Bump the npm_and_yarn group group with 9 updates #46

dependabot · 2024-02-29T00:21:12Z

Bumps the npm_and_yarn group group with 9 updates:

Package	From	To
postcss	`8.4.8`	`8.4.31`
semver	`5.7.1`	`5.7.2`
@babel/traverse	`7.18.13`	`7.24.0`
axios	`0.21.4`	``
@11ty/eleventy	`1.0.2`	`2.0.1`
liquidjs	`9.43.0`	`10.10.1`
nunjucks	`3.2.3`	`3.2.4`
sharp	`0.30.6`	`0.33.2`
@11ty/eleventy-img	`1.1.0`	`4.0.2`

Updates postcss from 8.4.8 to 8.4.31

Release notes

Sourced from postcss's releases.

8.4.31

Fixed \r parsing to fix CVE-2023-44270.

8.4.30

Improved source map performance (by @romainmenke).

8.4.29

Fixed Node#source.offset (by @idoros).

Fixed docs (by @coliff).

8.4.28

Fixed Root.source.end for better source map (by @romainmenke).

Fixed Result.root types when process() has no parser.

8.4.27

Fixed Container clone methods types.

8.4.26

Fixed clone methods types.

8.4.25

Improve stringify performance (by @romainmenke).

Fixed docs (by @vikaskaliramna07).

8.4.24

Fixed Plugin types.

8.4.23

Fixed warnings in TypeDoc.

8.4.22

Fixed TypeScript support with node16 (by @remcohaszing).

8.4.21

Fixed Input#error types (by @hudochenkov).

8.4.20

Fixed source map generation for childless at-rules like @layer.

8.4.19

Fixed whitespace preserving after AST transformations (by @romainmenke).

8.4.18

Fixed an error on absolute: true with empty sourceContent (by @KingSora).

8.4.17

Fixed Node.before() unexpected behavior (by @romainmenke).

Added TOC to docs (by @muddv).

8.4.16

... (truncated)

Changelog

Sourced from postcss's changelog.

8.4.31

Fixed \r parsing to fix CVE-2023-44270.

8.4.30

Improved source map performance (by Romain Menke).

8.4.29

Fixed Node#source.offset (by Ido Rosenthal).

Fixed docs (by Christian Oliff).

8.4.28

Fixed Root.source.end for better source map (by Romain Menke).

Fixed Result.root types when process() has no parser.

8.4.27

Fixed Container clone methods types.

8.4.26

Fixed clone methods types.

8.4.25

Improve stringify performance (by Romain Menke).

Fixed docs (by @vikaskaliramna07).

8.4.24

Fixed Plugin types.

8.4.23

Fixed warnings in TypeDoc.

8.4.22

Fixed TypeScript support with node16 (by Remco Haszing).

8.4.21

Fixed Input#error types (by Aleks Hudochenkov).

8.4.20

Fixed source map generation for childless at-rules like @layer.

8.4.19

Fixed whitespace preserving after AST transformations (by Romain Menke).

8.4.18

Fixed an error on absolute: true with empty sourceContent (by Rene Haas).

8.4.17

Fixed Node.before() unexpected behavior (by Romain Menke).

Added TOC to docs (by Mikhail Dedov).

8.4.16

... (truncated)

Commits

90208de Release 8.4.31 version
58cc860 Fix carrier return parsing
4fff8e4 Improve pnpm test output
cd43ed1 Update dependencies
caa916b Update dependencies
8972f76 Typo
11a5286 Typo
45c5501 Release 8.4.30 version
bc3c341 Update linter
b2be58a Merge pull request #1881 from romainmenke/improve-sourcemap-performance--phil...
Additional commits viewable in compare view

Updates semver from 5.7.1 to 5.7.2

Release notes

Sourced from semver's releases.

v5.7.2

5.7.2 (2023-07-10)

Bug Fixes

2f8fd41 #585 better handling of whitespace (#585) (@joaomoreno, @lukekarrys)

Changelog

Sourced from semver's changelog.

5.7.2 (2023-07-10)

Bug Fixes

2f8fd41 #585 better handling of whitespace (#585) (@joaomoreno, @lukekarrys)

5.7

Add minVersion method

5.6

Move boolean loose param to an options object, with backwards-compatibility protection.

Add ability to opt out of special prerelease version handling with the includePrerelease option flag.

5.5

Add version coercion capabilities

5.4

Add intersection checking

5.3

Add minSatisfying method

5.2

Add prerelease(v) that returns prerelease components

5.1

Add Backus-Naur for ranges

Remove excessively cute inspection methods

5.0

Remove AMD/Browserified build artifacts

Fix ltr and gtr when using the * range

Fix for range * with a prerelease identifier

Commits

f8cc313 chore: release 5.7.2
2f8fd41 fix: better handling of whitespace (#585)
deb5ad5 chore: @npmcli/template-oss@4.16.0
See full diff in compare view

Maintainer changes

This version was pushed to npm by lukekarrys, a new releaser for semver since your current version.

Updates @babel/traverse from 7.18.13 to 7.24.0

Release notes

Sourced from @babel/traverse's releases.

v7.24.0 (2024-02-28)

Thanks @ajihyf for your first PR!

Release post with summary and highlights: https://babeljs.io/7.24.0

🚀 New Feature

babel-standalone

#11696 Export babel tooling packages in @babel/standalone (@ajihyf)

babel-core, babel-helper-create-class-features-plugin, babel-helpers, babel-plugin-transform-class-properties

#16267 Implement noUninitializedPrivateFieldAccess assumption (@nicolo-ribaudo)

babel-helper-create-class-features-plugin, babel-helpers, babel-plugin-proposal-decorators, babel-plugin-proposal-pipeline-operator, babel-plugin-syntax-decorators, babel-plugin-transform-class-properties, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime

#16242 Support decorator 2023-11 normative updates (@JLHwung)

babel-preset-flow

#16309 [babel 7] Allow setting ignoreExtensions in Flow preset (@nicolo-ribaudo)

#16284 Add experimental_useHermesParser option in preset-flow (@liuxingbaoyu)

babel-helper-import-to-platform-api, babel-plugin-proposal-import-wasm-source, babel-plugin-proposal-json-modules, babel-standalone

#16172 Add transform support for JSON modules imports (@nicolo-ribaudo)

babel-plugin-transform-runtime

#16241 Add back moduleName option to @babel/plugin-transform-runtime (@nicolo-ribaudo)

babel-parser, babel-types

#16277 Allow import attributes for TSImportType (@sosukesuzuki)

🐛 Bug Fix

babel-plugin-proposal-do-expressions, babel-traverse

#16305 fix: avoid popContext on unvisited node paths (@JLHwung)

babel-helper-create-class-features-plugin, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object

#16312 Fix class private properties when privateFieldsAsSymbols (@liuxingbaoyu)

babel-helper-create-class-features-plugin, babel-plugin-transform-private-methods

#16307 Fix the support of arguments in private get/set method (@liuxingbaoyu)

babel-helper-create-class-features-plugin, babel-helpers, babel-plugin-proposal-decorators

#16287 Reduce decorator static property size (@liuxingbaoyu)

babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators

#16281 Fix evaluation order of decorators with cached receiver (@nicolo-ribaudo)

#16279 Fix decorator this memoization (@JLHwung)

#16266 Preserve static on decorated private accessor (@nicolo-ribaudo)

#16258 fix: handle decorated async private method and generator (@JLHwung)

babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-transform-async-generator-functions, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object, babel-plugin-transform-typescript, babel-preset-env

#16275 Fix class private properties when privateFieldsAsProperties (@liuxingbaoyu)

babel-helpers

#16268 Do not consider arguments in a helper as a global reference (@nicolo-ribaudo)

babel-helpers, babel-plugin-proposal-decorators

#16270 Handle symbol key class elements decoration (@JLHwung)

#16265 Do not define access.get for public setter decorators (@nicolo-ribaudo)

💅 Polish

babel-core, babel-helper-create-class-features-plugin, babel-preset-env

#12428 Suggest using BABEL_SHOW_CONFIG_FOR for config problems (@nicolo-ribaudo)

🏠 Internal

... (truncated)

Changelog

Sourced from @babel/traverse's changelog.

v7.24.0 (2024-02-28)

🚀 New Feature

babel-standalone

#11696 Export babel tooling packages in @babel/standalone (@ajihyf)

babel-core, babel-helper-create-class-features-plugin, babel-helpers, babel-plugin-transform-class-properties

