chore(deps): update all non-major dependencies #1613

renovate · 2024-02-20T06:42:09Z

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@storybook/addon-essentials (source)	`^7.6.13` -> `^7.6.17`
@storybook/addon-interactions (source)	`^7.6.13` -> `^7.6.17`
@storybook/addon-links (source)	`^7.6.13` -> `^7.6.17`
@storybook/react (source)	`^7.6.13` -> `^7.6.17`
@storybook/react-webpack5 (source)	`^7.6.13` -> `^7.6.17`
@types/chrome (source)	`^0.0.260` -> `^0.0.261`
@types/node (source)	`^20.11.17` -> `^20.11.20`
@types/react (source)	`^18.2.55` -> `^18.2.58`
@types/semver (source)	`^7.5.6` -> `^7.5.7`
electron	`^27.3.2` -> `^27.3.3`
esbuild	`^0.20.0` -> `^0.20.1`
eslint (source)	`^8.56.0` -> `^8.57.0`
eslint-plugin-jest	`^27.6.3` -> `^27.9.0`
framer-motion	`^11.0.3` -> `^11.0.6`
nanoid	`^5.0.5` -> `^5.0.6`
pnpm (source)	`8.15.1` -> `8.15.3`
react-bootstrap (source)	`^2.10.0` -> `^2.10.1`
react-router-dom (source)	`^6.22.0` -> `^6.22.1`
rollup (source)	`^4.9.6` -> `^4.12.0`
selenium-webdriver (source)	`^4.17.0` -> `^4.18.1`
storybook (source)	`^7.6.13` -> `^7.6.17`
webpack	`^5.90.1` -> `^5.90.3`

Release Notes

storybookjs/storybook (@storybook/addon-essentials)

`v7.6.17`

Compare Source

`v7.6.16`

Compare Source

Addon Themes: Make type generic less strict - #26042, thanks @yannbf!
Interaction: Make sure that adding spies doesn't cause infinite loops with self referencing args #26019, thanks @kasperpeulen!

`v7.6.15`

Compare Source

`v7.6.14`

Compare Source

Core: Fix boolean true args in URL getting ignored - #25950, thanks @JReinhold!

storybookjs/storybook (@storybook/addon-interactions)

`v7.6.17`

Compare Source

Addon-docs: Fix Table of Contents heading leak - #23677, thanks @vmizg!
Core: Update ip version to fix CVE-2023-42282 - #26086, thanks @drik98!

`v7.6.16`

Compare Source

`v7.6.15`

Compare Source

This release accidentally didn't contain anything.

`v7.6.14`

Compare Source

Core: Fix boolean true args in URL getting ignored - #25950, thanks @JReinhold!

electron/electron (electron)

`v27.3.3`: electron v27.3.3

Compare Source

Release Notes for v27.3.3

Fixes

CSS style -webkit-app-region: drag; has no effect in full screen mode. #41331 (Also in 28, 29)
Fixed an issue where crashes in node::Environment destruction potentially wouldn't be propagated to the NodeService exit handler. #41300 (Also in 28, 29)
Fixed an issue where zoom level settings did not persist per-session for webviews. #41269 (Also in 28)

Other Changes

Security: backported fix for 4149665.
- Security: backported fix for CVE-2024-1283.
- Security: backported fix for CVE-2024-1284.
- Security: backported fix for 4149197. #41375

evanw/esbuild (esbuild)

`v0.20.1`

Compare Source

Fix a bug with the CSS nesting transform (#3648)

This release fixes a bug with the CSS nesting transform for older browsers where the generated CSS could be incorrect if a selector list contained a pseudo element followed by another selector. The bug was caused by incorrectly mutating the parent rule's selector list when filtering out pseudo elements for the child rules:
```
/* Original code */
.foo {
  &:after,
  & .bar {
    color: red;
  }
}

/* Old output (with --supported:nesting=false) */
.foo .bar,
.foo .bar {
  color: red;
}

/* New output (with --supported:nesting=false) */
.foo:after,
.foo .bar {
  color: red;
}
```
Constant folding for JavaScript inequality operators (#3645)

This release introduces constant folding for the < > <= >= operators. The minifier will now replace these operators with true or false when both sides are compile-time numeric or string constants:
```
// Original code
console.log(1 < 2, '🍕' > '🧀')

// Old output (with --minify)
console.log(1<2,"🍕">"🧀");

// New output (with --minify)
console.log(!0,!1);
```

Better handling of __proto__ edge cases (#3651)

JavaScript object literal syntax contains a special case where a non-computed property with a key of __proto__ sets the prototype of the object. This does not apply to computed properties or to properties that use the shorthand property syntax introduced in ES6. Previously esbuild didn't correctly preserve the "sets the prototype" status of properties inside an object literal, meaning a property that sets the prototype could accidentally be transformed into one that doesn't and vice versa. This has now been fixed:

// Original code
function foo(__proto__) {
  return { __proto__: __proto__ } // Note: sets the prototype
}
function bar(__proto__, proto) {
  {
    let __proto__ = proto
    return { __proto__ } // Note: doesn't set the prototype
  }
}

// Old output
function foo(__proto__) {
  return { __proto__ }; // Note: no longer sets the prototype (WRONG)
}
function bar(__proto__, proto) {
  {
    let __proto__2 = proto;
    return { __proto__: __proto__2 }; // Note: now sets the prototype (WRONG)
  }
}

// New output
function foo(__proto__) {
  return { __proto__: __proto__ }; // Note: sets the prototype (correct)
}
function bar(__proto__, proto) {
  {
    let __proto__2 = proto;
    return { ["__proto__"]: __proto__2 }; // Note: doesn't set the prototype (correct)
  }
}

Fix cross-platform non-determinism with CSS color space transformations (#3650)

The Go compiler takes advantage of "fused multiply and add" (FMA) instructions on certain processors which do the operation x*y + z without intermediate rounding. This causes esbuild's CSS color space math to differ on different processors (currently ppc64le and s390x), which breaks esbuild's guarantee of deterministic output. To avoid this, esbuild's color space math now inserts a float64() cast around every single math operation. This tells the Go compiler not to use the FMA optimization.
Fix a crash when resolving a path from a directory that doesn't exist (#3634)

This release fixes a regression where esbuild could crash when resolving an absolute path if the source directory for the path resolution operation doesn't exist. While this situation doesn't normally come up, it could come up when running esbuild concurrently with another operation that mutates the file system as esbuild is doing a build (such as using git to switch branches). The underlying problem was a regression that was introduced in version 0.18.0.

eslint/eslint (eslint)

`v8.57.0`

Compare Source

Features

1120b9b feat: Add loadESLint() API method for v8 (#18098) (Nicholas C. Zakas)
dca7d0f feat: Enable eslint.config.mjs and eslint.config.cjs (#18066) (Nitin Kumar)

Bug Fixes

2196d97 fix: handle absolute file paths in FlatRuleTester (#18064) (Nitin Kumar)
69dd1d1 fix: Ensure config keys are printed for config errors (#18067) (Nitin Kumar)
9852a31 fix: deep merge behavior in flat config (#18065) (Nitin Kumar)
4c7e9b0 fix: allow circular references in config (#18056) (Milos Djermanovic)

Documentation

84922d0 docs: Show prerelease version in dropdown (#18139) (Nicholas C. Zakas)
5b8c363 docs: Switch to Ethical Ads (#18117) (Milos Djermanovic)
77dbfd9 docs: show NEXT in version selectors (#18052) (Milos Djermanovic)

Chores

1813aec chore: upgrade @eslint/js @8.57.0 (#18143) (Milos Djermanovic)
5c356bb chore: package.json update for @eslint/js release (Jenkins)
f4a1fe2 test: add more tests for ignoring files and directories (#18068) (Nitin Kumar)
42c0aef ci: Enable CI for v8.x branch (#18047) (Milos Djermanovic)

jest-community/eslint-plugin-jest (eslint-plugin-jest)

`v27.9.0`

Compare Source

Features

add should-be-fine support for flat configs (#1505) (4cc2a1b)

`v27.8.0`

Compare Source

Features

support failing.each (#1499) (9e9cf83)

`v27.7.0`

Compare Source

Features

allow [@typescript-eslint](https://togithub.com/typescript-eslint) v7 (#1500) (6be2928)

27.6.3 (2024-01-12)

Bug Fixes

replace use of deprecated methods (#1453) (9204a51)

27.6.2 (2024-01-10)

Reverts

Revert "chore: use relative path to parent tsconfig.json (#1476)" (5e6199d), closes #1476

27.6.1 (2024-01-01)

Bug Fixes

include plugin meta information with snapshot processor for ESLint v9 (#1484) (067e246)

framer/motion (framer-motion)

`v11.0.6`

Compare Source

Updated

Added support for motion(Fragment) for controlling variants. For internal Framer use only.

