Bumps baseline-browser-mapping from 2.8.30 to 2.11.22.
Release notes
Sourced from baseline-browser-mapping's releases.
v2.11.0
What's Changed in 2.11.0
- feat: Adds a new
getTimeline() method for getting the series of minimum browser changes, either grouped by date or by browser.
- refactor: Substantial refactoring of the data compression process that replaces the full list of browsers from
@mdn/browser-compat-data and downstream-browsers.json and features from web-features (in their very pared down form) with a change-list timeline that reflects which versions supported Baseline (newly available) on a given date. Thanks to @swwind for the idea!
- refactor: Some common functions have been moved to a
util.ts module for use in other scripts.
- fix: Removes
process.exit() calls when unsupported option combinations are passed to getCompatibleVersions() and getAllVersions() in favour of throwing an Error. There is a small security risk with process.exit() calls that sites accepting unsanitised inputs could be the subject of attacks. Unsupported config options now throw and Error which should allow for more graceful handling. Thanks to @bnbdr for flagging this as vulnerability CVE-2026-45819 .
Fixes #134
Full Changelog: web-platform-dx/baseline-browser-mapping@v2.10.44...v2.11.0
v2.10.0
What's Changed
- Introduces support for Node 6 by refactoring all
Object.entries and Object.values instances and lowering ES target in Rollup to es2015.
- Adds specified Node version support in package.json for >=6.0.0.
- Refactors CLI code to avoid
parseArgs which is not supported by versions of Node prior to 18, changes import to require and changes Rollup export to cjs to allow execution on older versions of Node.
- Adds a new
legacy-test.js file that allows basic testing on older versions of Node where current versions of Jasmine and ESLint are not supported.
- Adds a test matrix to run tests on all even-numbered Node versions from 6 to 24.
- refactor publish workflows to support NPM's new OIDC integration
Full Changelog: web-platform-dx/baseline-browser-mapping@v2.9.24...v2.10.0
v2.9.3 - remove process.loadEnvFile()
What's Changed
Full Changelog: web-platform-dx/baseline-browser-mapping@v2.9.2...v2.9.3
v2.9.2 - fix browser support bug
What's Changed
v2.9.0 - Reduce frequency of data staleness warnings
This version introduces a number of changes to data staleness warnings in response to #105 , #107 and #109
- Data staleness warnings are now only shown if the
getCompatibleVersions() or getAllVersions() functions are called - previously they were shown whenever the module was loaded, which meant many browserslist consumers were seeing the warning despite not targeting Baseline, especially those who were consuming browserslist in a pre-compiled format via next.js.
- Adds new conditions for these warnings to be displayed which should only warn users for whom data freshness is critical:
- The feature cut off data must be within the last two months, i.e.
widelyAvailableOnDate: today + >2 years and 4 months or newly available in a browserslist query.
- The module data must be more than 2 months old.
- Introduces suppression options for these warning via the
options objects and environment variables:
- Adds a new
suppressWarnings boolean to the getCompatibleVersions() and getAllVersions()
- Respects the existing
BROWSERSLIST_IGNORE_OLD_DATA environment variable.
- Respects a new
BASELINE_BROWSER_MAPPING_IGNORE_OLD_DATA environment variable.
- Adds explanatory text to the README for how to avoid such warnings when reproducible builds are a requirement.
- Change warning text to be package manager agnostic and mention the possibility of pre-compiled data.
Commits
af7c3c4 Patch to 2.11.22 because browser or feature data changed
7e10cad Browser or feature data changed
ebb9702 Updating static site
ecc57a3 Updating static site
0e5ed80 Patch to 2.11.21 because browser or feature data changed
11da0b6 Browser or feature data changed
69fcc81 Updating static site
b964de0 Patch to 2.11.20 because browser or feature data changed
723099f Browser or feature data changed
f44163d Updating static site
- Additional commits viewable in compare view
Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for baseline-browser-mapping since your current version.
Dependabot compatibility score
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.
Bumps baseline-browser-mapping from 2.8.30 to 2.11.22.
Release notes
Sourced from baseline-browser-mapping's releases.
Commits
af7c3c4Patch to 2.11.22 because browser or feature data changed7e10cadBrowser or feature data changedebb9702Updating static siteecc57a3Updating static site0e5ed80Patch to 2.11.21 because browser or feature data changed11da0b6Browser or feature data changed69fcc81Updating static siteb964de0Patch to 2.11.20 because browser or feature data changed723099fBrowser or feature data changedf44163dUpdating static siteMaintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for baseline-browser-mapping since your current version.
Dependabot compatibility score
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.