Bump the npm_and_yarn group with 8 updates

[dependabot[bot]]

Bumps the npm_and_yarn group with 8 updates:

Package	From	To
bootstrap	3.4.1	5.0.0
rollup	2.79.1	4.22.4
@rollup/plugin-babel	5.3.1	6.0.4
@rollup/plugin-commonjs	22.0.2	28.0.0
@rollup/plugin-json	4.1.0	6.1.0
@rollup/plugin-node-resolve	13.3.0	15.3.0
@rollup/plugin-replace	4.0.0	6.0.1
@rollup/stream	2.0.0	3.0.1

Updates bootstrap from 3.4.1 to 5.0.0

Release notes

Sourced from bootstrap's releases.

v5.0.0

Highlights

#32155: Updated make-col() mixin to generate equal columns when no size is specified #32763: Added new color-scheme() mixin #33389: Dropdown menus now have option become clickable #33453: Added new docs footer #33548: Offcanvas header components are now vertically aligned #33549: Added offcanvas-top modifier #33634: Added support for .dropdown-items wrapped in <li>s #33626: Fix v5 regressions in tab dropdown functionality

🚀 Features

• #32763: Add color-scheme mixin
• #33389: Dropdown — Add option to make the dropdown menu clickable
• #33549: Add offcanvas-top modifier

🎨 CSS

• #32155: Add equal column mixin
• #32763: Add color-scheme mixin
• #33292: Make accordion icon rotation more natural
• #33411: Fix validation feedback icon in select multiple
• #33478: Make .nav-link color consistent when using buttons
• #33482: Dropdown — Apply positioning only when Popper is not used
• #33548: Vertically align offcanvas header components
• #33549: Add offcanvas-top modifier
• #33550: Spinner alignment changes
• #33598: Hide validation icons from multiple selects
• #33600: Have $form-check-input-border's default derive from $black
• #33607: Reduce color-scheme complexity
• #33642: use :read-only css selector instead [readonly] for consistency
• #33658: fix: use list-group variable instead of alert
• #33736: accordion: fix border-top on Firefox

☕️ JavaScript

• #32439: Decouple BackDrop from modal
• #33245: Decouple Modal's scrollbar functionality
• #33249: Simplify Modal Config
• #33250: Simplify ScrollSpy config
• #33310: fix: make EventHandler better handle mouseenter/mouseleave events
• #33389: Dropdown — Add option to make the dropdown menu clickable
• #33429: Remove element event listeners through base component
• #33451: Add missing things in hide method of dropdown
• #33456: Use our isDisabled util on dropdown
• #33466: Refactor dropdown's hide functionality
• #33479: Fix dropdown escape propagation
• #33496: Use cached noop function

... (truncated)

Commits

• bf09367 Release v5.0.0 (#33647)
• 48ae5a7 Rewrite migration guide (#33834)
• f086572 refactor(docs): Added form file input variables (#33833)
• 1a54286 Fix doc typo and Bootstrap Icons link (#33832)
• e2df73f Update migration guide for some v5 changes (#33829)
• 1e6356a Neutralise more words from placeholder text (#33731)
• 6633845 Bump eslint-config-xo from 0.35.0 to 0.36.0 (#33646)
• cb38744 Tweak toast docs (#33810)
• c2ff225 Bump rollup from 2.46.0 to 2.47.0 (#33818)
• c090ea2 Bump @​babel/preset-env from 7.14.0 to 7.14.1 (#33819)
• Additional commits viewable in compare view

Updates rollup from 2.79.1 to 4.22.4

Release notes

Sourced from rollup's releases.

v4.22.4

4.22.4

2024-09-21

Bug Fixes

• Fix a vulnerability in generated code that affects IIFE, UMD and CJS bundles when run in a browser context (#5671)

Pull Requests

• #5670: refactor: Use object.prototype to check for reserved properties (@​YuHyeonWook)
• #5671: Fix DOM Clobbering CVE (@​lukastaegert)

v4.22.3

4.22.3

2024-09-21

Bug Fixes

• Ensure that mutations in modules without side effects are observed while properly handling transitive dependencies (#5669)

Pull Requests

• #5669: Ensure impure dependencies of pure modules are added (@​lukastaegert)

v4.22.2

4.22.2

2024-09-20

Bug Fixes

• Revert fix for side effect free modules until other issues are investigated (#5667)

Pull Requests

• #5667: Partially revert #5658 and re-apply #5644 (@​lukastaegert)

v4.22.1

4.22.1

2024-09-20

Bug Fixes

• Revert #5644 "stable chunk hashes" while issues are being investigated

Pull Requests

... (truncated)

Changelog

Sourced from rollup's changelog.

4.22.4

2024-09-21

Bug Fixes

• Fix a vulnerability in generated code that affects IIFE, UMD and CJS bundles when run in a browser context (#5671)

Pull Requests

• #5670: refactor: Use object.prototype to check for reserved properties (@​YuHyeonWook)
• #5671: Fix DOM Clobbering CVE (@​lukastaegert)

4.22.3

2024-09-21

Bug Fixes

• Ensure that mutations in modules without side effects are observed while properly handling transitive dependencies (#5669)

Pull Requests

• #5669: Ensure impure dependencies of pure modules are added (@​lukastaegert)

4.22.2

2024-09-20

Bug Fixes

• Revert fix for side effect free modules until other issues are investigated (#5667)

Pull Requests

• #5667: Partially revert #5658 and re-apply #5644 (@​lukastaegert)

4.22.1

2024-09-20

Bug Fixes

• Revert #5644 "stable chunk hashes" while issues are being investigated

Pull Requests

• #5663: chore(deps): update dependency inquirer to v11 (@​renovate[bot], @​lukastaegert)
• #5664: chore(deps): lock file maintenance minor/patch updates (@​renovate[bot])
• #5665: fix: type in CI file (@​YuHyeonWook)

... (truncated)

Commits

• 79c0aba 4.22.4
• e2552c9 Fix DOM Clobbering CVE (#5671)
• 10ab90e refactor: Use object.prototype to check for reserved properties (#5670)
• e1cba8e 4.22.3
• 59cec3e Ensure impure dependencies of pure modules are added (#5669)
• b86ffd7 4.22.2
• d5ff63d Partially revert #5658 and re-apply #5644 (#5667)
• 0a821d9 Create SECURITY.md
• 76e962d 4.22.1
• 68c23da Partially revert #5644
• Additional commits viewable in compare view

Updates @rollup/plugin-babel from 5.3.1 to 6.0.4

Changelog

Sourced from @​rollup/plugin-babel's changelog.

v6.0.4

2023-10-05

Bugfixes

• fix: ensure rollup 4 compatibility #1595

v6.0.3

2022-11-25

Updates

• docs: small typo in babel plugin readme #1355

v6.0.2

2022-10-21

Updates

• chore: update rollup dependencies (3038271)

v6.0.1

Skipped for repo rebase

v6.0.0

2022-10-08

Breaking Changes

• fix: prepare for Rollup 3 #1303

Commits

• cdf9113 chore(repo): manually update changelog and package versions after bad release...
• 841a039 fix(alias,auto-install,babel,beep,buble,commonjs,data-uri,dsv,dynamic-import-...
• d35d007 chore(repo): add missing prepare script for several packages (#1562)
• a2e582a chore(repo): enable consistent-type-imports for typescript files (#1325)
• 19ad1b6 chore(release): babel v6.0.3
• 2ae1c62 docs(babel): small typo in babel plugin readme (#1355)
• 15f70ce chore(release): babel v6.0.2
• 3038271 chore(commonjs,yaml,wasm,virtual,url,typescript,sucrase,strip,run,replace,plu...
• 0e6cfe1 chore(release): babel v6.0.0
• 3a46d39 fix(babel): prepare for Rollup 3 (#1303)
• Additional commits viewable in compare view

Updates @rollup/plugin-commonjs from 22.0.2 to 28.0.0

Changelog

Sourced from @​rollup/plugin-commonjs's changelog.

v28.0.0

2024-09-23

Breaking Changes

• chore: switch to fdir for fewer dependencies (#1741)

v27.0.0

2024-09-23

Breaking Changes

• feat!: default strictRequires to true (#1639)
• fix!: replace top-level this with exports name (#1618)

v26.0.3

2024-09-23

Updates

• chore: revert #1618 (e98927b)

v26.0.1

2024-06-05

Bugfixes

• fix: correct import of glob (04a15b5)

v26.0.0

2024-06-05

Breaking Changes

• chore!: bump glob's version (#1695)

v25.0.8

2024-05-22

Bugfixes

• fix: preserve the class body property keys even if they are special keywords (#1688)

v25.0.7

... (truncated)

Commits

• 0af45c2 chore(release): commonjs v28.0.0
• c2a05eb chore(commonjs): switch to fdir for fewer dependencies (#1741)
• b6fa3b1 chore(release): commonjs v27.0.0
• 8f02987 feat(commonjs)!: default strictRequires to true (#1639)
• 274b72c chore(repo): cherry-pick. commonjs. replace top-level this with exports name ...
• e2a7195 chore(release): commonjs v26.0.3
• e98927b chore(commonjs): revert #1618
• 1e73857 chore(release): commonjs v26.0.2
• 2fdd077 fix(commonjs): replace top-level this with exports name (#1618)
• 8550c4b chore(release): commonjs v26.0.1
• Additional commits viewable in compare view

Updates @rollup/plugin-json from 4.1.0 to 6.1.0

Changelog

Sourced from @​rollup/plugin-json's changelog.

