-
Notifications
You must be signed in to change notification settings - Fork 171
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Update all non-major dependencies #1646
Conversation
⚠ Artifact update problemRenovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is. ♻ Renovate will retry this branch, including artifacts, only when one of the following happens:
The artifact failure details are included below: File name: go.sum
|
✅ Deploy Preview for zarf-docs canceled.
|
20ba913
to
39354cb
Compare
e1d4e24
to
d5c767b
Compare
f5354d3
to
fb12608
Compare
fb12608
to
044c5c0
Compare
Edited/Blocked NotificationRenovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR. You can manually request rebase by checking the rebase/retry box above. ⚠ Warning: custom changes will be lost. |
This PR contains the following updates:
^0.0.47
->^0.0.48
1.2.6
->1.2.7
1.32.3
->1.33.0
1.15.7
->1.16.3
5.59.0
->5.59.5
5.59.0
->5.59.5
v0.14.1
->v0.14.2
v0.4.3
->v0.5.0
8.39.0
->8.40.0
1.0.25
->1.0.26
v0.79.0
->v0.80.0
v0.27.3
->v0.27.4
v2.8.1+incompatible
->v2.8.2+incompatible
v23.0.4+incompatible
->v23.0.6+incompatible
v0.14.0
->v0.15.1
v23.0.4+incompatible
->v23.0.6+incompatible
v1.1.0-rc2.0.20221005185240-3a7f492d3f1b
->v1.1.0-rc3
v2.3.0
->v2.3.3
v2.3.2
->v2.3.3
v0.8.0
->v0.9.0
v3.11.3
->v3.12.0
v0.26.4
->v0.27.1
v0.26.4
->v0.27.1
v0.26.4
->v0.27.1
v0.26.4
->v0.27.1
v2.90.1
->v2.100.1
v0.26.4
->v0.27.1
v2.0.2
->v2.1.0
1.32.3
->1.33.0
23.0.21
->23.0.30
1.62.0
->1.62.1
v0.12.1
->v0.13.4
3.58.0
->3.59.1
3.2.0
->3.3.2
4.3.1
->4.3.5
⚠ Dependency Lookup Warnings ⚠
Warnings were logged while processing this repo. Please check the Dependency Dashboard for more information.
Release Notes
floating-ui/floating-ui
v1.2.7
Compare Source
Bug Fixes
fix(getClippingRect): incorrect clipping rect calculation with
position: fixed
ancestors (#2291)fix(autoUpdate): prevent
animationFrame: true
from disabling visualViewport scrolling updates (#2303)Microsoft/playwright
v1.33.0
Compare Source
Locators Update
Use [
locator.or()
][locator.or()] to create a locator that matches either of the two locators.Consider a scenario where you'd like to click on a "New email" button, but sometimes a security settings dialog shows up instead.
In this case, you can wait for either a "New email" button, or a dialog and act accordingly:
Use new options
hasNot
andhasNotText
in [locator.filter()
][locator.filter()]to find elements that do not match certain conditions.
Use new web-first assertion [
locatorAssertions.toBeAttached()
][locatorAssertions.toBeAttached()] to ensure that the elementis present in the page's DOM. Do not confuse with the [
locatorAssertions.toBeVisible()
][locatorAssertions.toBeVisible()] that ensures thatelement is both attached & visible.
