web-tooling-benchmark icon indicating copy to clipboard operation
web-tooling-benchmark copied to clipboard

Published 20 hours ago • verified publisher icon v8

Bump json5, @babel/core, prepack, loader-utils, html-webpack-plugin, jest and webpack

Open dependabot[bot] opened this issue 2 years ago • 0 comments

Bumps json5 to 1.0.2 and updates ancestor dependencies json5, @babel/core, prepack, loader-utils, html-webpack-plugin, jest and webpack. These dependencies need to be updated together.

Updates json5 from 0.5.1 to 1.0.2

Release notes

Sourced from json5's releases.

v1.0.2

  • Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295). This has been backported to v1. (#298)

v1.0.1

This release includes a bug fix and minor change.

  • Fix: parse throws on unclosed objects and arrays.

  • New: package.json5 has been removed until an easier way to keep it in sync with package.json is found.

v1.0.0

This release includes major internal changes and public API enhancements.

  • Major JSON5 officially supports Node.js v4 and later. Support for Node.js v0.10 and v0.12 have been dropped.

  • New: Unicode property names and Unicode escapes in property names are supported. (#1)

  • New: stringify outputs trailing commas in objects and arrays when a space option is provided. (#66)

  • New: JSON5 allows line and paragraph separator characters (U+2028 and U+2029) in strings in order to be compatible with JSON. However, ES5 does not allow these characters in strings, so JSON5 gives a warning when they are parsed and escapes them when they are stringified. (#70)

  • New: stringify accepts an options object as its second argument. The supported options are replacer, space, and a new quote option that specifies the quote character used in strings. (#71)

  • New: The CLI supports STDIN and STDOUT and adds --out-file, --space, and --validate options. See json5 --help for more information. (#72, #84, and #108)

  • New: In addition to the white space characters space \t, \v, \f, \n, \r, and \xA0, the additional white space characters \u2028, \u2029, and all other characters in the Space Separator Unicode category are allowed.

  • New: In addition to the character escapes \', \", \\, \b, \f, \n, \r, and \t, the additional character escapes \v and \0, hexadecimal escapes like \x0F, and unnecessary escapes like \a are allowed in string values and string property names.

  • New: stringify outputs strings with single quotes by default but intelligently uses double quotes if there are more single quotes than double quotes inside the string. (i.e. stringify('Stay here.') outputs 'Stay here.' while stringify('Let\'s go.') outputs "Let's go.")

... (truncated)

Changelog

Sourced from json5's changelog.

Unreleased [code, diff]

v2.2.3 [code, diff]

v2.2.2 [code, diff]

  • Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

v2.2.1 [code, diff]

  • Fix: Removed dependence on minimist to patch CVE-2021-44906. (#266)

v2.2.0 [code, diff]

  • New: Accurate and documented TypeScript declarations are now included. There is no need to install @types/json5. (#236, #244)

v2.1.3 [code, diff]

  • Fix: An out of memory bug when parsing numbers has been fixed. (#228, #229)

v2.1.2 [code, diff]

... (truncated)

Commits

Updates @babel/core from 7.0.0-beta.49 to 7.22.10

Release notes

Sourced from @​babel/core's releases.

v7.22.10 (2023-08-07)

Thanks @​DimitriPapadopoulos, @​FabianWarnecke, @​JoshuaKGoldberg, and @​YYvanYang for your first pull requests!

:bug: Bug Fix

  • babel-plugin-transform-typescript
  • babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-proposal-destructuring-private, babel-plugin-transform-class-properties, babel-plugin-transform-class-static-block, babel-plugin-transform-new-target, babel-plugin-transform-private-methods, babel-preset-env
    • #15701 Memoize class binding when compiling private methods and static elements (@​JLHwung)

:nail_care: Polish

:house: Internal

  • Other
  • babel-cli, babel-core, babel-generator, babel-helper-builder-react-jsx, babel-preset-env, babel-standalone
  • babel-helper-compilation-targets
  • babel-parser
  • babel-plugin-transform-runtime, babel-traverse, babel-types

:microscope: Output optimization

  • babel-plugin-transform-block-scoping, babel-plugin-transform-parameters, babel-plugin-transform-regenerator

Committers: 9

7.22.9

v7.22.9 (2023-07-12)

