chore(deps): bump the npm_and_yarn group across 8 directories with 9 updates #74

dependabot · 2024-11-09T04:26:50Z

Bumps the npm_and_yarn group with 8 updates in the / directory:

Package	From	To
electron	`19.0.11`	`22.3.25`
vite	`4.4.10`	`4.5.5`
ws	`8.5.0`	`8.17.1`
svelte	`3.55.1`	`4.2.19`
vue	`2.7.14`	`3.0.0`
braces	`3.0.2`	`3.0.3`
micromatch	`4.0.5`	`4.0.8`
rollup	`3.29.4`	`3.29.5`

Bumps the npm_and_yarn group with 1 update in the /packages/playwright-core/bundles/utils directory: ws.
Bumps the npm_and_yarn group with 1 update in the /packages/playwright-ct-svelte directory: svelte.
Bumps the npm_and_yarn group with 2 updates in the /packages/playwright/bundles/expect directory: braces and micromatch.
Bumps the npm_and_yarn group with 1 update in the /packages/playwright/bundles/utils directory: braces.
Bumps the npm_and_yarn group with 2 updates in the /tests/components/ct-svelte directory: svelte and rollup.
Bumps the npm_and_yarn group with 2 updates in the /tests/components/ct-svelte-vite directory: vite and svelte.
Bumps the npm_and_yarn group with 1 update in the /tests/components/ct-vue2-cli directory: vue.

Updates electron from 19.0.11 to 22.3.25

Commits

1c1c132 chore: cherry-pick 3fbd1dca6a4d from libvpx (#40026)
d892c2b build: fixup autoninja (#39899)
6132e80 build: run on circle hosts for forks (#39865)
a953199 build: use aks backed runners for linux builds (#39838)
056eacf chore: cherry-pick b2eab7500a18 from chromium (#39827)
5f8ef81 fix: ensure app load is limited to real asar files when appropriate (#39811)
4995c9e chore: cherry-pick 1 changes from Release-3-M116 (#39758)
e29cdac build: fix depot_tools patch application (#39751)
b58903d chore: cherry-pick 1 changes from Release-2-M116 (#39689)
33f9dce chore: cherry-pick 2 changes from Release-1-M116 (#39648)
Additional commits viewable in compare view

Updates vite from 4.4.10 to 4.5.5

Release notes

Sourced from vite's releases.

v4.5.5

Please refer to CHANGELOG.md for details.

v4.5.4

Please refer to CHANGELOG.md for details.

v4.5.3

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

4.5.5 (2024-09-16)

4.5.4 (2024-09-16)

fix: avoid DOM Clobbering gadget in getRelativeUrlFromDocument (#18115) (e812716), closes #18115

fix: backport #18112, fs raw query (b901438), closes #18112

4.5.3 (2024-03-24)

fix: fs.deny with globs with directories (#16250) (96a7f3a), closes #16250

4.5.2 (2024-01-19)

fix: fs deny for case insensitive systems (#15653) (eeec23b), closes #15653

4.5.1 (2023-12-04)

fix: backport #15223, proxy html path should be encoded (#15226) (41bb354), closes #15223 #15226

4.5.0 (2023-10-18)

feat: backport mdx as known js source (#14560) (#14670) (45595ef), closes #14560 #14670

feat: scan .marko files (#14669) (ed7bdc5), closes #14669

feat(ssr): backport ssr.resolve.conditions and ssr.resolve.externalConditions (#14498) (#14668) (520139c), closes #14498 #14668

4.4.11 (2023-10-05)

revert: "fix: use string manipulation instead of regex to inject esbuild helpers (54e1275), closes #14094

Commits

f1d8845 release: v4.5.5
2466c08 release: v4.5.4
e812716 fix: avoid DOM Clobbering gadget in getRelativeUrlFromDocument (#18115)
b901438 fix: backport #18112, fs raw query
aac695e release: v4.5.3
96a7f3a fix: fs.deny with globs with directories (#16250)
d0360c1 release: v4.5.2
eeec23b fix: fs deny for case insensitive systems (#15653)
c075115 release: v4.5.1
41bb354 fix: backport #15223, proxy html path should be encoded (#15226)
Additional commits viewable in compare view

Updates ws from 8.5.0 to 8.17.1

Release notes

Sourced from ws's releases.

8.17.1

Bug fixes

Fixed a DoS vulnerability (#2231).

