Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bump the dependencies group with 5 updates #1372

Merged
merged 1 commit into from
Apr 28, 2024
Merged

Bump the dependencies group with 5 updates #1372

merged 1 commit into from
Apr 28, 2024

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Apr 27, 2024

Bumps the dependencies group with 5 updates:

Package From To
dompurify 3.1.0 3.1.1
@typescript-eslint/eslint-plugin 7.7.0 7.7.1
@typescript-eslint/parser 7.7.0 7.7.1
cssnano 6.1.2 7.0.1
stylelint 16.3.1 16.4.0

Updates dompurify from 3.1.0 to 3.1.1

Release notes

Sourced from dompurify's releases.

DOMPurify 3.1.1

  • Fixed an mXSS sanitiser bypass reported by @​icesfont
  • Added new code to track element nesting depth
  • Added new code to enforce a maximum nesting depth of 255
  • Added coverage tests and necessary clobbering protections

Note that this is a security release and should be upgraded to immediately. Please also note that further releases may follow as the underlying vulnerability is apparently new and further variations may be discovered.

Commits
  • 7a0a984 Merge pull request #944 from cure53/main
  • 7bbd12b chore: Preparing 3.1.1 release
  • 87eff29 Merge branch 'main' of github.com:cure53/DOMPurify
  • 809a902 fix: Set the MAX_NESTING_DEPTH to 255 for good measure and adjusted tests
  • 6ea80cd Merge pull request #943 from cure53/main
  • c0d418c Merge pull request #942 from kyselberg/main
  • 2a554b4 docs: additional info in example
  • 6e240ec docs: correct hook name and remove misleading comment
  • ef4bbb4 chore: Re-generated dist versions
  • 1f494b9 Merge pull request #941 from icesfont/fix/deep-nesting-mxss
  • Additional commits viewable in compare view

Updates @typescript-eslint/eslint-plugin from 7.7.0 to 7.7.1

Release notes

Sourced from @​typescript-eslint/eslint-plugin's releases.

v7.7.1

7.7.1 (2024-04-22)

🩹 Fixes

  • eslint-plugin: [no-unsafe-assignment] handle shorthand property assignment (#8800)
  • eslint-plugin: [explicit-function-return-type] fix checking wrong ancestor's return type (#8809)
  • eslint-plugin: [prefer-optional-chain] only look at left operand for requireNullish (#8559)
  • eslint-plugin: [no-for-in-array] refine report location (#8874)
  • eslint-plugin: [no-unnecessary-type-assertion] allow non-null assertion for void type (#8912)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/eslint-plugin's changelog.

7.7.1 (2024-04-22)

🩹 Fixes

  • eslint-plugin: [no-unsafe-assignment] handle shorthand property assignment

  • eslint-plugin: [explicit-function-return-type] fix checking wrong ancestor's return type

  • eslint-plugin: [prefer-optional-chain] only look at left operand for requireNullish

  • eslint-plugin: [no-for-in-array] refine report location

  • eslint-plugin: [no-unnecessary-type-assertion] allow non-null assertion for void type

❤️ Thank You

  • Abraham Guo
  • Kirk Waiblinger
  • YeonJuan

You can read about our versioning strategy and releases on our website.

Commits
  • 3e19436 chore(release): publish 7.7.1
  • b2552ca fix(eslint-plugin): [no-unnecessary-type-assertion] allow non-null assertion ...
  • fdeba42 fix(eslint-plugin): [no-for-in-array] refine report location (#8874)
  • eef257b fix(eslint-plugin): [prefer-optional-chain] only look at left operand for `re...
  • 9e0d9f5 fix(eslint-plugin): [explicit-function-return-type] fix checking wrong ancest...
  • d07eb9e fix(eslint-plugin): [no-unsafe-assignment] handle shorthand property assignme...
  • See full diff in compare view

Updates @typescript-eslint/parser from 7.7.0 to 7.7.1

Release notes

Sourced from @​typescript-eslint/parser's releases.

