kartverket / kvib

Kartverkets interaksjons- og designbibliotek
https://design.kartverket.no/
Other
5 stars 11 forks source link

Bump the major-dependencies group across 1 directory with 2 updates #859

Closed dependabot[bot] closed 3 weeks ago

dependabot[bot] commented 1 month ago

Bumps the major-dependencies group with 2 updates in the / directory: date-fns and react-day-picker.

Updates date-fns from 3.6.0 to 4.1.0

Release notes

Sourced from date-fns's releases.

v4.1.0

This release adds time zone support to format functions (that I somehow missed when working on the feature) and fixes a few bugs.

Make sure also upgrade TZDate to v1.0.2 as it includes a bunch of critical bug fixes.

Fixed

  • Fixed internal constructFrom throwing an exception on null arguments. While null isn't allowed, the functions should rather return Invalid Date or NaN in such cases. See #3885.

Added

  • Added missing time zone support to format, formatISO, formatISO9075, formatRelative and formatRFC3339. See #3886.

v4.0.0

I have great news! First, ten years after its release, date-fns finally gets first-class time zone support.

Another great news is that there aren't many breaking changes in this release. All of them are type-related and will affect only those explicitly using internal date-fns types. Finally, it has been less than a year since the last major release, which is an improvement over the previous four years between v2 and v3. I plan on keeping the pace and minimizing breaking changes moving forward.

Read more about the release in the announcement blog post.

- Sasha @​kossnocorp

Added

  • Added time zones support via @date-fns/tz's TZDate class and tz helper function. See its README for the details about the API.

  • All relevant functions now accept the context in option, which allows to specify the time zone to make the calculations in. If the function also returns a date, it will be in the specified time zone:

    import { addDays, startOfDay } from "date-fns";
    import { tz } from "@date-fns/tz";
    

    startOfDay(addDays(Date.now(), 5, { in: tz("Asia/Singapore") }));
    //=> "2024-09-16T00:00:00.000+08:00"

    In the example, addDays will get the current date and time in Singapore and add 5 days to it. startOfDay will inherit the date type and return the start of the day in Singapore.

Changed

  • The function arguments, as well as Interval's start and end, now can be of different types, allowing you to mix UTCDate, TZDate, Date, and other extensions, as well as primitives (strings and numbers).

    The functions will normalize these values, make calculations, and return the result in the same type, preventing any bugs caused by the discrepancy. If passed, the type will be inferred from the context in option or the first encountered argument object type. The Interval's start and end will be considered separately, starting from start.

    In the given example, the result will be in the TZDate as the first argument is a number, and the start takes precedence over the end.

    clamp(Date.now(), {
      start: new TZDate(start, "Asia/Singapore"),
      end: new UTCDate(),
    

... (truncated)

Changelog

Sourced from date-fns's changelog.

v4.1.0 - 2024-09-17

This release adds time zone support to format functions (that I somehow missed when working on the feature) and fixes a few bugs.

Make sure also upgrade TZDate to v1.0.2 as it includes a bunch of critical bug fixes.

Fixed

  • Fixed internal constructFrom throwing an exception on null arguments. While null isn't allowed, the functions should rather return Invalid Date or NaN in such cases. See #3885.

Added

  • Added missing time zone support to format, formatISO, formatISO9075, formatRelative and formatRFC3339. See #3886.

v4.0.0 - 2024-09-16

I have great news! First, ten years after its release, date-fns finally gets first-class time zone support.

Another great news is that there aren't many breaking changes in this release. All of them are type-related and will affect only those explicitly using internal date-fns types. Finally, it has been less than a year since the last major release, which is an improvement over the previous four years between v2 and v3. I plan on keeping the pace and minimizing breaking changes moving forward.

Read more about the release in the announcement blog post.

- Sasha @​kossnocorp

Added

  • Added time zones support via @date-fns/tz's TZDate class and tz helper function. See its README for the details about the API.

  • All relevant functions now accept the context in option, which allows to specify the time zone to make the calculations in. If the function also returns a date, it will be in the specified time zone:

    import { addDays, startOfDay } from "date-fns";
    import { tz } from "@date-fns/tz";
    

    startOfDay(addDays(Date.now(), 5, { in: tz("Asia/Singapore") }));
    //=> "2024-09-16T00:00:00.000+08:00"

    In the example, addDays will get the current date and time in Singapore and add 5 days to it. startOfDay will inherit the date type and return the start of the day in Singapore.

Changed

  • The function arguments, as well as Interval's start and end, now can be of different types, allowing you to mix UTCDate, TZDate, Date, and other extensions, as well as primitives (strings and numbers).

    The functions will normalize these values, make calculations, and return the result in the same type, preventing any bugs caused by the discrepancy. If passed, the type will be inferred from the context in option or the first encountered argument object type. The Interval's start and end will be considered separately, starting from start.

