unplugin / unplugin-vue

✨ Transform Vue 3 SFC to JavaScript. Supports Vite, esbuild, Rollup, Webpack and more.
MIT License
175 stars 7 forks source link

chore(deps): update all non-major dependencies #153

Closed renovate[bot] closed 7 months ago

renovate[bot] commented 9 months ago

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
@babel/types (source) ^7.23.9 -> ^7.24.0 age adoption passing confidence
@chialab/esbuild-plugin-html (source) ^0.18.0 -> ^0.18.2 age adoption passing confidence
@jridgewell/gen-mapping ^0.3.3 -> ^0.3.5 age adoption passing confidence
@jridgewell/trace-mapping ^0.3.22 -> ^0.3.25 age adoption passing confidence
@swc/core (source) ^1.4.2 -> ^1.4.12 age adoption passing confidence
@sxzz/eslint-config ^3.8.0 -> ^3.9.0 age adoption passing confidence
@sxzz/prettier-config ^2.0.0 -> ^2.0.1 age adoption passing confidence
@types/node (source) ^20.11.19 -> ^20.12.6 age adoption passing confidence
@vitest/ui (source) 1.3.0 -> 1.4.0 age adoption passing confidence
bumpp ^9.3.0 -> ^9.4.0 age adoption passing confidence
esbuild 0.20.1 -> 0.20.2 age adoption passing confidence
esbuild ^0.20.1 -> ^0.20.2 age adoption passing confidence
eslint (source) ^8.56.0 -> ^8.57.0 age adoption passing confidence
pnpm (source) 8.15.3 -> 8.15.6 age adoption passing confidence
rollup (source) ^4.12.0 -> ^4.14.1 age adoption passing confidence
sass ^1.71.0 -> ^1.74.1 age adoption passing confidence
source-map-js ^1.0.2 -> ^1.2.0 age adoption passing confidence
typescript (source) ^5.3.3 -> ^5.4.4 age adoption passing confidence
unplugin ~1.7.1 -> ~1.10.1 age adoption passing confidence
vite (source) ^5.1.3 -> ^5.2.8 age adoption passing confidence
vitest (source) 1.3.0 -> 1.4.0 age adoption passing confidence
vue (source) ^3.4.19 -> ^3.4.21 age adoption passing confidence
webpack ^5.90.3 -> ^5.91.0 age adoption passing confidence
webpack-dev-server ^5.0.2 -> ^5.0.4 age adoption passing confidence

