search

emdgroup-liquid / liquid

UI component library for the Liquid Design System of Merck KGaA, Darmstadt, Germany
https://liquid.emd.design/liquid/
Other
73 stars 10 forks source link

build(deps): bump the production-dependencies group with 2 updates #1089

Closed dependabot[bot] closed 4 months ago

dependabot[bot] commented 4 months ago

Bumps the production-dependencies group with 2 updates: @stencil/core and dompurify.

Updates @stencil/core from 4.17.2 to 4.18.0

Release notes

Sourced from @​stencil/core's releases.

🍵 4.18.0 (2024-05-06)

Bug Fixes

Features

  • docs: add style mode to docs-json output (#5718) (44fcba1)

Thanks

🎉 Thanks @​yigityuce for their contributions! 🎉

Changelog

Sourced from @​stencil/core's changelog.

🍵 4.18.0 (2024-05-06)

Bug Fixes

Features

  • docs: add style mode to docs-json output (#5718) (44fcba1)
Commits
  • 43454bb Release v4.18.0 (#5735)
  • a15af8e chore(deps): update dependency terser to v5.31.0 (#5733)
  • 922a972 fix(testing): support functional components in unit tests (#5722)
  • 1b7320b chore(deps): update dependency @​types/node to v20.12.8 (#5729)
  • afeaa4e chore(deps): update typescript-eslint to v7.8.0 (#5734)
  • a31da2e chore(deps): update dependency npm to v10.7.0 (#5732)
  • 86600ec chore(deps): update dependency @​types/pngjs to v6.0.5 (#5730)
  • 3a8d9c7 chore(deps): update dependency eslint-plugin-jest to v28.4.0 (#5731)
  • b40ebb9 fix(runtime): add root scope id to the nested child as classname (#5704)
  • 44fcba1 feat(docs): add style mode to docs-json output (#5718)
  • Additional commits viewable in compare view


Updates dompurify from 3.1.2 to 3.1.3

Release notes

Sourced from dompurify's releases.

DOMPurify 3.1.3

  • Fixed several mXSS variations found by and thanks to @​kevin-mizu & @​Ry0taK
  • Added better configurability for comment scrubbing default behavior
  • Added better hardening against Prototype Pollution attacks, thanks @​kevin-mizu
  • Added better handling and readability of the nodeType property, thanks @​ssi02014
  • Fixed some smaller issues in README and other documentation
Commits
  • 3fe78d7 chore: Preparing 3.1.3 release
  • b20ce99 fix: Added smaller-than-null check for __depth hardening code
  • 1e52026 fix: Hardened the depth tracking code against prototype pollution
  • 8df72f1 fix: Made the regex for comment scrubbing a bit stricter
  • ae517d6 fix: Expanded the comment scrubbing regex matching a bit further
  • b6818ce fix: Added better configurability for new comment behavior
  • aafd7a8 docs: Changed inline comments slightly to be more accurate
  • a377bf8 test: Fixed the tests
  • d1d5d22 fix: Added experiemental comment scrubbing inside attributes
  • dc61232 fix #949
  • Additional commits viewable in compare view


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
vercel[bot] commented 4 months ago

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
liquid ✅ Ready (Inspect) Visit Preview 💬 Add feedback May 13, 2024 3:36pm