This release upgrades dependencies to address CVE-2023-43646 where a large function name can cause "catastrophic backtracking" (aka ReDOS attack) which can cause the test suite to hang.
Fix printing of JavaScript decorators in tricky cases (#3396)
This release fixes some bugs where esbuild's pretty-printing of JavaScript decorators could incorrectly produced code with a syntax error. The problem happened because esbuild sometimes substitutes identifiers for other expressions in the pretty-printer itself, but the decision about whether to wrap the expression or not didn't account for this. Here are some examples:
// Original code
import { constant } from './constants.js'
import { imported } from 'external'
import { undef } from './empty.js'
class Foo {
@constant()
@imported()
@undef()
foo
}
// Old output (with --bundle --format=cjs --packages=external --minify-syntax)
var import_external = require("external");
var Foo = class {
@123()
@(0, import_external.imported)()
@(void 0)()
foo;
};
// New output (with --bundle --format=cjs --packages=external --minify-syntax)
var import_external = require("external");
var Foo = class {
@(123())
@((0, import_external.imported)())
@((void 0)())
foo;
};
Allow pre-release versions to be passed to target (#3388)
People want to be able to pass version numbers for unreleased versions of node (which have extra stuff after the version numbers) to esbuild's target setting and have esbuild do something reasonable with them. These version strings are of course not present in esbuild's internal feature compatibility table because an unreleased version has not been released yet (by definition). With this release, esbuild will now attempt to accept these version strings passed to target and do something reasonable with them.
v0.19.3
Fix list-style-type with the local-css loader (#3325)
The local-css loader incorrectly treated all identifiers provided to list-style-type as a custom local identifier. That included identifiers such as none which have special meaning in CSS, and which should not be treated as custom local identifiers. This release fixes this bug:
Fix printing of JavaScript decorators in tricky cases (#3396)
This release fixes some bugs where esbuild's pretty-printing of JavaScript decorators could incorrectly produced code with a syntax error. The problem happened because esbuild sometimes substitutes identifiers for other expressions in the pretty-printer itself, but the decision about whether to wrap the expression or not didn't account for this. Here are some examples:
// Original code
import { constant } from './constants.js'
import { imported } from 'external'
import { undef } from './empty.js'
class Foo {
@constant()
@imported()
@undef()
foo
}
// Old output (with --bundle --format=cjs --packages=external --minify-syntax)
var import_external = require("external");
var Foo = class {
@123()
@(0, import_external.imported)()
@(void 0)()
foo;
};
// New output (with --bundle --format=cjs --packages=external --minify-syntax)
var import_external = require("external");
var Foo = class {
@(123())
@((0, import_external.imported)())
@((void 0)())
foo;
};
Allow pre-release versions to be passed to target (#3388)
People want to be able to pass version numbers for unreleased versions of node (which have extra stuff after the version numbers) to esbuild's target setting and have esbuild do something reasonable with them. These version strings are of course not present in esbuild's internal feature compatibility table because an unreleased version has not been released yet (by definition). With this release, esbuild will now attempt to accept these version strings passed to target and do something reasonable with them.
0.19.3
Fix list-style-type with the local-css loader (#3325)
The local-css loader incorrectly treated all identifiers provided to list-style-type as a custom local identifier. That included identifiers such as none which have special meaning in CSS, and which should not be treated as custom local identifiers. This release fixes this bug:
dependabot[bot]
commented
1 year ago
Bumps the dependencies group with 23 updates:
4.8.24.9.23.1.63.1.72.0.02.0.110.0.110.0.216.18.3920.8.01.0.11.0.25.62.06.7.35.62.06.7.32.3.32.3.42.19.02.21.14.3.74.3.104.3.54.3.60.18.160.19.48.45.08.50.08.8.09.0.035.0.039.1.02.27.52.28.115.7.016.1.010.3.310.3.102.8.83.0.315.2.016.0.03.12.73.13.05.1.65.2.2Updates
tslogfrom 4.8.2 to 4.9.2Release notes
Sourced from tslog's releases.
