search

duckduckgo / duckduckgo-privacy-extension

DuckDuckGo Privacy Essentials browser extension for Firefox, Chrome.
https://duckduckgo.com/app
Apache License 2.0
1.21k stars 242 forks source link

Bump the external-dependencies group across 1 directory with 13 updates #2548

Closed dependabot[bot] closed 2 weeks ago

dependabot[bot] commented 3 weeks ago

Bumps the external-dependencies group with 13 updates in the / directory:

Package From To
dexie 4.0.4 4.0.7
i18next 23.11.2 23.11.5
tldts 6.1.16 6.1.24
zod 3.22.4 3.23.8
@fingerprintjs/fingerprintjs 4.2.2 4.4.0
@playwright/test 1.43.1 1.44.1
@types/chrome 0.0.266 0.0.268
@types/node 20.12.7 20.14.0
esbuild 0.20.2 0.21.4
fake-indexeddb 5.0.2 6.0.0
jsdom 24.0.0 24.1.0
sass 1.75.0 1.77.4
webextension-polyfill 0.10.0 0.12.0

Updates dexie from 4.0.4 to 4.0.7

Release notes

Sourced from dexie's releases.

Dexie v4.0.7

  • Tighten non-idempotent CRDT operations (PR #2000)
  • Align dexie and dexie-cloud-addon versions: 4.0.7

Dexie v4.0.5

Features

New CRDT operations: add() and remove() (#1936)

New operations that works consistently across sync: Mathematical addition/subtraction as well as adding or removing string or numbers from array properties.

Add to set

It is now possible to add items to an array property using a sync consistent operation "add":

import { add } from "dexie";

db.friends.update(friend.id, {
hobbies: add([
"skating",
"football"
])
});

Remove from set

import { remove } from "dexie";

db.friends.update(friend.id, {
hobbies: remove([
"curling"
])
});

Mathematical addition and subtraction (number)

import { add, remove } from "dexie";

await db.transaction('rw', db.accounts, () => {
db.accounts.update(accountId1, { balance: remove(100) });
db.accounts.update(accountId2, { balance: add(100) });
});

Mathematical addition and subtraction (bigint)

... (truncated)

Commits
  • b38b1bf Build output
  • 239d787 Merge remote-tracking branch 'origin/releases'
  • 49de2e1 Releasing v4.0.7
  • d96ddcd Bump version: 4.0.7. Align dexie and dexie-cloud-addon version numbers.
  • c2d4d9d Fixed identation
  • 076dc15 When consistent modify/delete operations get chunked, the additional chunks w...
  • d4508e6 Releasing dexie-cloud-addon@4.0.6
  • af1578e Build output
  • fa41b3a Releasing v4.0.5
  • 6ba015c Merge remote-tracking branch 'origin/releases'
  • Additional commits viewable in compare view


Updates i18next from 23.11.2 to 23.11.5

Release notes

Sourced from i18next's releases.

v23.11.5

  • perf: use Array.isArray() 2193
  • perf: trim keys once 2194

v23.11.4

  • perf(interpolator): use object deconstruction 2181

v23.11.3

  • fix: Unsupported language is automatically added to preload option 2178
Changelog

Sourced from i18next's changelog.

23.11.5

  • perf: use Array.isArray() 2193
  • perf: trim keys once 2194

23.11.4

  • perf(interpolator): use object deconstruction 2181

23.11.3

  • fix: Unsupported language is automatically added to preload option 2178
Commits


Updates tldts from 6.1.16 to 6.1.24

Release notes

Sourced from tldts's releases.

v6.1.24

:scroll: Update Public Suffix List

Authors: 1

v6.1.23

:scroll: Update Public Suffix List

  • tldts-experimental, tldts

Authors: 1

v6.1.22

:scroll: Update Public Suffix List

:nut_and_bolt: Dependencies

Authors: 2

v6.1.21

:scroll: Update Public Suffix List

  • tldts-experimental, tldts-icann, tldts

Authors: 1

v6.1.20

:scroll: Update Public Suffix List

... (truncated)

Changelog

Sourced from tldts's changelog.

v6.1.24 (Sat Jun 01 2024)