#16267 Implement noUninitializedPrivateFieldAccess assumption (@nicolo-ribaudo)

babel-helper-create-class-features-plugin, babel-helpers, babel-plugin-proposal-decorators, babel-plugin-proposal-pipeline-operator, babel-plugin-syntax-decorators, babel-plugin-transform-class-properties, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime

#16242 Support decorator 2023-11 normative updates (@JLHwung)

babel-preset-flow

#16309 [babel 7] Allow setting ignoreExtensions in Flow preset (@nicolo-ribaudo)

#16284 Add experimental_useHermesParser option in preset-flow (@liuxingbaoyu)

babel-helper-import-to-platform-api, babel-plugin-proposal-import-wasm-source, babel-plugin-proposal-json-modules, babel-standalone

#16172 Add transform support for JSON modules imports (@nicolo-ribaudo)

babel-plugin-transform-runtime

#16241 Add back moduleName option to @babel/plugin-transform-runtime (@nicolo-ribaudo)

babel-parser, babel-types

#16277 Allow import attributes for TSImportType (@sosukesuzuki)

🐛 Bug Fix

babel-plugin-proposal-do-expressions, babel-traverse

#16305 fix: avoid popContext on unvisited node paths (@JLHwung)

babel-helper-create-class-features-plugin, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object

#16312 Fix class private properties when privateFieldsAsSymbols (@liuxingbaoyu)

babel-helper-create-class-features-plugin, babel-plugin-transform-private-methods

#16307 Fix the support of arguments in private get/set method (@liuxingbaoyu)

babel-helper-create-class-features-plugin, babel-helpers, babel-plugin-proposal-decorators

#16287 Reduce decorator static property size (@liuxingbaoyu)

babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators

#16281 Fix evaluation order of decorators with cached receiver (@nicolo-ribaudo)

#16279 Fix decorator this memoization (@JLHwung)

#16266 Preserve static on decorated private accessor (@nicolo-ribaudo)

#16258 fix: handle decorated async private method and generator (@JLHwung)

babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-transform-async-generator-functions, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object, babel-plugin-transform-typescript, babel-preset-env

#16275 Fix class private properties when privateFieldsAsProperties (@liuxingbaoyu)

babel-helpers

#16268 Do not consider arguments in a helper as a global reference (@nicolo-ribaudo)

babel-helpers, babel-plugin-proposal-decorators

#16270 Handle symbol key class elements decoration (@JLHwung)

#16265 Do not define access.get for public setter decorators (@nicolo-ribaudo)

💅 Polish

babel-core, babel-helper-create-class-features-plugin, babel-preset-env

#12428 Suggest using BABEL_SHOW_CONFIG_FOR for config problems (@nicolo-ribaudo)

🏠 Internal

babel-helper-transform-fixture-test-runner

#16278 Continue writing output.js when exec.js throws (@liuxingbaoyu)

🔬 Output optimization

... (truncated)

Commits

ce59160 v7.24.0
bd5abd5 fix: avoid popContext on unvisited node paths (#16305)
08a057c Use Object.hasOwn when available (#16248)
a0dd614 v7.23.9
1200542 fix: Don't throw in getTypeAnnotation when using TS+inference (#15383)
e428a6d v7.23.7
d292822 fix: Crash when removing without Program (#16191)
d02c1f7 v7.23.6
cce807f Bump debug to ^4.3.1 (#16164)
8479012 v7.23.5
Additional commits viewable in compare view

Removes axios

Updates @11ty/eleventy from 1.0.2 to 2.0.1

Release notes

Sourced from @11ty/eleventy's releases.

Eleventy v2.0.1: a Bug Fix Release

Eleventy v2.0.1 is now available! You can try it out in your project now:
npm install @11ty/eleventy@latest
Read more about project versus global installation.

New to Eleventy?

Eleventy is a flexible and production-ready site generator known for its zero-client JavaScript footprint, speedy sites, speedy builds, and full control over the output.

Build a blog from scratch in 6 minutes with Eleventy

Watch The State of Eleventy in Two Minutes

Read more about Eleventy’s project goals.

