-
Notifications
You must be signed in to change notification settings - Fork 2k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Release: uppy@4.0.0-beta.1 #5047
Conversation
| Package | Version | Package | Version | | ------------------------- | ------- | ------------------------- | ------- | | @uppy/audio | 1.1.8 | @uppy/progress-bar | 3.1.1 | | @uppy/aws-s3-multipart | 3.11.0 | @uppy/provider-views | 3.11.0 | | @uppy/box | 2.3.0 | @uppy/react | 3.3.0 | | @uppy/companion | 4.13.0 | @uppy/remote-sources | 1.2.0 | | @uppy/companion-client | 3.8.0 | @uppy/screen-capture | 3.2.0 | | @uppy/compressor | 1.1.2 | @uppy/status-bar | 3.3.1 | | @uppy/core | 3.10.0 | @uppy/thumbnail-generator | 3.1.0 | | @uppy/dashboard | 3.8.0 | @uppy/transloadit | 3.6.0 | | @uppy/drag-drop | 3.1.0 | @uppy/tus | 3.5.4 | | @uppy/drop-target | 2.0.5 | @uppy/unsplash | 3.3.0 | | @uppy/dropbox | 3.3.0 | @uppy/url | 3.6.0 | | @uppy/facebook | 3.3.0 | @uppy/utils | 5.7.5 | | @uppy/golden-retriever | 3.2.0 | @uppy/webcam | 3.4.0 | | @uppy/google-drive | 3.5.0 | @uppy/zoom | 2.3.0 | | @uppy/instagram | 3.3.0 | uppy | 3.24.0 | | @uppy/onedrive | 3.3.0 | | | - @uppy/box,@uppy/companion-client,@uppy/provider-views,@uppy/status-bar: fix type imports (Antoine du Hamel / #5038) - @uppy/aws-s3-multipart: mark `opts` as optional (Antoine du Hamel / #5039) - e2e: bump Cypress version (Antoine du Hamel / #5034) - @uppy/react: refactor to TS (Antoine du Hamel / #5012) - @uppy/core: refine type of private variables (Antoine du Hamel / #5028) - @uppy/dashboard: refine type of private variables (Antoine du Hamel / #5027) - @uppy/drag-drop: refine type of private variables (Antoine du Hamel / #5026) - @uppy/status-bar: refine type of private variables (Antoine du Hamel / #5025) - @uppy/remote-sources: migrate to TS (Merlijn Vos / #5020) - @uppy/dashboard: refine option types (Antoine du Hamel / #5022) - @uppy/dashboard: add new `autoOpen` option (Chris Grigg / #5001) - @uppy/core: fix some type errors (Antoine du Hamel / #5015) - @uppy/audio,@uppy/dashboard,@uppy/drop-target,@uppy/webcam: add missing exports (Antoine du Hamel / #5014) - meta: Bump webpack-dev-middleware from 5.3.3 to 5.3.4 (dependabot[bot] / #5013) - @uppy/dashboard: refactor to TypeScript (Antoine du Hamel / #4984) - @uppy/companion: improve error msg (Mikael Finstad / #5010) - @uppy/aws-s3-multipart: refactor to TS (Antoine du Hamel / #4902) - @uppy/dashboard: refactor to stable lifecycle method (Antoine du Hamel / #4999) - @uppy/companion: crash if trying to set path to / (Mikael Finstad / #5003) - @uppy/provider-views: fix `super.toggleCheckbox` bug (Mikael Finstad / #5004) - @uppy/aws-s3-multipart: fix escaping issue with client signed request (Hiroki Shimizu / #5006) - @uppy/drag-drop,@uppy/progress-bar: add missing exports (Antoine du Hamel / #5009) - @uppy/transloadit: migrate to TS (Merlijn Vos / #4987) - @uppy/utils: fix `RateLimitedQueue#wrapPromiseFunction` types (Antoine du Hamel / #5007) - @uppy/golden-retriever: migrate to TS (Merlijn Vos / #4989) - meta: Bump follow-redirects from 1.15.4 to 1.15.6 (dependabot[bot] / #5002) - meta: fix `resize-observer-polyfill` types (Antoine du Hamel / #4994) - @uppy/core: various type fixes (Antoine du Hamel / #4995) - @uppy/utils: fix `findAllDOMElements` type (Antoine du Hamel / #4997) - @uppy/status-bar: fix `recoveredState` type (Antoine du Hamel / #4996) - @uppy/utils: fix `AbortablePromise` type (Antoine du Hamel / #4988) - @uppy/core,@uppy/provider-views: Fix breadcrumbs (Evgenia Karunus / #4986) - @uppy/drag-drop: refactor to TypeScript (Antoine du Hamel / #4983) - @uppy/webcam: refactor to TypeScript (Antoine du Hamel / #4870) - @uppy/url: migrate to TS (Merlijn Vos / #4980) - @uppy/zoom: refactor to TypeScript (Murderlon / #4979) - @uppy/unsplash: refactor to TypeScript (Murderlon / #4979) - @uppy/onedrive: refactor to TypeScript (Murderlon / #4979) - @uppy/instagram: refactor to TypeScript (Murderlon / #4979) - @uppy/google-drive: refactor to TypeScript (Murderlon / #4979) - @uppy/facebook: refactor to TypeScript (Murderlon / #4979) - @uppy/dropbox: refactor to TypeScript (Murderlon / #4979) - @uppy/box: refactor to TypeScript (Murderlon / #4979) - @uppy/utils: migrate RateLimitedQueue to TS (Merlijn Vos / #4981) - @uppy/thumbnail-generator: migrate to TS (Merlijn Vos / #4978) - @uppy/screen-capture: migrate to TS (Merlijn Vos / #4965) - @uppy/companion-client: Replace Provider.initPlugin with composition (Merlijn Vos / #4977)
Bumps [express](https://github.com/expressjs/express) from 4.18.1 to 4.19.2. - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@4.18.1...4.19.2) --- updated-dependencies: - dependency-name: express dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [express](https://github.com/expressjs/express) from 4.18.1 to 4.19.2. - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@4.18.1...4.19.2) --- updated-dependencies: - dependency-name: express dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
This is a release candidate for the following packages: - `@uppy/angular`: 0.6.1 -> 0.7.0-beta.1 - `@uppy/audio`: 1.1.8 -> 2.0.0-beta.1 - `@uppy/aws-s3`: 3.6.2 -> 4.0.0-beta.1 - `@uppy/aws-s3-multipart`: 3.11.0 -> 4.0.0-beta.1 - `@uppy/box`: 2.3.0 -> 3.0.0-beta.1 - `@uppy/companion`: 4.13.0 -> 5.0.0-beta.1 - `@uppy/companion-client`: 3.8.0 -> 4.0.0-beta.1 - `@uppy/compressor`: 1.1.2 -> 2.0.0-beta.1 - `@uppy/core`: 3.10.0 -> 4.0.0-beta.1 - `@uppy/dashboard`: 3.8.0 -> 4.0.0-beta.1 - `@uppy/drag-drop`: 3.1.0 -> 4.0.0-beta.1 - `@uppy/drop-target`: 2.0.5 -> 3.0.0-beta.1 - `@uppy/dropbox`: 3.3.0 -> 4.0.0-beta.1 - `@uppy/facebook`: 3.3.0 -> 4.0.0-beta.1 - `@uppy/file-input`: 3.1.0 -> 4.0.0-beta.1 - `@uppy/form`: 3.2.0 -> 4.0.0-beta.1 - `@uppy/golden-retriever`: 3.2.0 -> 4.0.0-beta.1 - `@uppy/google-drive`: 3.5.0 -> 4.0.0-beta.1 - `@uppy/image-editor`: 2.4.4 -> 3.0.0-beta.1 - `@uppy/informer`: 3.1.0 -> 4.0.0-beta.1 - `@uppy/instagram`: 3.3.0 -> 4.0.0-beta.1 - `@uppy/onedrive`: 3.3.0 -> 4.0.0-beta.1 - `@uppy/progress-bar`: 3.1.1 -> 4.0.0-beta.1 - `@uppy/provider-views`: 3.11.0 -> 4.0.0-beta.1 - `@uppy/react`: 3.3.0 -> 4.0.0-beta.1 - `@uppy/redux-dev-tools`: 3.0.3 -> 4.0.0-beta.1 - `@uppy/remote-sources`: 1.2.0 -> 2.0.0-beta.1 - `@uppy/screen-capture`: 3.2.0 -> 4.0.0-beta.1 - `@uppy/status-bar`: 3.3.1 -> 