:scroll: Update Public Suffix List

Authors: 1

v6.1.23 (Tue May 28 2024)

:scroll: Update Public Suffix List

  • tldts-experimental, tldts

Authors: 1

v6.1.22 (Sun May 26 2024)

:scroll: Update Public Suffix List

:nut_and_bolt: Dependencies

Authors: 2

v6.1.21 (Tue May 21 2024)

:scroll: Update Public Suffix List

... (truncated)

Commits


Updates zod from 3.22.4 to 3.23.8

Release notes

Sourced from zod's releases.

v3.23.8

Commits:

  • 0f4d403558ae0490c711e4c2bfcf6c200bd14e11 Add Bronze logos (#3470)
  • 19687315b5b24bbd1ff6c346bfc2975700221748 Tweak tiers (#3471)
  • eda7df314399929f7ed737423868a5a0780cd944 Change RefinementCtx to interface
  • ca42965df46b2f7e2747db29c40a26bcb32a51d5 v3.23.8

v3.23.7

Commits:

  • 29d2ea2a15f0b1ac4b89138041f786a3dafc490b Add copper
  • d969423266fccee56ef769da6744cc8bacb04550 Fix #3437: extendShape erases JSDoc property documentation (#3463)
  • 2239ff3ccc9af4d28bee27bd6fb2a5632844480b Add social crow
  • f985b5b922cb357dbf4b25bb43814d19f838e046 3.23.7

v3.23.6

Commits:

  • bc0095aab9e7254deb18701adc63de128ca2c742 Test on latest node
  • 6e5699a30373cc22879f2bcb6902fc138518c980 Lint on latest node
  • 1f466d9d00f446d7bed1962990e7a1ce813ab0d4 describe how one can protect from cyclical objects starting an infini… (#3447)
  • 3fed6f21e0ea7adc91aa0cc44f75bcf4e526d98e Add zod playground link (#3454)
  • 04e1f379f6989d23dd45660fcabc78f76d7834f8 Fixed freezing async ZodReadonly results (#3457)
  • b87e59d0e4bbb4403bf27243afdcda9fcdeec258 Update sponsor tiers (#3453)
  • 143886151bba3930bdcc10d34a1cff4bf9103ba8 Add copper tier (#3460)
  • ce3711e1384952d255769b9495f9bfadfb327291 add VSCode dev container support and documenation
  • 93b480b12ec3466cbd3b4182f7ce292e5c61528c v3.23.6

v3.23.5

Commits:

  • 110b8211f991b3e060ab2da4fec7b63d600439ad Update README_ZH.md (#3433)
  • c1910bdfc98709b8f14231e2cefc5a3be401e3ee Made ZodEnum take readonly string array (#3444)
  • 541a862e978f96eb391849a6bf16be84231aa1b3 3.23.5

v3.23.4

Commits:

  • 157b18d742c86d85b26a8421af46ad6d6d6b6ea7 Add 3.23 announcement
  • aedf93f1435a29463d915c3be45b4dcbeefa8cc1 Revert change to default Input
  • 45107f7a7230fe48ee24dc37e621422c9dc64ec4 v3.23.4

v3.23.3

Commits:

  • 103d2436f85872ca0e0e6247652989cc93d46a39 3.23.3

v3.23.2

Commits:

... (truncated)

Commits


Updates @fingerprintjs/fingerprintjs from 4.2.2 to 4.4.0

Release notes

Sourced from @​fingerprintjs/fingerprintjs's releases.

v4.4.0

  • Add a new "AudioContext baseLatency" entropy source (#1004)
  • Revert audio fingerprint to the version from v4.1.0 (#1007)
  • handleApplePayError is no longer exported from the Node package (#1005). It was used for internal purposes.

v4.3.0

  • fix: A minus sign missing in the "timezone" entropy source fallback (#986)
  • fix: The geometry and text images in the "canvas" entropy source are swapped (#990). They were swapped mistakenly in v4.1.0.
Commits


Updates @playwright/test from 1.43.1 to 1.44.1

Release notes

Sourced from @​playwright/test's releases.

v1.44.1

Highlights

microsoft/playwright#30779 - [REGRESSION]: When using video: 'on' with VSCode extension the browser got closed microsoft/playwright#30755 - [REGRESSION]: Electron launch with spaces inside executablePath didn't work microsoft/playwright#30770 - [REGRESSION]: Mask elements outside of viewport when creating fullscreen screenshots didn't work microsoft/playwright#30858 - [REGRESSION]: ipv6 got shown instead of localhost in show-trace/show-report

Browser Versions

  • Chromium 125.0.6422.14
  • Mozilla Firefox 125.0.1
  • WebKit 17.4

This version was also tested against the following stable channels:

  • Google Chrome 124
  • Microsoft Edge 124

v1.44.0

New APIs

Accessibility assertions

  • expect(locator).toHaveAccessibleName() checks if the element has the specified accessible name:

    const locator = page.getByRole('button');
await expect(locator).toHaveAccessibleName('Submit');

  • expect(locator).toHaveAccessibleDescription() checks if the element has the specified accessible description:

    const locator = page.getByRole('button');
await expect(locator).toHaveAccessibleDescription('Upload a photo');

  • expect(locator).toHaveRole() checks if the element has the specified ARIA role:

    const locator = page.getByTestId('save-button');
await expect(locator).toHaveRole('button');

Locator handler

  • After executing the handler added with page.addLocatorHandler(), Playwright will now wait until the overlay that triggered the handler is not visible anymore. You can opt-out of this behavior with the new noWaitAfter option.
  • You can use new times option in page.addLocatorHandler() to specify maximum number of times the handler should be run.
  • The handler in page.addLocatorHandler() now accepts the locator as argument.
  • New page.removeLocatorHandler() method for removing previously added locator handlers.

... (truncated)

Commits


Updates @types/chrome from 0.0.266 to 0.0.268

Commits


Updates @types/node from 20.12.7 to 20.14.0

Commits


Updates esbuild from 0.20.2 to 0.21.4

Release notes

Sourced from esbuild's releases.

v0.21.4

  • Update support for import assertions and import attributes in node (#3778)

    Import assertions (the assert keyword) have been removed from node starting in v22.0.0. So esbuild will now strip them and generate a warning with --target=node22 or above:

    ▲ [WARNING] The "assert" keyword is not supported in the configured target environment ("node22") [assert-to-with]

    example.mjs:1:40:
  1 │ import json from "esbuild/package.json" assert { type: "json" }
    │                                         ~~~~~~
    ╵                                         with

    

    Did you mean to use "with" instead of "assert"?

    Import attributes (the with keyword) have been backported to node 18 starting in v18.20.0. So esbuild will no longer strip them with --target=node18.N if N is 20 or greater.

  • Fix for await transform when a label is present

    This release fixes a bug where the for await transform, which wraps the loop in a try statement, previously failed to also move the loop's label into the try statement. This bug only affects code that uses both of these features in combination. Here's an example of some affected code:

    // Original code
async function test() {
  outer: for await (const x of [Promise.resolve([0, 1])]) {
    for (const y of x) if (y) break outer
    throw 'fail'
  }
}

    // Old output (with --target=es6)
function test() {
return __async(this, null, function* () {
outer: try {
for (var iter = __forAwait([Promise.resolve([0, 1])]), more, temp, error; more = !(temp = yield iter.next()).done; more = false) {
const x = temp.value;
for (const y of x) if (y) break outer;
throw "fail";
}
} catch (temp) {
error = [temp];
} finally {
try {
more && (temp = iter.return) && (yield temp.call(iter));
} finally {
if (error)
throw error[0];
}
}

... (truncated)

Changelog

Sourced from esbuild's changelog.

0.21.4

  • Update support for import assertions and import attributes in node (#3778)

    Import assertions (the assert keyword) have been removed from node starting in v22.0.0. So esbuild will now strip them and generate a warning with --target=node22 or above:

    ▲ [WARNING] The "assert" keyword is not supported in the configured target environment ("node22") [assert-to-with]

    example.mjs:1:40:
  1 │ import json from "esbuild/package.json" assert { type: "json" }
    │                                         ~~~~~~
    ╵                                         with

    

    Did you mean to use "with" instead of "assert"?

    Import attributes (the with keyword) have been backported to node 18 starting in v18.20.0. So esbuild will no longer strip them with --target=node18.N if N is 20 or greater.

  • Fix for await transform when a label is present

    This release fixes a bug where the for await transform, which wraps the loop in a try statement, previously failed to also move the loop's label into the try statement. This bug only affects code that uses both of these features in combination. Here's an example of some affected code:

    // Original code
async function test() {
  outer: for await (const x of [Promise.resolve([0, 1])]) {
    for (const y of x) if (y) break outer
    throw 'fail'
  }
}

    // Old output (with --target=es6)
function test() {
return __async(this, null, function* () {
outer: try {
for (var iter = __forAwait([Promise.resolve([0, 1])]), more, temp, error; more = !(temp = yield iter.next()).done; more = false) {
const x = temp.value;
for (const y of x) if (y) break outer;
throw "fail";
}
} catch (temp) {
error = [temp];
} finally {
try {
more && (temp = iter.return) && (yield temp.call(iter));
} finally {
if (error)
throw error[0];
}

... (truncated)

Commits


Updates fake-indexeddb from 5.0.2 to 6.0.0

Release notes

Sourced from fake-indexeddb's releases.

v6.0.0

I made this a new major version because it includes a few changes that could in theory break something in some weird situations. But I think the vast majority of users (possibly all users?) won't have any issue upgrading.

  • #48 - Switched to using DOMException errors rather than normal errors, since that's what the IndexedDB spec says to use, and Node.js now has a built-in DOMException in all supported versions.

  • #93 - @​bryan-codaio made the latest tweak to event scheduling, this time improving how setImmediate is used in some situations where people are mocking timers.

  • #99 - @​sjnho fixed handling of Date objects to account for some edge cases, including jsdom overriding the native Date constructor.

Changelog

Sourced from fake-indexeddb's changelog.

6.0.0 (2024-05-20)

I made this a new major version because it includes a few changes that could in theory break something in some weird situations. But I think the vast majority of users (possibly all users?) won't have any issue upgrading.

  • #48 - Switched to using DOMException errors rather than normal errors, since that's what the IndexedDB spec says to use, and Node.js now has a built-in DOMException in all supported versions.

  • #93 - @​bryan-codaio made the latest tweak to event scheduling, this time improving how setImmediate is used in some situations where people are mocking timers.

  • #99 - @​sjnho fixed handling of Date objects to account for some edge cases, including jsdom overriding the native Date constructor.

Commits


Updates jsdom from 24.0.0 to 24.1.0

Release notes

Sourced from jsdom's releases.

Version 24.1.0

  • Added the getSetCookie() method to the Headers class. (ushiboy)
  • Fixed the creation and parsing of elements with names from Object.prototype, like "constructor" or "toString".
  • Updated rweb-cssom, which can now parse additional CSS constructs.
Changelog

Sourced from jsdom's changelog.

24.1.0

  • Added the getSetCookie() method to the Headers class. (ushiboy)
  • Fixed the creation and parsing of elements with names from Object.prototype, like "constructor" or "toString".
  • Updated rweb-cssom, which can now parse additional CSS constructs.
Commits
  • 4555914 Version 24.1.0
  • a693107 Fix elements with names from Object.prototype
  • 8738255 Add regression test for comma selector
  • a343932 Implement the getSetCookie() method of Headers
  • f2fa507 Update URLs and fix grammar error
  • 7dc7ab9 Fix getComputedStyle() not-implemented message
  • f5f2468 Update dependencies and most dev dependencies
  • b32d82b Fix wpt failure in overwritten-customElements-global.html
  • See full diff in compare view


Updates sass from 1.75.0 to 1.77.4

Release notes

Sourced from sass's releases.

Dart Sass 1.77.4

To install Sass 1.77.4, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

Embedded Sass

  • Support passing Version input for fatalDeprecations as string over embedded protocol.

  • Fix a bug in the JS Embedded Host where Version could be incorrectly accepted as input for silenceDeprecations and futureDeprecations in pure JS.

See the full changelog for changes in earlier releases.

Dart Sass 1.77.3

To install Sass 1.77.3, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

Dart API

  • Deprecation.duplicateVariableFlags has been deprecated and replaced with Deprecation.duplicateVarFlags to make it consistent with the duplicate-var-flags name used on the command line and in the JS API.

