4.10.1 to 4.11.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/webpack/webpack-dev-server/releases ">webpack-dev-server's releases</a>.</em></p>
<blockquote>
<h2>v4.11.0</h2>
<h2><a href="https://github.com/webpack/webpack-dev-server/compare/v4.10.1...v4.11.0 ">4.11.0</a> (2022-09-07)</h2>
<h3>Features</h3>
<ul>
<li>make allowedHosts accept localhost subdomains by default (<a href="https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4357 ">#4357</a>) (<a href="0a33e6a752https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4559 ">#4559</a>) (<a href="984af026a5https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4551 ">#4551</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/webpack/webpack-dev-server/blob/master/CHANGELOG.md ">webpack-dev-server's changelog</a>.</em></p>
<blockquote>
<h2><a href="https://github.com/webpack/webpack-dev-server/compare/v4.10.1...v4.11.0 ">4.11.0</a> (2022-09-07)</h2>
<h3>Features</h3>
<ul>
<li>make allowedHosts accept localhost subdomains by default (<a href="https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4357 ">#4357</a>) (<a href="0a33e6a752https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4559 ">#4559</a>) (<a href="984af026a5https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4551 ">#4551</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="8abb295bf7984af026a5https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4559 ">#4559</a>)</li>
<li><a href="85dcb31d76https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4557 ">#4557</a>)</li>
<li><a href="fe058dc586https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4558 ">#4558</a>)</li>
<li><a href="1368d1db05https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4556 ">#4556</a>)</li>
<li><a href="0a33e6a752https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4357 ">#4357</a>)</li>
<li><a href="088a318d72https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4553 ">#4553</a>)</li>
<li><a href="45ed9bdb5ahttps://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4554 ">#4554</a>)</li>
<li>See full diff in <a href="https://github.com/webpack/webpack-dev-server/compare/v4.10.1...v4.11.0 ">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
2 years ago
92ecbda7b2
Bump bootstrap from 5.2.0 to 5.2.1 ( #2271 )
...
Bumps [bootstrap](https://github.com/twbs/bootstrap ) from 5.2.0 to 5.2.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/twbs/bootstrap/releases ">bootstrap's releases</a>.</em></p>
<blockquote>
<h2>v5.2.1</h2>
<h2>🚀 Highlights</h2>
<ul>
<li><strong>Accordion</strong>
<ul>
<li>Update <code>color</code> value to use the <code>$accordion-button-color</code> Sass variable instead of our color contrast function</li>
</ul>
</li>
<li><strong>Buttons</strong>
<ul>
<li>Added a <code>transparent</code> default hover border color CSS variable for buttons to fix a visual regression</li>
<li><code>.btn-link</code> no longer has a gradient when <code>$enable-gradients</code> is set to <code>true</code></li>
</ul>
</li>
<li><strong>Forms</strong>
<ul>
<li>Input groups have updated <code>z-index</code> values to ensure proper rendering of validated form fields</li>
<li>Floating labels now reset their <code>text-align</code> to ensure consistent styling</li>
</ul>
</li>
<li><strong>List Groups</strong>
<ul>
<li>Horizontal list groups with only one child now render the correct <code>border-radius</code></li>
<li>Modified the <code>list-group-item</code> selectors to better support nested imports of Bootstrap's CSS</li>
</ul>
</li>
<li><strong>Modals</strong>
<ul>
<li>Fixed modal event listeners during dismiss click, allowing you to once again click scrollbars without dismissing the modal</li>
</ul>
</li>
<li><strong>Pagination</strong>
<ul>
<li>Fixed incorrect <code>border-radius</code> values inside pagination components</li>
</ul>
</li>
<li><strong>Scrollspy</strong>
<ul>
<li>Scrollspy threshold option is now configurable</li>
</ul>
</li>
<li><strong>Tooltips</strong>
<ul>
<li>Reverted some tooltip plugin updates to prevent issues with <code>selector</code>, dynamic content, and disposed tooltips using <code>title</code></li>
</ul>
</li>
</ul>
<h2>🚀 Features</h2>
<ul>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/36750 ">#36750</a>: ScrollSpy: make the threshold option configurable</li>
</ul>
<h2>🎨 CSS</h2>
<ul>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/36507 ">#36507</a>: v5/docs: reintroduce <code>outline</code> for docs code samples, buttons when <code>:not(:focus-visible)</code></li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/36593 ">#36593</a>: flush variant of accordion border radius</li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/36663 ">#36663</a>: fix <a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/36662 ">#36662</a> List-group-item margin-top is offset when importing sass in a nested class</li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/36694 ">#36694</a>: Docs: add grid-row-columns variable</li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/36791 ">#36791</a>: Remove a unused sass parameter from banner mixin</li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/36828 ">#36828</a>: Fix pagination page items border radius</li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/36849 ">#36849</a>: Define correctly <code>$popover-header-color</code></li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/36873 ">#36873</a>: Fix floating labels under <code>.text-center</code></li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/36874 ">#36874</a>: Floating labels in input group: Border fix</li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/36921 ">#36921</a>: Accordion color should use $accordion-color</li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/36986 ">#36986</a>: bugfix undefined border color variable for btn <a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/36938 ">#36938</a></li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/37017 ">#37017</a>: List group: Fix horizontal when only one child</li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/37021 ">#37021</a>: Scss: Adding missing <code>z-index</code> CSS variables.</li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/37026 ">#37026</a>: Rework button focus/active styling, with extra changes for checks/radios</li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/37027 ">#37027</a>: Search modal: Set cursor on auto</li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/37034 ">#37034</a>: More consistency for CSS/Sass vars doc for components with dark variants</li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/37059 ">#37059</a>: Fix input group z-index focus + validation</li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/37078 ">#37078</a>: Remove gradient from <code>.btn-link</code></li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/37079 ">#37079</a>: Add workarounds for postcss values parser error</li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/37080 ">#37080</a>: btn-group draws first input margin <a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/36794 ">#36794</a></li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/37093 ">#37093</a>: Fix accordion button color</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="23e50829f9https://github-redirect.dependabot.com/twbs/bootstrap/issues/37098 ">#37098</a>)</li>
<li><a href="23fb7a7915https://github-redirect.dependabot.com/twbs/bootstrap/issues/36863 ">#36863</a>)</li>
<li><a href="949456984ahttps://github-redirect.dependabot.com/twbs/bootstrap/issues/37086 ">#37086</a>)</li>
<li><a href="7a7469b8ab9b943880fc97a9060a8f2504b8995032c457db4bhttps://github-redirect.dependabot.com/twbs/bootstrap/issues/37 ">#37</a>...</li>
<li><a href="b8880e5eec75e09b1c0fhttps://github-redirect.dependabot.com/twbs/bootstrap/issues/36968 ">#36968</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/twbs/bootstrap/compare/v5.2.0...v5.2.1 ">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
2 years ago
cb610d8073
Bump webpack-dev-server from 4.10.0 to 4.10.1 ( #2253 )
...
Bumps [webpack-dev-server](https://github.com/webpack/webpack-dev-server ) from 4.10.0 to 4.10.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/webpack/webpack-dev-server/releases ">webpack-dev-server's releases</a>.</em></p>
<blockquote>
<h2>v4.10.1</h2>
<h3><a href="https://github.com/webpack/webpack-dev-server/compare/v4.10.0...v4.10.1 ">4.10.1</a> (2022-08-29)</h3>
<h3>Bug Fixes</h3>
<ul>
<li>compatibility with old browsers (<a href="https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4544 ">#4544</a>) (<a href="6a430d495ehttps://github.com/webpack/webpack-dev-server/blob/master/CHANGELOG.md ">webpack-dev-server's changelog</a>.</em></p>
<blockquote>
<h3><a href="https://github.com/webpack/webpack-dev-server/compare/v4.10.0...v4.10.1 ">4.10.1</a> (2022-08-29)</h3>
<h3>Bug Fixes</h3>
<ul>
<li>compatibility with old browsers (<a href="https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4544 ">#4544</a>) (<a href="6a430d495eeb997bba984eed30e606https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4545 ">#4545</a>)</li>
<li><a href="97dba79fechttps://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4550 ">#4550</a>)</li>
<li><a href="a2eb40cfd0https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4548 ">#4548</a>)</li>
<li><a href="6a430d495ehttps://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4544 ">#4544</a>)</li>
<li><a href="735864c305https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4546 ">#4546</a>)</li>
<li><a href="22443c2a42https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4549 ">#4549</a>)</li>
<li><a href="02e11e133dhttps://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4547 ">#4547</a>)</li>
<li><a href="751214a294https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4541 ">#4541</a>)</li>
<li><a href="544543a0b3https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4542 ">#4542</a>)</li>
<li>See full diff in <a href="https://github.com/webpack/webpack-dev-server/compare/v4.10.0...v4.10.1 ">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
2 years ago
d9720f71ab
Bump terser-webpack-plugin from 5.3.5 to 5.3.6 ( #2254 )
...
