fix(deps): update all non-major dependencies #3
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
|
|
commit: |
renovate
bot
force-pushed
the
renovate/all-minor-patch
branch
4 times, most recently
from
9486e5c to
189f556
Compare
renovate
bot
force-pushed
the
renovate/all-minor-patch
branch
4 times, most recently
from
7d9520b to
35fb2e0
Compare
renovate
bot
force-pushed
the
renovate/all-minor-patch
branch
from
35fb2e0 to
262c850
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^7.26.0->^7.26.3^1.0.2->^1.0.4^1.3.0->^1.6.2^0.3.5->^0.3.81.1.4->1.1.81.1.4->1.1.8^1.9.3->^1.10.4^4.5.0->^4.5.1^0.3.7->^0.3.11^22.10.0->^22.10.3^5.0.4->^5.2.12.1.6->2.1.8^9.8.1->^9.9.2^3.30.1->^3.39.0^4.3.7->^4.4.00.24.0->0.24.2^0.24.0->^0.24.2^9.15.0->^9.17.09.14.2->9.15.2^0.14.0->^0.15.1^4.27.4->^4.29.1^1.81.0->^1.83.0^0.2.3->^0.3.0^6.0.0->^6.0.6^0.8.8->^0.10.62.1.6->2.1.8^3.4.0->^3.5.13^5.96.1->^5.97.1^5.1.0->^5.2.0Release Notes
babel/babel (@babel/types)
v7.26.3Compare Source
🐛 Bug Fix
babel-generator🏠 Internal
babel-helper-builder-binary-assignment-operator-visitor,babel-plugin-transform-exponentiation-operator🏃♀️ Performance
babel-generatorbabel-traversebabel-plugin-transform-modules-commonjssimplifyAccess(@liuxingbaoyu)farm-fe/farm (@farmfe/core)
v1.6.2Compare Source
Patch Changes
43e0ea0: do not clean up then watch graph monitoring modulev1.6.1Compare Source
Patch Changes
9e9e94e: fix namespace fallback when use literal computedv1.6.0Compare Source
Minor Changes
6b84912: js plugin supports process module hookPatch Changes
b235a91: feat: support invalidateModulev1.5.0Compare Source
Minor Changes
e63b163: Support object stylescript.importNotUsedAsValuesand reset the default value toremovePatch Changes
e63b163: Fix vue lazy compilation transform error when persistent cache enablede63b163: Fix mixed hmr ws protocol when proxy online host to localhoste63b163: Fix module_group_graph panic which is caused by inconsistent module.module_groups when persistent cache is enabled80b13ce: new import meta url runtime & merge electron preload output filese63b163]v1.4.7Compare Source
Patch Changes
c6df3d2: Fix server.hmr.protocol does not workc6df3d2]v1.4.6Compare Source
Patch Changes
249e9a2]jridgewell/gen-mapping (@jridgewell/gen-mapping)
v0.3.8Compare Source
v0.3.7Compare Source
v0.3.6Compare Source
web-infra-dev/rspack (@rspack/cli)
v1.1.8Security Vulnerability Report
Overview
This is a re-release version of v1.1.6
On 12/19/2024, 02:01 (UTC), we discovered that our npm packages
@rspack/coreand@rspack/cliwere maliciously attacked. The attacker releasedv1.1.7using a compromised npm token, which contained malicious code. We took immediate action upon discovering the issue.Impact
@rspack/coreand@rspack/cliv1.1.7package.jsonruns malicious code indist/util/support.js. See Malicious code analysis for more details.Actions Taken
Upon discovery, we immediately deprecated the affected
v1.1.7, redirected the npm latest tag tov1.1.6, and reset all related tokens.Subsequently, we released a secure new version
v1.1.8.Recommended Actions
If you installed
v1.1.7during the affected period, please:@rspack/coreand@rspack/clito>= 1.1.8Apology and Commitment
We deeply apologize for the risks caused by this incident. To prevent similar incidents from happening again, we will implement stricter token management protocols and enhance our security review processes.
If you have any questions or discover any suspicious activity, please create an issue or send an email to: [email protected]
We will continue to follow and respond to community feedback.
v1.1.6Compare Source
What's Changed
Highlights 💡
Reduced memory usage
Rspack's memory usage in large projects has been significantly reduced since v1.1.6:
Related PRs:
RuntimeModuleby @h-a-n-a in https://github.com/web-infra-dev/rspack/pull/8620Performance Improvements ⚡
RawSourcewith smallerRawStringSourceandRawBufferSourceby @h-a-n-a in https://github.com/web-infra-dev/rspack/pull/8629Exciting New Features 🎉
output.trustedTypes.onPolicyCreationFailureby @LingyuCoder in https://github.com/web-infra-dev/rspack/pull/8619getResolvein external function context by @fi3ework in https://github.com/web-infra-dev/rspack/pull/8577Bug Fixes 🐞
importModuleby @CPunisher in https://github.com/web-infra-dev/rspack/pull/8595Document Updates 📖
CopyRspackPlugindocumentation by @chenjiahan in https://github.com/web-infra-dev/rspack/pull/8621Other Changes
New Contributors
Full Changelog: web-infra-dev/rspack@v1.1.5...v1.1.6
v1.1.5Compare Source
What's Changed
Highlights 💡
refactor css loading
Since #7306, we have aligned with webpack's CSS loading strategy, which assumed that CSS finished loading before executing JavaScript, which is not true. Both Rspack and webpack have changed the CSS loading strategy to address this issue.
For more specific details on the original problem, please refer to this link.
Webpack fixed this in https://github.com/webpack/webpack/pull/19021
Rspack fixed this in #8534
Performance Improvements ⚡
Bufferto zero-copyBufferSliceby @h-a-n-a in https://github.com/web-infra-dev/rspack/pull/8574Exciting New Features 🎉
asattr support use with dyn trait by @jerrykingxyz in https://github.com/web-infra-dev/rspack/pull/8535process.titleby @chenjiahan in https://github.com/web-infra-dev/rspack/pull/8576Bug Fixes 🐞
Document Updates 📖
Other Changes
Full Changelog: web-infra-dev/rspack@v1.1.4...v1.1.5
swc-project/swc (@swc/core)
v1.10.4Compare Source
Bug Fixes
(deps) Update cargo (patch) (#9733) (fb2f6e4)
Remove
Caused by: 'failed to parse'from TS blank space (#9820) (aaeb0ab)v1.10.3Compare Source
Bug Fixes
v1.10.2Compare Source
Bug Fixes
(es) Don't panic when wasm bytecheck faild (#9803) (c81be2e)
(es/parser) Do not parse empty stmt after using decl (#9798) (c2696db)
Documentation
v1.10.1Compare Source
Bug Fixes
Features
module.outFileExtension(#9784) (e04c7b3)v1.10.0Compare Source
Bug Fixes
(es/codegen) Use raw value for emitting JSX text (#9762) (b83c44f)
(es/compat) Fix marker for inlined helpers (#9776) (f54ec2c)
(es/minifier) Drop
consolein optional chainings (#9759) (39271ad)(es/minifier) Do not inline into the exact LHS (#9777) (985977b)
Features
(es/minifier) Support
preserve_annotationsof terser (#9775) (6e1c9fd)(typescript) Align
isolatedDeclarationimplementation with tsc (#9715) (0adad25)Apply Wasm-breaking changes (#9771) (ed65eee)
Miscellaneous Tasks
(deps) Update dependency magic-string to v0.30.13 (#9747) (fa80a1e)
(deps) Update dependency magic-string to v0.30.14 (#9764) (6e46a8b)
Refactor
sxzz/test-utils (@sxzz/test-utils)
v0.3.11Compare Source
🚀 Features
View changes on GitHub
v0.3.10Compare Source
🐞 Bug Fixes
View changes on GitHub
v0.3.9Compare Source
🚀 Features
expectFilesSnapshot- by @sxzz (74f31)View changes on GitHub
v0.3.8Compare Source
🚀 Features
[cwd]in snapshot - by @sxzz (3a2a2)View changes on GitHub
vitest-dev/vitest (@vitest/ui)
v2.1.8Compare Source
🐞 Bug Fixes
View changes on GitHub
v2.1.7Compare Source
🐞 Bug Fixes
pnpm.overridesor yarn resolutions to override theviteversion in thevitestpackage - the APIs are compatible.View changes on GitHub
antfu/bumpp (bumpp)
v9.9.2Compare Source
No significant changes
View changes on GitHub
v9.9.1Compare Source
🐞 Bug Fixes
Configuration
📅 Schedule: Branch creation - "* 0-3 * * 1" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.