search

oaeproject / Hilary

Open Academic Environment (OAE) Back-End
http://www.oaeproject.org
Educational Community License v2.0
107 stars 96 forks source link

🚨 [security] Update pdfjs-dist 2.10.377 → 4.2.67 (major) #2602

Open depfu[bot] opened 4 months ago

depfu[bot] commented 4 months ago

🚨 Your current dependencies have known security vulnerabilities 🚨

This dependency update fixes known security vulnerabilities. Please see the details below and assess their impact carefully. We recommend to merge and deploy this as soon as possible!

Here is everything you need to know about this upgrade. Please take a good look at what changed and the test results before merging this pull request.

What changed?

✳️ pdfjs-dist (2.10.377 → 4.2.67) · Repo

Security Advisories 🚨

🚨 PDF.js vulnerable to arbitrary JavaScript execution upon opening a malicious PDF

Impact

If pdf.js is used to load a malicious PDF, and PDF.js is configured with isEvalSupported set to true (which is the default value), unrestricted attacker-controlled JavaScript will be executed in the context of the hosting domain.

Patches

The patch removes the use of eval:
mozilla/pdf.js#18015

Workarounds

Set the option isEvalSupported to false.

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1893645

Sorry, we couldn't find anything useful about this release.

↗️ nan (indirect, 2.15.0 → 2.19.0) · Repo · Changelog

Release Notes

2.19.0 (from changelog)

2.19.0 Mar 6 2024

2.18.0 Sep 12 2023

  • Feature: Cast v8::Object::GetInternalField() return value to v8::Value (#956) bdfee17

2.17.0 Oct 10 2022

  • Feature: overload deprecated AccessorSignatures (#943) 7f9ceb8

2.16.0 May 25 2022

2.15.0 Aug 4 2021

2.14.2 Oct 13 2020

  • Bugfix: fix gcc 8 function cast warning (#899) 35f0fab

2.14.1 Apr 21 2020

  • Bugfix: use GetBackingStore() instead of GetContents() (#888) 2c023bd

2.14.0 May 16 2019

  • Feature: Add missing methods to Nan::Maybe (#852) 4e96248

2.13.2 Mar 24 2019

  • Bugfix: remove usage of deprecated IsNearDeath (#842) fbaf422

2.13.1 Mar 14 2019

  • Bugfix: check V8 version directly instead of inferring from NMV (#840) 12f9df9

2.13.0 Mar 13 2019

  • Feature: add support for node master (#831) 113c0282072e7ff4f9dfc98b432fd894b798c2c

2.12.1 Dec 18 2018

  • Bugfix: Fix build breakage with Node.js 10.0.0-10.9.0. (#833) 625e90e

2.12.0 Dec 16 2018

  • Bugfix: Add scope.Escape() to Call() (#817) 2e5ed4f
  • Bugfix: Fix Node.js v10.12.0 deprecation warnings. 509859c
  • Feature: Allow SetWeak() for non-object persistent handles. (#824) e6ef6a4

2.11.1 Sep 29 2018

2.11.0 Aug 25 2018

  • Removal: remove FunctionCallbackInfo::Callee for nodejs >= 10 1a56c0a
  • Bugfix: Fix AsyncProgressWorkerBase::WorkProgress sends invalid data b0c764d
  • Feature: Introduce GetCurrentEventLoop b4911b0
  • Feature: Add NAN_MODULE_WORKER_ENABLED macro as a replacement for NAN_MODULE b058fb0

2.10.0 Mar 16 2018

  • Deprecation: Deprecate MakeCallback 5e92b19
  • Feature: add Nan::Call overload 4482e12
  • Feature: add more Nan::Call overloads 8584e63
  • Feature: Fix deprecation warnings for Node 10 1caf258

2.9.2 Feb 22 2018

  • Bugfix: Bandaid for async hooks 212bd2f

2.9.1 Feb 22 2018

  • Bugfix: Avoid deprecation warnings in deprecated Nan::Callback::operator() 372b14d
  • Bugfix: Avoid deprecation warnings in Nan::JSON 3bc294b

