Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps-dev): bump the dev-dependencies group across 1 directory with 9 updates #719

Closed

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 11, 2024

Bumps the dev-dependencies group with 9 updates in the / directory:

Package From To
@rspack/cli 1.0.13 1.1.0
@rspack/core 1.0.13 1.1.0
happy-dom 15.7.4 15.11.0
publint 0.2.11 0.2.12
vitest 2.1.3 2.1.4
@types/node 22.7.7 22.9.0
@types/react 18.3.11 18.3.12
svelte 5.0.4 5.1.14
vite 5.4.9 5.4.11

Updates @rspack/cli from 1.0.13 to 1.1.0

Release notes

Sourced from @​rspack/cli's releases.

v1.1.0

See Announcing Rspack 1.1 for more details.

What's Changed

Performance Improvements ⚡

Exciting New Features 🎉

Bug Fixes 🐞

... (truncated)

Commits

Updates @rspack/core from 1.0.13 to 1.1.0

Release notes

Sourced from @​rspack/core's releases.

v1.1.0

See Announcing Rspack 1.1 for more details.

What's Changed

Performance Improvements ⚡

Exciting New Features 🎉

Bug Fixes 🐞

... (truncated)

Commits
  • c25596a Release Packages:1.1.0
  • dfb5cf7 feat: improve description, types and JSDoc for entry options (#8361)
  • ab3cdfb refactor: rm UNASSOCIATED_MODULE_INSTANCE_REFS (#8327)
  • 2c8e351 feat: support compilation.modules[i].dependencies (#8050)
  • 886a427 fix: file dependencies are lost when css module fails (#8328)
  • 0763068 feat: throw error for outdated compilation (#8315)
  • 4d1c348 refactor(rspack): remove RawRegex and JsRegExp (#8298)
  • 5c6f47a fix: runtime chunk hash should respect their reference order (#8303)
  • 1161016 fix: use incremental in production build (#8311)
  • 638b82f fix: falsy rule should not pass the validation (#8297)
  • Additional commits viewable in compare view

Updates happy-dom from 15.7.4 to 15.11.0

Release notes

Sourced from happy-dom's releases.

v15.11.0

🎨 Features

  • Adds support for the :disabled pseudo-class in CSS and query selectors - By @​capricorn86 in task #1159

v15.10.8

👷‍♂️ Patch fixes

  • Validate that object is of type Blob in FileReader.readAsArrayBuffer(), FileReader.readAsBinaryString(), FileReader.readAsDataURL() and FileReader.readAsText() - By @​btea in task #1565

v15.10.7

👷‍♂️ Patch fixes

  • Cookies with values that contains "=" should be supported - By @​btea in task #1570

v15.10.6

👷‍♂️ Patch fixes

  • Accept objects with a stringifier (such as a URL object) in Location.assign() and Location.replace() - By @​silverwind in task #1568

v15.10.5

👷‍♂️ Patch fixes

  • Fixes incorrect serialization of special characters in raw text elements such as <script> and <style> - By @​BenjaminAster in task #1566

v15.10.4

👷‍♂️ Patch fixes

  • Adds missing setter for the HTMLMediaElement.srcObject property - By @​ewesemann in task #1557

v15.10.3

👷‍♂️ Patch fixes

  • Allow to set custom export conditions in @happy-dom/jest-environment - By @​aearly in task #1555

v15.10.2

👷‍♂️ Patch fixes

  • Fixes a security vulnerability that allowed for server side code to be executed by a <script> tag - By @​capricorn86 in task #1585
    • There was a case that was missed with the first patch

v15.10.1

👷‍♂️ Patch fixes

  • Fixes a security vulnerability that allowed for server side code to be executed by a <script> tag - By @​capricorn86 in task #1585

v15.10.0

🎨 Features

  • Adds a new setting called disableSameOriginPolicy that makes it possible to bypass the same-origin policy in fetch requests - By @​OlaviSau in task #1553

v15.9.0

🎨 Features

  • Adds support for "aspect-ratio" to CSSStyleDeclaration - By @​yinm in task #1147

v15.8.5

👷‍♂️ Patch fixes

  • Fixes bug where Node.getRootNode() returned null when it was within a ShadowRoot that previously been disconnected from the Document - By @​capricorn86 in task #1581

v15.8.4

... (truncated)

