Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 1, 2023

Bumps esbuild from 0.18.11 to 0.18.17.

Release notes

Sourced from esbuild's releases.

v0.18.17

  • Support An+B syntax and :nth-*() pseudo-classes in CSS

    This adds support for the :nth-child(), :nth-last-child(), :nth-of-type(), and :nth-last-of-type() pseudo-classes to esbuild, which has the following consequences:

    • The An+B syntax is now parsed, so parse errors are now reported
    • An+B values inside these pseudo-classes are now pretty-printed (e.g. a leading + will be stripped because it's not in the AST)
    • When minification is enabled, An+B values are reduced to equivalent but shorter forms (e.g. 2n+0 => 2n, 2n+1 => odd)
    • Local CSS names in an of clause are now detected (e.g. in :nth-child(2n of :local(.foo)) the name foo is now renamed)
    /* Original code */
    .foo:nth-child(+2n+1 of :local(.bar)) {
      color: red;
    }
    /* Old output (with --loader=local-css) */
    .stdin_foo:nth-child(+2n + 1 of :local(.bar)) {
    color: red;
    }
    /* New output (with --loader=local-css) */
    .stdin_foo:nth-child(2n+1 of .stdin_bar) {
    color: red;
    }

  • Adjust CSS nesting parser for IE7 hacks (#3272)

    This fixes a regression with esbuild's treatment of IE7 hacks in CSS. CSS nesting allows selectors to be used where declarations are expected. There's an IE7 hack where prefixing a declaration with a * causes that declaration to only be applied in IE7 due to a bug in IE7's CSS parser. However, it's valid for nested CSS selectors to start with *. So esbuild was incorrectly parsing these declarations and anything following it up until the next { as a selector for a nested CSS rule. This release changes esbuild's parser to terminate the parsing of selectors for nested CSS rules when a ; is encountered to fix this edge case:

    /* Original code */
    .item {
      *width: 100%;
      height: 1px;
    }
    /* Old output */
    .item {
    *width: 100%; height: 1px; {
    }
    }
    /* New output */
    .item {
    *width: 100%;
    height: 1px;
    }

... (truncated)

Changelog

Sourced from esbuild's changelog.

0.18.17

  • Support An+B syntax and :nth-*() pseudo-classes in CSS

    This adds support for the :nth-child(), :nth-last-child(), :nth-of-type(), and :nth-last-of-type() pseudo-classes to esbuild, which has the following consequences:

    • The An+B syntax is now parsed, so parse errors are now reported
    • An+B values inside these pseudo-classes are now pretty-printed (e.g. a leading + will be stripped because it's not in the AST)
    • When minification is enabled, An+B values are reduced to equivalent but shorter forms (e.g. 2n+0 => 2n, 2n+1 => odd)
    • Local CSS names in an of clause are now detected (e.g. in :nth-child(2n of :local(.foo)) the name foo is now renamed)
    /* Original code */
    .foo:nth-child(+2n+1 of :local(.bar)) {
      color: red;
    }
    /* Old output (with --loader=local-css) */
    .stdin_foo:nth-child(+2n + 1 of :local(.bar)) {
    color: red;
    }
    /* New output (with --loader=local-css) */
    .stdin_foo:nth-child(2n+1 of .stdin_bar) {
    color: red;
    }

  • Adjust CSS nesting parser for IE7 hacks (#3272)

    This fixes a regression with esbuild's treatment of IE7 hacks in CSS. CSS nesting allows selectors to be used where declarations are expected. There's an IE7 hack where prefixing a declaration with a * causes that declaration to only be applied in IE7 due to a bug in IE7's CSS parser. However, it's valid for nested CSS selectors to start with *. So esbuild was incorrectly parsing these declarations and anything following it up until the next { as a selector for a nested CSS rule. This release changes esbuild's parser to terminate the parsing of selectors for nested CSS rules when a ; is encountered to fix this edge case:

    /* Original code */
    .item {
      *width: 100%;
      height: 1px;
    }
    /* Old output */
    .item {
    *width: 100%; height: 1px; {
    }
    }
    /* New output */
    .item {
    *width: 100%;
    height: 1px;
    }

... (truncated)

Commits
  • 1771c71 publish 0.18.17 to npm
  • 63de9e5 css: support An+B and :nth-*() syntax
  • 517fd5c fix #3272: account for IE7 hacks in nested CSS
  • 78eefe1 css: add source map entries for generated js names
  • 8abb666 fix typo correction for generated export names
  • abf1dc2 fix typos for import errors as well as warnings
  • af2bc58 fix #3271: bad import-is-undefined warning in ts
  • 2292036 publish 0.18.16 to npm
  • 64f97bd fix #3266: support --analyze with --serve
  • d645903 fix #3265: allow whitespace inside of :is()
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [esbuild](https://github.com/evanw/esbuild) from 0.18.11 to 0.18.17.
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](evanw/esbuild@v0.18.11...v0.18.17)

---
updated-dependencies:
- dependency-name: esbuild
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Aug 1, 2023
@github-actions
Copy link
Contributor

github-actions bot commented Aug 1, 2023

Dependency Review

✅ No vulnerabilities or license issues found.

Scanned Manifest Files

package-lock.json
  • @esbuild/android-arm@0.18.17
  • @esbuild/android-arm64@0.18.17
  • @esbuild/android-x64@0.18.17
  • @esbuild/darwin-arm64@0.18.17
  • @esbuild/darwin-x64@0.18.17
  • @esbuild/freebsd-arm64@0.18.17
  • @esbuild/freebsd-x64@0.18.17
  • @esbuild/linux-arm@0.18.17
  • @esbuild/linux-arm64@0.18.17
  • @esbuild/linux-ia32@0.18.17
  • @esbuild/linux-loong64@0.18.17
  • @esbuild/linux-mips64el@0.18.17
  • @esbuild/linux-ppc64@0.18.17
  • @esbuild/linux-riscv64@0.18.17
  • @esbuild/linux-s390x@0.18.17
  • @esbuild/linux-x64@0.18.17
  • @esbuild/netbsd-x64@0.18.17
  • @esbuild/openbsd-x64@0.18.17
  • @esbuild/sunos-x64@0.18.17
  • @esbuild/win32-arm64@0.18.17
  • @esbuild/win32-ia32@0.18.17
  • @esbuild/win32-x64@0.18.17
  • esbuild@0.18.17
  • @esbuild/android-arm@0.18.11
  • @esbuild/android-arm64@0.18.11
  • @esbuild/android-x64@0.18.11
  • @esbuild/darwin-arm64@0.18.11
  • @esbuild/darwin-x64@0.18.11
  • @esbuild/freebsd-arm64@0.18.11
  • @esbuild/freebsd-x64@0.18.11
  • @esbuild/linux-arm@0.18.11
  • @esbuild/linux-arm64@0.18.11
  • @esbuild/linux-ia32@0.18.11
  • @esbuild/linux-loong64@0.18.11
  • @esbuild/linux-mips64el@0.18.11
  • @esbuild/linux-ppc64@0.18.11
  • @esbuild/linux-riscv64@0.18.11
  • @esbuild/linux-s390x@0.18.11
  • @esbuild/linux-x64@0.18.11
  • @esbuild/netbsd-x64@0.18.11
  • @esbuild/openbsd-x64@0.18.11
  • @esbuild/sunos-x64@0.18.11
  • @esbuild/win32-arm64@0.18.11
  • @esbuild/win32-ia32@0.18.11
  • @esbuild/win32-x64@0.18.11
  • esbuild@0.18.11
package.json
  • esbuild@^0.18.17
  • esbuild@^0.18.11

@github-actions github-actions bot enabled auto-merge August 1, 2023 09:45
@github-actions github-actions bot merged commit b7eb50b into main Aug 1, 2023
@github-actions github-actions bot deleted the dependabot/npm_and_yarn/esbuild-0.18.17 branch August 1, 2023 09:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants