-
Notifications
You must be signed in to change notification settings - Fork 155
Update all #1083
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Merged
Merged
Update all #1083
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
fa6c8b1
to
d5ea25f
Compare
97fbc99
to
d4eaaa0
Compare
One of the package updates is increasing size. Will investigate this within the next ~mo, but this does not seem urgent. |
c58a5ed
to
c57ae84
Compare
36bb077
to
6e8da05
Compare
d27a4b6
to
669f1ff
Compare
26fd99b
to
363cdcc
Compare
363cdcc
to
10a4a2b
Compare
- OffscreenCanvas was already a type, refer to our own instead. - When stubbing postMessage (which has multiple signatures), can no longer be lazy without coercion.
eb63a33
to
a5137e1
Compare
Closure compiler upgrade caused this change: before s.addGlobalEventListener("message", ({ data: s }) => {
if (1 === s[12]) {
var i = t((s = s[39])[7]);
null !== i &&
i.dispatchEvent(
Object.assign(
new W(s[12], { bubbles: s[25], cancelable: s[26] }),
{
cancelBubble: s[27],
defaultPrevented: s[29],
eventPhase: s[30],
isTrusted: s[31],
returnValue: s[32],
target: X(e.document, s),
timeStamp: s[33],
scoped: s[34],
keyCode: s[35],
pageX: s[60],
pageY: s[61],
offsetX: s[65],
offsetY: s[66],
touches: Q(e.document, s, 62),
changedTouches: Q(e.document, s, 63),
}
)
); after s.addGlobalEventListener("message", ({ data: s }) => {
if (1 === s[12]) {
var i = t((s = s[39])[7]);
if (null !== i) {
var r = i.dispatchEvent,
n = Object,
a = n.assign,
l = new W(s[12], { bubbles: s[25], cancelable: s[26] }),
o = s[27],
h = s[29],
d = s[30],
u = s[31],
c = s[32];
if (null !== s[13]) {
var g = s[13][0];
g = t(0 !== g ? g : e.document[7]);
} else g = null;
r.call(
i,
a.call(n, l, {
cancelBubble: o,
defaultPrevented: h,
eventPhase: d,
isTrusted: u,
returnValue: c,
target: g,
timeStamp: s[33],
scoped: s[34],
keyCode: s[35],
pageX: s[60],
pageY: s[61],
offsetX: s[65],
offsetY: s[66],
touches: X(e.document, s, 62),
changedTouches: X(e.document, s, 63),
})
); |
samouri
approved these changes
Sep 14, 2021
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
0.26.0
->0.27.0
14.17.7
->14.17.15
8.4.1
->8.5.0
8.1.1
->8.2.0
7.0.1
->7.0.2
11.1.1
->11.1.2
2.1.0
->2.2.2
14.17.4
->14.17.6
2.3.2
->2.4.0
2.55.1
->2.56.3
1.0.12
->1.0.17
4.3.5
->4.4.2
5.48.0
->5.52.1
4.7.2
->4.8.0
Release Notes
ampproject/rollup-plugin-closure-compiler
v0.27.0
Compare Source
This release adds support for M1 Macintoshes.
e99fae9
85e3750
bfb50ab
318c883
2d8c04f
0fb576b
3d96e36
acornjs/acorn
v8.5.0
Compare Source
typicode/husky
v7.0.2
Compare Source
Fix pre-commit hook in WebStorm (#1023)
okonet/lint-staged
v11.1.2
Compare Source
Bug Fixes
webpack-contrib/mini-css-extract-plugin
v2.2.2
Compare Source
v2.2.1
Compare Source
v2.2.0
Compare Source
Features
link
anddescription
for options (#786) (3c5a5b7)Bug Fixes
nodejs/node
v14.17.6
Compare Source
This is a security release.
Notable Changes
These are vulnerabilities in the node-tar, arborist, and npm cli modules which
are related to the initial reports and subsequent remediation of node-tar
vulnerabilities CVE-2021-32803
and CVE-2021-32804.
Subsequent internal security review of node-tar and additional external bounty
reports have resulted in another 5 CVE being remediated in core npm CLI
dependencies including node-tar, and npm arborist.
You can read more about it in:
Commits
5b3f70bfb5
] - deps: update archs files for OpenSSL-1.1.1l (Richard Lau) #3986871372625ae
] - deps: upgrade openssl sources to 1.1.1l (Richard Lau) #398684276984803
] - deps: upgrade npm to 6.14.15 (Darcy Clarke) #39856v14.17.5
Compare Source
This is a security release.
Notable Changes
Commits
4923b59e0b
] - deps: update c-ares to 1.17.2 (Beth Griggs) #39724847a4c6a8a
] - deps: reflect c-ares source tree (Beth Griggs) #3965333208e2f89
] - deps: apply missed updates from c-ares 1.17.1 (Beth Griggs) #39653af5c1af9a4
] - http2: add tests for cancel event while client is paused reading (Akshay K) #39622434872e838
] - http2: update handling of rst_stream with error code NGHTTP2_CANCEL (Akshay K) #3962235b86110e4
] - tls: validate "rejectUnauthorized: undefined" (Matteo Collina) nodejs-private/node-private#276prettier/prettier
v2.4.0
Compare Source
diff
🔗 Release Notes
rollup/rollup
v2.56.3
Compare Source
2021-08-23
Bug Fixes
Pull Requests
ModuleInfo.importedIds
will return null ifresolvedIds[source]
is undefined (@FoxDaxian and @lukastaegert)v2.56.2
Compare Source
2021-08-10
Bug Fixes
Pull Requests
v2.56.1
Compare Source
2021-08-08
Bug Fixes
Pull Requests
v2.56.0
Compare Source
2021-08-05
Features
maxParallelFileReads
option to also throttle plugin load hooks (#4200)Bug Fixes
Pull Requests
lukeed/sirv
v1.0.17
Compare Source
v1.0.16
Compare Source
v1.0.15
Compare Source
v1.0.14
Compare Source
Chores
sirv
): Bump@polka/url
to take advantage of this fixv1.0.13
Compare Source
Patches
(
sirv
) Only usereq.path
if hasreq._decoded
flag exists (#82):The
req._decoded
check was added & should have always been in there, since this wassirv
's way of preventing duplicatedecodeURIComponent
calls. However, this was only true when it received a request from apolka@next
app, since Polka was previously writing the decoded value toreq.path
– this changed withpolka@v1.0.0-next.16
Now that the latest
polka@next
(and Express) doesn't decode automatically anymore,req.path
isn't trustworthy on its own. It needsreq._decoded
to be there too in order to trust it.This combo-check is backwards compatible for
polka@next
users who don't upgrade and will unblock Express users for the first time, who have always had a "raw"req.path
value set.Microsoft/TypeScript
v4.4.2
Compare Source
For release notes, check out the release announcement.
For the complete list of fixed issues, check out the
Downloads are available on:
webpack/webpack
v5.52.1
Compare Source
Performance
v5.52.0
Compare Source
Feature
experiments.executeModule
is enabled by default and the option is removedthis.importModule
Bugfixes
__WEBPACK_EXTERNAL_MODULE_null__
, which leads to merged externals.webpack[...]
extension is not part of matching and module namev5.51.2
Compare Source
Bugfixes
[contenthash]
is undefined when usingnew Worker
v5.51.1
Compare Source
Bugfixes
library: "module"
propages top-level-await correctlyv5.51.0
Compare Source
Bugfixes
yarn link
ing of dependencies.Compilation.addModuleChain
andCompilation.addModuleTree
v5.50.0
Compare Source
Features
#! ...
) are now handled by webpackPerformance
v5.49.0
Compare Source
Features
experiments.buildHttp
to buildhttp(s)://
imports instead of keeping them externalwebpack.lock
file with integrity andwebpack.lock.data
with cached content that should be committed(might be disabled with
experiments.buildHttp.upgrade: false
)(exception:
Cache-Control: no-cache
).webpack.lock.data
persisting can be disabled withexperiments.buildHttp.cacheLocation: false
.That will will introduce a availability risk.
(webpack cache will be used to cache network responses)
Bugfixes
splitChunks.maxSize
introduces in the last releasebail
is setPerformance
webpack/webpack-cli
v4.8.0
Compare Source
Bug Fixes
Features
4.7.2 (2021-06-07)
Note: Version bump only for package webpack-cli (due
@webpack-cli/serve
)4.7.1 (2021-06-07)
Bug Fixes
Configuration
📅 Schedule: "before 3am on Monday" (UTC).
🚦 Automerge: Enabled.
♻ Rebasing: Renovate will not automatically rebase this PR, because other commits have been found.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by WhiteSource Renovate. View repository job log here.