... (truncated)
Commits
ad6556f4.9.21e93accAdd more tests for some types3044fceMerge pull request #259 from vktrl/masterbe1e549add null test for noded510305fix undefined check, add null test for browser6ab687eMerge pull request #257 from fullstack-build/developmentc24f7e1Fix docs, fix #256a0809984.9.14bb3465Move runtime into BaseLogger, fix #256aeb36204.9.0Updates
@types/debounce-promisefrom 3.1.6 to 3.1.7Commits
Updates
@types/json-parse-safefrom 2.0.0 to 2.0.1Commits
Updates
@types/mochafrom 10.0.1 to 10.0.2Commits
Updates
@types/nodefrom 16.18.39 to 20.8.0Commits
Updates
@types/readline-transformfrom 1.0.1 to 1.0.2Commits
Updates
@typescript-eslint/eslint-pluginfrom 5.62.0 to 6.7.3Release notes
Sourced from
@typescript-eslint/eslint-plugin's releases.... (truncated)
Changelog
Sourced from
@typescript-eslint/eslint-plugin's changelog.... (truncated)
Commits
91a3e0cchore: publish v6.7.3dec6cbedocs(eslint-plugin): replaced the Out-of-date TS error codes in eslint-recomm...ddb8589chore: publish v6.7.2aefb268chore: publish v6.7.19cf757achore(eslint-plugin): refactor getTypeFromNode to parserServices.getTypeAtLoc...e0cb751docs(eslint-plugin): add warning about superfluous rules with typescript (#7372)ad46b12chore(deps): update jest to v29.7.0 (#7651)7826910docs(eslint-plugin): fix ignorePrimitives examples in prefer-nullish-coalesci...79ffff0chore: publish v6.7.0b284370feat(eslint-plugin): [await-thenable] added suggestion fixer (#7437)Updates
@typescript-eslint/parserfrom 5.62.0 to 6.7.3Release notes
Sourced from
@typescript-eslint/parser's releases.... (truncated)
Changelog
Sourced from
@typescript-eslint/parser's changelog.... (truncated)
Commits
91a3e0cchore: publish v6.7.3ddb8589chore: publish v6.7.2aefb268chore: publish v6.7.1ad46b12chore(deps): update jest to v29.7.0 (#7651)79ffff0chore: publish v6.7.0a3a3932chore: publish v6.6.0337525bchore(deps): update dependency jest to v29.6.4 (#7575)4f34d0bchore: publish v6.5.0ef1367echore: publish v6.4.12e1cfd5chore: upgrade to yarn 3 (#6162)Updates
@vscode/test-electronfrom 2.3.3 to 2.3.4Changelog
Sourced from
@vscode/test-electron's changelog.Commits
cabd4852.3.443ea275docs: prep for 2.3.4d1668ffFix insiders version string check (#227)e372957chore(deps): bump word-wrap from 1.2.3 to 1.2.4 (#226)58e1749chore(deps): bump semver from 7.3.8 to 7.5.2 (#224)0ec222eMerge pull request #222 from microsoft/connor4312/issue221Updates
@vscode/vscefrom 2.19.0 to 2.21.1Commits
2e474b4use execFile instead of exec (#898)70b844eclean commit message (#897)11223c3support manual release version (#895)e0857eafeat: add support for packaging and publishing without license file (#887)986df2bfeat: add user-friendly info to --help (#884)a4f0bf3rephrase error message for mismatched pricing values in manifest (#890)eb0b8b9Add CodeQL suppression comment (#894)446c1deadd a pack alias for package (#892)a6187b3Merge pull request #886 from microsoft/roblou/fixPlatCheckaa2113dVersion bumpUpdates
chaifrom 4.3.7 to 4.3.10Release notes
Sourced from chai's releases.
Commits
744a16e4.3.100ccd823upgrade all dependencies (#1540)923d0a44.3.91a0f887makea141e57upgrade depsd9ff2c64.3.88d3205bbuildb351dc0Fix: update exports.version to current version (#1534)1a8247fUpdate CONTRIBUTING.md (#1521)3a8c49adocs: specify return type of objDisplay (#1490)Maintainer changes
This version was pushed to npm by keithamus, a new releaser for chai since your current version.
Updates
@types/chaifrom 4.3.5 to 4.3.6Commits
Updates
esbuildfrom 0.18.16 to 0.19.4Release notes
Sourced from esbuild's releases.
... (truncated)
Changelog
Sourced from esbuild's changelog.
... (truncated)
Commits
a75b16epublish 0.19.4 to npm65a4439fix #3396: js decorator pretty-printing bugs6ad177cadd some js decorator printing tests0e1696fignoreTPin data from caniuse-litee7bf735fix #3390: allowusingdisposable functions (#3391)24bea0eupdatecompat-table(note: regexp unicode 15.1)ea9c644fix #3388: do something with pre-release versions673ad10publish 0.19.3 to npm6402f11basic support for parsing import attributes7ece556fix #3322: avoid temporaries before"use strict"Updates
eslintfrom 8.45.0 to 8.50.0Release notes
Sourced from eslint's releases.
... (truncated)
Changelog
Sourced from eslint's changelog.
... (truncated)
Commits
299bfae8.50.0212687cBuild: changelog update for 8.50.0f8a8a2dchore: upgrade@eslint/js@8.50.0 (#17599)38ada6dchore: package.json update for@eslint/jsrelease27d5a9efeat: add suggestions to array-callback-return (#17590)f9082fffeat: flat-rule-tester make sure defa... _Description has been truncated_