Commits
  • 3a79654 feat: #1159 Adds support for the :disabled pseudo-class in CSS and query se...
  • cecb787 chore: #0 Bump the npm_and_yarn group with 4 updates (#1583)
  • 6ff0d8f fix: #1565 Validate that object is of type Blob in FileReader.readAsArrayBu...
  • 343bc49 chore: #1574 The current husky version no longer supports the install comma...
  • 1416396 fix: #1570 Cookies with values that contains = should be supported (#1573)
  • f5e1722 fix: #1568 Accept objects with a stringifier such as a URL object in Locati...
  • c80a0e9 fix: #1566 Fixes incorrect serialization of special characters in raw text ...
  • 32f7510 fix: #1557 Adds missing setter for the HTMLMediaElement.srcObject property ...
  • b949718 fix: [jest-environment] Allow custom export conditions (#1555)
  • d23834c fix: #1585 Fixes a security vulnerability that allowed for server side code...
  • Additional commits viewable in compare view

Updates publint from 0.2.11 to 0.2.12

Release notes

Sourced from publint's releases.

v0.2.12

Features

  • If the package publishes a license file, but the "license" field is not set in package.json, a suggestion will now be shown to add the field (bluwy/publint#111)

Bug fixes

  • In the "repostory" field, string shorthands with nested paths like gitlab:org/user/repo is now considered valid (bluwy/publint#113)

Site

Full Changelog: bluwy/publint@v0.2.11...v0.2.12

Commits

Updates vitest from 2.1.3 to 2.1.4

Release notes

Sourced from vitest's releases.

v2.1.4

   🚀 Features

This patch release includes a non-breaking feature for the experimental Browser Mode that doesn't follow SemVer. If you want to avoid picking up releases like this, make sure to pin the Vitest version in your package.json. See npm's documentation about semver for more information.

   🐞 Bug Fixes

   🏎 Performance

    View changes on GitHub
Commits
  • 0df44c0 chore: release v2.1.4
  • 2444ff2 fix(browser): initiate MSW in the same frame as tests (#6772)
  • 39041ee fix(vitest): silence import analysis warning (#6785)
  • b28cd2e fix: don't normalize drive case letter in root (#6792)
  • df6d750 fix(vitest): don't fail if the working directory starts with a lowercase driv...
  • 169028f feat(browser): allow custom HTML path, respect plugins transformIndexHtml (...
  • 5df7414 chore(deps): update all non-major dependencies (#6750)
  • de74785 chore(deps): update @antfu/eslint-config v3.8.0 (#6751)
  • 121b161 fix(vitest): print warnings form Vite plugins (#6724)
  • a939779 fix(browser): increment browser port automatically if there are several proje...
  • Additional commits viewable in compare view

Updates @types/node from 22.7.7 to 22.9.0

Commits

Updates @types/react from 18.3.11 to 18.3.12

Commits

Updates svelte from 5.0.4 to 5.1.14

Release notes

Sourced from svelte's releases.

svelte@5.1.14

Patch Changes

  • fix: migration script messing with attributes (#14260)

  • fix: do not treat reassigned synthetic binds as state in runes mode (#14236)

  • fix: account for mutations in script module in ownership check (#14253)

  • fix: consider img with loading attribute not static (#14237)

svelte@5.1.13

Patch Changes

  • fix: add migration task when there's a variable named that would conflict with a rune (#14216)

  • fix: consider valueOf in the reactive methods of SvelteDate (#14227)

  • fix: handle sibling combinators within :has (#14213)

  • fix: consider variables with synthetic store sub as state (#14195)

  • fix: read index as a source in legacy keyed each block (#14208)

  • fix: account for shadowing children slot during migration (#14224)

  • fix: ensure explicit nesting selector is always applied (#14193)

  • fix: add lang="ts" attribute during migration if needed (#14222)

svelte@5.1.12

Patch Changes

  • fix: ignore as type expressions on property definitions (#14181)

  • fix: restore active reaction if then block throws (#14191)

  • chore: adds legacy mode flag reducing bundle size in runes mode only apps (#14180)

svelte@5.1.11

Patch Changes

  • fix: error on TypeScript's readonly modifier (#14153)

  • fix: remove scoping for :not selectors (#14177)

svelte@5.1.10

Patch Changes

  • fix: ensure non-matching elements are scoped for :not(...) selector (#13999)

... (truncated)

Changelog

Sourced from svelte's changelog.