Bumps [terser-webpack-plugin](https://github.com/webpack-contrib/terser-webpack-plugin ) from 5.3.5 to 5.3.6.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/webpack-contrib/terser-webpack-plugin/releases ">terser-webpack-plugin's releases</a>.</em></p>
<blockquote>
<h2>v5.3.6</h2>
<h3><a href="https://github.com/webpack-contrib/terser-webpack-plugin/compare/v5.3.5...v5.3.6 ">5.3.6</a> (2022-08-29)</h3>
<h3>Bug Fixes</h3>
<ul>
<li>allow disable compress options for <code>terser</code> and <code>swc</code> (<a href="https://github-redirect.dependabot.com/webpack-contrib/terser-webpack-plugin/issues/514 ">#514</a>) (<a href="52c1aef218https://github.com/webpack-contrib/terser-webpack-plugin/blob/master/CHANGELOG.md ">terser-webpack-plugin's changelog</a>.</em></p>
<blockquote>
<h3><a href="https://github.com/webpack-contrib/terser-webpack-plugin/compare/v5.3.5...v5.3.6 ">5.3.6</a> (2022-08-29)</h3>
<h3>Bug Fixes</h3>
<ul>
<li>allow disable compress options for <code>terser</code> and <code>swc</code> (<a href="https://github-redirect.dependabot.com/webpack-contrib/terser-webpack-plugin/issues/514 ">#514</a>) (<a href="52c1aef2189718859ada52c1aef218https://github-redirect.dependabot.com/webpack-contrib/terser-webpack-plugin/issues/514 ">#514</a>)</li>
<li>See full diff in <a href="https://github.com/webpack-contrib/terser-webpack-plugin/compare/v5.3.5...v5.3.6 ">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
2 years ago
28c13a420c
Bump terser-webpack-plugin from 5.3.4 to 5.3.5 ( #2240 )
...
Bumps [terser-webpack-plugin](https://github.com/webpack-contrib/terser-webpack-plugin ) from 5.3.4 to 5.3.5.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/webpack-contrib/terser-webpack-plugin/releases ">terser-webpack-plugin's releases</a>.</em></p>
<blockquote>
<h2>v5.3.5</h2>
<h3><a href="https://github.com/webpack-contrib/terser-webpack-plugin/compare/v5.3.4...v5.3.5 ">5.3.5</a> (2022-08-16)</h3>
<h3>Bug Fixes</h3>
<ul>
<li>types (<a href="https://github-redirect.dependabot.com/webpack-contrib/terser-webpack-plugin/issues/512 ">#512</a>) (<a href="5c13ba748fhttps://github.com/webpack-contrib/terser-webpack-plugin/blob/master/CHANGELOG.md ">terser-webpack-plugin's changelog</a>.</em></p>
<blockquote>
<h3><a href="https://github.com/webpack-contrib/terser-webpack-plugin/compare/v5.3.4...v5.3.5 ">5.3.5</a> (2022-08-16)</h3>
<h3>Bug Fixes</h3>
<ul>
<li>types (<a href="https://github-redirect.dependabot.com/webpack-contrib/terser-webpack-plugin/issues/512 ">#512</a>) (<a href="5c13ba748fc5a9d4146c5c13ba748fhttps://github-redirect.dependabot.com/webpack-contrib/terser-webpack-plugin/issues/512 ">#512</a>)</li>
<li><a href="9ebedf27a1https://github-redirect.dependabot.com/webpack-contrib/terser-webpack-plugin/issues/510 ">#510</a>)</li>
<li>See full diff in <a href="https://github.com/webpack-contrib/terser-webpack-plugin/compare/v5.3.4...v5.3.5 ">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
2 years ago
dab00f03e0
Bump terser-webpack-plugin from 5.3.3 to 5.3.4 ( #2235 )
...
Bumps [terser-webpack-plugin](https://github.com/webpack-contrib/terser-webpack-plugin ) from 5.3.3 to 5.3.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/webpack-contrib/terser-webpack-plugin/releases ">terser-webpack-plugin's releases</a>.</em></p>
<blockquote>
<h2>v5.3.4</h2>
<h3><a href="https://github.com/webpack-contrib/terser-webpack-plugin/compare/v5.3.3...v5.3.4 ">5.3.4</a> (2022-08-12)</h3>
<h3>Bug Fixes</h3>
<ul>
<li>respect environment options for terser and swc compress options (<a href="https://github-redirect.dependabot.com/webpack-contrib/terser-webpack-plugin/issues/509 ">#509</a>) (<a href="29bbc3ae1chttps://github.com/webpack-contrib/terser-webpack-plugin/blob/master/CHANGELOG.md ">terser-webpack-plugin's changelog</a>.</em></p>
<blockquote>
<h3><a href="https://github.com/webpack-contrib/terser-webpack-plugin/compare/v5.3.3...v5.3.4 ">5.3.4</a> (2022-08-12)</h3>
<h3>Bug Fixes</h3>
<ul>
<li>respect environment options for terser and swc compress options (<a href="https://github-redirect.dependabot.com/webpack-contrib/terser-webpack-plugin/issues/509 ">#509</a>) (<a href="29bbc3ae1c9a6e47c10b29bbc3ae1chttps://github-redirect.dependabot.com/webpack-contrib/terser-webpack-plugin/issues/509 ">#509</a>)</li>
<li><a href="64f2ff5ac9https://github-redirect.dependabot.com/webpack-contrib/terser-webpack-plugin/issues/508 ">#508</a>)</li>
<li><a href="d17562a1d5https://github-redirect.dependabot.com/webpack-contrib/terser-webpack-plugin/issues/505 ">#505</a>)</li>
<li><a href="7515a5a85bhttps://github-redirect.dependabot.com/webpack-contrib/terser-webpack-plugin/issues/504 ">#504</a>)</li>
<li><a href="bc1ddccd07https://github-redirect.dependabot.com/webpack-contrib/terser-webpack-plugin/issues/497 ">#497</a>)</li>
<li><a href="01e4b9d3e2https://github-redirect.dependabot.com/webpack-contrib/terser-webpack-plugin/issues/499 ">#499</a>)</li>
<li><a href="e7d39aefbdhttps://github-redirect.dependabot.com/webpack-contrib/terser-webpack-plugin/issues/496 ">#496</a>)</li>
<li><a href="ccf48f1340https://github-redirect.dependabot.com/webpack-contrib/terser-webpack-plugin/issues/494 ">#494</a>)</li>
<li>See full diff in <a href="https://github.com/webpack-contrib/terser-webpack-plugin/compare/v5.3.3...v5.3.4 ">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
2 years ago
af72e6178d
Bump webpack-dev-server from 4.9.3 to 4.10.0 ( #2228 )
...
Bumps [webpack-dev-server](https://github.com/webpack/webpack-dev-server ) from 4.9.3 to 4.10.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/webpack/webpack-dev-server/releases ">webpack-dev-server's releases</a>.</em></p>
<blockquote>
<h2>v4.10.0</h2>
<h2><a href="https://github.com/webpack/webpack-dev-server/compare/v4.9.3...v4.10.0 ">4.10.0</a> (2022-08-10)</h2>
<h3>Features</h3>
<ul>
<li>allow to configure more <code>client</code> options via resource URL (<a href="https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4274 ">#4274</a>) (<a href="216e3cbe62https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4185 ">#4185</a>) (<a href="2b3b7e000fhttps://github.com/webpack/webpack-dev-server/blob/master/CHANGELOG.md ">webpack-dev-server's changelog</a>.</em></p>
<blockquote>
<h2><a href="https://github.com/webpack/webpack-dev-server/compare/v4.9.3...v4.10.0 ">4.10.0</a> (2022-08-10)</h2>
<h3>Features</h3>
<ul>
<li>allow to configure more <code>client</code> options via resource URL (<a href="https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4274 ">#4274</a>) (<a href="216e3cbe62https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4185 ">#4185</a>) (<a href="2b3b7e000f49efdf87342b3b7e000fhttps://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4185 ">#4185</a>)</li>
<li><a href="480f1e1312https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4533 ">#4533</a>)</li>
<li><a href="890f27254ahttps://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4535 ">#4535</a>)</li>
<li><a href="75ff939c41https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4537 ">#4537</a>)</li>
<li><a href="56ac714705https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4538 ">#4538</a>)</li>
<li><a href="7a92f8af55https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4539 ">#4539</a>)</li>
<li><a href="7b2fc6a22ahttps://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4536 ">#4536</a>)</li>
<li><a href="695b43ab2chttps://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4534 ">#4534</a>)</li>
<li><a href="83951c8762https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4530 ">#4530</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/webpack/webpack-dev-server/compare/v4.9.3...v4.10.0 ">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
2 years ago
a42716b7e5
Bump monaco-editor from 0.33.0 to 0.34.0 ( #2221 )
...