`v11.0.5`

Compare Source

Updated

Performance updates.

`v11.0.4`

Compare Source

Fixed

Tighten check for navigator.userAgent.

ai/nanoid (nanoid)

`v5.0.6`

Compare Source

Fixed React Native support.

pnpm/pnpm (pnpm)

`v8.15.3`

Compare Source

Patch Changes

Remove vulnerable "ip" package from the dependencies #7652.

Platinum Sponsors

Gold Sponsors

Our Silver Sponsors

`v8.15.2`

Compare Source

Patch Changes

When purging multiple node_modules directories, pnpm will no longer print multiple prompts simultaneously.
Don't print an unnecessary warning when adding new dependencies to a project that uses hoisted node_modules.
Linking globally the command of a package that has no name in package.json #4761.
Installation should work with lockfile created by pnpm v9.0.0-alpha.4

Platinum Sponsors

Gold Sponsors

Our Silver Sponsors

react-bootstrap/react-bootstrap (react-bootstrap)

`v2.10.1`

Compare Source

Bug Fixes

FormControl: ensures compatibility with @types/react @18.2.48 (#6763) (652e709)

remix-run/react-router (react-router-dom)

`v6.22.1`

Compare Source

rollup/rollup (rollup)

`v4.12.0`

Compare Source

2024-02-16

Features

Improve raw bundling performance by 10-15% when not using the cache or plugins that return an AST (#5391)

Pull Requests

#5391: Improve performance by directly constructing AST from buffer (@lukastaegert)
#5393: chore(deps): update dependency eslint-plugin-unicorn to v51 (@renovate[bot])
#5394: chore(deps): update typescript-eslint monorepo to v7 (major) (@renovate[bot])
#5395: chore(deps): lock file maintenance minor/patch updates (@renovate[bot])

`v4.11.0`

Compare Source

2024-02-15

Features

Add output.reexportProtoFromExternal option to disable special code for handling __proto__ reexports (#5380)

Bug Fixes

Ensure namespace reexport code can be parsed by cjs-module-lexer (#5380)
Throw when trying to reassing const variables (#5388)

Pull Requests

#5380: fix: separately export __proto__ for compatibility with CJS Transpiler Re-exports (@TrickyPi)
#5388: Add const reassign rule (@TrickyPi)

`v4.10.0`

Compare Source

2024-02-10

Features

Support base-36 and base-16 hashes again via new output.hashCharacters option (#5371)

Bug Fixes

Do not crash process for panics in native code but throw them as JavaScript errors (#5383)

Pull Requests

#5359: chore(deps): update actions/cache action to v4 (@renovate[bot])
#5360: chore(deps): update dependency pretty-ms to v9 (@renovate[bot])
#5366: chore(deps): update dependency husky to v9 (@renovate[bot])
#5367: chore(deps): update peter-evans/create-or-update-comment action to v4 (@renovate[bot])
#5368: chore(deps): update peter-evans/find-comment action to v3 (@renovate[bot])
#5369: chore(deps): lock file maintenance minor/patch updates (@renovate[bot])
#5370: Fix dependency range for Node types (@lukastaegert)
#5371: Implement "output.hashCharacters" option to define character set for file hashes (@lukastaegert)
#5372: Roll back vitepress as 1.0.0-rc.40 breaks the development build (@lukastaegert)
#5382: Update documentation (@TrickyPi)
#5383: Catch Rust panics and then throw them in JS (@TrickyPi)
#5384: chore(deps): update codecov/codecov-action action to v4 (@renovate[bot])
#5385: chore(deps): lock file maintenance minor/patch updates (@renovate[bot])
#5386: Resolve all rollup imports to node_modules to avoid type conflict (@TrickyPi)

SeleniumHQ/selenium (selenium-webdriver)

`v4.18.1`

Compare Source

`v4.18.0`

Compare Source

storybookjs/storybook (storybook)

`v7.6.17`

Compare Source

`v7.6.16`

Compare Source

Addon Themes: Make type generic less strict - #26042, thanks @yannbf!
Interaction: Make sure that adding spies doesn't cause infinite loops with self referencing args #26019, thanks @kasperpeulen!

`v7.6.15`

Compare Source

`v7.6.14`

Compare Source

Core: Fix boolean true args in URL getting ignored - #25950, thanks @JReinhold!

webpack/webpack (webpack)

`v5.90.3`

Compare Source

Bug Fixes

don't mangle when destructuring a reexport
types for Stats.toJson() and Stats.toString()
many internal types
[CSS] clean up export css local vars

Perf

simplify and optimize chunk graph creation

`v5.90.2`

Compare Source

Bug Fixes

use Math.imul in fnv1a32 to avoid loss of precision, directly hash UTF16 values
the setStatus() of the HMR module should not return an array, which may cause infinite recursion
__webpack_exports_info__.xxx.canMangle shouldn't always same as default
mangle export with destructuring
use new runtime to reconsider skipped connections activeState
make dynamic import optional in try/catch
improve auto publicPath detection

Dependencies & Maintenance

improve CI setup and include Node.js@21

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

changeset-bot · 2024-02-20T06:42:13Z

⚠️ No Changeset found

Latest commit: 57fce53

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

fai8146767 · 2024-04-13T18:03:33Z

****

fai8146767 · 2024-05-01T07:51:35Z

#1613 (comment)

* chore(deps): update all non-major dependencies * Fix --------- Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Nathan Bierema <[email protected]>

renovate bot force-pushed the renovate/all-minor-patch branch 6 times, most recently from 088aa8f to ed11bf0 Compare February 23, 2024 09:30

chore(deps): update all non-major dependencies

1e8c489

renovate bot force-pushed the renovate/all-minor-patch branch from ed11bf0 to 1e8c489 Compare February 23, 2024 22:30

Fix

57fce53

Methuselah96 enabled auto-merge (squash) February 23, 2024 23:07

Methuselah96 merged commit 6b80162 into main Feb 23, 2024

Methuselah96 deleted the renovate/all-minor-patch branch February 23, 2024 23:18

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

chore(deps): update all non-major dependencies #1613

chore(deps): update all non-major dependencies #1613

Uh oh!

renovate bot commented Feb 20, 2024 •

edited

Loading

Uh oh!

changeset-bot bot commented Feb 20, 2024 •

edited

Loading

Uh oh!

fai8146767 commented Apr 13, 2024

Uh oh!

fai8146767 commented May 1, 2024

Uh oh!

Uh oh!

Uh oh!

chore(deps): update all non-major dependencies #1613

chore(deps): update all non-major dependencies #1613

Uh oh!

Conversation

renovate bot commented Feb 20, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v27.3.3: electron v27.3.3

Release Notes for v27.3.3

Fixes

Other Changes

Features

Bug Fixes

Documentation

Chores

Features

Features

Features

27.6.3 (2024-01-12)

Bug Fixes

27.6.2 (2024-01-10)

Reverts

27.6.1 (2024-01-01)

Bug Fixes

Updated

Updated

Fixed

Patch Changes

Platinum Sponsors

Gold Sponsors

Our Silver Sponsors

Patch Changes

Platinum Sponsors

Gold Sponsors

Our Silver Sponsors

Bug Fixes

Features

Pull Requests

Features

Bug Fixes

Pull Requests

Features

Bug Fixes

Pull Requests

Bug Fixes

Perf

Bug Fixes

Dependencies & Maintenance

Configuration

Uh oh!

changeset-bot bot commented Feb 20, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ No Changeset found

Uh oh!

fai8146767 commented Apr 13, 2024

****

Uh oh!

fai8146767 commented May 1, 2024

Uh oh!

Uh oh!

renovate bot commented Feb 20, 2024 •

edited

Loading

`v27.3.3`: electron v27.3.3

changeset-bot bot commented Feb 20, 2024 •

edited

Loading