2.9.0 Feb 22 2018

  • Deprecation: Deprecate legacy Callback::Call 6dd5fa6
  • Feature: introduce AsyncResource class 90c0a179c0d8cb5fd26f1a7d2b1d6231eb402d48o
  • Feature: Add context aware Nan::Callback::Call functions 7169e09
  • Feature: Make AsyncWorker context aware 066ba21
  • Feature: add Callback overload to Nan::Call 5328daf
  • Bugfix: fix warning: suggest parentheses around && within || b2bb63d
  • Bugfix: Fix compilation on io.js 3 d06114d

2.8.0 Nov 15 2017

  • Deprecation: Deprecate Nan::ForceSet in favor of Nan::DefineOwnProperty() 95cbb97
  • Feature: Add Nan::AsyncProgressQueueWorker a976636
  • Feature: Add Nan::DefineOwnProperty() 95cbb97
  • Bugfix: Fix compiling on io.js 1 & 2 82705a6
  • Bugfix: Use DefineOwnProperty instead of ForceSet 95cbb97

2.7.0 Aug 30 2017

  • Feature: Add Nan::To<v8::Function>() overload. b932806
  • Bugfix: Fix ternary in Nan::MaybeLocal<T>::FromMaybe<S>(). 79a26f7

2.6.2 Apr 12 2017

  • Bugfix: Fix v8::JSON::Parse() deprecation warning. 87f6a3c

2.6.1 Apr 6 2017

  • Bugfix: nan_json.h: fix build breakage in Node 6 ac8d47d

2.6.0 Apr 6 2017

  • Feature: nan: add support for JSON::Parse & Stringify b533226

2.5.1 Jan 23 2017

  • Bugfix: Fix disappearing handle for private value 6a80995
  • Bugfix: Add missing scopes a93b8ba
  • Bugfix: Use string::data instead of string::front in NewOneByteString d5f9203

2.5.0 Dec 21 2016

  • Feature: Support Private accessors a86255c
  • Bugfix: Abort in delete operators that shouldn't be called 0fe3821

2.4.0 Jul 10 2016

  • Feature: Rewrite Callback to add Callback::Reset c4cf44d
  • Feature: AsyncProgressWorker: add template types for .send 1242c9a
  • Bugfix: Add constness to old Persistent comparison operators bd43cb9

2.3.5 May 31 2016

  • Bugfix: Replace NAN_INLINE with 'inline' keyword. 71819d8

2.3.4 May 31 2016

  • Bugfix: Remove V8 deprecation warnings 0592fb0
  • Bugfix: Fix new versions not to use WeakCallbackInfo::IsFirstPass 615c19d
  • Bugfix: Make ObjectWrap::handle() const d19af99
  • Bugfix: Fix compilation errors related to 0592fb0 e9191c5

2.3.3 May 4 2016

  • Bugfix: Refactor SetMethod() to deal with v8::Templates (#566) b9083cf

2.3.2 Apr 27 2016

  • Bugfix: Fix compilation on outdated versions due to Handle removal f8b7c87

2.3.1 Apr 27 2016

  • Bugfix: Don't use deprecated v8::Template::Set() in SetMethod a90951e

2.3.0 Apr 27 2016

  • Feature: added Signal() for invoking async callbacks without sending data from AsyncProgressWorker d8adba4
  • Bugfix: Don't use deprecated v8::Template::Set() 00dacf0

2.2.1 Mar 29 2016

  • Bugfix: Use NewFromUnsigned in ReturnValue::Set(uint32_t i) for pre_12 3a18f9b
  • Performance: Remove unneeeded nullptr checks b715ef4

2.2.0 Jan 9 2016

  • Feature: Add Function::Call wrapper 4c15747
  • Feature: Rename GC*logueCallback to GCCallback for > 4.0 3603435
  • Bugfix: Fix Global::Pass for old versions 367e82a
  • Bugfix: Remove weird MaybeLocal wrapping of what already is a MaybeLocal 23b4590

