search

Esri / arcgis-rest-js

compact, modular JavaScript wrappers for the ArcGIS REST API
https://developers.arcgis.com/arcgis-rest-js/
Apache License 2.0
347 stars 120 forks source link

chore(deps): bump papaparse from 4.6.3 to 5.2.0 #1069

Closed dependabot[bot] closed 1 year ago

dependabot[bot] commented 1 year ago

Bumps papaparse from 4.6.3 to 5.2.0.

Release notes

Sourced from papaparse's releases.

Release 5.2.0

We are happy to announce version 5.2.0.

This version contains a new feature that allows to perform post request when downloading files.

It also fixes a ReDOS vulnerability issue. See mholt/PapaParse#777 for more details.

5.1.0

The release brings a the option to use a function to determine the fields that will be quoted. This function accepts the cell value and column index as parameters. Thanks to @​Puzzleton for contributing this feature.

This release also includes some bug fixes. Thanks to all who contributed.

Version 5.0.0

We are happy to announce a new major release of PapaParse.

This relase (5.0.0) introduces the following changes:

  • We drop support for Node 6.x branch.
  • Workers are now loaded with inline blobs, which means that is only needed to specify the worker: true option and Paparse will load it's code from a blob
  • Step function returns only a single row
  • A function to transform header columns is added. The trimheader option is removed as it can be achieved with this new transform function.
  • The API throws now Error objects instead of using error Strings.
  • Handle delimiter guessing, when not all of the fields are quoted
  • Add ability to support escapeChar on unparse
  • Allow to specify the columns used for unparse
  • Add DelimitersToGuess config option

Happy parsing!

5.0.0-beta.0

This is the first beta version of the 5 major version, which introduces the following changes:

  • We drop support for Node 6.x branch.
  • Workers are now loaded with inline blobs, which means that is only needed to specify the worker: true option and Paparse will load it's code from a blob
  • Step function returns only a single row
  • A function to transform header columns is added. The trimheader option is removed as it can be achieved with this new transform function.
  • The API throws now Error objects instead of using error Strings.

Please test it and report issues if you have on it. As this is a beta version it should be installed with the following command:

npm install papaparse@beta

Commits
  • 4b192de Minor version bump
  • 235a127 Avoid ReDOS on float dynamic typing (#779)
  • a4cf371 Improve downloadRequestBody documentation
  • e934deb Support POST method when download is true
  • 7ec146c Using self instead of this to preserve binding. (#769)
  • 3497ded Patch version bump
  • ae73d2a Use chunk size to determine the processed length
  • a318396 Reword newline docs
  • 47b356d #727 update delimiter and newline index if they are earlier than the current ...
  • 7ad8dda Address deepEqual using compare by JSON strings. (#724)
  • Additional commits viewable in compare view


Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Esri/arcgis-rest-js/network/alerts).
> **Note** > Automatic rebases have been disabled on this pull request as it has been open for over 30 days.
codecov[bot] commented 1 year ago

Codecov Report

Merging #1069 (a6f51f9) into main (439227c) will not change coverage. The diff coverage is n/a.

@@            Coverage Diff            @@
##              main     #1069   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files          150       150           
  Lines         2926      2926           
  Branches       527       527           
=========================================
  Hits          2926      2926

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.

gavinr-maps commented 1 year ago

1118

dependabot[bot] commented 1 year ago

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.