A request with a number of headers exceeding the[server.maxHeadersCount][] threshold could be used to crash a ws server.
const http = require('http');
const WebSocket = require('ws');
const wss = new WebSocket.Server({ port: 0 }, function () {
const chars = "!#$%&'*+-.0123456789abcdefghijklmnopqrstuvwxyz^_`|~".split('');
const headers = {};
let count = 0;
for (let i = 0; i < chars.length; i++) {
if (count === 2000) break;
for (let j = 0; j &lt; chars.length; j++) {
  const key = chars[i] + chars[j];
  headers[key] = 'x';
if (++count === 2000) break;
}

}
headers.Connection = 'Upgrade';
headers.Upgrade = 'websocket';
headers['Sec-WebSocket-Key'] = 'dGhlIHNhbXBsZSBub25jZQ==';
headers['Sec-WebSocket-Version'] = '13';
const request = http.request({
headers: headers,
host: '127.0.0.1',
port: wss.address().port
});
request.end();
});
The vulnerability was reported by Ryan LaPointe in websockets/ws#2230.

In vulnerable versions of ws, the issue can be mitigated in the following ways:

Reduce the maximum allowed length of the request headers using the [--max-http-header-size=size][] and/or the [maxHeaderSize][] options so that no more headers than the server.maxHeadersCount limit can be sent.

... (truncated)

Commits

3c56601 [dist] 8.17.1
e55e510 [security] Fix crash when the Upgrade header cannot be read (#2231)
6a00029 [test] Increase code coverage
ddfe4a8 [perf] Reduce the amount of crypto.randomFillSync() calls
b73b118 [dist] 8.17.0
29694a5 [test] Use the highWaterMark variable
934c9d6 [ci] Test on node 22
1817bac [ci] Do not test on node 21
96c9b3d [major] Flip the default value of allowSynchronousEvents (#2221)
e5f32c7 [fix] Emit at most one event per event loop iteration (#2218)
Additional commits viewable in compare view

Updates svelte from 3.55.1 to 4.2.19

Release notes

Sourced from svelte's releases.

svelte@4.2.19

Patch Changes

fix: ensure typings for <svelte:options> are picked up (#12902)

fix: escape < in attribute strings (#12989)

Changelog

Sourced from svelte's changelog.

4.2.19

Patch Changes

fix: ensure typings for <svelte:options> are picked up (#12902)

fix: escape < in attribute strings (#12989)

4.2.18

Patch Changes

chore: speed up regex (#11922)

4.2.17

Patch Changes

fix: correctly handle falsy values of style directives in SSR mode (#11584)

4.2.16

Patch Changes

fix: check if svelte component exists on custom element destroy (#11489)

4.2.15

Patch Changes

support attribute selector inside :global() (#11135)

4.2.14

Patch Changes

fix parsing camelcase container query name (#11131)

4.2.13

Patch Changes

fix: applying :global for +,~ sibling combinator when slots are present (#9282)

4.2.12

Patch Changes

fix: properly update svelte:component props when there are spread props (#10604)

... (truncated)

Commits

d8b3133 Version Packages (#12990)
83e96e0 fix: escape < in attribute strings (#12989)
5ec4409 fix: ensure typings for \<svelte:options> are picked up (#12902)
230916f Version Packages (#11925)
dbe6057 chore: speed up regex (#11922)
a8deae9 Version Packages (#11594)
8592914 fix: correctly handle falsy values of style directives in SSR mode (#11584)
8e4c778 Version Packages (#11491)
1bab571 fix: additional check for component on destroy (svelte4) (#11489)
9f2341f Version Packages (#11202)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by svelte-admin, a new releaser for svelte since your current version.

Updates vue from 2.7.14 to 3.0.0

Changelog

Sourced from vue's changelog.

3.0.0 (2020-09-18)

3.0.0-rc.13 (2020-09-18)

Bug Fixes

hmr: make hmr working with class components (#2144) (422f05e)

reactivity: avoid length mutating array methods causing infinite updates (#2138) (f316a33), closes #2137

suspense: should discard unmount effects of invalidated pending branch (5bfcad1)

types: component instance inference without props (#2145) (57bdaa2)

Code Refactoring

watch APIs default to trigger pre-flush (49bb447), closes vuejs/vue-next#1706

Features

runtime-core: support using inject() inside props default functions (58c31e3)

watch: support dot-delimited path in watch option (1c9a0b3)

BREAKING CHANGES

watch APIs now default to use flush: 'pre' instead of flush: 'post'. This change affects watch, watchEffect, the watch component option, and this.$watch. See (49bb447) for more details.