2.1.0 Oct 8 2015

  • Deprecation: Deprecate NanErrnoException in favor of ErrnoException 0af1ca4
  • Feature: added helper class for accessing contents of typedarrays 17b5129
  • Feature: [Maybe types] Add MakeMaybe(...) 48d7b53
  • Feature: new: allow utf16 string with length 66ac6e6
  • Feature: Introduce SetCallHandler and SetCallAsFunctionHandler 7764a9a
  • Bugfix: Enable creating Locals from Globals under Node 0.10. 9bf9b8b
  • Bugfix: Fix issue #462 where PropertyCallbackInfo data is not stored safely. 55f50ad

2.0.9 Sep 8 2015

  • Bugfix: EscapableHandleScope in Nan::NewBuffer for Node 0.8 and 0.10 b1654d7

2.0.8 Aug 28 2015

  • Work around duplicate linking bug in clang 11902da

2.0.7 Aug 26 2015

  • Build: Repackage

2.0.6 Aug 26 2015

  • Bugfix: Properly handle null callback in FunctionTemplate factory 6e99cb1
  • Bugfix: Remove unused static std::map instances 525bddc
  • Bugfix: Make better use of maybe versions of APIs bfba85b
  • Bugfix: Fix shadowing issues with handle in ObjectWrap 0a9072d

2.0.5 Aug 10 2015

  • Bugfix: Reimplement weak callback in ObjectWrap 98d38c1
  • Bugfix: Make sure callback classes are not assignable, copyable or movable 81f9b1d

2.0.4 Aug 6 2015

  • Build: Repackage

2.0.3 Aug 6 2015

  • Bugfix: Don't use clang++ / g++ syntax extension. 231450e

2.0.2 Aug 6 2015

  • Build: Repackage

2.0.1 Aug 6 2015

  • Bugfix: Add workaround for missing REPLACE_INVALID_UTF8 60d6687
  • Bugfix: Reimplement ObjectWrap from scratch to prevent memory leaks 6484601
  • Bugfix: Fix Persistent leak in FunctionCallbackInfo and PropertyCallbackInfo 641ef5f
  • Bugfix: Add missing overload for Nan::NewInstance that takes argc/argv 29450ed

2.0.0 Jul 31 2015

  • Change: Renamed identifiers with leading underscores b5932b4
  • Change: Replaced NanObjectWrapHandle with class NanObjectWrap 464f1e1
  • Change: Replace NanScope and NanEscpableScope macros with classes 47751c4
  • Change: Rename NanNewBufferHandle to NanNewBuffer 6745f99
  • Change: Rename NanBufferUse to NanNewBuffer 3e8b0a5
  • Change: Rename NanNewBuffer to NanCopyBuffer d6af78d
  • Change: Remove Nan prefix from all names 72d1f67
  • Change: Update Buffer API for new upstream changes d5d3291
  • Change: Rename Scope and EscapableScope to HandleScope and EscapableHandleScope 21a7a6a
  • Change: Get rid of Handles e6c0daf
  • Feature: Support io.js 3 with V8 4.4
  • Feature: Introduce NanPersistent 7fed696
  • Feature: Introduce NanGlobal 4408da1
  • Feature: Added NanTryCatch 10f1ca4
  • Feature: Update for V8 v4.3 4b6404a
  • Feature: Introduce NanNewOneByteString c543d32
  • Feature: Introduce namespace Nan 67ed1b1
  • Removal: Remove NanLocker and NanUnlocker dd6e401
  • Removal: Remove string converters, except NanUtf8String, which now follows the node implementation b5d00a9
  • Removal: Remove NanReturn* macros d90a25c
  • Removal: Remove HasInstance e8f84fe

