-
Notifications
You must be signed in to change notification settings - Fork 0
Bump the npm_and_yarn group across 1 directory with 5 updates #1
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Bump the npm_and_yarn group across 1 directory with 5 updates #1
Conversation
Bumps the npm_and_yarn group with 3 updates in the /ui directory: [axios](https://github.com/axios/axios), [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) and [@babel/runtime](https://github.com/babel/babel/tree/HEAD/packages/babel-runtime). Updates `axios` from 1.7.2 to 1.8.2 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v1.7.2...v1.8.2) Updates `vite` from 5.2.11 to 5.4.18 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v5.4.18/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v5.4.18/packages/vite) Updates `@babel/runtime` from 7.24.5 to 7.27.0 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.27.0/packages/babel-runtime) Updates `esbuild` from 0.20.2 to 0.21.5 - [Release notes](https://github.com/evanw/esbuild/releases) - [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG-2024.md) - [Commits](evanw/esbuild@v0.20.2...v0.21.5) Updates `rollup` from 4.18.0 to 4.39.0 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.18.0...v4.39.0) --- updated-dependencies: - dependency-name: axios dependency-version: 1.8.2 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: vite dependency-version: 5.4.18 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@babel/runtime" dependency-version: 7.27.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: esbuild dependency-version: 0.21.5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: rollup dependency-version: 4.39.0 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
Reviewer's Guide by SourceryThis pull request updates several dependencies in the ui directory, including axios, vite, @babel/runtime, esbuild, and rollup. These updates include bug fixes, performance improvements, and new features. Updated class diagram for Axios configurationclassDiagram
class Axios {
+baseURL: string
+timeout: number
+headers: object
+allowAbsoluteUrls: boolean
+get(url: string, config: object): Promise<any>
+post(url: string, data: any, config: object): Promise<any>
}
note for Axios "The allowAbsoluteUrls config option was added in Axios v1.8.0"
Updated class diagram for Vite configurationclassDiagram
class ViteConfig {
+server: ServerOptions
+build: BuildOptions
+preview: PreviewOptions
}
class ServerOptions {
+cors: boolean
+allowedHosts: string[]
}
class BuildOptions {
+rollupOptions: RollupOptions
}
class PreviewOptions {
+allowedHosts: string[]
}
class RollupOptions {
+plugins: Plugin[]
}
class Plugin {
+name: string
+resolveId: Function
+load: Function
+transform: Function
}
ViteConfig o-- ServerOptions : has
ViteConfig o-- BuildOptions : has
ViteConfig o-- PreviewOptions : has
BuildOptions o-- RollupOptions : has
RollupOptions o-- Plugin : has many
note for ServerOptions "The allowedHosts option was updated in Vite v5.4.12 to prevent DNS rebinding attacks."
note for ServerOptions "The default value of server.cors was changed to false in Vite v5.4.12 to disallow fetching from untrusted origins."
note for Plugin "The resolveId, load and transform hooks now support a .filter option in Rollup v4.38.0."
Updated class diagram for Babel ParserclassDiagram
class BabelParser {
+allowImportAttributes: boolean
+allowYieldOutsideFunction: boolean
+parse(code: string, options: object): AST
}
class AST {
+type: string
}
note for BabelParser "The allowYieldOutsideFunction option was added to the parser."
note for BabelParser "Support for ESTree AccessorProperty was added."
Updated class diagram for EsbuildclassDiagram
class Esbuild {
+bundle: boolean
+loader: object
+external: string[]
+supported: object
+tsconfig: string
}
note for Esbuild "Support for ${configDir} in tsconfig.json files was added."
note for Esbuild "Fixed Symbol.metadata on classes without a class decorator."
note for Esbuild "Allowed unknown import attributes to be used with the copy loader."
note for Esbuild "Supported import attributes with glob-style imports."
Updated class diagram for RollupclassDiagram
class Rollup {
+input: string[]
+plugins: Plugin[]
+output: OutputOptions
}
class Plugin {
+name: string
+resolveId: Function
+load: Function
+transform: Function
}
class OutputOptions {
+dir: string
+format: string
}
Rollup o-- Plugin : has many
Rollup o-- OutputOptions : has
note for Plugin "The resolveId, load and transform hooks now support a .filter option."
note for Rollup "Rollup now handles class decorators placed before the export keyword."
File-Level Changes
Tips and commandsInteracting with Sourcery
Customizing Your ExperienceAccess your dashboard to:
Getting Help
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
We have skipped reviewing this pull request. It seems to have been created by a bot (hey, dependabot[bot]!). We assume it knows what it's doing!
Bumps the npm_and_yarn group with 3 updates in the /ui directory: axios, vite and @babel/runtime.
Updates
axiosfrom 1.7.2 to 1.8.2Release notes
Sourced from axios's releases.
... (truncated)
Changelog
Sourced from axios's changelog.
... (truncated)
Commits
a9f7689chore(release): v1.8.2 (#6812)fb8eec2fix(http-adapter): add allowAbsoluteUrls to path building (#6810)9812045chore(sponsor): update sponsor block (#6804)72acf75chore(sponsor): update sponsor block (#6794)2e64afdchore(release): v1.8.1 (#6800)36a5a62fix(utils): movegenerateStringto platform utils to avoid importing crypto...cceb7b1chore(release): v1.8.0 (#6795)23a25affix(utils): replace getRandomValues with crypto module (#6788)32c7bccfeat: Add config for ignoring absolute URLs (#5902) (#6192)4a3e26cchore(config): adjust rollup config to preserve license header to minified Ja...Updates
vitefrom 5.2.11 to 5.4.18Release notes
Sourced from vite's releases.
... (truncated)
Changelog
Sourced from vite's changelog.
... (truncated)
Commits
731b77drelease: v5.4.18823675bfix: backport #19830, reject requests with#in request-target (#19831)0a2518arelease: v5.4.1784b2b46fix: backport #19782, fs check with svg and relative paths (#19784)712cb71release: v5.4.16b627c50fix: backport #19761, fs check in transform middleware (#19762)9b0f4c8release: v5.4.15807d7f0fix: backport #19702, fs raw query with query separators (#19703)e7eb3c5release: v5.4.147d1699cfix: allow CORS from loopback addresses by default (#19249)Updates
@babel/runtimefrom 7.24.5 to 7.27.0Release notes
Sourced from
@babel/runtime's releases.... (truncated)
Changelog
Sourced from
@babel/runtime's changelog.... (truncated)
Commits
5c350eav7.27.0ca4865aFix: align behaviour to tscrewriteRelativeImportExtensions(#17118)e1ce99dv7.26.10d5952e8Fix processing of replacement pattern with named capture groups (#17173)64bca7bv7.26.92d95140v7.26.763d3038v7.26.0b07957ev7.25.9af91759fix: Accidentally publishing useless files (#16917)2533cfbv7.25.7Updates
esbuildfrom 0.20.2 to 0.21.5Release notes
Sourced from esbuild's releases.
... (truncated)
Changelog
Sourced from esbuild's changelog.
... (truncated)
Commits
fc37c2fpublish 0.21.5 to npmcb11924fixSymbol.metadataerrors in decorator testsb93a2a9fix #3781: add metadata to all decorated classes953dae9fix #3797: import attributes and glob-style import98cb2edfix #3782: support${configDir}in tsconfig.json8e6603brunmake update-compat-tabledb1b8cafix #3792: import attributes and thecopyloaderde572d0fix non-deterministic import attribute plugin testae8d1b4fix #3794:--supported:object-accessors=false67cbf87publish 0.21.4 to npmUpdates
rollupfrom 4.18.0 to 4.39.0Release notes
Sourced from rollup's releases.
... (truncated)
Changelog
Sourced from rollup's changelog.
... (truncated)
Commits
5c001244.39.04124f71Fix Vite vulnerabilitybcb1b6dchunk: merge allow-extension modules (#5891)d970e29fix: resolveId id filter is optional (#5896)5ce2014chore(deps): update dependency vite to v6.2.4 [security] (#5893)22b64bc4.38.041a0b6fAdd support for hook filters (#5882)f660c34chore(deps): update dependency eslint-plugin-unicorn to v58 (#5895)e192a67fix(deps): lock file maintenance minor/patch updates (#5894)8b1c6344.37.0Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsYou can disable automated security fix PRs for this repo from the Security Alerts page.
Summary by Sourcery
Update npm dependencies in the UI project, including axios, vite, and other related packages
New Features:
Enhancements: