Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

fix(deps): update all non-major dependencies #245

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

fix(deps): update all non-major dependencies #245

wants to merge 1 commit into from
+1,562 −1,085

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Oct 26, 2024 •
edited
Loading

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
@astrojs/partytown (source) 2.1.2 -> 2.1.4 age adoption passing confidence
@astrojs/react (source) 3.6.2 -> 3.6.3 age adoption passing confidence
@astrojs/rss (source) 4.0.9 -> 4.0.11 age adoption passing confidence
@babel/core (source) 7.25.9 -> 7.26.9 age adoption passing confidence
@babel/preset-env (source) 7.25.9 -> 7.26.9 age adoption passing confidence
@babel/preset-typescript (source) 7.25.9 -> 7.26.0 age adoption passing confidence
@changesets/changelog-github (source) 0.5.0 -> 0.5.1 age adoption passing confidence
@changesets/cli (source) 2.27.9 -> 2.28.1 age adoption passing confidence
@std-uritemplate/std-uritemplate 2.0.0 -> 2.0.3 age adoption passing confidence
@types/node (source) 20.16.15 -> 20.17.23 age adoption passing confidence
@types/react (source) 18.3.12 -> 18.3.18 age adoption passing confidence
@types/react-dom (source) 18.3.1 -> 18.3.5 age adoption passing confidence
astro (source) 4.16.7 -> 4.16.18 age adoption passing confidence
debug 4.3.7 -> 4.4.0 age adoption passing confidence
esbuild 0.24.0 -> 0.25.0 age adoption passing confidence
eslint-plugin-prettier 5.2.1 -> 5.2.3 age adoption passing confidence
husky 9.1.6 -> 9.1.7 age adoption passing confidence
lint-staged 15.2.10 -> 15.4.3 age adoption passing confidence
mdx-bundler 10.0.3 -> 10.1.0 age adoption passing confidence
pnpm (source) 9.12.2 -> 9.15.6 age adoption passing confidence
prettier (source) 3.3.3 -> 3.5.3 age adoption passing confidence
schema-dts (source) 1.1.2 -> 1.1.5 age adoption passing confidence
ts-jest (source) 29.2.5 -> 29.2.6 age adoption passing confidence
turbo (source) 2.2.3 -> 2.4.4 age adoption passing confidence
typescript (source) 5.6.3 -> 5.8.2 age adoption passing confidence
vite (source) 5.4.10 -> 5.4.14 age adoption passing confidence
zod (source) 3.23.8 -> 3.24.2 age adoption passing confidence

Release Notes

withastro/astro (@​astrojs/partytown)

v2.1.4

Compare Source

Patch Changes

  • #​13109 5c0e0ea Thanks @​arnottferels! - Adds support for config.lib, which allows changing the destination of the files:

    export default defineConfig({
	integrations: [partytown({
		config: {
+			lib: '/assets/lib/~partytown/';
		}
	})]
})

v2.1.3

Compare Source

Patch Changes
withastro/astro (@​astrojs/react)

v3.6.3

Compare Source

Patch Changes
withastro/astro (@​astrojs/rss)

v4.0.11

Compare Source

Patch Changes

v4.0.10

Compare Source

Patch Changes
babel/babel (@​babel/core)

v7.26.9

Compare Source

🐛 Bug Fix
🏠 Internal

v7.26.8

Compare Source

v7.26.8 (2025-02-08)

🏠 Internal
  • babel-preset-env
    • #​17097 Update dependency babel-plugin-polyfill-corejs3 to ^0.11.0

v7.26.7

Compare Source

🐛 Bug Fix

v7.26.0

Compare Source

🚀 New Feature
  • babel-core, babel-generator, babel-parser, babel-plugin-syntax-import-assertions, babel-plugin-syntax-import-attributes, babel-preset-env, babel-standalone, babel-types
  • babel-core
  • babel-compat-data, babel-plugin-proposal-regexp-modifiers, babel-plugin-transform-regexp-modifiers, babel-preset-env, babel-standalone
  • babel-parser
  • babel-generator, babel-parser, babel-plugin-syntax-flow
  • babel-helpers, babel-preset-typescript, babel-runtime-corejs3
  • babel-generator, babel-parser
🐛 Bug Fix
💅 Polish
  • babel-plugin-proposal-json-modules, babel-plugin-transform-json-modules, babel-standalone
🏠 Internal
🏃‍♀️ Performance
  • babel-helper-module-transforms, babel-plugin-transform-modules-commonjs
changesets/changesets (@​changesets/changelog-github)

v0.5.1

Compare Source

Patch Changes
std-uritemplate/std-uritemplate (@​std-uritemplate/std-uritemplate)

v2.0.3

Compare Source

v2.0.2

Compare Source

v2.0.1

Compare Source

withastro/astro (astro)

v4.16.18

Compare Source

Patch Changes

v4.16.17

Compare Source

Patch Changes

v4.16.16

Compare Source

Patch Changes

v4.16.15

Compare Source

Patch Changes

v4.16.14

Compare Source

Patch Changes

v4.16.13

Compare Source

Patch Changes

  • #​12436 453ec6b Thanks @​martrapp! - Fixes a potential null access in the clientside router

  • #​12392 0462219 Thanks @​apatel369! - Fixes an issue where scripts were not correctly injected during the build. The issue was triggered when there were injected routes with the same entrypoint and different pattern

v4.16.12

Compare Source

Patch Changes
  • #​12420 acac0af Thanks @​ematipico! - Fixes an issue where the dev server returns a 404 status code when a user middleware returns a valid Response.

v4.16.11

Compare Source

Patch Changes

v4.16.10

Compare Source

Patch Changes

v4.16.9

Compare Source

Patch Changes

v4.16.8

Compare Source

Patch Changes
debug-js/debug (debug)

v4.4.0

Compare Source

Fixes (hopefully) the inefficient regex warnings in .enable().

Minor version as this is invariably going to break certain users who misuse the .enable() API and expected it to work with regexes, which was never supported nor documented. That's on you, sorry - that functionality won't be added back.

Full Changelog: debug-js/debug@4.3.7...4.4.0

evanw/esbuild (esbuild)

v0.25.0

Compare Source

This release deliberately contains backwards-incompatible changes. To avoid automatically picking up releases like this, you should either be pinning the exact version of esbuild in your package.json file (recommended) or be using a version range syntax that only accepts patch upgrades such as ^0.24.0 or ~0.24.0. See npm's documentation about semver for more information.

  • Restrict access to esbuild's development server (GHSA-67mh-4wv8-2f99)

    This change addresses esbuild's first security vulnerability report. Previously esbuild set the Access-Control-Allow-Origin header to * to allow esbuild's development server to be flexible in how it's used for development. However, this allows the websites you visit to make HTTP requests to esbuild's local development server, which gives read-only access to your source code if the website were to fetch your source code's specific URL. You can read more information in the report.

    Starting with this release, CORS will now be disabled, and requests will now be denied if the host does not match the one provided to --serve=. The default host is 0.0.0.0, which refers to all of the IP addresses that represent the local machine (e.g. both 127.0.0.1 and 192.168.0.1). If you want to customize anything about esbuild's development server, you can put a proxy in front of esbuild and modify the incoming and/or outgoing requests.

    In addition, the serve() API call has been changed to return an array of hosts instead of a single host string. This makes it possible to determine all of the hosts that esbuild's development server will accept.

    Thanks to @​sapphi-red for reporting this issue.

  • Delete output files when a build fails in watch mode (#​3643)

    It has been requested for esbuild to delete files when a build fails in watch mode. Previously esbuild left the old files in place, which could cause people to not immediately realize that the most recent build failed. With this release, esbuild will now delete all output files if a rebuild fails. Fixing the build error and triggering another rebuild will restore all output files again.

  • Fix correctness issues with the CSS nesting transform (#​3620, #​3877, #​3933, #​3997, #​4005, #​4037, #​4038)

    This release fixes the following problems:

    • Naive expansion of CSS nesting can result in an exponential blow-up of generated CSS if each nesting level has multiple selectors. Previously esbuild sometimes collapsed individual nesting levels using :is() to limit expansion. However, this collapsing wasn't correct in some cases, so it has been removed to fix correctness issues.

      /* Original code */
.parent {
  > .a,
  > .b1 > .b2 {
    color: red;
  }
}

/* Old output (with --supported:nesting=false) */
.parent > :is(.a, .b1 > .b2) {
  color: red;
}

/* New output (with --supported:nesting=false) */
.parent > .a,
.parent > .b1 > .b2 {
  color: red;
}

      Thanks to @​tim-we for working on a fix.

    • The & CSS nesting selector can be repeated multiple times to increase CSS specificity. Previously esbuild ignored this possibility and incorrectly considered && to have the same specificity as &. With this release, this should now work correctly:

      /* Original code (color should be red) */
div {
  && { color: red }
  & { color: blue }
}

/* Old output (with --supported:nesting=false) */
div {
  color: red;
}
div {
  color: blue;
}

/* New output (with --supported:nesting=false) */
div:is(div) {
  color: red;
}
div {
  color: blue;
}

      Thanks to @​CPunisher for working on a fix.

    • Previously transforming nested CSS incorrectly removed leading combinators from within pseudoclass selectors such as :where(). This edge case has been fixed and how has test coverage.

      /* Original code */
a b:has(> span) {
  a & {
    color: green;
  }
}

/* Old output (with --supported:nesting=false) */
a :is(a b:has(span)) {
  color: green;
}

/* New output (with --supported:nesting=false) */
a :is(a b:has(> span)) {
  color: green;
}

      This fix was contributed by @​NoremacNergfol.

    • The CSS minifier contains logic to remove the & selector when it can be implied, which happens when there is only one and it's the leading token. However, this logic was incorrectly also applied to selector lists inside of pseudo-class selectors such as :where(). With this release, the minifier will now avoid applying this logic in this edge case:

      /* Original code */
.a {
  & .b { color: red }
  :where(& .b) { color: blue }
}

/* Old output (with --minify) */
.a{.b{color:red}:where(.b){color:#​00f}}

/* New output (with --minify) */
.a{.b{color:red}:where(& .b){color:#​00f}}

  • Fix some correctness issues with source maps (#​1745, #​3183, #​3613, #​3982)

    Previously esbuild incorrectly treated source map path references as file paths instead of as URLs. With this release, esbuild will now treat source map path references as URLs. This fixes the following problems with source maps:

    • File names in sourceMappingURL that contained a space previously did not encode the space as %20, which resulted in JavaScript tools (including esbuild) failing to read that path back in when consuming the generated output file. This should now be fixed.

    • Absolute URLs in sourceMappingURL that use the file:// scheme previously attempted to read from a folder called file:. These URLs should now be recognized and parsed correctly.

    • Entries in the sources array in the source map are now treated as URLs instead of file paths. The correct behavior for this is much more clear now that source maps has a formal specification. Many thanks to those who worked on the specification.

  • Fix incorrect package for @esbuild/netbsd-arm64 (#​4018)

    Due to a copy+paste typo, the binary published to @esbuild/netbsd-arm64 was not actually for arm64, and didn't run in that environment. This release should fix running esbuild in that environment (NetBSD on 64-bit ARM). Sorry about the mistake.

  • Fix a minification bug with bitwise operators and bigints (#​4065)

    This change removes an incorrect assumption in esbuild that all bitwise operators result in a numeric integer. That assumption was correct up until the introduction of bigints in ES2020, but is no longer correct because almost all bitwise operators now operate on both numbers and bigints. Here's an example of the incorrect minification:

    // Original code
if ((a & b) !== 0) found = true

// Old output (with --minify)
a&b&&(found=!0);

// New output (with --minify)
(a&b)!==0&&(found=!0);

  • Fix esbuild incorrectly rejecting valid TypeScript edge case (#​4027)

    The following TypeScript code is valid:

    export function open(async?: boolean): void {
  console.log(async as boolean)
}

    Before this version, esbuild would fail to parse this with a syntax error as it expected the token sequence async as ... to be the start of an async arrow function expression async as => .... This edge case should be parsed correctly by esbuild starting with this release.

  • Transform BigInt values into constructor calls when unsupported (#​4049)

    Previously esbuild would refuse to compile the BigInt literals (such as 123n) if they are unsupported in the configured target environment (such as with --target=es6). The rationale was that they cannot be polyfilled effectively because they change the behavior of JavaScript's arithmetic operators and JavaScript doesn't have operator overloading.

    However, this prevents using esbuild with certain libraries that would otherwise work if BigInt literals were ignored, such as with old versions of the buffer library before the library fixed support for running in environments without BigInt support. So with this release, esbuild will now turn BigInt literals into BigInt constructor calls (so 123n becomes BigInt(123)) and generate a warning in this case. You can turn off the warning with --log-override:bigint=silent or restore the warning to an error with --log-override:bigint=error if needed.

  • Change how console API dropping works ([#​402

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@changeset-bot changeset-bot
Copy link

changeset-bot bot commented Oct 26, 2024 •
edited
Loading

⚠️ No Changeset found

Latest commit: bd8fb0d

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@renovate renovate bot force-pushed the renovate/all-minor-patch branch 6 times, most recently from d6c630f to 8ce21a9 Compare November 3, 2024 09:22
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 0541a72 to ec868c5 Compare November 11, 2024 10:39
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 8 times, most recently from 9a54999 to 783f6de Compare November 18, 2024 18:25
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 10 times, most recently from 581dc99 to c3e6c3e Compare November 27, 2024 00:19
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 91eb9a9 to 6859f9b Compare November 28, 2024 07:45
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from ff00ade to 9e0ea6b Compare February 7, 2025 12:25
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 9 times, most recently from a268f1d to 0ad1466 Compare February 14, 2025 14:38
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from b340914 to 1d1d9d6 Compare February 24, 2025 12:34
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 9 times, most recently from efe7287 to 1da3962 Compare March 3, 2025 20:03
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 1da3962 to bd8fb0d Compare March 4, 2025 16:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants