Skip to content

build: update all non-major dependencies#24701

Merged
angular-robot[bot] merged 1 commit intoangular:mainfrom
angular-robot:ng-renovate/all-minor-patch
Feb 13, 2023
Merged

build: update all non-major dependencies#24701
angular-robot[bot] merged 1 commit intoangular:mainfrom
angular-robot:ng-renovate/all-minor-patch

Conversation

@angular-robot
Copy link
Copy Markdown
Contributor

@angular-robot angular-robot commented Feb 11, 2023

This PR contains the following updates:

Package Type Update Change
esbuild optionalDependencies patch 0.17.7 -> 0.17.8
esbuild devDependencies patch 0.17.7 -> 0.17.8
esbuild-wasm dependencies patch 0.17.7 -> 0.17.8
esbuild-wasm devDependencies patch 0.17.7 -> 0.17.8
eslint (source) devDependencies minor 8.33.0 -> 8.34.0
magic-string dependencies minor 0.27.0 -> 0.29.0
magic-string devDependencies minor 0.27.0 -> 0.29.0
minimatch devDependencies minor ~6.1.0 -> ~6.2.0
quicktype-core devDependencies patch 21.0.10 -> 21.0.13

Release Notes

evanw/esbuild

v0.17.8

Compare Source

  • Fix a minification bug with non-ASCII identifiers (#​2910)

    This release fixes a bug with esbuild where non-ASCII identifiers followed by a keyword were incorrectly not separated by a space. This bug affected both the in and instanceof keywords. Here's an example of the fix:

    // Original code
    π in a
    
    // Old output (with --minify --charset=utf8)
    πin a;
    
    // New output (with --minify --charset=utf8)
    π in a;
  • Fix a regression with esbuild's WebAssembly API in version 0.17.6 (#​2911)

    Version 0.17.6 of esbuild updated the Go toolchain to version 1.20.0. This had the unfortunate side effect of increasing the amount of stack space that esbuild uses (presumably due to some changes to Go's WebAssembly implementation) which could cause esbuild's WebAssembly-based API to crash with a stack overflow in cases where it previously didn't crash. One such case is the package grapheme-splitter which contains code that looks like this:

    if (
      (0x0300 <= code && code <= 0x036F) ||
      (0x0483 <= code && code <= 0x0487) ||
      (0x0488 <= code && code <= 0x0489) ||
      (0x0591 <= code && code <= 0x05BD) ||
      // ... many hundreds of lines later ...
    ) {
      return;
    }

    This edge case involves a chain of binary operators that results in an AST over 400 nodes deep. Normally this wouldn't be a problem because Go has growable call stacks, so the call stack would just grow to be as large as needed. However, WebAssembly byte code deliberately doesn't expose the ability to manipulate the stack pointer, so Go's WebAssembly translation is forced to use the fixed-size WebAssembly call stack. So esbuild's WebAssembly implementation is vulnerable to stack overflow in cases like these.

    It's not unreasonable for this to cause a stack overflow, and for esbuild's answer to this problem to be "don't write code like this." That's how many other AST-manipulation tools handle this problem. However, it's possible to implement AST traversal using iteration instead of recursion to work around limited call stack space. This version of esbuild implements this code transformation for esbuild's JavaScript parser and printer, so esbuild's WebAssembly implementation is now able to process the grapheme-splitter package (at least when compiled with Go 1.20.0 and run with node's WebAssembly implementation).

eslint/eslint

v8.34.0

Compare Source

Features

  • 9b2fcf7 feat: array-callback-return supports Array.prototype.toSorted (#​16845) (SUZUKI Sosuke)

Bug Fixes

  • 923f61d fix: false positive with assignment in no-extra-parens (#​16872) (Francesco Trotta)

Documentation

Chores

rich-harris/magic-string

v0.29.0

Compare Source

Features
  • x_google_ignoreList: initial support for ignore lists (3c711cd)

v0.28.0

Compare Source

Bug Fixes
isaacs/minimatch

v6.2.0

Compare Source

v6.1.10

Compare Source

v6.1.9

Compare Source

v6.1.8

Compare Source

v6.1.7

Compare Source

quicktype/quicktype

v21.0.13

Compare Source

v21.0.12

Compare Source

v21.0.11

Compare Source


Configuration

📅 Schedule: Branch creation - "after 10:00pm every weekday,before 4:00am every weekday,every weekend" in timezone America/Tijuana, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@angular-robot angular-robot added action: merge The PR is ready for merge by the caretaker target: minor This PR is targeted for the next minor release labels Feb 11, 2023
@angular-robot angular-robot bot added the area: build & ci Related the build and CI infrastructure of the project label Feb 11, 2023
@angular-robot angular-robot force-pushed the ng-renovate/all-minor-patch branch from ccdebf6 to 7b7a589 Compare February 11, 2023 16:14
@angular-robot angular-robot changed the title build: update dependency eslint to v8.34.0 build: update all non-major dependencies Feb 11, 2023
@angular-robot angular-robot force-pushed the ng-renovate/all-minor-patch branch 4 times, most recently from d0f5c37 to 0e26984 Compare February 13, 2023 07:16
@angular-robot angular-robot force-pushed the ng-renovate/all-minor-patch branch from 0e26984 to 9bac0e1 Compare February 13, 2023 09:20
@angular-robot angular-robot bot merged commit d439cb9 into angular:main Feb 13, 2023
@angular-robot angular-robot deleted the ng-renovate/all-minor-patch branch February 13, 2023 15:21
@angular-automatic-lock-bot
Copy link
Copy Markdown

This issue has been automatically locked due to inactivity.
Please file a new issue if you are encountering a similar or related problem.

Read more about our automatic conversation locking policy.

This action has been performed automatically by a bot.

@angular-automatic-lock-bot angular-automatic-lock-bot bot locked and limited conversation to collaborators Mar 16, 2023
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

action: merge The PR is ready for merge by the caretaker area: build & ci Related the build and CI infrastructure of the project target: minor This PR is targeted for the next minor release

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants