search

hyphacoop / handbook

Member's handbook describing the vision, processes, and culture of Hypha 🌿🍄
https://handbook.hypha.coop
Creative Commons Attribution Share Alike 4.0 International
26 stars 4 forks source link

Bump jsdom, cheerio and honkit #195

Closed dependabot[bot] closed 1 year ago

dependabot[bot] commented 1 year ago

Removes jsdom. It's no longer used after updating ancestor dependencies jsdom, cheerio and honkit. These dependencies need to be updated together.

Removes jsdom

Updates cheerio from 0.20.0 to 1.0.0-rc.12

Release notes

Sourced from cheerio's releases.

v1.0.0-rc.12

Bugfix release. Fixed issues:

New Contributors

Full Changelog: https://github.com/cheeriojs/cheerio/compare/v1.0.0-rc.11...v1.0.0-rc.12

v1.0.0-rc.11

cheerio@1.0.0-rc.11 is hopefully the last RC before the 1.0.0 release of Cheerio. There are two APIs that will be added for the next major release: An exract method (cheeriojs/cheerio#2523) and NodeJS specific loader methods (cheeriojs/cheerio#2051). These are still in flux and I'd appreciate feedback on the proposals.

A big thank you to everyone that contributed to this release! This includes code contributors, as well as the amazing financial support on GitHub Sponsors!

Under the hood, a lot of work for this release went into updating parse5, cheerio's default HTML parser. Have a look at parse5's release notes to see what has changed there.

Breaking

  • Cheerio is now a dual CommonJS and ESM module. That means that deep imports will now fail in newer versions of Node. cheeriojs/cheerio#2508
  • script and style contents are added again in .text() cheeriojs/cheerio#2509
    • To keep the old behavior, switch .text() to .prop('innerText')
  • The TypeScript types inherited from upstream dependencies have changed. cheeriojs/cheerio#2503
    • Node types are now using tagged unions, which will make consumption a bit easier.

Features

Fixes

Refactor

... (truncated)

Changelog

Sourced from cheerio's changelog.

Starting with 1.0.0-rc.4, release notes are exclusively tracked in GitHub Releases.

1.0.0-rc.3 / 2019-04-06

This release corrects a test expectation that was fixed by one of the project's dependencies.

1.0.0-rc.2 / 2017-07-02

This release changes Cheerio's default parser to the Parse5 HTML parser. Parse5 is an excellent project that rigorously conforms to the HTML standard. It does not support XML, so Cheerio continues to use htmlparser2 when working with XML documents.

This switch addresses many long-standing bugs in Cheerio, but some users may experience slower behavior in performance-critical applications. In addition, htmlparser2 is more forgiving of invalid markup which can be useful when input sourced from a third party and cannot be corrected. For these reasons, the load method also accepts a DOM structure as produced by the htmlparser2 library. See the project's "readme" file for more details on this usage pattern.

Migrating from version 0.x

cheerio.load( html[, options ] ) This method continues to act as a "factory" function. It produces functions that define an API that is similar to the global jQuery function provided by the jQuery library. The generated function operates on a DOM structure based on the provided HTML.

In releases prior to version 1.0, the provided HTML was interpreted as a document fragment. Following version 1.0, strings provided to the load method are interpreted as documents. The same example will produce a $ function that operates on a full HTML document, including an <html> document element with nested <head> and <body> tags. This mimics web browser behavior much more closely, but may require alterations to existing code.

For example, the following code will produce different results between 0.x and 1.0 releases:

var $ = cheerio.load('<p>Hello, <b>world</b>!</p>');

$.root().html();


//=> In version 0.x: '<p>Hello, <b>world</b>!</p>'
//=> In version 1.0: '<html><head></head><body><p>Hello, <b>world</b>!</p></body></html>'

Users wishing to parse, manipulate, and render full documents should not need to modify their code. Likewise, code that does not interact with the "root"

... (truncated)

Commits


Updates honkit from 3.7.1 to 4.0.4

Release notes

Sourced from honkit's releases.

v4.0.4

Refactoring

Comments

v4.0.3

Fixes

  • theme-default: add --flat to fonts (#305) (c543b45)
    • fix to load font-awesome fonts correctly

Comments

v4.0.2

Fixes

  • theme-default: Fix image resources path #301

Comments

v4.0.1

Fixes

It will resolve security warning about cheerio

Comments

v4.0.0

Breaking Changes

Drop support Node.js 12.

Probably, Current HonKit still work on Node.js 12, but it will be broken in minor updates.

Update Node.js to 16 in Docker Image

... (truncated)

Changelog

Sourced from honkit's changelog.

4.0.4 (2022-10-22)

Note: Version bump only for package honkit-root

4.0.3 (2022-10-22)

Bug Fixes

4.0.2 (2022-10-19)

Bug Fixes

  • honkit: fix missing --flat for cpy 9+ (#301) (90edf03)

4.0.1 (2022-10-18)

Bug Fixes

4.0.0 (2022-08-28)

Bug Fixes

... (truncated)

Commits


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/hyphacoop/handbook/network/alerts).