3.0.0-rc.12 (2020-09-16)

Bug Fixes

reactivity: effect should only recursively self trigger with explicit options (3810de7), closes #2125

runtime-core: ensure root stable fragments inherit elements for moving (bebd44f), closes #2134

runtime-core: should still do full traverse of stable fragment children in dev + hmr (dd40ad8)

runtime-core/async-component: fix error component when there are no error handlers (c7b4a37), closes #2129

types/tsx: optional props from Mixin/Extends are treated as required (#2048) (89e9ab8)

Features

compiler-sfc: additionalData support for css preprocessors (#2126) (066d514)

3.0.0-rc.11 (2020-09-15)

... (truncated)

Commits

See full diff in compare view

Updates braces from 3.0.2 to 3.0.3

Commits

74b2db2 3.0.3
88f1429 update eslint. lint, fix unit tests.
415d660 Snyk js braces 6838727 (#40)
190510f fix tests, skip 1 test in test/braces.expand
716eb9f readme bump
a5851e5 Merge pull request #37 from coderaiser/fix/vulnerability
2092bd1 feature: braces: add maxSymbols (https://github.com/micromatch/braces/issues/...
9f5b4cf fix: vulnerability (https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727)
98414f9 remove funding file
665ab5d update keepEscaping doc (#27)
Additional commits viewable in compare view

Updates got from 9.6.0 to 11.8.6

Release notes

Sourced from got's releases.

v11.8.6

Destroy request object after successful response

sindresorhus/got@v11.8.5...v11.8.6

v11.8.5

Backport security fix sindresorhus/got@861ccd9

CVE-2022-33987

sindresorhus/got@v11.8.4...v11.8.5

v11.8.3

Bump cacheable-request dependency (#1921) 9463bb6

Fix HTTPError missing .code property (#1739) 0e167b8

sindresorhus/got@v11.8.2...v11.8.3

v11.8.2

Make the dnsCache option lazy (#1529) 3bd245f This slightly improves Got startup performance and fixes an issue with Jest.

sindresorhus/got@v11.8.1...v11.8.2

v11.8.1

Do not throw on custom stack traces (#1491) 4c815c3a609eb74d0eb139414d9996b4f65dc3c0

v11.8.0

Fix for sending files with size 0 on stat (#1488) 7acd380

beforeRetry allows stream body if different from original (#1501) 3dd2273

Set default value for an options object (#1495) 390b145

sindresorhus/got@v11.7.0...v11.8.0

v11.7.0

Improvements

Add pfx HTTPS option (#1364) c33df7f

Update body after beforeRequest (#1453) e1c1844

Don't allocate buffer twice (#1403) 7bc69d9

Fixes

Fix a regression where body was sent after redirect 88b32ea

Fix destructure error on promise.json() c97ce7c

Do not ignore userinfo on a redirect to the same origin 52de13b

sindresorhus/got@v11.6.2...v11.7.0

v11.6.2

Bug fixes

... (truncated)

Commits

2b1482c 11.8.6
2d1497e Destroy request object after successful response (#2187)
5e17bb7 11.8.5
bce8ce7 Backport 861ccd9ac2237df762a9e2beed7edd88c60782dc
8ced192 Fix build
670eb04 11.8.4
20f29fe Backport #1543: Initialize globalResponse in case of ignored HTTPError (#2017)
0da732f 11.8.3
9463bb6 Bump cacheable-request dependency (#1921)
0e167b8 HTTPError code set to 'HTTPError' #1711 (#1739)
Additional commits viewable in compare view

Updates micromatch from 4.0.5 to 4.0.8

Release notes

Sourced from micromatch's releases.

4.0.8

Ultimate release that fixes both CVE-2024-4067 and CVE-2024-4068. We consider the issues low-priority, so even if you see automated scanners saying otherwise, don't be scared.

Changelog

Sourced from micromatch's changelog.

[4.0.8] - 2024-08-22

backported CVE-2024-4067 fix (from v4.0.6) over to 4.x branch

[4.0.7] - 2024-05-22

this is basically v4.0.5, with some README updates

it is vulnerable to CVE-2024-4067

Updated braces to v3.0.3 to avoid CVE-2024-4068

does NOT break API compatibility

[4.0.6] - 2024-05-21

Added hasBraces to check if a pattern contains braces.

Fixes CVE-2024-4067

BREAKS API COMPATIBILITY

Should be labeled as a major release, but it's not.

Commits

8bd704e 4.0.8
a0e6841 run verb to generate README documentation
4ec2884 Merge branch 'v4' into hauserkristof-feature/v4.0.8
03aa805 Merge pull request #266 from hauserkristof/feature/v4.0.8
814f5f7 lint
67fcce6 fix: CHANGELOG about braces & CVE-2024-4068, v4.0.5
113f2e3 fix: CVE numbers in CHANGELOG
d9dbd9a feat: updated CHANGELOG
2ab1315 fix: use actions/setup-node@v4
1406ea3 feat: rework test to work on macos with node 10,12 and 14
Additional commits viewable in compare view

Updates rollup from 3.29.4 to 3.29.5

Changelog

Sourced from rollup's changelog.

rollup changelog

4.24.4

2024-11-04

Bug Fixes

Ensure mutations by handlers in Proxy definitions are always respected when tree-shaking (#5713)

Pull Requests

#5708: Update configuration-options document (@sacru2red, @lukastaegert)

#5711: chore(deps): lock file maintenance minor/patch updates (@renovate[bot])

#5713: fix: Deoptimize the proxied object if its property is reassigned in the handler functions (@TrickyPi)

4.24.3

2024-10-29

Bug Fixes

Slightly reduce memory consumption by specifying fixed array sizes where possible (#5703)

Pull Requests

#5703: perf: use pre-allocated arrays for known result sizes (@GalacticHypernova)

4.24.2

2024-10-27

Bug Fixes

Add missing build dependency (#5705)

Pull Requests

#5705: Fix "Couldn't find package" error when installing rollup using yarn (@tagattie)

4.24.1

2024-10-27

Bug Fixes

Support running Rollup natively on FreeBSD (#5698)

Pull Requests

... (truncated)

Commits

dfd233d 3.29.5
2ef77c0 Fix DOM Clobbering CVE
See full diff in compare view

Updates ws from 8.4.2 to 8.17.1

Release notes

Sourced from ws's releases.

8.17.1

Bug fixes

Fixed a DoS vulnerability (#2231).

A request with a number of headers exceeding the[server.maxHeadersCount][] threshold could be used to crash a ws server.
const http = require('http');
const WebSocket = require('ws');
const wss = new WebSocket.Server({ port: 0 }, function () {
const chars = "!#$%&'*+-.0123456789abcdefghijklmnopqrstuvwxyz^_`|~".split('');
const headers = {};
let count = 0;
for (let i = 0; i < chars.length; i++) {
if (count === 2000) break;
for (let j = 0; j &lt; chars.length; j++) {
  const key = chars[i] + chars[j];
  headers[key] = 'x';
if (++count === 2000) break;
}

}
headers.Connection = 'Upgrade';
headers.Upgrade = 'websocket';
headers['Sec-WebSocket-Key'] = 'dGhlIHNhbXBsZSBub25jZQ==';
headers['Sec-WebSocket-Version'] = '13';
const request = http.request({
headers: headers,
host: '127.0.0.1',
port: wss.address().port
});
request.end();
});
The vulnerability was reported by Ryan LaPointe in websockets/ws#2230.

In vulnerable versions of ws, the issue can be mitigated in the following ways:

Reduce the maximum allowed length of the request headers using the [--max-http-header-size=size][] and/or the [maxHeaderSize][] options so that no more headers than the server.maxHeadersCount limit can be sent.

... (truncated)

Commits

3c56601 [dist] 8.17.1
e55e510 [security] Fix crash when the Upgrade header cannot be read (#2231)
6a00029 [test] Increase code coverage
ddfe4a8 [perf] Reduce the amount of crypto.randomFillSync() calls
b73b118 [dist] 8.17.0
29694a5 [test] Use the highWaterMark variable
934c9d6 [ci] Test on node 22
1817bac [ci] Do not test on node 21
96c9b3d [major] Flip the default value of allowSynchronousEvents (#2221)
e5f32c7 [fix] Emit at most one event per event loop iteration (#2218)
Additional commits viewable in compare view

Updates svelte from 3.59.2 to 5.1.13

Release notes

Sourced from svelte's releases.

svelte@4.2.19

Patch Changes

fix: ensure typings for <svelte:options> are picked up (#12902)

fix: escape < in attribute strings (#12989)

Changelog

Sourced from svelte's changelog.

4.2.19

Patch Changes

fix: ensure typings for <svelte:options> are picked up (#12902)

fix: escape < in attribute strings (#12989)

4.2.18

Patch Changes

chore: speed up regex (#11922)

4.2.17

Patch Changes

fix: correctly handle falsy values of style directives in SSR mode (#11584)

4.2.16

Patch Changes

fix: check if svelte component exists on custom element destroy (#11489)

4.2.15

Patch Changes

support attribute selector inside :global() (#11135)

4.2.14

Patch Changes

fix parsing camelcase container query name (#11131)

4.2.13

Patch Changes

fix: applying :global for +,~ sibling combinator when slots are present (#9282)

4.2.12

Patch Changes

fix: properly update svelte:component props when there are spread props (#10604)

... (truncated)

Commits

d8b3133 Version Packages (#12990)
83e96e0 fix: escape < in attribute strings (#12989)
5ec4409 fix: ensure typings for \<svelte:options> are picked up (#12902)
230916f Version Packages (#11925)
dbe6057 chore: speed up regex (#11922)
a8deae9 Version Packages (#11594)
8592914 fix: correctly handle falsy values of style directives in SSR mode (#11584)
8e4c778 Version Packages (#11491)
1bab571 fix: additional check for component on destroy (svelte4) (#11489)
9f2341f Version Packages (#11202)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by svelte-admin, a new releaser for svelte since your current version.

