SpringBoot-vue
SpringBoot-vue copied to clipboard
Bump braces, watchpack and webpack-dev-server in /frontend
Bumps braces to 3.0.3 and updates ancestor dependencies braces, watchpack and webpack-dev-server. These dependencies need to be updated together.
Updates braces from 1.8.5 to 3.0.3
Changelog
Sourced from braces's changelog.
Release history
All notable changes to this project will be documented in this file.
The format is based on Keep a Changelog and this project adheres to Semantic Versioning.
- Changelogs are for humans, not machines.
- There should be an entry for every single version.
- The same types of changes should be grouped.
- Versions and sections should be linkable.
- The latest version comes first.
- The release date of each versions is displayed.
- Mention whether you follow Semantic Versioning.
Changelog entries are classified using the following labels (from keep-a-changelog):
Addedfor new features.Changedfor changes in existing functionality.Deprecatedfor soon-to-be removed features.Removedfor now removed features.Fixedfor any bug fixes.Securityin case of vulnerabilities.[3.0.0] - 2018-04-08
v3.0 is a complete refactor, resulting in a faster, smaller codebase, with fewer deps, and a more accurate parser and compiler.
Breaking Changes
- The undocumented
.makeRemethod was removedNon-breaking changes
- Caching was removed
[2.3.2] - 2018-04-08
- start refactoring
- cover sets
... (truncated)
Commits
74b2db23.0.388f1429update eslint. lint, fix unit tests.415d660Snyk js braces 6838727 (#40)190510ffix tests, skip 1 test in test/braces.expand716eb9freadme bumpa5851e5Merge pull request #37 from coderaiser/fix/vulnerability2092bd1feature: braces: add maxSymbols (https://github.com/micromatch/braces/issues/...9f5b4cffix: vulnerability (https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727)98414f9remove funding file665ab5dupdate keepEscaping doc (#27)- Additional commits viewable in compare view
Updates watchpack from 1.3.1 to 1.7.5
Release notes
Sourced from watchpack's releases.
v1.7.5
Bugfixes
- removed watchpack-chokidar2 notsup warning
v1.7.4
Bugfixes
- remove unneeded files from package
v1.7.3
Bugfixes
- force update to latest chokidar version for important bugfix (paulmillr/chokidar#1018)
v1.7.2
Features
- support chokidar 2 and 3 for node.js 6 - 14 support
v1.7.1
broken publish
v1.7.0
broken publish
v1.6.1
- force upgrade chokidar for security reasons
v1.5.0
- set polling interval for binary files too
- update chokidar to v2
- OSX: not existing directories can be watched
- adding files now also causes change events
v1.4.0
Bugfixes:
- Fixed watch for directories containing special glob characters
- Handle directory added event correctly
Commits
a31d9eb1.7.5269291eMerge pull request #180 from webpack/bugfix/engine-check2fb7652remove node engine check for chokidar 2f7ef8e01.7.49ce9da6remove subpackage from this package02762111.7.3333a112Merge pull request #166 from webpack/deps/upgrade-v1e86fd3cMerge pull request #168 from timneutkens/fix/use-latest-chokidar7ee98e2Use latest Chokidar version8edfd9aregenerate lockfile- Additional commits viewable in compare view
Updates webpack-dev-server from 2.5.0 to 2.11.5
Release notes
Sourced from webpack-dev-server's releases.
v2.11.1
Our third attempt to fix compatibility with old browsers (#1273), this time we'll get it right.
v2.11.0
Version 2.11.0 adds the transpilation of the client scripts via babel to ES5 which restores backwards compatibility (that was removed in 2.8.0) to very old or out of date browsers.
v2.10.0
Version 2.10.0 adds the transpilation of the client scripts via babel to ES5 which restores backwards compatibility (that was removed in 2.8.0) to very old or out of date browsers.
Important webpack-dev-server has entered a maintenance-only mode. We won't be accepting any new features or major modifications. We'll still welcome pull requests for fixes however, and will continue to address any bugs that arise. Announcement with specifics pending.
Bugfixes
- iOS Safari 10 bug where SockJS couldn't be found (#1238)
reportTimeoption (#1209)- don't mutate stats configuration (#1174)
- enable progress from config (#1181)
Updates
- transpile client bundles with babel (#1242)
- dependency updates (ce30460)
- Increase minimum
markedversion for ReDos vuln (#1255)- Update sockjs dependency to fix auditjs security vulnerability warning
v2.9.6
Bugfixes
- fixes #1208: watchOptions not passed to chokidar in wds
v2.9.5
Updates
- fixes #1198: bump express for security (6b2d7a0)
v2.9.4
Bugfixes
- assert ssl certs aren't published. fixes #1171
- fixes #860: failure to exit on SIGINT race condition (#1157)
v2.9.3
Bugfixes
- Fixes #1082, #1142. bin file correctly prefers local module, uses it, and bails if local module detected.
- Use dist/build
sockjs-clientinstead of module source (#1148)v2.9.2
Bugfixes
... (truncated)
Commits
- See full diff in compare view
Maintainer changes
This version was pushed to npm by evilebottnawi, a new releaser for webpack-dev-server since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the Security Alerts page.