This release upgrades dependencies to address CVE-2023-43646 where a large function name can cause "catastrophic backtracking" (aka ReDOS attack) which can cause the test suite to hang.
Fix printing of JavaScript decorators in tricky cases (#3396)
This release fixes some bugs where esbuild's pretty-printing of JavaScript decorators could incorrectly produced code with a syntax error. The problem happened because esbuild sometimes substitutes identifiers for other expressions in the pretty-printer itself, but the decision about whether to wrap the expression or not didn't account for this. Here are some examples:
// Original code
import { constant } from './constants.js'
import { imported } from 'external'
import { undef } from './empty.js'
class Foo {
@constant()
@imported()
@undef()
foo
}
// Old output (with --bundle --format=cjs --packages=external --minify-syntax)
var import_external = require("external");
var Foo = class {
@123()
@(0, import_external.imported)()
@(void 0)()
foo;
};
// New output (with --bundle --format=cjs --packages=external --minify-syntax)
var import_external = require("external");
var Foo = class {
@(123())
@((0, import_external.imported)())
@((void 0)())
foo;
};
Allow pre-release versions to be passed to target (#3388)
People want to be able to pass version numbers for unreleased versions of node (which have extra stuff after the version numbers) to esbuild's target setting and have esbuild do something reasonable with them. These version strings are of course not present in esbuild's internal feature compatibility table because an unreleased version has not been released yet (by definition). With this release, esbuild will now attempt to accept these version strings passed to target and do something reasonable with them.
v0.19.3
Fix list-style-type with the local-css loader (#3325)
The local-css loader incorrectly treated all identifiers provided to list-style-type as a custom local identifier. That included identifiers such as none which have special meaning in CSS, and which should not be treated as custom local identifiers. This release fixes this bug:
Fix printing of JavaScript decorators in tricky cases (#3396)
This release fixes some bugs where esbuild's pretty-printing of JavaScript decorators could incorrectly produced code with a syntax error. The problem happened because esbuild sometimes substitutes identifiers for other expressions in the pretty-printer itself, but the decision about whether to wrap the expression or not didn't account for this. Here are some examples:
// Original code
import { constant } from './constants.js'
import { imported } from 'external'
import { undef } from './empty.js'
class Foo {
@constant()
@imported()
@undef()
foo
}
// Old output (with --bundle --format=cjs --packages=external --minify-syntax)
var import_external = require("external");
var Foo = class {
@123()
@(0, import_external.imported)()
@(void 0)()
foo;
};
// New output (with --bundle --format=cjs --packages=external --minify-syntax)
var import_external = require("external");
var Foo = class {
@(123())
@((0, import_external.imported)())
@((void 0)())
foo;
};
Allow pre-release versions to be passed to target (#3388)
People want to be able to pass version numbers for unreleased versions of node (which have extra stuff after the version numbers) to esbuild's target setting and have esbuild do something reasonable with them. These version strings are of course not present in esbuild's internal feature compatibility table because an unreleased version has not been released yet (by definition). With this release, esbuild will now attempt to accept these version strings passed to target and do something reasonable with them.
0.19.3
Fix list-style-type with the local-css loader (#3325)
The local-css loader incorrectly treated all identifiers provided to list-style-type as a custom local identifier. That included identifiers such as none which have special meaning in CSS, and which should not be treated as custom local identifiers. This release fixes this bug:
Bumps the dependencies group with 23 updates:
4.8.2
4.9.2
3.1.6
3.1.7
2.0.0
2.0.1
10.0.1
10.0.2
16.18.39
20.8.0
1.0.1
1.0.2
5.62.0
6.7.3
5.62.0
6.7.3
2.3.3
2.3.4
2.19.0
2.21.1
4.3.7
4.3.10
4.3.5
4.3.6
0.18.16
0.19.4
8.45.0
8.50.0
8.8.0
9.0.0
35.0.0
39.1.0
2.27.5
2.28.1
15.7.0
16.1.0
10.3.3
10.3.10
2.8.8
3.0.3
15.2.0
16.0.0
3.12.7
3.13.0
5.1.6
5.2.2
Updates
tslog
from 4.8.2 to 4.9.2Release notes
Sourced from tslog's releases.
... (truncated)
Commits
ad6556f
4.9.21e93acc
Add more tests for some types3044fce
Merge pull request #259 from vktrl/masterbe1e549
add null test for noded510305
fix undefined check, add null test for browser6ab687e
Merge pull request #257 from fullstack-build/developmentc24f7e1
Fix docs, fix #256a080998
4.9.14bb3465
Move runtime into BaseLogger, fix #256aeb3620
4.9.0Updates
@types/debounce-promise
from 3.1.6 to 3.1.7Commits
Updates
@types/json-parse-safe
from 2.0.0 to 2.0.1Commits
Updates
@types/mocha
from 10.0.1 to 10.0.2Commits
Updates
@types/node
from 16.18.39 to 20.8.0Commits
Updates
@types/readline-transform
from 1.0.1 to 1.0.2Commits
Updates
@typescript-eslint/eslint-plugin
from 5.62.0 to 6.7.3Release notes
Sourced from
@typescript-eslint/eslint-plugin
's releases.... (truncated)
Changelog
Sourced from
@typescript-eslint/eslint-plugin
's changelog.... (truncated)
Commits
91a3e0c
chore: publish v6.7.3dec6cbe
docs(eslint-plugin): replaced the Out-of-date TS error codes in eslint-recomm...ddb8589
chore: publish v6.7.2aefb268
chore: publish v6.7.19cf757a
chore(eslint-plugin): refactor getTypeFromNode to parserServices.getTypeAtLoc...e0cb751
docs(eslint-plugin): add warning about superfluous rules with typescript (#7372)ad46b12
chore(deps): update jest to v29.7.0 (#7651)7826910
docs(eslint-plugin): fix ignorePrimitives examples in prefer-nullish-coalesci...79ffff0
chore: publish v6.7.0b284370
feat(eslint-plugin): [await-thenable] added suggestion fixer (#7437)Updates
@typescript-eslint/parser
from 5.62.0 to 6.7.3Release notes
Sourced from
@typescript-eslint/parser
's releases.... (truncated)
Changelog
Sourced from
@typescript-eslint/parser
's changelog.... (truncated)
Commits
91a3e0c
chore: publish v6.7.3ddb8589
chore: publish v6.7.2aefb268
chore: publish v6.7.1ad46b12
chore(deps): update jest to v29.7.0 (#7651)79ffff0
chore: publish v6.7.0a3a3932
chore: publish v6.6.0337525b
chore(deps): update dependency jest to v29.6.4 (#7575)4f34d0b
chore: publish v6.5.0ef1367e
chore: publish v6.4.12e1cfd5
chore: upgrade to yarn 3 (#6162)Updates
@vscode/test-electron
from 2.3.3 to 2.3.4Changelog
Sourced from
@vscode/test-electron
's changelog.Commits
cabd485
2.3.443ea275
docs: prep for 2.3.4d1668ff
Fix insiders version string check (#227)e372957
chore(deps): bump word-wrap from 1.2.3 to 1.2.4 (#226)58e1749
chore(deps): bump semver from 7.3.8 to 7.5.2 (#224)0ec222e
Merge pull request #222 from microsoft/connor4312/issue221Updates
@vscode/vsce
from 2.19.0 to 2.21.1Commits
2e474b4
use execFile instead of exec (#898)70b844e
clean commit message (#897)11223c3
support manual release version (#895)e0857ea
feat: add support for packaging and publishing without license file (#887)986df2b
feat: add user-friendly info to --help (#884)a4f0bf3
rephrase error message for mismatched pricing values in manifest (#890)eb0b8b9
Add CodeQL suppression comment (#894)446c1de
add a pack alias for package (#892)a6187b3
Merge pull request #886 from microsoft/roblou/fixPlatCheckaa2113d
Version bumpUpdates
chai
from 4.3.7 to 4.3.10Release notes
Sourced from chai's releases.
Commits
744a16e
4.3.100ccd823
upgrade all dependencies (#1540)923d0a4
4.3.91a0f887
makea141e57
upgrade depsd9ff2c6
4.3.88d3205b
buildb351dc0
Fix: update exports.version to current version (#1534)1a8247f
Update CONTRIBUTING.md (#1521)3a8c49a
docs: specify return type of objDisplay (#1490)Maintainer changes
This version was pushed to npm by keithamus, a new releaser for chai since your current version.
Updates
@types/chai
from 4.3.5 to 4.3.6Commits
Updates
esbuild
from 0.18.16 to 0.19.4Release notes
Sourced from esbuild's releases.
... (truncated)
Changelog
Sourced from esbuild's changelog.
... (truncated)
Commits
a75b16e
publish 0.19.4 to npm65a4439
fix #3396: js decorator pretty-printing bugs6ad177c
add some js decorator printing tests0e1696f
ignoreTP
in data from caniuse-litee7bf735
fix #3390: allowusing
disposable functions (#3391)24bea0e
updatecompat-table
(note: regexp unicode 15.1)ea9c644
fix #3388: do something with pre-release versions673ad10
publish 0.19.3 to npm6402f11
basic support for parsing import attributes7ece556
fix #3322: avoid temporaries before"use strict"
Updates
eslint
from 8.45.0 to 8.50.0Release notes
Sourced from eslint's releases.
... (truncated)
Changelog
Sourced from eslint's changelog.
... (truncated)
Commits
299bfae
8.50.0212687c
Build: changelog update for 8.50.0f8a8a2d
chore: upgrade@eslint/js
@8
.50.0 (#17599)38ada6d
chore: package.json update for@eslint/js
release27d5a9e
feat: add suggestions to array-callback-return (#17590)f9082ff
feat: flat-rule-tester make sure defa... _Description has been truncated_