deepme-crawler
deepme-crawler copied to clipboard
Bump tough-cookie and jsdom
Bumps tough-cookie to 4.1.3 and updates ancestor dependency jsdom. These dependencies need to be updated together.
Updates tough-cookie
from 2.3.3 to 4.1.3
Release notes
Sourced from tough-cookie's releases.
4.1.3
Security fix for Prototype Pollution discovery in #282. This is a minor release, although output from the
inspect
utility is affected by this change, we felt this change was important enough to be pushed into the next patch.4.1.2 -- Patch and Bugfix Release
What's Changed
- fix: allow set cookies with localhost by
@colincasey
in salesforce/tough-cookie#253Full Changelog: https://github.com/salesforce/tough-cookie/compare/v4.1.1...v4.1.2
4.1.1
Patch Release
What's Changed
- fix: allow special use domains by default by
@colincasey
in salesforce/tough-cookie#249- 4.1.1 Patch -- allow special use domains by default by
@awaterma
in salesforce/tough-cookie#250Full Changelog: https://github.com/salesforce/tough-cookie/compare/v4.1.0...v4.1.1
4.1.0
v4.1.0
Minor release, focused mainly on resolving reported issues and some minor feature work.
What's Changed
- Create CHANGELOG.md by
@ShivanKaul
in salesforce/tough-cookie#189- Missing param validation issue145 by
@medelibero-sfdc
in salesforce/tough-cookie#193- Create SECURITY.md by
@ShivanKaul
in salesforce/tough-cookie#201- Create CODE_OF_CONDUCT.md by
@ShivanKaul
in salesforce/tough-cookie#200- Fix for issue #195 by
@medelibero-sfdc
in salesforce/tough-cookie#202- Add explanation and more special-use domains by
@ShivanKaul
in salesforce/tough-cookie#203- Sync of constructor options for serialization by
@medelibero-sfdc
in salesforce/tough-cookie#204- Returned null in case of empty cookie value by
@vsin12
in salesforce/tough-cookie#196- 132 str trim not a function by
@awaterma
in salesforce/tough-cookie#209- Fix for issue #153 by
@medelibero-sfdc
in salesforce/tough-cookie#210- Fix permuteDomain with trailing dot by
@ruoho-sfdc
in salesforce/tough-cookie#216- Issue #213 -- added gh-actions flow for building and testing tough-co… by
@awaterma
in salesforce/tough-cookie#218- Issue #210 -- Updated workflow to use npm install. by
@awaterma
in salesforce/tough-cookie#220- @GH-215 -- Tests that document localhost behavior when set as domain. by
@awaterma
in salesforce/tough-cookie#221- fix: MemoryCookieStore methods should exist on the prototype, not on the class. by
@wjhsf
in salesforce/tough-cookie#226- Unit test cases for
allowSpecialUseDomain
option by@colincasey
in salesforce/tough-cookie#225- [Snyk] Upgrade universalify from 0.1.2 to 0.2.0 by
@snyk-bot
in salesforce/tough-cookie#228- React Native Support by
@colincasey
in salesforce/tough-cookie#227- Adding Updating CODEOWNERS with ECCN as per Export Control Compliance by
@svc-scm
in salesforce/tough-cookie#223- fix: domain match routine by
@colincasey
in salesforce/tough-cookie#236- Stop using the internal NodeJS punycode module by
@gboer
in salesforce/tough-cookie#238- Initial documentation review by
@mcarey86
in salesforce/tough-cookie#234- fix: distinguish between no samesite and samesite=none by
@colincasey
in salesforce/tough-cookie#240- Prepare tough-cookie 4.1 for publishing (updated GitHub actions, move… by
@awaterma
in salesforce/tough-cookie#242- 4.1.0 release to NPM by
@awaterma
in salesforce/tough-cookie#245
... (truncated)
Commits
4ff4d29
4.1.3 release preparation, update the package and lib/version to 4.1.3. (#284)12d4747
Prevent prototype pollution in cookie memstore (#283)f06b72d
Fix documentation for store.findCookies, missing allowSpecialUseDomain proper...b1a8898
fix: allow set cookies with localhost (#253)ec70796
4.1.1 Patch -- allow special use domains by default (#250)d4ac580
fix: allow special use domains by default (#249)79c2f7d
4.1.0 release to NPM (#245)4fafc17
Prepare tough-cookie 4.1 for publishing (updated GitHub actions, move Dockerf...aa4396d
fix: distinguish between no samesite and samesite=none (#240)b8d7511
Modernize README (#234)- Additional commits viewable in compare view
Maintainer changes
This version was pushed to npm by awaterma, a new releaser for tough-cookie since your current version.