... (truncated)

Changelog

Sourced from @​babel/core's changelog.

v7.22.10 (2023-08-07)

:bug: Bug Fix

  • babel-plugin-transform-typescript
  • babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-proposal-destructuring-private, babel-plugin-transform-class-properties, babel-plugin-transform-class-static-block, babel-plugin-transform-new-target, babel-plugin-transform-private-methods, babel-preset-env
    • #15701 Memoize class binding when compiling private methods and static elements (@​JLHwung)

:nail_care: Polish

:house: Internal

  • Other
  • babel-cli, babel-core, babel-generator, babel-helper-builder-react-jsx, babel-preset-env, babel-standalone
  • babel-helper-compilation-targets
  • babel-parser
  • babel-plugin-transform-runtime, babel-traverse, babel-types

:microscope: Output optimization

  • babel-plugin-transform-block-scoping, babel-plugin-transform-parameters, babel-plugin-transform-regenerator

v7.22.9 (2023-07-12)

:bug: Bug Fix

:nail_care: Polish

:house: Internal

v7.22.8 (2023-07-06)

:leftwards_arrow_with_hook: Revert

  • babel-core, babel-traverse

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by nicolo-ribaudo, a new releaser for @​babel/core since your current version.


Updates prepack from 0.2.25 to 0.2.54

Release notes

Sourced from prepack's releases.

v0.2.54

  • Fix referentialization of optimized functions
  • Fix serialization issues for nested optimized functions
  • Model aliasing effects for array loop operators
  • Fix dependency issues with cyclic prototype dependencies
  • Fix problem where a bind call can use a variable before its definition
  • Speed up visitor by skipping redundant generator scopes

v0.2.52

  • Bugfixes
  • User-level stack overflows no longer crash prepack
  • Website shows warnings when Prepack produces diagnostics

v0.2.51

  • Fixed bugs that could cause generated code to throw
  • Improved evaluation of abstract conditionals
  • Added CLI options --warnaserror, --diagnosticaserror, --nodiagnostic
  • Added full support for React.Children.map mock

v0.2.50

Highlights: Make simplification more robust when complexity limits are reached reduces loop iteration counter to 6 before bailing out We weren’t using the correct initializerAstNodeName in two places Tease apart expressions vs. statements for operation descriptors Simplify equality expressions where types are known Refactor AbstractObjectValue to use evaluateWithAbstractConditional Allow invalid render return values in the React reconciler update Babel 7 to stable release Speed up simplifier by using an implication cache per path branch Add basic support for throws in React

v0.2.49

Fixes #2419 #2386 #2439 #2447 #2432 #2437 #2442

  • Fix havoced binding not in optimized function
  • Allow arrays with widened numeric properties to update index properties
  • Fix nested for statement bailout with nested for-in
  • Don’t record modified bindings for immutable bindings when havocing

v0.2.48

Fixes #2151 #2222 #2279 #2393 #2399 #2404 #2411 #2414 #2415 Added a fuzz testing tool Added test cases Turn crash in JSON.stringify into a diagnostic Adds a arrayNestedOptimizedFunctionsEnabled flag to enable nested optimized functions derived from Array.prototype methods (like map) and Array.from Refactor assignment on partial or possibly deleted property Rewrote the joining logic to always do a full join at every join point Removed last remnants of delayUnsupportedRequires

... (truncated)

Commits
  • 8c92608 Weekly release v0.2.54
  • 1f5664f Adds RCTActivityIndicatorView literal reference (#2588)
  • 473470a Filter ModifiedBindings by environment's creating optimized function (#2551)
  • 7f0c13a Fixes a bug in evaluatePure (#2585)
  • ffd230e Model aliasing effects for array loop operators (#2570)
  • 4f250d1 Remove side-effects from react-mocks (#2584)
  • 5fc6fee Unify logic for checking for intrinsic objects that have been derived (#2581)
  • ed784d6 Add abstract support to Object.getOwnPropertySymbols (#2575)
  • 0ef3c43 Change initializeMoreModules to modulesToInitialize allowing you to s… (#2576)
  • 47cb48b Adds support for abstract length arrays in React reconcilation and serializat...
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by gaearon, a new releaser for prepack since your current version.


