-
Notifications
You must be signed in to change notification settings - Fork 14
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
fix(deps): update all non-major dependencies #205
Open
renovate
wants to merge
1
commit into
main
Choose a base branch
from
renovate/all-minor-patch
base: main
Could not load branches
Branch not found: {{ refName }}
Loading
Could not load tags
Nothing to show
Loading
Are you sure you want to change the base?
Some commits from the old base branch may be removed from the timeline,
and old review comments may become outdated.
+1,128
−420
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
The latest updates on your projects. Learn more about Vercel for Git ↗︎
|
cdcfead
to
c3171b6
Compare
c3171b6
to
3372487
Compare
3372487
to
699de2c
Compare
699de2c
to
08b6ff3
Compare
08b6ff3
to
b6c5e1d
Compare
b6c5e1d
to
221afc2
Compare
221afc2
to
8ec2e05
Compare
8ec2e05
to
9d43597
Compare
9d43597
to
5a6a767
Compare
5a6a767
to
49b0acb
Compare
49b0acb
to
256086b
Compare
256086b
to
404ceed
Compare
404ceed
to
c48a3da
Compare
c48a3da
to
0fc87d7
Compare
a15f57e
to
dcf4c74
Compare
dcf4c74
to
4d4e28b
Compare
4d4e28b
to
b900d41
Compare
b900d41
to
4c0fd02
Compare
4c0fd02
to
28514c1
Compare
28514c1
to
7e92448
Compare
7e92448
to
0a62bce
Compare
0a62bce
to
2982fc1
Compare
2982fc1
to
b3d5a15
Compare
b3d5a15
to
41bca1f
Compare
41bca1f
to
b36da35
Compare
b36da35
to
8d05cbb
Compare
8d05cbb
to
5438635
Compare
5438635
to
61c1376
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Labels
None yet
0 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
3.2.0
->3.3.0
2.15.1
->2.15.3
2.16.0
2.15.1
->2.15.3
2.16.0
2.15.1
->2.15.3
2.16.0
2.15.1
->2.15.3
2.16.0
2.15.1
->2.15.3
2.16.0
2.15.1
->2.15.3
2.16.0
2.15.1
->2.15.3
2.16.0
2.15.1
->2.15.3
2.16.0
2.15.1
->2.15.3
2.16.0
2.15.1
->2.15.3
2.16.0
2.15.1
->2.15.3
2.16.0
2.15.1
->2.15.3
0.24.0
->0.25.0
9.17.0
->9.21.0
7.37.2
->7.37.4
^0.468.0
->^0.476.0
0.477.0
v4.0.0
->v4.1.0
8.18.1
->8.25.0
Release Notes
eslint/eslintrc (@eslint/eslintrc)
v3.3.0
Compare Source
Features
remix-run/remix (@remix-run/css-bundle)
v2.15.3
No significant changes to this package were made in this release. See the repo
CHANGELOG.md
for an overview of all changes in v2.15.3.v2.15.2
Compare Source
No significant changes to this package were made in this release. See the repo
CHANGELOG.md
for an overview of all changes in v2.15.2.remix-run/remix (@remix-run/dev)
v2.15.3
Patch Changes
@remix-run/server-runtime@2.15.3
@remix-run/node@2.15.3
v2.15.2
Compare Source
Patch Changes
false
(#10358)@remix-run/node@2.15.2
@remix-run/server-runtime@2.15.2
remix-run/remix (@remix-run/express)
v2.15.3
Patch Changes
@remix-run/node@2.15.3
v2.15.2
Compare Source
Patch Changes
@remix-run/node@2.15.2
remix-run/remix (@remix-run/node)
v2.15.3
Patch Changes
@remix-run/server-runtime@2.15.3
v2.15.2
Compare Source
Patch Changes
@remix-run/server-runtime@2.15.2
remix-run/remix (@remix-run/react)
v2.15.3
Compare Source
Patch Changes
@remix-run/server-runtime@2.15.3
v2.15.2
Compare Source
Patch Changes
@remix-run/server-runtime@2.15.2
remix-run/remix (@remix-run/serve)
v2.15.3
Compare Source
Patch Changes
@remix-run/node@2.15.3
@remix-run/express@2.15.3
v2.15.2
Compare Source
Patch Changes
@remix-run/express@2.15.2
@remix-run/node@2.15.2
remix-run/remix (@remix-run/server-runtime)
v2.15.3
Compare Source
Patch Changes
Set-Cookie
headers could be duplicated if also returned fromheaders
(#10424)v2.15.2
Compare Source
No significant changes to this package were made in this release. See the repo
CHANGELOG.md
for an overview of all changes in v2.15.2.vercel/remix (@vercel/remix)
v2.15.3
Date: 2025-01-30
Patch Changes
@remix-run/react
- Properly handle interrupted manifest requests in lazy route discovery (#10447)@remix-run/server-runtime
- Avoid duplication ofSet-Cookie
headers if also returned fromheaders
(#10424)@remix-run/server-runtime
- Properly handle status codes that cannot have a body in single fetch responses (204, etc.) (#10410)Updated Dependencies
react-router-dom@6.29.0
Full Changelog:
v2.15.2...v2.15.3
v2.15.2
Date: 2024-12-20
Patch Changes
@remix-run/dev
- Allow suppression of future flag warnings by setting them tofalse
(#10358)@remix-run/react
- Throw unwrapped Single Fetchredirect
to align with pre-Single Fetch behavior (#10317)Updated Dependencies
react-router-dom@6.28.1
Full Changelog:
v2.15.1...v2.15.2
evanw/esbuild (esbuild)
v0.25.0
Compare Source
This release deliberately contains backwards-incompatible changes. To avoid automatically picking up releases like this, you should either be pinning the exact version of
esbuild
in yourpackage.json
file (recommended) or be using a version range syntax that only accepts patch upgrades such as^0.24.0
or~0.24.0
. See npm's documentation about semver for more information.Restrict access to esbuild's development server (GHSA-67mh-4wv8-2f99)
This change addresses esbuild's first security vulnerability report. Previously esbuild set the
Access-Control-Allow-Origin
header to*
to allow esbuild's development server to be flexible in how it's used for development. However, this allows the websites you visit to make HTTP requests to esbuild's local development server, which gives read-only access to your source code if the website were to fetch your source code's specific URL. You can read more information in the report.Starting with this release, CORS will now be disabled, and requests will now be denied if the host does not match the one provided to
--serve=
. The default host is0.0.0.0
, which refers to all of the IP addresses that represent the local machine (e.g. both127.0.0.1
and192.168.0.1
). If you want to customize anything about esbuild's development server, you can put a proxy in front of esbuild and modify the incoming and/or outgoing requests.In addition, the
serve()
API call has been changed to return an array ofhosts
instead of a singlehost
string. This makes it possible to determine all of the hosts that esbuild's development server will accept.Thanks to @sapphi-red for reporting this issue.
Delete output files when a build fails in watch mode (#3643)
It has been requested for esbuild to delete files when a build fails in watch mode. Previously esbuild left the old files in place, which could cause people to not immediately realize that the most recent build failed. With this release, esbuild will now delete all output files if a rebuild fails. Fixing the build error and triggering another rebuild will restore all output files again.
Fix correctness issues with the CSS nesting transform (#3620, #3877, #3933, #3997, #4005, #4037, #4038)
This release fixes the following problems:
Naive expansion of CSS nesting can result in an exponential blow-up of generated CSS if each nesting level has multiple selectors. Previously esbuild sometimes collapsed individual nesting levels using
:is()
to limit expansion. However, this collapsing wasn't correct in some cases, so it has been removed to fix correctness issues.Thanks to @tim-we for working on a fix.
