amphtml icon indicating copy to clipboard operation
amphtml copied to clipboard

Published 20 hours ago • verified publisher icon ampproject

📦 Update core devDependencies (major)

Open renovate[bot] opened this issue 3 years ago • 5 comments

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
@octokit/graphql 7.0.2 -> 8.1.1 age adoption passing confidence
@octokit/rest 20.0.2 -> 21.0.0 age adoption passing confidence
@types/dompurify (source) 2.3.2 -> 3.0.5 age adoption passing confidence
@types/node (source) 18.16.14 -> 20.14.9 age adoption passing confidence
ajv-formats 2.1.1 -> 3.0.1 age adoption passing confidence
chai (source) 4.3.4 -> 5.1.1 age adoption passing confidence
chai-as-promised 7.1.1 -> 8.0.0 age adoption passing confidence
commander 11.1.0 -> 12.1.0 age adoption passing confidence
cssnano 6.0.3 -> 7.0.3 age adoption passing confidence
del 6.0.0 -> 7.1.0 age adoption passing confidence
fetch-mock (source) 9.11.0 -> 10.0.7 age adoption passing confidence
open 8.4.0 -> 10.1.0 age adoption passing confidence
react (source) 17.0.2 -> 18.3.1 age adoption passing confidence
react-dom (source) 17.0.2 -> 18.3.1 age adoption passing confidence
sinon (source) 11.1.2 -> 18.0.0 age adoption passing confidence
tar 6.2.0 -> 7.4.0 age adoption passing confidence
tempy 1.0.1 -> 3.1.0 age adoption passing confidence

See all other Renovate PRs on the Dependency Dashboard

How to resolve breaking changes

This PR may introduce breaking changes that require manual intervention. In such cases, you will need to check out this branch, fix the cause of the breakage, and commit the fix to ensure a green CI build. To check out and update this PR, follow the steps below:

# Check out the PR branch
git checkout -b renovate/major-core-devdependencies main
git pull https://github.com/ampproject/amphtml.git renovate/major-core-devdependencies

# Directly make fixes and commit them
amp lint --fix # For lint errors in JS files
amp prettify --fix # For prettier errors in non-JS files
# Edit source code in case of new compiler warnings / errors

# Push the changes to the branch
git push [email protected]:ampproject/amphtml.git renovate/major-core-devdependencies:renovate/major-core-devdependencies

Release Notes

octokit/graphql.js (@​octokit/graphql)

v8.1.1

Compare Source

Bug Fixes

v8.1.0

Compare Source

Features

v8.0.2

Compare Source

Bug Fixes

v8.0.1

Compare Source

Bug Fixes

v8.0.0

Compare Source

Features
BREAKING CHANGES

  • this package is now ESM

  • fix: add missing file extension in relative file path import

v7.1.0

Compare Source

Bug Fixes
Features
octokit/rest.js (@​octokit/rest)

v21.0.0

Compare Source

Features
BREAKING CHANGES
  • package is now ESM

v20.1.1

Compare Source

Bug Fixes

v20.1.0

Compare Source

Features
ajv-validator/ajv-formats (ajv-formats)

v3.0.1

Compare Source

v3.0.0

Compare Source

chaijs/chai (chai)

v5.1.1

Compare Source

What's Changed

New Contributors

Full Changelog: https://github.com/chaijs/chai/compare/v5.1.0...v5.1.1

v5.1.0

Compare Source

What's Changed

New Contributors

Full Changelog: https://github.com/chaijs/chai/compare/v5.0.3...v5.1.0

v5.0.3

Compare Source

Fix bad v5.0.2 publish.

Full Changelog: https://github.com/chaijs/chai/compare/v5.0.2...v5.0.3

v5.0.2

Compare Source

What's Changed

Full Changelog: https://github.com/chaijs/chai/compare/v5.0.1...v5.0.2

v5.0.0

Compare Source

BREAKING CHANGES

  • Chai now only supports EcmaScript Modules (ESM). This means your tests will need to either have import {...} from 'chai' or import('chai'). require('chai') will cause failures in nodejs. If you're using ESM and seeing failures, it may be due to a bundler or transpiler which is incorrectly converting import statements into require calls.
  • Dropped support for Internet Explorer.
  • Dropped support for NodeJS < 18.
  • Minimum supported browsers are now Firefox 100, Safari 14.1, Chrome 100, Edge 100. Support for browsers prior to these versions is "best effort" (bug reports on older browsers will be assessed individually and may be marked as wontfix).

What's Changed

New Contributors

Full Changelog: https://github.com/chaijs/chai/compare/4.3.1...v5.0.0

v4.4.1

Compare Source

What's Changed

Full Changelog: https://github.com/chaijs/chai/compare/v4.4.0...v4.4.1

v4.4.0

Compare Source

What's Changed

Full Changelog: https://github.com/chaijs/chai/compare/v4.3.10...v4.4.0

v4.3.10

Compare Source

This release simply bumps all dependencies to their latest non-breaking versions.

What's Changed

Full Changelog: https://github.com/chaijs/chai/compare/v4.3.9...v4.3.10

v4.3.9

Compare Source

Upgrade dependencies.

This release upgrades dependencies to address CVE-2023-43646 where a large function name can cause "catastrophic backtracking" (aka ReDOS attack) which can cause the test suite to hang.

Full Changelog: https://github.com/chaijs/chai/compare/v4.3.8...v4.3.9

v4.3.8

Compare Source

What's Changed

New Contributors

Full Changelog: https://github.com/chaijs/chai/compare/v4.3.7...v4.3.8

v4.3.7

Compare Source

What's Changed

Full Changelog: https://github.com/chaijs/chai/compare/v4.3.6...v4.3.7

v4.3.6

Compare Source

Update loupe to 2.3.1

v4.3.5

Compare Source

chaijs/chai-as-promised (chai-as-promised)

v8.0.0

Compare Source

What's Changed

New Contributors

Full Changelog: https://github.com/chaijs/chai-as-promised/compare/v7.1.2...v8.0.0

v7.1.2

Compare Source

What's Changed

New Contributors

Full Changelog: https://github.com/chaijs/chai-as-promised/compare/v7.1.1...v7.1.2

tj/commander.js (commander)

v12.1.0

Compare Source

Added

v12.0.0

Compare Source

Added
  • .addHelpOption() as another way of configuring built-in help option ([#​2006])
  • .helpCommand() for configuring built-in help command ([#​2087])
Fixed
  • Breaking: use non-zero exit code when spawned executable subcommand terminates due to a signal ([#​2023])
  • Breaking: check passThroughOptions constraints when using .addCommand and throw if parent command does not have .enablePositionalOptions() enabled ([#​1937])
Changed
  • Breaking: Commander 12 requires Node.js v18 or higher ([#​2027])
  • Breaking: throw an error if add an option with a flag which is already in use ([#​2055])
  • Breaking: throw an error if add a command with name or alias which is already in use ([#​2059])
  • Breaking: throw error when calling .storeOptionsAsProperties() after setting an option value ([#​1928])
  • replace non-standard JSDoc of @api private with documented @private ([#​1949])
  • .addHelpCommand() now takes a Command (passing string or boolean still works as before but deprecated) ([#​2087])
  • refactor internal implementation of built-in help option ([#​2006])
  • refactor internal implementation of built-in help command ([#​2087])
Deprecated
  • .addHelpCommand() passing string or boolean (use .helpCommand() or pass a Command) ([#​2087])
Removed
  • Breaking: removed default export of a global Command instance from CommonJS (use the named program export instead) ([#​2017])
Migration Tips

global program

If you are using the deprecated default import of the global Command object, you need to switch to using a named import (or create a new Command).

// const program = require('commander');
const { program } = require('commander');

option and command clashes

A couple of configuration problems now throw an error, which will pick up issues in existing programs:

  • adding an option which uses the same flag as a previous option
  • adding a command which uses the same name or alias as a previous command
cssnano/cssnano (cssnano)

v7.0.3: v7.0.3

Compare Source

Bug Fixes

  • cssnano-preset-default: preserve SVG viewbox and title by default
  • postcss-convert-values: preserve percent sign in arguments of color functions when needed
  • postcss-ordered-values: preserve correct order in animation property
  • postcss-minify-selectors: preserve quotes when escaping selector is required
  • postcss-discard-comments: do not remove strings that only look like comments in selectors

Thanks to @​ota-meshi and @​seiyab for their contributions to this release.

v7.0.2: v7.0.2

Compare Source

Bug Fixes
  • fix invalid output in some cases where selectors contain comments

v7.0.1: v7.0.1

Compare Source

Patch changes

Update postcss-calc dependency to latest version

v7.0.0: v7.0.0

Compare Source

Breaking changes

This release drops official support for unmaintained long term support Node.js releases 14 and 16. It also drops support for non-long term support releases 19 and 21 and add support for Node.js 22. Only the package.json engines field has been updated. The code should otherwise be identical to the previous 6.1.2 release.

Ensuring support for older Node.js had become difficult as the GitHub actions runners are not available for the latest MacOS and recent pnpm also could not run on CI any more.

v6.1.2: v6.1.2

Compare Source

Bug Fixes

  • preserve correct order of gap and column-gap properties

Patch Changes

  • update autoprefixer

v6.1.1

Compare Source

v6.1.0: v6.1.0

Compare Source

This release contains a lot of fixes to Browserslist support thanks to @​colinrotherham

Features

  • support Browserslist options in more plugins
  • support overriding autoprefixer options

Additionally, this release includes improved TypeScript types.

v6.0.5: v6.0.5

Compare Source

Bug Fixes

  • correctly minify font declaration in edge cases
  • preserve initial property in -webkit-line-clamp

v6.0.4: v6.0.4

Compare Source

Bug Fixes
  • preserve empty @layer declarations
  • avoid crashing when encountering @layer without any braces afterwards
  • update to latest lilconfig dependency to avoid vulnerability
sindresorhus/del (del)

v7.1.0

Compare Source

v7.0.0

Compare Source

Breaking
  • Require Node.js 14 (#​143) 106d7d8
  • This package is now pure ESM. Please read this.
  • Moved from a default export to named exports:
    • require('del') → import {deleteAsync} from 'del'
    • require('del').sync → import {deleteSync} from 'del'

v6.1.1

Compare Source

v6.1.0

Compare Source

wheresrhys/fetch-mock (fetch-mock)

v10.0.7: Make type definitions compatible with ESM and CommonJs

Compare Source

v10.0.6: Fix type definitions

Compare Source

v10.0.5: Fix exports

Compare Source

v10.0.4: Simple API for naming routes

Compare Source

e.g. .mock('/path', 200, 'my-name')

v10.0.3: Remove custom aborterror implementation

Compare Source

v10.0.2: Support matching data URLs

Compare Source

v10.0.1: Small fixes to types

Compare Source

v10.0.0: ESM and native fetch

Compare Source

A major rewrite to use ESM modules and default to using native fetch in all environments

Other than that the API remains unchanged

sindresorhus/open (open)

v10.1.0

Compare Source

v10.0.4

Compare Source

v10.0.3

Compare Source

v10.0.2

Compare Source

v10.0.1

Compare Source

v10.0.0

Compare Source

Breaking

v9.1.0

Compare Source

v9.0.0

Compare Source

Breaking
  • Require Node.js 14 7f5995e
  • This package is now pure ESM. Please read this.
    • Please don't open issues regarding ESM / CommonJS.
  • open.openApp is now a named import: import {openApp} from 'open'
  • open.apps is now a named import: import {apps} from 'open'
Improvements
  • Add the ability to open default browser and default browser in private mode (#​294) 3b79981

v8.4.2

Compare Source

v8.4.1

Compare Source

facebook/react (react)

v18.3.1

Compare Source

v18.3.0

Compare Source

v18.2.0

Compare Source

React DOM
React DOM Server
Server Components (Experimental)

v18.1.0

Compare Source

React DOM
React DOM Server
ESLint Plugin: React Hooks
Use Subscription

v18.0.0

Compare Source

Below is a list of all new features, APIs, deprecations, and breaking changes. Read React 18 release post and React 18 upgrade guide for more information.

New Features
React
  • useId is a new hook for generating unique IDs on both the client and server, while avoiding hydration mismatches. It is primarily useful for component libraries integrating with accessibility APIs that require unique IDs. This solves an issue that already exists in React 17 and below, but it’s even more important in React 18 because of how the new streaming server renderer delivers HTML out-of-order.
  • startTransition and useTransition let you mark some state updates as not urgent. Other state updates are considered urgent by default. Rea

Configuration

đź“… Schedule: Branch creation - "after 12am every weekday" in timezone America/Los_Angeles, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

â™» Rebasing: Never, or you tick the rebase/retry checkbox.