Features and Fixes

Fixed: this.eleventy in JavaScript template functions #2790

Fixed: lodash security audits #2877

Fixed: pagination targets with object bracket notation #2851

Fixed: 11ty.js templates were too aggressively cached on watch/serve #2839 #2838

Fixed: Handlebars partials were too aggressively cached on watch/serve #2799

Fixed: Configuration reload fixes #2864 #2869 #2867

New: Serverless pagination now works with Arrays and Objects #2853 #2544 Learn more: https://www.11ty.dev/docs/plugins/serverless/#dynamic-slugs-to-subset-your-pagination

Typo fixes by @deining in #2845

Housekeeping

Full milestone/issue list: https://github.com/11ty/eleventy/milestone/43?closed=1

Full changelog: 11ty/eleventy@v2.0.0...v2.0.1

Thank You Notes

This project would not be possible without our lovely community. Thank you to everyone that built something with Eleventy (×684 authors on our web site!), wrote a blog post about Eleventy, contributed code, wrote a plugins, helped with documentation, asked questions, answered questions, braved The Leaderboards, participated on Discord, filed issues, attended (or organized!) a meetup, said a kind word on social media ❤️.

A huge thank you to Netlify, especially: @biilmann, Chris Bach, Lauren Sell (alum), and Claire Knight, without whom this release would not have been possible.

🏆 A special thanks to @pdehaan for their tireless contributions on the Eleventy Issue tracker.

Yet more thanks to the all star Discord Moderators and Meetup Coordinators @BenDMyers, @clottman, @dleatherman, @darthmall, @nachtfunke, @siakaramalegos and @5t3ph.

All of our supporters on Open Collective ❤️

Contribute on Open Collective

How else can you contribute to Eleventy?

Open Collective Supporters

Gold Sponsors: Sanity.io, Nordhealth, CloudCannon, Transloadit

Silver Sponsors: Unabridged Software, PQINA, Bejamas, Nathan Smith, Monarch Air Group, Getform.io, Mercury Jets, OCEG

Backers: Tyler Gaw, Ariel Salminen, Peter deHaan, Melanie Sumner, Ben Nash, Alejandro Rodríguez, Mat Marquis, Philip Borenstein, Jérôme Coupé, Nicolas Hoizey, Mike Aparicio, Ben Myers, Katie Sylor-Miller, Mark Buskbjerg, mortendk, Aaron Hans, Lauris Consulting, John Meyerhofer, Todd Libby, shawn j sandy, Luke Bonaccorsi, Higby, Jenn Schiffer, Dimitrios Grammatikogiannis, Devin Clark, Eric Bailey, Manuel Matuzovic, Tim Giles, Kyosuke Nakamura, Rob Sterlini, Horacio Gonzalez, Hans Gerwitz, Makoto Kawasaki, Josh Crain, Richard Hemmer, Nick Nisi, John SJ Anderson, Ryan Swaney, Alistair Shepherd, Ivo Herrmann, Flaki, Angelique Weger, John Hall, Scott McCracken, James Steinbach, Miriam Suzanne, Bentley Davis, Ara Abcarians, vince falconi, Martin Schneider, Stephanie Eckles, Frontend Weekly Tokyo, Dorin Vancea, Chris Burnell, Ximenav Vf., Rich Holman, Kasper Storgaard, Kevin Healy, Greg Gibson, Michelle Barker, Alesandro Ortiz, David A. Herron, Paul Robert Lloyd, Andrea Vaghi, Bryan Robinson, Ashur Cabrera, Raymond Camden, John Meguerian, Joe Lamyman, Dan Ryan, Sam, Brett Nelson, Paul Welsh, Ingo Steinke, Noel Forte, Melanie Richards, Marco Zehe, Wes Ruvalcaba, Luc Poupard, Entle Web Solutions, Ken Hawkins, Fershad Irani, Nikita Dubko, Aaron Gustafson, Chris, Christian Miles, Benjamin Geese, Marcus Relacion, Netin nopeustesti, Raphael Höser, Cthos, Sia Karamalegos, Jon Kuperman, Saneef Ansari, Michel van der Kroef, Flemming Meyer, Colin Fahrion, Dan Burzo, Dan Ott, Mobilemall.pk, Cheap VPS, David Darnes, Jon Roobottom, Dana Byerly, Oisín Quinn, Renkaatsopivasti, Windesol Sähkön Kilpailutus, Luke Mitchell, SignpostMarv, THE PADDING, Bob Monsour, Richmond Insulation, Patrick Byrne, zapscribbles, Frank Reding, quinnanya, Cory Birdsong, Aram ZS, Andy Stevenson, Robin Rendle, HelppoHinta.fi, Tanner Dolby, jpoehnelt, xdesro, Alex Zappa, Richmond Concrete, Alexander Wunschik, Tom, CelineDesign, Nic Chan, Duc Lam, Stephen Bell, Robert Haselbacher, Lene, Brett DeWoody, alistairtweedie, Meta Tier List, Iva Tech, Daniel Saunders, Josh Vickerson, Dan Urbanowicz, dan leatherman, Jens Grochtdreis, CBD Review, Eric Gallager, Softermii, Eric Carlisle, Claus Conrad, Anna E. Cook, David Luhr, Matt Obee, Kiekkotorni - Nikotiinipussit