Updates braces from 3.0.2 to 3.0.3

Commits

74b2db2 3.0.3
88f1429 update eslint. lint, fix unit tests.
415d660 Snyk js braces 6838727 (#40)
190510f fix tests, skip 1 test in test/braces.expand
716eb9f readme bump
a5851e5 Merge pull request #37 from coderaiser/fix/vulnerability
2092bd1 feature: braces: add maxSymbols (https://github.com/micromatch/braces/issues/...
9f5b4cf fix: vulnerability (https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727)
98414f9 remove funding file
665ab5d update keepEscaping doc (#27)
Additional commits viewable in compare view

Updates micromatch from 4.0.5 to 4.0.8

Release notes

Sourced from micromatch's releases.

4.0.8

Ultimate release that fixes both CVE-2024-4067 and CVE-2024-4068. We consider the issues low-priority, so even if you see automated scanners saying otherwise, don't be scared.

Changelog

Sourced from micromatch's changelog.

[4.0.8] - 2024-08-22

backported CVE-2024-4067 fix (from v4.0.6) over to 4.x branch

[4.0.7] - 2024-05-22

this is basically v4.0.5, with some README updates

it is vulnerable to CVE-2024-4067

Updated braces to v3.0.3 to avoid CVE-2024-4068

does NOT break API compatibility

[4.0.6] - 2024-05-21

Added hasBraces to check if a pattern contains braces.

Fixes CVE-2024-4067

BREAKS API COMPATIBILITY

Should be labeled as a major release, but it's not.

Commits

8bd704e 4.0.8
a0e6841 run verb to generate README documentation
4ec2884 Merge branch 'v4' into hauserkristof-feature/v4.0.8
03aa805 Merge pull request #266 from hauserkristof/feature/v4.0.8
814f5f7 lint
67fcce6 fix: CHANGELOG about braces & CVE-2024-4068, v4.0.5
113f2e3 fix: CVE numbers in CHANGELOG
d9dbd9a feat: updated CHANGELOG
2ab1315 fix: use actions/setup-node@v4
1406ea3 feat: rework test to work on macos with node 10,12 and 14
Additional commits viewable in compare view

Updates braces from 3.0.2 to 3.0.3

Commits

74b2db2 3.0.3
88f1429 update eslint. lint, fix unit tests.
415d660 Snyk js braces 6838727 (#40)
190510f fix tests, skip 1 test in test/braces.expand
716eb9f readme bump
a5851e5 Merge pull request #37 from coderaiser/fix/vulnerability
2092bd1 feature: braces: add maxSymbols (https://github.com/micromatch/braces/issues/...
9f5b4cf fix: vulnerability (https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727)
98414f9 remove funding file
665ab5d update keepEscaping doc (#27)
Additional commits viewable in compare view

Updates svelte from 3.59.2 to 5.1.13

Release notes

Sourced from svelte's releases.

svelte@4.2.19

Patch Changes

fix: ensure typings for <svelte:options> are picked up (#12902)

fix: escape < in attribute strings (#12989)

Changelog

Sourced from svelte's changelog.

4.2.19

Patch Changes

fix: ensure typings for <svelte:options> are picked up (#12902)

fix: escape < in attribute strings (#12989)

4.2.18

Patch Changes

chore: speed up regex (#11922)

4.2.17

Patch Changes

fix: correctly handle falsy values of style directives in SSR mode (#11584)

4.2.16

Patch Changes

fix: check if svelte component exists on custom element destroy (#11489)

4.2.15

Patch Changes

support attribute selector inside :global() (#11135)

4.2.14

Patch Changes

fix parsing camelcase container query name (#11131)

4.2.13

Patch Changes

fix: applying :global for +,~ sibling combinator when slots are present (#9282)

4.2.12

Patch Changes

fix: properly update svelte:component props when there are spread props (#10604)

... (truncated)

Commits

d8b3133 Version Packages (#12990)
83e96e0 fix: escape < in attribute strings (#12989)
5ec4409 fix: ensure typings for \<svelte:options> are picked up (#12902)
230916f Version Packages (#11925)
dbe6057 chore: speed up regex (#11922)
a8deae9 Version Packages (#11594)
8592914 fix: correctly handle falsy values of style directives in SSR mode (#11584)
8e4c778 Version Packages (#11491)
1bab571 fix: additional check for component on destroy (svelte4) (#11489)
9f2341f Version Packages (#11202)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by svelte-admin, a new releaser for svelte since your current version.