The
&
CSS nesting selector can be repeated multiple times to increase CSS specificity. Previously esbuild ignored this possibility and incorrectly considered&&
to have the same specificity as&
. With this release, this should now work correctly:Thanks to @CPunisher for working on a fix.
Previously transforming nested CSS incorrectly removed leading combinators from within pseudoclass selectors such as
:where()
. This edge case has been fixed and how has test coverage.This fix was contributed by @NoremacNergfol.
The CSS minifier contains logic to remove the
&
selector when it can be implied, which happens when there is only one and it's the leading token. However, this logic was incorrectly also applied to selector lists inside of pseudo-class selectors such as:where()
. With this release, the minifier will now avoid applying this logic in this edge case:Fix some correctness issues with source maps (#1745, #3183, #3613, #3982)
Previously esbuild incorrectly treated source map path references as file paths instead of as URLs. With this release, esbuild will now treat source map path references as URLs. This fixes the following problems with source maps:
File names in
sourceMappingURL
that contained a space previously did not encode the space as%20
, which resulted in JavaScript tools (including esbuild) failing to read that path back in when consuming the generated output file. This should now be fixed.Absolute URLs in
sourceMappingURL
that use thefile://
scheme previously attempted to read from a folder calledfile:
. These URLs should now be recognized and parsed correctly.Entries in the
sources
array in the source map are now treated as URLs instead of file paths. The correct behavior for this is much more clear now that source maps has a formal specification. Many thanks to those who worked on the specification.Fix incorrect package for
@esbuild/netbsd-arm64
(#4018)Due to a copy+paste typo, the binary published to
@esbuild/netbsd-arm64
was not actually forarm64
, and didn't run in that environment. This release should fix running esbuild in that environment (NetBSD on 64-bit ARM). Sorry about the mistake.Fix a minification bug with bitwise operators and bigints (#4065)
This change removes an incorrect assumption in esbuild that all bitwise operators result in a numeric integer. That assumption was correct up until the introduction of bigints in ES2020, but is no longer correct because almost all bitwise operators now operate on both numbers and bigints. Here's an example of the incorrect minification:
Fix esbuild incorrectly rejecting valid TypeScript edge case (#4027)
The following TypeScript code is valid:
Before this version, esbuild would fail to parse this with a syntax error as it expected the token sequence
async as ...
to be the start of an async arrow function expressionasync as => ...
. This edge case should be parsed correctly by esbuild starting with this release.Transform BigInt values into constructor calls when unsupported (#4049)
Previously esbuild would refuse to compile the BigInt literals (such as
123n
) if they are unsupported in the configured target environment (such as with--target=es6
). The rationale was that they cannot be polyfilled effectively because they change the behavior of JavaScript's arithmetic operators and JavaScript doesn't have operator overloading.However, this prevents using esbuild with certain libraries that would otherwise work if BigInt literals were ignored, such as with old versions of the
buffer
library before the library fixed support for running in environments without BigInt support. So with this release, esbuild will now turn BigInt literals into BigInt constructor calls (so123n
becomesBigInt(123)
) and generate a warning in this case. You can turn off the warning with--log-override:bigint=silent
or restore the warning to an error with--log-override:bigint=error
if needed.Change how
console
API dropping works (#4020)Previously the
--drop:console
feature replaced all method calls off of theconsole
global withundefined
regardless of how long the property access chain was (so it applied toconsole.log()
andconsole.log.call(console)
andconsole.log.not.a.method()
). However, it was pointed out that this breaks uses ofconsole.log.bind(console)
. That's also incompatible with Terser's implementation of the feature, which is where this feature originally came from (it does supportbind
). So with this release, using this feature with esbuild will now only replace one level of method call (unless extended bycall
orapply
) and will replace the method being called with an empty function in complex cases:This should more closely match Terser's existing behavior.