1.9.0 Jul 31 2015

  • Feature: Added NanFatalException 81d4a2c
  • Feature: Added more error types 4265f06
  • Feature: Added dereference and function call operators to NanCallback c4b2ed0
  • Feature: Added indexed GetFromPersistent and SaveToPersistent edd510c
  • Feature: Added more overloads of SaveToPersistent and GetFromPersistent 8b1cef6
  • Feature: Added NanErrnoException dd87d9e
  • Correctness: Prevent assign, copy, and move for classes that do not support it 1f55c59, 4b808cb, c96d9b2, fba4a29, 3357130
  • Deprecation: Deprecate NanGetPointerSafe and NanSetPointerSafe 81d4a2c
  • Deprecation: Deprecate NanBooleanOptionValue and NanUInt32OptionValue 0ad254b

1.8.4 Apr 26 2015

  • Build: Repackage

1.8.3 Apr 26 2015

  • Bugfix: Include missing header 1af8648

1.8.2 Apr 23 2015

  • Build: Repackage

1.8.1 Apr 23 2015

  • Bugfix: NanObjectWrapHandle should take a pointer 155f1d3

1.8.0 Apr 23 2015

  • Feature: Allow primitives with NanReturnValue 2e4475e
  • Feature: Added comparison operators to NanCallback 55b075e
  • Feature: Backport thread local storage 15bb7fa
  • Removal: Remove support for signatures with arguments 8a2069d
  • Correcteness: Replaced NanObjectWrapHandle macro with function 0bc6d59

1.7.0 Feb 28 2015

  • Feature: Made NanCallback::Call accept optional target 8d54da7
  • Feature: Support atom-shell 0.21 0b7f1bb

1.6.2 Feb 6 2015

  • Bugfix: NanEncode: fix argument type for node::Encode on io.js 2be8639

1.6.1 Jan 23 2015

  • Build: version bump

1.5.3 Jan 23 2015

  • Build: repackage

1.6.0 Jan 23 2015

  • Deprecated NanNewContextHandle in favor of NanNew<Context> 49259af
  • Support utility functions moved in newer v8 versions (Node 0.11.15, io.js 1.0) a0aa179
  • Added NanEncode, NanDecodeBytes and NanDecodeWrite 75e6fb9

1.5.2 Jan 23 2015

  • Bugfix: Fix non-inline definition build error with clang++ 21d96a1, 60fadd4
  • Bugfix: Readded missing String constructors 18d828f
  • Bugfix: Add overload handling NanNew(..) 5ef813b
  • Bugfix: Fix uv_work_cb versioning 997e4ae
  • Bugfix: Add function factory and test 4eca89c
  • Bugfix: Add object template factory and test cdcb951
  • Correctness: Lifted an io.js related typedef c9490be
  • Correctness: Make explicit downcasts of String lengths 00074e6
  • Windows: Limit the scope of disabled warning C4530 83d7deb

1.5.1 Jan 15 2015

  • Build: version bump

1.4.3 Jan 15 2015

  • Build: version bump

1.4.2 Jan 15 2015

1.5.0 Jan 14 2015

  • Feature: Support io.js b003843
  • Correctness: Improved NanNew internals 9cd4f6a
  • Feature: Implement progress to NanAsyncWorker 8d6a160

1.4.1 Nov 8 2014

  • Bugfix: Handle DEBUG definition correctly
  • Bugfix: Accept int as Boolean

1.4.0 Nov 1 2014

  • Feature: Added NAN_GC_CALLBACK 6a5c245
  • Performance: Removed unnecessary local handle creation 18a7243, 41fe2f8
  • Correctness: Added constness to references in NanHasInstance 02c61cd
  • Warnings: Fixed spurious warnings from -Wundef and -Wshadow, 541b122, 99d8cb6
  • Windoze: Shut Visual Studio up when compiling 8d558c1
  • License: Switch to plain MIT from custom hacked MIT license 11de983
  • Build: Added test target to Makefile e232e46
  • Performance: Removed superfluous scope in NanAsyncWorker f4b7821
  • Sugar/Feature: Added NanReturnThis() and NanReturnHolder() shorthands 237a5ff, d697208
  • Feature: Added suitable overload of NanNew for v8::Integer::NewFromUnsigned b27b450

