-
Notifications
You must be signed in to change notification settings - Fork 147
fix(deps): update npm to v5 - - package.json (major) #900
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Draft
renovate
wants to merge
1
commit into
main
Choose a base branch
from
renovate/major-5-npm
base: main
Could not load branches
Branch not found: {{ refName }}
Loading
Could not load tags
Nothing to show
Loading
Are you sure you want to change the base?
Some commits from the old base branch may be removed from the timeline,
and old review comments may become outdated.
+5
−5
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
✅ Deploy Preview for endearing-brigadeiros-63f9d0 canceled.
|
Dependency ReviewThe following issues were found:
License Issuespackage.json
OpenSSF Scorecard
Scanned Files
|
4bbd99e to
d559dd7
Compare
5b3a470 to
adbf9ee
Compare
f62e355 to
06f7495
Compare
95a9e19 to
eb2a68f
Compare
d1b6062 to
b4ee9fe
Compare
7c1b00f to
56d24b9
Compare
|
Draft Touches vite and chai so likely to be replaced by #1202 |
b9b70d4 to
d373215
Compare
324811d to
61e7e4a
Compare
cf25fc5 to
d38bfc4
Compare
579437d to
9b443cf
Compare
9b443cf to
983d957
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^4.7.0->^5.1.0^4.5.0->^5.3.3^4.4.0->^5.1.2^4.21.2->^5.1.0^4.5.14->^5.4.21Release Notes
vitejs/vite-plugin-react (@vitejs/plugin-react)
v5.1.0Compare Source
Add
@vitejs/plugin-react/preamblevirtual module for SSR HMR (#890)SSR applications can now initialize HMR runtime by importing
@vitejs/plugin-react/preambleat the top of their client entry instead of manually callingtransformIndexHtml. This simplifies SSR setup for applications that don't use thetransformIndexHtmlAPI.Fix raw Rolldown support for Rolldown 1.0.0-beta.44+ (#930)
Rolldown 1.0.0-beta.44+ removed the top-level
jsxoption in favor oftransform.jsx. This plugin now uses thetransform.jsxoption to support Rolldown 1.0.0-beta.44+.v5.0.4Compare Source
Perf: use native refresh wrapper plugin in rolldown-vite (#881)
v5.0.3Compare Source
HMR did not work for components imported with queries with rolldown-vite (#872)
Perf: simplify refresh wrapper generation (#835)
v5.0.2Compare Source
Skip transform hook completely in rolldown-vite in dev if possible (#783)
v5.0.1Compare Source
Set
optimizeDeps.rollupOptions.transform.jsxinstead ofoptimizeDeps.rollupOptions.jsxfor rolldown-vite (#735)optimizeDeps.rollupOptions.jsxis going to be deprecated in favor ofoptimizeDeps.rollupOptions.transform.jsx.Perf: skip
babel-plugin-react-compilerif code has no"use memo"when{ compilationMode: "annotation" }(#734)Respect tsconfig
jsxImportSource(#726)Fix
reactRefreshHostoption on rolldown-vite (#716)Fix
RefreshRuntimebeing injected twice for class components on rolldown-vite (#708)Skip
babel-plugin-react-compileron non client environment (689)v5.0.0Compare Source
chaijs/chai (chai)
v5.3.3Compare Source
What's Changed
Full Changelog: chaijs/chai@v5.3.2...v5.3.3
v5.3.2Compare Source
Reverts the removal of the bundled version of chai in 5.3.1
What's Changed
Full Changelog: chaijs/chai@v5.3.1...v5.3.2
v5.3.1Compare Source
What's Changed
Full Changelog: chaijs/chai@v5.3.0...v5.3.1
v5.3.0Compare Source
What's Changed
mainto point at chai directly by @43081j in #1696Full Changelog: chaijs/chai@v5.2.2...v5.3.0
v5.2.2Compare Source
What's Changed
filesfor publishing by @43081j in #1695Full Changelog: chaijs/chai@v5.2.1...v5.2.2
v5.2.1Compare Source
What's Changed
Mostly internal changes but @SuperchupuDev realised the package.json
enginesfield was out of date, so it has been updated to reflect that v5.0.0 onwards only supports Node >=18.no-varrule and fix violations by @koddsson in #1675New Contributors
Full Changelog: chaijs/chai@v5.2.0...v5.2.1
v5.2.0Compare Source
What's Changed
chai-subsetand added assert-based negation to containSubset by @BreadInvasion in #1664New Contributors
Full Changelog: chaijs/chai@v5.1.2...v5.2.0
v5.1.2Compare Source
What's Changed
Full Changelog: chaijs/chai@v5.1.1...v5.1.2
v5.1.1Compare Source
What's Changed
toThrowby @43081j in #1609New Contributors
Full Changelog: chaijs/chai@v5.1.0...v5.1.1
v5.1.0Compare Source
What's Changed
iterableassertion by @koddsson in #1592New Contributors
Full Changelog: chaijs/chai@v5.0.3...v5.1.0
v5.0.3Compare Source
Fix bad v5.0.2 publish.
Full Changelog: chaijs/chai@v5.0.2...v5.0.3
v5.0.2Compare Source
What's Changed
bump-cliby @koddsson in #1559??for node compat (5.x) by @43081j in #1576loupeto latest version by @koddsson in #1579Full Changelog: chaijs/chai@v5.0.1...v5.0.2
v5.0.0Compare Source
BREAKING CHANGES
import {...} from 'chai'orimport('chai').require('chai')will cause failures in nodejs. If you're using ESM and seeing failures, it may be due to a bundler or transpiler which is incorrectly converting import statements into require calls.What's Changed
get-func-namedependency by @koddsson in #1416deep-eqlto latest version by @koddsson in #1542type-detectas a simple function by @koddsson in #1544assertion-errorto it's latest major version! by @koddsson in #1543New Contributors
Full Changelog: chaijs/chai@4.3.1...v5.0.0
chaijs/chai-http (chai-http)
v5.1.2Compare Source
What's Changed
New Contributors
Full Changelog: chaijs/chai-http@5.1.1...5.1.2
v5.1.1Compare Source
What's Changed
requestby @43081j in #341Full Changelog: chaijs/chai-http@5.1.0...5.1.1
v5.1.0Compare Source
What's Changed
New Contributors
Full Changelog: chaijs/chai-http@5.0.0...5.1.0
v5.0.0Compare Source
What's Changed
New Contributors
Full Changelog: chaijs/chai-http@4.4.0...5.0.0
expressjs/express (express)
v5.1.0Compare Source
========================
Uint8Arrayinres.send()res.sendFile()res.links()setprototypeofsafe-bufferutils-mergemethodsdepddebug@^4.4.0body-parser@^2.2.0router@^2.2.0content-type@^1.0.5finalhandler@^2.1.0qs@^6.14.0[email protected][email protected]v5.0.1Compare Source
==========
cookiesemver lock to address CVE-2024-47764v5.0.0Compare Source
=========================
path-is-absolutedependency - usepath.isAbsoluteinsteadres.status()accepts only integers, and input must be greater than 99 and less than 1000RangeError: Invalid status code: ${code}. Status code must be greater than 99 and less than 1000.for inputs outside this rangeTypeError: Invalid status code: ${code}. Status code must be an integer.for non integer inputsres.redirect('back')andres.location('back')is no longer a supported magic string, explicitly usereq.get('Referrer') || '/'.res.clearCookiewill ignore user providedmaxAgeandexpiresoptionsapplication/javascript=>text/javascriptvitejs/vite (vite)
v5.4.21Compare Source
Please refer to CHANGELOG.md for details.
v5.4.20Compare Source
Please refer to CHANGELOG.md for details.
v5.4.19Compare Source
Please refer to CHANGELOG.md for details.
v5.4.18Compare Source
Please refer to CHANGELOG.md for details.
v5.4.17Compare Source
Please refer to CHANGELOG.md for details.
v5.4.16Compare Source
Please refer to CHANGELOG.md for details.
v5.4.15Compare Source
Please refer to CHANGELOG.md for details.
v5.4.14Compare Source
Please refer to CHANGELOG.md for details.
v5.4.13Compare Source
Please refer to CHANGELOG.md for details.
v5.4.12Compare Source
This version contains a breaking change due to security fixes. See GHSA-vg6x-rcgg-rjx6 for more details.
Please refer to CHANGELOG.md for details.
v5.4.11Compare Source
Today, we're taking another big step in Vite's story. The Vite team, contributors, and ecosystem partners are excited to announce the release of the next Vite major:
We want to thank the more than 1K contributors to Vite Core and the maintainers and contributors of Vite plugins, integrations, tools, and translations that have helped us craft this new major. We invite you to get involved and help us improve Vite for the whole ecosystem. Learn more at our Contributing Guide.
⚠ BREAKING CHANGES
file://resolution (#18422)build.cssMinifyto'esbuild'for SSR (#15637)json.stringify: 'auto'and make that the default (#18303)fast-globtotinyglobby(#18243)Features
module-synccondition when loading config if enabled (#18650) (cf5028d)isSsrTargetWebWorkerflag toconfigEnvironmenthook (#18620) (3f5fab0)ssr.resolve.mainFieldsoption (#18646) (a6f5f5b)platformoption (#18611) (0924879)?inlineand?no-inlinequeries to control inlining (#15454) (9162172)vite-ignoreattribute to opt-out of processing (#18494) (d951310)file://resolution (#18422) (6a7e313)consoleincreateLogger(#18379) (0c497d9)sec-fetch-destheader to detect JS in transform (#9981) (e51dc40)json.stringify: 'auto'and make that the default (#18303) (b80daa7)environment::listen(#18263) (4d5f51d)this.environmentinoptionsandonLoghook (#18142) (7722c06)EnvironmentOptionstype (#18080) (35cf59c)Bug Fixes
createRunnableDevEnvironmentreturnsRunnableDevEnvironment, notDevEnvironment(#18673) (74221c3)getModulesByFileshould return aserverModule(#18715) (b80d5ec)SIGTERM(#18741) (cc55e36)InterceptorOptionstype (#18766) (6252c60)__vite_ssr_identity__with(0, ...)and inject;between statements (#18748) (94546be)rollup.externalscripts correctly (#18618) (55461b4)ssrTransformparse error (#18644) (d9be921)consumer: 'server'(#18575) (87b2347)server.perEnvironmentStartEndDuringDev(#18549) (fe30349)optimizeDeps.includefor SSR (#18506) (826c81a)new URL(,import.meta.url)match (#18194) (5286a90)Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR was generated by Mend Renovate. View the repository job log.