Allow BigInt literals as
define
valuesWith this release, you can now use BigInt literals as define values, such as with
--define:FOO=123n
. Previously trying to do this resulted in a syntax error.Fix a bug with resolve extensions in
node_modules
(#4053)The
--resolve-extensions=
option lets you specify the order in which to try resolving implicit file extensions. For complicated reasons, esbuild reorders TypeScript file extensions after JavaScript ones inside ofnode_modules
so that JavaScript source code is always preferred to TypeScript source code inside of dependencies. However, this reordering had a bug that could accidentally change the relative order of TypeScript file extensions if one of them was a prefix of the other. That bug has been fixed in this release. You can see the issue for details.Better minification of statically-determined
switch
cases (#4028)With this release, esbuild will now try to trim unused code within
switch
statements when the test expression andcase
expressions are primitive literals. This can arise when the test expression is an identifier that is substituted for a primitive literal at compile time. For example:Emit
/* @​__KEY__ */
for string literals derived from property names (#4034)Property name mangling is an advanced feature that shortens certain property names for better minification (I say "advanced feature" because it's very easy to break your code with it). Sometimes you need to store a property name in a string, such as
obj.get('foo')
instead ofobj.foo
. JavaScript minifiers such as esbuild and Terser have a convention where a/* @​__KEY__ */
comment before the string makes it behave like a property name. Soobj.get(/* @​__KEY__ */ 'foo')
allows the contents of the string'foo'
to be shortened.However, esbuild sometimes itself generates string literals containing property names when transforming code, such as when lowering class fields to ES6 or when transforming TypeScript decorators. Previously esbuild didn't generate its own
/* @​__KEY__ */
comments in this case, which means that minifying your code by running esbuild again on its own output wouldn't work correctly (this does not affect people that both minify and transform their code in a single step).With this release, esbuild will now generate
/* @​__KEY__ */
comments for property names in generated string literals. To avoid lots of unnecessary output for people that don't use this advanced feature, the generated comments will only be present when the feature is active. If you want to generate the comments but not actually mangle any property names, you can use a flag that has no effect such as--reserve-props=.
, which tells esbuild to not mangle any property names (but still activates this feature).The
text
loader now strips the UTF-8 BOM if present (#3935)Some software (such as Notepad on Windows) can create text files that start with the three bytes
0xEF 0xBB 0xBF
, which is referred to as the "byte order mark". This prefix is intended to be removed before using the text. Previously esbuild'stext
loader included this byte sequence in the string, which turns into a prefix of\uFEFF
in a JavaScript string when decoded from UTF-8. With this release, esbuild'stext
loader will now remove these bytes when they occur at the start of the file.Omit legal comment output files when empty (#3670)
Previously configuring esbuild with
--legal-comment=external
or--legal-comment=linked
would always generate a.LEGAL.txt
output file even if it was empty. Starting with this release, esbuild will now only do this if the file will be non-empty. This should result in a more organized output directory in some cases.Update Go from 1.23.1 to 1.23.5 (#4056, #4057)
This should have no effect on existing code as this version change does not change Go's operating system support. It may remove certain reports from vulnerability scanners that detect which version of the Go compiler esbuild uses.
This PR was contributed by @MikeWillCook.
Allow passing a port of 0 to the development server (#3692)
Unix sockets interpret a port of 0 to mean "pick a random unused port in the ephemeral port range". However, esbuild's default behavior when the port is not specified is to pick the first unused port starting from 8000 and upward. This is more convenient because port 8000 is typically free, so you can for example restart the development server and reload your app in the browser without needing to change the port in the URL. Since esbuild is written in Go (which does not have optional fields like JavaScript), not specifying the port in Go means it defaults to 0, so previously passing a port of 0 to esbuild caused port 8000 to be picked.
