sw-appcache-behavior
sw-appcache-behavior copied to clipboard
Bump rollup and microbundle in /packages/appcache-polyfill-sw
Bumps rollup to 2.79.2 and updates ancestor dependency microbundle. These dependencies need to be updated together.
Updates rollup from 1.32.1 to 2.79.2
Changelog
Sourced from rollup's changelog.
rollup changelog
4.22.4
2024-09-21
Bug Fixes
- Fix a vulnerability in generated code that affects IIFE, UMD and CJS bundles when run in a browser context (#5671)
Pull Requests
- #5670: refactor: Use object.prototype to check for reserved properties (
@YuHyeonWook)- #5671: Fix DOM Clobbering CVE (
@lukastaegert)4.22.3
2024-09-21
Bug Fixes
- Ensure that mutations in modules without side effects are observed while properly handling transitive dependencies (#5669)
Pull Requests
- #5669: Ensure impure dependencies of pure modules are added (
@lukastaegert)4.22.2
2024-09-20
Bug Fixes
- Revert fix for side effect free modules until other issues are investigated (#5667)
Pull Requests
- #5667: Partially revert #5658 and re-apply #5644 (
@lukastaegert)4.22.1
2024-09-20
Bug Fixes
- Revert #5644 "stable chunk hashes" while issues are being investigated
Pull Requests
- #5663: chore(deps): update dependency inquirer to v11 (
@renovate[bot],@lukastaegert)
... (truncated)
Commits
c9bd03d2.79.248aef33fix: resolve DOM Clobbering CVE-2024-43788 (backport to v2) (#5677)69ff4182.79.104dce1bUpdate changelog159137efix: typo docs and contributors link in CONTRIBUTING.md (#4639)e1392b3Update type definition of resolveId (#4641)7836357Improve performance of chunk naming collision check (#4643)71d20c9Reduce permissions for repl-artefacts.yml workflow (#4630)8193ea5Adapt workflow to use Node 14 sub-version to work with branch protection8477f8f2.79.0- Additional commits viewable in compare view
Updates microbundle from 0.12.3 to 0.15.1
Release notes
Sourced from microbundle's releases.
v0.15.1
Patch Changes
cebafa1#961 Thanks@zyrong! - Fix for when multiple entries reference different CSS, only the CSS referenced by the first entry will be packaged
9a4e2b2#954 Thanks@rschristian! - Bumps Node target to v12
4ad4b76#967 Thanks@agilgur5! - deps: upgrade rpt2 to latest v0.32.0 to fix monorepos
6018e58#956 Thanks@rschristian! - Silences warnings when using Node builtins with the 'node:...' protocol on imports. Warnings related to bare usage of these builtins were already silenced.
88241dd#968 Thanks@PeterBurner! - deps: upgrade babel-plugin-transform-async-to-promises to latest v0.8.18 to fix #565
e72377a#964 Thanks@rschristian! - Fixes filename generation for es & modern outputs. Both 'jsnext:main' and 'esmodule' were incorrectly ignored.v0.15.0
Minor Changes
6f6e080#950 Thanks@rschristian! - Microbundle will now output ESM using.mjsas the file extension when the package type is CJS
242754f#949 Thanks@rschristian! - Add --visualize flag to generate build output statsPatch Changes
c4532cc#940 Thanks@rschristian! - Adds information about--compressflag's default value w/ different targets
b51b855#935 Thanks@mycoin! - Don't attempt to write build stats in watch mode when there has been a build error/sizeInfo isundefined
1d0e305#941 Thanks@rschristian! - Ensures TS plugin will begin its search for a 'tsconfig.json' in the set cwd
f04c85a#926 Thanks@developit! - Fix mangle.json being overwritten with[object Object]
ecb0b02#947 Thanks@rschristian! - Ensures hoisted node_modules are excluded from babel
392d63e#919 Thanks@rschristian! - Fixes CSS output from being overwritten when also generating .cjs
fb0a437#930 Thanks@rschristian! - Documenting --jsxFragment flag
... (truncated)
Changelog
Sourced from microbundle's changelog.
0.15.1
Patch Changes
cebafa1#961 Thanks@zyrong! - Fix for when multiple entries reference different CSS, only the CSS referenced by the first entry will be packaged
9a4e2b2#954 Thanks@rschristian! - Bumps Node target to v12
4ad4b76#967 Thanks@agilgur5! - deps: upgrade rpt2 to latest v0.32.0 to fix monorepos
6018e58#956 Thanks@rschristian! - Silences warnings when using Node builtins with the 'node:...' protocol on imports. Warnings related to bare usage of these builtins were already silenced.
88241dd#968 Thanks@PeterBurner! - deps: upgrade babel-plugin-transform-async-to-promises to latest v0.8.18 to fix #565
e72377a#964 Thanks@rschristian! - Fixes filename generation for es & modern outputs. Both 'jsnext:main' and 'esmodule' were incorrectly ignored.0.15.0
Minor Changes
6f6e080#950 Thanks@rschristian! - Microbundle will now output ESM using.mjsas the file extension when the package type is CJS
242754f#949 Thanks@rschristian! - Add --visualize flag to generate build output statsPatch Changes
c4532cc#940 Thanks@rschristian! - Adds information about--compressflag's default value w/ different targets
b51b855#935 Thanks@mycoin! - Don't attempt to write build stats in watch mode when there has been a build error/sizeInfo isundefined
1d0e305#941 Thanks@rschristian! - Ensures TS plugin will begin its search for a 'tsconfig.json' in the set cwd
f04c85a#926 Thanks@developit! - Fix mangle.json being overwritten with[object Object]
ecb0b02#947 Thanks@rschristian! - Ensures hoisted node_modules are excluded from babel
392d63e#919 Thanks@rschristian! - Fixes CSS output from being overwritten when also generating .cjs
fb0a437#930 Thanks@rschristian! - Documenting --jsxFragment flag
8223eba#948 Thanks@rschristian! - Corrects formatting in build completion message w/ dynamic import is used0.14.2
Patch Changes
dd0bdde#904 Thanks@rschristian! - Added missing CLI doc for 'jsxImportSource' and correcting the Examples section of the '--help' output0.14.1
... (truncated)
Commits
c76c41fVersion Packages (#958)e72377afix: mains by format fallbacks (#964)fd4ea1aCleanup repository (#976)88241ddfix: Incorrect transform with async/await (#565) (#968)cebafa1fix: css compilation problems when multiple entries (#961)4ad4b76deps: upgrade rpt2 to latest v0.32.0 to fix monorepos (#967)555088dRemove mention of UMD support for web workers (#962)9a4e2b2chore: Bump Node target version to v12 (#954)6018e58chore: Silence warnings when using 'node:' protocol (#956)d16a322Fix typo in readme (#957)- Additional commits viewable in compare view
Maintainer changes
This version was pushed to npm by smoljsteam, a new releaser for microbundle since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the Security Alerts page.