New APIs
locator.or()
][locator.or()]hasNot
in [locator.filter()
][locator.filter()]hasNotText
in [locator.filter()
][locator.filter()]locatorAssertions.toBeAttached()
][locatorAssertions.toBeAttached()]timeout
in [route.fetch()
][route.fetch()]reporter.onExit()
][reporter.onExit()]mcr.microsoft.com/playwright:v1.33.0
now serves a Playwright image based on Ubuntu Jammy.To use the focal-based image, please use
mcr.microsoft.com/playwright:v1.33.0-focal
instead.Browser Versions
This version was also tested against the following stable channels:
sveltejs/kit
v1.16.3
Compare Source
Patch Changes
fix: entry generation with mixed segments (#9879)
fix: use
focusVisible: false
to prevent unwanted focus ring on navigation (#9861)v1.16.2
Compare Source
Patch Changes
fix: support Node 20 (
6e2efcf62
)fix: reset focus synchronously on navigation (#9837)
v1.16.1
Compare Source
Patch Changes
fix: realign state.branch on the client on first load (#9754)
fix: update
$page.data
correctly after invalidate (#9798)fix: file not found in manifest (#9846)
v1.16.0
Compare Source
Minor Changes
export const entries
(#9571)v1.15.11
Compare Source
Patch Changes
chore: more compact representation for invalidated search param (#9708)
chore: fix import path to app script on windows (#9743)
fix: make $app/navigation more resilient to bundler reordering (#9808)
fix: page load
fetch()
now accepts the same input types for the body as the native fetch function (#9801)fix: handle preload and filterSerializedResponseHeaders in sequence function (#9741)
v1.15.10
Compare Source
Patch Changes
v1.15.9
Compare Source
Patch Changes
fix: correctly replace state when
data-sveltekit-replacestate
is used with a hash link (#9751)fix: compute trailing slash on page server / data request (#9738)
fix: update vite-plugin-svelte to fix windows resolution issue (#9769)
v1.15.8
Compare Source
Patch Changes
chore: revert undici pin and upgrade version (#9740)
chore: upgrade vite-plugin-svelte for resolve improvements and warnings (#9742)
typescript-eslint/typescript-eslint (@typescript-eslint/eslint-plugin)
v5.59.5
Compare Source
Note: Version bump only for package @typescript-eslint/eslint-plugin
v5.59.2
Compare Source
Note: Version bump only for package @typescript-eslint/eslint-plugin
v5.59.1
Compare Source
Bug Fixes
typescript-eslint/typescript-eslint (@typescript-eslint/parser)
v5.59.5
Compare Source
Note: Version bump only for package @typescript-eslint/parser
v5.59.2
Compare Source
Note: Version bump only for package @typescript-eslint/parser
v5.59.1
Compare Source
Note: Version bump only for package @typescript-eslint/parser
anchore/sbom-action
v0.14.2
Compare Source
Changes in v0.14.2
output-file
(#411) [gszr]cue-lang/cue
v0.5.0
Compare Source
This release focuses on changes to the implementation of comprehensions, the algorithm for detecting cycles in CUE, and the reimplementation of
let
comprehensions as fields.Also included are a number of bug fixes and changes to help the KubeVela project upgrade off CUE v0.2.2 to the latest release. v0.5.0 is the first release since v0.4.3 back in April 2022. It has been a long time in the making, and is comprised of 277 commits.
It is worth noting that we do not plan nor wish for such long gaps between releases. For more details on upcoming releases and steps we are taking to increase release cadence as well as our confidence in each release, please see this discussion.
As a reminder: users can register their projects with
unity
, our regression and performance testing setup.unity
is used to ensure that a project's CUE evaluations do not unexpectedly stop working, or regress in terms of performance.unity
continues to catch multiple issues with each release. Adding your project tounity
not only guarantees that we will not break your tests (if we do, we will work with you to fix your CUE code), but it also helps to improve the quality of each CUE release. We are currently in the process of releasing Unity as a GitHub App on the public Marketplace. Sign up to receive updates; we will be in touch as soon as the GitHub App is ready.Thank you to @djosephsen, @joaopapereira, @mpvl, @mvdan, @myitcv, @qequ, @rogpeppe, @rytswd, @satotake, @spachava753, and @tmm1 for contributing to this release!
Project-level changes
Various CI-related changes have been made to simplify and streamline the GerritHub-based CI setup across the various CUE repositories. A common
base
package is vendored into each repository and used as a template for GitHub workflows and other configuration. For those interested in studying the setup, please see the files beneathinternal/ci
.This release drops support for
go1.16.x
,go1.17.x
andgo1.18.x
, is tested againstgo1.19.x
andgo1.20.x
, and is built usinggo1.20.2
.Our dependency on
github.com/rogpeppe/go-internal
is upgraded tov1.9.0
and varioustestscript
-related improvements have been made to CUE's tests.GoReleaser has been upgrade to v1.16.2 as part of the release workflow. In a related change, CL 546920 moves us to a CUE-based source configuration for GoReleaser. This allows us to define the concept of 'latest', state which indicates whether we should perform the homebrew release and the Docker manifest latest steps. This fixes a long-standing bug whereby homebrew taps and Docker images were created for the latest release, regardless of whether that was a pre-release, or indeed a patch version of a non-current minor version.
As of CL 547507, CUE build artefacts published on GitHub are entirely reproducible, thanks to Go's support for reproducible, verifiable and verified builds.
Encoders
When
cue import
-ing YAML, the-R
recursive flag now only recursively interprets text as YAML if it contains a newline CL 536902.API
Various APIs have been transitioned to drop use of the deprecated
cue.Runtime
type, as well as migrating away fromcue.Instance
viacue.InstanceOrValue
. Some use of these deprecated types remains: #1035, #1735, #1806. These will be tidied up in later releases as the API surface matures towards v1.0.0.The
cue
package now supportsInlineImports
forValue.Syntax
CL 541561. This leverages new support within the internal exporter to creating self-contained CUE. This change also deprecatesValue.ResolveReferences()
.Package
cue
addsSelector.Type
to make it easier to pull out selector-specific information from a selector (for example, it makes it possible and cheap to retrieve the unquoted string label from a regular field selector) CL 542738.Package
cue
addsValue.BuildInstance()
. If acue.Value
exactly represents a package,BuildInstance()
returns the build instance corresponding to the value CL 542769.cue/stats
is introduced as a new package for getting CUE operation statistics. The functionality is hoisted frominternal/core/adt
, but the package should for all practical purposes be seen as a new implementation. The stats have been aggregated as experimental functionality to thetools/flow
package.CL 546763 disallowed deprecated language features in the Go API. These features had long been deprecated in
cmd/cue
. This means that API operations will now fail on deprecated features whereas before they were handled in compatibility mode. Theparser.FromVersion
feature can be used to reenable these deprecated features.Language
This release does not introduce any language changes. CL 537264 made some minor adjustments to the language specification to improve readability.
CL 541457 removes support for re-writing of old-style
let
declarations. This had already been deprecated for a long time and this change was made to enable support for aliases of embeddings.Core evaluator
Per-field comprehensions
One of the major changes introduced in this release is how comprehensions are handled. CL 529524 move the evaluator to a model of per-field comprehensions.
Comprehensions are expanded
for
,if
, andlet
clauses that yield zero or more structs to be embedded in the enclosing list or struct.CUE does not allow cyclic dependencies between comprehensions if they result in an ambiguous set of fields. It does allow cascading insertions as in:
The way this works is that for fields with a fixed prefix path in a comprehension value, the comprehension is assigned to these respective fields.
More concretely, the above example is rewritten to:
where the fields with if clause are only inserted if their condition resolves to true. Note that this is not valid CUE; it may be in the future.
With this rewrite, dependencies in comprehension expressions are handled analogously to other expressions.
Note that a single comprehension may be distributed across multiple fields. The evaluator will ensure, however, that a comprehension is only evaluated once.
Analogous to reference cycles, as of CL 544129 we allow comprehensions to use the struct in which they are defined as source, as long as they do not introduce new fields, which would alter the source on which they iterate.
Reimplementation of cycle detection
The new algorithm is inspired by the cycle detection used by Tomabechi's 1 and Van Lohuizen's 2 graph unification algorithms.
Unlike with traditional graph unification, however, CUE uses references, which, unlike node equivalence, are unidirectional. This means that the technique to track equivalence through dereference, as common in graph unification algorithms like Tomabechi's, does not work unaltered.
The unidirectional nature of references imply that each reference equates an exact copy of the value it points to. This renders the original approach of node-pointer equivalence useless.
The new algorithm, a variant of Tomabechi's and Van Lohuizen's algorithm, looks at references equality on conjuncts, instead of node equality. This simplifies the accounting and allows for far simpler and precise accounting when using references instead of the traditional node equivalence.