1.3.0 Aug 2 2014

  • Added NanNew<v8::String, std::string>(std::string)
  • Added NanNew<v8::String, std::string&>(std::string&)
  • Added NanAsciiString helper class
  • Added NanUtf8String helper class
  • Added NanUcs2String helper class
  • Deprecated NanRawString()
  • Deprecated NanCString()
  • Added NanGetIsolateData(v8::Isolate *isolate)
  • Added NanMakeCallback(v8::Handlev8::Object target, v8::Handlev8::Function func, int argc, v8::Handlev8::Value* argv)
  • Added NanMakeCallback(v8::Handlev8::Object target, v8::Handlev8::String symbol, int argc, v8::Handlev8::Value* argv)
  • Added NanMakeCallback(v8::Handlev8::Object target, const char* method, int argc, v8::Handlev8::Value* argv)
  • Added NanSetTemplate(v8::Handlev8::Template templ, v8::Handlev8::String name , v8::Handlev8::Data value, v8::PropertyAttribute attributes)
  • Added NanSetPrototypeTemplate(v8::Localv8::FunctionTemplate templ, v8::Handlev8::String name, v8::Handlev8::Data value, v8::PropertyAttribute attributes)
  • Added NanSetInstanceTemplate(v8::Localv8::FunctionTemplate templ, const char *name, v8::Handlev8::Data value)
  • Added NanSetInstanceTemplate(v8::Localv8::FunctionTemplate templ, v8::Handlev8::String name, v8::Handlev8::Data value, v8::PropertyAttribute attributes)

1.2.0 Jun 5 2014

  • Add NanSetPrototypeTemplate
  • Changed NAN_WEAK_CALLBACK internals, switched _NanWeakCallbackData to class, introduced _NanWeakCallbackDispatcher
  • Removed -Wno-unused-local-typedefs from test builds
  • Made test builds Windows compatible ('Sleep()')

1.1.2 May 28 2014

  • Release to fix more stuff-ups in 1.1.1

1.1.1 May 28 2014

  • Release to fix version mismatch in nan.h and lack of changelog entry for 1.1.0

1.1.0 May 25 2014

  • Remove nan_isolate, use v8::Isolate::GetCurrent() internally instead
  • Additional explicit overloads for NanNew(): (char*,int), (uint8_t*[,int]), (uint16_t*[,int), double, int, unsigned int, bool, v8::String::ExternalStringResource*, v8::String::ExternalAsciiStringResource*
  • Deprecate NanSymbol()
  • Added SetErrorMessage() and ErrorMessage() to NanAsyncWorker

1.0.0 May 4 2014

  • Heavy API changes for V8 3.25 / Node 0.11.13
  • Use cpplint.py
  • Removed NanInitPersistent
  • Removed NanPersistentToLocal
  • Removed NanFromV8String
  • Removed NanMakeWeak
  • Removed NanNewLocal
  • Removed NAN_WEAK_CALLBACK_OBJECT
  • Removed NAN_WEAK_CALLBACK_DATA
  • Introduce NanNew, replaces NanNewLocal, NanPersistentToLocal, adds many overloaded typed versions
  • Introduce NanUndefined, NanNull, NanTrue and NanFalse
  • Introduce NanEscapableScope and NanEscapeScope
  • Introduce NanMakeWeakPersistent (requires a special callback to work on both old and new node)
  • Introduce NanMakeCallback for node::MakeCallback
  • Introduce NanSetTemplate
  • Introduce NanGetCurrentContext
  • Introduce NanCompileScript and NanRunScript
  • Introduce NanAdjustExternalMemory
  • Introduce NanAddGCEpilogueCallback, NanAddGCPrologueCallback, NanRemoveGCEpilogueCallback, NanRemoveGCPrologueCallback
  • Introduce NanGetHeapStatistics
  • Rename NanAsyncWorker#SavePersistent() to SaveToPersistent()

