Dust filter functions previously took one argument, the string to filter. They now accept a second argument, which is the current context.
Helpers
Dust helpers can now return primitives.
Helpers act like references or sections depending on if they have a body. When they have no body, they act like a reference and look in params.filters for filters to use. When they have a body, they act like a section. You can return thenables and streams normally.
In previous versions, setting dust.config.cache to false would blow away the entire cache on every render. Now, setting it to false just prevents new templates from being added and cached templates from being used. Setting it back to true means that previously-cached templates will be ready to use.
dust.onLoad
We have added a callback(null, compiledTemplate) signature to dust.onLoad.
Calling the onLoad callback with a compiled template function will use this template to satisfy the load request. The template is not automatically registered under any name when passed to the callback, so the onLoad function should handle registration as it needs.
You can still call the callback with uncompiled template source and Dust will compile and store it, while respecting your dust.config.cache setting.
#753 {?exists} and {^exists} resolve Promises and check if the result exists (#753) (@samuelms1)
v2.7.4 (2016/09/13 02:52 +00:00)
#744 Don't use instanceof to determine if a Context is a Context. Instead use a flag on the instance itself so it can survive object merges. (@sethkinast)
Previously returning a primitive would crash rendering with no way to recover. You can still return a Chunk and do more complex work if you need to.
Helpers act like references or sections depending on if they have a body. When they have no body, they act like a reference and look in params.filters for filters to use. When they have a body, they act like a section. You can return thenables and streams normally.
#655 Update CommonJS example to make use of new onLoad behavior (@sethkinast)
#653 Fix array iteration when context is undefined (@sethkinast)
#641 Add a cb(null, compiledTemplate) signature to dust.onLoad
Calling the onLoad callback with a compiled template function will use this template to satisfy the load request. The template is not automatically registered under any name when passed to the callback, so the onLoad function should handle registration as it needs.
dust.cache behavior has been changed slightly. Before, setting it to false would blow away the entire cache on every render. Now, setting it to false just prevents new templates from being added and cached templates from being used, but if it's set to true again previously-cached templates will be ready to use. (@sethkinast)
NOTE: Despite being a minor release, this update includes a breaking change that we had to make to fix a security issue ( CVE-2020-11022). Please follow the blog post & the upgrade guide for more details.
Changes in the version includes changes from the next branch and typeorm@next version.
They were pending their migration from 2018. Finally, they are in the master branch and master version.
Features
compilation target now is es2020. This requires Node.JS version 14+
TypeORM now properly works when installed within different node_modules contexts
(often happen if TypeORM is a dependency of another library or TypeORM is heavily used in monorepo projects)
Connection was renamed to DataSource.
Old Connection is still there, but now it's deprecated. It will be completely removed in next version.
New API:
// load entities, establish db connection, sync schema, etc.
await dataSource.connect()
Previously, you could use new Connection(), createConnection(), getConnectionManager().create(), etc.
They all deprecated in favour of new syntax you can see above.
New way gives you more flexibility and simplicity in usage.
Old ways of custom repository creation were dropped.
added new option on relation load strategy called relationLoadStrategy.
Relation load strategy is used on entity load and determines how relations must be loaded when you query entities and their relations from the database.
Used on find* methods and QueryBuilder. Value can be set to join or query.
Changes in the version includes changes from the next branch and typeorm@next version.
They were pending their migration from 2018. Finally, they are in the master branch and master version.
Features
compilation target now is es2020. This requires Node.JS version 14+
TypeORM now properly works when installed within different node_modules contexts
(often happen if TypeORM is a dependency of another library or TypeORM is heavily used in monorepo projects)
Connection was renamed to DataSource.
Old Connection is still there, but now it's deprecated. It will be completely removed in next version.
New API:
// load entities, establish db connection, sync schema, etc.
await dataSource.connect()
Previously, you could use new Connection(), createConnection(), getConnectionManager().create(), etc.
They all deprecated in favour of new syntax you can see above.
New way gives you more flexibility and simplicity in usage.
Old ways of custom repository creation were dropped.
added new option on relation load strategy called relationLoadStrategy.
Relation load strategy is used on entity load and determines how relations must be loaded when you query entities and their relations from the database.
Used on find* methods and QueryBuilder. Value can be set to join or query.
Bumps the npm_and_yarn group with 14 updates in the / directory:
2.5.03.0.04.12.44.19.20.0.51.4.02.2.43.5.04.17.44.17.210.7.32.0.00.2.250.3.01.278.11.1064.06.5.26.11.01.9.01.20.24.0.114.7.74.0.44.2.00.0.81.2.811.1.518.7.1Updates
dustjs-linkedinfrom 2.5.0 to 3.0.0Release notes
Sourced from dustjs-linkedin's releases.
... (truncated)
Changelog
Sourced from dustjs-linkedin's changelog.
Closes #674 (
@sethkinast)Previously returning a primitive would crash rendering with no way to recover. You can still return a Chunk and do more complex work if you need to.
Helpers act like references or sections depending on if they have a body. When they have no body, they act like a reference and look in
params.filtersfor filters to use. When they have a body, they act like a section. You can return thenables and streams normally.{
@returnvalue="" filters="|s" /} {@returnvalue=""}{.} World{/return}Closes #645 (
@sethkinast)Closes #663 (
@sethkinast)Closes #649 Closes #602 Closes #642 (
@sethkinast)Closes #659 (
@sethkinast)Calling the
onLoadcallback with a compiled template function will use this template to satisfy the load request. The template is not automatically registered under any name when passed to the callback, so theonLoadfunction should handle registration as it needs.dust.cachebehavior has been changed slightly. Before, setting it to false would blow away the entire cache on every render. Now, setting it to false just prevents new templates from being added and cached templates from being used, but if it's set to true again previously-cached templates will be ready to use. (@sethkinast)dust.renderanddust.streamnow accept a compiled template function in addition to a template name.dust.compileno longer requires a template name, and will compile an anonymous template without one (so--nameis no longer required for dustc either)dust.loadis removed from the public APIdust.renderSourceis moved to the compiler, so it's only included in dust-full now (Fixes #412)dust.compileFnis moved to the compiler, so it's only included in dust-full nowdust.isTemplateFndust.config.cache = true, set tofalseto disable caching and load templates again every time (Fixes #451)dust.config.cjs = false, set totrueto compile templates as CommonJS modules--cjsflag todustcdust.compiler(but leave it exposed until 2.8) (@sethkinast)... (truncated)
Commits
2e8795cRelease v3.0.06f98371merge from 2.7db6d8b9Merge pull request #805 from sumeetkakkar/fix/proto-pollutionddb6523fix for prototype pollution vulnerability822222eRelease v2.7.5d0f955dDecrease security vulnerabilities by upgrading cli dependency (#754 #748)e0e25f7Merge pull request #756 from danactive/mastereeb1c17Decrease security vulnerabilities by upgrading cli dependency (#754 #748)d485a72{?exists} and {^exists} resolve Promises and check if the result exists (#753)9a08207Release v2.7.4Maintainer changes
This version was pushed to npm by krakenjs, a new releaser for dustjs-linkedin since your current version.
Updates
expressfrom 4.12.4 to 4.19.2Release notes
Sourced from express's releases.
... (truncated)
Changelog
Sourced from express's changelog.
... (truncated)
Commits
04bc6274.19.2da4d763Improved fix for open redirect allow list bypass4f0f6cc4.19.1a003cfaAllow passing non-strings to res.location with new encoding handling checks f...a1fa90ffixed un-edited version in history.md for 4.19.011f2b1dbuild: fix build due to inconsistent supertest behavior in older versions084e3654.19.00867302Prevent open redirect allow list bypass due to encodeurl567c9c6Add note on how to update docs for new release (#5541)69a4cf2deps: cookie@0.6.0Maintainer changes
This version was pushed to npm by wesleytodd, a new releaser for express since your current version.
Updates
express-fileuploadfrom 0.0.5 to 1.4.0Release notes
Sourced from express-fileupload's releases.
... (truncated)
Commits
Maintainer changes
This version was pushed to npm by richardgirges, a new releaser for express-fileupload since your current version.
Updates
jqueryfrom 2.2.4 to 3.5.0Release notes
Sourced from jquery's releases.