Bumps [monaco-editor](https://github.com/microsoft/monaco-editor ) from 0.33.0 to 0.34.0.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/microsoft/monaco-editor/blob/main/CHANGELOG.md ">monaco-editor's changelog</a>.</em></p>
<blockquote>
<h2>[0.34.0]</h2>
<ul>
<li>Introduction of <code>IEditor.createDecorationsCollection</code> API</li>
<li>New function <code>removeAllMarkers</code> to remove all markers</li>
<li>Support for light high contrast theme</li>
<li>Introduction of <code>BracketPairColorizationOptions.independentColorPoolPerBracketType</code></li>
<li>Introduction of <code>PositionAffinity.LeftOfInjectedText</code> and <code>PositionAffinity.RightOfInjectedText</code></li>
<li>Introduction of <code>IEditorOptions.showFoldingControls: 'never'</code></li>
<li>Introduction of <code>IDiffEditorBaseOptions.renderMarginRevertIcon: boolean</code></li>
<li>Inline Quick Suggestions</li>
<li>Introduction of <code>IContentWidgetPosition.positionAffinity</code></li>
<li>Provider can now be registered for a <code>LanguageSelector</code></li>
</ul>
<h3>Breaking Changes</h3>
<ul>
<li><code>IEditorInlayHintsOptions</code> tweaks</li>
<li>Iteration on <code>InlineCompletion</code> API</li>
<li><code>WorkspaceFileEdit</code> -> <code>IWorkspaceFileEdit</code>
<ul>
<li><code>oldUri</code> -> <code>oldResource</code></li>
<li><code>newUri</code> -> <code>newResource</code></li>
</ul>
</li>
<li><code>WorkspaceTextEdit</code> -> <code>IWorkspaceTextEdit</code>
<ul>
<li><code>edit</code> -> <code>textEdit</code> (now supports <code>insertAsSnippet</code>)</li>
<li><code>modelVersionId?: number</code> -> <code>versionId: number | undefined</code></li>
</ul>
</li>
<li><code>InlayHint</code> API tweaks</li>
<li>Soft deprecation of <code>ICodeEditor.deltaDecorations</code>, no adoption required. <code>IEditor.createDecorationsCollection</code> API should be used instead.</li>
</ul>
<p>Contributions to <code>monaco-editor</code>:</p>
<ul>
<li><a href="https://github.com/alexander-zw "><code>@alexander-zw (Alexander Wu)</code></a>: [webpack readme] Add how to get languages/features [PR <a href="https://github-redirect.dependabot.com/microsoft/monaco-editor/issues/3171 ">#3171</a>](<a href="https://github-redirect.dependabot.com/microsoft/monaco-editor/pull/3171 ">microsoft/monaco-editor#3171</a>)</li>
<li><a href="https://github.com/anjbur "><code>@anjbur (Angela Burton)</code></a>: Update Q# keywords [PR <a href="https://github-redirect.dependabot.com/microsoft/monaco-editor/issues/3222 ">#3222</a>](<a href="https://github-redirect.dependabot.com/microsoft/monaco-editor/pull/3222 ">microsoft/monaco-editor#3222</a>)</li>
<li><a href="https://github.com/bsorrentino "><code>@bsorrentino (bsorrentino)</code></a>: Fix issue <a href="https://github-redirect.dependabot.com/microsoft/monaco-editor/issues/2295 ">#2295</a> - Models with "@" in their name do not resolve as dependencies [PR <a href="https://github-redirect.dependabot.com/microsoft/monaco-editor/issues/3057 ">#3057</a>](<a href="https://github-redirect.dependabot.com/microsoft/monaco-editor/pull/3057 ">microsoft/monaco-editor#3057</a>)</li>
<li><a href="https://github.com/MasterOdin "><code>@MasterOdin (Matthew Peveler)</code></a>: Remove duplicate testcases for mysql [PR <a href="https://github-redirect.dependabot.com/microsoft/monaco-editor/issues/3138 ">#3138</a>](<a href="https://github-redirect.dependabot.com/microsoft/monaco-editor/pull/3138 ">microsoft/monaco-editor#3138</a>)</li>
<li><a href="https://github.com/mhsdesign "><code>@mhsdesign (Marc Henry Schultz)</code></a>: [DOCS] IEditorOptions.automaticLayout uses ResizeObserver 3051 [PR <a href="https://github-redirect.dependabot.com/microsoft/monaco-editor/issues/3052 ">#3052</a>](<a href="https://github-redirect.dependabot.com/microsoft/monaco-editor/pull/3052 ">microsoft/monaco-editor#3052</a>)</li>
<li><a href="https://github.com/supersonictw "><code>@supersonictw (SuperSonic)</code></a>: Fix menu link in integrate-esm.md [PR <a href="https://github-redirect.dependabot.com/microsoft/monaco-editor/issues/3214 ">#3214</a>](<a href="https://github-redirect.dependabot.com/microsoft/monaco-editor/pull/3214 ">microsoft/monaco-editor#3214</a>)</li>
<li><a href="https://github.com/tonilastre "><code>@tonilastre (Toni)</code></a>: Add config and tokenizer for query language Cypher [PR <a href="https://github-redirect.dependabot.com/microsoft/monaco-editor/issues/3102 ">#3102</a>](<a href="https://github-redirect.dependabot.com/microsoft/monaco-editor/pull/3102 ">microsoft/monaco-editor#3102</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a href="https://github.com/microsoft/monaco-editor/commits ">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
2 years ago
fafa006c9a
Bump webpack from 5.73.0 to 5.74.0 ( #2201 )
...
Bumps [webpack](https://github.com/webpack/webpack ) from 5.73.0 to 5.74.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/webpack/webpack/releases ">webpack's releases</a>.</em></p>
<blockquote>
<h2>v5.74.0</h2>
<h1>Features</h1>
<ul>
<li>add <code>resolve.extensionAlias</code> option which allows to alias extensions
<ul>
<li>This is useful when you are forced to add the <code>.js</code> extension to imports when the file really has a <code>.ts</code> extension (typescript + <code>"type": "module"</code>)</li>
</ul>
</li>
<li>add support for ES2022 features like static blocks</li>
<li>add Tree Shaking support for <code>ProvidePlugin</code></li>
</ul>
<h1>Bugfixes</h1>
<ul>
<li>fix persistent cache when some build dependencies are on a different windows drive</li>
<li>make order of evaluation of side-effect-free modules deterministic between concatenated and non-concatenated modules</li>
<li>remove left-over from debugging in TLA/async modules runtime code</li>
<li>remove unneeded extra 1s timestamp offset during watching when files are actually untouched
<ul>
<li>This sometimes caused an additional second build which are not really needed</li>
</ul>
</li>
<li>fix <code>shareScope</code> option for <code>ModuleFederationPlugin</code></li>
<li>set `"use-credentials"`` also for same origin scripts</li>
</ul>
<h1>Performance</h1>
<ul>
<li>Improve memory usage and performance of aggregating needed files/directories for watching
<ul>
<li>This affects rebuild performance</li>
</ul>
</li>
</ul>
<h1>Extensibility</h1>
<ul>
<li>export <code>HarmonyImportDependency</code> for plugins</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="8f87b50dc73e1f24498dhttps://github-redirect.dependabot.com/webpack/webpack/issues/16071 ">#16071</a> from devinan/patch-1</li>
<li><a href="c7e14e2e8ehttps://github-redirect.dependabot.com/webpack/webpack/issues/15910 ">#15910</a> from ludofischer/fix-message</li>
<li><a href="7b63346518https://github-redirect.dependabot.com/webpack/webpack/issues/15627 ">#15627</a> from webpack/feat/issue-12441</li>
<li><a href="402d152ccfhttps://github-redirect.dependabot.com/webpack/webpack/issues/15642 ">#15642</a> from webpack/set-use-credentials-without-origin-check</li>
<li><a href="fcb0e35f82https://github-redirect.dependabot.com/webpack/webpack/issues/15996 ">#15996</a> from webdiscus/main</li>
<li><a href="6dc6a19ae1https://github-redirect.dependabot.com/webpack/webpack/issues/16031 ">#16031</a> from evantd/main</li>
<li><a href="52351a654ahttps://github-redirect.dependabot.com/webpack/webpack/issues/16033 ">#16033</a> from varunsh-coder/token-perms</li>
<li><a href="555915b412https://github-redirect.dependabot.com/webpack/webpack/issues/16065 ">#16065</a> from webpack/fix/issue-16054</li>
<li><a href="d4cab5b6f7https://github-redirect.dependabot.com/webpack/webpack/issues/16077 ">#16077</a> from webpack/fix-scheme</li>
<li>Additional commits viewable in <a href="https://github.com/webpack/webpack/compare/v5.73.0...v5.74.0 ">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
2 years ago
deb0d90dc4
Bump terser from 5.14.0 to 5.14.2 ( #2197 )
...
Bumps [terser](https://github.com/terser/terser ) from 5.14.0 to 5.14.2.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/terser/terser/blob/master/CHANGELOG.md ">terser's changelog</a>.</em></p>
<blockquote>
<h2>v5.14.2</h2>
<ul>
<li>Security fix for RegExps that should not be evaluated (regexp DDOS)</li>
<li>Source maps improvements (<a href="https://github-redirect.dependabot.com/terser/terser/issues/1211 ">#1211</a>)</li>
<li>Performance improvements in long property access evaluation (<a href="https://github-redirect.dependabot.com/terser/terser/issues/1213 ">#1213</a>)</li>
</ul>
<h2>v5.14.1</h2>
<ul>
<li>keep_numbers option added to TypeScript defs (<a href="https://github-redirect.dependabot.com/terser/terser/issues/1208 ">#1208</a>)</li>
<li>Fixed parsing of nested template strings (<a href="https://github-redirect.dependabot.com/terser/terser/issues/1204 ">#1204</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a href="https://github.com/terser/terser/commits ">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/boa-dev/boa/network/alerts ).
</details>
2 years ago
fc30061453
Bump bootstrap from 5.1.3 to 5.2.0 ( #2194 )
...
