search

eclipse-thingweb / playground

Browser application for validating and designing W3C Thing Descriptions and Thing Models.
https://playground.thingweb.io/
Other
28 stars 19 forks source link

Bump tough-cookie and jsonld in /packages/core #477

Closed dependabot[bot] closed 6 months ago

dependabot[bot] commented 1 year ago

Removes tough-cookie. It's no longer used after updating ancestor dependency jsonld. These dependencies need to be updated together.

Removes tough-cookie

Updates jsonld from 4.0.1 to 8.2.0

Changelog

Sourced from jsonld's changelog.

8.2.0 - 2023-05-19

Changed

  • Update for latest [rdf-canon][] changes: test suite location, README, links, and identifiers.
    • Skip test with 'U' escapes. Will enable when [rdf-canonize][] dependency is updated.
  • Test on Node.js 20.x.
  • Align test and benchmark code with [rdf-canonize][].
    • NOTE: This changes various testing and benchmark runner features and options.
    • Update env var usage.
    • Use more common code between Node.js and karma tests.
    • Conditionally load test suites.
    • Fix various minor bugs.
    • Add multiple jobs benchmarking support.
  • Update benchmark compare script.

Fixed

  • Improve safe mode for @graph use cases.
  • Fix @json frame test 0069.

8.1.1 - 2023-02-25

Fixed

  • Don't fail in safe mode for a value object with "@type": "@json".

8.1.0 - 2022-08-29

Fixed

  • relative property reference event renamed to relative predicate reference.
  • relative type reference event renamed to relative object reference.

8.0.0 - 2022-08-23

Changed

  • BREAKING: By default, set safe mode to true and base to null in canonize. Applications that were previously canonizing data may see new errors if their data did not fully define terms or used relative URLs that would be dropped when converting to canonized RDF. Now these situations are caught via safe mode by default, informing the developer that they need to fix their data.

7.0.0 - 2022-08-16

Fixed

  • compact t0111 test: "Keyword-like relative IRIs"

... (truncated)

Commits


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/thingweb/thingweb-playground/network/alerts).
egekorkan commented 1 year ago

@danielpeintner can you restart the run? As a non-committer I seem to be not able to do that

egekorkan commented 1 year ago

Ok it seems to be some other problem, jsonld got upgraded 4 major versions and locally tests hang as well...

netlify[bot] commented 6 months ago

Deploy Preview for thingweb-playground failed.

Name Link
Latest commit d7bedc38e4b3bdb3130d5d61ad6ca551efd9c8d0
Latest deploy log https://app.netlify.com/sites/thingweb-playground/deploys/662bb7088a0e9e000825b837
egekorkan commented 6 months ago

After the removal of the web package and the creating of a new one, this PR has too many conflicts. Since the actual change is trivial, we will open a new PR and fix it

dependabot[bot] commented 6 months ago

OK, I won't notify you again about this release, but will get in touch when a new version is available. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.