Release Notes

babel/babel (@​babel/types) ### [`v7.24.0`](https://togithub.com/babel/babel/blob/HEAD/CHANGELOG.md#v7240-2024-02-28) [Compare Source](https://togithub.com/babel/babel/compare/v7.23.9...v7.24.0) ##### :rocket: New Feature - `babel-standalone` - [#​11696](https://togithub.com/babel/babel/pull/11696) Export babel tooling packages in `@babel/standalone` ([@​ajihyf](https://togithub.com/ajihyf)) - `babel-core`, `babel-helper-create-class-features-plugin`, `babel-helpers`, `babel-plugin-transform-class-properties` - [#​16267](https://togithub.com/babel/babel/pull/16267) Implement `noUninitializedPrivateFieldAccess` assumption ([@​nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) - `babel-helper-create-class-features-plugin`, `babel-helpers`, `babel-plugin-proposal-decorators`, `babel-plugin-proposal-pipeline-operator`, `babel-plugin-syntax-decorators`, `babel-plugin-transform-class-properties`, `babel-runtime-corejs2`, `babel-runtime-corejs3`, `babel-runtime` - [#​16242](https://togithub.com/babel/babel/pull/16242) Support decorator 2023-11 normative updates ([@​JLHwung](https://togithub.com/JLHwung)) - `babel-preset-flow` - [#​16309](https://togithub.com/babel/babel/pull/16309) \[babel 7] Allow setting `ignoreExtensions` in Flow preset ([@​nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) - [#​16284](https://togithub.com/babel/babel/pull/16284) Add `experimental_useHermesParser` option in `preset-flow` ([@​liuxingbaoyu](https://togithub.com/liuxingbaoyu)) - `babel-helper-import-to-platform-api`, `babel-plugin-proposal-import-wasm-source`, `babel-plugin-proposal-json-modules`, `babel-standalone` - [#​16172](https://togithub.com/babel/babel/pull/16172) Add transform support for JSON modules imports ([@​nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) - `babel-plugin-transform-runtime` - [#​16241](https://togithub.com/babel/babel/pull/16241) Add back `moduleName` option to `@babel/plugin-transform-runtime` ([@​nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) - `babel-parser`, `babel-types` - [#​16277](https://togithub.com/babel/babel/pull/16277) Allow import attributes for `TSImportType` ([@​sosukesuzuki](https://togithub.com/sosukesuzuki)) ##### :bug: Bug Fix - `babel-plugin-proposal-do-expressions`, `babel-traverse` - [#​16305](https://togithub.com/babel/babel/pull/16305) fix: avoid `popContext` on unvisited node paths ([@​JLHwung](https://togithub.com/JLHwung)) - `babel-helper-create-class-features-plugin`, `babel-plugin-transform-private-methods`, `babel-plugin-transform-private-property-in-object` - [#​16312](https://togithub.com/babel/babel/pull/16312) Fix class private properties when `privateFieldsAsSymbols` ([@​liuxingbaoyu](https://togithub.com/liuxingbaoyu)) - `babel-helper-create-class-features-plugin`, `babel-plugin-transform-private-methods` - [#​16307](https://togithub.com/babel/babel/pull/16307) Fix the support of `arguments` in private `get/set` method ([@​liuxingbaoyu](https://togithub.com/liuxingbaoyu)) - `babel-helper-create-class-features-plugin`, `babel-helpers`, `babel-plugin-proposal-decorators` - [#​16287](https://togithub.com/babel/babel/pull/16287) Reduce decorator static property size ([@​liuxingbaoyu](https://togithub.com/liuxingbaoyu)) - `babel-helper-create-class-features-plugin`, `babel-plugin-proposal-decorators` - [#​16281](https://togithub.com/babel/babel/pull/16281) Fix evaluation order of decorators with cached receiver ([@​nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) - [#​16279](https://togithub.com/babel/babel/pull/16279) Fix decorator this memoization ([@​JLHwung](https://togithub.com/JLHwung)) - [#​16266](https://togithub.com/babel/babel/pull/16266) Preserve `static` on decorated private `accessor` ([@​nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) - [#​16258](https://togithub.com/babel/babel/pull/16258) fix: handle decorated async private method and generator ([@​JLHwung](https://togithub.com/JLHwung)) - `babel-helper-create-class-features-plugin`, `babel-plugin-proposal-decorators`, `babel-plugin-transform-async-generator-functions`, `babel-plugin-transform-private-methods`, `babel-plugin-transform-private-property-in-object`, `babel-plugin-transform-typescript`, `babel-preset-env` - [#​16275](https://togithub.com/babel/babel/pull/16275) Fix class private properties when `privateFieldsAsProperties` ([@​liuxingbaoyu](https://togithub.com/liuxingbaoyu)) - `babel-helpers` - [#​16268](https://togithub.com/babel/babel/pull/16268) Do not consider `arguments` in a helper as a global reference ([@​nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) - `babel-helpers`, `babel-plugin-proposal-decorators` - [#​16270](https://togithub.com/babel/babel/pull/16270) Handle symbol key class elements decoration ([@​JLHwung](https://togithub.com/JLHwung)) - [#​16265](https://togithub.com/babel/babel/pull/16265) Do not define `access.get` for public setter decorators ([@​nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) ##### :nail_care: Polish - `babel-core`, `babel-helper-create-class-features-plugin`, `babel-preset-env` - [#​12428](https://togithub.com/babel/babel/pull/12428) Suggest using `BABEL_SHOW_CONFIG_FOR` for config problems ([@​nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) ##### :house: Internal - `babel-helper-transform-fixture-test-runner` - [#​16278](https://togithub.com/babel/babel/pull/16278) Continue writing `output.js` when `exec.js` throws ([@​liuxingbaoyu](https://togithub.com/liuxingbaoyu)) ##### :microscope: Output optimization - `babel-helper-create-class-features-plugin`, `babel-plugin-proposal-decorators` - [#​16306](https://togithub.com/babel/babel/pull/16306) Avoid intermediate functions for private accessors with decs ([@​nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) - `babel-helper-create-class-features-plugin`, `babel-helpers`, `babel-plugin-proposal-decorators`, `babel-plugin-proposal-pipeline-operator`, `babel-plugin-transform-class-properties` - [#​16294](https://togithub.com/babel/babel/pull/16294) More aggressively inline decorators in the static block ([@​nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) - `babel-helper-create-class-features-plugin`, `babel-helpers`, `babel-plugin-transform-private-methods` - [#​16283](https://togithub.com/babel/babel/pull/16283) Do not use `classPrivateMethodGet` ([@​liuxingbaoyu](https://togithub.com/liuxingbaoyu)) - `babel-helper-create-class-features-plugin`, `babel-helpers`, `babel-plugin-proposal-decorators` - [#​16287](https://togithub.com/babel/babel/pull/16287) Reduce decorator static property size ([@​liuxingbaoyu](https://togithub.com/liuxingbaoyu)) - `babel-helper-create-class-features-plugin`, `babel-plugin-proposal-decorators`, `babel-plugin-transform-class-properties` - [#​16280](https://togithub.com/babel/babel/pull/16280) Reduce element decorator temp variables ([@​JLHwung](https://togithub.com/JLHwung)) - `babel-helper-create-class-features-plugin`, `babel-helper-fixtures`, `babel-helpers`, `babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining`, `babel-plugin-proposal-decorators`, `babel-plugin-proposal-destructuring-private`, `babel-plugin-proposal-optional-chaining-assign`, `babel-plugin-transform-class-properties`, `babel-plugin-transform-class-static-block`, `babel-plugin-transform-private-methods`, `babel-plugin-transform-private-property-in-object`, `babel-preset-env`, `babel-runtime-corejs2`, `babel-runtime-corejs3`, `babel-runtime` - [#​16261](https://togithub.com/babel/babel/pull/16261) Do not use descriptors for private class elements ([@​nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) - `babel-helpers`, `babel-plugin-proposal-decorators` - [#​16263](https://togithub.com/babel/babel/pull/16263) Reduce helper size for decorator 2023-11 ([@​liuxingbaoyu](https://togithub.com/liuxingbaoyu))
chialab/rna (@​chialab/esbuild-plugin-html) ### [`v0.18.2`](https://togithub.com/chialab/rna/blob/HEAD/packages/esbuild-plugin-html/CHANGELOG.md#0182) [Compare Source](https://togithub.com/chialab/rna/compare/@chialab/esbuild-plugin-html@0.18.1...@chialab/esbuild-plugin-html@0.18.2) ##### Patch Changes - [`b67fc16`](https://togithub.com/chialab/rna/commit/b67fc16): Remove node-resolve plugin dependency. ### [`v0.18.1`](https://togithub.com/chialab/rna/blob/HEAD/packages/esbuild-plugin-html/CHANGELOG.md#0181) [Compare Source](https://togithub.com/chialab/rna/compare/@chialab/esbuild-plugin-html@0.18.0...@chialab/esbuild-plugin-html@0.18.1) ##### Patch Changes - [`a5fc6e1`](https://togithub.com/chialab/rna/commit/a5fc6e1): Support HTML minification with `htmlnano`. - [`9695bee`](https://togithub.com/chialab/rna/commit/9695bee): Collect HTML `watchedFiles` from metafile. - Updated dependencies \[[`dd8e33f`](https://togithub.com/chialab/rna/commit/dd8e33f)] - [@​chialab/esbuild-rna](https://togithub.com/chialab/esbuild-rna)[@​0](https://togithub.com/0).18.1
jridgewell/gen-mapping (@​jridgewell/gen-mapping) ### [`v0.3.5`](https://togithub.com/jridgewell/gen-mapping/releases/tag/v0.3.5) [Compare Source](https://togithub.com/jridgewell/gen-mapping/compare/v0.3.4...v0.3.5) #### What's Changed - Add `ignoreList` support: https://github.com/jridgewell/gen-mapping/commit/9add0c20b3058a0f98c5d1a730405b3726479269 **Full Changelog**: https://github.com/jridgewell/gen-mapping/compare/v0.3.4...v0.3.5 ### [`v0.3.4`](https://togithub.com/jridgewell/gen-mapping/releases/tag/v0.3.4) [Compare Source](https://togithub.com/jridgewell/gen-mapping/compare/v0.3.3...v0.3.4) **Full Changelog**: https://github.com/jridgewell/gen-mapping/compare/v0.3.3...v0.3.4
jridgewell/trace-mapping (@​jridgewell/trace-mapping) ### [`v0.3.25`](https://togithub.com/jridgewell/trace-mapping/compare/v0.3.24...v0.3.25) [Compare Source](https://togithub.com/jridgewell/trace-mapping/compare/v0.3.24...v0.3.25) ### [`v0.3.24`](https://togithub.com/jridgewell/trace-mapping/releases/tag/v0.3.24) [Compare Source](https://togithub.com/jridgewell/trace-mapping/compare/v0.3.23...v0.3.24) #### What's Changed - Add `ignoreList` (and `x_google_ignoreList`) support: https://github.com/jridgewell/trace-mapping/commit/1027ce6bfc068dc71cc16861d2e09b155fee9293 **Full Changelog**: https://github.com/jridgewell/trace-mapping/compare/v0.3.23...v0.3.24 ### [`v0.3.23`](https://togithub.com/jridgewell/trace-mapping/releases/tag/v0.3.23) [Compare Source](https://togithub.com/jridgewell/trace-mapping/compare/v0.3.22...v0.3.23) **Full Changelog**: https://github.com/jridgewell/trace-mapping/compare/v0.3.22...v0.3.23
swc-project/swc (@​swc/core) ### [`v1.4.12`](https://togithub.com/swc-project/swc/blob/HEAD/CHANGELOG.md#1412---2024-04-04) [Compare Source](https://togithub.com/swc-project/swc/compare/v1.4.11...v1.4.12) ##### Bug Fixes - **(common)** Fix source index for `inputSourceMap` ([#​8800](https://togithub.com/swc-project/swc/issues/8800)) ([4f9ab81](https://togithub.com/swc-project/swc/commit/4f9ab8151dad9984c81c72eb10c2afe5313a7591)) - **(es)** Change default value of `inputSourceMap` to `true` ([#​8801](https://togithub.com/swc-project/swc/issues/8801)) ([9ffcd18](https://togithub.com/swc-project/swc/commit/9ffcd1823c0abdc741f654b8e1e330cdc06769a1)) - **(es/bugfixes)** Fix fn transform in nameless fns ([#​8796](https://togithub.com/swc-project/swc/issues/8796)) ([7ad004e](https://togithub.com/swc-project/swc/commit/7ad004e1899d98ee8da49909163455b3b622686d)) - **(es/helpers)** Fix metadata of decorators being `undefined` ([#​8768](https://togithub.com/swc-project/swc/issues/8768)) ([263ce6e](https://togithub.com/swc-project/swc/commit/263ce6e22bd4dbba0323099f256fb062b8e644a2)) - **(es/minifier)** Abort fn inliner if there's a spread arg ([#​8809](https://togithub.com/swc-project/swc/issues/8809)) ([730ded2](https://togithub.com/swc-project/swc/commit/730ded2a26f63f0069dea0d3bc207bb31f344444)) - **(es/module)** Fix `jsc.paths` with `resolveFully` ([#​8784](https://togithub.com/swc-project/swc/issues/8784)) ([4961bb0](https://togithub.com/swc-project/swc/commit/4961bb055df9925da97279819d2fdf740b4b3d92)) - **(es/parser)** Tweak msg of `SyntaxError::UsingDeclNotEnabled` ([#​8791](https://togithub.com/swc-project/swc/issues/8791)) ([95c822e](https://togithub.com/swc-project/swc/commit/95c822e7c43470e4c972bef00d97e7e0de02e0b0)) ##### Features - **(es/minifier)** Evaluate spread of arrays ([#​8811](https://togithub.com/swc-project/swc/issues/8811)) ([47714c5](https://togithub.com/swc-project/swc/commit/47714c52ce08b0e94617d17c11c8e8994c62dbaa)) - **(plugin/runner)** Improve error message for Wasm plugin crashes ([#​8794](https://togithub.com/swc-project/swc/issues/8794)) ([571d297](https://togithub.com/swc-project/swc/commit/571d29781a90f4def4811ae46fa4a5f966e461e6)) ##### Miscellaneous Tasks - **(deps)** Update dependencies ([#​8810](https://togithub.com/swc-project/swc/issues/8810)) ([207582f](https://togithub.com/swc-project/swc/commit/207582ff254a66a9dd4613de6d3cb43c19957b68)) - **(es/transforms)** Add `repository` field to `swc_ecma_ext_transforms` ([#​8793](https://togithub.com/swc-project/swc/issues/8793)) ([37f0a79](https://togithub.com/swc-project/swc/commit/37f0a7994bdf7d90c30a00f70c6dde97b4d89c8f)) ##### Performance - **(atoms)** Update `hstr` ([#​8799](https://togithub.com/swc-project/swc/issues/8799)) ([0745624](https://togithub.com/swc-project/swc/commit/0745624cb71e12b18b06d9ee106066d8b585c4c6)) - **(es/parser)** Use faster unicode crate ([#​8785](https://togithub.com/swc-project/swc/issues/8785)) ([6f780ca](https://togithub.com/swc-project/swc/commit/6f780ca749a611f54aa4deb628e532fd0a12228f)) ### [`v1.4.11`](https://togithub.com/swc-project/swc/compare/v1.4.8...v1.4.11) [Compare Source](https://togithub.com/swc-project/swc/compare/v1.4.8...v1.4.11) ### [`v1.4.8`](https://togithub.com/swc-project/swc/blob/HEAD/CHANGELOG.md#148---2024-03-14) [Compare Source](https://togithub.com/swc-project/swc/compare/v1.4.7...v1.4.8) ##### Bug Fixes - **(es/module)** Fix regression of resolving relative modules ([#​8748](https://togithub.com/swc-project/swc/issues/8748)) ([f988b66](https://togithub.com/swc-project/swc/commit/f988b66e1fd921266a8abf6fe9bb997b6878e949)) - **(es/parser)** Allow `export` after decorators when valid ([#​8739](https://togithub.com/swc-project/swc/issues/8739)) ([663261b](https://togithub.com/swc-project/swc/commit/663261be97364911e7b57eab0560ee48e53d8f33)) ##### Miscellaneous Tasks - **(es)** Allow using older `tokio` ([#​8740](https://togithub.com/swc-project/swc/issues/8740)) ([9c1eb01](https://togithub.com/swc-project/swc/commit/9c1eb017fcd90bd21b43f1a988c7fc67639343c1)) ### [`v1.4.7`](https://togithub.com/swc-project/swc/blob/HEAD/CHANGELOG.md#147---2024-03-13) [Compare Source](https://togithub.com/swc-project/swc/compare/v1.4.6...v1.4.7) ##### Bug Fixes - **(es/minifier)** Fix eval of `toString` of array with holes ([#​8727](https://togithub.com/swc-project/swc/issues/8727)) ([f3fbd9d](https://togithub.com/swc-project/swc/commit/f3fbd9d54925b708139a37865508430cdcb98f9a)) - **(es/minifier)** Do not evaluate `slice` calls with negative index ([#​8726](https://togithub.com/swc-project/swc/issues/8726)) ([23f9635](https://togithub.com/swc-project/swc/commit/23f9635d2cb523d63e5d1611dcf55922bcc54a87)) - **(es/minifier)** Handle cyclic references while dropping unused properties ([#​8725](https://togithub.com/swc-project/swc/issues/8725)) ([102241b](https://togithub.com/swc-project/swc/commit/102241b812b8e815b59575178193bb71b4264bab)) - **(es/minifier)** Fix evaluation of array literals with `void 0` ([#​8733](https://togithub.com/swc-project/swc/issues/8733)) ([aa0154d](https://togithub.com/swc-project/swc/commit/aa0154d2d86b0bed7ffed3324c7a650ffe111c93)) - **(es/minifier)** Fix removal of array pattern bindings ([#​8730](https://togithub.com/swc-project/swc/issues/8730)) ([312f0d8](https://togithub.com/swc-project/swc/commit/312f0d8427b3c4436b491ed4265f9469dc017f8f)) - **(es/minifier)** Make `Finalizer` handle `hoisted_props` correctly ([#​8738](https://togithub.com/swc-project/swc/issues/8738)) ([95761b7](https://togithub.com/swc-project/swc/commit/95761b76bf09a4d2c09517b2bd7bf7b78ee2149f)) - **(es/proposal)** Fix var placement for using transform ([#​8732](https://togithub.com/swc-project/swc/issues/8732)) ([633cd89](https://togithub.com/swc-project/swc/commit/633cd89bacef5f0efef20f1dfa709cff1ecba36f)) ##### Features - **(es/lints)** Add `no-prototype-builtins` rule ([#​8684](https://togithub.com/swc-project/swc/issues/8684)) ([a5dbb17](https://togithub.com/swc-project/swc/commit/a5dbb17612327c66366086f99b44c6731d125ffc)) - **(es/lints)** Add `prefer-object-spread` rule ([#​8696](https://togithub.com/swc-project/swc/issues/8696)) ([aa9297b](https://togithub.com/swc-project/swc/commit/aa9297b42e001f6b7319881870f6012a56c50aef)) ##### Refactor - **(es)** Prepare `wasm32-wasi-preview1-threads` target support ([#​8724](https://togithub.com/swc-project/swc/issues/8724)) ([e3acd14](https://togithub.com/swc-project/swc/commit/e3acd1476c2428e5329a359bb7323687c06108d2)) ### [`v1.4.6`](https://togithub.com/swc-project/swc/blob/HEAD/CHANGELOG.md#146---2024-03-08) [Compare Source](https://togithub.com/swc-project/swc/compare/v1.4.5...v1.4.6) ##### Bug Fixes - **(es/minifier)** Do not drop used properties ([#​8703](https://togithub.com/swc-project/swc/issues/8703)) ([6069217](https://togithub.com/swc-project/swc/commit/606921700ee9fdb3747a8b54bb851e1d0df27484)) ##### Performance - **(es)** Do not create tokio runtime if not required ([#​8711](https://togithub.com/swc-project/swc/issues/8711)) ([9a1f04f](https://togithub.com/swc-project/swc/commit/9a1f04f4269f65df845897d2fb61449985bdd821)) ### [`v1.4.5`](https://togithub.com/swc-project/swc/blob/HEAD/CHANGELOG.md#145---2024-03-06) [Compare Source](https://togithub.com/swc-project/swc/compare/v1.4.4...v1.4.5) ##### Bug Fixes - **(es/module)** Fix relativeness check for `jsc.paths` ([#​8702](https://togithub.com/swc-project/swc/issues/8702)) ([d37125f](https://togithub.com/swc-project/swc/commit/d37125fb8ea23eb7b7fae09835c92f548fa5f0ab)) ##### Features - **(es/parser)** Support Regular Expression `v` flag ([#​8690](https://togithub.com/swc-project/swc/issues/8690)) ([4ce39eb](https://togithub.com/swc-project/swc/commit/4ce39ebf32d79982a31458b7b70d9fecde40cd35)) ### [`v1.4.4`](https://togithub.com/swc-project/swc/compare/v1.4.2...v1.4.4) [Compare Source](https://togithub.com/swc-project/swc/compare/v1.4.2...v1.4.4)
