Bump cookie, @automattic/calypso-analytics and @wordpress/scripts

[dependabot[bot]]

Bumps cookie to 0.7.1 and updates ancestor dependencies cookie, @automattic/calypso-analytics and @wordpress/scripts. These dependencies need to be updated together.

Updates cookie from 0.4.2 to 0.7.1

Release notes

Sourced from cookie's releases.

0.7.1

Fixed

• Allow leading dot for domain (#174)
  • Although not permitted in the spec, some users expect this to work and user agents ignore the leading dot according to spec
• Add fast path for serialize without options, use obj.hasOwnProperty when parsing (#172)

https://github.com/jshttp/cookie/compare/v0.7.0...v0.7.1

0.7.0

• perf: parse cookies ~10% faster (#144 by @​kurtextrem and #170)
• fix: narrow the validation of cookies to match RFC6265 (#167 by @​bewinsnw)
• fix: add main to package.json for rspack (#166 by @​proudparrot2)

https://github.com/jshttp/cookie/compare/v0.6.0...v0.7.0

0.6.0

• Add partitioned option

0.5.0

• Add priority option
• Fix expires option to reject invalid dates
• pref: improve default decode speed
• pref: remove slow string split in parse

Commits

• cf4658f 0.7.1
• 6a8b8f5 Allow leading dot for domain (#174)
• 58015c0 Remove more code and perf wins (#172)
• ab057d6 0.7.0
• 5f02ca8 Migrate history to GitHub releases
• a5d591c Migrate history to GitHub releases
• 51968f9 Skip isNaN
• 9e7ca51 perf(parse): cache length, return early (#144)
• d6f39b0 Fix tests for old node
• 6bb701f Remove failing scorecard
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by blakeembrey, a new releaser for cookie since your current version.

Updates @automattic/calypso-analytics from 1.1.2 to 1.1.3

Changelog

Sourced from @​automattic/calypso-analytics's changelog.

1.1.3

• Add "Remote Data Blocks" in the list of allowed sources.

Commits

• cf4359b Tracks: Add Remote Data Blocks in the list of allowed sources (#96007)
• 9228dc4 fix(deps): update dependency cookie to ^0.7.0 [security] (#95193)
• f05c0a9 Tracking: Add user_lang to calypso events (#95297)
• f38108d Swap tracks linker parameters (#90450)
• 5984136 Migration: Add migration assistance step and zendesk ticket creation (#89896)
• See full diff in compare view

Maintainer changes

This version was pushed to npm by mehmoodak, a new releaser for @​automattic/calypso-analytics since your current version.

Updates @wordpress/scripts from 27.9.0 to 30.7.0

Changelog

Sourced from @​wordpress/scripts's changelog.

30.7.0 (2024-12-11)

Internal

• The bundled sass dependency has been updated from ^1.35.2 to ^1.50.1 (#67572).
• The bundled sass-loader dependency has been updated from ^12.1.0 to ^16.0.3 (#67572).
• The bundled mini-css-extract-plugin dependency has been updated from ^2.5.1 to ^2.9.2 (#67572).
• The bundled webpack dependency has been updated from ^5.95.0 to ^5.97.0 (#67572).
• The bundled cross-spawn dependency has been updated from ^5.1.0 to ^7.0.6 (#67708).
• The bundled jest-dev-server dependency has been updated from ^9.0.1 to ^10.1.4 (#67708).
• The bundled puppeteer-core dependency has been updated from ^23.1.0 to ^23.10.1 (#67708).

Bug Fix

• Make React Fast Refresh in the start command work with multiple blocks (64924).

30.6.0 (2024-11-27)

30.5.1 (2024-11-18)

Bug Fix

• Revert changes from #61121 that inlined CSS files imported from other CSS files before optimization in the build command.

30.5.0 (2024-11-16)

Bug Fix

• Make start script more resilient for developer errors (#66752).

30.4.0 (2024-10-30)

Enhancements

• Add BlueOak-1.0.0 the GPLv2-compatible licenses recognized by check-licenses (#66139).
• Add an optional --root-folder argument to the plugin-zip command (#61375). By default, the command will use the plugin's name as the root folder of the zip. If the change in the behavior impacted your workflow, you could pass --no-root-folder to remove the root folder.

Internal

• Refactor to extract license related logic to a reusable module (#66179).

30.3.0 (2024-10-17)

New Features

• Add new build-blocks-manifest command to generate a PHP file containing block metadata from all block.json files in a project (#65866).

30.2.0 (2024-10-16)

30.1.0 (2024-10-03)

... (truncated)

Commits

• b432c18 chore(release): publish
• f38cb4d Update changelog files
• e5570ea Merge changes published in the Gutenberg plugin "release/19.9" branch
• cce81c1 chore(release): publish
• 6db1992 Update changelog files
• b24995a chore(release): publish
• b25f82f Update changelog files
• fdbe988 WP Scripts: Revert changes that inline CSS imports early in the build process...
• 510540d chore(release): publish
• 854d8c7 Update changelog files
• Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
@wordpress/scripts	[> 24.6.0]

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Note: Dependabot was ignoring updates to this dependency, but since you've updated it yourself we've started tracking it for you again. 🤖

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the Security Alerts page.

Note Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[eason9487]

Set the status: blocked label because of a breaking change in @wordpress/scripts 28.0.0 that requires a minimum support target greater than WordPress 6.5 if the plugin uses it to build React assets.

See: https://github.com/WordPress/gutenberg/blob/%40wordpress/scripts%4028.0.0/packages/scripts/CHANGELOG.md#2800-2024-05-31

[vikrampm1]

@eason9487 can this be unblocked now for the team to review and merge it?

[eason9487]

Hi @vikrampm1, with 3.4.0, the minimum support for WordPress has been updated to 6.6, so this issue can now be unblocked.

[mukeshpanchal27]

@dependabot rebase

[mukeshpanchal27]

@dependabot rebase

[dependabot[bot]]

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

[mukeshpanchal27]

@dependabot rebase

[mukeshpanchal27]

Closing in favour of #3068

[dependabot[bot]]

OK, I won't notify you again about this release, but will get in touch when a new version is available.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.