Update all #1069

renovate · 2021-06-21T01:06:25Z

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@types/node	`14.17.3` -> `14.17.5`
acorn	`8.4.0` -> `8.4.1`
acorn-walk	`8.1.0` -> `8.1.1`
css-loader	`5.2.6` -> `5.2.7`
lint-staged	`11.0.0` -> `11.0.1`
node	`14.17.1` -> `14.17.3`
preact (source)	`10.5.13` -> `10.5.14`
prettier (source)	`2.3.1` -> `2.3.2`
rollup (source)	`2.52.1` -> `2.53.2`
style-loader	`3.0.0` -> `3.2.1`
typescript (source)	`4.2.4` -> `4.3.5`
webpack	`5.39.1` -> `5.45.1`

Release Notes

acornjs/acorn

`v8.4.1`

Compare Source

webpack-contrib/css-loader

`v5.2.7`

Compare Source

okonet/lint-staged

`v11.0.1`

Compare Source

Bug Fixes

do not swallow already detected deprecated usage by last task (#991) (7734156)

nodejs/node

`v14.17.3`

Compare Source

Notable Changes

Node.js 14.17.2 introduced a regression in the Windows installer on
non-English locales that is being fixed in this release. There is no
need to download this release if you are not using the Windows
installer.

Commits

[0f00104a2c] - win,msi: use localized "Authenticated Users" name (Richard Lau) #39241

`v14.17.2`

Compare Source

This is a security release.

Notable Changes

Vulnerabilities fixed:

CVE-2021-22918: libuv upgrade - Out of bounds read (Medium)
- Node.js is vulnerable to out-of-bounds read in libuv's uv__idna_toascii() function which is used to convert strings to ASCII. This is called by Node's dns module's lookup() function and can lead to information disclosures or crashes. You can read more about it in https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22918
CVE-2021-22921: Windows installer - Node Installer Local Privilege Escalation (Medium)
- Node.js is vulnerable to local privilege escalation attacks under certain conditions on Windows platforms. More specifically, improper configuration of permissions in the installation directory allows an attacker to perform two different escalation attacks: PATH and DLL hijacking. You can read more about it in https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22921

Commits

[a7496aba0a] - deps: uv: cherry-pick 99c29c9 (Ben Noordhuis) nodejs-private/node-private#267
[d0b449da1d] - win,msi: set install directory permission (AkshayK) nodejs-private/node-private#269

preactjs/preact

`v10.5.14`

Compare Source

Features

Compat: Add flushSync (#3094, thanks @zephraph)

Bug Fixes

Prevent eager child removal (#3210, thanks @JoviDeCroock)
Compat: Update Fake React Version (#3189, thanks @tim-on-github)
Fix react-spring error caused by augmented function contexts (#3165, thanks @developit)
Use Array.prototype.slice.call for children arguments (#3143, thanks @fzzle)
Improve performance of vnodeId generation (#2978, thanks @developit)
Fix: should override children if null is provided as an argument (#3091, thanks @clyfish)

Size

refactor(diff-index): reuse i to reduce size (-32b) (#3193, thanks @liuarui)
Simplify unmount logic (#3120, thanks @andrewiggins)

Typings

Fix type definitions (#3191, thanks @craftedsystems)
Fix undefined initializer case for useState type (#3185, thanks @rschristian)
Make typings deno compatible (#3079, thanks @lucacasonato)
Change typing of event.this to be never (#3147, thanks @JoviDeCroock)
Update signature of lazy to reflect behavior (#3139, thanks @JonasKruckenberg)
Improve typing of forwardRef (#3144, thanks @cmlenz)
Fix the useRef typing to include undefined when called without initial value (#3056, thanks @cmlenz)

Maintenance

Docs: Removing suggestion to install Preact CLI (#3204, thanks @rschristian)
Upgrade karma-esbuild to support M1 chips (#3153, thanks @marvinhagemeister)
Rely directly on performance.now (#3130, thanks @developit)
Add The Guardian as a Github backer (#3086, thanks @mchv)
Fix typo in issue template (#3067, thanks @rschristian)

prettier/prettier

`v2.3.2`

Compare Source

diff

Fix failure on dir with trailing slash (#11000 by @fisker)

$ ls
1.js  1.unknown

rollup/rollup

`v2.53.2`

Compare Source

2021-07-15

Bug Fixes

Identify additional TDZ situations in functions that are run more than once (#4177)
Fix a scoping issue when a variable inside a catch scope matches the scope parameter's name (#4178)

Pull Requests

#4177: Fix additional let/var init bugs (@kzc)
#4178: Correctly create outside variable when shadowed by catch parameter (@lukastaegert)

`v2.53.1`

Compare Source

2021-07-11

Bug Fixes

Do not omit namespace reexports when treeshake is false (#4175)

Pull Requests

#4175: Generate namespace objects when not tree-shaking (@lukastaegert)

`v2.53.0`

Compare Source

2021-07-09

Features

Add maxParallelFileReads option to limit read operations with a default of 20 (#4170)

Pull Requests

#4170: Limit parallel file reads to prevent "EMFILE: too many open files" error (@schummar)

`v2.52.8`

Compare Source

2021-07-07

Bug Fixes

Automatically handle many use var before declaration and TDZ access scenarios correctly without the need for treeshake.correctVarValueBeforeDeclaration (#4148)

Pull Requests

#4148: Fix var/const/let variable use before declaration (@kzc and @lukastaegert)

`v2.52.7`

Compare Source

2021-07-02

Bug Fixes

Fix an issue where reassignments where not tracked through async function returns (#4163)

Pull Requests

#4163: Deoptimize return values of async functions (@lukastaegert)

`v2.52.6`

Compare Source

2021-07-01

Bug Fixes

Fix an issue where reassignments where not tracked through an await expression (#4162)

Pull Requests

#4162: doptimize awaited expressions (@lukastaegert)

`v2.52.5`

Compare Source

2021-07-01

Bug Fixes

Properly display parser errors not tied to a code location (#4160)

Pull Requests

#4160: fix: max stack call error is caught on locate (@semoal)

`v2.52.4`

Compare Source

2021-06-30

Bug Fixes

Fix an error when external namespaces are reexported across several files (#4159)

Pull Requests

#4159: Properly handle double reexports from external namespaces (@lukastaegert)

`v2.52.3`

Compare Source

2021-06-25

Bug Fixes

Fix an issue where code was wrongly removed when using vars in nested scopes (#4149)

Pull Requests

#4149: Make sure the initializer of hoisted variables is deoptimized (@lukastaegert)

`v2.52.2`

Compare Source

2021-06-21

Bug Fixes

Support falsy plugins in types (#4144)
Do not require return value in renderChunkHook type (#4144)

Pull Requests

#4144: Use TypeScript config and improve some types (@lukastaegert)

webpack-contrib/style-loader

`v3.2.1`

Compare Source

`v3.2.0`

Compare Source

Features

add link field in schema (#525) (7ed3456)

Bug Fixes

added the insert option when it is a module to addBuildDependency (#527) (3963c0b)

`v3.1.0`

Compare Source

Features

allow to specify the insert option from file, we strongly recommend do it, using the insert option from file will reduce your bundle size, example (#521) (56fc8f0)
allow to specify the styleTagTransform option from file, we strongly recommend do it, using the styleTagTransform option from file will reduce your bundle size, example

Bug Fixes

reduce runtime (#519) (8a26186)
reduce runtime when you use custom options (#520) (21c80c8)

Microsoft/TypeScript

`v4.3.5`

Compare Source

This release contains a bug fix for auto-imports on JSX components in the TypeScript language service. See the relevant change for more details.

`v4.3.4`

Compare Source

This release

adds an optional getCustomTransformers method to the SolutionBuilderHost* APIs
uses the transforms given by getCustomTransformers in Builder Program instances when running emit() methods in cases where customTransforms are not given.

See the change for more details

`v4.3.3`

Compare Source

For release notes, check out the release announcement.

For the complete list of fixed issues, check out the

Downloads are available on:

`v4.3.2`

Compare Source

For release notes, check out the release announcement.

For the complete list of fixed issues, check out the

Downloads are available on:

webpack/webpack

`v5.45.1`

Compare Source

Bugfixes

temporary revert import assertions because parser changes break the word assert in other places
import(/* webpackPrefetch: true */ ...) no longer breaks library output
DataURL tries to avoid re-encoding
fix problems with DataURL encoding in some cases

`v5.45.0`

Compare Source

Features

add support to import assertions

Bugfixes

SourceMaps will now also be added to .cjs output files
fix non-system externals in a system library

Performance

avoid copying timestamps from the watcher to the compiler

Contributing

update to jest 27

`v5.44.0`

Compare Source

Features

add support for output.module + optimization.runtimeChunk

Bugfixes

fix inline externals with dash in type

`v5.43.0`

Compare Source

Features

support runtime: false in entry description to disable runtime chunk
support runtime option in ModuleFederationPlugin and ContainerPlugin

Bugfixes

fix "module" externals when concatenated

Performance

serialize JSON data as buffer and parse on demand for performance and to avoid performance warning

`v5.42.1`

Compare Source

Bugfixes

fix crashes when rebuilding with jsonData or dataUrl of undefined

`v5.42.0`

Compare Source

Features

add cache compression via cache.compression
enable cache compression by default for non-development modes

Bugfixes

add node-commonjs to schema for externalsType
update acorn to fix problems with top level await
fix regression for system externals

Performance

fix a memory leak in the unsafe cache

`v5.41.1`

Compare Source

Bugfixes

add missing types about experimental esm support to schema
avoid slicing large Buffers as that doesn't always work for unknown reasons

Performance

avoid slicing Buffers unnecessarily

`v5.41.0`

Compare Source

Features

Persist cache faster when large changes are detected
- new option cache.idleTimeoutAfterLargeChanges to control that

Bugfixes

shutdown lazy compilation server correctly

Experiments

EcmaScript modules support (experiments.outputModule: true)
- output.library.type: "module": very basic support, no live bindings, unnecessary runtime code
- output.chunkLoading: "import"
- output.chunkFormat: "module"
- externalsType: "module" generates now import * as X from "..." (in a module) or import("...") (in a script)
- Node.js commonjs externals use import { createRequire } from "module" in a module
- new Worker etc. sets `type: "module"

`v5.40.0`

Compare Source

Features

accept node: prefixed requests as node.js externals
avoid instanceof Promise in favor of p && typeof p.then === "function" to allow mixing different Promise implementions

Bugfixes

fix usage analysis of class properties

Performance

improve LazySet memory usage by shortcircuiting empty sets
reduce algorithmic complexity of the structure analysis for plain objects serialization

Developer Experience

allow Buffer in this.emitFile typings (loader context)
improve reset cli argument description

Configuration

📅 Schedule: "before 3am on Monday" (UTC).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box.

This PR has been generated by WhiteSource Renovate. View repository job log here.

renovate bot force-pushed the renovate/all branch from 5b6dc4e to 73c725d Compare June 21, 2021 06:28

renovate bot changed the title ~~Update dependency typescript to v4.3.4~~ Update all Jun 21, 2021

renovate bot force-pushed the renovate/all branch 8 times, most recently from 6df0b6d to 9e21361 Compare June 28, 2021 16:53

renovate bot force-pushed the renovate/all branch 14 times, most recently from 5f0b63c to 867f7f5 Compare July 5, 2021 16:24

renovate bot force-pushed the renovate/all branch 6 times, most recently from 145a99a to 474bc8e Compare July 11, 2021 06:47

renovate bot force-pushed the renovate/all branch 9 times, most recently from 920f181 to 693150a Compare July 16, 2021 21:21

Update all

cf10f0d

renovate bot force-pushed the renovate/all branch from 693150a to cf10f0d Compare July 20, 2021 16:18

samouri approved these changes Jul 20, 2021

View reviewed changes

samouri merged commit 4f94f2c into main Jul 20, 2021

renovate bot deleted the renovate/all branch July 20, 2021 16:49

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Update all #1069

Update all #1069

Uh oh!

renovate bot commented Jun 21, 2021 •

edited

Loading

Uh oh!

Uh oh!

Update all #1069

Update all #1069

Uh oh!

Conversation

renovate bot commented Jun 21, 2021 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Bug Fixes

Notable Changes

Commits

Notable Changes

Commits

Features

Bug Fixes

Size

Typings

Maintenance

Fix failure on dir with trailing slash (#​11000 by @​fisker)

Bug Fixes

Pull Requests

Bug Fixes

Pull Requests

Features

Pull Requests

Bug Fixes

Pull Requests

Bug Fixes

Pull Requests

Bug Fixes

Pull Requests

Bug Fixes

Pull Requests

Bug Fixes

Pull Requests

Bug Fixes

Pull Requests

Bug Fixes

Pull Requests

Features

Bug Fixes

Features

Bug Fixes

Bugfixes

Features

Bugfixes

Performance

Contributing

Features

Bugfixes

Features

Bugfixes

Performance

Bugfixes

Features

Bugfixes

Performance

Bugfixes

Performance

Features

Bugfixes

Experiments

Features

Bugfixes

Performance

Developer Experience

Configuration

Uh oh!

Uh oh!

renovate bot commented Jun 21, 2021 •

edited

Loading

Fix failure on dir with trailing slash (#11000 by @fisker)