Commits
7a0a8503.5.08570a08Release: Update AUTHORS.txtda3dd85Ajax: Do not execute scripts for unsuccessful HTTP responses065143cAjax: Overwrite s.contentType with content-type header value, if any1a4f10dTests: Blacklist one focusin test in IE9e15d6bEvent: Use only one focusin/out handler per matching window & document966a709Manipulation: Skip the select wrapper for <option> outside of IE 91d61fd9Manipulation: Make jQuery.htmlPrefilter an identity function04bf577Selector: Update Sizzle from 2.3.4 to 2.3.57506c9cBuild: Resolve Travis config warningsMaintainer changes
This version was pushed to npm by mgol, a new releaser for jquery since your current version.
Updates
lodashfrom 4.17.4 to 4.17.21Commits
f299b52Bump to v4.17.21c4847ebImprove performance oftoNumber,trimandtrimEndon large input strings3469357Prevent command injection through_.template'svariableoptionded9bc6Bump to v4.17.20.63150efDocumentation fixes.00f0f62test.js: Remove trailing comma.846e434Temporarily use a custom fork oflodash-cli.5d046f3Re-enable Travis tests on4.17branch.aa816b3Remove/npm-package.d7fbc52Bump to v4.17.19Maintainer changes
This version was pushed to npm by bnjmnt4n, a new releaser for lodash since your current version.
Updates
msfrom 0.7.3 to 2.0.0Release notes
Sourced from ms's releases.
Commits
9b88d152.0.094b995cInvalidated cache for slack badgebcf5715Bumped dependencies to the latest versionb1eaab7Ignored logs coming from npmcaae298Limit str to 100 to avoid ReDoS of 0.3s (#89)b83b36dchore(package): update eslint to version 3.19.0 (#88)3f2a4d7chore(package): update husky to version 0.13.3 (#86)7daf9841.0.0ee91f30More suitable name for file containing testse818c35Removed browser testingUpdates
typeormfrom 0.2.25 to 0.3.0Release notes
Sourced from typeorm's releases.
... (truncated)
Changelog
Sourced from typeorm's changelog.
... (truncated)
Commits
941b584version bump3b8a0310.3.0 (#8616)5608956refactor: remove spaces for consistency (#8751)486f8c5version bump0fc093dfix: discard duplicated columns on update (#8724)f3cfdd2fix: allow clearing database inside a transaction (#8712)96ac8f7feat: add transformer to ViewColumnOptions (#8717)32549ferefactor: DefaultNamingStrategy#getTableName should be protected, not private...411fa54fix: force web bundlers to ignore index.mjs and use the browser ESM version d...10f46d9fixing failing testUpdates
snykfrom 1.278.1 to 1.1064.0Commits
bd96e74Merge pull request #4221 from snyk/fix/quote-args80d97a9fix: escape child process argumentsc028b50Merge pull request #4216 from snyk/feat/unmanaged-deps-severity-thresholdcc329fdfeat: support sev.threshold for unm.-deps3daf5c7Merge pull request #4214 from snyk/feat/base64-default2df2037Merge pull request #4219 from snyk/fix/gradle-use-lenient-configafc1ccbfix: use lenient config in gradle plugin85bb57fMerge pull request #4215 from snyk/feat/upgrade-policy-engine-v0.12.2ef864befeat: upgrade snyk-iac-test to v0.37.0369fe11feat: base64 default for sast analysisMaintainer changes
This version was pushed to npm by snyk-admin, a new releaser for snyk since your current version.
Updates
debugfrom 2.2.0 to 2.6.9Release notes
Sourced from debug's releases.
... (truncated)
Changelog
Sourced from debug's changelog.
... (truncated)
Commits
13abeaeRelease 2.6.9f53962eremove ReDoS regexp in %o formatter (#504)52e1f21Release 2.6.82482e08Check for undefined on browser globals (#462)6bb07f7release 2.6.715850cbFix Regular Expression Denial of Service (ReDoS)4a6c85cupdate "debug" to v1.0.0 (#454)b68dbf8Fix typo (#455)1351d2fInline extend function in node implementation (#452)c211947update version for componentUpdates
xml2jsfrom 0.4.19 to 0.4.23Commits
Updates
qsfrom 6.5.2 to 6.11.0Changelog
Sourced from qs's changelog.
... (truncated)
Commits
56763c1v6.11.0