v7.7.1

7.7.1 (2024-04-22)

🩹 Fixes

  • eslint-plugin: [no-unsafe-assignment] handle shorthand property assignment (#8800)
  • eslint-plugin: [explicit-function-return-type] fix checking wrong ancestor's return type (#8809)
  • eslint-plugin: [prefer-optional-chain] only look at left operand for requireNullish (#8559)
  • eslint-plugin: [no-for-in-array] refine report location (#8874)
  • eslint-plugin: [no-unnecessary-type-assertion] allow non-null assertion for void type (#8912)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/parser's changelog.

7.7.1 (2024-04-22)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

Commits

Updates cssnano from 6.1.2 to 7.0.1

Release notes

Sourced from cssnano's releases.

v7.0.1

Patch changes

Update postcss-calc dependency to latest version

v7.0.0

Breaking changes

This release drops official support for unmaintained long term support Node.js releases 14 and 16. It also drops support for non-long term support releases 19 and 21 and add support for Node.js 22. Only the package.json engines field has been updated. The code should otherwise be identical to the previous 6.1.2 release.

Ensuring support for older Node.js had become difficult as the GitHub actions runners are not available for the latest MacOS and recent pnpm also could not run on CI any more.

Commits
  • 677d20f Publish cssnano 7.0.1
  • 2216006 chore(cssnano-preset-default): update postcss-calc to latest version
  • f705f06 test: update test dependency postcss-font-magician
  • 9143870 docs: update website for release
  • 61461ee chore: update example CLI usage for latest major release
  • 01839be chore: update GitHub actions on publish workflow
  • 00b7738 Publish cssnano 7.0
  • 53f285d chore: drop Node.js 14 and 16 from CI, add 22
  • 0d10597 chore!: drop support for Node.js 14 and 16
  • 49d3235 chore: work around missing older MacOS Node.js versions
  • Additional commits viewable in compare view

Updates stylelint from 16.3.1 to 16.4.0

Release notes

Sourced from stylelint's releases.

16.4.0

Changelog

Sourced from stylelint's changelog.

16.4.0

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the dependencies group with 5 updates
fc3577a 
Bumps the dependencies group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [dompurify](https://github.com/cure53/DOMPurify) | `3.1.0` | `3.1.1` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `7.7.0` | `7.7.1` |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `7.7.0` | `7.7.1` |
| [cssnano](https://github.com/cssnano/cssnano) | `6.1.2` | `7.0.1` |
| [stylelint](https://github.com/stylelint/stylelint) | `16.3.1` | `16.4.0` |


Updates `dompurify` from 3.1.0 to 3.1.1
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.1.0...3.1.1)

Updates `@typescript-eslint/eslint-plugin` from 7.7.0 to 7.7.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v7.7.1/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 7.7.0 to 7.7.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v7.7.1/packages/parser)

Updates `cssnano` from 6.1.2 to 7.0.1
- [Release notes](https://github.com/cssnano/cssnano/releases)
- [Commits](https://github.com/cssnano/cssnano/compare/[email protected]@7.0.1)

Updates `stylelint` from 16.3.1 to 16.4.0
- [Release notes](https://github.com/stylelint/stylelint/releases)
- [Changelog](https://github.com/stylelint/stylelint/blob/main/CHANGELOG.md)
- [Commits](stylelint/stylelint@16.3.1...16.4.0)

---
updated-dependencies:
- dependency-name: dompurify
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@typescript-eslint/parser"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: cssnano
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: stylelint
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Apr 27, 2024
@vercel Vercel
Copy link

vercel bot commented Apr 27, 2024 •
edited

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
giscus ✅ Ready (Inspect) Visit Preview 💬 Add feedback Apr 27, 2024 0:44am

@laymonage laymonage merged commit 7b7aa86 into main Apr 28, 2024
3 checks passed
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/dependencies-65363e55b3 branch April 28, 2024 09:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
1 participant
@laymonage