    In the given example, the result will be in the TZDate as the first argument is a number, and the start takes precedence over the end.

    clamp(Date.now(), {
    

... (truncated)

Commits
  • 313b902 Fix v4.1.0 change log entry
  • 26cd336 Promote to v4.1.0
  • 97b53b9 Cover time zone edge cases
  • 59b7563 Add missing time zone support to format, formatISO, formatISO9075, formatRela...
  • 0121164 Prevent constructFrom from throwing an error on null
  • bd87ef5 Update @​date-fns/docs
  • 99b4e67 Prepare v4.0
  • 8df1706 Rewrite the time zones doc
  • e351977 Promote to v4.0.0-beta.1
  • 8523656 Fix scripts/test/types.sh
  • Additional commits viewable in compare view


Updates react-day-picker from 8.10.1 to 9.1.3

Release notes

Sourced from react-day-picker's releases.

v9.1.3

This release includes some minor build fixes and documentation updates.

What's Changed

New Contributors

Full Changelog: https://github.com/gpbl/react-day-picker/compare/v9.1.2...v9.1.3

v9.1.2

What's Changed

Full Changelog: https://github.com/gpbl/react-day-picker/compare/v9.1.1...v9.1.2

v9.1.1

This release improves reliability for controlled mode and adds experimental support for time zones.

Time Zone Support

By integrating the @​date-fns/tz utilities for handling time zones, we have added a new experimental timeZone prop. Please see the updated docs for more details.

import { DayPicker, TZDate } from 'react-day-picker';
<DayPicker 
    timeZone="Europe/Athens"  // set the time zone
    disabled={TZDate.tz("Europe/Athens")}  // make sure you use `TZDate` to initialize dates
/> 

[!NOTE] If you were using the experimental react-day-picker/utc module, you can skip now it. Remove the @date-fns/utc package and just pass timeZone="UTC" to <DayPicker />.

What's Changed

Full Changelog: https://github.com/gpbl/react-day-picker/compare/v9.1.0...v9.1.1

... (truncated)

Changelog

Sourced from react-day-picker's changelog.

Changelog

DayPicker follows Semantic Versioning. See the Releases page on Github for the complete list of changes, diffs and contributors, or the list of versions published on npm.

v9

First release: 2024-07-20

This release includes important updates related to accessibility, styles and localization. See the updated docs at https://daypicker.dev and the Upgrading Guide for more details.

Install the Latest Version

npm install react-day-picker@latest

What’s New

  • Moved date-fns from peer dependencies to dependencies.
  • Added support for time zones and Jalali Calendar.
  • Enhanced accessibility to better comply with WCAG 2.1 recommendations.
  • Simplified styles and new CSS variables for easier customization.
  • New excludeDisabled prop for range mode.
  • New dropdown-years and dropdown-months caption layouts.
  • New hideWeekdayRow and hideNavigation props.
  • Updated for a complete custom components support.
  • Improved typings and props for better compatibility in TypeScript strict mode.

Breaking Changes

While we tried to keep the API as stable as possible, some breaking changes were necessary to improve the library:

  • The updated ARIA labels could require new translations or updated unit tests selectors.
  • Custom CSS styles will likely break, due to the updated CSS classes and simplified styles.
  • Custom Components have new API and may break.
  • Some typings have been renamed or deprecated.
  • The useInput hook has been removed. See Input fields guide for more details.
  • onWeekNumberClick has been removed. Use a custom component to handle week number clicks.
  • Some of the onDay* events, like onDayTouchStart or onDayDoubleClick have been removed. To reimplement them, use a custom DayButton component (example).
  • The updated build system to ESM and CommonJS could break some custom bundler.

Upgrading Guide

We prepared a Upgrading guide for help upgrading your app to v9. We welcome feedback about the upgrade process, to ensure it's smooth for everyone.

Get Support and Report Issues

Please report any issues or provide feedback on the GitHub repository.

Commits
  • f56c3ce build(deps): update @​date-fns/tz (#2494)
  • b9e92d5 build: bump v9.1.3
  • 1b15c22 build: add tsconfig-base.json (#2492)
  • 9752c0c docs: fix Accessibility Guide links
  • 58966af docs: move accessibility guide
  • 06b2550 docs: updates for time zone
  • 2f8fc63 build(deps-dev): bump @​types/react from 18.3.6 to 18.3.8 (#2487)
  • cd8da0a build(deps-dev): bump vite from 5.4.3 to 5.4.7 (#2486)
  • 1cf9371 build(deps-dev): bump @​typescript-eslint/parser from 8.5.0 to 8.6.0 (#2485)
  • 235cd31 build(deps-dev): bump html-validate from 8.22.0 to 8.23.0 (#2484)
  • Additional commits viewable in compare view


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
changeset-bot[bot] commented 1 month ago