Updates loader-utils from 1.1.0 to 1.4.2

Release notes

Sourced from loader-utils's releases.

v1.4.2

1.4.2 (2022-11-11)

Bug Fixes

v1.4.1

1.4.1 (2022-11-07)

Bug Fixes

v1.4.0

1.4.0 (2020-02-19)

Features

  • the resourceQuery is passed to the interpolateName method (#163) (cd0e428)

v1.3.0

1.3.0 (2020-02-19)

Features

  • support the [query] template for the interpolatedName method (#162) (469eeba)

v1.2.3

1.2.3 (2018-12-27)

Bug Fixes

  • interpolateName: don't interpolated hashType without hash or contenthash (#140) (3528fd9)

v1.2.2

1.2.2 (2018-12-27)

Bug Fixes

... (truncated)

Changelog

Sourced from loader-utils's changelog.

1.4.2 (2022-11-11)

Bug Fixes

1.4.1 (2022-11-07)

Bug Fixes

1.4.0 (2020-02-19)

Features

  • the resourceQuery is passed to the interpolateName method (#163) (cd0e428)

1.3.0 (2020-02-19)

Features

  • support the [query] template for the interpolatedName method (#162) (469eeba)

1.2.3 (2018-12-27)

Bug Fixes

  • interpolateName: don't interpolated hashType without hash or contenthash (#140) (3528fd9)

1.2.2 (2018-12-27)

Bug Fixes

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by evilebottnawi, a new releaser for loader-utils since your current version.


Updates html-webpack-plugin from 2.30.1 to 5.5.3

Changelog

Sourced from html-webpack-plugin's changelog.

5.5.3 (2023-06-10)

Bug Fixes

5.5.2 (2023-06-08)

Bug Fixes

5.5.1 (2023-04-15)

Bug Fixes

  • perf: defer loading of pretty-error to improve startup time (#1789) (988709d)

5.5.0 (2021-10-25)

Features

  • Support type=module via scriptLoading option (1e42625), closes #1663

5.4.0 (2021-10-15)

Features

5.3.2 (2021-06-22)

Bug Fixes

  • update lodash and pretty error (9c7fba0

5.3.1 (2021-03-09)

Bug Fixes

  • remove loader-utils from plugin core (82d0ee8)

5.3.0 (2021-03-07)

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by evilebottnawi, a new releaser for html-webpack-plugin since your current version.


Updates jest from 21.2.1 to 29.6.2

Release notes

Sourced from jest's releases.

v29.6.2

Fixes

  • [jest-circus] Fix snapshot matchers in concurrent tests when nr of tests exceeds maxConcurrency (#14335)
  • [@jest/core] When running global setup and teardown, do not try to change the message property of the thrown error object when the message property is unwritable (#14113)
  • [jest-snapshot] Move @types/prettier from dependencies to devDependencies (#14328)
  • [jest-snapshot] Throw an explicit error if Prettier v3 is used (#14367)
  • [jest-reporters] Add "skipped" and "todo" symbols to Github Actions Reporter (#14309)

Chore & Maintenance

  • [@jest/core] Use pluralize from jest-util rather than own internal (#14322)

New Contributors

Full Changelog: https://github.com/jestjs/jest/compare/v29.6.1...v29.6.2

v29.6.1

Fixes

  • [jest-circus] Revert #14110 as it was a breaking change (#14304)

Full Changelog: https://github.com/jestjs/jest/compare/v29.6.0...v29.6.1

v29.6.0

Features

  • [jest-circus, jest-snapshot] Add support for snapshot matchers in concurrent tests (#14139)
  • [jest-cli] Include type definitions to generated config files (#14078)
  • [jest-snapshot] Support arrays as property matchers (#14025)
  • [jest-core, jest-circus, jest-reporter, jest-runner] Added support for reporting about start individual test cases using jest-circus (#14174)