sxzz/eslint-config (@​sxzz/eslint-config) ### [`v3.9.0`](https://togithub.com/sxzz/eslint-config/releases/tag/v3.9.0) [Compare Source](https://togithub.com/sxzz/eslint-config/compare/v3.8.7...v3.9.0) #### Minor Changes - Replace `eslint-plugin-i` with `eslint-plugin-import-x` for supporting ESLint v9. *** #####    🚀 Features - **unicorn**: Enable promise lint  -  by [@​sxzz](https://togithub.com/sxzz) [(46458)](https://togithub.com/sxzz/eslint-config/commit/46458f1) #####    🐞 Bug Fixes - **deps**: - Update dependency globals to v15  -  by [@​renovate](https://togithub.com/renovate)\[bot] in[https://github.com/sxzz/eslint-config/issues/70](https://togithub.com/sxzz/eslint-config/issues/70)0 [(6f282)](https://togithub.com/sxzz/eslint-config/commit/6f2821e) - Update dependency eslint-plugin-unicorn to v52  -  by [@​renovate](https://togithub.com/renovate)\[bot] in[https://github.com/sxzz/eslint-config/issues/72](https://togithub.com/sxzz/eslint-config/issues/72)2 [(66574)](https://togithub.com/sxzz/eslint-config/commit/66574ba) #####     [View changes on GitHub](https://togithub.com/sxzz/eslint-config/compare/v3.8.7...v3.9.0) ### [`v3.8.7`](https://togithub.com/sxzz/eslint-config/releases/tag/v3.8.7) [Compare Source](https://togithub.com/sxzz/eslint-config/compare/v3.8.6...v3.8.7) #####    🐞 Bug Fixes - Disable import global node modules in markdown  -  by [@​sxzz](https://togithub.com/sxzz) [(400ad)](https://togithub.com/sxzz/eslint-config/commit/400adb4) - **deps**: Update dependency eslint-plugin-markdown to v4  -  by [@​renovate](https://togithub.com/renovate)\[bot] in[https://github.com/sxzz/eslint-config/issues/69](https://togithub.com/sxzz/eslint-config/issues/69)9 [(fbc38)](https://togithub.com/sxzz/eslint-config/commit/fbc38b3) #####     [View changes on GitHub](https://togithub.com/sxzz/eslint-config/compare/v3.8.6...v3.8.7) ### [`v3.8.6`](https://togithub.com/sxzz/eslint-config/releases/tag/v3.8.6) [Compare Source](https://togithub.com/sxzz/eslint-config/compare/v3.8.5...v3.8.6) #####    🚀 Features - Ignore default export in rolldown.ts  -  by [@​sxzz](https://togithub.com/sxzz) [(640a8)](https://togithub.com/sxzz/eslint-config/commit/640a88c) #####     [View changes on GitHub](https://togithub.com/sxzz/eslint-config/compare/v3.8.5...v3.8.6) ### [`v3.8.5`](https://togithub.com/sxzz/eslint-config/releases/tag/v3.8.5) [Compare Source](https://togithub.com/sxzz/eslint-config/compare/v3.8.4...v3.8.5) #####    🐞 Bug Fixes - Ignore import_map.json for filename-case  -  by [@​sxzz](https://togithub.com/sxzz) [(db19c)](https://togithub.com/sxzz/eslint-config/commit/db19c36) #####     [View changes on GitHub](https://togithub.com/sxzz/eslint-config/compare/v3.8.4...v3.8.5) ### [`v3.8.4`](https://togithub.com/sxzz/eslint-config/releases/tag/v3.8.4) [Compare Source](https://togithub.com/sxzz/eslint-config/compare/v3.8.3...v3.8.4) #####    🚀 Features - Ignore .nitro  -  by [@​sxzz](https://togithub.com/sxzz) [(45c58)](https://togithub.com/sxzz/eslint-config/commit/45c5858) #####     [View changes on GitHub](https://togithub.com/sxzz/eslint-config/compare/v3.8.3...v3.8.4) ### [`v3.8.3`](https://togithub.com/sxzz/eslint-config/releases/tag/v3.8.3) [Compare Source](https://togithub.com/sxzz/eslint-config/compare/v3.8.2...v3.8.3) #####    🐞 Bug Fixes - Don't include all files  -  by [@​sxzz](https://togithub.com/sxzz) [(1d395)](https://togithub.com/sxzz/eslint-config/commit/1d3956b) #####     [View changes on GitHub](https://togithub.com/sxzz/eslint-config/compare/v3.8.2...v3.8.3) ### [`v3.8.2`](https://togithub.com/sxzz/eslint-config/releases/tag/v3.8.2) [Compare Source](https://togithub.com/sxzz/eslint-config/compare/v3.8.1...v3.8.2) #####    🚀 Features - Disable no-default-export for nitro  -  by [@​sxzz](https://togithub.com/sxzz) [(3adeb)](https://togithub.com/sxzz/eslint-config/commit/3adebbb) #####     [View changes on GitHub](https://togithub.com/sxzz/eslint-config/compare/v3.8.1...v3.8.2) ### [`v3.8.1`](https://togithub.com/sxzz/eslint-config/releases/tag/v3.8.1) [Compare Source](https://togithub.com/sxzz/eslint-config/compare/v3.8.0...v3.8.1) #####    🐞 Bug Fixes - Typescript recommended rules for vue  -  by [@​sxzz](https://togithub.com/sxzz) [(46947)](https://togithub.com/sxzz/eslint-config/commit/4694784) #####     [View changes on GitHub](https://togithub.com/sxzz/eslint-config/compare/v3.8.0...v3.8.1)
sxzz/prettier-config (@​sxzz/prettier-config) ### [`v2.0.1`](https://togithub.com/sxzz/prettier-config/compare/v2.0.0...v2.0.1) [Compare Source](https://togithub.com/sxzz/prettier-config/compare/v2.0.0...v2.0.1)
vitest-dev/vitest (@​vitest/ui) ### [`v1.4.0`](https://togithub.com/vitest-dev/vitest/releases/tag/v1.4.0) [Compare Source](https://togithub.com/vitest-dev/vitest/compare/v1.3.1...v1.4.0) #####    🚀 Features - Throw error when using snapshot assertion with `not`  -  by [@​fenghan34](https://togithub.com/fenghan34) in [https://github.com/vitest-dev/vitest/issues/5294](https://togithub.com/vitest-dev/vitest/issues/5294) [(b9d37)](https://togithub.com/vitest-dev/vitest/commit/b9d378f5) - Add a flag to include test location in tasks  -  by [@​sheremet-va](https://togithub.com/sheremet-va) in [https://github.com/vitest-dev/vitest/issues/5342](https://togithub.com/vitest-dev/vitest/issues/5342) [(d627e)](https://togithub.com/vitest-dev/vitest/commit/d627e209) - **cli**: - Support wildcards in `--project` option  -  by [@​fenghan34](https://togithub.com/fenghan34) in [https://github.com/vitest-dev/vitest/issues/5295](https://togithub.com/vitest-dev/vitest/issues/5295) [(201bd)](https://togithub.com/vitest-dev/vitest/commit/201bd067) - **config**: - Add `shuffle.files` and `shuffle.tests` options  -  by [@​fenghan34](https://togithub.com/fenghan34) in [https://github.com/vitest-dev/vitest/issues/5281](https://togithub.com/vitest-dev/vitest/issues/5281) [(356db)](https://togithub.com/vitest-dev/vitest/commit/356db87b) - Deprecate `cache.dir` option  -  by [@​fenghan34](https://togithub.com/fenghan34) in [https://github.com/vitest-dev/vitest/issues/5229](https://togithub.com/vitest-dev/vitest/issues/5229) [(d7e8b)](https://togithub.com/vitest-dev/vitest/commit/d7e8b53e) - **coverage**: - Support `--changed` option  -  by [@​AriPerkkio](https://togithub.com/AriPerkkio) in [https://github.com/vitest-dev/vitest/issues/5314](https://togithub.com/vitest-dev/vitest/issues/5314) [(600b4)](https://togithub.com/vitest-dev/vitest/commit/600b44d6) - **vitest**: - Support `clearScreen` cli flag  -  by [@​hi-ogawa](https://togithub.com/hi-ogawa) in [https://github.com/vitest-dev/vitest/issues/5241](https://togithub.com/vitest-dev/vitest/issues/5241) [(e1735)](https://togithub.com/vitest-dev/vitest/commit/e1735fb6) #####    🐞 Bug Fixes - Repeatable `--project` option  -  by [@​fenghan34](https://togithub.com/fenghan34) in [https://github.com/vitest-dev/vitest/issues/5265](https://togithub.com/vitest-dev/vitest/issues/5265) [(d1a06)](https://togithub.com/vitest-dev/vitest/commit/d1a06730) - `--inspect-brk` to pause before execution  -  by [@​AriPerkkio](https://togithub.com/AriPerkkio) in [https://github.com/vitest-dev/vitest/issues/5355](https://togithub.com/vitest-dev/vitest/issues/5355) [(e77c5)](https://togithub.com/vitest-dev/vitest/commit/e77c553f) - Correct locations in test.each tasks  -  by [@​sheremet-va](https://togithub.com/sheremet-va) [(4f6e3)](https://togithub.com/vitest-dev/vitest/commit/4f6e39c1) - **api**: - Use resolvedUrls from devserver  -  by [@​saitonakamura](https://togithub.com/saitonakamura) and [@​hi-ogawa](https://togithub.com/hi-ogawa) in [https://github.com/vitest-dev/vitest/issues/5289](https://togithub.com/vitest-dev/vitest/issues/5289) [(2fef5)](https://togithub.com/vitest-dev/vitest/commit/2fef5a7e) - **browser**: - Add `magic-string` to `optimizeDeps.include`  -  by [@​hi-ogawa](https://togithub.com/hi-ogawa) in [https://github.com/vitest-dev/vitest/issues/5278](https://togithub.com/vitest-dev/vitest/issues/5278) [(8f04e)](https://togithub.com/vitest-dev/vitest/commit/8f04e798) - **coverage**: - Expensive regexp hangs v8 report generation  -  by [@​AriPerkkio](https://togithub.com/AriPerkkio) in [https://github.com/vitest-dev/vitest/issues/5259](https://togithub.com/vitest-dev/vitest/issues/5259) [(d68a7)](https://togithub.com/vitest-dev/vitest/commit/d68a7390) - V8 to ignore type-only files  -  by [@​AriPerkkio](https://togithub.com/AriPerkkio) in [https://github.com/vitest-dev/vitest/issues/5328](https://togithub.com/vitest-dev/vitest/issues/5328) [(c3eb8)](https://togithub.com/vitest-dev/vitest/commit/c3eb8deb) - Respect source maps of pre-transpiled sources  -  by [@​AriPerkkio](https://togithub.com/AriPerkkio) in [https://github.com/vitest-dev/vitest/issues/5367](https://togithub.com/vitest-dev/vitest/issues/5367) [(6eda4)](https://togithub.com/vitest-dev/vitest/commit/6eda473f) - Prevent `reportsDirectory` from removing user's project  -  by [@​AriPerkkio](https://togithub.com/AriPerkkio) in [https://github.com/vitest-dev/vitest/issues/5376](https://togithub.com/vitest-dev/vitest/issues/5376) [(07ec3)](https://togithub.com/vitest-dev/vitest/commit/07ec3779) - **expect**: - Show diff on `toContain/toMatch` assertion error  -  by [@​hi-ogawa](https://togithub.com/hi-ogawa) in [https://github.com/vitest-dev/vitest/issues/5267](https://togithub.com/vitest-dev/vitest/issues/5267) [(8ee59)](https://togithub.com/vitest-dev/vitest/commit/8ee59f0d) - **forks**: - Wrap `defines` to support `undefined` values  -  by [@​AriPerkkio](https://togithub.com/AriPerkkio) in [https://github.com/vitest-dev/vitest/issues/5284](https://togithub.com/vitest-dev/vitest/issues/5284) [(5b58b)](https://togithub.com/vitest-dev/vitest/commit/5b58b399) - **typecheck**: - Update get-tsconfig 4.7.3 to fix false circularity error  -  by [@​hi-ogawa](https://togithub.com/hi-ogawa) in [https://github.com/vitest-dev/vitest/issues/5384](https://togithub.com/vitest-dev/vitest/issues/5384) [(bdc37)](https://togithub.com/vitest-dev/vitest/commit/bdc371ee) - **ui**: - Escape html in error diff  -  by [@​hi-ogawa](https://togithub.com/hi-ogawa) in [https://github.com/vitest-dev/vitest/issues/5325](https://togithub.com/vitest-dev/vitest/issues/5325) [(ab60b)](https://togithub.com/vitest-dev/vitest/commit/ab60bf8d) - **vitest**: - Loosen `onConsoleLog` return type  -  by [@​hi-ogawa](https://togithub.com/hi-ogawa) in [https://github.com/vitest-dev/vitest/issues/5337](https://togithub.com/vitest-dev/vitest/issues/5337) [(6d1b1)](https://togithub.com/vitest-dev/vitest/commit/6d1b1451) - Ensure restoring terminal cursor on close  -  by [@​hi-ogawa](https://togithub.com/hi-ogawa) in [https://github.com/vitest-dev/vitest/issues/5292](https://togithub.com/vitest-dev/vitest/issues/5292) [(0bea2)](https://togithub.com/vitest-dev/vitest/commit/0bea2247) - Ignore timeout on websocket reporter rpc  -  by [@​sheremet-va](https://togithub.com/sheremet-va) [(38119)](https://togithub.com/vitest-dev/vitest/commit/38119b75) - Correctly override api with --no-api flag  -  by [@​sheremet-va](https://togithub.com/sheremet-va) in [https://github.com/vitest-dev/vitest/issues/5386](https://togithub.com/vitest-dev/vitest/issues/5386) [(51d1d)](https://togithub.com/vitest-dev/vitest/commit/51d1d472) - Logs in `beforeAll` and `afterAll`  -  by [@​fenghan34](https://togithub.com/fenghan34) in [https://github.com/vitest-dev/vitest/issues/5288](https://togithub.com/vitest-dev/vitest/issues/5288) [(ce5ca)](https://togithub.com/vitest-dev/vitest/commit/ce5ca6bf) - **workspace**: - Throw error when browser mode and `@vitest/coverage-v8` are used  -  by [@​AriPerkkio](https://togithub.com/AriPerkkio) in [https://github.com/vitest-dev/vitest/issues/5250](https://togithub.com/vitest-dev/vitest/issues/5250) [(29f98)](https://togithub.com/vitest-dev/vitest/commit/29f98cd3) #####     [View changes on GitHub](https://togithub.com/vitest-dev/vitest/compare/v1.3.1...v1.4.0) ### [`v1.3.1`](https://togithub.com/vitest-dev/vitest/releases/tag/v1.3.1) [Compare Source](https://togithub.com/vitest-dev/vitest/compare/v1.3.0...v1.3.1) #####    🚀 Features - **vitest**: Expose parseCLI method  -  by [@​sheremet-va](https://togithub.com/sheremet-va) in [https://github.com/vitest-dev/vitest/issues/5248](https://togithub.com/vitest-dev/vitest/issues/5248) [(c793a)](https://togithub.com/vitest-dev/vitest/commit/c793a136) - This feature is not affected by SemVer because it is part of an [experimental API](https://vitest.dev/advanced/api.html). #####    🐞 Bug Fixes - Add task tests iteratively  -  by [@​DerYeger](https://togithub.com/DerYeger) in [https://github.com/vitest-dev/vitest/issues/5235](https://togithub.com/vitest-dev/vitest/issues/5235) [(38155)](https://togithub.com/vitest-dev/vitest/commit/38155548) - **coverage**: Ignore generated TS decorators  -  by [@​AriPerkkio](https://togithub.com/AriPerkkio) and [@​sheremet-va](https://togithub.com/sheremet-va) in [https://github.com/vitest-dev/vitest/issues/5206](https://togithub.com/vitest-dev/vitest/issues/5206) [(a2804)](https://togithub.com/vitest-dev/vitest/commit/a280451b) - **ui**: Auto reload coverage iframe after test run  -  by [@​hi-ogawa](https://togithub.com/hi-ogawa) in [https://github.com/vitest-dev/vitest/issues/5242](https://togithub.com/vitest-dev/vitest/issues/5242) [(5376d)](https://togithub.com/vitest-dev/vitest/commit/5376d5be) #####     [View changes on GitHub](https://togithub.com/vitest-dev/vitest/compare/v1.3.0...v1.3.1)
antfu/bumpp (bumpp) ### [`v9.4.0`](https://togithub.com/antfu/bumpp/releases/tag/v9.4.0) [Compare Source](https://togithub.com/antfu/bumpp/compare/v9.3.1...v9.4.0) #####    🚀 Features - Support `next` as release type  -  by [@​Vision010](https://togithub.com/Vision010), **Anthony Fu** and [@​antfu](https://togithub.com/antfu) in [https://github.com/antfu/bumpp/issues/15](https://togithub.com/antfu/bumpp/issues/15) [(81b7e)](https://togithub.com/antfu/bumpp/commit/81b7e35) - Allow passing `--current-version` to override the current version  -  by [@​murongg](https://togithub.com/murongg) and [@​antfu](https://togithub.com/antfu) in [https://github.com/antfu/bumpp/issues/17](https://togithub.com/antfu/bumpp/issues/17) [(48778)](https://togithub.com/antfu/bumpp/commit/4877803) - Find config in parent directory  -  by [@​aleclarson](https://togithub.com/aleclarson) and [@​antfu](https://togithub.com/antfu) in [https://github.com/antfu/bumpp/issues/8](https://togithub.com/antfu/bumpp/issues/8) [(032bd)](https://togithub.com/antfu/bumpp/commit/032bd7a) #####    🐞 Bug Fixes - Resolve the right config file and args from cli  -  by [@​Bernankez](https://togithub.com/Bernankez) in [https://github.com/antfu/bumpp/issues/20](https://togithub.com/antfu/bumpp/issues/20) [(d9660)](https://togithub.com/antfu/bumpp/commit/d9660fe) #####     [View changes on GitHub](https://togithub.com/antfu/bumpp/compare/v9.3.1...v9.4.0) ### [`v9.3.1`](https://togithub.com/antfu/bumpp/releases/tag/v9.3.1) [Compare Source](https://togithub.com/antfu/bumpp/compare/v9.3.0...v9.3.1) #####    🚀 Features - Version update in `package-lock.json`  -  by [@​Sec-ant](https://togithub.com/Sec-ant) in [https://github.com/antfu/bumpp/issues/26](https://togithub.com/antfu/bumpp/issues/26) [(ba39e)](https://togithub.com/antfu/bumpp/commit/ba39e94) - Bump jsr.json & jsr.jsonc by default  -  by [@​sxzz](https://togithub.com/sxzz) in [https://github.com/antfu/bumpp/issues/27](https://togithub.com/antfu/bumpp/issues/27) [(ae647)](https://togithub.com/antfu/bumpp/commit/ae64720) #####     [View changes on GitHub](https://togithub.com/antfu/bumpp/compare/v9.3.0...v9.3.1)
evanw/esbuild (esbuild) ### [`v0.20.2`](https://togithub.com/evanw/esbuild/blob/HEAD/CHANGELOG.md#0202) [Compare Source](https://togithub.com/evanw/esbuild/compare/v0.20.1...v0.20.2) - Support TypeScript experimental decorators on `abstract` class fields ([#​3684](https://togithub.com/evanw/esbuild/issues/3684)) With this release, you can now use TypeScript experimental decorators on `abstract` class fields. This was silently compiled incorrectly in esbuild 0.19.7 and below, and was an error from esbuild 0.19.8 to esbuild 0.20.1. Code such as the following should now work correctly: ```ts // Original code const log = (x: any, y: string) => console.log(y) abstract class Foo { @​log abstract foo: string } new class extends Foo { foo = '' } // Old output (with --loader=ts --tsconfig-raw={\"compilerOptions\":{\"experimentalDecorators\":true}}) const log = (x, y) => console.log(y); class Foo { } new class extends Foo { foo = ""; }(); // New output (with --loader=ts --tsconfig-raw={\"compilerOptions\":{\"experimentalDecorators\":true}}) const log = (x, y) => console.log(y); class Foo { } __decorateClass([ log ], Foo.prototype, "foo", 2); new class extends Foo { foo = ""; }(); ``` - JSON loader now preserves `__proto__` properties ([#​3700](https://togithub.com/evanw/esbuild/issues/3700)) Copying JSON source code into a JavaScript file will change its meaning if a JSON object contains the `__proto__` key. A literal `__proto__` property in a JavaScript object literal sets the prototype of the object instead of adding a property named `__proto__`, while a literal `__proto__` property in a JSON object literal just adds a property named `__proto__`. With this release, esbuild will now work around this problem by converting JSON to JavaScript with a computed property key in this case: ```js // Original code import data from 'data:application/json,{"__proto__":{"fail":true}}' if (Object.getPrototypeOf(data)?.fail) throw 'fail' // Old output (with --bundle) (() => { // var json_proto_fail_true_default = { __proto__: { fail: true } }; // entry.js if (Object.getPrototypeOf(json_proto_fail_true_default)?.fail) throw "fail"; })(); // New output (with --bundle) (() => { // var json_proto_fail_true_default = { ["__proto__"]: { fail: true } }; // example.mjs if (Object.getPrototypeOf(json_proto_fail_true_default)?.fail) throw "fail"; })(); ``` - Improve dead code removal of `switch` statements ([#​3659](https://togithub.com/evanw/esbuild/issues/3659)) With this release, esbuild will now remove `switch` statements in branches when minifying if they are known to never be evaluated: ```js // Original code if (true) foo(); else switch (bar) { case 1: baz(); break } // Old output (with --minify) if(1)foo();else switch(bar){case 1:} // New output (with --minify) foo(); ``` - Empty enums should behave like an object literal ([#​3657](https://togithub.com/evanw/esbuild/issues/3657)) TypeScript allows you to create an empty enum and add properties to it at run time. While people usually use an empty object literal for this instead of a TypeScript enum, esbuild's enum transform didn't anticipat

Configuration

📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.



This PR has been generated by Mend Renovate. View repository job log here.

stackblitz[bot] commented 9 months ago

Review PR in StackBlitz Codeflow Run & review this pull request in StackBlitz Codeflow.

socket-security[bot] commented 7 months ago

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/@babel/types@7.24.0 environment +3 2.5 MB nicolo-ribaudo
npm/@chialab/esbuild-plugin-html@0.18.2 Transitive: environment, eval, filesystem, shell, unsafe +5 10.8 MB chialab-admin
npm/@jridgewell/gen-mapping@0.3.5 None +2 145 kB jridgewell
npm/@jridgewell/trace-mapping@0.3.25 None +2 268 kB jridgewell
npm/@swc/core@1.4.12 environment, filesystem, shell +2 395 kB kdy1
npm/@sxzz/eslint-config@3.9.0 environment Transitive: eval, filesystem, shell, unsafe +193 38.6 MB sxzz
npm/@sxzz/prettier-config@2.0.1 None 0 3.13 kB sxzz
npm/@vitest/ui@1.4.0 Transitive: environment, filesystem +19 2.6 MB vitestbot
npm/bumpp@9.4.0 environment, filesystem, unsafe Transitive: network, shell +74 7.06 MB antfu
npm/esbuild@0.20.2 environment, filesystem, network, shell 0 135 kB evanw
npm/eslint@8.57.0 environment, filesystem Transitive: eval, shell, unsafe +96 10.7 MB eslintbot
npm/rollup@4.14.1 environment, filesystem +1 2.29 MB lukastaegert
npm/sass@1.74.1 filesystem, unsafe Transitive: environment +15 6.24 MB sassbot
npm/source-map-js@1.2.0 None 0 140 kB 7rulnik
npm/typescript@5.4.4 None 0 32.4 MB typescript-bot
npm/unplugin@1.10.1 filesystem Transitive: environment +17 1.2 MB antfu
npm/vite@5.2.8 environment, eval, filesystem, network, shell, unsafe +3 3.79 MB vitebot
npm/vitest@1.4.0 environment, eval Transitive: filesystem, shell, unsafe +62 5.83 MB vitestbot
npm/vue@3.4.21 environment, eval Transitive: filesystem, unsafe +17 12.3 MB yyx990803
npm/webpack-dev-server@5.0.4 environment, eval, network Transitive: filesystem, shell, unsafe +199 10.5 MB evilebottnawi
npm/webpack@5.91.0 environment, filesystem, network, unsafe Transitive: eval, shell +139 25.8 MB evilebottnawi

🚮 Removed packages: npm/@babel/types@7.23.9, npm/@chialab/esbuild-plugin-html@0.18.0, npm/@jridgewell/trace-mapping@0.3.22, npm/@swc/core@1.4.2, npm/@sxzz/eslint-config@3.8.0, npm/@sxzz/prettier-config@2.0.0, npm/@vitest/ui@1.3.0, npm/bumpp@9.3.0, npm/esbuild@0.20.1, npm/eslint@8.56.0, npm/rollup@4.12.0, npm/sass@1.71.0, npm/source-map-js@1.0.2, npm/typescript@5.3.3, npm/unplugin@1.7.1, npm/vite@5.1.3, npm/vitest@1.3.0, npm/webpack-dev-server@5.0.2, npm/webpack@5.90.3

View full report↗︎

socket-security[bot] commented 7 months ago

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Alert Package NoteSource
Potential typo squat npm/eslint-plugin-import-x@0.5.0

View full report↗︎

Next steps

What is a typosquat?

Package name is similar to other popular packages and may not be the package you want.

Use care when consuming similarly named packages and ensure that you did not intend to consume a different package. Malicious packages often publish using similar names as existing popular packages.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/foo@1.0.0 or ignore all packages with @SocketSecurity ignore-all

  • @SocketSecurity ignore npm/eslint-plugin-import-x@0.5.0