4.0.0-beta.1 - `@uppy/store-default`: 3.2.2 -> 4.0.0-beta.1 - `@uppy/store-redux`: 3.0.7 -> 4.0.0-beta.1 - `@uppy/svelte`: 3.1.3 -> 4.0.0-beta.1 - `@uppy/thumbnail-generator`: 3.1.0 -> 4.0.0-beta.1 - `@uppy/transloadit`: 3.6.0 -> 4.0.0-beta.1 - `@uppy/tus`: 3.5.4 -> 4.0.0-beta.1 - `@uppy/unsplash`: 3.3.0 -> 4.0.0-beta.1 - `@uppy/url`: 3.6.0 -> 4.0.0-beta.1 - `@uppy/utils`: 5.7.5 -> 6.0.0-beta.1 - `@uppy/vue`: 1.1.2 -> 2.0.0-beta.1 - `@uppy/webcam`: 3.4.0 -> 4.0.0-beta.1 - `@uppy/xhr-upload`: 3.6.4 -> 4.0.0-beta.1 - `@uppy/zoom`: 2.3.0 -> 3.0.0-beta.1 - `uppy`: 3.24.0 -> 4.0.0-beta.1
🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎ To accept the risk, merge this PR and you will not be notified again.
Next stepsWhat is an install script?Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts. Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead. Take a deeper look at the dependencyTake a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev. Remove the packageIf you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency. Mark a package as acceptable riskTo ignore an alert, reply with a comment starting with
|
* 4.x: (27 commits) Release: uppy@4.0.0-beta.1 (#5047) @uppy/vue: migrate to Composition API with TS & drop Vue 2 support (#5043) @uppy/angular,meta: upgrade to Angular 17.x and to TS 5.4 (#5008) @uppy/svelte: remove UMD output and make it use newer types (#5023) fix type imports (#5038) @uppy/aws-s3-multipart: mark `opts` as optional (#5039) e2e: bump Cypress version (#5034) @uppy/react: remove `prop-types` dependency (#5031) @uppy/progress-bar: remove default target (#4971) @uppy/status-bar: remove default target (#4970) @uppy/react: remove `Wrapper.ts` (#5032) @uppy/react: refactor to TS (#5012) @uppy/core: refine type of private variables (#5028) @uppy/dashboard: refine type of private variables (#5027) @uppy/drag-drop: refine type of private variables (#5026) @uppy/status-bar: refine type of private variables (#5025) @uppy/remote-sources: migrate to TS (#5020) @uppy/dashboard: refine option types (#5022) @uppy/dashboard: add new `autoOpen` option (#5001) Make `allowedMetaFields` consistent (#5011) ...
opts
as optional (Antoine du Hamel / @uppy/aws-s3-multipart: markopts
as optional #5039)prop-types
dependency (Antoine du Hamel / @uppy/react: removeprop-types
dependency #5031)Wrapper.ts
(Antoine du Hamel / @uppy/react: removeWrapper.ts
#5032)autoOpen
option (Chris Grigg / @uppy/dashboard: add newautoOpen
option #5001)allowedMetaFields
consistent (Merlijn Vos / MakeallowedMetaFields
consistent #5011)super.toggleCheckbox
bug (Mikael Finstad / fixsuper.toggleCheckbox
bug #5004)RateLimitedQueue#wrapPromiseFunction
types (Antoine du Hamel / @uppy/utils: fixRateLimitedQueue#wrapPromiseFunction
types #5007)resize-observer-polyfill
types (Antoine du Hamel / meta: fixresize-observer-polyfill
types #4994)findAllDOMElements
type (Antoine du Hamel / @uppy/utils: fixfindAllDOMElements
type #4997)recoveredState
type (Antoine du Hamel / @uppy/status-bar: fixrecoveredState
type #4996)AbortablePromise
type (Antoine du Hamel / @uppy/utils: fixAbortablePromise
type #4988)4.x
branch (Antoine du Hamel)