5.1.14

Patch Changes

  • fix: migration script messing with attributes (#14260)

  • fix: do not treat reassigned synthetic binds as state in runes mode (#14236)

  • fix: account for mutations in script module in ownership check (#14253)

  • fix: consider img with loading attribute not static (#14237)

5.1.13

Patch Changes

  • fix: add migration task when there's a variable named that would conflict with a rune (#14216)

  • fix: consider valueOf in the reactive methods of SvelteDate (#14227)

  • fix: handle sibling combinators within :has (#14213)

  • fix: consider variables with synthetic store sub as state (#14195)

  • fix: read index as a source in legacy keyed each block (#14208)

  • fix: account for shadowing children slot during migration (#14224)

  • fix: ensure explicit nesting selector is always applied (#14193)

  • fix: add lang="ts" attribute during migration if needed (#14222)

5.1.12

Patch Changes

  • fix: ignore as type expressions on property definitions (#14181)

  • fix: restore active reaction if then block throws (#14191)

  • chore: adds legacy mode flag reducing bundle size in runes mode only apps (#14180)

5.1.11

Patch Changes

  • fix: error on TypeScript's readonly modifier (#14153)

  • fix: remove scoping for :not selectors (#14177)

... (truncated)

Commits
  • 832499f Version Packages (#14251)
  • 653f4ac fix: migration script messing with attributes (#14260)
  • ae9f53a fix: account for mutations in script module in ownership check (#14253)
  • 7bc94b9 fix: do not treat reassigned synthetic binds as state in runes mode (#14236)
  • d207666 fix: consider img with loading attribute not static (#14237)
  • 4bcd01b Version Packages (#14207)
  • 1060bea fix: consider valueOf in the reactive methods of SvelteDate (#14227)
  • f0c2d4c fix: account for shadowing children slot during migration (#14224)
  • 31e6bbb fix: add lang="ts" attribute during migration if needed (#14222)
  • 438de04 fix: add migration task when there's a variable named that would conflict wit...
  • Additional commits viewable in compare view

Updates vite from 5.4.9 to 5.4.11

Release notes

Sourced from vite's releases.

v5.4.11

Please refer to CHANGELOG.md for details.

v5.4.10

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

5.4.11 (2024-11-11)

5.4.10 (2024-10-23)

  • fix: backport #18367,augment hash for CSS files to prevent chromium erroring by loading previous fil (7d1a3bc), closes #18367 #18412
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ith 9 updates

Bumps the dev-dependencies group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@rspack/cli](https://github.com/web-infra-dev/rspack/tree/HEAD/packages/rspack-cli) | `1.0.13` | `1.1.0` |
| [@rspack/core](https://github.com/web-infra-dev/rspack/tree/HEAD/packages/rspack) | `1.0.13` | `1.1.0` |
| [happy-dom](https://github.com/capricorn86/happy-dom) | `15.7.4` | `15.11.0` |
| [publint](https://github.com/bluwy/publint/tree/HEAD/pkg) | `0.2.11` | `0.2.12` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `2.1.3` | `2.1.4` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.7.7` | `22.9.0` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `18.3.11` | `18.3.12` |
| [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) | `5.0.4` | `5.1.14` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `5.4.9` | `5.4.11` |



Updates `@rspack/cli` from 1.0.13 to 1.1.0
- [Release notes](https://github.com/web-infra-dev/rspack/releases)
- [Commits](https://github.com/web-infra-dev/rspack/commits/v1.1.0/packages/rspack-cli)

Updates `@rspack/core` from 1.0.13 to 1.1.0
- [Release notes](https://github.com/web-infra-dev/rspack/releases)
- [Commits](https://github.com/web-infra-dev/rspack/commits/v1.1.0/packages/rspack)

Updates `happy-dom` from 15.7.4 to 15.11.0
- [Release notes](https://github.com/capricorn86/happy-dom/releases)
- [Commits](capricorn86/happy-dom@v15.7.4...v15.11.0)

Updates `publint` from 0.2.11 to 0.2.12
- [Release notes](https://github.com/bluwy/publint/releases)
- [Commits](https://github.com/bluwy/publint/commits/v0.2.12/pkg)

Updates `vitest` from 2.1.3 to 2.1.4
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v2.1.4/packages/vitest)

Updates `@types/node` from 22.7.7 to 22.9.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@types/react` from 18.3.11 to 18.3.12
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `svelte` from 5.0.4 to 5.1.14
- [Release notes](https://github.com/sveltejs/svelte/releases)
- [Changelog](https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/svelte/commits/svelte@5.1.14/packages/svelte)

Updates `vite` from 5.4.9 to 5.4.11
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v5.4.11/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v5.4.11/packages/vite)

---
updated-dependencies:
- dependency-name: "@rspack/cli"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: "@rspack/core"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: happy-dom
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: publint
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: vitest
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: "@types/node"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: "@types/react"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: svelte
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: vite
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Nov 11, 2024
Copy link

changeset-bot bot commented Nov 11, 2024

⚠️ No Changeset found

Latest commit: 99cd5c6

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 18, 2024

Superseded by #724.

@dependabot dependabot bot closed this Nov 18, 2024
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/dev-dependencies-73eac4fcca branch November 18, 2024 17:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants