search

adventistchurch / alps-wordpress

This Wordpress theme is an implementation of the Adventist Living Pattern System (ALPS) designed to support the work of the Seventh-day Adventist Church.
Other
43 stars 38 forks source link

build(deps): bump xml2js, aws-sdk and @roots/bud #673

Closed dependabot[bot] closed 1 year ago

dependabot[bot] commented 1 year ago

Bumps xml2js to 0.5.0 and updates ancestor dependencies xml2js, aws-sdk and @roots/bud. These dependencies need to be updated together.

Updates xml2js from 0.4.19 to 0.5.0

Commits
  • 9f730bb Update package.json with latest PR
  • 50a492a Merge pull request #603 from autopulated/master
  • 7bc3c5d Merge pull request #598 from fnimick/master
  • f412a12 Merge pull request #635 from wisesimpson/patch-1
  • d318ce0 Update README.md
  • 581b19a use Object.create(null) to create all parsed objects (prevent prototype repla...
  • a212950 Add documentation for explicitCharkey option
  • 1832e0b Merge pull request #512 from economia/master
  • 198063c Merge pull request #556 from Omega-Ariston/fix-issue544
  • 0d71785 Merge pull request #562 from Omega-Ariston/addDocExample
  • Additional commits viewable in compare view


Updates aws-sdk from 2.1310.0 to 2.1389.0

Release notes

Sourced from aws-sdk's releases.

Release v2.1389.0

See changelog for more information.

Release v2.1388.0

See changelog for more information.

Release v2.1387.0

See changelog for more information.

Release v2.1386.0

See changelog for more information.

Release v2.1385.0

See changelog for more information.

Release v2.1384.0

See changelog for more information.

Release v2.1383.0

See changelog for more information.

Release v2.1382.0

See changelog for more information.

Release v2.1381.0

See changelog for more information.

Release v2.1380.0

See changelog for more information.

Release v2.1379.0

See changelog for more information.

Release v2.1378.0

See changelog for more information.

Release v2.1377.0

See changelog for more information.

Release v2.1376.0

See changelog for more information.

Release v2.1375.0

See changelog for more information.

Release v2.1374.0

See changelog for more information.

Release v2.1373.0

See changelog for more information.

... (truncated)

Commits


Updates @roots/bud from 5.8.7 to 6.12.3

Release notes

Sourced from @​roots/bud's releases.

6.12.3

Bugfixes and bumped dependencies

Improvements

#2243 improves compatibility with pnpm

This change finishes work started in 6.12.2 make it less necessary to use the bud.js .pnpmfile.cjs compatibility shim.

You should also now be able to limit hoisting to @roots packages, if desired:

pnpm install --public-hoist-pattern="@roots/*"

When only hoisting @roots/* packages you will need to make sure your app dependencies are explicitly defined. Rule of thumb: if you import it in your app you will need to have it installed in your project.

The alternative is to hoist everything (same behavior as npm and yarn):

pnpm install --public-hoist-pattern="*"

Fixes

  • Fixes module resolution cache validation when swapping package managers.
  • Fixes issue with eslint not outputting to stdout/stderr in some configurations.

6.12.2

Adds cached module count to dashboard output for greater transparency into what is being recompiled in development.

6.12.1

Minor release with improvements and fixes for package resolution and caching

Fixes

Failure installing custom TypeScript version with yarn

Fixes an error encountered when trying to install a custom version of TypeScript while using @roots/bud-typescript with yarn classic. [See #2216](roots/bud#2216).

This issue is actually an upstream bug in yarn. But, our response sidesteps it and also improves compatibility with pnpm.

The short version: we don't need to declare typescript as a peer dependency because of changes to bud.module made in bud v6. It will always try to resolve from the project context before using the built-in as a fallback.

So, even without peer dependencies defined by the extension, the following call (when made from the @roots/bud-typescript context) will always try and resolve the module first from node_modules/typescript, and then node_modules/@roots/bud-typescript/node_modules.

bud.module.resolve(`typescript`, import.meta.url)

... (truncated)

Commits


You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/adventistchurch/alps-wordpress/network/alerts).

Note Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

YauheniKapliarchuk commented 1 year ago

Hey,

For these changes was created new ticket #697.

Changes for updating AWS version were did in this (PR #697](https://github.com/adventistchurch/alps-wordpress/pull/697).

Thanks, Best Regards!

dependabot[bot] commented 1 year ago

OK, I won't notify you again about this release, but will get in touch when a new version is available.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.