Fixes

  • [jest-circus] Prevent false test failures caused by promise rejections handled asynchronously (#14110)
  • [jest-config] Handle frozen config object (#14054)
  • [jest-config] Allow coverageDirectory and collectCoverageFrom in project config (#14180)
  • [jest-core] Always use workers in watch mode to avoid crashes (#14059).
  • [jest-environment-jsdom, jest-environment-node] Fix assignment of customExportConditions via testEnvironmentOptions when custom env subclass defines a default value (#13989)
  • [jest-matcher-utils] Fix copying value of inherited getters (#14007)
  • [jest-mock] Tweak typings to allow jest.replaceProperty() replace methods (#14008)
  • [jest-mock] Improve user input validation and error messages of spyOn and replaceProperty methods (#14087)
  • [jest-runtime] Bind jest.isolateModulesAsync to this (#14083)
  • [jest-runtime] Forward wrapperLength to the Script constructor as columnOffset for accurate debugging (#14148)
  • [jest-runtime] Guard _isMockFunction access with in (#14188)
  • [jest-snapshot] Fix a potential bug when not using prettier and improve performance (#14036)

... (truncated)

Changelog

Sourced from jest's changelog.

29.6.2

Fixes

  • [jest-circus] Fix snapshot matchers in concurrent tests when nr of tests exceeds maxConcurrency (#14335)
  • [@jest/core] When running global setup and teardown, do not try to change the message property of the thrown error object when the message property is unwritable (#14113)
  • [jest-snapshot] Move @types/prettier from dependencies to devDependencies (#14328)
  • [jest-snapshot] Throw an explicit error if Prettier v3 is used (#14367)
  • [jest-reporters] Add "skipped" and "todo" symbols to Github Actions Reporter (#14309)

Chore & Maintenance

  • [@jest/core] Use pluralize from jest-util rather than own internal (#14322)

29.6.1

Fixes

  • [jest-circus] Revert #14110 as it was a breaking change (#14304)

29.6.0

Features

  • [jest-circus, jest-snapshot] Add support for snapshot matchers in concurrent tests (#14139)
  • [jest-cli] Include type definitions to generated config files (#14078)
  • [jest-snapshot] Support arrays as property matchers (#14025)
  • [jest-core, jest-circus, jest-reporter, jest-runner] Added support for reporting about start individual test cases using jest-circus (#14174)

Fixes

  • [jest-circus] Prevent false test failures caused by promise rejections handled asynchronously (#14110)
  • [jest-config] Handle frozen config object (#14054)
  • [jest-config] Allow coverageDirectory and collectCoverageFrom in project config (#14180)
  • [jest-core] Always use workers in watch mode to avoid crashes (#14059).
  • [jest-environment-jsdom, jest-environment-node] Fix assignment of customExportConditions via testEnvironmentOptions when custom env subclass defines a default value (#13989)
  • [jest-matcher-utils] Fix copying value of inherited getters (#14007)
  • [jest-mock] Tweak typings to allow jest.replaceProperty() replace methods (#14008)
  • [jest-mock] Improve user input validation and error messages of spyOn and replaceProperty methods (#14087)
  • [jest-runtime] Bind jest.isolateModulesAsync to this (#14083)
  • [jest-runtime] Forward wrapperLength to the Script constructor as columnOffset for accurate debugging (#14148)
  • [jest-runtime] Guard _isMockFunction access with in (#14188)
  • [jest-snapshot] Fix a potential bug when not using prettier and improve performance (#14036)
  • [@jest/transform] Do not instrument .json modules (#14048)
  • [jest-worker] Restart a shut down worker before sending it a task (#14015)

Chore & Maintenance

  • [*] Update semver dependency to get vulnerability fix (#14262)
  • [docs] Updated documentation for the --runTestsByPath CLI command (#14004)

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by simenb, a new releaser for jest since your current version.


Updates webpack from 3.11.0 to 5.88.2

Release notes

Sourced from webpack's releases.

v5.88.2

Bug Fixes

Full Changelog: https://github.com/webpack/webpack/compare/v5.88.1...v5.88.2

v5.88.1

Developer Experience

Full Changelog: https://github.com/webpack/webpack/compare/v5.88.0...v5.88.1

v5.88.0

New Features

Bug Fixes

Developer Experience

Dependencies & Maintenance

New Contributors

Full Changelog: https://github.com/webpack/webpack/compare/v5.87.0...v5.88.0

v5.87.0

New Features

Bug Fixes

Developer Experience

... (truncated)

Commits
Maintainer changes

This version was pushed to np...

Description has been truncated

dependabot[bot] avatar Aug 09 '23 21:08 dependabot[bot]