0.8.0 Jan 9 2014

  • NanDispose -> NanDisposePersistent, deprecate NanDispose
  • Extract NANRETURN_TYPE, pull up NAN()

0.7.1 Jan 9 2014

  • Fixes to work against debug builds of Node
  • Safer NanPersistentToLocal (avoid reinterpret_cast)
  • Speed up common NanRawString case by only extracting flattened string when necessary

0.7.0 Dec 17 2013

  • New no-arg form of NanCallback() constructor.
  • NanCallback#Call takes Handle rather than Local
  • Removed deprecated NanCallback#Run method, use NanCallback#Call instead
  • Split off NAN_ARGS_TYPE from NAN_ARGS
  • Restore (unofficial) Node 0.6 compatibility at NanCallback#Call()
  • Introduce NanRawString() for char* (or appropriate void*) from v8::String (replacement for NanFromV8String)
  • Introduce NanCString() for null-terminated char* from v8::String

0.6.0 Nov 21 2013

  • Introduce NanNewLocal(v8::Handle value) for use in place of v8::Local::New(...) since v8 started requiring isolate in Node 0.11.9

0.5.2 Nov 16 2013

  • Convert SavePersistent and GetFromPersistent in NanAsyncWorker from protected and public

0.5.1 Nov 12 2013

  • Use node::MakeCallback() instead of direct v8::Function::Call()

0.5.0 Nov 11 2013

  • Added @TooTallNate as collaborator
  • New, much simpler, "include_dirs" for binding.gyp
  • Added full range of NAN_INDEX_* macros to match NAN_PROPERTY_* macros

0.4.4 Nov 2 2013

  • Isolate argument from v8::Persistent::MakeWeak removed for 0.11.8+

0.4.3 Nov 2 2013

  • Include node_object_wrap.h, removed from node.h for Node 0.11.8.

0.4.2 Nov 2 2013

  • Handle deprecation of v8::Persistent::Dispose(v8::Isolate* isolate)) for Node 0.11.8 release.

0.4.1 Sep 16 2013

  • Added explicit #include <uv.h> as it was removed from node.h for v0.11.8

0.4.0 Sep 2 2013

  • Added NAN_INLINE and NAN_DEPRECATED and made use of them
  • Added NanError, NanTypeError and NanRangeError
  • Cleaned up code

0.3.2 Aug 30 2013

  • Fix missing scope declaration in GetFromPersistent() and SaveToPersistent in NanAsyncWorker

0.3.1 Aug 20 2013

  • fix "not all control paths return a value" compile warning on some platforms

0.3.0 Aug 19 2013

  • Made NAN work with NPM
  • Lots of fixes to NanFromV8String, pulling in features from new Node core
  • Changed node::encoding to Nan::Encoding in NanFromV8String to unify the API
  • Added optional error number argument for NanThrowError()
  • Added NanInitPersistent()
  • Added NanReturnNull() and NanReturnEmptyString()
  • Added NanLocker and NanUnlocker
  • Added missing scopes
  • Made sure to clear disposed Persistent handles
  • Changed NanAsyncWorker to allocate error messages on the heap
  • Changed NanThrowError(Local) to NanThrowError(Handle)
  • Fixed leak in NanAsyncWorker when errmsg is used

0.2.2 Aug 5 2013

  • Fixed usage of undefined variable with node::BASE64 in NanFromV8String()

0.2.1 Aug 5 2013

  • Fixed 0.8 breakage, node::BUFFER encoding type not available in 0.8 for NanFromV8String()