Bumps [bootstrap](https://github.com/twbs/bootstrap ) from 5.1.3 to 5.2.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/twbs/bootstrap/releases ">bootstrap's releases</a>.</em></p>
<blockquote>
<h2>v5.2.0</h2>
<h2>🚀 Highlights</h2>
<ul>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/36168 ">#36168</a>: Manually set hover and active backgrounds and borders for dark and light buttons</li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/36327 ">#36327</a>: Truncate text to prevent multiline floating label</li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/36382 ">#36382</a>: Rewrite Webpack guide</li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/36411 ">#36411</a>: Rewrite Parcel guide</li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/36412 ">#36412</a>: Docs: Add a Vite Getting Started guide</li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/36500 ">#36500</a>: Generate local CSS variables on utilities when using state option</li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/36528 ">#36528</a>: Scrollspy: enable <code>smooth-scroll</code> behavior</li>
</ul>
<h2>🚀 Features</h2>
<ul>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/36352 ">#36352</a>: Fix StackBlitz examples by embedding snippets.js when needed</li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/36528 ">#36528</a>: Scrollspy: enable <code>smooth-scroll</code> behavior</li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/36759 ">#36759</a>: Support input groups in floating forms</li>
</ul>
<h2>🎨 CSS</h2>
<ul>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/36156 ">#36156</a>: Update <code>.form-control-color</code> sizing and styles</li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/36168 ">#36168</a>: Manually set hover and active backgrounds and borders for dark and light buttons</li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/36178 ">#36178</a>: Add a banner mixin, helping future releases and maintenance</li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/36327 ">#36327</a>: Truncate text to prevent multiline floating label</li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/36353 ">#36353</a>: Fix offcanvas not showing with <code>.showing</code></li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/36366 ">#36366</a>: add back focus box shadow to <code>btn-link</code></li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/36406 ">#36406</a>: CSS: few proposals</li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/36423 ">#36423</a>: Stylelint: Disable <code>custom-property-empty-line-before</code></li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/36446 ">#36446</a>: Update Sass for computing <code>.table-group-divider</code> border</li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/36447 ">#36447</a>: Fix <code>.dropdown-item</code> <code>border-radius</code> when <code>$dropdown-padding-y</code> is <code>0</code></li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/36461 ">#36461</a>: Fix alert border radius</li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/36476 ">#36476</a>: Docs: fix Reboot Horizontal rules using border utilities</li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/36477 ">#36477</a>: Docs: remove unused _algolia.scss</li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/36499 ">#36499</a>: Don't style <code>readonly</code> inputs as <code>disabled</code></li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/36500 ">#36500</a>: Generate local CSS variables on utilities when using state option</li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/36509 ">#36509</a>: Remove <code>--bs-headings-color</code> CSS variable due to backward compatibility issues</li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/36535 ">#36535</a>: Fix 'Remove from map' Sass description</li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/36608 ">#36608</a>: dashboard example: minor fix</li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/36627 ">#36627</a>: Fix search modal z-index to be on top of all docs showcased components</li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/36646 ">#36646</a>: Fix tooltip/badge border radius when rounded disabled</li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/36680 ">#36680</a>: Revert db61cf3 for <code>$text-muted</code> default value</li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/36689 ">#36689</a>: Add missing CSS vars for <code>.navbar-nav</code></li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/36704 ">#36704</a>: Fix missing <code>--bs-btn-disabled-border-color</code> in <code>button-outline-variant</code> mixin</li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/36711 ">#36711</a>: Add <code>$display-font-family</code> and <code>$display-font-style</code></li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/36740 ">#36740</a>: Fixing pagination compile issue</li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/36747 ">#36747</a>: Fix active/focused button link text color</li>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/36759 ">#36759</a>: Support input groups in floating forms</li>
</ul>
<h2>☕ ️ JavaScript</h2>
<ul>
<li><a href="https://github-redirect.dependabot.com/twbs/bootstrap/issues/35679 ">#35679</a>: Force tooltip and popover to recreate content every time it opens</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="edf9c40956https://github-redirect.dependabot.com/twbs/bootstrap/issues/36768 ">#36768</a>)</li>
<li><a href="f451b4161ehttps://github-redirect.dependabot.com/twbs/bootstrap/issues/36772 ">#36772</a>)</li>
<li><a href="4035ad1a0ehttps://github-redirect.dependabot.com/twbs/bootstrap/issues/36767 ">#36767</a>)</li>
<li><a href="eae51cdf32https://github-redirect.dependabot.com/twbs/bootstrap/issues/36762 ">#36762</a>)</li>
<li><a href="705d6857adhttps://github-redirect.dependabot.com/twbs/bootstrap/issues/36763 ">#36763</a>)</li>
<li><a href="154916ca2e9d5c834f94150b374933d262a50c1fhttps://github-redirect.dependabot.com/twbs/bootstrap/issues/36760 ">#36760</a>)</li>
<li><a href="71cbb88f09https://github-redirect.dependabot.com/twbs/bootstrap/issues/36759 ">#36759</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/twbs/bootstrap/compare/v5.1.3...v5.2.0 ">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
2 years ago
a2a33e749f
Bump webpack-dev-server from 4.9.2 to 4.9.3 ( #2151 )
...
Bumps [webpack-dev-server](https://github.com/webpack/webpack-dev-server ) from 4.9.2 to 4.9.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/webpack/webpack-dev-server/releases ">webpack-dev-server's releases</a>.</em></p>
<blockquote>
<h2>v4.9.3</h2>
<h3><a href="https://github.com/webpack/webpack-dev-server/compare/v4.9.2...v4.9.3 ">4.9.3</a> (2022-06-29)</h3>
<h3>Bug Fixes</h3>
<ul>
<li>avoid creation unnecessary stream for static sockjs file (<a href="https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4482 ">#4482</a>) (<a href="049b153b878936082809https://github.com/webpack/webpack-dev-server/blob/master/CHANGELOG.md ">webpack-dev-server's changelog</a>.</em></p>
<blockquote>
<h3><a href="https://github.com/webpack/webpack-dev-server/compare/v4.9.2...v4.9.3 ">4.9.3</a> (2022-06-29)</h3>
<h3>Bug Fixes</h3>
<ul>
<li>avoid creation unnecessary stream for static sockjs file (<a href="https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4482 ">#4482</a>) (<a href="049b153b878936082809fa5e454d1942facd28ebhttps://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4506 ">#4506</a>)</li>
<li><a href="257549bd8ahttps://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4507 ">#4507</a>)</li>
<li><a href="8936082809e0c4e7edf3https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4504 ">#4504</a>)</li>
<li><a href="0370b5a527https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4503 ">#4503</a>)</li>
<li><a href="73129c7f9dhttps://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4505 ">#4505</a>)</li>
<li><a href="0e0100201chttps://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4502 ">#4502</a>)</li>
<li><a href="8866300f05https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4500 ">#4500</a>)</li>
<li><a href="7f1f2027dchttps://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4499 ">#4499</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/webpack/webpack-dev-server/compare/v4.9.2...v4.9.3 ">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
2 years ago
80e804c8fd
Bump prettier from 2.7.0 to 2.7.1 ( #2126 )
...
Bumps [prettier](https://github.com/prettier/prettier ) from 2.7.0 to 2.7.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/prettier/prettier/releases ">prettier's releases</a>.</em></p>
<blockquote>
<h2>2.7.1</h2>
<p>🔗 <a href="https://github.com/prettier/prettier/blob/main/CHANGELOG.md#271 ">Changelog</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/prettier/prettier/blob/main/CHANGELOG.md ">prettier's changelog</a>.</em></p>
<blockquote>
<h1>2.7.1</h1>
<p><a href="https://github.com/prettier/prettier/compare/2.7.0...2.7.1 ">diff</a></p>
<h4>Keep useful empty lines in description (<a href="https://github-redirect.dependabot.com/prettier/prettier/pull/13013 ">#13013</a> by <a href="https://github.com/chimurai "><code>@chimurai</code></a>)</h4>
<!-- raw HTML omitted -->
<pre lang="graphql"><code># Input
"""
First line
<p>Second Line
"""
type Person {
name: String
}
</code></pre></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="eeed611c72794d9d1558https://github-redirect.dependabot.com/prettier/prettier/issues/13013 ">#13013</a>)</li>
<li><a href="dd2af6f053b21772baaa5530ad24b9c7c99305e9448786fe356b388faa50109333ad9959ec4f2ef4https://github.com/prettier/prettier/compare/2.7.0...2.7.1 ">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
2 years ago
69f806d99d
Bump prettier from 2.6.2 to 2.7.0 ( #2120 )
...
Bumps [prettier](https://github.com/prettier/prettier ) from 2.6.2 to 2.7.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/prettier/prettier/releases ">prettier's releases</a>.</em></p>
<blockquote>
<h2>2.7.0</h2>
<p><a href="https://github.com/prettier/prettier/compare/2.7.0...2.7.0 ">diff</a></p>
<p>🔗 <a href="https://prettier.io/blog/2022/06/14/2.7.0.html ">Release note</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/prettier/prettier/blob/main/CHANGELOG.md ">prettier's changelog</a>.</em></p>
<blockquote>
<h1>2.7.0</h1>
<p><a href="https://github.com/prettier/prettier/compare/2.6.2...2.7.0 ">diff</a></p>
<p>🔗 <a href="https://prettier.io/blog/2022/06/14/2.7.0.html ">Release Notes</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="13dcc1633000ee6fb6f8d2bcaea121https://github-redirect.dependabot.com/prettier/prettier/issues/12982 ">#12982</a>)</li>
<li><a href="1bec824556https://github-redirect.dependabot.com/prettier/prettier/issues/12995 ">#12995</a>)</li>
<li><a href="2316e2fecdhttps://github-redirect.dependabot.com/prettier/prettier/issues/12994 ">#12994</a>)</li>
<li><a href="e5868ad368fdccc0f48ehttps://github-redirect.dependabot.com/prettier/prettier/issues/12800 ">#12800</a>)</li>
<li><a href="97bab8f984https://github-redirect.dependabot.com/prettier/prettier/issues/12993 ">#12993</a>)</li>
<li><a href="7f9a08762dhttps://github-redirect.dependabot.com/prettier/prettier/issues/12990 ">#12990</a>)</li>
<li><a href="aa1d536e29https://github-redirect.dependabot.com/prettier/prettier/issues/12984 ">#12984</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/prettier/prettier/compare/2.6.2...2.7.0 ">compare view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a href="https://www.npmjs.com/~prettier-bot ">prettier-bot</a>, a new releaser for prettier since your current version.</p>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
2 years ago
0e0ee49f95
Bump webpack-cli from 4.9.2 to 4.10.0 ( #2118 )
...
Bumps [webpack-cli](https://github.com/webpack/webpack-cli ) from 4.9.2 to 4.10.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/webpack/webpack-cli/releases ">webpack-cli's releases</a>.</em></p>
<blockquote>
<h2>v4.10.0</h2>
<h1><a href="https://github.com/webpack/webpack-cli/compare/webpack-cli@4.9.2...webpack-cli@4.10.0 ">4.10.0</a> (2022-06-13)</h1>
<h3>Bug Fixes</h3>
<ul>
<li>changeTime is already in milliseconds (<a href="https://github-redirect.dependabot.com/webpack/webpack-cli/issues/3198 ">#3198</a>) (<a href="d390d32fe0https://github-redirect.dependabot.com/webpack/webpack-cli/issues/3286 ">#3286</a>) (<a href="402c0fe9d48ec1375092https://github.com/webpack/webpack-cli/blob/master/CHANGELOG.md ">webpack-cli's changelog</a>.</em></p>
<blockquote>
<h1><a href="https://github.com/webpack/webpack-cli/compare/webpack-cli@4.9.2...webpack-cli@4.10.0 ">4.10.0</a> (2022-06-13)</h1>
<h3>Bug Fixes</h3>
<ul>
<li>changeTime is already in milliseconds (<a href="https://github-redirect.dependabot.com/webpack/webpack-cli/issues/3198 ">#3198</a>) (<a href="d390d32fe0https://github-redirect.dependabot.com/webpack/webpack-cli/issues/3286 ">#3286</a>) (<a href="402c0fe9d48ec137509220882d463422f013b0f1https://github-redirect.dependabot.com/webpack/webpack-cli/issues/3292 ">#3292</a>)</li>
<li><a href="3e1df05713https://github-redirect.dependabot.com/webpack/webpack-cli/issues/3289 ">#3289</a>)</li>
<li><a href="402c0fe9d4https://github-redirect.dependabot.com/webpack/webpack-cli/issues/3286 ">#3286</a>)</li>
<li><a href="ce7352d840https://github-redirect.dependabot.com/webpack/webpack-cli/issues/3287 ">#3287</a>)</li>
<li><a href="652cc70216https://github-redirect.dependabot.com/webpack/webpack-cli/issues/3288 ">#3288</a>)</li>
<li><a href="1072e3880ehttps://github-redirect.dependabot.com/webpack/webpack-cli/issues/3285 ">#3285</a>)</li>
<li><a href="6075c636ce979dbade279941274f22https://github-redirect.dependabot.com/webpack/webpack-cli/issues/3282 ">#3282</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/webpack/webpack-cli/compare/webpack-cli@4.9.2...webpack-cli@4.10.0 ">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
2 years ago
1dbd31e2b7
Added changelog, updated dependencies, bumped version number for 0.15 ( #2102 )
...
This Pull Request bumps the version number to 0.15, adds the changelog for this new versions and updates all dependencies to the latest versions.
2 years ago
5002b9b8e4
Bump webpack-dev-server from 4.9.1 to 4.9.2 ( #2105 )
...
Bumps [webpack-dev-server](https://github.com/webpack/webpack-dev-server ) from 4.9.1 to 4.9.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/webpack/webpack-dev-server/releases ">webpack-dev-server's releases</a>.</em></p>
<blockquote>
<h2>v4.9.2</h2>
<h3><a href="https://github.com/webpack/webpack-dev-server/compare/v4.9.1...v4.9.2 ">4.9.2</a> (2022-06-06)</h3>
<h3>Bug Fixes</h3>
<ul>
<li>add <code>@types/serve-static</code> to dependencies (<a href="https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4468 ">#4468</a>) (<a href="af83deb199https://github.com/webpack/webpack-dev-server/blob/master/CHANGELOG.md ">webpack-dev-server's changelog</a>.</em></p>
<blockquote>
<h3><a href="https://github.com/webpack/webpack-dev-server/compare/v4.9.1...v4.9.2 ">4.9.2</a> (2022-06-06)</h3>
<h3>Bug Fixes</h3>
<ul>
<li>add <code>@types/serve-static</code> to dependencies (<a href="https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4468 ">#4468</a>) (<a href="af83deb199297f8f0417af83deb199https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4468 ">#4468</a>)</li>
<li><a href="07aaa4533bhttps://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4474 ">#4474</a>)</li>
<li><a href="8b18bd1146https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4473 ">#4473</a>)</li>
<li><a href="4ee117c421https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4472 ">#4472</a>)</li>
<li><a href="cb1393643ehttps://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4471 ">#4471</a>)</li>
<li><a href="341dc60551https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4470 ">#4470</a>)</li>
<li>See full diff in <a href="https://github.com/webpack/webpack-dev-server/compare/v4.9.1...v4.9.2 ">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
2 years ago
6fdac9e632
Bump webpack from 5.72.1 to 5.73.0 ( #2101 )
...
Bumps [webpack](https://github.com/webpack/webpack ) from 5.72.1 to 5.73.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/webpack/webpack/releases ">webpack's releases</a>.</em></p>
<blockquote>
<h2>v5.73.0</h2>
<h1>Features</h1>
<ul>
<li>add options for default <code>dynamicImportMode</code> and prefetch and preload</li>
<li>add support for <code>import { createRequire } from "module"</code> in source code</li>
</ul>
<h1>Bugfixes</h1>
<ul>
<li>fix code generation of e. g. <code>return"field"in Module</code></li>
<li>fix performance of large JSON modules</li>
<li>fix performance of async modules evaluation</li>
</ul>
<h1>Developer Experience</h1>
<ul>
<li>export <code>PathData</code> in typings</li>
<li>improve error messages with more details</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="36051a5ca7520d31473chttps://github-redirect.dependabot.com/webpack/webpack/issues/15899 ">#15899</a> from webpack/bugfix/async-modules-performance</li>
<li><a href="096efc3821https://github-redirect.dependabot.com/webpack/webpack/issues/15801 ">#15801</a> from webpack/refactor-json-modules</li>
<li><a href="b8748cfe14https://github-redirect.dependabot.com/webpack/webpack/issues/15873 ">#15873</a> from webpack/more-informative-error</li>
<li><a href="b1cc471f86https://github-redirect.dependabot.com/webpack/webpack/issues/15888 ">#15888</a> from webpack/feature/issue-13695</li>
<li><a href="509a060025cc0cd60909e71d3b49feaa76e823b02738eebc78https://github-redirect.dependabot.com/webpack/webpack/issues/15579 ">#15579</a> from webpack/support-create-require</li>
<li>Additional commits viewable in <a href="https://github.com/webpack/webpack/compare/v5.72.1...v5.73.0 ">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
3 years ago
758a1ed4a9
Bump terser-webpack-plugin from 5.3.1 to 5.3.3 ( #2099 )
...
Bumps [terser-webpack-plugin](https://github.com/webpack-contrib/terser-webpack-plugin ) from 5.3.1 to 5.3.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/webpack-contrib/terser-webpack-plugin/releases ">terser-webpack-plugin's releases</a>.</em></p>
<blockquote>
<h2>v5.3.3</h2>
<h3><a href="https://github.com/webpack-contrib/terser-webpack-plugin/compare/v5.3.2...v5.3.3 ">5.3.3</a> (2022-06-02)</h3>
<h3>Fixes</h3>
<ul>
<li>fix broken release</li>
</ul>
<h2>v5.3.2</h2>
<h3><a href="https://github.com/webpack-contrib/terser-webpack-plugin/compare/v5.3.1...v5.3.2 ">5.3.2</a> (2022-06-02)</h3>
<h3>Chore</h3>
<ul>
<li>switched to <code>@jridgewell/source-map</code> for error generation</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/webpack-contrib/terser-webpack-plugin/blob/master/CHANGELOG.md ">terser-webpack-plugin's changelog</a>.</em></p>
<blockquote>
<h3><a href="https://github.com/webpack-contrib/terser-webpack-plugin/compare/v5.3.2...v5.3.3 ">5.3.3</a> (2022-06-02)</h3>
<h3>Fixes</h3>
<ul>
<li>fix broken release</li>
</ul>
<h3><a href="https://github.com/webpack-contrib/terser-webpack-plugin/compare/v5.3.1...v5.3.2 ">5.3.2</a> (2022-06-02)</h3>
<h3>Chore</h3>
<ul>
<li>switched to <code>@jridgewell/source-map</code> for error generation</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="2b2111faa5e2b9a45782f61bc5da07https://github-redirect.dependabot.com/webpack-contrib/terser-webpack-plugin/issues/479 ">#479</a>)</li>
<li><a href="bd10e13418https://github-redirect.dependabot.com/webpack-contrib/terser-webpack-plugin/issues/490 ">#490</a>)</li>
<li><a href="6020a94544https://github-redirect.dependabot.com/webpack-contrib/terser-webpack-plugin/issues/489 ">#489</a>)</li>
<li><a href="66fdec85d7https://github-redirect.dependabot.com/webpack-contrib/terser-webpack-plugin/issues/488 ">#488</a>)</li>
<li><a href="11712b940chttps://github-redirect.dependabot.com/webpack-contrib/terser-webpack-plugin/issues/487 ">#487</a>)</li>
<li><a href="463ed9e3echttps://github-redirect.dependabot.com/webpack-contrib/terser-webpack-plugin/issues/483 ">#483</a>)</li>
<li><a href="f259590b49https://github-redirect.dependabot.com/webpack-contrib/terser-webpack-plugin/issues/480 ">#480</a>)</li>
<li><a href="3d6539f632https://github-redirect.dependabot.com/webpack-contrib/terser-webpack-plugin/issues/477 ">#477</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/webpack-contrib/terser-webpack-plugin/compare/v5.3.1...v5.3.3 ">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
3 years ago
86aae26236
Bump webpack-dev-server from 4.9.0 to 4.9.1 ( #2096 )
...