Updates rollup from 2.79.2 to 4.24.4

Changelog

Sourced from rollup's changelog.

rollup changelog

4.24.4

2024-11-04

Bug Fixes

Ensure mutations by handlers in Proxy definitions are always respected when tree-shaking (#5713)

Pull Requests

#5708: Update configuration-options document (@sacru2red, @lukastaegert)

#5711: chore(deps): lock file maintenance minor/patch updates (@renovate[bot])

#5713: fix: Deoptimize the proxied object if its property is reassigned in the handler functions (@TrickyPi)

4.24.3

2024-10-29

Bug Fixes

Slightly reduce memory consumption by specifying fixed array sizes where possible (#5703)

Pull Requests

#5703: perf: use pre-allocated arrays for known result sizes (@GalacticHypernova)

4.24.2

2024-10-27

Bug Fixes

Add missing build dependency (#5705)

Pull Requests

#57...
Description has been truncated

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[pull] main from microsoft:main

…updates Bumps the npm_and_yarn group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [electron](https://github.com/electron/electron) | `19.0.11` | `22.3.25` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `4.4.10` | `4.5.5` | | [ws](https://github.com/websockets/ws) | `8.5.0` | `8.17.1` | | [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) | `3.55.1` | `4.2.19` | | [vue](https://github.com/vuejs/core) | `2.7.14` | `3.0.0` | | [braces](https://github.com/micromatch/braces) | `3.0.2` | `3.0.3` | | [micromatch](https://github.com/micromatch/micromatch) | `4.0.5` | `4.0.8` | | [rollup](https://github.com/rollup/rollup) | `3.29.4` | `3.29.5` | Bumps the npm_and_yarn group with 1 update in the /packages/playwright-core/bundles/utils directory: [ws](https://github.com/websockets/ws). Bumps the npm_and_yarn group with 1 update in the /packages/playwright-ct-svelte directory: [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte). Bumps the npm_and_yarn group with 2 updates in the /packages/playwright/bundles/expect directory: [braces](https://github.com/micromatch/braces) and [micromatch](https://github.com/micromatch/micromatch). Bumps the npm_and_yarn group with 1 update in the /packages/playwright/bundles/utils directory: [braces](https://github.com/micromatch/braces). Bumps the npm_and_yarn group with 2 updates in the /tests/components/ct-svelte directory: [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) and [rollup](https://github.com/rollup/rollup). Bumps the npm_and_yarn group with 2 updates in the /tests/components/ct-svelte-vite directory: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) and [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte). Bumps the npm_and_yarn group with 1 update in the /tests/components/ct-vue2-cli directory: [vue](https://github.com/vuejs/core). Updates `electron` from 19.0.11 to 22.3.25 - [Release notes](https://github.com/electron/electron/releases) - [Changelog](https://github.com/electron/electron/blob/main/docs/breaking-changes.md) - [Commits](electron/electron@v19.0.11...v22.3.25) Updates `vite` from 4.4.10 to 4.5.5 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v4.5.5/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v4.5.5/packages/vite) Updates `ws` from 8.5.0 to 8.17.1 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@8.5.0...8.17.1) Updates `svelte` from 3.55.1 to 4.2.19 - [Release notes](https://github.com/sveltejs/svelte/releases) - [Changelog](https://github.com/sveltejs/svelte/blob/svelte@4.2.19/packages/svelte/CHANGELOG.md) - [Commits](https://github.com/sveltejs/svelte/commits/svelte@4.2.19/packages/svelte) Updates `vue` from 2.7.14 to 3.0.0 - [Release notes](https://github.com/vuejs/core/releases) - [Changelog](https://github.com/vuejs/core/blob/v3.0.0/CHANGELOG.md) - [Commits](https://github.com/vuejs/core/commits/v3.0.0) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) Updates `got` from 9.6.0 to 11.8.6 - [Release notes](https://github.com/sindresorhus/got/releases) - [Commits](sindresorhus/got@v9.6.0...v11.8.6) Updates `micromatch` from 4.0.5 to 4.0.8 - [Release notes](https://github.com/micromatch/micromatch/releases) - [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md) - [Commits](micromatch/micromatch@4.0.5...4.0.8) Updates `rollup` from 3.29.4 to 3.29.5 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v3.29.4...v3.29.5) Updates `ws` from 8.4.2 to 8.17.1 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@8.5.0...8.17.1) Updates `svelte` from 3.59.2 to 5.1.13 - [Release notes](https://github.com/sveltejs/svelte/releases) - [Changelog](https://github.com/sveltejs/svelte/blob/svelte@4.2.19/packages/svelte/CHANGELOG.md) - [Commits](https://github.com/sveltejs/svelte/commits/svelte@4.2.19/packages/svelte) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) Updates `micromatch` from 4.0.5 to 4.0.8 - [Release notes](https://github.com/micromatch/micromatch/releases) - [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md) - [Commits](micromatch/micromatch@4.0.5...4.0.8) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) Updates `svelte` from 3.59.2 to 5.1.13 - [Release notes](https://github.com/sveltejs/svelte/releases) - [Changelog](https://github.com/sveltejs/svelte/blob/svelte@4.2.19/packages/svelte/CHANGELOG.md) - [Commits](https://github.com/sveltejs/svelte/commits/svelte@4.2.19/packages/svelte) Updates `rollup` from 2.79.2 to 4.24.4 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v3.29.4...v3.29.5) Updates `vite` from 4.5.5 to 5.4.10 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v4.5.5/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v4.5.5/packages/vite) Updates `svelte` from 3.59.2 to 5.1.13 - [Release notes](https://github.com/sveltejs/svelte/releases) - [Changelog](https://github.com/sveltejs/svelte/blob/svelte@4.2.19/packages/svelte/CHANGELOG.md) - [Commits](https://github.com/sveltejs/svelte/commits/svelte@4.2.19/packages/svelte) Updates `vue` from 2.7.16 to 3.5.12 - [Release notes](https://github.com/vuejs/core/releases) - [Changelog](https://github.com/vuejs/core/blob/v3.0.0/CHANGELOG.md) - [Commits](https://github.com/vuejs/core/commits/v3.0.0) --- updated-dependencies: - dependency-name: electron dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: vite dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: ws dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: svelte dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: vue dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: got dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: micromatch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: rollup dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ws dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: svelte dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: micromatch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: svelte dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: rollup dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: vite dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: svelte dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: vue dependency-type: direct:production dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>

