stackblitz[bot]
commented
1 year ago 
Run & review this pull request in StackBlitz Codeflow.
Closed renovate[bot] closed 1 year ago
stackblitz[bot]
commented
1 year ago Run & review this pull request in StackBlitz Codeflow.
socket-security[bot]
commented
1 year ago New and updated dependencies detected. Learn more about Socket for GitHub ↗︎
| Packages | Version | New capabilities | Transitives | Size | Publisher |
|---|---|---|---|---|---|
| esbuild | 0.18.16 | None | +0 |
131 kB | evanw |
| @types/node | 20.4.2...20.4.4 | None | +0/-0 |
3.82 MB | types |
| @sxzz/eslint-config | 3.2.1...3.2.3 | None | +5/-4 |
882 kB | sxzz |
| fast-glob | 3.3.0...3.3.1 | None | +0/-0 |
96.7 kB | mrmlnc |
This PR contains the following updates:
^3.2.1->^3.2.3^20.4.2->^20.4.40.18.13->0.18.16^3.3.0->^3.3.18.6.7->8.6.10^3.26.2->^3.26.3^4.4.4->^4.4.6^5.88.1->^5.88.2Release Notes
sxzz/eslint-config (@sxzz/eslint-config)
### [`v3.2.3`](https://togithub.com/sxzz/eslint-config/releases/tag/v3.2.3) [Compare Source](https://togithub.com/sxzz/eslint-config/compare/v3.2.2...v3.2.3) ##### 🚀 Features - Sort more fields - by [@sxzz](https://togithub.com/sxzz) [(331d6)](https://togithub.com/sxzz/eslint-config/commit/331d677) ##### [View changes on GitHub](https://togithub.com/sxzz/eslint-config/compare/v3.2.2...v3.2.3) ### [`v3.2.2`](https://togithub.com/sxzz/eslint-config/releases/tag/v3.2.2) [Compare Source](https://togithub.com/sxzz/eslint-config/compare/v3.2.1...v3.2.2) ##### 🐞 Bug Fixes - Disable no-extraneous-class in markdown - by [@sxzz](https://togithub.com/sxzz) [(9a3df)](https://togithub.com/sxzz/eslint-config/commit/9a3dfb1) - **deps**: - Update dependency eslint-plugin-unicorn to v48 - by [@renovate](https://togithub.com/renovate)\[bot] in[https://github.com/sxzz/eslint-config/issues/20](https://togithub.com/sxzz/eslint-config/issues/20)0 [(a8464)](https://togithub.com/sxzz/eslint-config/commit/a846473) - Update all non-major dependencies - by [@renovate](https://togithub.com/renovate)\[bot] in[https://github.com/sxzz/eslint-config/issues/19](https://togithub.com/sxzz/eslint-config/issues/19)9 [(693a4)](https://togithub.com/sxzz/eslint-config/commit/693a486) ##### [View changes on GitHub](https://togithub.com/sxzz/eslint-config/compare/v3.2.1...v3.2.2)evanw/esbuild (esbuild)
### [`v0.18.16`](https://togithub.com/evanw/esbuild/blob/HEAD/CHANGELOG.md#01816) [Compare Source](https://togithub.com/evanw/esbuild/compare/v0.18.15...v0.18.16) - Fix a regression with whitespace inside `:is()` ([#3265](https://togithub.com/evanw/esbuild/issues/3265)) The change to parse the contents of `:is()` in version 0.18.14 introduced a regression that incorrectly flagged the contents as a syntax error if the contents started with a whitespace token (for example `div:is( .foo ) {}`). This regression has been fixed. ### [`v0.18.15`](https://togithub.com/evanw/esbuild/blob/HEAD/CHANGELOG.md#01815) [Compare Source](https://togithub.com/evanw/esbuild/compare/v0.18.14...v0.18.15) - Add the `--serve-fallback=` option ([#2904](https://togithub.com/evanw/esbuild/issues/2904)) The web server built into esbuild serves the latest in-memory results of the configured build. If the requested path doesn't match any in-memory build result, esbuild also provides the `--servedir=` option to tell esbuild to serve the requested path from that directory instead. And if the requested path doesn't match either of those things, esbuild will either automatically generate a directory listing (for directories) or return a 404 error. Starting with this release, that last step can now be replaced with telling esbuild to serve a specific HTML file using the `--serve-fallback=` option. This can be used to provide a "not found" page for missing URLs. It can also be used to implement a [single-page app](https://en.wikipedia.org/wiki/Single-page_application) that mutates the current URL and therefore requires the single app entry point to be served when the page is loaded regardless of whatever the current URL is. - Use the `tsconfig` field in `package.json` during `extends` resolution ([#3247](https://togithub.com/evanw/esbuild/issues/3247)) This release adds a feature from [TypeScript 3.2](https://www.typescriptlang.org/docs/handbook/release-notes/typescript-3-2.html#tsconfigjson-inheritance-via-nodejs-packages) where if a `tsconfig.json` file specifies a package name in the `extends` field and that package's `package.json` file has a `tsconfig` field, the contents of that field are used in the search for the base `tsconfig.json` file. - Implement CSS nesting without `:is()` when possible ([#1945](https://togithub.com/evanw/esbuild/issues/1945)) Previously esbuild would always produce a warning when transforming nested CSS for a browser that doesn't support the `:is()` pseudo-class. This was because the nesting transform needs to generate an `:is()` in some complex cases which means the transformed CSS would then not work in that browser. However, the CSS nesting transform can often be done without generating an `:is()`. So with this release, esbuild will no longer warn when targeting browsers that don't support `:is()` in the cases where an `:is()` isn't needed to represent the nested CSS. In addition, esbuild's nested CSS transform has been updated to avoid generating an `:is()` in cases where an `:is()` is preferable but there's a longer alternative that is also equivalent. This update means esbuild can now generate a combinatorial explosion of CSS for complex CSS nesting syntax when targeting browsers that don't support `:is()`. This combinatorial explosion is necessary to accurately represent the original semantics. For example: ```css /* Original code */ .first, .second, .third { & > & { color: red; } } /* Old output (with --target=chrome80) */ :is(.first, .second, .third) > :is(.first, .second, .third) { color: red; } /* New output (with --target=chrome80) */ .first > .first, .first > .second, .first > .third, .second > .first, .second > .second, .second > .third, .third > .first, .third > .second, .third > .third { color: red; } ``` This change means you can now use CSS nesting with esbuild when targeting an older browser that doesn't support `:is()`. You'll now only get a warning from esbuild if you use complex CSS nesting syntax that esbuild can't represent in that older browser without using `:is()`. There are two such cases: ```css /* Case 1 */ a b { .foo & { color: red; } } /* Case 2 */ a { > b& { color: red; } } ``` These two cases still need to use `:is()`, both for different reasons, and cannot be used when targeting an older browser that doesn't support `:is()`: ```css /* Case 1 */ .foo :is(a b) { color: red; } /* Case 2 */ a > a:is(b) { color: red; } ``` - Automatically lower `inset` in CSS for older browsers With this release, esbuild will now automatically expand the `inset` property to the `top`, `right`, `bottom`, and `left` properties when esbuild's `target` is set to a browser that doesn't support `inset`: ```css /* Original code */ .app { position: absolute; inset: 10px 20px; } /* Old output (with --target=chrome80) */ .app { position: absolute; inset: 10px 20px; } /* New output (with --target=chrome80) */ .app { position: absolute; top: 10px; right: 20px; bottom: 10px; left: 20px; } ``` - Add support for the new [`@starting-style`](https://drafts.csswg.org/css-transitions-2/#defining-before-change-style-the-starting-style-rule) CSS rule ([#3249](https://togithub.com/evanw/esbuild/pull/3249)) This at rule allow authors to start CSS transitions on first style update. That is, you can now make the transition take effect when the `display` property changes from `none` to `block`. ```css /* Original code */ @starting-style { h1 { background-color: transparent; } } /* Output */ @starting-style{h1{background-color:transparent}} ``` This was contributed by [@yisibl](https://togithub.com/yisibl). ### [`v0.18.14`](https://togithub.com/evanw/esbuild/blob/HEAD/CHANGELOG.md#01814) [Compare Source](https://togithub.com/evanw/esbuild/compare/v0.18.13...v0.18.14) - Implement local CSS names ([#20](https://togithub.com/evanw/esbuild/issues/20)) This release introduces two new loaders called `global-css` and `local-css` and two new pseudo-class selectors `:local()` and `:global()`. This is a partial implementation of the popular [CSS modules](https://togithub.com/css-modules/css-modules) approach for avoiding unintentional name collisions in CSS. I'm not calling this feature "CSS modules" because although some people in the community call it that, other people in the community have started using "CSS modules" to refer to [something completely different](https://togithub.com/WICG/webcomponents/blob/60c9f682b63c622bfa0d8222ea6b1f3b659e007c/proposals/css-modules-v1-explainer.md) and now CSS modules is an overloaded term. Here's how this new local CSS name feature works with esbuild: - Identifiers that look like `.className` and `#idName` are global with the `global-css` loader and local with the `local-css` loader. Global identifiers are the same across all files (the way CSS normally works) but local identifiers are different between different files. If two separate CSS files use the same local identifier `.button`, esbuild will automatically rename one of them so that they don't collide. This is analogous to how esbuild automatically renames JS local variables with the same name in separate JS files to avoid name collisions. - It only makes sense to use local CSS names with esbuild when you are also using esbuild's bundler to bundle JS files that import CSS files. When you do that, esbuild will generate one export for each local name in the CSS file. The JS code can import these names and use them when constructing HTML DOM. For example: ```js // app.js import { outerShell } from './app.css' const div = document.createElement('div') div.className = outerShell document.body.appendChild(div) ``` ```css /* app.css */ .outerShell { position: absolute; inset: 0; } ``` When you bundle this with `esbuild app.js --bundle --loader:.css=local-css --outdir=out` you'll now get this (notice how the local CSS name `outerShell` has been renamed): ```js // out/app.js (() => { // app.css var outerShell = "app_outerShell"; // app.js var div = document.createElement("div"); div.className = outerShell; document.body.appendChild(div); })(); ``` ```css /* out/app.css */ .app_outerShell { position: absolute; inset: 0; } ``` This feature only makes sense to use when bundling is enabled both because your code needs to `import` the renamed local names so that it can use them, and because esbuild needs to be able to process all CSS files containing local names in a single bundling operation so that it can successfully rename conflicting local names to avoid collisions. - If you are in a global CSS file (with the `global-css` loader) you can create a local name using `:local()`, and if you are in a local CSS file (with the `local-css` loader) you can create a global name with `:global()`. So the choice of the `global-css` loader vs. the `local-css` loader just sets the default behavior for identifiers, but you can override it on a case-by-case basis as necessary. For example: ```css :local(.button) { color: red; } :global(.button) { color: blue; } ``` Processing this CSS file with esbuild with either the `global-css` or `local-css` loader will result in something like this: ```css .stdin_button { color: red; } .button { color: blue; } ``` - The names that esbuild generates for local CSS names are an implementation detail and are not intended to be hard-coded anywhere. The only way you should be referencing the local CSS names in your JS or HTML is with an `import` statement in JS that is bundled with esbuild, as demonstrated above. For example, when `--minify` is enabled esbuild will use a different name generation algorithm which generates names that are as short as possible (analogous to how esbuild minifies local identifiers in JS). - You can easily use both global CSS files and local CSS files simultaneously if you give them different file extensions. For example, you could pass `--loader:.css=global-css` and `--loader:.module.css=local-css` to esbuild so that `.css` files still use global names by default but `.module.css` files use local names by default. - Keep in mind that the `css` loader is different than the `global-css` loader. The `:local` and `:global` annotations are not enabled with the `css` loader and will be passed through unchanged. This allows you to have the option of using esbuild to process CSS containing while preserving these annotations. It also means that local CSS names are disabled by default for now (since the `css` loader is currently the default for CSS files). The `:local` and `:global` syntax may be enabled by default in a future release. Note that esbuild's implementation does not currently have feature parity with other implementations of modular CSS in similar tools. This is only a preliminary release with a partial implementation that includes some basic behavior to get the process started. Additional behavior may be added in future releases. In particular, this release does not implement: - The `composes` pragma - Tree shaking for unused local CSS - Local names for keyframe animations, grid lines, `@container`, `@counter-style`, etc. Issue [#20](https://togithub.com/evanw/esbuild/issues/20) (the issue for this feature) is esbuild's most-upvoted issue! While this release still leaves that issue open, it's an important first step in that direction. - Parse `:is`, `:has`, `:not`, and `:where` in CSS With this release, esbuild will now parse the contents of these pseudo-class selectors as a selector list. This means you will now get syntax warnings within these selectors for invalid selector syntax. It also means that esbuild's CSS nesting transform behaves slightly differently than before because esbuild is now operating on an AST instead of a token stream. For example: ```css /* Original code */ div { :where(.foo&) { color: red; } } /* Old output (with --target=chrome90) */ :where(.foo:is(div)) { color: red; } /* New output (with --target=chrome90) */ :where(div.foo) { color: red; } ```mrmlnc/fast-glob (fast-glob)
### [`v3.3.1`](https://togithub.com/mrmlnc/fast-glob/releases/tag/3.3.1) [Compare Source](https://togithub.com/mrmlnc/fast-glob/compare/3.3.0...3.3.1) > **Full Changelog**: https://github.com/mrmlnc/fast-glob/compare/3.3.0...3.3.1 This release fixes a regression for cases where the `ignore` option is used with a string ([#403](https://togithub.com/mrmlnc/fast-glob/issues/403), [#404](https://togithub.com/mrmlnc/fast-glob/issues/404)). The public interface of this package does not support a string as the value for the [`ignore` option](https://togithub.com/mrmlnc/fast-glob#ignore) since 2018 year ([release](https://togithub.com/mrmlnc/fast-glob/releases/tag/2.0.0)). So, in the next major release, we will reintroduce method implementations that do not involve strings in the `ignore` option.pnpm/pnpm (pnpm)
### [`v8.6.10`](https://togithub.com/pnpm/pnpm/releases/tag/v8.6.10) [Compare Source](https://togithub.com/pnpm/pnpm/compare/v8.6.9...v8.6.10) #### Patch Changes - Installation succeeds if a non-optional dependency of an optional dependency has failing installation scripts [#6822](https://togithub.com/pnpm/pnpm/issues/6822). - The length of the temporary file names in the content-addressable store reduced in order to prevent `ENAMETOOLONG` errors from happening [#6842](https://togithub.com/pnpm/pnpm/issues/6842). - Ignore empty patch content when patch-commit. - Sort keys in `packageExtensions` before calculating `packageExtensionsChecksum` [#6824](https://togithub.com/pnpm/pnpm/issues/6824). - Pass the right scheme to `git ls-remote` in order to prevent a fallback to `git+ssh` that would result in a 'host key verification failed' issue [#6806](https://togithub.com/pnpm/pnpm/issues/6806) - The "postpublish" script of a git-hosted dependency is not executed, while building the dependency [#6822](https://togithub.com/pnpm/pnpm/issues/6846). #### Our Gold Sponsorsrollup/rollup (rollup)
### [`v3.26.3`](https://togithub.com/rollup/rollup/blob/HEAD/CHANGELOG.md#3263) [Compare Source](https://togithub.com/rollup/rollup/compare/v3.26.2...v3.26.3) *2023-07-17* ##### Bug Fixes - Do not pass external modules to `manualChunks` to avoid breaking existing configs ([#5068](https://togithub.com/rollup/rollup/issues/5068)) ##### Pull Requests - [#5056](https://togithub.com/rollup/rollup/pull/5056): chore(deps): lock file maintenance minor/patch updates ([@renovate](https://togithub.com/renovate)\[bot]) - [#5059](https://togithub.com/rollup/rollup/pull/5059): chore(config): migrate renovate config ([@renovate](https://togithub.com/renovate)\[bot]) - [#5064](https://togithub.com/rollup/rollup/pull/5064): chore(deps): update dependency prettier to v3 ([@renovate](https://togithub.com/renovate)\[bot]) - [#5065](https://togithub.com/rollup/rollup/pull/5065): chore(deps): update typescript-eslint monorepo to v6 (major) ([@renovate](https://togithub.com/renovate)\[bot]) - [#5068](https://togithub.com/rollup/rollup/pull/5068): fix: don't pass external modules to the manualChunks function ([@TrickyPi](https://togithub.com/TrickyPi))vitejs/vite (vite)
### [`v4.4.6`](https://togithub.com/vitejs/vite/blob/HEAD/packages/vite/CHANGELOG.md#small446-2023-07-21-small) [Compare Source](https://togithub.com/vitejs/vite/compare/v4.4.5...v4.4.6) - fix: constrain inject helpers for iife ([#13909](https://togithub.com/vitejs/vite/issues/13909)) ([c89f677](https://togithub.com/vitejs/vite/commit/c89f677)), closes [#13909](https://togithub.com/vitejs/vite/issues/13909) - fix: display manualChunks warning only when a function is not used ([#13797](https://togithub.com/vitejs/vite/issues/13797)) ([#13798](https://togithub.com/vitejs/vite/issues/13798)) ([51c271f](https://togithub.com/vitejs/vite/commit/51c271f)), closes [#13797](https://togithub.com/vitejs/vite/issues/13797) [#13798](https://togithub.com/vitejs/vite/issues/13798) - fix: do not append `browserHash` on optimized deps during build ([#13906](https://togithub.com/vitejs/vite/issues/13906)) ([0fb2340](https://togithub.com/vitejs/vite/commit/0fb2340)), closes [#13906](https://togithub.com/vitejs/vite/issues/13906) - fix: use Bun's implementation of `ws` instead of the bundled one ([#13901](https://togithub.com/vitejs/vite/issues/13901)) ([049404c](https://togithub.com/vitejs/vite/commit/049404c)), closes [#13901](https://togithub.com/vitejs/vite/issues/13901) - feat(client): add guide to press Esc for closing the overlay ([#13896](https://togithub.com/vitejs/vite/issues/13896)) ([da389cc](https://togithub.com/vitejs/vite/commit/da389cc)), closes [#13896](https://togithub.com/vitejs/vite/issues/13896) ### [`v4.4.5`](https://togithub.com/vitejs/vite/blob/HEAD/packages/vite/CHANGELOG.md#small445-2023-07-20-small) [Compare Source](https://togithub.com/vitejs/vite/compare/v4.4.4...v4.4.5) - fix: "EISDIR: illegal operation on a directory, realpath" error on RA… ([#13655](https://togithub.com/vitejs/vite/issues/13655)) ([6bd5434](https://togithub.com/vitejs/vite/commit/6bd5434)), closes [#13655](https://togithub.com/vitejs/vite/issues/13655) - fix: transform error message add file info ([#13687](https://togithub.com/vitejs/vite/issues/13687)) ([6dca41c](https://togithub.com/vitejs/vite/commit/6dca41c)), closes [#13687](https://togithub.com/vitejs/vite/issues/13687) - fix: warn when publicDir and outDir are nested ([#13742](https://togithub.com/vitejs/vite/issues/13742)) ([4eb3154](https://togithub.com/vitejs/vite/commit/4eb3154)), closes [#13742](https://togithub.com/vitejs/vite/issues/13742) - fix(build): remove warning about ineffective dynamic import from node_modules ([#13884](https://togithub.com/vitejs/vite/issues/13884)) ([33002dd](https://togithub.com/vitejs/vite/commit/33002dd)), closes [#13884](https://togithub.com/vitejs/vite/issues/13884) - fix(build): style insert order for UMD builds (fix [#13668](https://togithub.com/vitejs/vite/issues/13668)) ([#13669](https://togithub.com/vitejs/vite/issues/13669)) ([49a1b99](https://togithub.com/vitejs/vite/commit/49a1b99)), closes [#13668](https://togithub.com/vitejs/vite/issues/13668) [#13669](https://togithub.com/vitejs/vite/issues/13669) - fix(deps): update all non-major dependencies ([#13872](https://togithub.com/vitejs/vite/issues/13872)) ([975a631](https://togithub.com/vitejs/vite/commit/975a631)), closes [#13872](https://togithub.com/vitejs/vite/issues/13872) - fix(types): narrow down the return type of `defineConfig` ([#13792](https://togithub.com/vitejs/vite/issues/13792)) ([c971f26](https://togithub.com/vitejs/vite/commit/c971f26)), closes [#13792](https://togithub.com/vitejs/vite/issues/13792) - chore: fix typos ([#13862](https://togithub.com/vitejs/vite/issues/13862)) ([f54e8da](https://togithub.com/vitejs/vite/commit/f54e8da)), closes [#13862](https://togithub.com/vitejs/vite/issues/13862) - chore: replace `any` with `string` ([#13850](https://togithub.com/vitejs/vite/issues/13850)) ([4606fd8](https://togithub.com/vitejs/vite/commit/4606fd8)), closes [#13850](https://togithub.com/vitejs/vite/issues/13850) - chore(deps): update dependency prettier to v3 ([#13759](https://togithub.com/vitejs/vite/issues/13759)) ([5a56941](https://togithub.com/vitejs/vite/commit/5a56941)), closes [#13759](https://togithub.com/vitejs/vite/issues/13759) - docs: fix build.cssMinify link ([#13840](https://togithub.com/vitejs/vite/issues/13840)) ([8a2a3e1](https://togithub.com/vitejs/vite/commit/8a2a3e1)), closes [#13840](https://togithub.com/vitejs/vite/issues/13840)webpack/webpack (webpack)
### [`v5.88.2`](https://togithub.com/webpack/webpack/releases/tag/v5.88.2) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.88.1...v5.88.2) #### Bug Fixes - Fixed a bug where unused identifiers should retain names when using css modules by [@burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17444](https://togithub.com/webpack/webpack/pull/17444) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.88.1...v5.88.2Configuration
📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Mend Renovate. View repository job log here.