More background info on cycles
We have to define when a cycle is detected. CUE implementations MUST report an error upon a structural cycle, and SHOULD report cycles at the shortest possible paths at which they occur, but MAY report these at deeper paths. For instance, the following CUE has a structural cycle:
The shortest path at which the cycle can be reported is
f.g
, but as all failed configurations are logically equal, it is fine for implementations to report them atf.g.g
, for instance.It is not, however, correct to assume that a reference to a parent is always a cycle. Consider this case:
Even though reference
a
refers to a parent node, the cycle needs to be fed by a concrete field in structa
to persist, meaning it cannot result in a cycle as defined in the spec as it is defined here. Note however, that a specialization of this configuration can result in a cycle. ConsiderHere reference
a
is guaranteed to result in a structural cycle, as fieldc
will match the pattern constraint unconditionally.In other words, it is not possible to exclude tracking references across pattern constraints from cycle checking.
It is tempting to try to find a complete set of these edge cases with the aim to statically determine cases in which this occurs. But as Carpenter [^Carpenter] demonstrates, it is possible for cycles to be created as a result of unifying two graphs that are themselves acyclic. The following example is a translation of Carpenters example to CUE:
Even though the above contains no cycles, the result of
x & y
is cyclic:This means that, in practice, cycle detection has at least partially a dynamic component to it.
The language specification contains a higher-level and more complete overview of structural cycles.
Hideto Tomabechi. 1992. Quasi-Destructive Graph Unification with
Structure-Sharing. In COLING 1992 Volume 2: The 14th International
Conference on Computational Linguistics.
Marcel P. van Lohuizen. 2000. "Memory-Efficient and Thread-Safe
Quasi-Destructive Graph Unification". In Proceedings of the 38th Annual
Meeting of the Association for Computational Linguistics, pages 352–359,
Hong Kong. Association for Computational Linguistics.
[^Carpenter]:
Bob Carpenter, "The logic of typed feature structures."
Cambridge University Press, ISBN:0-521-41932-8
Reimplementation of
let
comprehensionsCL 543362 made a change to
internal/core
to reimplementlet
comprehensions as fields. This makes it easier to track context aslet
comprehensions then follow the same paradigm as fields. It also allows debug information to be shown as to where lets are added in the tree. This change was accompanied by number of others that refined the approach.Self-contained export
internal/core/export
now implements an algorithm for generating self-contained CUE on export, an option that can further be refined by asking the exporter to inline imports. These internal changes manifest in changes tocue def
andcuelang.org/go/cue
that are described elsewhere.Other changes
CL 545897 started tracking stats within the core CUE tests. This book keeping helps to spot likely regressions in performance early by collocating the stats with the CUE that is being evaluated.
Builtins
In the
strconv
package,strconv.FormatInt
andstrconv.FormatUint
now support arbitary-precision format; see CL 538512.CL 545898 improved the error messages for
pkg
builtins, by including the path in error in many cases, and passing a wrapped message forencoding/yaml
.CL 546237 allows incomplete
list.MinItems
constraints. Before it either returnedfalse
ortrue
, ignoring that making a configuration more specific might still satisfyMinItems
later on. CL 546238 made a similar change forstruct.MinFields
.Tooling layer
Standard input is now parsed correctly in
cue cmd
-declared command tasks; see CL 541898.cmd/cue
Version control system (VCS) information is included in
cue version
as of CL 540297. The Go version used to buildcmd/cue
is included as of CL 549302.cue def
now supports an--inline-imports
flag which resolves imports to print a self-contained version of the command input. For example, given thetxtar
input:The running
cue def --inline-imports in.cue
will give:CL 546243 fixed a long-standing bug whereby the
--ignore
errors flag was not observed bycue eval
.Changelog
d780488
a1d9054
af01db1
22156ef
a4403eb
0eaee71
584b21e
7c07680
9f3af8f
390bca5
a14fbf4
be0601b
by @myitcv inf4d04a7
374a2cc
c0421b4
1ce9120
87c79ef
28321f6
5d42c6c
3ba76ba
576d0e4
ca411de
89693e1
9b1f248
63749fe
d573e0c
352a736
5a6bd19
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Mend Renovate. View repository job log here.
Footnotes
https://aclanthology.org/C92-2068 ↩
https://aclanthology.org/P00-1045/ ↩