⚠️ No Changeset found

Latest commit: 68cbe7d3bbeb168ca3b4bab7866d94f1c67ac0a6

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

github-actions[bot] commented 1 month ago

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
npm/@date-fns/tz 1.1.2 UnknownUnknown
npm/date-fns 4.1.0 :green_circle: 4.5
Details
CheckScoreReason
Code-Review:warning: 0Found 0/21 approved changesets -- score normalized to 0
Maintained:green_circle: 1030 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices:warning: 0no effort to earn an OpenSSF best practices badge detected
License:green_circle: 10license file detected
Signed-Releases:warning: -1no releases found
Branch-Protection:warning: -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Security-Policy:green_circle: 10security policy file detected
Packaging:warning: -1packaging workflow not detected
Dangerous-Workflow:green_circle: 10no dangerous workflow patterns detected
Token-Permissions:warning: 0detected GitHub workflow tokens with excessive permissions
Binary-Artifacts:green_circle: 10no binaries found in the repo
Pinned-Dependencies:warning: 0dependency not pinned by hash detected -- score normalized to 0
SAST:warning: 0SAST tool is not run on all commits -- score normalized to 0
Fuzzing:warning: 0project is not fuzzed
Vulnerabilities:warning: 021 existing vulnerabilities detected
npm/react-day-picker 9.1.3 :green_circle: 5.2
Details
CheckScoreReason
Code-Review:warning: 0Found 1/25 approved changesets -- score normalized to 0
Maintained:green_circle: 1030 commit(s) and 17 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices:warning: 0no effort to earn an OpenSSF best practices badge detected
License:green_circle: 10license file detected
Signed-Releases:warning: -1no releases found
Dangerous-Workflow:green_circle: 10no dangerous workflow patterns detected
Packaging:warning: -1packaging workflow not detected
Security-Policy:green_circle: 10security policy file detected
Token-Permissions:warning: 0detected GitHub workflow tokens with excessive permissions
Binary-Artifacts:green_circle: 10no binaries found in the repo
Pinned-Dependencies:warning: 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing:warning: 0project is not fuzzed
Branch-Protection:warning: -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
SAST:green_circle: 8SAST tool is not run on all commits -- score normalized to 8
Vulnerabilities:warning: 28 existing vulnerabilities detected
npm/date-fns ^4.1.0 :green_circle: 4.5
Details
CheckScoreReason
Code-Review:warning: 0Found 0/21 approved changesets -- score normalized to 0
Maintained:green_circle: 1030 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices:warning: 0no effort to earn an OpenSSF best practices badge detected
License:green_circle: 10license file detected
Signed-Releases:warning: -1no releases found
Branch-Protection:warning: -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Security-Policy:green_circle: 10security policy file detected
Packaging:warning: -1packaging workflow not detected
Dangerous-Workflow:green_circle: 10no dangerous workflow patterns detected
Token-Permissions:warning: 0detected GitHub workflow tokens with excessive permissions
Binary-Artifacts:green_circle: 10no binaries found in the repo
Pinned-Dependencies:warning: 0dependency not pinned by hash detected -- score normalized to 0
SAST:warning: 0SAST tool is not run on all commits -- score normalized to 0
Fuzzing:warning: 0project is not fuzzed
Vulnerabilities:warning: 021 existing vulnerabilities detected
npm/react-day-picker ^9.1.3 :green_circle: 5.2
Details
CheckScoreReason
Code-Review:warning: 0Found 1/25 approved changesets -- score normalized to 0
Maintained:green_circle: 1030 commit(s) and 17 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices:warning: 0no effort to earn an OpenSSF best practices badge detected
License:green_circle: 10license file detected
Signed-Releases:warning: -1no releases found
Dangerous-Workflow:green_circle: 10no dangerous workflow patterns detected
Packaging:warning: -1packaging workflow not detected
Security-Policy:green_circle: 10security policy file detected
Token-Permissions:warning: 0detected GitHub workflow tokens with excessive permissions
Binary-Artifacts:green_circle: 10no binaries found in the repo
Pinned-Dependencies:warning: 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing:warning: 0project is not fuzzed
Branch-Protection:warning: -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
SAST:green_circle: 8SAST tool is not run on all commits -- score normalized to 8
Vulnerabilities:warning: 28 existing vulnerabilities detected

Scanned Manifest Files

package-lock.json
  • @date-fns/tz@1.1.2
  • date-fns@4.1.0
  • react-day-picker@9.1.3
  • @babel/plugin-transform-react-jsx-self@7.24.7
  • @babel/plugin-transform-react-jsx-source@7.24.7
  • @vitejs/plugin-react@4.3.2
  • argparse@2.0.1
  • date-fns@3.6.0
  • dom-serializer@1.4.1
  • domhandler@4.3.1
  • domutils@2.8.0
  • entities@2.1.0
  • front-matter@4.0.2
  • htmlparser2@6.1.0
  • linkify-it@3.0.3
  • markdown-it@12.3.2
  • mdurl@1.0.1
  • react-day-picker@8.10.1
  • react-refresh@0.14.2
  • storybook-css-modules@1.0.8
  • uc.micro@1.0.6
  • vite-plugin-markdown@2.2.0
packages/react/package.json
  • date-fns@^4.1.0
  • react-day-picker@^9.1.3
  • date-fns@^3.6.0
  • react-day-picker@^8.10.0
dependabot[bot] commented 3 weeks ago

Looks like these dependencies are no longer updatable, so this is no longer needed.