search

unjs / nitro-deploys

Continues Nitro deployments for end-to-end testing deployment providers.
https://nitro.unjs.io
49 stars 9 forks source link

chore(deps): update all non-major dependencies #94

Closed renovate[bot] closed 9 months ago

renovate[bot] commented 9 months ago

Mend Renovate

This PR contains the following updates:

Package Type Update Change Age Adoption Passing Confidence
cloudflare/wrangler-action action minor v3.3.2 -> v3.4.0 age adoption passing confidence
esbuild devDependencies patch ^0.19.8 -> ^0.19.10 age adoption passing confidence
pnpm (source) packageManager minor 8.11.0 -> 8.13.1 age adoption passing confidence
prettier (source) devDependencies patch ^3.1.0 -> ^3.1.1 age adoption passing confidence

Release Notes

cloudflare/wrangler-action (cloudflare/wrangler-action) ### [`v3.4.0`](https://togithub.com/cloudflare/wrangler-action/releases/tag/v3.4.0) [Compare Source](https://togithub.com/cloudflare/wrangler-action/compare/v3.3.2...v3.4.0) ##### Minor Changes - [#​213](https://togithub.com/cloudflare/wrangler-action/pull/213) [`d13856dfc92816473ebf47f66e263a2668a97896`](https://togithub.com/cloudflare/wrangler-action/commit/d13856dfc92816473ebf47f66e263a2668a97896) Thanks [@​GrantBirki](https://togithub.com/GrantBirki)! - This change introduces three new GitHub Actions output variables. These variables are as follows: - `command-output` - contains the string results of `stdout` - `command-stderr` - contains the string results of `stderr` - `deployment-url` - contains the string results of the URL that was deployed (ex: `https://.pages.dev`) These output variables are intended to be used by more advanced workflows that require the output results or deployment url from Wrangler commands in subsequent workflow steps. ##### Patch Changes - [#​216](https://togithub.com/cloudflare/wrangler-action/pull/216) [`9aba9c34daabca23a88191a5fe1b81fa721c1f11`](https://togithub.com/cloudflare/wrangler-action/commit/9aba9c34daabca23a88191a5fe1b81fa721c1f11) Thanks [@​Cherry](https://togithub.com/Cherry)! - Fixes issues with semver comparison, where version parts were treated lexicographically instead of numerically. Bulk secret uploading was introduced in wrangler `3.4.0`, and this action tries to check if the version used is greater than `3.4.0`, and then if so, using the new bulk secret API which is faster. Due to a bug in the semver comparison, `3.19.0` was being considered less than `3.4.0`, and then using an older and slower method for uploading secrets. Now the semver comparison is fixed, the faster bulk method is used for uploading secrets when available.
evanw/esbuild (esbuild) ### [`v0.19.10`](https://togithub.com/evanw/esbuild/blob/HEAD/CHANGELOG.md#01910) [Compare Source](https://togithub.com/evanw/esbuild/compare/v0.19.9...v0.19.10) - Fix glob imports in TypeScript files ([#​3319](https://togithub.com/evanw/esbuild/issues/3319)) This release fixes a problem where bundling a TypeScript file containing a glob import could emit a call to a helper function that doesn't exist. The problem happened because esbuild's TypeScript transformation removes unused imports (which is required for correctness, as they may be type-only imports) and esbuild's glob import transformation wasn't correctly marking the imported helper function as used. This wasn't caught earlier because most of esbuild's glob import tests were written in JavaScript, not in TypeScript. - Fix `require()` glob imports with bundling disabled ([#​3546](https://togithub.com/evanw/esbuild/issues/3546)) Previously `require()` calls containing glob imports were incorrectly transformed when bundling was disabled. All glob imports should only be transformed when bundling is enabled. This bug has been fixed. - Fix a panic when transforming optional chaining with `define` ([#​3551](https://togithub.com/evanw/esbuild/issues/3551), [#​3554](https://togithub.com/evanw/esbuild/pull/3554)) This