0.2.0 Aug 5 2013

  • Added NAN_PROPERTY_GETTER, NAN_PROPERTY_SETTER, NAN_PROPERTY_ENUMERATOR, NAN_PROPERTY_DELETER, NAN_PROPERTY_QUERY
  • Extracted _NAN_METHOD_ARGS, _NAN_GETTER_ARGS, _NAN_SETTER_ARGS, _NAN_PROPERTY_GETTER_ARGS, _NAN_PROPERTY_SETTER_ARGS, _NAN_PROPERTY_ENUMERATOR_ARGS, _NAN_PROPERTY_DELETER_ARGS, _NAN_PROPERTY_QUERY_ARGS
  • Added NanGetInternalFieldPointer, NanSetInternalFieldPointer
  • Added NAN_WEAK_CALLBACK, NAN_WEAK_CALLBACK_OBJECT, NAN_WEAK_CALLBACK_DATA, NanMakeWeak
  • Renamed THROW_ERROR to _NAN_THROW_ERROR
  • Added NanNewBufferHandle(char*, size_t, node::smalloc::FreeCallback, void*)
  • Added NanBufferUse(char*, uint32_t)
  • Added NanNewContextHandle(v8::ExtensionConfiguration*, v8::Handlev8::ObjectTemplate, v8::Handlev8::Value)
  • Fixed broken NanCallback#GetFunction()
  • Added optional encoding and size arguments to NanFromV8String()
  • Added NanGetPointerSafe() and NanSetPointerSafe()
  • Added initial test suite (to be expanded)
  • Allow NanUInt32OptionValue to convert any Number object

0.1.0 Jul 21 2013

  • Added NAN_GETTER, NAN_SETTER
  • Added NanThrowError with single Local argument
  • Added NanNewBufferHandle with single uint32_t argument
  • Added NanHasInstance(Persistent<FunctionTemplate>&, Handle<Value>)
  • Added Local<Function> NanCallback#GetFunction()
  • Added NanCallback#Call(int, Local<Value>[])
  • Deprecated NanCallback#Run(int, Local<Value>[]) in favour of Call

2.18.0 (from changelog)

  • Feature: Cast v8::Object::GetInternalField() return value to v8::Value (#956) bdfee17

2.17.0 (from changelog)

  • Feature: overload deprecated AccessorSignatures (#943) 7f9ceb8

2.16.0 (from changelog)

Does any of this look wrong? Please let us know.

Commits

See the full diff on Github. The new version differs by 27 commits:

🆕 @​mapbox/node-pre-gyp (added, 1.0.11)

🆕 aproba (added, 2.0.0)

🆕 are-we-there-yet (added, 2.0.0)

🆕 canvas (added, 2.11.2)

🆕 color-support (added, 1.1.3)

🆕 console-control-strings (added, 1.1.0)

🆕 delegates (added, 1.0.0)

🆕 fs-minipass (added, 2.1.0)

🆕 gauge (added, 3.0.2)

🆕 has-unicode (added, 2.0.1)

🆕 minipass (added, 5.0.0)

🆕 minizlib (added, 2.1.2)

🆕 npmlog (added, 5.0.1)

🆕 path2d (added, 0.2.0)

🆕 tar (added, 6.2.1)

🗑️ big.js (removed)

🗑️ emojis-list (removed)

🗑️ loader-utils (removed)

🗑️ worker-loader (removed)

Depfu Status

Depfu will automatically keep this PR conflict-free, as long as you don't add any commits to this branch yourself. You can also trigger a rebase manually by commenting with @depfu rebase.

All Depfu comment commands
@​depfu rebase
Rebases against your default branch and redoes this update
@​depfu recreate
Recreates this PR, overwriting any edits that you've made to it
@​depfu merge
Merges this PR once your tests are passing and conflicts are resolved
@​depfu cancel merge
Cancels automatic merging of this PR
@​depfu close
Closes this PR and deletes the branch
@​depfu reopen
Restores the branch and reopens this PR (if it's closed)
@​depfu pause
Ignores all future updates for this dependency and closes this PR
@​depfu pause [minor|major]
Ignores all future minor/major updates for this dependency and closes this PR
@​depfu resume
Future versions of this dependency will create PRs again (leaves this PR as is)

This change is Reviewable