Bump pug from 3.0.2 to 3.0.3 #4659

dependabot · 2024-05-31T21:22:15Z

Bumps pug from 3.0.2 to 3.0.3.

Release notes

pug-code-gen@3.0.3

Bug Fixes

Validate templateName and globals are valid JavaScript identifiers to prevent possible remote code execution if un-trusted user input is passed to the compilation options (#3438)

pug@3.0.3

Bug Fixes

Update pug-code-gen with the following fix: (#3438)

Validate templateName and globals are valid JavaScript identifiers to prevent possible remote code execution if un-trusted user input is passed to the compilation options

Commits

32acfe8 fix: ensure template names are valid identifiers (#3438)
4767caf refactor: convert pug-error to TypeScript (#3355)
a724446 chore: update character-parser (#3354)
6cca8f7 docs: fix GitHub format in README (#3335)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [pug](https://github.com/pugjs/pug) from 3.0.2 to 3.0.3. - [Release notes](https://github.com/pugjs/pug/releases) - [Commits](https://github.com/pugjs/pug/compare/pug@3.0.2...pug@3.0.3) --- updated-dependencies: - dependency-name: pug dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

changeset-bot · 2024-05-31T21:22:18Z

⚠️ No Changeset found

Latest commit: 23d488c

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

github-actions · 2024-05-31T21:22:27Z

📊 Tachometer Benchmark Results

Summary

nop-update

this-change, tip-of-tree, previous-release: unsure 🔍 -3% - +4% (-0.37ms - +0.43ms)
^{this-change vs tip-of-tree}

render

this-change: 47.53ms - 49.47ms
this-change, tip-of-tree, previous-release: unsure 🔍 -3% - +4% (-0.55ms - +0.67ms)
^{this-change vs tip-of-tree}
this-change, tip-of-tree, previous-release: unsure 🔍 -1% - +4% (-0.19ms - +1.24ms)
^{this-change vs tip-of-tree}
this-change, tip-of-tree, previous-release: unsure 🔍 -3% - +1% (-0.88ms - +0.20ms)
^{this-change vs tip-of-tree}

update

this-change: 479.08ms - 493.61ms
this-change, tip-of-tree, previous-release: unsure 🔍 -7% - +6% (-2.62ms - +2.48ms)
^{this-change vs tip-of-tree}
this-change, tip-of-tree, previous-release: unsure 🔍 -1% - +2% (-0.59ms - +1.39ms)
^{this-change vs tip-of-tree}
this-change, tip-of-tree, previous-release: unsure 🔍 -1% - +2% (-3.14ms - +7.79ms)
^{this-change vs tip-of-tree}

update-reflect

this-change: 488.29ms - 499.11ms
this-change, tip-of-tree, previous-release: unsure 🔍 -0% - +2% (-2.50ms - +8.14ms)
^{this-change vs tip-of-tree}

Results

this-change

Browser: chrome-headless 125.0.6422.112
Sample size: 50
Built by: Benchmarks #6267
Commit: 23d488c

render

Version	Avg time	vs
	47.53ms - 49.47ms	-

update

Version	Avg time	vs
	479.08ms - 493.61ms	-

update-reflect

Version	Avg time	vs
	488.29ms - 499.11ms	-

this-change, tip-of-tree, previous-release

Browser: chrome-headless 125.0.6422.112
Sample size: 30
Built by: Benchmarks #6267
Commit: 23d488c

render

Version	Avg time	vs this-change	vs tip-of-tree tip-of-tree	vs previous-release previous-release
this-change	18.52ms - 19.37ms	-	unsure 🔍 -3% - +4% -0.55ms - +0.67ms	unsure 🔍 -1% - +5% -0.18ms - +0.92ms
tip-of-tree tip-of-tree	18.45ms - 19.33ms	unsure 🔍 -4% - +3% -0.67ms - +0.55ms	-	unsure 🔍 -1% - +5% -0.25ms - +0.87ms
previous-release previous-release	18.22ms - 18.93ms	unsure 🔍 -5% - +1% -0.92ms - +0.18ms	unsure 🔍 -5% - +1% -0.87ms - +0.25ms	-

update

Version	Avg time	vs this-change	vs tip-of-tree tip-of-tree	vs previous-release previous-release
this-change	36.58ms - 40.13ms	-	unsure 🔍 -7% - +6% -2.62ms - +2.48ms	unsure 🔍 -6% - +7% -2.22ms - +2.55ms
tip-of-tree tip-of-tree	36.60ms - 40.25ms	unsure 🔍 -6% - +7% -2.48ms - +2.62ms	-	unsure 🔍 -6% - +7% -2.19ms - +2.65ms
previous-release previous-release	36.60ms - 39.78ms	unsure 🔍 -7% - +6% -2.55ms - +2.22ms	unsure 🔍 -7% - +6% -2.65ms - +2.19ms	-

nop-update

Version	Avg time	vs this-change	vs tip-of-tree tip-of-tree	vs previous-release previous-release
this-change	10.68ms - 11.24ms	-	unsure 🔍 -3% - +4% -0.37ms - +0.43ms	unsure 🔍 -4% - +2% -0.50ms - +0.21ms
tip-of-tree tip-of-tree	10.64ms - 11.21ms	unsure 🔍 -4% - +3% -0.43ms - +0.37ms	-	unsure 🔍 -5% - +2% -0.54ms - +0.18ms
previous-release previous-release	10.89ms - 11.32ms	unsure 🔍 -2% - +5% -0.21ms - +0.50ms	unsure 🔍 -2% - +5% -0.18ms - +0.54ms	-

this-change, tip-of-tree, previous-release

Browser: chrome-headless 125.0.6422.112
Sample size: 50
Built by: Benchmarks #6267
Commit: 23d488c

render

Version	Avg time	vs this-change	vs tip-of-tree tip-of-tree	vs previous-release previous-release
this-change	33.81ms - 35.13ms	-	unsure 🔍 -1% - +4% -0.19ms - +1.24ms	unsure 🔍 -1% - +3% -0.31ms - +1.13ms
tip-of-tree tip-of-tree	33.68ms - 34.21ms	unsure 🔍 -4% - +1% -1.24ms - +0.19ms	-	unsure 🔍 -1% - +1% -0.50ms - +0.28ms
previous-release previous-release	33.78ms - 34.35ms	unsure 🔍 -3% - +1% -1.13ms - +0.31ms	unsure 🔍 -1% - +1% -0.28ms - +0.50ms	-

update

Version	Avg time	vs this-change	vs tip-of-tree tip-of-tree	vs previous-release previous-release
this-change	67.60ms - 69.21ms	-	unsure 🔍 -1% - +2% -0.59ms - +1.39ms	unsure 🔍 -1% - +1% -0.97ms - +0.98ms
tip-of-tree tip-of-tree	67.43ms - 68.58ms	unsure 🔍 -2% - +1% -1.39ms - +0.59ms	-	unsure 🔍 -2% - +1% -1.19ms - +0.39ms
previous-release previous-release	67.86ms - 68.95ms	unsure 🔍 -1% - +1% -0.98ms - +0.97ms	unsure 🔍 -1% - +2% -0.39ms - +1.19ms	-

this-change, tip-of-tree, previous-release

Browser: chrome-headless 125.0.6422.112
Sample size: 50
Built by: Benchmarks #6267
Commit: 23d488c

render

Version	Avg time	vs this-change	vs tip-of-tree tip-of-tree	vs previous-release previous-release
this-change	32.05ms - 32.75ms	-	unsure 🔍 -3% - +1% -0.88ms - +0.20ms	unsure 🔍 -1% - +2% -0.44ms - +0.56ms
tip-of-tree tip-of-tree	32.33ms - 33.15ms	unsure 🔍 -1% - +3% -0.20ms - +0.88ms	-	unsure 🔍 -0% - +3% -0.14ms - +0.94ms
previous-release previous-release	31.99ms - 32.69ms	unsure 🔍 -2% - +1% -0.56ms - +0.44ms	unsure 🔍 -3% - +0% -0.94ms - +0.14ms	-

update

Version	Avg time	vs this-change	vs tip-of-tree tip-of-tree	vs previous-release previous-release
this-change	476.42ms - 485.10ms	-	unsure 🔍 -1% - +2% -3.14ms - +7.79ms	unsure 🔍 -1% - +2% -2.77ms - +8.22ms
tip-of-tree tip-of-tree	475.11ms - 481.76ms	unsure 🔍 -2% - +1% -7.79ms - +3.14ms	-	unsure 🔍 -1% - +1% -4.33ms - +5.13ms
previous-release previous-release	474.67ms - 481.40ms	unsure 🔍 -2% - +1% -8.22ms - +2.77ms	unsure 🔍 -1% - +1% -5.13ms - +4.33ms	-

update-reflect

Version	Avg time	vs this-change	vs tip-of-tree tip-of-tree	vs previous-release previous-release
this-change	521.93ms - 529.02ms	-	unsure 🔍 -0% - +2% -2.50ms - +8.14ms	unsure 🔍 -1% - +1% -6.12ms - +5.16ms
tip-of-tree tip-of-tree	518.69ms - 526.63ms	unsure 🔍 -2% - +0% -8.14ms - +2.50ms	-	unsure 🔍 -2% - +0% -9.21ms - +2.61ms
previous-release previous-release	521.57ms - 530.34ms	unsure 🔍 -1% - +1% -5.16ms - +6.12ms	unsure 🔍 -1% - +2% -2.61ms - +9.21ms	-

_{tachometer-reporter-action v2 for Benchmarks}

github-actions · 2024-05-31T21:24:14Z

The size of lit-html.js and lit-core.min.js are as expected.

dependabot bot requested a review from kevinpschaaf as a code owner May 31, 2024 21:22

dependabot bot added the dependencies Pull requests that update a dependency file label May 31, 2024

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump pug from 3.0.2 to 3.0.3 #4659

Bump pug from 3.0.2 to 3.0.3 #4659

dependabot bot commented on behalf of github May 31, 2024

changeset-bot bot commented May 31, 2024

github-actions bot commented May 31, 2024 •

edited

Loading

📊 Tachometer Benchmark Results

Summary

nop-update

render

update

update-reflect

Results

render

update

update-reflect

render

update

nop-update

render

update

render

update

update-reflect

github-actions bot commented May 31, 2024

Bump pug from 3.0.2 to 3.0.3 #4659

Are you sure you want to change the base?

Bump pug from 3.0.2 to 3.0.3 #4659

Conversation

dependabot bot commented on behalf of github May 31, 2024

pug-code-gen@3.0.3

Bug Fixes

pug@3.0.3

Bug Fixes

changeset-bot bot commented May 31, 2024

⚠️ No Changeset found

github-actions bot commented May 31, 2024 • edited Loading

📊 Tachometer Benchmark Results

Summary

nop-update

render

update

update-reflect

Results

render

update

update-reflect

render

update

nop-update

render

update

render

update

update-reflect

github-actions bot commented May 31, 2024

github-actions bot commented May 31, 2024 •

edited

Loading