Bump the npm_and_yarn group across 4 directories with 16 updates #106

dependabot · 2025-02-10T21:30:05Z

Bumps the npm_and_yarn group with 9 updates in the / directory:

Package	From	To
astro	`1.1.6`	`4.16.18`
lodash	`4.17.20`	`4.17.21`
@babel/traverse	`7.18.5`	`7.26.8`
braces	`3.0.2`	`3.0.3`
get-func-name	`2.0.0`	`2.0.2`
micromatch	`4.0.5`	`4.0.8`
semver	`5.7.1`	`5.7.2`
word-wrap	`1.2.3`	`1.2.5`
zod	`3.19.0`	`3.24.1`

Bumps the npm_and_yarn group with 1 update in the /docs/web directory: astro.
Bumps the npm_and_yarn group with 1 update in the /packages/plugin-non-breaking-spaces directory: lodash.
Bumps the npm_and_yarn group with 4 updates in the /vscode-extension directory: braces, cross-spawn, micromatch and word-wrap.

Updates astro from 1.1.6 to 4.16.18

Release notes

Sourced from astro's releases.

astro@4.16.18

Patch Changes

#12757 d0aaac3 Thanks @matthewp! - Remove all assets created from the server build

#12757 d0aaac3 Thanks @matthewp! - Clean server sourcemaps from static output

astro@4.16.17

Patch Changes

#12632 e7d14c3 Thanks @ematipico! - Fixes an issue where the checkOrigin feature wasn't correctly checking the content-type header

Changelog

Sourced from astro's changelog.

1.9.2

Patch Changes

#5776 6a31433ed Thanks @ba55ie! - Fix Lit slotted content

1.9.1

Patch Changes

adad7e966 Thanks @matthewp! - Fix for hoisted scripts in project with spaces in the file path

1.9.0

Minor Changes

#5666 bf210f784 Thanks @bholmesdev! - Correctly handle spaces and capitalization in src/content/ file names. This introduces github-slugger for slug generation to ensure slugs are usable by getStaticPaths. Changes:

Resolve spaces and capitalization: collection/Entry With Spaces.md becomes collection/entry-with-spaces.

Truncate /index paths to base URL: collection/index.md becomes collection

Patch Changes

#5720 fe316be86 Thanks @umarov! - Do not add base path to a hoisted script body

#5706 c2844a79c Thanks @bluwy! - Add preact and sitemap integration to config load external list

#5700 3aa3e00a6 Thanks @bholmesdev! - Fix import.meta.env.DEV always being set to true when using Content Collections

1.8.0

Minor Changes

#5647 d72da5290 Thanks @bholmesdev! - Add astro sync CLI command for type generation

Patch Changes

#5668 9674cf56c Thanks @bholmesdev! - Remove stray console.log from content collections error message

#5652 0b5098758 Thanks @bluwy! - Use acorn to postprocess Astro globs

#5648 853081d1c Thanks @bholmesdev! - Prevent relative image paths in src/content/

#5678 f8f576829 Thanks @bluwy! - Fix code generation quotes handling

#5635 376f67011 Thanks @SegaraRai! - Add server.headers typing

Updated dependencies [853081d1c, 2c65b433b]:

@astrojs/markdown-remark@1.2.0

1.7.2

... (truncated)

Commits

84190aa [ci] release (#12774)
d0aaac3 Prevent server sourcemaps from being part of client output (#12757)
ba4aac1 [ci] release (#12648)
e7d14c3 fix: checkOrigin headers check (#12632)
6eac6ba [ci] release (#12536)
65e50eb Fix JPEG image size determination (#12542)
6fc29e3 fix(deps): update all non-major dependencies (#12410)
cf0d8b0 fix(i18n): render 404.astro when i18n is enabled (#12525)
36d8d92 [ci] release (#12501)
b140a3f fix(routing): don't access Request headers (#12498)
Additional commits viewable in compare view

Updates lodash from 4.17.20 to 4.17.21

Commits

f299b52 Bump to v4.17.21
c4847eb Improve performance of toNumber, trim and trimEnd on large input strings
3469357 Prevent command injection through _.template's variable option
See full diff in compare view

Updates @babel/traverse from 7.18.5 to 7.26.8

Release notes

Sourced from @babel/traverse's releases.

v7.26.8 (2025-02-08)

🏠 Internal

babel-preset-env

#17097 Update dependency babel-plugin-polyfill-corejs3 to ^0.11.0

v7.26.7 (2025-01-24)

Thanks @branchseer and @tquetano-netflix for your first PRs!

🐛 Bug Fix

babel-helpers, babel-preset-env, babel-runtime-corejs3

#17086 Make "object without properties" helpers ES6-compatible (@tquetano-netflix)

babel-plugin-transform-typeof-symbol

#17085 fix: Correctly handle typeof in arrow functions (@liuxingbaoyu)

babel-parser

#17079 Respect ranges option in estree method value (@JLHwung)

babel-core

#17052 Do not try to parse .ts configs as JSON if natively supported (@nicolo-ribaudo)

babel-plugin-transform-typescript

#17050 fix: correctly resolve references to non-constant enum members (@branchseer)

babel-plugin-transform-typescript, babel-traverse, babel-types

#17025 fix: Remove type-only import x = y.z (@liuxingbaoyu)

Committers: 6

Babel Bot (@babel-bot)

Huáng Jùnliàng (@JLHwung)

Nicolò Ribaudo (@nicolo-ribaudo)

Tony Quetano (@tquetano-netflix)

@branchseer

@liuxingbaoyu

v7.26.6 (2025-01-13)

🐛 Bug Fix

babel-plugin-transform-nullish-coalescing-operator

#17061 fix: Chaining nullish coalescing operators output size regression (@liuxingbaoyu)

Committers: 1

@liuxingbaoyu

v7.26.5 (2025-01-10)

👓 Spec Compliance

babel-parser

#17011 Allow the dynamic import.defer() form of import defer (@babel-bot)

🐛 Bug Fix

babel-plugin-transform-block-scoped-functions

#17024 chore: Avoid calling isInStrictMode in Babel 7 (@liuxingbaoyu)

... (truncated)

Changelog

Sourced from @babel/traverse's changelog.

Changelog

Tags:

💥 [Breaking Change]

👓 [Spec Compliance]

🚀 [New Feature]

🐛 [Bug Fix]

📝 [Documentation]

🏠 [Internal]

💅 [Polish]

Note: Gaps between patch versions are faulty, broken or test releases.

This file contains the changelog starting from v7.15.0.

See CHANGELOG - v7.0.0 to v7.14.9 for v7.0.0 to v7.14.9 changes.

See CHANGELOG - v7 prereleases for v7.0.0-alpha.1 to v7.0.0-rc.4 changes.

See CHANGELOG - v4, CHANGELOG - v5, and CHANGELOG - v6 for v4.x-v6.x changes.

See CHANGELOG - 6to5 for the pre-4.0.0 version changelog.

See Babylon's CHANGELOG for the Babylon pre-7.0.0-beta.29 version changelog.

See babel-eslint's releases for the changelog before @babel/eslint-parser 7.8.0.

See eslint-plugin-babel's releases for the changelog before @babel/eslint-plugin 7.8.0.

v7.26.7 (2025-01-24)

🐛 Bug Fix

babel-helpers, babel-preset-env, babel-runtime-corejs3

#17086 Make "object without properties" helpers ES6-compatible (@tquetano-netflix)

babel-plugin-transform-typeof-symbol

#17085 fix: Correctly handle typeof in arrow functions (@liuxingbaoyu)

babel-parser

#17079 Respect ranges option in estree method value (@JLHwung)

babel-core

#17052 Do not try to parse .ts configs as JSON if natively supported (@nicolo-ribaudo)

babel-plugin-transform-typescript

#17050 fix: correctly resolve references to non-constant enum members (@branchseer)

babel-plugin-transform-typescript, babel-traverse, babel-types

#17025 fix: Remove type-only import x = y.z (@liuxingbaoyu)

v7.26.6 (2025-01-13)

🐛 Bug Fix

babel-plugin-transform-nullish-coalescing-operator

#17061 fix: Chaining nullish coalescing operators output size regression (@liuxingbaoyu)

v7.26.5 (2025-01-10)

👓 Spec Compliance

... (truncated)

Commits

0593941 v7.26.8
e02b0ff [Babel 8] Create TSTemplateLiteralType (#17066)
2d95140 v7.26.7
ad572fd fix: Remove type-only import x = y.z (#17025)
74181cf v7.26.5
d35794e [Babel 8] Create TSEnumBody for TSEnumDeclaration (#16979)
cd24cc0 chore: Update TS 5.7 (#17053)
cf7b9cd v7.26.4
f33704a Revert "perf: Improve scope information collection performance" (#17005)
36ca8fa v7.26.3
Additional commits viewable in compare view

Updates braces from 3.0.2 to 3.0.3

Commits

74b2db2 3.0.3
88f1429 update eslint. lint, fix unit tests.
415d660 Snyk js braces 6838727 (#40)
190510f fix tests, skip 1 test in test/braces.expand
716eb9f readme bump
a5851e5 Merge pull request #37 from coderaiser/fix/vulnerability
2092bd1 feature: braces: add maxSymbols (https://github.com/micromatch/braces/issues/...
9f5b4cf fix: vulnerability (https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727)
98414f9 remove funding file
665ab5d update keepEscaping doc (#27)
Additional commits viewable in compare view

Updates dset from 3.1.2 to 3.1.4

Release notes

Sourced from dset's releases.

v3.1.3

Patches

Add "types" export conditions for TypeScript "nodenext"/"node16" resolution: #40 Thank you @Akkuma

Full Changelog: lukeed/dset@v3.1.2...v3.1.3

Commits

05b1ec0 3.1.4
16d6154 fix: prevent proto assignment via implicit string
48f14a1 3.1.3
aca90fb chore: add "types" conditions for TS "nodenext" resolution (#40)
See full diff in compare view

Updates esbuild from 0.14.54 to 0.21.5

Release notes

Sourced from esbuild's releases.

v0.21.5
Fix Symbol.metadata on classes without a class decorator (#3781)

This release fixes a bug with esbuild's support for the decorator metadata proposal. Previously esbuild only added the Symbol.metadata property to decorated classes if there was a decorator on the class element itself. However, the proposal says that the Symbol.metadata property should be present on all classes that have any decorators at all, not just those with a decorator on the class element itself.
Allow unknown import attributes to be used with the copy loader (#3792)

Import attributes (the with keyword on import statements) are allowed to alter how that path is loaded. For example, esbuild cannot assume that it knows how to load ./bagel.js as type bagel:
// This is an error with "--bundle" without also using "--external:./bagel.js"
import tasty from "./bagel.js" with { type: "bagel" }
Because of that, bundling this code with esbuild is an error unless the file ./bagel.js is external to the bundle (such as with --bundle --external:./bagel.js).

However, there is an additional case where it's ok for esbuild to allow this: if the file is loaded using the copy loader. That's because the copy loader behaves similarly to --external in that the file is left external to the bundle. The difference is that the copy loader copies the file into the output folder and rewrites the import path while --external doesn't. That means the following will now work with the copy loader (such as with --bundle --loader:.bagel=copy):
// This is no longer an error with "--bundle" and "--loader:.bagel=copy"
import tasty from "./tasty.bagel" with { type: "bagel" }
Support import attributes with glob-style imports (#3797)

This release adds support for import attributes (the with option) to glob-style imports (dynamic imports with certain string literal patterns as paths). These imports previously didn't support import attributes due to an oversight. So code like this will now work correctly:
async function loadLocale(locale: string): Locale {
  const data = await import(`./locales/${locale}.data`, { with: { type: 'json' } })
  return unpackLocale(locale, data)
}
Previously this didn't work even though esbuild normally supports forcing the JSON loader using an import attribute. Attempting to do this used to result in the following error:
✘ [ERROR] No loader is configured for ".data" files: locales/en-US.data
example.ts:2:28:
  2 │   const data = await import(`./locales/${locale}.data`, { with: { type: 'json' } })
    ╵                             ~~~~~~~~~~~~~~~~~~~~~~~~~~
In addition, this change means plugins can now access the contents of with for glob-style imports.
Support ${configDir} in tsconfig.json files (#3782)

This adds support for a new feature from the upcoming TypeScript 5.5 release. The character sequence ${configDir} is now respected at the start of baseUrl and paths values, which are used by esbuild during bundling to correctly map import paths to file system paths. This feature lets base tsconfig.json files specified via extends refer to the directory of the top-level tsconfig.json file. Here is an example:

... (truncated)

Changelog

Sourced from esbuild's changelog.

Changelog: 2022

This changelog documents all esbuild versions published in the year 2022 (versions 0.14.11 through 0.16.12).

0.16.12
Loader defaults to js for extensionless files (#2776)

Certain packages contain files without an extension. For example, the yargs package contains the file yargs/yargs which has no extension. Node, Webpack, and Parcel can all understand code that imports yargs/yargs because they assume that the file is JavaScript. However, esbuild was previously unable to understand this code because it relies on the file extension to tell it how to interpret the file. With this release, esbuild will now assume files without an extension are JavaScript files. This can be customized by setting the loader for "" (the empty string, representing files without an extension) to another loader. For example, if you want files without an extension to be treated as CSS instead, you can do that like this:
CLI:
esbuild --bundle --loader:=css
JS:
esbuild.build({
  bundle: true,
  loader: { '': 'css' },
})
Go:
api.Build(api.BuildOptions{
  Bundle: true,
  Loader: map[string]api.Loader{"": api.LoaderCSS},
})
In addition, the "type" field in package.json files now only applies to files with an explicit .js, .jsx, .ts, or .tsx extension. Previously it was incorrectly applied by esbuild to all files that had an extension other than .mjs, .mts, .cjs, or .cts including extensionless files. So for example an extensionless file in a "type": "module" package is now treated as CommonJS instead of ESM.
0.16.11
Avoid a syntax error in the presence of direct eval (#2761)

The behavior of nested function declarations in JavaScript depends on whether the code is run in strict mode or not. It would be problematic if esbuild preserved nested function declarations in its output because then the behavior would depend on whether the output was run in strict mode or not instead of respecting the strict mode behavior of the original source code. To avoid this, esbuild transforms nested function declarations to preserve the intended behavior of the original source code regardless of whether the output is run in strict mode or not:
// Original code
if (true) {
  function foo() {}
  console.log(!!foo)
  foo = null
  console.log(!!foo)
}

... (truncated)

Commits

fc37c2f publish 0.21.5 to npm
cb11924 fix Symbol.metadata errors in decorator tests
b93a2a9 fix #3781: add metadata to all decorated classes
953dae9 fix #3797: import attributes and glob-style import
98cb2ed fix #3782: support ${configDir} in tsconfig.json
8e6603b run make update-compat-table
db1b8ca fix #3792: import attributes and the copy loader
de572d0 fix non-deterministic import attribute plugin test
ae8d1b4 fix #3794: --supported:object-accessors=false
67cbf87 publish 0.21.4 to npm
Additional commits viewable in compare view

Updates get-func-name from 2.0.0 to 2.0.2

Release notes

Sourced from get-func-name's releases.

v2.0.2

What's Changed

Revert previous changes that shipped this as an ES module.

Full Changelog: https://github.com/chaijs/get-func-name/commits/v2.0.2

v2.0.1

What's Changed

Fix GHSA-4q6p-r6v2-jvc5

Full Changelog: https://github.com/chaijs/get-func-name/commits/v2.0.1

Commits

See full diff in compare view

Maintainer changes

This version was pushed to npm by keithamus, a new releaser for get-func-name since your current version.

Updates micromatch from 4.0.5 to 4.0.8

Release notes

Sourced from micromatch's releases.

4.0.8

Ultimate release that fixes both CVE-2024-4067 and CVE-2024-4068. We consider the issues low-priority, so even if you see automated scanners saying otherwise, don't be scared.

Changelog

Sourced from micromatch's changelog.

[4.0.8] - 2024-08-22

backported CVE-2024-4067 fix (from v4.0.6) over to 4.x branch

[4.0.7] - 2024-05-22

this is basically v4.0.5, with some README updates

it is vulnerable to CVE-2024-4067

Updated braces to v3.0.3 to avoid CVE-2024-4068

does NOT break API compatibility

[4.0.6] - 2024-05-21

Added hasBraces to check if a pattern contains braces.

Fixes CVE-2024-4067

BREAKS API COMPATIBILITY

Should be labeled as a major release, but it's not.

Commits

8bd704e 4.0.8
a0e6841 run verb to generate README documentation
4ec2884 Merge branch 'v4' into hauserkristof-feature/v4.0.8
03aa805 Merge pull request #266 from hauserkristof/feature/v4.0.8
814f5f7 lint
67fcce6 fix: CHANGELOG about braces & CVE-2024-4068, v4.0.5
113f2e3 fix: CVE numbers in CHANGELOG
d9dbd9a feat: updated CHANGELOG
2ab1315 fix: use actions/setup-node@v4
1406ea3 feat: rework test to work on macos with node 10,12 and 14
Additional commits viewable in compare view

Updates nanoid from 3.3.4 to 3.3.8

Changelog

Sourced from nanoid's changelog.

3.3.8

Fixed a way to break Nano ID by passing non-integer size (by @myndzi).

3.3.7

Fixed node16 TypeScript support (by Saadi Myftija).

3.3.6

Fixed package.

3.3.5

Backport funding information.

Commits

3044cd5 Release 3.3.8 version
4fe3495 Update size limit
d643045 Fix pool pollution, infinite loop (#510)
89d82d2 Release 3.3.7 version
5022c35 Update dual-publish
3e7a8e5 Remove benchmark from CI for v3
d356144 Fix CI for v3
37b25df Move to pnpm 8
d96f392 Release 3.3.6 version
8210dfb Release 3.3.5 version
Additional commits viewable in compare view

Updates postcss from 8.4.16 to 8.5.2

Release notes

Sourced from postcss's releases.

8.5.2

Fixed end position of rules with semicolon (by @romainmenke).

8.5.1

Fixed backwards compatibility for complex cases (by @romainmenke).

8.5 “Duke Alloces”

PostCSS 8.5 brought API to work better with non-CSS sources like HTML, Vue.js/Svelte sources or CSS-in-JS.

@romainmenke during his work on Stylelint added Input#document in additional to Input#css.
root.source.input.document //=> "<p>Hello</p>
                           //    <style>
                           //    p {
                           //      color: green;
                           //    }
                           //    </style>"
root.source.input.css      //=> "p {
                           //      color: green;
                           //    }"
Thanks to Sponsors

This release was possible thanks to our community.

If your company wants to support the sustainability of front-end infrastructure or wants to give some love to PostCSS, you can join our supporters by:

Tidelift with a Spotify-like subscription model supporting all projects from your lock file.

Direct donations at GitHub Sponsors or Open Collective.

8.4.49

Fixed custom syntax without source.offset (by @romainmenke).

8.4.48

Fixed position calculation in error/warnings methods (by @romainmenke).

8.4.47

Removed debug code.

8.4.46

Fixed Cannot read properties of undefined (reading 'before').

8.4.45

Removed unnecessary fix which could lead to infinite loop.

... (truncated)

Changelog

Sourced from postcss's changelog.

8.5.2

Fixed end position of rules with semicolon (by @romainmenke).

8.5.1

Fixed backwards compatibility for complex cases (by @romainmenke).

8.5 “Duke Alloces”

Added Input#document for sources like CSS-in-JS or HTML (by @romainmenke).

8.4.49

Fixed custom syntax without source.offset (by @romainmenke).

8.4.48

Fixed position calculation in error/warnings methods (by @romainmenke).

8.4.47

Removed debug code.

8.4.46

Fixed Cannot read properties of undefined (reading 'before').

8.4.45

Removed unnecessary fix which could lead to infinite loop.

8.4.44

Another way to fix markClean is not a function error.

8.4.43

Fixed markClean is not a function error.

8.4.42

Fixed CSS syntax error on long minified files (by @varpstar).

8.4.41

Fixed types (by @nex3 and @querkmachine).

Cleaned up RegExps (by @bluwy).

8.4.40

Moved to getter/setter in nodes types to help Sass team (by @nex3).

8.4.39

Fixed CssSyntaxError types (by @romainmenke).

8.4.38

Fixed endIndex: 0 in errors and warnings (by @romainmenke).

8.4.37

Fixed original.column are not numbers error in another case.

8.4.36

... (truncated)

Commits

692fcde Release 8.5.2 version
b70e98f Update dependencies
ba587e3 Fix end position of rules with ownSemicon (#2012)
7b02c75 Release 8.5.1 version
4c15339 Update dependencies
7efe91e Improve backwards compat for Input#document (#2000)
6873270 Release 8.5 version
4223bb9 Fix 80 columns limit
80e2401 Add Input#document (#1996)
6f86879 Update dependencies
Additional commits viewable in compare view

Updates rollup from 2.77.3 to 4.34.6

Release notes

Sourced from rollup's releases.

v4.34.6

4.34.6

2025-02-07

Bug Fixes

Retain "void 0" in the output for smaller output and fewer surprises (#5838)

Pull Requests

#5835: fix(deps): update swc monorepo (major) (@renovate[bot], @lukastaegert)

#5838: replace undefined with void 0 for operator void (@TrickyPi)

v4.34.5

4.34.5

2025-02-07

Bug Fixes

Ensure namespace reexports always include all properties of all exports (#5837)

Pull Requests

#5836: fix(deps): lock file maintenance minor/patch updates (@renovate[bot])

#5837: Include all paths of reexports if namespace is used (@lukastaegert)

v4.34.4

4.34.4

2025-02-05

Bug Fixes

Do not tree-shake properties if a rest element is used in destructuring (#5833)

Pull Requests

#5833: include all properties if a rest element is destructed (@TrickyPi)

v4.34.3

4.34.3

2025-02-05

Bug Fixes

Ensure properties of "this" are included in getters (#5831)

... (truncated)

Changelog

Sourced from rollup's changelog.

4.34.6

2025-02-07

Bug Fixes

Retain "void 0" in the output for smaller output and fewer surprises (#5838)

Pull Requests

#5835: fix(deps): update swc monorepo (major) (@renovate[bot], @lukastaegert)

#5838: replace undefined with void 0 for operator void (@TrickyPi)

4.34.5

2025-02-07

Bug Fixes

Ensure namespace reexports always include all properties of all exports (#5837)

Pull Requests

#5836: fix(deps): lock file maintenance minor/patch updates (@renovate[bot])

#5837: Include all paths of reexports if namespace is used (@lukastaegert)

4.34.4

2025-02-05

Bug Fixes

Do not tree-shake properties if a rest element is used in destructuring (#5833)

Pull Requests

#5833: include all properties if a rest element is destructed (@TrickyPi)

4.34.3

2025-02-05

Bug Fixes

Ensure properties of "this" are included in getters (#5831)

Pull Requests

#5831: include the properties that accessed by this (@TrickyPi)

... (truncated)

Commits

4b87459 4.34.6
fe89821 replace undefined with void 0 for operator void (#5838)
18cc314 fix(deps): update swc monorepo (major) (#5835)
3426b02 4.34.5
f3aa1f0 Include all paths of reexports if namespace is used (#5837)
9fc10c1 fix(deps): lock file maintenance minor/patch updates (#5836)
19312a7 4.34.4
cf54603 include all properties if a rest element is destructed (#5833)
ac8b06a 4.34.3
7d553db include the properties that accessed by this (#5831)
Additional commits viewable in compare view

Updates semver from 5.7.1 to 5.7.2

Release notes

Sourced from semver's releases.

v5.7.2

5.7.2 (2023-07-10)

Bug Fixes

2f8fd41 #585 better handling of whitespace (#585) (@joaomoreno, @lukekarrys)

Changelog

Sourced from semver's changelog.

5.7.2 (2023-07-10)

Bug Fixes

2f8fd41 #585 better handling of whitespace (#585) (@joaomoreno, @lukekarrys)

5.7

Add minVersion method

5.6

Move boolean loose param to an options object, with backwards-compatibility protection.

Add ability to opt out of special prerelease version handling with the includePrerelease option flag.

5.5

Add version coercion capabilities

5.4

Add intersection checking

5.3

Add minSatisfying method

5.2

Add prerelease(v) that returns prerelease components

5.1

Add Backus-Naur for ranges

Remove excessively cute inspection methods

5.0

Remove AMD/Browserified build artifacts

Fix ltr and gtr when using the * range

Fix for range * with a prerelease identifier

Commits

f8cc313 chore: release 5.7.2
2f8fd41 fix: better handling of whitespace (#585)
deb5ad5 chore: @npmcli/template-oss@4.16.0
See full diff in compare view

Maintainer changes

This version was pushed to npm by lukekarrys, a new releaser for semver since your current version.

Updates vite from 3.0.9 to 5.4.14

Release notes

Sourced from vite's releases.

v5.4.14

Please refer to CHANGELOG.md for details.

v5.4.13

Please refer to CHANGELOG.md for details.

v5.4.12

This version contains a breaking change due to security fixes. See GHSA-vg6x-rcgg-rjx6 for more details.

Please refer to CHANGELOG.md for details.

v5.4.11

Please refer to CHANGELOG.md for details.

v5.4.10

Please refer to CHANGELOG.md for details.

v5.4.9

Please refer to CHANGELOG.md for details.

v5.4.8

Please refer to CHANGELOG.md for details.

v5.4.7

Please refer to CHANGELOG.md for details.

v5.4.6

Please refer to CHANGELOG.md for details.

v5.4.5

Please refer to CHANGELOG.md for details.

v5.4.4

Please refer to CHANGELOG.md for details.

v5.4.3

Please refer to CHANGELOG.md for details.

plugin-legacy@5.4.3

Please refer to CHANGELOG.md for details.

plugin-legacy@5.4.2

Please refer to CHANGELOG.md for details.

v5.4.2

Please refer to CHANGELOG.md for details.

plugin-legacy@5.4.1

Please refer to CHANGELOG.md for details.

... (truncated)

Changelog

Sourced from vite's changelog.

5.4.14 (2025-01-21)

fix: preview.allowedHosts with specific values was not respected (#19246) (9df6e6b), closes #19246

fix: allow CORS from loopback addresses by default (#19249) (Description has been truncated

Bumps the npm_and_yarn group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `1.1.6` | `4.16.18` | | [lodash](https://github.com/lodash/lodash) | `4.17.20` | `4.17.21` | | [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.18.5` | `7.26.8` | | [braces](https://github.com/micromatch/braces) | `3.0.2` | `3.0.3` | | [get-func-name](https://github.com/chaijs/get-func-name) | `2.0.0` | `2.0.2` | | [micromatch](https://github.com/micromatch/micromatch) | `4.0.5` | `4.0.8` | | [semver](https://github.com/npm/node-semver) | `5.7.1` | `5.7.2` | | [word-wrap](https://github.com/jonschlinkert/word-wrap) | `1.2.3` | `1.2.5` | | [zod](https://github.com/colinhacks/zod) | `3.19.0` | `3.24.1` | Bumps the npm_and_yarn group with 1 update in the /docs/web directory: [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro). Bumps the npm_and_yarn group with 1 update in the /packages/plugin-non-breaking-spaces directory: [lodash](https://github.com/lodash/lodash). Bumps the npm_and_yarn group with 4 updates in the /vscode-extension directory: [braces](https://github.com/micromatch/braces), [cross-spawn](https://github.com/moxystudio/node-cross-spawn), [micromatch](https://github.com/micromatch/micromatch) and [word-wrap](https://github.com/jonschlinkert/word-wrap). Updates `astro` from 1.1.6 to 4.16.18 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG-v1.md) - [Commits](https://github.com/withastro/astro/commits/astro@4.16.18/packages/astro) Updates `lodash` from 4.17.20 to 4.17.21 - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.20...4.17.21) Updates `@babel/traverse` from 7.18.5 to 7.26.8 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.26.8/packages/babel-traverse) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) Updates `dset` from 3.1.2 to 3.1.4 - [Release notes](https://github.com/lukeed/dset/releases) - [Commits](lukeed/dset@v3.1.2...v3.1.4) Updates `esbuild` from 0.14.54 to 0.21.5 - [Release notes](https://github.com/evanw/esbuild/releases) - [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG-2022.md) - [Commits](evanw/esbuild@v0.14.54...v0.21.5) Updates `get-func-name` from 2.0.0 to 2.0.2 - [Release notes](https://github.com/chaijs/get-func-name/releases) - [Commits](https://github.com/chaijs/get-func-name/commits/v2.0.2) Updates `micromatch` from 4.0.5 to 4.0.8 - [Release notes](https://github.com/micromatch/micromatch/releases) - [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md) - [Commits](micromatch/micromatch@4.0.5...4.0.8) Updates `nanoid` from 3.3.4 to 3.3.8 - [Release notes](https://github.com/ai/nanoid/releases) - [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md) - [Commits](ai/nanoid@3.3.4...3.3.8) Updates `postcss` from 8.4.16 to 8.5.2 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.4.16...8.5.2) Updates `rollup` from 2.77.3 to 4.34.6 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v2.77.3...v4.34.6) Updates `semver` from 5.7.1 to 5.7.2 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/v5.7.2/CHANGELOG.md) - [Commits](npm/node-semver@v5.7.1...v5.7.2) Updates `vite` from 3.0.9 to 5.4.14 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v5.4.14/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v5.4.14/packages/vite) Updates `word-wrap` from 1.2.3 to 1.2.5 - [Release notes](https://github.com/jonschlinkert/word-wrap/releases) - [Commits](jonschlinkert/word-wrap@1.2.3...1.2.5) Updates `zod` from 3.19.0 to 3.24.1 - [Release notes](https://github.com/colinhacks/zod/releases) - [Changelog](https://github.com/colinhacks/zod/blob/main/CHANGELOG.md) - [Commits](colinhacks/zod@v3.19.0...v3.24.1) Updates `astro` from 1.9.2 to 5.2.5 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG-v1.md) - [Commits](https://github.com/withastro/astro/commits/astro@4.16.18/packages/astro) Updates `lodash` from 4.17.20 to 4.17.21 - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.20...4.17.21) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) Updates `cross-spawn` from 7.0.3 to 7.0.6 - [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/master/CHANGELOG.md) - [Commits](moxystudio/node-cross-spawn@v7.0.3...v7.0.6) Updates `micromatch` from 4.0.5 to 4.0.8 - [Release notes](https://github.com/micromatch/micromatch/releases) - [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md) - [Commits](micromatch/micromatch@4.0.5...4.0.8) Updates `word-wrap` from 1.2.3 to 1.2.5 - [Release notes](https://github.com/jonschlinkert/word-wrap/releases) - [Commits](jonschlinkert/word-wrap@1.2.3...1.2.5) --- updated-dependencies: - dependency-name: astro dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: lodash dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@babel/traverse" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: dset dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: esbuild dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: get-func-name dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: micromatch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: nanoid dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: postcss dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: rollup dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: semver dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: vite dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: word-wrap dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: zod dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: astro dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: lodash dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: cross-spawn dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: micromatch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: word-wrap dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added the dependencies Pull requests that update a dependency file label Feb 10, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the npm_and_yarn group across 4 directories with 16 updates #106

Bump the npm_and_yarn group across 4 directories with 16 updates #106

dependabot bot commented on behalf of github Feb 10, 2025

Bump the npm_and_yarn group across 4 directories with 16 updates #106

Are you sure you want to change the base?

Bump the npm_and_yarn group across 4 directories with 16 updates #106

Conversation

dependabot bot commented on behalf of github Feb 10, 2025

astro@4.16.18

Patch Changes

astro@4.16.17

Patch Changes

1.9.2

Patch Changes

1.9.1

Patch Changes

1.9.0

Minor Changes

Patch Changes

1.8.0

Minor Changes

Patch Changes

1.7.2

v7.26.8 (2025-02-08)

🏠 Internal

v7.26.7 (2025-01-24)

🐛 Bug Fix

Committers: 6

v7.26.6 (2025-01-13)

🐛 Bug Fix

Committers: 1

v7.26.5 (2025-01-10)

👓 Spec Compliance

🐛 Bug Fix

Changelog

v7.26.7 (2025-01-24)

🐛 Bug Fix

v7.26.6 (2025-01-13)

🐛 Bug Fix

v7.26.5 (2025-01-10)

👓 Spec Compliance

v3.1.3

Patches

v0.21.5

Changelog: 2022

0.16.12

0.16.11

v2.0.2

What's Changed

v2.0.1

What's Changed

4.0.8

[4.0.8] - 2024-08-22

[4.0.7] - 2024-05-22

[4.0.6] - 2024-05-21

3.3.8

3.3.7

3.3.6

3.3.5

8.5.2

8.5.1

8.5 “Duke Alloces”

Thanks to Sponsors

8.4.49

8.4.48

8.4.47

8.4.46

8.4.45

8.5.2

8.5.1

8.5 “Duke Alloces”

8.4.49

8.4.48

8.4.47

8.4.46

8.4.45

8.4.44

8.4.43

8.4.42

8.4.41

8.4.40

8.4.39

8.4.38