Bumps [webpack-dev-server](https://github.com/webpack/webpack-dev-server ) from 4.9.0 to 4.9.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/webpack/webpack-dev-server/releases ">webpack-dev-server's releases</a>.</em></p>
<blockquote>
<h2>v4.9.1</h2>
<h3><a href="https://github.com/webpack/webpack-dev-server/compare/v4.9.0...v4.9.1 ">4.9.1</a> (2022-05-31)</h3>
<h3>Bug Fixes</h3>
<ul>
<li>security problem with sockjs (<a href="https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4465 ">#4465</a>) (<a href="e765182e42https://github.com/webpack/webpack-dev-server/blob/master/CHANGELOG.md ">webpack-dev-server's changelog</a>.</em></p>
<blockquote>
<h3><a href="https://github.com/webpack/webpack-dev-server/compare/v4.9.0...v4.9.1 ">4.9.1</a> (2022-05-31)</h3>
<h3>Bug Fixes</h3>
<ul>
<li>security problem with sockjs (<a href="https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4465 ">#4465</a>) (<a href="e765182e42511f51a872e765182e42https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4465 ">#4465</a>)</li>
<li><a href="e2113ed329https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4464 ">#4464</a>)</li>
<li><a href="3166fcdaf0https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4463 ">#4463</a>)</li>
<li><a href="df7ce6e8f6https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4461 ">#4461</a>)</li>
<li><a href="b3511e0139https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4452 ">#4452</a>)</li>
<li><a href="c90438da91https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4451 ">#4451</a>)</li>
<li><a href="a414b263echttps://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4459 ">#4459</a>)</li>
<li><a href="c562d31676e8f8008995https://github.com/webpack/webpack-dev-server/compare/v4.9.0...v4.9.1 ">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
3 years ago
f3db18fc54
Bump copy-webpack-plugin from 10.2.4 to 11.0.0 ( #2077 )
...
Bumps [copy-webpack-plugin](https://github.com/webpack-contrib/copy-webpack-plugin ) from 10.2.4 to 11.0.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/webpack-contrib/copy-webpack-plugin/releases ">copy-webpack-plugin's releases</a>.</em></p>
<blockquote>
<h2>v11.0.0</h2>
<h2><a href="https://github.com/webpack-contrib/copy-webpack-plugin/compare/v10.2.4...v11.0.0 ">11.0.0</a> (2022-05-17)</h2>
<h3>⚠ BREAKING CHANGES</h3>
<ul>
<li>minimum supported <code>Node.js</code> version is <code>14.15.0</code></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/webpack-contrib/copy-webpack-plugin/blob/master/CHANGELOG.md ">copy-webpack-plugin's changelog</a>.</em></p>
<blockquote>
<h2><a href="https://github.com/webpack-contrib/copy-webpack-plugin/compare/v10.2.4...v11.0.0 ">11.0.0</a> (2022-05-17)</h2>
<h3>⚠ BREAKING CHANGES</h3>
<ul>
<li>minimum supported <code>Node.js</code> version is <code>14.15.0</code></li>
</ul>
<h3>build</h3>
<ul>
<li>drop node v12 (<a href="https://github-redirect.dependabot.com/webpack-contrib/copy-webpack-plugin/issues/691 ">#691</a>) (<a href="675c676d96f3b2c2419c8424ca82c1https://github-redirect.dependabot.com/webpack-contrib/copy-webpack-plugin/issues/693 ">#693</a>)</li>
<li><a href="675c676d96https://github-redirect.dependabot.com/webpack-contrib/copy-webpack-plugin/issues/691 ">#691</a>)</li>
<li><a href="a2b1f199e8https://github-redirect.dependabot.com/webpack-contrib/copy-webpack-plugin/issues/692 ">#692</a>)</li>
<li><a href="238c062ffehttps://github-redirect.dependabot.com/webpack-contrib/copy-webpack-plugin/issues/688 ">#688</a>)</li>
<li><a href="e27006edc3https://github-redirect.dependabot.com/webpack-contrib/copy-webpack-plugin/issues/687 ">#687</a>)</li>
<li><a href="e50d708535https://github-redirect.dependabot.com/webpack-contrib/copy-webpack-plugin/issues/686 ">#686</a>)</li>
<li><a href="f1a91e6c1ahttps://github-redirect.dependabot.com/webpack-contrib/copy-webpack-plugin/issues/680 ">#680</a>)</li>
<li><a href="64cf06f139https://github-redirect.dependabot.com/webpack-contrib/copy-webpack-plugin/issues/683 ">#683</a>)</li>
<li><a href="4b18a6be39https://github.com/webpack-contrib/copy-webpack-plugin/compare/v10.2.4...v11.0.0 ">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
3 years ago
27db657983
Bump webpack from 5.72.0 to 5.72.1 ( #2070 )
...
Bumps [webpack](https://github.com/webpack/webpack ) from 5.72.0 to 5.72.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/webpack/webpack/releases ">webpack's releases</a>.</em></p>
<blockquote>
<h2>v5.72.1</h2>
<h1>Bugfixes</h1>
<ul>
<li>fix <code>__webpack_nonce__</code> with HMR</li>
<li>fix <code>in</code> operator in some cases</li>
<li>fix json parsing error messages</li>
<li>fix module concatenation with using <code>this.importModule</code></li>
<li>upgrade enhanced-resolve</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="08ecfbbc03ada9c0b3a1https://github-redirect.dependabot.com/webpack/webpack/issues/15802 ">#15802</a> from webpack/fix-nonce</li>
<li><a href="ce56e3b61c3ad4fcac25https://github-redirect.dependabot.com/webpack/webpack/issues/15689 ">#15689</a> from webpack/fix-inmemory-cache</li>
<li><a href="ccf8bf53e2293e677b35https://github-redirect.dependabot.com/webpack/webpack/issues/15660 ">#15660</a> from webpack/add-provided-info-tests</li>
<li><a href="0456807b72https://github-redirect.dependabot.com/webpack/webpack/issues/15673 ">#15673</a> from Semigradsky/replace-dependency</li>
<li><a href="0791f77b04https://github-redirect.dependabot.com/webpack/webpack/issues/15678 ">#15678</a> from webpack/remove-infrastructure-log</li>
<li><a href="390dd06209https://github-redirect.dependabot.com/webpack/webpack/issues/15681 ">#15681</a> from webpack/fix-concatenation-with-import-module</li>
<li><a href="0d408d1c7fhttps://github.com/webpack/webpack/compare/v5.72.0...v5.72.1 ">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
3 years ago
0e49ce863b
Bump webpack-dev-server from 4.8.1 to 4.9.0 ( #2061 )
...
Bumps [webpack-dev-server](https://github.com/webpack/webpack-dev-server ) from 4.8.1 to 4.9.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/webpack/webpack-dev-server/releases ">webpack-dev-server's releases</a>.</em></p>
<blockquote>
<h2>v4.9.0</h2>
<h2><a href="https://github.com/webpack/webpack-dev-server/compare/v4.8.1...v4.9.0 ">4.9.0</a> (2022-05-04)</h2>
<h3>Features</h3>
<ul>
<li>support Trusted Types for client overlay (<a href="https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4404 ">#4404</a>) (<a href="8132e1d029https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4403 ">#4403</a>) (<a href="256d5fb5fehttps://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4384 ">#4384</a>) (<a href="eea50f342ehttps://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4385 ">#4385</a>) (<a href="a10c7cfd29https://github.com/webpack/webpack-dev-server/blob/master/CHANGELOG.md ">webpack-dev-server's changelog</a>.</em></p>
<blockquote>
<h2><a href="https://github.com/webpack/webpack-dev-server/compare/v4.8.1...v4.9.0 ">4.9.0</a> (2022-05-04)</h2>
<h3>Features</h3>
<ul>
<li>support Trusted Types for client overlay (<a href="https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4404 ">#4404</a>) (<a href="8132e1d029https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4403 ">#4403</a>) (<a href="256d5fb5fehttps://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4384 ">#4384</a>) (<a href="eea50f342ehttps://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4385 ">#4385</a>) (<a href="a10c7cfd294340c73fbc2b386fb671https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4427 ">#4427</a>)</li>
<li><a href="925370ec6chttps://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4426 ">#4426</a>)</li>
<li><a href="8132e1d029https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4404 ">#4404</a>)</li>
<li><a href="79536ab657https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4425 ">#4425</a>)</li>
<li><a href="c2fee3b585https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4422 ">#4422</a>)</li>
<li><a href="a6a367a4cehttps://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4423 ">#4423</a>)</li>
<li><a href="710f2e2652https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4411 ">#4411</a>)</li>
<li><a href="e42d691de9https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4418 ">#4418</a>)</li>
<li><a href="401493d9b0https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4419 ">#4419</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/webpack/webpack-dev-server/compare/v4.8.1...v4.9.0 ">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
3 years ago
67a2dd84ca
Bump async from 2.6.3 to 2.6.4 ( #2047 )
...
Bumps [async](https://github.com/caolan/async ) from 2.6.3 to 2.6.4.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/caolan/async/blob/v2.6.4/CHANGELOG.md ">async's changelog</a>.</em></p>
<blockquote>
<h1>v2.6.4</h1>
<ul>
<li>Fix potential prototype pollution exploit (<a href="https://github-redirect.dependabot.com/caolan/async/issues/1828 ">#1828</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="c6bdaca4f98870da9d504df6754ef48f7f90342ahttps://github-redirect.dependabot.com/caolan/async/issues/1828 ">#1828</a>)</li>
<li>See full diff in <a href="https://github.com/caolan/async/compare/v2.6.3...v2.6.4 ">compare view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a href="https://www.npmjs.com/~hargasinski ">hargasinski</a>, a new releaser for async since your current version.</p>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/boa-dev/boa/network/alerts ).
</details>
3 years ago
8d746ecc0b
Upgraded wasm-bindgen ( #2020 )
...
This Pull Request supersedes #2018 and #2017 .
It changes the following:
- Updates the wasm-bindgen dependency now that a new version without the clippy bug has been released
- Updates all dependencies to their latest versions
3 years ago
a1b5191ec6
Bump webpack-dev-server from 4.8.0 to 4.8.1 ( #2013 )
...
Bumps [webpack-dev-server](https://github.com/webpack/webpack-dev-server ) from 4.8.0 to 4.8.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/webpack/webpack-dev-server/releases ">webpack-dev-server's releases</a>.</em></p>
<blockquote>
<h2>v4.8.1</h2>
<h3><a href="https://github.com/webpack/webpack-dev-server/compare/v4.8.0...v4.8.1 ">4.8.1</a> (2022-04-06)</h3>
<h3>Bug Fixes</h3>
<ul>
<li>types (<a href="https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4373 ">#4373</a>) (<a href="f6fe6be276https://github.com/webpack/webpack-dev-server/blob/master/CHANGELOG.md ">webpack-dev-server's changelog</a>.</em></p>
<blockquote>
<h3><a href="https://github.com/webpack/webpack-dev-server/compare/v4.8.0...v4.8.1 ">4.8.1</a> (2022-04-06)</h3>
<h3>Bug Fixes</h3>
<ul>
<li>types (<a href="https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4373 ">#4373</a>) (<a href="f6fe6be276cfbba4a7e3f6fe6be276https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4373 ">#4373</a>)</li>
<li><a href="56410ba7f958bdd5155dhttps://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4364 ">#4364</a>)</li>
<li>See full diff in <a href="https://github.com/webpack/webpack-dev-server/compare/v4.8.0...v4.8.1 ">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
3 years ago
aeb5460bd6
Bump webpack from 5.71.0 to 5.72.0 ( #2016 )
...
Bumps [webpack](https://github.com/webpack/webpack ) from 5.71.0 to 5.72.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/webpack/webpack/releases ">webpack's releases</a>.</em></p>
<blockquote>
<h2>v5.72.0</h2>
<h1>Features</h1>
<ul>
<li>make cache warnings caused by build errors less verbose</li>
<li>Allow banner to be placed as a footer with the BannerPlugin</li>
<li>allow to concatenate asset modules</li>
</ul>
<h1>Bugfixes</h1>
<ul>
<li>fix RemoteModules when using HMR (Module Federation + HMR)</li>
<li>throw error when using module concatenation and cacheUnaffected</li>
<li>fix <code>in</code> operator with nested exports</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="d3a0f8de03360373d76ehttps://github-redirect.dependabot.com/webpack/webpack/issues/15563 ">#15563</a> from cool-little-fish/fix-12408</li>
<li><a href="b9b73c5418https://github-redirect.dependabot.com/webpack/webpack/issues/15634 ">#15634</a> from webpack/fix/issue-15633</li>
<li><a href="216c3daa4ecb639b3efchttps://github-redirect.dependabot.com/webpack/webpack/issues/15624 ">#15624</a> from webpack/add-warning-when-cache-unaffected-and-...</li>
<li><a href="c38caa2d82https://github-redirect.dependabot.com/webpack/webpack/issues/15515 ">#15515</a> from webpack/feat/concatenate-assets</li>
<li><a href="99a5793ca819d1a9384e05ebf5bba6https://github-redirect.dependabot.com/webpack/webpack/issues/15617 ">#15617</a> from DavidTanner/bannerAsFooter</li>
<li><a href="2a58ce7883https://github-redirect.dependabot.com/webpack/webpack/issues/15542 ">#15542</a> from wangjinyang/bugfix/mf-hmr-error</li>
<li>Additional commits viewable in <a href="https://github.com/webpack/webpack/compare/v5.71.0...v5.72.0 ">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
3 years ago
b0490d421e
Bump webpack-dev-server from 4.7.4 to 4.8.0 ( #2011 )
...
Bumps [webpack-dev-server](https://github.com/webpack/webpack-dev-server ) from 4.7.4 to 4.8.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/webpack/webpack-dev-server/releases ">webpack-dev-server's releases</a>.</em></p>
<blockquote>
<h2>v4.8.0</h2>
<h2><a href="https://github.com/webpack/webpack-dev-server/compare/v4.7.4...v4.8.0 ">4.8.0</a> (2022-04-05)</h2>
<h3>Features</h3>
<ul>
<li>export initialized socket client (<a href="https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4304 ">#4304</a>) (<a href="7920364d6bhttps://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4248 ">#4248</a>) (<a href="317648df21https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4250 ">#4250</a>) (<a href="c3b6690770https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4277 ">#4277</a>) (<a href="d63a0a2987https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4287 ">#4287</a>) (<a href="c64bd94fb7https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4280 ">#4280</a>) (<a href="fcf8e8e6a9https://github.com/webpack/webpack-dev-server/blob/master/CHANGELOG.md ">webpack-dev-server's changelog</a>.</em></p>
<blockquote>
<h2><a href="https://github.com/webpack/webpack-dev-server/compare/v4.7.4...v4.8.0 ">4.8.0</a> (2022-04-05)</h2>
<h3>Features</h3>
<ul>
<li>export initialized socket client (<a href="https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4304 ">#4304</a>) (<a href="7920364d6bhttps://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4248 ">#4248</a>) (<a href="317648df21https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4250 ">#4250</a>) (<a href="c3b6690770https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4277 ">#4277</a>) (<a href="d63a0a2987https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4287 ">#4287</a>) (<a href="c64bd94fb7https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4280 ">#4280</a>) (<a href="fcf8e8e6a95aad1e72ee28ad7edf37https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4368 ">#4368</a>)</li>
<li><a href="7920364d6bhttps://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4304 ">#4304</a>)</li>
<li><a href="4e7800ea17https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4367 ">#4367</a>)</li>
<li><a href="fbda2a805bhttps://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4366 ">#4366</a>)</li>
<li><a href="67c080b069https://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4361 ">#4361</a>)</li>
<li><a href="56ec41132bhttps://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4358 ">#4358</a>)</li>
<li><a href="ca8a53af6ahttps://github-redirect.dependabot.com/webpack/webpack-dev-server/issues/4356 ">#4356</a>)</li>
<li><a href="501f6aa4417d2b4f0082https://github.com/webpack/webpack-dev-server/compare/v4.7.4...v4.8.0 ">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
3 years ago
e72c7c1bf9
Bump prettier from 2.6.1 to 2.6.2 ( #2005 )
...
Bumps [prettier](https://github.com/prettier/prettier ) from 2.6.1 to 2.6.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/prettier/prettier/releases ">prettier's releases</a>.</em></p>
<blockquote>
<h2>2.6.2</h2>
<p>🔗 <a href="https://github.com/prettier/prettier/blob/main/CHANGELOG.md#262 ">Changelog</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/prettier/prettier/blob/main/CHANGELOG.md ">prettier's changelog</a>.</em></p>
<blockquote>
<h1>2.6.2</h1>
<p><a href="https://github.com/prettier/prettier/compare/2.6.1...2.6.2 ">diff</a></p>
<h4>Fix LESS/SCSS format error (<a href="https://github-redirect.dependabot.com/prettier/prettier/pull/12536 ">#12536</a> by <a href="https://github.com/fisker "><code>@fisker</code></a>)</h4>
<!-- raw HTML omitted -->
<pre lang="less"><code>// Input
.background-gradient(@cut ) {
background: linear-gradient(
to right,
@white 0%,
@white (@cut - 0.01%),
@portal-background @cut ,
@portal-background 100%
);
}
<p>// Prettier 2.6.1
TypeError: Cannot read properties of undefined (reading 'endOffset')</p>
<p>// Prettier 2.6.2
.background-gradient(<a href="https://github.com/cut "><code>@cut</code></a>) {
background: linear-gradient(
to right,
<a href="https://github.com/white "><code>@white</code></a> 0%,
<a href="https://github.com/white "><code>@white</code></a> (<a href="https://github.com/cut "><code>@cut</code></a> - 0.01%),
<a href="https://github.com/portal-background "><code>@portal-background</code></a> <a href="https://github.com/cut "><code>@cut</code></a>,
<a href="https://github.com/portal-background "><code>@portal-background</code></a> 100%
);
}
</code></pre></p>
<h4>Update <code>meriyah</code> to fix several bugs (<a href="https://github-redirect.dependabot.com/prettier/prettier/pull/12567 ">#12567</a> by <a href="https://github.com/fisker "><code>@fisker</code></a>, fixes in <a href="https://github.com/meriyah/meriyah/ "><code>meriyah</code></a> by <a href="https://github.com/3cp "><code>@3cp</code></a>)</h4>
<p>Fixes bugs when parsing following valid code:</p>
<pre lang="js"><code>foo(await bar());
</code></pre>
<pre lang="js"><code>const regex = /.*/ms;
</code></pre>
<pre lang="js"><code>const element = <p>{/w/.test(s)}</p>;
</code></pre>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="d6f82a024a2bca9d65f4https://github-redirect.dependabot.com/prettier/prettier/issues/11784 ">#11784</a>)</li>
<li><a href="378370a01ehttps://github-redirect.dependabot.com/prettier/prettier/issues/11349 ">#11349</a>)</li>
<li><a href="3c96a08176https://github-redirect.dependabot.com/prettier/prettier/issues/10731 ">#10731</a>)</li>
<li><a href="1bfb08f289https://github-redirect.dependabot.com/prettier/prettier/issues/12567 ">#12567</a>)</li>
<li><a href="9400c893a3https://github-redirect.dependabot.com/prettier/prettier/issues/12573 ">#12573</a>)</li>
<li><a href="5e3de4828dhttps://github-redirect.dependabot.com/prettier/prettier/issues/10725 ">#10725</a>)</li>
<li><a href="5d73acc42dhttps://github-redirect.dependabot.com/prettier/prettier/issues/12581 ">#12581</a>)</li>
<li><a href="e2eac0cb8ahttps://github-redirect.dependabot.com/prettier/prettier/issues/12577 ">#12577</a>)</li>
<li><a href="7d33ed5452https://github-redirect.dependabot.com/prettier/prettier/issues/12580 ">#12580</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/prettier/prettier/compare/2.6.1...2.6.2 ">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
3 years ago
d1972a9160
Bump webpack from 5.70.0 to 5.71.0 ( #2004 )
...
Bumps [webpack](https://github.com/webpack/webpack ) from 5.70.0 to 5.71.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/webpack/webpack/releases ">webpack's releases</a>.</em></p>
<blockquote>
<h2>v5.71.0</h2>
<h1>Features</h1>
<ul>
<li>choose smarter default for <code>uniqueName</code> when using a <code>output.library</code> which includes placeholders</li>
<li>add support for expressions with <code>in</code> of a imported binding</li>
<li>generate UMD code with arrow functions when possible</li>
</ul>
<h1>Bugfixes</h1>
<ul>
<li>fix source map source names for ContextModule to be relative</li>
<li>fix <code>chunkLoading</code> option in module module</li>
<li>fix edge case where <code>evaluateExpression</code> returns <code>null</code></li>
<li>retain optional chaining in imported bindings</li>
<li>include runtime code for the base URI even if not using chunk loading</li>
<li>don't throw errors in persistent caching when importing node.js builtin modules via ESM</li>
<li>fix crash when using <code>lazy-once</code> Context modules</li>
<li>improve handling of context modules with multiple contexts</li>
<li>fix race condition HMR chunk loading when importing chunks during HMR updating</li>
<li>handle errors in <code>runAsChild</code> callback</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="c2079f7e764a0937fdd0https://github-redirect.dependabot.com/webpack/webpack/issues/15578 ">#15578</a> from webpack/feat/catch-error-in-run-as-child</li>
<li><a href="c3f5897df9https://github-redirect.dependabot.com/webpack/webpack/issues/15586 ">#15586</a> from webpack/bugfix/chunk-load-during-hmr</li>
<li><a href="c4f1e4e9f0https://github-redirect.dependabot.com/webpack/webpack/issues/15611 ">#15611</a> from webpack/bugfix/esm-build-deps</li>
<li><a href="ab40959467e1179bf9bb2c200d1656https://github-redirect.dependabot.com/webpack/webpack/issues/15585 ">#15585</a> from webpack/refactor/support-context-in-dependency</li>
<li><a href="3929e688a4129477d11dhttps://github-redirect.dependabot.com/webpack/webpack/issues/15536 ">#15536</a> from webpack/fix/issue-15518</li>
<li><a href="5d8a9719cahttps://github-redirect.dependabot.com/webpack/webpack/issues/15551 ">#15551</a> from webpack/fix/issue-15545</li>
<li>Additional commits viewable in <a href="https://github.com/webpack/webpack/compare/v5.70.0...v5.71.0 ">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
3 years ago
3f3f0aae6e
Bump prettier from 2.6.0 to 2.6.1 ( #1977 )
...
Bumps [prettier](https://github.com/prettier/prettier ) from 2.6.0 to 2.6.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/prettier/prettier/releases ">prettier's releases</a>.</em></p>
<blockquote>
<h2>2.6.1</h2>
<p>🔗 <a href="https://github.com/prettier/prettier/blob/main/CHANGELOG.md#261 ">Changelog</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/prettier/prettier/blob/main/CHANGELOG.md ">prettier's changelog</a>.</em></p>
<blockquote>
<h1>2.6.1</h1>
<p><a href="https://github.com/prettier/prettier/compare/2.6.0...2.6.1 ">diff</a></p>
<h4>Ignore <code>loglevel</code> when printing information (<a href="https://github-redirect.dependabot.com/prettier/prettier/pull/12477 ">#12477</a> by <a href="https://github.com/fisker "><code>@fisker</code></a>)</h4>
<!-- raw HTML omitted -->
<pre lang="bash"><code></code></pre>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="ad505bf7716128c5c4e4https://github-redirect.dependabot.com/prettier/prettier/issues/12530 ">#12530</a>)</li>
<li><a href="11649270f6https://github-redirect.dependabot.com/prettier/prettier/issues/12526 ">#12526</a>)</li>
<li><a href="0e6c1d58d8https://github-redirect.dependabot.com/prettier/prettier/issues/12528 ">#12528</a>)</li>
<li><a href="67edeeaf72https://github-redirect.dependabot.com/prettier/prettier/issues/12513 ">#12513</a>)</li>
<li><a href="6664253b9ehttps://github-redirect.dependabot.com/prettier/prettier/issues/12511 ">#12511</a>)</li>
<li><a href="9e7f7b9295https://github-redirect.dependabot.com/prettier/prettier/issues/12350 ">#12350</a>)</li>
<li><a href="becb6c9b741939f92be5https://github-redirect.dependabot.com/prettier/prettier/issues/12514 ">#12514</a>)</li>
<li><a href="6fece964c8https://github-redirect.dependabot.com/prettier/prettier/issues/12515 ">#12515</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/prettier/prettier/compare/2.6.0...2.6.1 ">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
3 years ago
3549ea5046
Bump minimist from 1.2.5 to 1.2.6 ( #1978 )
...
Bumps [minimist](https://github.com/substack/minimist ) from 1.2.5 to 1.2.6.
<details>
<summary>Commits</summary>
<ul>
<li><a href="7efb22a518ef88b9325fc2b981977fbc8ecee438https://github.com/substack/minimist/compare/1.2.5...1.2.6 ">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/boa-dev/boa/network/alerts ).
</details>
3 years ago
3ad9d18d74
Bump node-forge from 1.2.1 to 1.3.0 ( #1969 )
...
Bumps [node-forge](https://github.com/digitalbazaar/forge ) from 1.2.1 to 1.3.0.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/digitalbazaar/forge/blob/main/CHANGELOG.md ">node-forge's changelog</a>.</em></p>
<blockquote>
<h2>1.3.0 - 2022-03-17</h2>
<h3>Security</h3>
<ul>
<li>Three RSA PKCS#1 v1.5 signature verification issues were reported by Moosa
Yahyazadeh (<a href="mailto:moosa-yahyazadeh@uiowa.edu">moosa-yahyazadeh@uiowa.edu</a>).</li>
<li><strong>HIGH</strong>: Leniency in checking <code>digestAlgorithm</code> structure can lead to
signature forgery.
<ul>
<li>The code is lenient in checking the digest algorithm structure. This can
allow a crafted structure that steals padding bytes and uses unchecked
portion of the PKCS#1 encoded message to forge a signature when a low
public exponent is being used. For more information, please see
<a href="https://mailarchive.ietf.org/arch/msg/openpgp/5rnE9ZRN1AokBVj3VqblGlP63QE/ ">"Bleichenbacher's RSA signature forgery based on implementation
error"</a>
by Hal Finney.</li>
<li>CVE ID: <a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24771 ">CVE-2022-24771</a></li>
<li>GHSA ID: <a href="https://github.com/digitalbazaar/forge/security/advisories/GHSA-cfm4-qjh2-4765 ">GHSA-cfm4-qjh2-4765</a></li>
</ul>
</li>
<li><strong>HIGH</strong>: Failing to check tailing garbage bytes can lead to signature
forgery.
<ul>
<li>The code does not check for tailing garbage bytes after decoding a
<code>DigestInfo</code> ASN.1 structure. This can allow padding bytes to be removed
and garbage data added to forge a signature when a low public exponent is
being used. For more information, please see <a href="https://mailarchive.ietf.org/arch/msg/openpgp/5rnE9ZRN1AokBVj3VqblGlP63QE/ ">"Bleichenbacher's RSA
signature forgery based on implementation
error"</a>
by Hal Finney.</li>
<li>CVE ID: <a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24772 ">CVE-2022-24772</a></li>
<li>GHSA ID: <a href="https://github.com/digitalbazaar/forge/security/advisories/GHSA-x4jg-mjrx-434g ">GHSA-x4jg-mjrx-434g</a></li>
</ul>
</li>
<li><strong>MEDIUM</strong>: Leniency in checking type octet.
<ul>
<li><code>DigestInfo</code> is not properly checked for proper ASN.1 structure. This can
lead to successful verification with signatures that contain invalid
structures but a valid digest.</li>
<li>CVE ID: <a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24773 ">CVE-2022-24773</a></li>
<li>GHSA ID: <a href="https://github.com/digitalbazaar/forge/security/advisories/GHSA-2r2c-g63r-vccr ">GHSA-2r2c-g63r-vccr</a></li>
</ul>
</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>[asn1] Add fallback to pretty print invalid UTF8 data.</li>
<li>[asn1] <code>fromDer</code> is now more strict and will default to ensuring all input
bytes are parsed or throw an error. A new option <code>parseAllBytes</code> can disable
this behavior.
<ul>
<li><strong>NOTE</strong>: The previous behavior is being changed since it can lead to
security issues with crafted inputs. It is possible that code doing custom
DER parsing may need to adapt to this new behavior and optional flag.</li>
</ul>
</li>
<li>[rsa] Add and use a validator to check for proper structure of parsed ASN.1
<code>RSASSA-PKCS-v1_5</code> <code>DigestInfo</code> data. Additionally check that the hash
algorithm identifier is a known value from RFC 8017
<code>PKCS1-v1-5DigestAlgorithms</code>. An invalid <code>DigestInfo</code> or algorithm identifier
will now throw an error.
<ul>
<li><strong>NOTE</strong>: The previous lenient behavior is being changed to be more strict
since it could lead to security issues with crafted inputs. It is possible
that code may have to handle the errors from these stricter checks.</li>
</ul>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="6c5b90133d0f3972ad58dc77b39dd3bb822c02dfd4395fec83a4405bb9d6aa9372d6dd3f0b49a057c20f309311e27f61230fhttps://github.com/digitalbazaar/forge/compare/v1.2.1...v1.3.0 ">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/boa-dev/boa/network/alerts ).
</details>
3 years ago
f25ce46a1e
Migrate to NPM and cleanup Playground ( #1951 )
...
This Pull Request closes #1912 by migrating to a NPM based build, hopefully making it easier to contribute to the Playground.
Also, reduces the number of features of the editor, since most of them were support for other languages or features that don't make sense in a playground environment. This considerably reduces the number of fetched files per page load and the total size of the playground.
3 years ago
dependabot[bot]
Iban Eguia
jedel1043