search

mattermost / mattermost-plugin-gitlab

GitLab plugin for Mattermost
Apache License 2.0
141 stars 85 forks source link

Bump trim and react-markdown in /webapp #485

Closed dependabot[bot] closed 8 months ago

dependabot[bot] commented 8 months ago

Removes trim. It's no longer used after updating ancestor dependency react-markdown. These dependencies need to be updated together.

Removes trim

Updates react-markdown from 4.3.1 to 9.0.1

Release notes

Sourced from react-markdown's releases.

9.0.1

  • d8e3787 Fix double encoding in new url transform
  • 55d8d83 Refactor docs to use createRoot

Full Changelog: https://github.com/remarkjs/react-markdown/compare/9.0.0...9.0.1

9.0.0

Change

  • b67d714 Change to require Node.js 16 migrate: update too
  • ec2b134 Change to require React 18 migrate: update too
  • bf5824f Change to use exports migrate: don’t use private APIs
  • c383a45 Update @types/hast, utilities, plugins, etc migrate: update too
  • eca5e6b 08ead9e Replace transformImageUri, transformLinkUri w/ urlTransform migrate: see Add urlTransform
  • de29396 Remove linkTarget option by @​galabra in remarkjs/react-markdown#762 migrate: see Remove linkTarget
  • 4346276 Remove support for passing custom props to components migrate: see Remove includeElementIndex, Remove rawSourcePos, Remove sourcePos, Remove extra props passed to certain components
  • c0dfbd6 Remove UMD bundle from package migrate: use esm.sh or a CDN or so
  • e12b5e9 Remove prop-types migrate: use TypeScript
  • 4eb7aa0 Change to throw errors for removed props migrate: don’t pass options that don’t do things
  • 8aabf74 Change to improve error messages migrate: expect better messages

Full Changelog: https://github.com/remarkjs/react-markdown/compare/8.0.7...9.0.0

8.0.7

Perf

Docs

Full Changelog: https://github.com/remarkjs/react-markdown/compare/8.0.6...8.0.7

8.0.6

... (truncated)

Changelog

Sourced from react-markdown's changelog.

Changelog

All notable changes will be documented in this file.

9.0.0 - 2023-09-27

  • b67d714 Change to require Node.js 16
    migrate: update too
  • ec2b134 Change to require React 18
    migrate: update too
  • bf5824f Change to use exports
    migrate: don’t use private APIs
  • c383a45 Update @types/hast, utilities, plugins, etc
    migrate: update too
  • eca5e6b 08ead9e Replace transformImageUri, transformLinkUri w/ urlTransform
    migrate: see “Add urlTransform” below
  • de29396 Remove linkTarget option
    migrate: see “Remove linkTarget” below
  • 4346276 Remove support for passing custom props to components
    migrate: see “Remove includeElementIndex”, “Remove rawSourcePos”, “Remove sourcePos”, “Remove extra props passed to certain components” below
  • c0dfbd6 Remove UMD bundle from package
    migrate: use esm.sh or a CDN or so
  • e12b5e9 Remove prop-types
    migrate: use TypeScript
  • 4eb7aa0 Change to throw errors for removed props
    migrate: don’t pass options that don’t do things
  • 8aabf74 Change to improve error messages
    migrate: expect better messages

Add urlTransform

The transformImageUri and transformLinkUri were removed. Having two functions is a bit much, particularly because there are more URLs you might want to change (or which might be unsafe so we make them safe). And their name and APIs were a bit weird. You can use the new urlTransform prop instead to change all your URLs.

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by wooorm, a new releaser for react-markdown since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/mattermost/mattermost-plugin-gitlab/network/alerts).
dependabot[bot] commented 8 months ago

Dependabot tried to add @manland as a reviewer to this PR, but received the following error from GitHub:

POST https://api.github.com/repos/mattermost/mattermost-plugin-gitlab/pulls/485/requested_reviewers: 422 - Reviews may only be requested from collaborators. One or more of the users or teams you specified is not a collaborator of the mattermost/mattermost-plugin-gitlab repository. // See: https://docs.github.com/rest/pulls/review-requests#request-reviewers-for-a-pull-request
codecov[bot] commented 8 months ago

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

Project coverage is 34.02%. Comparing base (b341fd3) to head (ab18153). Report is 1 commits behind head on master.

Additional details and impacted files ```diff @@ Coverage Diff @@ ## master #485 +/- ## ======================================= Coverage 34.02% 34.02% ======================================= Files 22 22 Lines 4021 4021 ======================================= Hits 1368 1368 Misses 2515 2515 Partials 138 138 ```

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.

hanzei commented 8 months ago

@dependabot rebase

dependabot[bot] commented 8 months ago

Looks like these dependencies are updatable in another way, so this is no longer needed.