fix(deps): update starters and examples - #77
Open
renovate[bot] wants to merge 1 commit into
Open
Conversation
renovate
Bot
force-pushed
the
renovate/starters-examples-minor
branch
2 times, most recently
from
September 16, 2021 17:12
be86982 to
8c63e24
Compare
renovate
Bot
force-pushed
the
renovate/starters-examples-minor
branch
from
September 24, 2021 11:58
8c63e24 to
1bb39dd
Compare
renovate
Bot
force-pushed
the
renovate/starters-examples-minor
branch
from
October 28, 2021 10:16
1bb39dd to
361c24c
Compare
renovate
Bot
force-pushed
the
renovate/starters-examples-minor
branch
2 times, most recently
from
November 25, 2021 15:11
e2da422 to
c98d91f
Compare
renovate
Bot
force-pushed
the
renovate/starters-examples-minor
branch
from
December 4, 2021 19:43
c98d91f to
d1f5a0f
Compare
renovate
Bot
force-pushed
the
renovate/starters-examples-minor
branch
2 times, most recently
from
December 27, 2021 23:44
a6d77a6 to
ffa0434
Compare
renovate
Bot
force-pushed
the
renovate/starters-examples-minor
branch
3 times, most recently
from
January 6, 2022 20:16
8df4270 to
1fb278b
Compare
renovate
Bot
force-pushed
the
renovate/starters-examples-minor
branch
from
February 18, 2022 00:08
1fb278b to
b198754
Compare
renovate
Bot
force-pushed
the
renovate/starters-examples-minor
branch
3 times, most recently
from
March 22, 2022 19:05
c1970e6 to
72f6e06
Compare
renovate
Bot
force-pushed
the
renovate/starters-examples-minor
branch
2 times, most recently
from
March 31, 2022 20:32
703d7ac to
65ba81e
Compare
renovate
Bot
force-pushed
the
renovate/starters-examples-minor
branch
from
April 2, 2022 23:16
65ba81e to
20def9b
Compare
renovate
Bot
force-pushed
the
renovate/starters-examples-minor
branch
3 times, most recently
from
April 23, 2022 22:23
0244419 to
8db21e0
Compare
renovate
Bot
force-pushed
the
renovate/starters-examples-minor
branch
from
April 30, 2022 20:58
8db21e0 to
635fb08
Compare
renovate
Bot
force-pushed
the
renovate/starters-examples-minor
branch
3 times, most recently
from
June 16, 2022 13:56
96ed887 to
7f32632
Compare
renovate
Bot
force-pushed
the
renovate/starters-examples-minor
branch
from
July 28, 2022 19:39
7f32632 to
470ce4c
Compare
renovate
Bot
force-pushed
the
renovate/starters-examples-minor
branch
from
August 29, 2022 06:38
d8362ea to
0369d0a
Compare
renovate
Bot
force-pushed
the
renovate/starters-examples-minor
branch
from
September 12, 2022 01:55
0369d0a to
b55464d
Compare
renovate
Bot
force-pushed
the
renovate/starters-examples-minor
branch
2 times, most recently
from
September 26, 2022 01:13
22ad07c to
e6b72c4
Compare
renovate
Bot
force-pushed
the
renovate/starters-examples-minor
branch
from
October 3, 2022 03:50
e6b72c4 to
814db35
Compare
renovate
Bot
force-pushed
the
renovate/starters-examples-minor
branch
2 times, most recently
from
June 19, 2023 01:40
d31e0f9 to
cbd01fd
Compare
renovate
Bot
force-pushed
the
renovate/starters-examples-minor
branch
from
June 26, 2023 00:20
cbd01fd to
9bf8d82
Compare
renovate
Bot
force-pushed
the
renovate/starters-examples-minor
branch
from
July 17, 2023 02:16
9bf8d82 to
58513fd
Compare
renovate
Bot
force-pushed
the
renovate/starters-examples-minor
branch
from
July 31, 2023 01:43
58513fd to
6dfd411
Compare
renovate
Bot
force-pushed
the
renovate/starters-examples-minor
branch
2 times, most recently
from
August 14, 2023 00:40
96a19f6 to
efd9d24
Compare
renovate
Bot
force-pushed
the
renovate/starters-examples-minor
branch
2 times, most recently
from
August 28, 2023 00:30
8bee2bb to
62f3cfd
Compare
renovate
Bot
force-pushed
the
renovate/starters-examples-minor
branch
from
September 25, 2023 02:09
62f3cfd to
606d3d8
Compare
renovate
Bot
force-pushed
the
renovate/starters-examples-minor
branch
from
October 9, 2023 01:14
606d3d8 to
794f569
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^11.10.0→^11.14.0^11.10.0→^11.14.1^18.0.17→^18.3.31^18.0.6→^18.3.7^4.17.21→^4.18.1^2.7.1→^2.8.82.7.1→2.8.8^1.28.0→^1.30.00.14.7→0.17.4^4.7.4→^4.9.5Release Notes
emotion-js/emotion (@emotion/react)
v11.14.0Compare Source
Minor Changes
fc4d7bdThanks @Andarist! - Source code has been migrated to TypeScript. From now on type declarations will be emitted based on that, instead of being hand-written.Patch Changes
8dc1a6d,e1bf17e]:v11.13.5Compare Source
Patch Changes
#3270
77d930dThanks @emmatown! - Fix inconsistent hashes using development vs production bundles/exportsconditions when using@emotion/babel-pluginwithsourceMap: true(the default). This is particularly visible when using Emotion with the Next.js Pages router where thedevelopmentcondition is used when bundling code but not when importing external code with Node.js.Updated dependencies [
77d930d]:v11.13.3Compare Source
Patch Changes
#3232
0ce3ed0Thanks @ENvironmentSet! - Distributecssprop attachment over props that are union typesUpdated dependencies []:
v11.13.0Compare Source
Minor Changes
#3198
d8ff8a5Thanks @Andarist! - Migrated away from relying onprocess.env.NODE_ENVchecks to differentiate between production and development builds.Development builds (and other environment-specific builds) can be used by using proper conditions (see here). Most modern bundlers/frameworks already preconfigure those for the user so no action has to be taken.
Default files should continue to work in all environments.
#3215
a9f6912Thanks @Andarist! - Addededge-lightandworkerdconditions topackage.jsonmanifest to better serve users using Vercel Edge and Cloudflare Workers.Patch Changes
d8ff8a5,a9f6912]:v11.12.0Compare Source
Minor Changes
65a1eeaThanks @srmagura! - Automatic labeling at runtime is now an opt-in feature. DefineglobalThis.EMOTION_RUNTIME_AUTO_LABEL = truebefore Emotion gets initialized to enable it.Patch Changes
#3206
d1994c4Thanks @DiegoAndai! - Improved compatibility with the upcoming@types/reactfor React 19 where the globalJSXnamespace doesn't exist anymore#3208
56109e7Thanks @Andarist! - Only forward definedrefs to improve compatibility with the upcoming React 19Updated dependencies [
9ca22c6,b1d16b0,16d8a8c]:v11.11.4Compare Source
Patch Changes
5b82631dThanks @iegik! - Renamed an internalhasOwnPropertytohasOwn. This avoids problems in CommonJS environments when the consumer tries to prevent prototype pollution withObject.freeze(Object.prototype).v11.11.3Compare Source
Patch Changes
#3101
49c20b4fThanks @kyvong! - Fix Theme import for newer Typescript module resolution modesUpdated dependencies [
45c440fb]:v11.11.1Compare Source
Patch Changes
9357f337Thanks @naari3! - AddedElementTypeto the Emotion'sJSXnamespace. It's defined in the same way as the one in@types/reactand should make it possible to use components that returnstrings,Promises and other types that are valid in React.v11.11.0Compare Source
Patch Changes
#3029
eed5e6cfThanks @Andarist! - Fixed importing in Node ESMUpdated dependencies [
eed5e6cf]:v11.10.8Compare Source
Patch Changes
#3025
6bd13425Thanks @Andarist! - Fixed a parsing issue with&within nested functions in declaration values by updating the underlying parser (stylis).Updated dependencies [
6bd13425]:v11.10.6Compare Source
Patch Changes
#2985
4e172c2aThanks @emmatown! - Remove peer dependency on@babel/coreUpdated dependencies [
4e172c2a]:v11.10.5Compare Source
Patch Changes
#2905
4c0005f6Thanks @p-m-p! - Do not warn about@emotion/reactbeing loaded twice in Vitest as that might easily happen with mocked modules.#2929
13afe030Thanks @Andarist! - The support for@containerqueries has been added by updating the underlying parser (stylis) .Updated dependencies [
13afe030,c02b1214,d8a13bca]:v11.10.4Compare Source
Patch Changes
#2867
89b6dbb3Thanks @Andarist! - Externalized code referencingReact.useInsertionEffectto a separate@emotion/use-insertion-effect-with-fallbackspackage. This package should be used in your defined externals if you bundle Emotion for whatever reason. It referencesuseInsertionEffectin a very specific way that allows us to use it conditionally. However, if the code consuming Emotion is bundled as a library with Emotion in it then some bundlers might change the way in which we referenceuseInsertionEffectand that might create problems for bundlers used to consume the said library code. By externalizing this new package you can still bundle Emotion if you want to without running into this problem as you won't "destroy" the carefully crafted reference touseInsertionEffectin the process.Note that we don't recommend bundling Emotion. You should have very specific reasons to do so.
Updated dependencies [
89b6dbb3]:lodash/lodash (lodash)
v4.18.1Compare Source
Bugs
Fixes a
ReferenceErrorissue inlodashlodash-eslodash-amdandlodash.templatewhen using thetemplateandfromPairsfunctions from the modular builds. See #6167 (comment)These defects were related to how lodash distributions are built from the main branch using https://github.com/lodash-archive/lodash-cli. When internal dependencies change inside lodash functions, equivalent updates need to be made to a mapping in the lodash-cli. (hey, it was ahead of its time once upon a time!). We know this, but we missed it in the last release. It's the kind of thing that passes in CI, but fails bc the build is not the same thing you tested.
There is no diff on main for this, but you can see the diffs for each of the npm packages on their respective branches:
lodash: lodash/lodash@4.18.0-npm...4.18.1-npmlodash-es: lodash/lodash@4.18.0-es...4.18.1-eslodash-amd: lodash/lodash@4.18.0-amd...4.18.1-amdlodash.templatelodash/lodash@4.18.0-npm-packages...4.18.1-npm-packagesv4.18.0Compare Source
v4.18.0
Full Changelog: lodash/lodash@4.17.23...4.18.0
Security
_.unset/_.omit: Fixed prototype pollution viaconstructor/prototypepath traversal (GHSA-f23m-r3pf-42rh, fe8d32e). Previously, array-wrapped path segments and primitive roots could bypass the existing guards, allowing deletion of properties from built-in prototypes. Nowconstructorandprototypeare blocked unconditionally as non-terminal path keys, matchingbaseSet. Calls that previously returnedtrueand deleted the property now returnfalseand leave the target untouched._.template: Fixed code injection viaimportskeys (GHSA-r5fr-rjxr-66jc, CVE-2026-4800, 879aaa9). Fixes an incomplete patch for CVE-2021-23337. Thevariableoption was validated againstreForbiddenIdentifierCharsbutimportsKeyswas left unguarded, allowing code injection via the sameFunction()constructor sink.importskeys containing forbidden identifier characters now throw"Invalid imports option passed into _.template".Docs
_.templatein threat model and API docs (#6099)lower > upperbehavior in_.random(#6115)_.compactjsdoc (#6090)lodash.*modular packagesDiff
We have also regenerated and published a select number of the
lodash.*modular packages.These modular packages had fallen out of sync significantly from the minor/patch updates to lodash. Specifically, we have brought the following packages up to parity w/ the latest lodash release because they have had CVEs on them in the past:
v4.17.23Compare Source
prettier/prettier (prettier)
v2.8.8Compare Source
This version is a republished version of v2.8.7.
A bad version was accidentally published and it can't be unpublished, apologies for the churn.
v2.8.7Compare Source
diff
Allow multiple decorators on same getter/setter (#14584 by @fisker)
v2.8.6Compare Source
diff
Allow decorators on private members and class expressions (#14548 by @fisker)
v2.8.5Compare Source
diff
Support TypeScript 5.0 (#14391 by @fisker, #13819 by @fisker, @sosukesuzuki)
TypeScript 5.0 introduces two new syntactic features:
constmodifiers for type parametersexport type *declarationsAdd missing parentheses for decorator (#14393 by @fisker)
Add parentheses for
TypeofTypeAnnotationto improve readability (#14458 by @fisker)Support
max_line_length=offwhen parsing.editorconfig(#14516 by @josephfrazier)If an .editorconfig file is in your project and it sets
max_line_length=offfor the file you're formatting,it will be interpreted as a
printWidthofInfinityrather than being ignored(which previously resulted in the default
printWidthof 80 being applied, if not overridden by Prettier-specific configuration).v2.8.4Compare Source
diff
Fix leading comments in mapped types with
readonly(#13427 by @thorn0, @sosukesuzuki)Group params in opening block statements (#14067 by @jamescdavis)
This is a follow-up to #13930 to establish wrapping consistency between opening block statements and else blocks by
grouping params in opening blocks. This causes params to break to a new line together and not be split across lines
unless the length of params exceeds the print width. This also updates the else block wrapping to behave exactly the
same as opening blocks.
Ignore files in
.sl/(#14206 by @bolinfest)In Sapling SCM,
.sl/is the folder where it stores its state, analogous to.git/in Git. It should be ignored in Prettier like the other SCM folders.Recognize
@satisfiesin Closure-style type casts (#14262 by @fisker)Fix parens in inferred function return types with
extends(#14279 by @fisker)v2.8.3Compare Source
diff
Allow self-closing tags on custom elements (#14170 by @fisker)
See Angular v15.1.0 release note for details.
v2.8.2Compare Source
diff
Don't lowercase link references (#13155 by @DerekNonGeneric & @fisker)
Preserve self-closing tags (#13691 by @dcyriller)
Allow custom "else if"-like blocks with block params (#13930 by @jamescdavis)
#13507 added support for custom block keywords used with
else, but failed to allow block params. This updates printer-glimmer to allow block params with custom "else if"-like blocks.Preserve empty lines between nested SCSS maps (#13931 by @jneander)
Fix missing parentheses when an expression statement starts with
let[(#14000, #14044 by @fisker, @thorn0)Fix semicolon duplicated at the end of LESS file (#14007 by @mvorisek)
Fix no space after unary minus when followed by opening parenthesis in LESS (#14008 by @mvorisek)
Do not change case of property name if inside a variable declaration in LESS (#14034 by @mvorisek)
Fix formatting for auto-accessors with comments (#14038 by @fisker)
Add parentheses for TSTypeQuery to improve readability (#14042 by @onishi-kohei)
Fix displacing of comments in default switch case (#14047 by @thorn0)
It was a regression in Prettier 2.6.0.
Support type annotations on auto accessors via
babel-ts(#14049 by @sosukesuzuki)The bug that
@babel/parsercannot parse auto accessors with type annotations has been fixed. So we now support it viababel-tsparser.Fix formatting of empty type parameters (#14073 by @fisker)
Add parentheses to head of
ExpressionStatementinstead of the whole statement (#14077 by @fisker)Fix comments after directive (#14081 by @fisker)
Fix formatting for comments inside JSX attribute (#14082 by @fisker)
Quote numeric keys for json-stringify parser (#14083 by @fisker)
Fix removing commas from function arguments in maps (#14089 by @sosukesuzuki)
Do not insert space in LESS property access (#14103 by @fisker)
v2.8.1Compare Source
diff
Fix SCSS map in arguments (#9184 by @agamkrbit)
Support auto accessors syntax (#13919 by @sosukesuzuki)
Support for Auto Accessors Syntax landed in TypeScript 4.9.
(Doesn't work well with
babel-tsparser)v2.8.0Compare Source
diff
🔗 Release Notes
PrismJS/prism (prismjs)
v1.30.0Compare Source
What's Changed
currentScriptis set by a script tag by @lkuechler in #3863New Contributors
Full Changelog: PrismJS/prism@v1.29.0...v1.30.0
v1.29.0Compare Source
New components
1134bdfc859f99a0c8462a29321198232815f6994c87d418Updated components
c4cbeeaa6b824d47javaandsysctlcommands. (#3505)b9512b22cargocommand (#3488)3e9371370cad9ae50d4b6cb6RebeccaPurplecolor (#3448)646b2e0a64642716342a0039ca8eaeeeb0c2a9b4a090d063scsslang (#3501)2aed9ce7Updated plugins
098e30009a4e725b91dea0c8Other
05ee042a866b302e9561a9abb85e1ada15272f769d603ef4system-ui/theme-ui (theme-ui)
v0.17.4Compare Source
v0.17.2Compare Source
🐛 Bug Fix
Authors: 1
v0.17.1Compare Source
🐛 Bug Fix
Authors: 1
v0.17.0Compare Source
🚀 Enhancement
Authors: 2
v0.16.2Compare Source
🎉 This release contains work from new contributors! 🎉
Thanks for all your work!
❤️ Arun Sathiya (@arunsathiya)
❤️ Jeff Bell (@jhbell)
❤️ Paweł Kowalewski (@pawkow)
❤️ Sam Marxz (@sammarxz)
🐛 Bug Fix
🏠 Internal
Authors: 5