semanticdiff-com · 2024-11-09T04:26:55Z

Review changes with

Changed Files

File	Status
packages/playwright/bundles/utils/package-lock.json	71% smaller
packages/playwright/bundles/expect/package-lock.json	71% smaller
packages/playwright-core/bundles/utils/package-lock.json	65% smaller
packages/playwright-ct-svelte/package.json	50% smaller
package-lock.json	20% smaller
tests/components/ct-svelte-vite/package.json	11% smaller
package.json	0% smaller
packages/playwright-core/bundles/utils/package.json	0% smaller
packages/playwright-ct-core/package.json	0% smaller
packages/playwright-ct-vue2/package.json	0% smaller
tests/components/ct-svelte/package.json	0% smaller
tests/components/ct-vue2-cli/package.json	0% smaller

restack-app · 2024-11-09T04:26:55Z

No applications have been configured for previews targeting branch: main. To do so go to restack console and configure your applications for previews.

pr-code-reviewer · 2024-11-09T04:26:57Z

👋 Hi there!

Everything looks good!

_{^{Automatically generated with the help of gpt-3.5-turbo.

Feedback? Please don't hesitate to drop me an email at webber@takken.io.}}

coderabbitai · 2024-11-09T04:26:59Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

🪧 Tips

Chat

There are 3 ways to chat with CodeRabbit:

Review comments: Directly reply to a review comment made by CodeRabbit. Example:
- I pushed a fix in commit <commit_id>, please review it.
- Generate unit testing code for this file.
- Open a follow-up GitHub issue for this discussion.
Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query. Examples:
- @coderabbitai generate unit testing code for this file.
- @coderabbitai modularize this function.
PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
- @coderabbitai gather interesting stats about this repository and render them as a table. Additionally, render a pie chart showing the language distribution in the codebase.
- @coderabbitai read src/utils.ts and generate unit testing code.
- @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.
- @coderabbitai help me debug CodeRabbit configuration file.

Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments.

CodeRabbit Commands (Invoked using PR comments)

@coderabbitai pause to pause the reviews on a PR.
@coderabbitai resume to resume the paused reviews.
@coderabbitai review to trigger an incremental review. This is useful when automatic reviews are disabled for the repository.
@coderabbitai full review to do a full review from scratch and review all the files again.
@coderabbitai summary to regenerate the summary of the PR.
@coderabbitai resolve resolve all the CodeRabbit review comments.
@coderabbitai configuration to show the current CodeRabbit configuration for the repository.
@coderabbitai help to get help.

Other keywords and placeholders

Add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.
Add @coderabbitai summary to generate the high-level summary at a specific location in the PR description.
Add @coderabbitai anywhere in the PR title to generate the title automatically.

CodeRabbit Configuration File (`.coderabbit.yaml`)

You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
Please see the configuration documentation for more information.
If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Documentation and Community

Visit our Documentation for detailed information on how to use CodeRabbit.
Join our Discord Community to get help, request features, and share feedback.
Follow us on X/Twitter for updates and announcements.

