conductor icon indicating copy to clipboard operation
conductor copied to clipboard

Published 20 hours ago • verified publisher icon mglaman

Bump debug and electron

Open dependabot[bot] opened this issue 2 years ago • 0 comments

Bumps debug to 4.3.4 and updates ancestor dependency electron. These dependencies need to be updated together.

Updates debug from 2.2.0 to 4.3.4

Release notes

Sourced from debug's releases.

4.3.4

What's Changed

New Contributors

Full Changelog: https://github.com/debug-js/debug/compare/4.3.3...4.3.4

4.3.3

Patch Release 4.3.3

This is a documentation-only release. Further, the repository was transferred. Please see notes below.

Thank you to @​taylor1791 and @​kristofkalocsai for their contributions.

Repository Migration Information

I've formatted this as a FAQ, please feel free to open an issue for any additional question and I'll add the response here.

Q: What impact will this have on me?

In most cases, you shouldn't notice any change.

The only exception I can think of is if you pull code directly from https://github.com/visionmedia/debug, e.g. via a "debug": "visionmedia/debug"-type version entry in your package.json - in which case, you should still be fine due to the automatic redirection Github sets up, but you should also update any references as soon as possible.

Q: What are the security implications of this change?

If you pull code directly from the old URL, you should update the URL to https://github.com/debug-js/debug as soon as possible. The old organization has many approved owners and thus a new repository could (in theory) be created at the old URL, circumventing Github's automatic redirect that is in place now and serving malicious code. I (@​qix-) also wouldn't have access to that repository, so while I don't think it would happen, it's still something to consider.

Even in such a case, however, the officially released package on npm (debug) would not be affected. That package is still very much under control (even more than it used to be).

Q: What should I do if I encounter an issue related to the migration?

Search the issues first to see if someone has already reported it, and then open a new issue if someone has not.

Q: Why was this done as a 'patch' release? Isn't this breaking?

No, it shouldn't be breaking. The package on npm shouldn't be affected (aside from this patch release) and any references to the old repository should automatically redirect.

Thus, according to all of the "APIs" (loosely put) involved, nothing should have broken.

... (truncated)

Commits
  • da66c86 4.3.4
  • 9b33412 replace deprecated String.prototype.substr() (#876)
  • c0805cc add section about configuring JS console to show debug messages (#866)
  • 043d3cd 4.3.3
  • 4079aae update license and more maintainership information
  • 19b36c0 update repository location + maintainership information
  • f851b00 adds README section regarding usage in child procs (#850)
  • d177f2b Remove accidental epizeuxis
  • e47f96d 4.3.2
  • 1e9d38c cache enabled status per-logger (#799)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by qix, a new releaser for debug since your current version.


Updates electron from 9.4.0 to 22.0.0

Release notes

Sourced from electron's releases.

electron v22.0.0

Release Notes for v22.0.0

Stack Upgrades

Breaking Changes

  • Added WebContents input-event event.
    • Deprecated BrowserWindow scroll-touch-* events. #35531
  • The deprecated new-window event has been removed. #34526

Features

  • Added LoadBrowserProcessSpecificV8Snapshot as a new fuse that will let the main/browser process load its v8 snapshot from a file at browser_v8_context_snapshot.bin. Any other process will use the same path as is used today. #35266 (Also in 20, 21)
  • Added WebContents.opener to access window opener.
    • Added webContents.fromFrame(frame) to get the WebContents corresponding to a WebFrameMain instance. #35140 (Also in 21)
  • Added app.getSystemLocale() method. #35697 (Also in 21)
  • Added contextBridge.exposeInIsolatedWorld(worldId, key, api) to expose an API to an isolatedWorld within a renderer from a preload script. #34974
  • Added webContents.close() method. #35509
  • Added webFrameMain.origin. #35438 (Also in 19, 20, 21)
  • Added an app.getPreferredSystemLanguages() API to return the user's system languages. #36291 (Also in 21)
  • Added new UtilityProcess API to launch chromium child process with node integration. #36089
  • Added new WebContents event content-bounds-updated. #35533
  • Added new WebContents.ipc and WebFrameMain.ipc APIs. #34959 (Also in 21)
  • Added support for Web Bluetooth pin pairing on Linux and Windows. #35416 (Also in 21)
  • Added support for navigator.mediaDevices.getDisplayMedia via a new session handler, ses.setDisplayMediaRequestHandler. #30702
  • Added support for serialPort.forget() as well as a new event serial-port-revoked emitted when a given origin is revoked. #36062

Fixes

  • Added support for Webauthn discoverable keys (aka resident keys), allowing users to authenticate without first having to select or type a username. #35374
  • Enable crashpad for ELECTRON_RUN_AS_NODE processes on linux. #36483
  • Fixed click event and tooltip of Tray not working on Linux. #36472
  • Fixed an issue where frameless non-resizable windows showed a Windows 7 frame during startup. #36024
  • Fixed an issue with incomplete EventEmitter object in sandboxed renderer preload script. #35522
  • Fixed race condition during update on macOS that could result in TCC and Keychain errors. #36362
  • Removed unneeded --turbo-profiling-input argument from mksnapshot_args. #36463

Also in earlier versions...

  • Added a background to the WCO container to avoid rendering glitches. #35569 (Also in 19, 20, 21)
  • Added support for Windows drop-down dialog extensions. #35618 (Also in 18, 19, 20, 21)
  • Default margin has been added in the code. #36073 (Also in 21)
  • Enable WCO maximize button when window enters tablet mode and is not already maximized. #35617 (Also in 19, 20, 21)
  • Fixed uv_os_gethostname failing on Windows 7. #35702 (Also in 19, 20, 21)

... (truncated)

Commits
  • 71941e7 chore: bump chromium to 108.0.5359.62 (22-x-y) (#36478)
  • 8d9a964 fix: enable crashpad for ELECTRON_RUN_AS_NODE processes (#36483)
  • e879e2f build(deps): bump minimatch from 3.0.4 to 3.0.8 (#36468)
  • 4989994 fix: reimplement Tray with StatusIconLinuxDbus on Linux (#36472)
  • ccc5a7a fix: remove unneeded --turbo-profiling-input arg from mksnapshot_args… (#36463)
  • 6338350 chore: cherry-pick 7196a42b42ce from chromium (#36458)
  • 1601265 docs: add missing event-emitter link to utility-process docs (#36433)
  • 02eef17 chore: fix dangling promise in npm install (#36398)
  • 17d712e build: force ninja binary to the right arch after src cache restore (#36404)
  • 5085ac7 chore: bump chromium to 108.0.5359.48 (22-x-y) (#36388)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependabot[bot] avatar Jan 11 '23 01:01 dependabot[bot]