jlkiri / gatsby-remark-shiki

A Gatsby plugin for code highlighting with Shiki for use with gatsby-transformer-remark.
MIT License
6 stars 6 forks source link

Bump lodash and tsdx #18

Open dependabot[bot] opened 2 years ago

dependabot[bot] commented 2 years ago

Bumps lodash to 4.17.21 and updates ancestor dependency tsdx. These dependencies need to be updated together.

Updates lodash from 4.17.15 to 4.17.21

Commits
  • f299b52 Bump to v4.17.21
  • c4847eb Improve performance of toNumber, trim and trimEnd on large input strings
  • 3469357 Prevent command injection through _.template's variable option
  • ded9bc6 Bump to v4.17.20.
  • 63150ef Documentation fixes.
  • 00f0f62 test.js: Remove trailing comma.
  • 846e434 Temporarily use a custom fork of lodash-cli.
  • 5d046f3 Re-enable Travis tests on 4.17 branch.
  • aa816b3 Remove /npm-package.
  • d7fbc52 Bump to v4.17.19
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by bnjmnt4n, a new releaser for lodash since your current version.


Updates tsdx from 0.12.3 to 0.14.1

Release notes

Sourced from tsdx's releases.

v0.14.1

Bugfixes

  • An upstream cache bug that affected certain combinations of build formats has been fixed

    • The error that was fixed would look similar to:
      (typescript) Error: ENOENT: no such file or directory, rename '[...]/my-lib/node_modules/.cache/rollup-plugin-typescript2/rpt2_4c61ae4392b9bd24f4d43d13a3f56419b8b5805d/code/cache_' -> '[...]/my-lib/node_modules/.cache/rollup-plugin-typescript2/rpt2_4c61ae4392b9bd24f4d43d13a3f56419b8b5805d/code/cache'
      
  • The built-in lodash -> lodash-es replacement no longer breaks imports of lodash/fp

Dependencies

  • The warning about incompatible peerDeps from eslint-config-react-app has been resolved

Commits

Bugfixes

  • fix/deps: upgrade rpts2 to fix cache issue (#896) eaa1c3b
  • fix: don't replace lodash/fp imports with lodash-es/fp (#884) 8b91c74

Dependencies

  • Use compatible eslint-config-react-app and eslint-plugin-react-hooks. (#890) 57f7dcc

GitHub

  • Create CODE_OF_CONDUCT.md (#899) e3e80d6

Internal

  • test: add a smoke test that builds all formats (#896) e2f1b76
  • test: ensure lodash-es replacement is done properly (#884) 9c4ce68

All Contributors

  • docs: add tanem as a contributor (#902) 81c8b2d
  • docs: add altrim as a contributor (#895) d292dd9
  • docs: add ludofischer as a contributor (#894) da53ea8

Commit Range

https://github.com/formium/tsdx/compare/v0.14.0...v0.14.1

v0.14.0

... (truncated)

Commits
  • 64c5094 v0.14.1
  • 81c8b2d docs: add tanem as a contributor (#902)
  • e2f1b76 test: add a smoke test that builds all formats
  • eaa1c3b fix/deps: upgrade rpts2 to fix cache issue
  • e3e80d6 Create CODE_OF_CONDUCT.md (#899)
  • d292dd9 docs: add altrim as a contributor (#895)
  • 9c4ce68 test: ensure lodash-es replacement is done properly
  • 8b91c74 fix: don't replace lodash/fp imports with lodash-es/fp
  • da53ea8 docs: add ludofischer as a contributor (#894)
  • 57f7dcc Use compatible eslint-config-react-app and eslint-plugin-react-hooks. (#890)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by agilgur5, a new releaser for tsdx since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/jlkiri/gatsby-remark-shiki/network/alerts).