Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly
Sign up
Appearance settings

Bump json5, @babel/core, prepack, loader-utils, html-webpack-plugin, jest and webpack #76

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
dependabot wants to merge 1 commit into master
base: master
Choose a base branch
Loading
from dependabot/npm_and_yarn/json5-and-babel/core-and-prepack-and-loader-utils-and-html-webpack-plugin-and-jest-and-webpack-1.0.2

Conversation

Copy link

@dependabot dependabot bot commented on behalf of github Aug 9, 2023

Bumps json5 to 1.0.2 and updates ancestor dependencies json5, @babel/core, prepack, loader-utils, html-webpack-plugin, jest and webpack. These dependencies need to be updated together.

Updates json5 from 0.5.1 to 1.0.2

Release notes

Sourced from json5's releases.

v1.0.2

  • Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295). This has been backported to v1. (#298)

v1.0.1

This release includes a bug fix and minor change.

  • Fix: parse throws on unclosed objects and arrays.

  • New: package.json5 has been removed until an easier way to keep it in sync with package.json is found.

v1.0.0

This release includes major internal changes and public API enhancements.

  • Major JSON5 officially supports Node.js v4 and later. Support for Node.js v0.10 and v0.12 have been dropped.

  • New: Unicode property names and Unicode escapes in property names are supported. (#1)

  • New: stringify outputs trailing commas in objects and arrays when a space option is provided. (#66)

  • New: JSON5 allows line and paragraph separator characters (U+2028 and U+2029) in strings in order to be compatible with JSON. However, ES5 does not allow these characters in strings, so JSON5 gives a warning when they are parsed and escapes them when they are stringified. (#70)

  • New: stringify accepts an options object as its second argument. The supported options are replacer, space, and a new quote option that specifies the quote character used in strings. (#71)

  • New: The CLI supports STDIN and STDOUT and adds --out-file, --space, and --validate options. See json5 --help for more information. (#72, #84, and #108)

  • New: In addition to the white space characters space \t, \v, \f, \n, \r, and \xA0, the additional white space characters \u2028, \u2029, and all other characters in the Space Separator Unicode category are allowed.

  • New: In addition to the character escapes \', \", \\, \b, \f, \n, \r, and \t, the additional character escapes \v and 0円, hexadecimal escapes like \x0F, and unnecessary escapes like \a are allowed in string values and string property names.

  • New: stringify outputs strings with single quotes by default but intelligently uses double quotes if there are more single quotes than double quotes inside the string. (i.e. stringify('Stay here.') outputs 'Stay here.' while stringify('Let\'s go.') outputs "Let's go.")

... (truncated)

Changelog

Sourced from json5's changelog.

Unreleased [code, diff]

v2.2.3 [code, diff]

  • Fix: json5@2.2.3 is now the 'latest' release according to npm instead of v1.0.2. (#299)

v2.2.2 [code, diff]

  • Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

v2.2.1 [code, diff]

v2.2.0 [code, diff]

  • New: Accurate and documented TypeScript declarations are now included. There is no need to install @types/json5. (#236, #244)

v2.1.3 [code, diff]

  • Fix: An out of memory bug when parsing numbers has been fixed. (#228, #229)

v2.1.2 [code, diff]

... (truncated)

Commits

Updates @babel/core from 7.0.0-beta.49 to 7.22.10

Release notes

Sourced from @​babel/core's releases.

v7.22.10 (2023年08月07日)

Thanks @​DimitriPapadopoulos, @​FabianWarnecke, @​JoshuaKGoldberg, and @​YYvanYang for your first pull requests!

🐛 Bug Fix

  • babel-plugin-transform-typescript
  • babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-proposal-destructuring-private, babel-plugin-transform-class-properties, babel-plugin-transform-class-static-block, babel-plugin-transform-new-target, babel-plugin-transform-private-methods, babel-preset-env
    • #15701 Memoize class binding when compiling private methods and static elements (@​JLHwung)

💅 Polish

🏠 Internal

  • Other
  • babel-cli, babel-core, babel-generator, babel-helper-builder-react-jsx, babel-preset-env, babel-standalone
  • babel-helper-compilation-targets
  • babel-parser
  • babel-plugin-transform-runtime, babel-traverse, babel-types

🔬 Output optimization

  • babel-plugin-transform-block-scoping, babel-plugin-transform-parameters, babel-plugin-transform-regenerator

Committers: 9

7.22.9

v7.22.9 (2023年07月12日)

... (truncated)

Changelog

Sourced from @​babel/core's changelog.

v7.22.10 (2023年08月07日)

🐛 Bug Fix

  • babel-plugin-transform-typescript
  • babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-proposal-destructuring-private, babel-plugin-transform-class-properties, babel-plugin-transform-class-static-block, babel-plugin-transform-new-target, babel-plugin-transform-private-methods, babel-preset-env
    • #15701 Memoize class binding when compiling private methods and static elements (@​JLHwung)

💅 Polish

🏠 Internal

  • Other
  • babel-cli, babel-core, babel-generator, babel-helper-builder-react-jsx, babel-preset-env, babel-standalone
  • babel-helper-compilation-targets
  • babel-parser
  • babel-plugin-transform-runtime, babel-traverse, babel-types

🔬 Output optimization

  • babel-plugin-transform-block-scoping, babel-plugin-transform-parameters, babel-plugin-transform-regenerator

v7.22.9 (2023年07月12日)

🐛 Bug Fix

💅 Polish

🏠 Internal

v7.22.8 (2023年07月06日)

↩️ Revert

  • babel-core, babel-traverse

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by nicolo-ribaudo, a new releaser for @​babel/core since your current version.


Updates prepack from 0.2.25 to 0.2.54

Release notes

Sourced from prepack's releases.

v0.2.54

  • Fix referentialization of optimized functions
  • Fix serialization issues for nested optimized functions
  • Model aliasing effects for array loop operators
  • Fix dependency issues with cyclic prototype dependencies
  • Fix problem where a bind call can use a variable before its definition
  • Speed up visitor by skipping redundant generator scopes

v0.2.52

  • Bugfixes
  • User-level stack overflows no longer crash prepack
  • Website shows warnings when Prepack produces diagnostics

v0.2.51

  • Fixed bugs that could cause generated code to throw
  • Improved evaluation of abstract conditionals
  • Added CLI options --warnaserror, --diagnosticaserror, --nodiagnostic
  • Added full support for React.Children.map mock

v0.2.50

Highlights: Make simplification more robust when complexity limits are reached reduces loop iteration counter to 6 before bailing out We weren’t using the correct initializerAstNodeName in two places Tease apart expressions vs. statements for operation descriptors Simplify equality expressions where types are known Refactor AbstractObjectValue to use evaluateWithAbstractConditional Allow invalid render return values in the React reconciler update Babel 7 to stable release Speed up simplifier by using an implication cache per path branch Add basic support for throws in React

v0.2.49

Fixes #2419 #2386 #2439 #2447 #2432 #2437 #2442

  • Fix havoced binding not in optimized function
  • Allow arrays with widened numeric properties to update index properties
  • Fix nested for statement bailout with nested for-in
  • Don’t record modified bindings for immutable bindings when havocing

v0.2.48

Fixes #2151 #2222 #2279 #2393 #2399 #2404 #2411 #2414 #2415 Added a fuzz testing tool Added test cases Turn crash in JSON.stringify into a diagnostic Adds a arrayNestedOptimizedFunctionsEnabled flag to enable nested optimized functions derived from Array.prototype methods (like map) and Array.from Refactor assignment on partial or possibly deleted property Rewrote the joining logic to always do a full join at every join point Removed last remnants of delayUnsupportedRequires

... (truncated)

Commits
  • 8c92608 Weekly release v0.2.54
  • 1f5664f Adds RCTActivityIndicatorView literal reference (#2588)
  • 473470a Filter ModifiedBindings by environment's creating optimized function (#2551)
  • 7f0c13a Fixes a bug in evaluatePure (#2585)
  • ffd230e Model aliasing effects for array loop operators (#2570)
  • 4f250d1 Remove side-effects from react-mocks (#2584)
  • 5fc6fee Unify logic for checking for intrinsic objects that have been derived (#2581)
  • ed784d6 Add abstract support to Object.getOwnPropertySymbols (#2575)
  • 0ef3c43 Change initializeMoreModules to modulesToInitialize allowing you to s... (#2576)
  • 47cb48b Adds support for abstract length arrays in React reconcilation and serializat...
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by gaearon, a new releaser for prepack since your current version.


Updates loader-utils from 1.1.0 to 1.4.2

Release notes

Sourced from loader-utils's releases.

v1.4.2

1.4.2 (2022年11月11日)

Bug Fixes

v1.4.1

1.4.1 (2022年11月07日)

Bug Fixes

v1.4.0

1.4.0 (2020年02月19日)

Features

  • the resourceQuery is passed to the interpolateName method (#163) (cd0e428)

v1.3.0

1.3.0 (2020年02月19日)

Features

  • support the [query] template for the interpolatedName method (#162) (469eeba)

v1.2.3

1.2.3 (2018年12月27日)

Bug Fixes

  • interpolateName: don't interpolated hashType without hash or contenthash (#140) (3528fd9)

v1.2.2

1.2.2 (2018年12月27日)

Bug Fixes

... (truncated)

Changelog

Sourced from loader-utils's changelog.

1.4.2 (2022年11月11日)

Bug Fixes

1.4.1 (2022年11月07日)

Bug Fixes

1.4.0 (2020年02月19日)

Features

  • the resourceQuery is passed to the interpolateName method (#163) (cd0e428)

1.3.0 (2020年02月19日)

Features

  • support the [query] template for the interpolatedName method (#162) (469eeba)

1.2.3 (2018年12月27日)

Bug Fixes

  • interpolateName: don't interpolated hashType without hash or contenthash (#140) (3528fd9)

1.2.2 (2018年12月27日)

Bug Fixes

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by evilebottnawi, a new releaser for loader-utils since your current version.


Updates html-webpack-plugin from 2.30.1 to 5.5.3

Changelog

Sourced from html-webpack-plugin's changelog.

5.5.3 (2023年06月10日)

Bug Fixes

5.5.2 (2023年06月08日)

Bug Fixes

5.5.1 (2023年04月15日)

Bug Fixes

  • perf: defer loading of pretty-error to improve startup time (#1789) (988709d)

5.5.0 (2021年10月25日)

Features

  • Support type=module via scriptLoading option (1e42625), closes #1663

5.4.0 (2021年10月15日)

Features

5.3.2 (2021年06月22日)

Bug Fixes

  • update lodash and pretty error (9c7fba0

5.3.1 (2021年03月09日)

Bug Fixes

  • remove loader-utils from plugin core (82d0ee8)

5.3.0 (2021年03月07日)

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by evilebottnawi, a new releaser for html-webpack-plugin since your current version.


Updates jest from 21.2.1 to 29.6.2

Release notes

Sourced from jest's releases.

v29.6.2

Fixes

  • [jest-circus] Fix snapshot matchers in concurrent tests when nr of tests exceeds maxConcurrency (#14335)
  • [@jest/core] When running global setup and teardown, do not try to change the message property of the thrown error object when the message property is unwritable (#14113)
  • [jest-snapshot] Move @types/prettier from dependencies to devDependencies (#14328)
  • [jest-snapshot] Throw an explicit error if Prettier v3 is used (#14367)
  • [jest-reporters] Add "skipped" and "todo" symbols to Github Actions Reporter (#14309)

Chore & Maintenance

  • [@jest/core] Use pluralize from jest-util rather than own internal (#14322)

New Contributors

Full Changelog: jestjs/jest@v29.6.1...v29.6.2

v29.6.1

Fixes

  • [jest-circus] Revert #14110 as it was a breaking change (#14304)

Full Changelog: jestjs/jest@v29.6.0...v29.6.1

v29.6.0

Features

  • [jest-circus, jest-snapshot] Add support for snapshot matchers in concurrent tests (#14139)
  • [jest-cli] Include type definitions to generated config files (#14078)
  • [jest-snapshot] Support arrays as property matchers (#14025)
  • [jest-core, jest-circus, jest-reporter, jest-runner] Added support for reporting about start individual test cases using jest-circus (#14174)

Fixes

  • [jest-circus] Prevent false test failures caused by promise rejections handled asynchronously (#14110)
  • [jest-config] Handle frozen config object (#14054)
  • [jest-config] Allow coverageDirectory and collectCoverageFrom in project config (#14180)
  • [jest-core] Always use workers in watch mode to avoid crashes (#14059).
  • [jest-environment-jsdom, jest-environment-node] Fix assignment of customExportConditions via testEnvironmentOptions when custom env subclass defines a default value (#13989)
  • [jest-matcher-utils] Fix copying value of inherited getters (#14007)
  • [jest-mock] Tweak typings to allow jest.replaceProperty() replace methods (#14008)
  • [jest-mock] Improve user input validation and error messages of spyOn and replaceProperty methods (#14087)
  • [jest-runtime] Bind jest.isolateModulesAsync to this (#14083)
  • [jest-runtime] Forward wrapperLength to the Script constructor as columnOffset for accurate debugging (#14148)
  • [jest-runtime] Guard _isMockFunction access with in (#14188)
  • [jest-snapshot] Fix a potential bug when not using prettier and improve performance (#14036)

... (truncated)

Changelog

Sourced from jest's changelog.

29.6.2

Fixes

  • [jest-circus] Fix snapshot matchers in concurrent tests when nr of tests exceeds maxConcurrency (#14335)
  • [@jest/core] When running global setup and teardown, do not try to change the message property of the thrown error object when the message property is unwritable (#14113)
  • [jest-snapshot] Move @types/prettier from dependencies to devDependencies (#14328)
  • [jest-snapshot] Throw an explicit error if Prettier v3 is used (#14367)
  • [jest-reporters] Add "skipped" and "todo" symbols to Github Actions Reporter (#14309)

Chore & Maintenance

  • [@jest/core] Use pluralize from jest-util rather than own internal (#14322)

29.6.1

Fixes

  • [jest-circus] Revert #14110 as it was a breaking change (#14304)

29.6.0

Features

  • [jest-circus, jest-snapshot] Add support for snapshot matchers in concurrent tests (#14139)
  • [jest-cli] Include type definitions to generated config files (#14078)
  • [jest-snapshot] Support arrays as property matchers (#14025)
  • [jest-core, jest-circus, jest-reporter, jest-runner] Added support for reporting about start individual test cases using jest-circus (#14174)

Fixes

  • [jest-circus] Prevent false test failures caused by promise rejections handled asynchronously (#14110)
  • [jest-config] Handle frozen config object (#14054)
  • [jest-config] Allow coverageDirectory and collectCoverageFrom in project config (#14180)
  • [jest-core] Always use workers in watch mode to avoid crashes (#14059).
  • [jest-environment-jsdom, jest-environment-node] Fix assignment of customExportConditions via testEnvironmentOptions when custom env subclass defines a default value (#13989)
  • [jest-matcher-utils] Fix copying value of inherited getters (#14007)
  • [jest-mock] Tweak typings to allow jest.replaceProperty() replace methods (#14008)
  • [jest-mock] Improve user input validation and error messages of spyOn and replaceProperty methods (#14087)
  • [jest-runtime] Bind jest.isolateModulesAsync to this (#14083)
  • [jest-runtime] Forward wrapperLength to the Script constructor as columnOffset for accurate debugging (#14148)
  • [jest-runtime] Guard _isMockFunction access with in (#14188)
  • [jest-snapshot] Fix a potential bug when not using prettier and improve performance (#14036)
  • [@jest/transform] Do not instrument .json modules (#14048)
  • [jest-worker] Restart a shut down worker before sending it a task (#14015)