Updates jsdom
from 11.3.0 to 22.1.0
Release notes
Sourced from jsdom's releases.
Version 22.1.0
- Added
crypto.randomUUID()
. (jamesbvaughan)- Added
DOMRect
andDOMRectReadOnly
.- Added
AbortSignal.timeout()
.- Added
abortSignal.throwIfAborted()
.- Added support for the
submitter
argument to theFormData
constructor. (jenseng)- Improved
getComputedStyle()
's results for color-based properties, to resolve named colors and attempt to provide initial inheritance support. (hoekz-wwt)- Updated
Window
's event handler properties (e.g.oncopy
,ontouchstart
, etc.) to reflect the latest list from the standard.- Fixed
DOMParser
-created documents to inherit their URL from the creating document.Version 22.0.0
- Node.js v16 is now the minimum supported version.
- Removed support for running jsdom in the browser via a browserified bundle. This carried with it too much complexity, especially for our testing infrastructure, and a testing package we relied on was recently deprecated.
Version 21.1.2
- Fixed
setRangeText()
used on<input>
and<textarea>
elements to calculate the new end index correctly. (pmstss)- Fixed
pageX
,pageY
,offsetX
, andoffsetY
onMouseEvent
s during dispatch. (jenseng)- Upgraded
nwsapi
to v2.2.4, bringing along various fixes to our selector engine.Version 21.1.1
- Fixed
jsdom.reconfigure()
to also adjust the URL as seen by the history API, so that e.g.history.replaceState(null, "")
would not mess up the URL. (jdufresne)- Fixed
location.hash = ""
to leave any#
in location.href.- Fixes a few bugs with CSS parsing by replacing
cssom
withrweb-cssom
, since the latter is maintained. (seanparmelee)Version 21.1.0
- Added
x
,y
,pageX
,pageY
,offsetX
, andoffsetY
toMouseEvent
. (jenseng, ViniciusFXavier)- Added support for
unset
withgetComputedStyle()
. (jsnajdr)- Added the
submitter
property toSubmitEvent
. (jenseng)- Fixed
MouseEvent
'sscreenX
andscreenY
to no longer coerce to integers, allowing fractional values. (jenseng)- Fixed
formEl.submit()
to not longer firesubmit
events. (jenseng)- Fixed stylesheets to no longer affect the document after their corresponding
<link>
is removed. (jsnajdr)- Fixed
pointer-events
to inherit when used withgetComputedStyle()
. (jsnajdr)- Fixed
<script>
elements with nosrc=""
to no longer fireload
events. (t1ger2080)- Improved
getComputedStyle()
to cache its results, which should make it much faster. (jsnajdr)Version 21.0.0
A potentially-breaking bug fix:
- Fixed the
window
,document
,location
, andtop
properties ofWindow
to be non-configurable. (ExE-Boss)Other changes:
- Added support for
<input type=image>
submitting forms. (jenseng)- Added the
location
setter to theWindow
object, which forwards to thelocation.href
setter. Setting the URL is still only implemented for fragment navigations, however. (ExE-Boss)- Fixed
defer=""
<script>
elements that are added afterDOMContentLoaded
to execute, instead of being skipped.- Fixed
selectElement.selectedOptions
being incorrect whenoptionElement.selected
is set. This was a regression introduced in v20.0.1. Unfortunately this also reverts the performance improvement when appending<option>
elements that was introduced then. (eps1lon)- Fixed the
self
,locationbar
,menubar
,personalbar
,scrollbars
,statusbar
,toolbar
,frames
,parent
,external
,length
, andscreen
properties ofWindow
to be replaceable: that is, setting them will override their values, instead of having the new value be ignored. (ExE-Boss)- Fixed a few issues with
JSDOM.fromURL()
in the browser build of jsdom. (LungZeno)Version 20.0.3
... (truncated)
Changelog
Sourced from jsdom's changelog.
22.1.0
- Added
crypto.randomUUID()
. (jamesbvaughan)- Added
DOMRect
andDOMRectReadOnly
.- Added
AbortSignal.timeout()
.- Added
abortSignal.throwIfAborted()
.- Added support for the
submitter
argument to theFormData
constructor. (jenseng)- Improved
getComputedStyle()
's results for color-based properties, to resolve named colors and attempt to provide initial inheritance support. (hoekz-wwt)- Updated
Window
's event handler properties (e.g.oncopy
,ontouchstart
, etc.) to reflect the latest list from the standard.- Fixed
DOMParser
-created documents to inherit their URL from the creating document.22.0.0
- Node.js v16 is now the minimum supported version.
- Removed support for running jsdom in the browser via a browserified bundle. This carried with it too much complexity, especially for our testing infrastructure, and a testing package we relied on was recently deprecated.
21.1.2
- Fixed
setRangeText()
used on<input>
and<textarea>
elements to calculate the new end index correctly. (pmstss)- Fixed
pageX
,pageY
,offsetX
, andoffsetY
onMouseEvent
s during dispatch. (jenseng)- Upgraded
nwsapi
to v2.2.4, bringing along various fixes to our selector engine.21.1.1
- Fixed
jsdom.reconfigure()
to also adjust the URL as seen by the history API, so that e.g.history.replaceState(null, "")
would not mess up the URL. (jdufresne)- Fixed
location.hash = ""
to leave any#
in location.href.- Fixes a few bugs with CSS parsing by replacing
cssom
withrweb-cssom
, since the latter is maintained. (seanparmelee)21.1.0
- Added
x
,y
,pageX
,pageY
,offsetX
, andoffsetY
toMouseEvent
. (jenseng, ViniciusFXavier)- Added support for
unset
withgetComputedStyle()
. (jsnajdr)- Added the
submitter
property toSubmitEvent
. (jenseng)- Fixed
MouseEvent
'sscreenX
andscreenY
to no longer coerce to integers, allowing fractional values. (jenseng)- Fixed
formEl.submit()
to not longer firesubmit
events. (jenseng)- Fixed stylesheets to no longer affect the document after their corresponding
<link>
is removed. (jsnajdr)- Fixed
pointer-events
to inherit when used withgetComputedStyle()
. (jnajdr)- Fixed
<script>
elements with nosrc=""
to no longer fireload
events. (t1ger2080)- Improved
getComputedStyle()
to cache its results, which should make it much faster. (jsnajdr)21.0.0
A potentially-breaking bug fix:
- Fixed the
window
,document
,location
, andtop
properties ofWindow
to be non-configurable. (ExE-Boss)Other changes:
- Added support for
<input type=image>
submitting forms. (jenseng)- Added the
location
setter to theWindow
object, which forwards to thelocation.href
setter. Setting the URL is still only implemented for fragment navigations, however. (ExE-Boss)
... (truncated)
Commits
2ed1d4b
Version 22.1.05857f25
Update GlobalEventHandlers lista8b03af
Implement getComputedStyle() for named colors (#3560)f369ca1
Disable flaky XHR upload progress teste134f68
Include Node.js v20 in CIcda0802
Implement some AbortSignal methodsd2103e4
Implement FormData constructor's submitter argumentc9d6b72
Implement DOMRect and DOMRectReadOnly8d7155a
Implement crypto.randomUUID()35259cc
Fix DOMParser URL inheritance- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase
.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
-
@dependabot rebase
will rebase this PR -
@dependabot recreate
will recreate this PR, overwriting any edits that have been made to it -
@dependabot merge
will merge this PR after your CI passes on it -
@dependabot squash and merge
will squash and merge this PR after your CI passes on it -
@dependabot cancel merge
will cancel a previously requested merge and block automerging -
@dependabot reopen
will reopen this PR if it is closed -
@dependabot close
will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually -
@dependabot ignore this major version
will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) -
@dependabot ignore this minor version
will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) -
@dependabot ignore this dependency
will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the Security Alerts page.