Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update all non-major dependencies #70

Merged
merged 1 commit into from
Aug 15, 2021

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Jul 31, 2021

WhiteSource Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
babel-plugin-styled-components (source) 1.13.1 -> 1.13.2 age adoption passing confidence
color 3.1.3 -> 3.2.1 age adoption passing confidence
fitty 2.3.3 -> 2.3.5 age adoption passing confidence
muuri (source) 0.9.4 -> 0.9.5 age adoption passing confidence
next-pwa 5.2.22 -> 5.2.24 age adoption passing confidence
node 14.17.2 -> 14.17.5 age adoption passing confidence
ts-jest (source) 27.0.3 -> 27.0.4 age adoption passing confidence
use-seconds 1.5.0 -> 1.6.0 age adoption passing confidence
webpack 5.42.0 -> 5.50.0 age adoption passing confidence

Release Notes

styled-components/babel-plugin-styled-components

v1.13.2

Compare Source

  • added some conditional guards to code paths that lead to errors for some consumers (0c16c1b)
  • dependency updates
  • teach babel plugin about certain spread application scenarios with "css" prop #​339
  • handle namespace import (import * as styled from 'styled-components') properly #​340
Qix-/color

v3.2.1

Compare Source

Patch Release 3.2.1
  • Revert color-convert back down to <2 since v2 introduced ES6 syntax.

If you need color-convert@>=2 then you'll need to have ES6 support. It's 2021, embrace it. 🙂

v3.2.0

Compare Source

Minor Release 3.2.0

NOTE: This is the final release of color that uses ES5 syntax. For those following along, 4.0.0 was just released that switches to ES6 (const/let) syntax, which will (at some point) be followed by another major release that further switches to ES Modules entirely. This will be a sweeping change across the color package suite (color, color-string, color-convert). Keep a look out if these issues have been bothering you.

  • Bumps color convert to latest (fixes some issues with HCG)
  • Bumps mocha to latest

v3.1.4

Compare Source

Patch Release 3.1.4
  • Bumped color-string to latest version, resolving problems for users using package-lock.json files and adding support for space-separated hsl() syntax.
rikschennink/fitty

v2.3.5

Compare Source

v2.3.4

Compare Source

haltu/muuri

v0.9.5

Compare Source

Release PR with details: https://github.com/haltu/muuri/pull/487

shadowwalker/next-pwa

v5.2.24

Fix
  1. back online reload behaviour configurable

v5.2.23

Fix
  1. Fix double // when precache next/image url - Issue 231
Misc
  • Add next-image example
nodejs/node

v14.17.5

Compare Source

This is a security release.

Notable Changes
  • CVE-2021-3672/CVE-2021-22931: Improper handling of untypical characters in domain names (High)
    • Node.js was vulnerable to Remote Code Execution, XSS, application crashes due to missing input validation of hostnames returned by Domain Name Servers in the Node.js DNS library which can lead to the output of wrong hostnames (leading to Domain Hijacking) and injection vulnerabilities in applications using the library. You can read more about it at https://nvd.nist.gov/vuln/detail/CVE-2021-22931.
  • CVE-2021-22930: Use after free on close http2 on stream canceling (High)
  • CVE-2021-22939: Incomplete validation of rejectUnauthorized parameter (Low)
    • If the Node.js HTTPS API was used incorrectly and "undefined" was in passed for the "rejectUnauthorized" parameter, no error was returned and connections to servers with an expired certificate would have been accepted. You can read more about it at https://nvd.nist.gov/vuln/detail/CVE-2021-22939.
Commits

v14.17.4

Compare Source

This is a security release.

Notable Changes

This releases also fixes some regressions with internationalization introduced by the ICU updates in Node.js 14.17.0 and 14.17.1.

Commits

v14.17.3

Compare Source

Notable Changes

Node.js 14.17.2 introduced a regression in the Windows installer on
non-English locales that is being fixed in this release. There is no
need to download this release if you are not using the Windows
installer.

Commits
kulshekhar/ts-jest

v27.0.4

Compare Source

Bug Fixes
  • add @types/jest as optional peerDependencies to solve yarn 2 (#​2756) (5fbf43e)
  • add babel-jest as optional peerDependencies to solve yarn 2 (#​2751) (8bede2e)
  • config: include AST transformer's name and version into cache key (#​2755) (310fb9a), closes #​2753
Features
webpack/webpack

v5.50.0

Compare Source

Features

Performance

  • disable cache compression by default as it tend to make performance worse
    • I could still be enabled again for specific scenarios
  • reduce the number of allocations during cache serialization
    • This improves performance and memory usage

v5.49.0

Compare Source

Features

  • add experiments.buildHttp to build http(s):// imports instead of keeping them external
    • keeps a webpack.lock file with integrity and webpack.lock.data with cached content that should be committed
    • Automatically upgrades lockfile during development when remote resources change
      (might be disabled with experiments.buildHttp.upgrade: false)
    • Lockfile is frozen during production builds and usually no network requests are made
      (exception: Cache-Control: no-cache).
    • The webpack.lock.data persisting can be disabled with experiments.buildHttp.cacheLocation: false.
      That will will introduce a availability risk.
      (webpack cache will be used to cache network responses)

Bugfixes

  • fix HMR infinite loop (again)
  • fix rare non-determinism with splitChunks.maxSize introduces in the last release
  • optional modules no longer cause the module to fail when bail is set
  • fix typo in records format: chunkHashs -> chunkHashes

Performance

  • limit the number of parallel generated chunks for memory reasons

v5.48.0

Compare Source

Features

  • enable import assertions again

Bugfixes

  • upgrade webpack-sources for fixes regarding source maps
  • fix infinite loop in HMR runtime code

v5.47.1

Compare Source

Bugfixes

  • upgrade webpack-sources for a bunch of bugfixes regarding source maps and missing chars in output

v5.47.0

Compare Source

Performance

  • improve source-map performance

Bugfixes

  • avoid unnecessary "use strict"s in module mode

v5.46.0

Compare Source

Features

  • status handlers in HMR api can now return Promises to delay the HMR process
  • reasons in stats can now be grouped and collapsed
    • add stats.reasonsSpace and stats.groupReasonsByOrigin

Bugfixes

  • fix a crash in asset modules when updating persistent cached modules from unsafe cached modules

Performance

  • detailed preset limits all spaces to 1000 by default
  • upgrade webpack-sources for a performance bugfix

v5.45.1

Compare Source

Bugfixes

  • temporary revert import assertions because parser changes break the word assert in other places
  • import(/* webpackPrefetch: true */ ...) no longer breaks library output
  • DataURL tries to avoid re-encoding
  • fix problems with DataURL encoding in some cases

v5.45.0

Compare Source

Features

  • add support to import assertions

Bugfixes

  • SourceMaps will now also be added to .cjs output files
  • fix non-system externals in a system library

Performance

  • avoid copying timestamps from the watcher to the compiler

Contributing

  • update to jest 27

v5.44.0

Compare Source

Features

  • add support for output.module + optimization.runtimeChunk

Bugfixes

  • fix inline externals with dash in type

v5.43.0

Compare Source

Features

  • support runtime: false in entry description to disable runtime chunk
  • support runtime option in ModuleFederationPlugin and ContainerPlugin

Bugfixes

  • fix "module" externals when concatenated

Performance

  • serialize JSON data as buffer and parse on demand for performance and to avoid performance warning

v5.42.1

Compare Source

Bugfixes

  • fix crashes when rebuilding with jsonData or dataUrl of undefined

Configuration

📅 Schedule: "before 3am on the first day of the month" in timezone Asia/Tokyo.

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box.

This PR has been generated by WhiteSource Renovate. View repository job log here.

@renovate renovate bot added the renovate label Jul 31, 2021
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 6626b8a to 95b92cb Compare August 6, 2021 11:20
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from 20b81f9 to 108af89 Compare August 15, 2021 16:53
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 108af89 to 3384133 Compare August 15, 2021 18:15
@renovate renovate bot merged commit 3b44945 into master Aug 15, 2021
@renovate renovate bot deleted the renovate/all-minor-patch branch August 15, 2021 20:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant