ACManoa / acmanoa.github.io

Home page of the Association for Computing Machinery at UH Manoa.
https://acmanoa.github.io
BSD 3-Clause "New" or "Revised" License
5 stars 9 forks source link

Bump ms, browser-sync and critical #31

Open dependabot[bot] opened 1 year ago

dependabot[bot] commented 1 year ago

Bumps ms to 2.0.0 and updates ancestor dependencies ms, browser-sync and critical. These dependencies need to be updated together.

Updates ms from 0.7.1 to 2.0.0

Release notes

Sourced from ms's releases.

2.0.0

Major Changes

  • Limit str to 100 to avoid ReDoS of 0.3s: #89

Patches

  • Ignored logs coming from npm: b1eaab752203e978492a4d540a7ae1d26e6306b1
  • Bumped dependencies to the latest version: bcf57157678fd5afc691383145a35e116f9704d0
  • Invalidated cache for slack badge: 94b995c1d6d5d13ec976a0c6849a3cca9b277e6b

Credits

Huge thanks to @​karenyavine for their help!

1.0.0

Major Changes

  • Removed component specification: 1fbbe974cdcad96e592dcb65a7b2a8649f690420

Patches

  • Test on LTS version of Node: c9b1fd319f0f9198d85ecf4ba83e46cc1216be04
  • Removed XO: 94068ea6d518387670df277f740b1abada80ed48
  • Use prettier and eslint: 57b3ef8e3423cae6254f94c5564a11b4492cff43
  • Badge for XO removed: 389840b329436117741b2ef13a172725082695b9
  • Removed browser testing: e818c3581aca3119c00d81901bfe8fe653bcfda4
  • More suitable name for file containing tests: ee91f307a8dc3581ebdad614ec0533ddb3d8bf56

0.7.3

Patches

  • Mark "options" param as optional in jsdoc: #77
  • Lowercased text files: 5f0653ab192a30301aed8668b4588a87975b41ab
  • Pinned dependencies: 126d7f094a1836b991c8d0abfeb4d0ce09ac280f
  • Chore(package): update serve to version 5.0.1: #81

Credits

Huge thanks to @​Jokero for their help!

0.7.2

Patches 💅

  • Added license field to package.json file: zeit/ms#42
  • Renamed long and short (reserved keywords): zeit/ms#53
  • Capitalized important files: b2d9f9d
  • Specified version numbers for devDependencies in package.json: abd3616
  • Updated license file to the latest version: 5d53ae8
  • Only upload important files to npm, instead of excluding certain ones: 2b2f02a
  • Adjusted name of repository in package.json: e84f95d

... (truncated)

Commits
  • 9b88d15 2.0.0
  • 94b995c Invalidated cache for slack badge
  • bcf5715 Bumped dependencies to the latest version
  • b1eaab7 Ignored logs coming from npm
  • caae298 Limit str to 100 to avoid ReDoS of 0.3s (#89)
  • b83b36d chore(package): update eslint to version 3.19.0 (#88)
  • 3f2a4d7 chore(package): update husky to version 0.13.3 (#86)
  • 7daf984 1.0.0
  • ee91f30 More suitable name for file containing tests
  • e818c35 Removed browser testing
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by leo, a new releaser for ms since your current version.


Updates browser-sync from 2.18.13 to 2.29.1

Release notes

Sourced from browser-sync's releases.

The one that restores IE11 support 💪

What's Changed

esbuild does not support down-level transpiling as far as IE11 - so when I switched to it, it accidentally broke IE11 support 😢

This is an important issue for me - many devs that support old browsers like IE11 are doing so because their projects are used in public services, or internal applications. Not every developer out there has the luxury of supporting evergreen-only browsers.

So, IE11 will work once again 🎉. Please use the issues thread to make me aware of any problem that's preventing you from using Browsersync in your day job 💪 (and be sure to thumbs-up the issues you want to see resolved)

# IE11 works, again
npm install browser-sync@latest

Full Changelog: https://github.com/BrowserSync/browser-sync/compare/v2.28.3...v2.29.0

the one that finally removes document.write

What's Changed

Full Changelog: https://github.com/BrowserSync/browser-sync/compare/v2.27.12...v2.28.0

2.27.9

What's Changed

A bug prevented the help output from displaying - it was introduced when the CLI parser yargs was updated, and is now fixed :)

Full Changelog: https://github.com/BrowserSync/browser-sync/compare/v2.27.8...v2.27.9

2.27.8

This release upgrades Socket.io (client+server) to the latest versions - solving the following issues, and silencing security warning :)

PR:

Resolved Issues:

... (truncated)

Changelog

Sourced from browser-sync's changelog.

2.23.1 (2018-01-01)

2.8.2 (2015-07-31)

Bug Fixes

  • https: add newly generated ssl self-signed certs that will expire for 10 years - fixes (45104a7), closes #750

2.8.1 (2015-07-28)

Bug Fixes

  • web-sockets: Use separate server for web sockets in proxy mode - fixes #625 (40017b4), closes #625

Features

  • serve-static: Added option serveStatic to allow proxy/snippet mode to easily serve local fil (384ef67)

2.7.13 (2015-06-28)

Bug Fixes

  • snippet: Allow async attribute to be removed from snippet with snippetOptions.async = fal (c32bec6), closes #670
  • socket-options: allow socket.domain string|fn for setting domain only on socket path - fixes #69 (5157432), closes #690

Features

  • api: expose sockets to public api (985682c)

2.7.12 (2015-06-17)

Bug Fixes

  • client-script: allow proxy to also use client script middleware (c5fdbbf)
  • client-script: serve cached/gzipped client JS file - fixes #657 (dbe9ffe), closes #657

... (truncated)

Commits


Updates critical from 1.0.0 to 1.3.10

Release notes

Sourced from critical's releases.

v1.3.10

  • CI: switch to actions/checkout@v2 b9c17ef

https://github.com/addyosmani/critical/compare/v1.3.9...v1.3.10

v1.3.9

  • 1.x: use destructuring when importing lodash (#433) bd24282

https://github.com/addyosmani/critical/compare/v1.3.8...v1.3.9

Thanks @​XhmikosR

v1.3.8

  • Update dependencies. (#431) b5cd07d
  • fix: backport #415 fix to 1.x (#430) 9ee2632
  • [1.x] Update dependencies. (#419) bb601a9
  • ES6-ify (#427) 4da2919

https://github.com/addyosmani/critical/compare/v1.3.7...v1.3.8

Thanks @​XhmikosR

v1.3.7

  • Update dependencies. (#410) 96bc0eb
  • Switch to GitHub Actions CI. (#403) d46b599
  • Update dependencies. 672e680

https://github.com/addyosmani/critical/compare/v1.3.6...v1.3.7

v1.3.6

  • Skip the PAGE_UNLOADED_DURING_EXECUTION` tests. (#393) 54a1cb7
  • Skip the PAGE_UNLOADED_DURING_EXECUTION` tests. bf51c17

https://github.com/addyosmani/critical/compare/v1.3.5...v1.3.6

v1.3.5

  • README.md: Optimize and add the preview image to the repo (#388) 6959f4f
  • Clean up .gitignore. (#384) 5e412de
  • Update test files. 26e05c2
  • Separate npm scripts. 8ced8fe
  • Fix PostCSS warning. dab82a4
  • Move get-port to devDependencies. 537256a
  • Update AppVeyor config from master. 1fadc30
  • Update Travis config from master. 440d613
  • Fix tests on Windows. (#330) 25ee370
  • Lint. 1c2e7ba
  • Update all dependencies to their safe versions. 0825d31
  • Remove yarn.lock. 4e4ce13

https://github.com/addyosmani/critical/compare/v1.3.4...v1.3.5

... (truncated)

Changelog

Sourced from critical's changelog.

v2.0.0 / 2020-06-16

  • Drop support for Node.js < 10
  • Bump dependencies
  • Use Jest for testing
  • Drop include and timeout options as they can be specified in the penthouse options.
  • Drop options styleTarget & dest in favour of target You can specify either a css file, an html file or an object {css: dest.css, html: dest.html} if you want to store both. We may also add an extract target here in a future release.
  • Drop options destFolder, folder and pathPrefix. We tried our best to improve the way critical auto-detects the paths to used assets in the critical css which should suit for most cases. If this doesn't work out you can use the new rebase option to either specify the location of the css & the html file like this: {from: '/styles/main.css', to: '/en/test.html'}. You can also pass a callback function to dynamically compute the path or specify a cdn for example. We utilize postcss-url for this task.
  • Due to some limitations with modern css features we replaced filter-css as the library of choice for handling ignores with postcss-discard. We tried to keep things backwards compatible but you may have to change your ignore configuration.
  • Add concurrency option to specify how many operations can run in parallel.
  • Add the ability to specify used css files using file globs. See supported minimatch patterns.

v1.3.4 / 2018-07-19

  • fix: return Promise.reject instead of re-throw
  • fix: handle PAGE_UNLOADED_DURING_EXECUTION error (#314)
  • output warning on invalid extract setting
  • Add user agent option (#316)
  • Bump dependencies
  • npm audit fix

v1.3.3 / 2018-06-06

  • Bump dependencies
  • Docs: fix typo (#310)
  • Reduced vulnerabilities (#308)

v1.3.2 / 2018-05-15

  • Switched to async-exit-hook

v1.3.1 / 2018-05-14

  • Bump dependencies
  • Removed process.exit on cleanup
  • Adding html-webpack-critical-plugin to README (#306)

v1.3.0 / 2018-05-02

  • Add basic auth option (#295)

v1.2.2 / 2018-04-02

  • Improved handling of protocol-relative asset URLs (#288)
  • Adjust test files according to (#293)
  • Improve error reporting (#258)
  • Replace gutil with fancy-log (#297)
  • Update README.md (#296)

... (truncated)

Commits


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/ACManoa/acmanoa.github.io/network/alerts).