v6.1.0

2023-12-12

Features

• feat: add includeArbitraryNames option (#1641)

v6.0.1

2023-10-05

Bugfixes

• fix: ensure rollup 4 compatibility #1595

v6.0.0

2022-12-17

Breaking Changes

• fix: log more robustly when JSON parsing fails #1361

v5.0.2

2022-11-27

Updates

• docs: correct minimatch to picomatch #1332

v5.0.1

2022-10-21

Updates

• chore: update rollup dependencies (3038271)

v5.0.0

2022-10-10

Breaking Changes

• fix: prepare for Rollup 3 #1291

Updates

... (truncated)

Commits

• 8205497 chore(repo): automatically publish packages (#940)
• 81781a8 chore(repo): fix the prepublishOnly scripts for most plugins
• fba0a6b chore(repo): remove circle ci, add validate workflow, update deps (#867)
• 0150c55 chore(repo): Add "directory" to package.json repository fields. (#826)
• 621768b feat(commonjs)!: return the namespace by default when requiring ESM (#507)
• 678125b chore(json): update dependencies
• See full diff in compare view

Updates @rollup/plugin-node-resolve from 13.3.0 to 15.3.0

Changelog

Sourced from @​rollup/plugin-node-resolve's changelog.

v15.3.0

2024-09-23

Features

• feat: allow preferBuiltins to be a function (#1694)

v15.2.4

2024-09-22

Updates

• chore: remove is-builtin-module (#1735)

v15.2.3

2023-10-08

Bugfixes

• fix: modulePaths default is not set #1534

v15.2.2

2023-10-05

Bugfixes

• fix: ensure rollup 4 compatibility #1595

v15.2.1

2023-08-22

Bugfixes

• fix: Implement package exports / imports resolution algorithm according to Node documentation #1549

v15.2.0

2023-08-17

Features

• feat: pass original importee to secondary resolve #1557

v15.1.0

... (truncated)

Commits

• a8e326d chore(release): node-resolve v15.3.0
• 032055b feat(node-resolve): allow preferBuiltins to be a function (#1694)
• 6d4bb6b chore(release): node-resolve v15.2.4
• 190aa21 chore(node-resolve): remove is-builtin-module (#1735)
• dcd8da5 chore(repo): use @dot/versioner for releases (#1612)
• 1caee89 chore(release): node-resolve v15.2.3
• ab3f45d fix(node-resolve): modulePaths default is not set (#1534)
• cdf9113 chore(repo): manually update changelog and package versions after bad release...
• 841a039 fix(alias,auto-install,babel,beep,buble,commonjs,data-uri,dsv,dynamic-import-...
• 9bfc5d9 chore(release): node-resolve v15.2.1
• Additional commits viewable in compare view

Updates @rollup/plugin-replace from 4.0.0 to 6.0.1

Changelog

Sourced from @​rollup/plugin-replace's changelog.

v6.0.1

2024-09-23

Bugfixes

• fix: The preventAssignment option is treated as a value to replace (#1768)

v6.0.0

2024-09-23

Breaking Changes

• fix!: objectGuards doesn't take effects (#1764)

v5.0.7

2024-06-05

Bugfixes

• fix: add missing sourceMap documentation (#1698)

v5.0.6

2024-06-05

Bugfixes

• fix: ternary operator replacement (#1712)

v5.0.5

2023-10-29

Bugfixes

• fix: prevent variable before colons from being replaced when preventAssigment is true (#1609)

v5.0.4

2023-10-15

Bugfixes

• fix: bump magic-string version #1596

v5.0.3

... (truncated)

Commits

• cdf9113 chore(repo): manually update changelog and package versions after bad release...
• 841a039 fix(alias,auto-install,babel,beep,buble,commonjs,data-uri,dsv,dynamic-import-...
• ec974f2 chore(release): replace v5.0.2
• f5aa3c3 fix(commonjs,dynamic-import-vars,inject,replace,strip): update magic-string (...
• a2e582a chore(repo): enable consistent-type-imports for typescript files (#1325)
• 8791470 chore(release): replace v5.0.1
• 3038271 chore(commonjs,yaml,wasm,virtual,url,typescript,sucrase,strip,run,replace,plu...
• bdc099e chore(release): replace v5.0.0
• cba9788 fix(replace): prepare for Rollup 3 (#1286)
• 69146cd chore(repo): central changes for Rollup 3 updates (#1277)
• Additional commits viewable in compare view

Updates @rollup/stream from 2.0.0 to 3.0.1

Commits

• 91306a4 chore(release): 3.0.1
• 284ff09 Update package.json to allow for Rollup 4.0 (#20)
• 7bf6660 chore(release): 3.0.0
• 8c11729 fix!: update rollup peer dependency (#18)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/emfcamp/Website/network/alerts).

[lukegb]

Upgrading bootstrap and rollup across 2 major versions seems perfectly safe, what could possibly go wrong

(no, I'm not approving this)