đź‘» Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • [ ] If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

renovate[bot] avatar Jun 25 '21 09:06 renovate[bot]

This is currently blocked by failures due to a couple of packages that have become ES6-only.

image

Solution is being tracked by https://github.com/ampproject/amphtml/issues/36201.

rsimha avatar Sep 29 '21 21:09 rsimha

âš  Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

â™» Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: package-lock.json
npm ERR! code ERESOLVE
npm ERR! ERESOLVE could not resolve
npm ERR! 
npm ERR! While resolving: [email protected]
npm ERR! Found: [email protected]
npm ERR! node_modules/chai
npm ERR!   dev chai@"5.1.0" from the root project
npm ERR! 
npm ERR! Could not resolve dependency:
npm ERR! peer chai@">= 2.1.2 < 5" from [email protected]
npm ERR! node_modules/chai-as-promised
npm ERR!   dev chai-as-promised@"7.1.1" from the root project
npm ERR! 
npm ERR! Conflicting peer dependency: [email protected]
npm ERR! node_modules/chai
npm ERR!   peer chai@">= 2.1.2 < 5" from [email protected]
npm ERR!   node_modules/chai-as-promised
npm ERR!     dev chai-as-promised@"7.1.1" from the root project
npm ERR! 
npm ERR! Fix the upstream dependency conflict, or retry
npm ERR! this command with --force, or --legacy-peer-deps
npm ERR! to accept an incorrect (and potentially broken) dependency resolution.
npm ERR! 
npm ERR! See /tmp/renovate/cache/others/npm/eresolve-report.txt for a full report.

npm ERR! A complete log of this run can be found in:
npm ERR!     /tmp/renovate/cache/others/npm/_logs/2024-05-06T15_50_07_491Z-debug-0.log

renovate[bot] avatar May 26 '22 16:05 renovate[bot]

Hey @erwinmombay! These files were changed:

build-system/babel-plugins/babel-plugin-amp-mode-transformer/test/fixtures/transform-assertions/no-transform/output.js
build-system/babel-plugins/babel-plugin-amp-mode-transformer/test/fixtures/transform-assertions/nomodule/output.mjs
build-system/babel-plugins/babel-plugin-amp-mode-transformer/test/fixtures/transform-assertions/transform/output.mjs
build-system/babel-plugins/babel-plugin-amp-story-supported-languages/index.js
build-system/babel-plugins/babel-plugin-amp-story-supported-languages/test/fixtures/transform/replace/output.js
build-system/babel-plugins/babel-plugin-const-transformer/test/fixtures/transform-assertions/ignored-let/output.js
build-system/babel-plugins/babel-plugin-const-transformer/test/fixtures/transform-assertions/ignored-var/output.js
build-system/babel-plugins/babel-plugin-const-transformer/test/fixtures/transform-assertions/should-transform/output.js
build-system/babel-plugins/babel-plugin-deep-pure/test/fixtures/transform/ignored-not-import/output.mjs
build-system/babel-plugins/babel-plugin-dom-jsx-svg-namespace/test/fixtures/transform/ignored/output.mjs
build-system/babel-plugins/babel-plugin-dom-jsx-svg-namespace/test/fixtures/transform/sets-prop/output.mjs
build-system/babel-plugins/babel-plugin-imported-helpers/test/fixtures/transform-assertions/imported-helpers/output.mjs
+58 more

amp-owners-bot[bot] avatar Oct 12 '23 14:10 amp-owners-bot[bot]

babel-semantic-diffs.html.zip for d7d5764

danielrozenberg avatar Jan 17 '24 21:01 danielrozenberg

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

â™» Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: package-lock.json
npm ERR! code ERESOLVE
npm ERR! ERESOLVE could not resolve
npm ERR! 
npm ERR! While resolving: [email protected]
npm ERR! Found: [email protected]
npm ERR! node_modules/chai
npm ERR!   dev chai@"5.1.1" from the root project
npm ERR! 
npm ERR! Could not resolve dependency:
npm ERR! peer chai@">= 2.1.2 < 5" from [email protected]
npm ERR! node_modules/chai-as-promised
npm ERR!   dev chai-as-promised@"7.1.1" from the root project
npm ERR! 
npm ERR! Conflicting peer dependency: [email protected]
npm ERR! node_modules/chai
npm ERR!   peer chai@">= 2.1.2 < 5" from [email protected]
npm ERR!   node_modules/chai-as-promised
npm ERR!     dev chai-as-promised@"7.1.1" from the root project
npm ERR! 
npm ERR! Fix the upstream dependency conflict, or retry
npm ERR! this command with --force, or --legacy-peer-deps
npm ERR! to accept an incorrect (and potentially broken) dependency resolution.
npm ERR! 
npm ERR! See /tmp/renovate/cache/others/npm/eresolve-report.txt for a full report.

npm ERR! A complete log of this run can be found in:
npm ERR!     /tmp/renovate/cache/others/npm/_logs/2024-05-10T16_45_07_250Z-debug-0.log

renovate[bot] avatar May 10 '24 16:05 renovate[bot]