Starting with this release, passing a port of 0 to esbuild when using the CLI or the JS API will now pass port 0 to the OS, which will pick a random ephemeral port. To make this possible, the
Port
option in the Go API has been changed fromuint16
toint
(to allow for additional sentinel values) and passing a port of -1 in Go now picks a random port. Both the CLI and JS APIs now remap an explicitly-provided port of 0 into -1 for the internal Go API.Another option would have been to change
Port
in Go fromuint16
to*uint16
(Go's closest equivalent ofnumber | undefined
). However, that would make the common case of providing an explicit port in Go very awkward as Go doesn't support taking the address of integer constants. This tradeoff isn't worth it as picking a random ephemeral port is a rare use case. So the CLI and JS APIs should now match standard Unix behavior when the port is 0, but you need to use -1 instead with Go API.Minification now avoids inlining constants with direct
eval
(#4055)Direct
eval
can be used to introduce a new variable like this:Previously esbuild inlined
variable
here (which becamefalse
), which changed the behavior of the code. This inlining is now avoided, but please keep in mind that directeval
breaks many assumptions that JavaScript tools hold about normal code (especially when bundling) and I do not recommend using it. There are usually better alternatives that have a more localized impact on your code. You can read more about this here: https://esbuild.github.io/link/direct-eval/v0.24.2
Compare Source
Fix regression with
--define
andimport.meta
(#4010, #4012, #4013)The previous change in version 0.24.1 to use a more expression-like parser for
define
values to allow quoted property names introduced a regression that removed the ability to use--define:import.meta=...
. Even thoughimport
is normally a keyword that can't be used as an identifier, ES modules special-case theimport.meta
expression to behave like an identifier anyway. This change fixes the regression.This fix was contributed by @sapphi-red.
v0.24.1
Compare Source
Allow
es2024
as a target intsconfig.json
(#4004)TypeScript recently added
es2024
as a compilation target, so esbuild now supports this in thetarget
field oftsconfig.json
files, such as in the following configuration file:As a reminder, the only thing that esbuild uses this field for is determining whether or not to use legacy TypeScript behavior for class fields. You can read more in the documentation.
This fix was contributed by @billyjanitsch.
Allow automatic semicolon insertion after
get
/set
This change fixes a grammar bug in the parser that incorrectly treated the following code as a syntax error:
The above code will be considered valid starting with this release. This change to esbuild follows a similar change to TypeScript which will allow this syntax starting with TypeScript 5.7.
Allow quoted property names in
--define
and--pure
(#4008)The
define
andpure
API options now accept identifier expressions containing quoted property names. Previously all identifiers in the identifier expression had to be bare identifiers. This change now makes--define
and--pure
consistent with--global-name
, which already supported quoted property names. For example, the following is now possible:Note that if you're passing values like this on the command line using esbuild's
--define
flag, then you'll need to know how to escape quote characters for your shell. You may find esbuild's JavaScript API more ergonomic and portable than writing shell code.Minify empty
try
/catch
/finally
blocks (#4003)With this release, esbuild will now attempt to minify empty
try
blocks:This can sometimes expose additional minification opportunities.
Include
entryPoint
metadata for thecopy
loader (#3985)Almost all entry points already include a
entryPoint
field in theoutputs
map in esbuild's build metadata. However, this wasn't the case for thecopy
loader as that loader is a special-case that doesn't behave like other loaders. This release adds theentryPoint
field in this case.Source mappings may now contain
null
entries (#3310, #3878)With this change, sources that result in an empty source map may now emit a
null
source mapping (i.e. one with a generated position but without a source index or original position). This change improves source map accuracy by fixing a problem where minified code from a source without any source mappings could potentially still be associated with a mapping from another source file earlier in the generated output on the same minified line. It manifests as nonsensical files in source mapped stack traces. Now thenull
mapping "resets" the source map so that any lookups into the minified code without any mappings resolves tonull
(which appears as the output file in stack traces) instead of the incorrect source file.This change shouldn't affect anything in most situations. I'm only mentioning it in the release notes in case it introduces a bug with source mapping. It's part of a work-in-progress future feature that will let you omit certain unimportant files from the generated source map to reduce source map size.