See the full changelog for changes in earlier releases.

Dart Sass 1.77.2

To install Sass 1.77.2, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

  • Don't emit deprecation warnings for functions and mixins beginning with __.

  • Allow user-defined functions whose names begin with _ and otherwise look like vendor-prefixed functions with special CSS syntax.

Command-Line Interface

  • Properly handle the --silence-deprecation flag.

  • Handle the --fatal-deprecation and --future-deprecation flags for --interactive mode.

See the full changelog for changes in earlier releases.

... (truncated)

Changelog

Sourced from sass's changelog.

1.77.4

Embedded Sass

  • Support passing Version input for fatalDeprecations as string over embedded protocol.

  • Fix a bug in the JS Embedded Host where Version could be incorrectly accepted as input for silenceDeprecations and futureDeprecations in pure JS.

1.77.3

Dart API

  • Deprecation.duplicateVariableFlags has been deprecated and replaced with Deprecation.duplicateVarFlags to make it consistent with the duplicate-var-flags name used on the command line and in the JS API.

1.77.2

  • Don't emit deprecation warnings for functions and mixins beginning with __.

  • Allow user-defined functions whose names begin with _ and otherwise look like vendor-prefixed functions with special CSS syntax.

Command-Line Interface

  • Properly handle the --silence-deprecation flag.

  • Handle the --fatal-deprecation and --future-deprecation flags for --interactive mode.

1.77.1

  • Fix a crash that could come up with importers in certain contexts.

1.77.0

  • Don't throw errors for at-rules in keyframe blocks.

1.76.0

  • Throw errors for misplaced statements in keyframe blocks.

  • Mixins and functions whose names begin with -- are now deprecated for forwards-compatibility with the in-progress CSS functions and mixins spec. This deprecation is named css-function-mixin.

Commits
  • 21eeb4d Parse Deprecation.forVersion on compiler side (#2248)
  • 1073c7b Generate deprecations list from the language repo (#2253)
  • fc24fec Use pubspec_parse dependency equality (#2254)
  • 5121eb1 Don't treat underscores as hyphens for the purpose of error checking (#2247)
  • bdc08fd Merge pull request #2246 from sass/deprecation-cli
  • 9a9e483 Add a test to ensure the sass_api dartdoc version matches sass
  • 8c48a01 Expand dartdoc range for sass_api to match sass
  • c9f0d3f Fix deprecation flags in the CLI and add tests
  • 54a6dec Bump lints from 3.0.0 to 4.0.0 (#2242)
  • 372f15c Fix MapExtensions.getOption() for nullable types (#2241)
  • Additional commits viewable in compare view


Updates webextension-polyfill from 0.10.0 to 0.12.0

Release notes

Sourced from webextension-polyfill's releases.

0.12.0

Bug Fixes

See all changes for 0.12.0

0.11.0

Bug Fixes

See all changes for 0.11.0

Commits
  • 1649d84 chore: bump version for release 0.12.0
  • 08c7650 fix: Remove webpack and webpack-cli dependencies (#614)
  • 89a7281 chore: drop -g from npm install in ci config (#597)
  • af051ff chore: bump version for release 0.11.0
  • 338d75f chore: chromedriver and geckodriver dependencies along with circleci config (...
  • 871b49d fix: no-op check to work with Safari and support of old browsers. (#582)
  • 0cf8915 chore(deps-dev): bump chromedriver from 110.0.0 to 112.0.0 (#456)
  • ff464da Update dependabot.yml
  • fbe11ef chore(deps-dev): bump grunt from 1.5.3 to 1.6.1 (#438)
  • 35faec3 chore(deps-dev): bump geckodriver from 3.0.2 to 3.2.0 (#427)
  • Additional commits viewable in compare view


Most Recent Ignore Conditions Applied to This Pull Request | Dependency Name | Ignore Conditions | | --- | --- | | jsdom | [>= 22.1.a, < 22.2] | | @playwright/test | [>= 1.40.a, < 1.41] |

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
dependabot[bot] commented 2 weeks ago

Superseded by #2552.