release fixes a case where esbuild could crash with a panic, which was triggered by using `define` to replace an expression containing an optional chain. Here is an example: ```js // Original code console.log(process?.env.SHELL) // Old output (with --define:process.env={}) /* panic: Internal error (while parsing "") */ // New output (with --define:process.env={}) var define_process_env_default = {}; console.log(define_process_env_default.SHELL); ``` This fix was contributed by [@​hi-ogawa](https://togithub.com/hi-ogawa). - Work around a bug in node's CommonJS export name detector ([#​3544](https://togithub.com/evanw/esbuild/issues/3544)) The export names of a CommonJS module are dynamically-determined at run time because CommonJS exports are properties on a mutable object. But the export names of an ES module are statically-determined at module instantiation time by using `import` and `export` syntax and cannot be changed at run time. When you import a CommonJS module into an ES module in node, node scans over the source code to attempt to detect the set of export names that the CommonJS module will end up using. That statically-determined set of names is used as the set of names that the ES module is allowed to import at module instantiation time. However, this scan appears to have bugs (or at least, can cause false positives) because it doesn't appear to do any scope analysis. Node will incorrectly consider the module to export something even if the assignment is done to a local variable instead of to the module-level `exports` object. For example: ```js // confuseNode.js exports.confuseNode = function(exports) { // If this local is called "exports", node incorrectly // thinks this file has an export called "notAnExport". exports.notAnExport = function() { }; }; ``` You can see that node incorrectly thinks the file `confuseNode.js` has an export called `notAnExport` when that file is loaded in an ES module context: ```console $ node -e 'import("./confuseNode.js").then(console.log)' [Module: null prototype] { confuseNode: [Function (anonymous)], default: { confuseNode: [Function (anonymous)] }, notAnExport: undefined } ``` To avoid this, esbuild will now rename local variables that use the names `exports` and `module` when generating CommonJS output for the `node` platform. - Fix the return value of esbuild's `super()` shim ([#​3538](https://togithub.com/evanw/esbuild/issues/3538)) Some people write `constructor` methods that use the return value of `super()` instead of using `this`. This isn't too common because [TypeScript doesn't let you do that](https://togithub.com/microsoft/TypeScript/issues/37847) but it can come up when writing JavaScript. Previously esbuild's class lowering transform incorrectly transformed the return value of `super()` into `undefined`. With this release, the return value of `super()` will now be `this` instead: ```js // Original code class Foo extends Object { field constructor() { console.log(typeof super()) } } new Foo // Old output (with --target=es6) class Foo extends Object { constructor() { var __super = (...args) => { super(...args); __publicField(this, "field"); }; console.log(typeof __super()); } } new Foo(); // New output (with --target=es6) class Foo extends Object { constructor() { var __super = (...args) => { super(...args); __publicField(this, "field"); return this; }; console.log(typeof __super()); } } new Foo(); ``` - Terminate the Go GC when esbuild's `stop()` API is called ([#​3552](https://togithub.com/evanw/esbuild/issues/3552)) If you use esbuild with WebAssembly and pass the `worker: false` flag to `esbuild.initialize()`, then esbuild will run the WebAssembly module on the main thread. If you do this within a Deno test and that test calls `esbuild.stop()` to clean up esbuild's resources, Deno may complain that a `setTimeout()` call lasted past the end of the test. This happens when the Go is in the middle of a garbage collection pass and has scheduled additional ongoing garbage collection work. Normally calling `esbuild.stop()` will terminate the web worker that the WebAssembly module runs in, which will terminate the Go GC, but that doesn't happen if you disable the web worker with `worker: false`. With this release, esbuild will now attempt to terminate the Go GC in this edge case by calling `clearTimeout()` on these pending timeouts. - Apply `/* @​__NO_SIDE_EFFECTS__ */` on tagged template literals ([#​3511](https://togithub.com/evanw/esbuild/issues/3511)) Tagged template literals that reference functions annotated with a `@__NO_SIDE_EFFECTS__` comment are now able to be removed via tree-shaking if the result is unused. This is a convention from [Rollup](https://togithub.com/rollup/rollup/pull/5024). Here is an example: ```js // Original code const html = /* @​__NO_SIDE_EFFECTS__ */ (a, ...b) => ({ a, b }) html`remove` x = html`keep` // Old output (with --tree-shaking=true) const html = /* @​__NO_SIDE_EFFECTS__ */ (a, ...b) => ({ a, b }); html`remove`; x = html`keep`; // New output (with --tree-shaking=true) const html = /* @​__NO_SIDE_EFFECTS__ */ (a, ...b) => ({ a, b }); x = html`keep`; ``` Note that this feature currently only works within a single file, so it's not especially useful. This feature does not yet work across separate files. I still recommend using `@__PURE__` annotations instead of this feature, as they have wider tooling support. The drawback of course is that `@__PURE__` annotations need to be added at each call site, not at the declaration, and for non-call expressions such as template literals you need to wrap the expression in an IIFE (immediately-invoked function expression) to create a call expression to apply the `@__PURE__` annotation to. - Publish builds for IBM AIX PowerPC 64-bit ([#​3549](https://togithub.com/evanw/esbuild/issues/3549)) This release publishes a binary executable to npm for IBM AIX PowerPC 64-bit, which means that in theory esbuild can now be installed in that environment with `npm install esbuild`. This hasn't actually been tested yet. If you have access to such a system, it would be helpful to confirm whether or not doing this actually works. ### [`v0.19.9`](https://togithub.com/evanw/esbuild/blob/HEAD/CHANGELOG.md#0199) [Compare Source](https://togithub.com/evanw/esbuild/compare/v0.19.8...v0.19.9) - Add support for transforming new CSS gradient syntax for older browsers The specification called [CSS Images Module Level 4](https://www.w3.org/TR/css-images-4/) introduces new CSS gradient syntax for customizing how the browser interpolates colors in between color stops. You can now control the color space that the interpolation happens in as well as (for "polar" color spaces) control whether hue angle interpolation happens clockwise or counterclockwise. You can read more about this in [Mozilla's blog post about new CSS gradient features](https://developer.mozilla.org/en-US/blog/css-color-module-level-4/). With this release, esbuild will now automatically transform this syntax for older browsers in the `target` list. For example, here's a gradient that should appear as a rainbow in a browser that supports this new syntax: ```css /* Original code */ .rainbow-gradient { width: 100px; height: 100px; background: linear-gradient(in hsl longer hue, #​7ff, #​77f); } /* New output (with --target=chrome99) */ .rainbow-gradient { width: 100px; height: 100px; background: linear-gradient( #​77ffff, #​77ffaa 12.5%, #​77ff80 18.75%, #​84ff77 21.88%, #​99ff77 25%, #eeff77 37.5%, #fffb77 40.62%, #ffe577 43.75%, #ffbb77 50%, #ff9077 56.25%, #ff7b77 59.38%, #ff7788 62.5%, #ff77dd 75%, #ff77f2 78.12%, #f777ff 81.25%, #cc77ff 87.5%, #​7777ff); } ``` You can now use this syntax in your CSS source code and esbuild will automatically convert it to an equivalent gradient for older browsers. In addition, esbuild will now also transform "double position" and "transition hint" syntax for older browsers as appropriate: ```css /* Original code */ .stripes { width: 100px; height: 100px; background: linear-gradient(#e65 33%, #ff2 33% 67%, #​99e 67%); } .glow { width: 100px; height: 100px; background: radial-gradient(white 10%, 20%, black); } /* New output (with --target=chrome33) */ .stripes { width: 100px; height: 100px; background: linear-gradient( #e65 33%, #ff2 33%, #ff2 67%, #​99e 67%); } .glow { width: 100px; height: 100px; background: radial-gradient( #ffffff 10%, #aaaaaa 12.81%, #​959595 15.62%, #​7b7b7b 21.25%, #​5a5a5a 32.5%, #​444444 43.75%, #​323232 55%, #​161616 77.5%, #​000000); } ``` You can see visual examples of these new syntax features by looking at [esbuild's gradient transformation tests](https://esbuild.github.io/gradient-tests/). If necessary, esbuild will construct a new gradient that approximates the original gradient by recursively splitting the interval in between color stops until the approximation error is within a small threshold. That is why the above output CSS contains many more color stops than the input CSS. Note that esbuild deliberately *replaces* the original gradient with the approximation instead of inserting the approximation before the original gradient as a fallback. The latest version of Firefox has multiple gradient rendering bugs (including incorrect interpolation of partially-transparent colors and interpolating non-sRGB colors using the incorrect color space). If esbuild didn't replace the original gradient, then Firefox would use the original gradient instead of the fallback the appearance would be incorrect in Firefox. In other words, the latest version of Firefox supports modern gradient syntax but interprets it incorrectly. - Add support for `color()`, `lab()`, `lch()`, `oklab()`, `oklch()`, and `hwb()` in CSS CSS has recently added lots of new ways of specifying colors. You can read more about this in [Chrome's blog post about CSS color spaces](https://developer.chrome.com/docs/css-ui/high-definition-css-color-guide). This release adds support for minifying colors that use the `color()`, `lab()`, `lch()`, `oklab()`, `oklch()`, or `hwb()` syntax and/or transforming these colors for browsers that don't support it yet: ```css /* Original code */ div { color: hwb(90deg 20% 40%); background: color(display-p3 1 0 0); } /* New output (with --target=chrome99) */ div { color: #​669933; background: #ff0f0e; background: color(display-p3 1 0 0); } ``` As you can see, colors outside of the sRGB color space such as `color(display-p3 1 0 0)` are mapped back into the sRGB gamut and inserted as a fallback for browsers that don't support the new color syntax. - Allow empty type parameter lists in certain cases ([#​3512](https://togithub.com/evanw/esbuild/issues/3512)) TypeScript allows interface declarations and type aliases to have empty type parameter lists. Previously esbuild didn't handle this edge case but with this release, esbuild will now parse this syntax: ```ts interface Foo<> {} type Bar<> = {} ``` This fix was contributed by [@​magic-akari](https://togithub.com/magic-akari).
pnpm/pnpm (pnpm) ### [`v8.13.1`](https://togithub.com/pnpm/pnpm/releases/tag/v8.13.1) #### Minor Changes - New commands added for inspecting the store: - **pnpm cat-index**: Prints the index file of a specific package in the store. The package is specified by its name and version: `pnpm cat-index @​` - **pnpm cat-file**: Prints the contents of a file based on the hash value stored in the index file. For example: pnpm cat-file sha512-mvavhfVcEREI7d8dfvfvIkuBLnx7+rrkHHnPi8mpEDUlNpY4CUY+CvJ5mrrLl18iQYo1odFwBV7z/cOypG7xxQ== - **pnpm find-hash**: Lists the packages that include the file with the specified hash. For example: pnpm find-hash sha512-mvavhfVcEREI7d8dfvfvIkuBLnx7+rrkHHnPi8mpEDUlNpY4CUY+CvJ5mrrLl18iQYo1odFwBV7z/cOypG7xxQ== This command is **experimental**. We might change how it behaves. Related issue: [#​7413](https://togithub.com/pnpm/pnpm/issues/7413). - A new setting added for symlinking [injected dependencies](https://pnpm.io/package_json#dependenciesmetainjected) from the workspace, if their dependencies use the same peer dependencies as the dependent package. The setting is called `dedupe-injected-deps` [#​7416](https://togithub.com/pnpm/pnpm/pull/7416). - Use `--fail-if-no-match` if you want the CLI fail if no packages were matched by the command [#​7403](https://togithub.com/pnpm/pnpm/issues/7403). #### Patch Changes - `pnpm list --parseable` should not print the same dependency multiple times [#​7429](https://togithub.com/pnpm/pnpm/issues/7429). - Fix error message texts in the `pnpm env` commands [#​7456](https://togithub.com/pnpm/pnpm/pull/7456). - Better support for light themed terminals by the `pnpm update --interactive` command [#​7439](https://togithub.com/pnpm/pnpm/issues/7439). - Fix EPERM error that occasionally happened on Windows during renames in the store [#​7213](https://togithub.com/pnpm/pnpm/issues/7213). - Fix error as in `update -i -r` with Git specifiers [#​7415](https://togithub.com/pnpm/pnpm/issues/7415). - Added support for boolean values in 'bundleDependencies' package.json fields when installing a dependency. Fix to properly handle 'bundledDependencies' alias [#​7411](https://togithub.com/pnpm/pnpm/issues/7411). #### Our Gold Sponsors
#### Our Silver Sponsors
### [`v8.12.1`](https://togithub.com/pnpm/pnpm/releases/tag/v8.12.1) [Compare Source](https://togithub.com/pnpm/pnpm/compare/v8.12.0...v8.12.1) #### Patch Changes - Don't report dependencies with optional dependencies as being added on repeat install. This was a bug in reporting [#​7384](https://togithub.com/pnpm/pnpm/issues/7384). - Fix a bug where `--fix-lockfile` crashes on tarballs [#​7368](https://togithub.com/pnpm/pnpm/issues/7368). - Do not create empty patch directory. - Installation should not fail if an empty `node_modules` directory cannot be removed [#​7405](https://togithub.com/pnpm/pnpm/issues/7405). #### Our Gold Sponsors
#### Our Silver Sponsors
### [`v8.12.0`](https://togithub.com/pnpm/pnpm/releases/tag/v8.12.0) [Compare Source](https://togithub.com/pnpm/pnpm/compare/v8.11.0...v8.12.0) #### Minor Changes - Add support for basic authorization header [#​7371](https://togithub.com/pnpm/pnpm/issues/7371). #### Patch Changes - Fix a bug where pnpm incorrectly passes a flag to a run handler as a fallback command [#​7244](https://togithub.com/pnpm/pnpm/issues/7244). - When `dedupe-direct-deps` is set to `true`, commands of dependencies should be deduplicated [#​7359](https://togithub.com/pnpm/pnpm/pull/7359). #### Our Gold Sponsors
#### Our Silver Sponsors
prettier/prettier (prettier) ### [`v3.1.1`](https://togithub.com/prettier/prettier/blob/HEAD/CHANGELOG.md#311) [Compare Source](https://togithub.com/prettier/prettier/compare/3.1.0...3.1.1) [diff](https://togithub.com/prettier/prettier/compare/3.1.0...3.1.1) ##### Fix config file search ([#​15363](https://togithub.com/prettier/prettier/pull/15363) by [@​fisker](https://togithub.com/fisker)) Previously, we start search for config files from the filePath as a directory, if it happened to be a directory and contains config file, it will be used by mistake. ```text ├─ .prettierrc └─ test.js (A directory) └─ .prettierrc ``` ```js // Prettier 3.1.0 await prettier.resolveConfigFile(new URL("./test.js", import.meta.url)); // /test.js/.prettierrc // Prettier 3.1.1 await prettier.resolveConfigFile(new URL("./test.js", import.meta.url)); // /.prettierrc ``` ##### Skip explicitly passed symbolic links with `--no-error-on-unmatched-pattern` ([#​15533](https://togithub.com/prettier/prettier/pull/15533) by [@​sanmai-NL](https://togithub.com/sanmai-NL)) Since Prettier v3, we stopped following symbolic links, however in some use cases, the symbolic link patterns can't be filtered out, and there is no way to prevent Prettier from throwing errors. In Prettier 3.1.1, you can use `--no-error-on-unmatched-pattern` to simply skip symbolic links. ##### Consistently use tabs in ternaries when `useTabs` is `true` ([#​15662](https://togithub.com/prettier/prettier/pull/15662) by [@​auvred](https://togithub.com/auvred)) ```jsx // Input aaaaaaaaaaaaaaa ? bbbbbbbbbbbbbbbbbb : ccccccccccccccc ? ddddddddddddddd : eeeeeeeeeeeeeee ? fffffffffffffff : gggggggggggggggg; // Prettier 3.1.0 aaaaaaaaaaaaaaa ? bbbbbbbbbbbbbbbbbb : ccccccccccccccc ? ddddddddddddddd : eeeeeeeeeeeeeee ? fffffffffffffff : gggggggggggggggg; // Prettier 3.1.1 aaaaaaaaaaaaaaa ? bbbbbbbbbbbbbbbbbb : ccccccccccccccc ? ddddddddddddddd : eeeeeeeeeeeeeee ? fffffffffffffff : gggggggggggggggg; ``` ##### Improve config file search ([#​15663](https://togithub.com/prettier/prettier/pull/15663) by [@​fisker](https://togithub.com/fisker)) The Prettier config file search performance has been improved by more effective cache strategy. ##### Fix unstable and ugly formatting for comments in destructuring patterns ([#​15708](https://togithub.com/prettier/prettier/pull/15708) by [@​sosukesuzuki](https://togithub.com/sosukesuzuki)) ```tsx // Input const { foo, // bar // baz }: Foo = expr; // Prettier 3.1.0 const { foo1, } // bar // baz : Foo = expr; // Prettier 3.1.0 second output const { foo1, // bar } // baz : Foo = expr; // Prettier 3.1.1 const { foo1, // bar // baz }: Foo = expr; ``` ##### Support "Import Attributes" ([#​15718](https://togithub.com/prettier/prettier/pull/15718) by [@​fisker](https://togithub.com/fisker)) [TypeScript 5.3](https://devblogs.microsoft.com/typescript/announcing-typescript-5-3/#import-attributes) supports the latest updates to the [import attributes](https://togithub.com/tc39/proposal-import-attributes) proposal. ```tsx import something from "./something.json" with { type: "json" }; ``` ##### Fix false claim in docs that cursorOffset is incompatible with rangeStart/rangeEnd ([#​15750](https://togithub.com/prettier/prettier/pull/15750) by [@​ExplodingCabbage](https://togithub.com/ExplodingCabbage)) The cursorOffset option has in fact been compatible with rangeStart/rangeEnd for over 5 years, thanks to work by [@​ds300](https://togithub.com/ds300). However, Prettier's documentation (including the CLI `--help` text) continued to claim otherwise, falsely. The documentation is now fixed. ##### Keep curly braces and `from` keyword in empty `import` statements ([#​15756](https://togithub.com/prettier/prettier/pull/15756) by [@​fisker](https://togithub.com/fisker)) ```js // Input import { } from 'foo'; import { /* comment */ } from 'bar'; // Prettier 3.1.0 import {} from "foo"; import /* comment */ "bar"; // Prettier 3.1.1 import {} from "foo"; import {} from /* comment */ "bar"; ``` ##### Keep empty import attributes and assertions ([#​15757](https://togithub.com/prettier/prettier/pull/15757) by [@​fisker](https://togithub.com/fisker)) ```js // Input import foo from "foo" with {}; import bar from "bar" assert {}; // Prettier 3.1.0 import foo from "foo"; import bar from "bar"; // Prettier 3.1.1 import foo from "foo" with {}; import bar from "bar" assert {}; ```

Configuration

📅 Schedule: Branch creation - "after 2am and before 3am" (UTC), Automerge - "after 1am and before 2am" (UTC).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

This PR has been generated by Mend Renovate. View repository job log here.

netlify[bot] commented 9 months ago

Deploy Preview for nitro-deployment ready!

Name Link
Latest commit 3d9b1eb9fc568e6367d979c9b4dfd498cc66b3ba
Latest deploy log https://app.netlify.com/sites/nitro-deployment/deploys/658ccb77c5c2e400080b2dfe
Deploy Preview https://deploy-preview-94--nitro-deployment.netlify.app
Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site configuration.