ammar-ahmed-butt and others added 26 commits July 26, 2023 21:25

Merge pull request #47 from microsoft/main

f88ddb4

[pull] main from microsoft:main

Merge pull request #48 from microsoft/main

472254e

[pull] main from microsoft:main

Merge pull request #49 from microsoft/main

b1f605e

[pull] main from microsoft:main

Merge pull request #50 from microsoft/main

6c9b70b

[pull] main from microsoft:main

Merge pull request #51 from microsoft/main

19bdf0c

[pull] main from microsoft:main

Merge pull request #52 from microsoft/main

d9992c3

[pull] main from microsoft:main

Merge pull request #53 from microsoft/main

10d3053

[pull] main from microsoft:main

Merge pull request #54 from microsoft/main

48cbe32

[pull] main from microsoft:main

Merge pull request #55 from microsoft/main

0e0cc69

[pull] main from microsoft:main

Merge pull request #56 from microsoft/main

0e36997

[pull] main from microsoft:main

Merge pull request #57 from microsoft/main

8c82d7c

[pull] main from microsoft:main

Merge pull request #58 from microsoft/main

e4adc10

[pull] main from microsoft:main

Merge pull request #59 from microsoft/main

61eacd9

[pull] main from microsoft:main

Merge pull request #60 from microsoft/main

9ecb717

[pull] main from microsoft:main

Merge pull request #61 from microsoft/main

6008d76

[pull] main from microsoft:main

Merge pull request #62 from microsoft/main

caac8c9

[pull] main from microsoft:main

Merge pull request #63 from microsoft/main

6674a67

[pull] main from microsoft:main

Merge pull request #64 from microsoft/main

d08143d

[pull] main from microsoft:main

Merge pull request #65 from microsoft/main

d45d642

[pull] main from microsoft:main

Merge pull request #66 from microsoft/main

ef00594

[pull] main from microsoft:main

Merge pull request #67 from microsoft/main

e366969

[pull] main from microsoft:main

Merge pull request #68 from microsoft/main

feee6ff

[pull] main from microsoft:main

Merge pull request #69 from microsoft/main

559827f

[pull] main from microsoft:main

Merge pull request #70 from microsoft/main

0b20f9a

[pull] main from microsoft:main

Merge pull request #71 from microsoft/main

ac7fb5f

[pull] main from microsoft:main

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Nov 9, 2024

pull bot force-pushed the main branch from f4dd393 to 940230d Compare December 30, 2024 23:56

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the npm_and_yarn group across 8 directories with 9 updates #74

chore(deps): bump the npm_and_yarn group across 8 directories with 9 updates #74

dependabot bot commented on behalf of github Nov 9, 2024 •

edited

Loading

semanticdiff-com bot commented Nov 9, 2024 •

edited

Loading

restack-app bot commented Nov 9, 2024

pr-code-reviewer bot commented Nov 9, 2024 •

edited

Loading

coderabbitai bot commented Nov 9, 2024

Review skipped

Chat

CodeRabbit Commands (Invoked using PR comments)

Other keywords and placeholders

CodeRabbit Configuration File (`.coderabbit.yaml`)

Documentation and Community

chore(deps): bump the npm_and_yarn group across 8 directories with 9 updates #74

Are you sure you want to change the base?

chore(deps): bump the npm_and_yarn group across 8 directories with 9 updates #74

Conversation

dependabot bot commented on behalf of github Nov 9, 2024 • edited Loading

v4.5.5

v4.5.4

v4.5.3

4.5.5 (2024-09-16)

4.5.4 (2024-09-16)

4.5.3 (2024-03-24)

4.5.2 (2024-01-19)

4.5.1 (2023-12-04)

4.5.0 (2023-10-18)

4.4.11 (2023-10-05)

8.17.1

Bug fixes

svelte@4.2.19

Patch Changes

4.2.19

Patch Changes

4.2.18

Patch Changes

4.2.17

Patch Changes

4.2.16

Patch Changes

4.2.15

Patch Changes

4.2.14

Patch Changes

4.2.13

Patch Changes

4.2.12

Patch Changes

3.0.0 (2020-09-18)

3.0.0-rc.13 (2020-09-18)

Bug Fixes

Code Refactoring

Features

BREAKING CHANGES

3.0.0-rc.12 (2020-09-16)

Bug Fixes

Features

3.0.0-rc.11 (2020-09-15)

v11.8.6

v11.8.5

v11.8.3

v11.8.2

v11.8.1

v11.8.0

v11.7.0

Improvements

Fixes

v11.6.2

Bug fixes

4.0.8

[4.0.8] - 2024-08-22

[4.0.7] - 2024-05-22

[4.0.6] - 2024-05-21

rollup changelog

4.24.4

Bug Fixes

Pull Requests

4.24.3

Bug Fixes

Pull Requests

4.24.2

Bug Fixes

Pull Requests

4.24.1

Bug Fixes

Pull Requests

8.17.1

Bug fixes

svelte@4.2.19

Patch Changes

4.2.19

Patch Changes

4.2.18

dependabot bot commented on behalf of github Nov 9, 2024 •

edited

Loading

semanticdiff-com bot commented Nov 9, 2024 •

edited

Loading

pr-code-reviewer bot commented Nov 9, 2024 •

edited

Loading

CodeRabbit Configuration File (`.coderabbit.yaml`)