Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update devdependencies #1828

Merged
merged 1 commit into from
Feb 13, 2023
Merged

chore(deps): update devdependencies #1828

merged 1 commit into from
Feb 13, 2023

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Feb 13, 2023

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
@types/node (source) ~18.11.18 -> ~18.13.0 age adoption passing confidence
@types/validator (source) ~13.7.11 -> ~13.7.12 age adoption passing confidence
cypress ~12.4.1 -> ~12.5.1 age adoption passing confidence
esbuild ~0.17.5 -> ~0.17.8 age adoption passing confidence
eslint (source) ~8.33.0 -> ~8.34.0 age adoption passing confidence
eslint-define-config ~1.14.0 -> ~1.15.0 age adoption passing confidence
eslint-plugin-jsdoc ~39.7.4 -> ~39.9.1 age adoption passing confidence
sanitize-html ~2.8.1 -> ~2.9.0 age adoption passing confidence
tsx ~3.12.2 -> ~3.12.3 age adoption passing confidence
validator ~13.7.0 -> ~13.9.0 age adoption passing confidence
vite (source) ~4.0.4 -> ~4.1.1 age adoption passing confidence
vue (source) ~3.2.45 -> ~3.2.47 age adoption passing confidence

Release Notes

cypress-io/cypress

v12.5.1

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#​12-5-1

v12.5.0

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#​12-5-0

evanw/esbuild

v0.17.8

Compare Source

  • Fix a minification bug with non-ASCII identifiers (#​2910)

    This release fixes a bug with esbuild where non-ASCII identifiers followed by a keyword were incorrectly not separated by a space. This bug affected both the in and instanceof keywords. Here's an example of the fix:

    // Original code
    π in a
    
    // Old output (with --minify --charset=utf8)
    πin a;
    
    // New output (with --minify --charset=utf8)
    π in a;
  • Fix a regression with esbuild's WebAssembly API in version 0.17.6 (#​2911)

    Version 0.17.6 of esbuild updated the Go toolchain to version 1.20.0. This had the unfortunate side effect of increasing the amount of stack space that esbuild uses (presumably due to some changes to Go's WebAssembly implementation) which could cause esbuild's WebAssembly-based API to crash with a stack overflow in cases where it previously didn't crash. One such case is the package grapheme-splitter which contains code that looks like this:

    if (
      (0x0300 <= code && code <= 0x036F) ||
      (0x0483 <= code && code <= 0x0487) ||
      (0x0488 <= code && code <= 0x0489) ||
      (0x0591 <= code && code <= 0x05BD) ||
      // ... many hundreds of lines later ...
    ) {
      return;
    }

    This edge case involves a chain of binary operators that results in an AST over 400 nodes deep. Normally this wouldn't be a problem because Go has growable call stacks, so the call stack would just grow to be as large as needed. However, WebAssembly byte code deliberately doesn't expose the ability to manipulate the stack pointer, so Go's WebAssembly translation is forced to use the fixed-size WebAssembly call stack. So esbuild's WebAssembly implementation is vulnerable to stack overflow in cases like these.

    It's not unreasonable for this to cause a stack overflow, and for esbuild's answer to this problem to be "don't write code like this." That's how many other AST-manipulation tools handle this problem. However, it's possible to implement AST traversal using iteration instead of recursion to work around limited call stack space. This version of esbuild implements this code transformation for esbuild's JavaScript parser and printer, so esbuild's WebAssembly implementation is now able to process the grapheme-splitter package (at least when compiled with Go 1.20.0 and run with node's WebAssembly implementation).

v0.17.7

Compare Source

  • Change esbuild's parsing of TypeScript instantiation expressions to match TypeScript 4.8+ (#​2907)

    This release updates esbuild's implementation of instantiation expression erasure to match microsoft/TypeScript#​49353. The new rules are as follows (copied from TypeScript's PR description):

    When a potential type argument list is followed by

    • a line break,
    • an ( token,
    • a template literal string, or
    • any token except < or > that isn't the start of an expression,

    we consider that construct to be a type argument list. Otherwise we consider the construct to be a < relational expression followed by a > relational expression.

  • Ignore sideEffects: false for imported CSS files (#​1370, #​1458, #​2905)

    This release ignores the sideEffects annotation in package.json for CSS files that are imported into JS files using esbuild's css loader. This means that these CSS files are no longer be tree-shaken.

    Importing CSS into JS causes esbuild to automatically create a CSS entry point next to the JS entry point containing the bundled CSS. Previously packages that specified some form of "sideEffects": false could potentially cause esbuild to consider one or more of the JS files on the import path to the CSS file to be side-effect free, which would result in esbuild removing that CSS file from the bundle. This was problematic because the removal of that CSS is outwardly observable, since all CSS is global, so it was incorrect for previous versions of esbuild to tree-shake CSS files imported into JS files.

  • Add constant folding for certain additional equality cases (#​2394, #​2895)

    This release adds constant folding for expressions similar to the following:

    // Original input
    console.log(
      null === 'foo',
      null === undefined,
      null == undefined,
      false === 0,
      false == 0,
      1 === true,
      1 == true,
    )
    
    // Old output
    console.log(
      null === "foo",
      null === void 0,
      null == void 0,
      false === 0,
      false == 0,
      1 === true,
      1 == true
    );
    
    // New output
    console.log(
      false,
      false,
      true,
      false,
      true,
      false,
      true
    );

v0.17.6

Compare Source

  • Fix a CSS parser crash on invalid CSS (#​2892)

    Previously the following invalid CSS caused esbuild's parser to crash:

    @&#8203;media screen

    The crash was caused by trying to construct a helpful error message assuming that there was an opening { token, which is not the case here. This release fixes the crash.

  • Inline TypeScript enums that are referenced before their declaration

    Previously esbuild inlined enums within a TypeScript file from top to bottom, which meant that references to TypeScript enum members were only inlined within the same file if they came after the enum declaration. With this release, esbuild will now inline enums even when they are referenced before they are declared:

    // Original input
    export const foo = () => Foo.FOO
    const enum Foo { FOO = 0 }
    
    // Old output (with --tree-shaking=true)
    export const foo = () => Foo.FOO;
    var Foo = /* @&#8203;__PURE__ */ ((Foo2) => {
      Foo2[Foo2["FOO"] = 0] = "FOO";
      return Foo2;
    })(Foo || {});
    
    // New output (with --tree-shaking=true)
    export const foo = () => 0 /* FOO */;

    This makes esbuild's TypeScript output smaller and faster when processing code that does this. I noticed this issue when I ran the TypeScript compiler's source code through esbuild's bundler. Now that the TypeScript compiler is going to be bundled with esbuild in the upcoming TypeScript 5.0 release, improvements like this will also improve the TypeScript compiler itself!

  • Fix esbuild installation on Arch Linux (#​2785, #​2812, #​2865)

    Someone made an unofficial esbuild package for Linux that adds the ESBUILD_BINARY_PATH=/usr/bin/esbuild environment variable to the user's default environment. This breaks all npm installations of esbuild for users with this unofficial Linux package installed, which has affected many people. Most (all?) people who encounter this problem haven't even installed this unofficial package themselves; instead it was installed for them as a dependency of another Linux package. The problematic change to add the ESBUILD_BINARY_PATH environment variable was reverted in the latest version of this unofficial package. However, old versions of this unofficial package are still there and will be around forever. With this release, ESBUILD_BINARY_PATH is now ignored by esbuild's install script when it's set to the value /usr/bin/esbuild. This should unbreak using npm to install esbuild in these problematic Linux environments.

    Note: The ESBUILD_BINARY_PATH variable is an undocumented way to override the location of esbuild's binary when esbuild's npm package is installed, which is necessary to substitute your own locally-built esbuild binary when debugging esbuild's npm package. It's only meant for very custom situations and should absolutely not be forced on others by default, especially without their knowledge. I may remove the code in esbuild's installer that reads ESBUILD_BINARY_PATH in the future to prevent these kinds of issues. It will unfortunately make debugging esbuild harder. If ESBUILD_BINARY_PATH is ever removed, it will be done in a "breaking change" release.

eslint/eslint

v8.34.0

Compare Source

Features

  • 9b2fcf7 feat: array-callback-return supports Array.prototype.toSorted (#​16845) (SUZUKI Sosuke)

Bug Fixes

  • 923f61d fix: false positive with assignment in no-extra-parens (#​16872) (Francesco Trotta)

Documentation

Chores

Shinigami92/eslint-define-config

v1.15.0

Compare Source

diff

  • Add support for graphql (#​168)
  • Update rules for: [import, typescript-eslint, vue]
gajus/eslint-plugin-jsdoc

v39.9.1

Compare Source

v39.9.0

Compare Source

v39.8.0

Compare Source

v39.7.5

Compare Source

apostrophecms/sanitize-html

v2.9.0

Compare Source

esbuild-kit/tsx

v3.12.3

Compare Source

Bug Fixes
validatorjs/validator.js

v13.9.0

Compare Source

New Features / Validators
Fixes and Enhancements
New and Improved Locales

13.7.0

New Features
Fixes and Enhancements
New and Improved Locales
13.6.1
13.5.0 13.5.1

— this release is dedicated to @​dbnandaa 🧒

13.1.17

Configuration

📅 Schedule: Branch creation - "before 3am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@renovate renovate bot requested a review from a team as a code owner February 13, 2023 02:16
@renovate renovate bot added the c: dependencies Pull requests that adds/updates a dependency label Feb 13, 2023
@codecov
Copy link

codecov bot commented Feb 13, 2023

Codecov Report

Merging #1828 (d5abf54) into next (fbd0db5) will decrease coverage by 0.01%.
The diff coverage is n/a.

Additional details and impacted files
@@            Coverage Diff             @@
##             next    #1828      +/-   ##
==========================================
- Coverage   99.63%   99.63%   -0.01%     
==========================================
  Files        2346     2346              
  Lines      235735   235735              
  Branches     1144     1143       -1     
==========================================
- Hits       234882   234880       -2     
- Misses        831      833       +2     
  Partials       22       22              
Impacted Files Coverage Δ
src/modules/internet/user-agent.ts 93.78% <0.00%> (-0.60%) ⬇️

@ST-DDT ST-DDT requested review from a team February 13, 2023 10:38
@ST-DDT ST-DDT enabled auto-merge (squash) February 13, 2023 10:38
@ST-DDT ST-DDT merged commit ed0be86 into next Feb 13, 2023
@renovate renovate bot deleted the renovate/devdependencies branch February 13, 2023 10:47
matthewmayer pushed a commit to matthewmayer/faker that referenced this pull request Feb 18, 2023
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
c: dependencies Pull requests that adds/updates a dependency
Projects
No open projects
Status: Done
Development

Successfully merging this pull request may close these issues.

None yet

2 participants