Avoid using the parent directory name for determinism (#3998)
To make generated code more readable, esbuild includes the name of the source file when generating certain variable names within the file. Specifically bundling a CommonJS file generates a variable to store the lazily-evaluated module initializer. However, if a file is named
index.js
(or with a different extension), esbuild will use the name of the parent directory instead for a better name (since many packages have files all namedindex.js
but have unique directory names).This is problematic when the bundle entry point is named
index.js
and the parent directory name is non-deterministic (e.g. a temporary directory created by a build script). To avoid non-determinism in esbuild's output, esbuild will now useindex
instead of the parent directory in this case. Specifically this will happen if the parent directory is equal to esbuild'soutbase
API option, which defaults to the lowest common ancestor of all user-specified entry point paths.Experimental support for esbuild on NetBSD (#3974)
With this release, esbuild now has a published binary executable for NetBSD in the
@esbuild/netbsd-arm64
npm package, and esbuild's installer has been modified to attempt to use it when on NetBSD. Hopefully this makes installing esbuild via npm work on NetBSD. This change was contributed by @bsiegert.eslint/eslint (eslint)
v9.21.0
Compare Source
Features
418717f
feat: introduce new deprecated types for rules (#19238) (fnx)5c5b802
feat: Add--ext
CLI option (#19405) (Milos Djermanovic)Bug Fixes
db5340d
fix: update missing plugin message template (#19445) (Milos Djermanovic)d8ffdd4
fix: do not exit process on rule crash (#19436) (Francesco Trotta)Documentation
c5561ea
docs: Update README (GitHub Actions Bot)80b0485
docs: replacevar
withlet
andconst
in rule example (#19434) (Tanuj Kanti)f67d5e8
docs: Update README (GitHub Actions Bot)75afc61
docs: Update README (GitHub Actions Bot)0636cab
docs: Update Eleventy from v2 to v3 (#19415) (Amaresh S M)dd7d930
docs: Update README (GitHub Actions Bot)Chores
a8c9a9f
chore: update@eslint/eslintrc
and@eslint/js
(#19453) (Francesco Trotta)265e0cf
chore: package.json update for @eslint/js release (Jenkins)3401b85
test: add test forRule.ReportDescriptor
type (#19449) (Francesco Trotta)e497aa7
chore: update rewrite dependencies (#19448) (Francesco Trotta)dab5478
chore: better error message for missing plugin in config (#19402) (Tanuj Kanti)ebfe2eb
chore: set js language for bug report issue config block (#19439) (Josh Goldberg ✨)5fd211d
test: processors can return subpaths (#19425) (Milos Djermanovic)v9.20.1
Compare Source
Bug Fixes
274f054
fix: fixRuleContext
type (#19417) (Francesco Trotta)Documentation
fe3ccb2
docs: allow typing in search box while dropdown is open (#19424) (Amaresh S M)93c78a5
docs: Add instructions for pnpm compat (#19422) (Nicholas C. Zakas)b476a93
docs: Fix Keyboard Navigation for Search Results (#19416) (Amaresh S M)ccb60c0
docs: Update README (GitHub Actions Bot)v9.20.0
Compare Source
Features
e89a54a
feat: change behavior of inactive flags (#19386) (Milos Djermanovic)Bug Fixes
91d4d9f
fix: Bring types in sync with @eslint/core (#19157) (Nicholas C. Zakas)fa25c7a
fix: Emit warning when empty config file is used (#19399) (Nicholas C. Zakas)31a9fd0
fix: Clearer error message for wrong plugin format (#19380) (Nicholas C. Zakas)61d99e3
fix: Better error message for unserializable parser ([#19384](https://redirecConfiguration
📅 Schedule: Branch creation - "* 0-3 * * 1" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.