Chore & Maintenance

  • [*] Update semver dependency to get vulnerability fix (#14262)
  • [docs] Updated documentation for the --runTestsByPath CLI command (#14004)

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by simenb, a new releaser for jest since your current version.


Updates webpack from 3.11.0 to 5.88.2

Release notes

Sourced from webpack's releases.

v5.88.2

Bug Fixes

Full Changelog: webpack/webpack@v5.88.1...v5.88.2

v5.88.1

Developer Experience

Full Changelog: webpack/webpack@v5.88.0...v5.88.1

v5.88.0

New Features

Bug Fixes

Developer Experience

Dependencies & Maintenance

New Contributors

Full Changelog: webpack/webpack@v5.87.0...v5.88.0

v5.87.0

New Features

Bug Fixes

Developer Experience

... (truncated)

Commits
Maintainer changes

This version was pushed to np...

Description has been truncated

 

...jest and webpack
Bumps [json5](https://github.com/json5/json5) to 1.0.2 and updates ancestor dependencies [json5](https://github.com/json5/json5), [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core), [prepack](https://github.com/facebook/prepack), [loader-utils](https://github.com/webpack/loader-utils), [html-webpack-plugin](https://github.com/jantimon/html-webpack-plugin), [jest](https://github.com/facebook/jest/tree/HEAD/packages/jest) and [webpack](https://github.com/webpack/webpack). These dependencies need to be updated together.
Updates `json5` from 0.5.1 to 1.0.2
- [Release notes](https://github.com/json5/json5/releases)
- [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md)
- [Commits](json5/json5@v0.5.1...v1.0.2)
Updates `@babel/core` from 7.0.0-beta.49 to 7.22.10
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.22.10/packages/babel-core)
Updates `prepack` from 0.2.25 to 0.2.54
- [Release notes](https://github.com/facebook/prepack/releases)
- [Commits](facebookarchive/prepack@v0.2.25...v0.2.54)
Updates `loader-utils` from 1.1.0 to 1.4.2
- [Release notes](https://github.com/webpack/loader-utils/releases)
- [Changelog](https://github.com/webpack/loader-utils/blob/v1.4.2/CHANGELOG.md)
- [Commits](webpack/loader-utils@v1.1.0...v1.4.2)
Updates `html-webpack-plugin` from 2.30.1 to 5.5.3
- [Release notes](https://github.com/jantimon/html-webpack-plugin/releases)
- [Changelog](https://github.com/jantimon/html-webpack-plugin/blob/main/CHANGELOG.md)
- [Commits](jantimon/html-webpack-plugin@v2.30.1...v5.5.3)
Updates `jest` from 21.2.1 to 29.6.2
- [Release notes](https://github.com/facebook/jest/releases)
- [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/jest/commits/v29.6.2/packages/jest)
Updates `webpack` from 3.11.0 to 5.88.2
- [Release notes](https://github.com/webpack/webpack/releases)
- [Commits](webpack/webpack@v3.11.0...v5.88.2)
---
updated-dependencies:
- dependency-name: json5
 dependency-type: indirect
- dependency-name: "@babel/core"
 dependency-type: indirect
- dependency-name: prepack
 dependency-type: direct:production
- dependency-name: loader-utils
 dependency-type: indirect
- dependency-name: html-webpack-plugin
 dependency-type: direct:development
- dependency-name: jest
 dependency-type: direct:development
- dependency-name: webpack
 dependency-type: direct:development
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Aug 9, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants

AltStyle によって変換されたページ (->オリジナル) /