... (truncated)

Commits

e71cb94 Coverage
bbc3fc1 v2.0.1
347d41b v2.0.1-beta.2
3203e3a Update dependencies
716f65a v2.0.1-beta.1
273bf3b v2.0.1-alpha.3
916805e Publish the dependency graph in eleventy.after args
67ce615 Fixes #2754
30c7113 Custom lodash build, fixes #2877
a9323c3 Fixes #2790
Additional commits viewable in compare view

Updates liquidjs from 9.43.0 to 10.10.1

Release notes

Sourced from liquidjs's releases.

v10.10.1

10.10.1 (2024-02-18)

Bug Fixes

in conditionals, don't render anything after an else branch (#671) (f816955)

Rely on equal for computing contains (#668) (1937aa1)

v10.10.0

10.10.0 (2023-12-19)

Features

Array sum filter (#661) (629d958)

v10.9.4

10.9.4 (2023-11-04)

Bug Fixes

allow unicode to be identifiers, fixes #655 (dd7616a)

v10.9.3

10.9.3 (2023-10-15)

Bug Fixes

package version in released files (67a5b22)

v10.9.2

10.9.2 (2023-08-28)

Bug Fixes

handle windows newlines on newline_to_br and strip_newlines (88aa63f)

sort and where bug when using strictVariables (8af682d)

v10.9.1

10.9.1 (2023-08-23)

Bug Fixes

map filter allow nil results in strict mode, fixes #647 (45adbd7)

... (truncated)

Changelog

Sourced from liquidjs's changelog.

10.10.1 (2024-02-18)

Bug Fixes

in conditionals, don't render anything after an else branch (#671) (f816955)

Rely on equal for computing contains (#668) (1937aa1)

10.10.0 (2023-12-19)

Features

Array sum filter (#661) (629d958)

10.9.4 (2023-11-04)

Bug Fixes

allow unicode to be identifiers, fixes #655 (dd7616a)

10.9.3 (2023-10-15)

Bug Fixes

package version in released files (67a5b22)

10.9.2 (2023-08-28)

Bug Fixes

handle windows newlines on newline_to_br and strip_newlines (88aa63f)

sort and where bug when using strictVariables (8af682d)

10.9.1 (2023-08-23)

Bug Fixes

map filter allow nil results in strict mode, fixes #647 (45adbd7)

10.9.0 (2023-08-22)

Bug Fixes

case should allow multiple values separated by or (b8e7e2d)

... (truncated)

Commits

902a8e4 chore(release): 10.10.1 [skip ci]
08421ea docs: add joel-hamilton as a contributor for code (#674)
f816955 fix: in conditionals, don't render anything after an else branch (#671)
1937aa1 fix: Rely on equal for computing contains (#668)
4518a19 docs: update .all-contributorsrc [skip ci]
dafdfbc docs: update README.md [skip ci]
3632623 chore: adjust typings dir
85f5b32 docs: add brunodccarvalho as a contributor for code (#662)
9347586 chore(release): 10.10.0 [skip ci]
629d958 feat: Array sum filter (#661)
Additional commits viewable in compare view

Updates nunjucks from 3.2.3 to 3.2.4

Release notes

Sourced from nunjucks's releases.

v3.2.4

What's Changed

fix: html encode backslashes if used with escape filter or autoescape by @fdintino in mozilla/nunjucks#1437. Fixes CVE-2023-2142 ([bugzilla #1825980](https://bugzilla.mozilla.org/show_bug.cgi?id=1825980))

Full Changelog: mozilla/nunjucks@v3.2.3...v3.2.4

Changelog

Sourced from nunjucks's changelog.

3.2.4 (Apr 13 2023)

HTML encode backslashes when expressions are passed through the escape filter (including when this is done automatically with autoescape). Merge of #1437.

Commits

86a77f4 Release v3.2.4
ec16d21 fix: html encode backslashes if used with escape filter or autoescape (#1437)
See full diff in compare view

Updates sharp from 0.30.6 to 0.33.2

Changelog

Sourced from sharp's changelog.

v0.33.2 - 12th January 2024

Upgrade to libvips v8.15.1 for upstream bug fixes.

TypeScript: add definition for keepMetadata. #3914 @abhi0498

Ensure extend operation stays sequential when copying (regression in 0.32.0). #3928

Improve error handling for unsupported multi-page rotation. #3940

v0.33.1 - 17th December 2023

Add support for Yarn Plug'n'Play filesystem layout. #3888

Emit warning when attempting to use invalid ICC profiles. #3895

Ensure VIPS_NOVECTOR environment variable is respected. #3897 @icetee

v0.33.0 - 29th November 2023

Drop support for Node.js 14 and 16, now requires Node.js ^18.17.0 or >= 20.3.0

Prebuilt binaries distributed via npm registry and installed via package manager.

Building from source requires dependency on node-addon-api.

Remove sharp.vendor.

Partially deprecate withMetadata(), use withExif() and withIccProfile().

Add experimental support for WebAssembly-based runtimes. @RReverser

Options for trim operation must be an Object, add new lineArt option. #2363

Improve luminance of tint operation with weighting function. #3338 @jcupitt

Ensure all Error objects contain a stack property. #3653

... (truncated)

Commits

bcb22af Release v0.33.2
d04dc62 Prerelease v0.33.2-rc.1
c30d355 CI: Fix npm smoke test expectation
49cb148 Prerelease v0.33.2-rc.0
3bc31a8 CI: Verify emscripten versions match
c28523e CI: Update Emscripten Docker image to 3.1.51 (#3907)
278f393 Upgrade to libvips v8.15.1
cbf68c1 Improve error for unsupported multi-page rotation #3940
45e8071 Add runtime check for outdated Node.js version
b96389d Docs: refresh index
Additional commits viewable in compare view

Updates @11ty/eleventy-img from 1.1.0 to 4.0.2

Release notes

Sourced from @11ty/eleventy-img's releases.

Eleventy Image v4.0.0

Full Milestone: https://github.com/11ty/eleventy-img/milestone/20?closed=1 Full Changelog: 11ty/eleventy-img@v3.1.8...v4.0.0

Install / Upgrade
npm install @11ty/eleventy-img@latest
What's Changed

BREAKING Node.js minimum is now 18+.

Adds fixOrientation option (default: false) to rotate images to ensure correct orientation by @nosecreek in 11ty/eleventy-img#158

Adds minimumThreshold (default: 1.25) option to ensure original size is included if smaller than largest specified width by threshold amount, help from @JaredReisinger in 11ty/eleventy-img#190

Adds new Eleventy Transform plugin (compatible with Eleventy v3.0.0-alpha.5 or newer) for zero-configuration image optimization #208

Fix incorrectly large reported height for animated gifs by @Gyanreyer in 11ty/eleventy-img#182

Make gif eligible for lowest priority source by @GHF in 11ty/eleventy-img#195

Bake input orientation into output image by @GHF in 11ty/eleventy-img#194

Use srcset and sizes on img element in picture by @adamwolf in 11ty/eleventy-img#191

Create directories on demand when writing images to disk by @danburzo in 11ty/eleventy-img#176

New Contributors

@Gyanreyer

@nosecreek

@GHF

@adamwolf

@JaredReisinger

@danburzo

Eleventy Image v3.1.8: svgShortCircuit: "size"

Full Changelog: 11ty/eleventy-img@v3.1.0...v3.1.8

Adds support for the new svgShortCircuit: "size" option (with svgCompressionSize: "br" to use Brotli compressed sizes for comparison).

Read more: Eleventy Image: Options for SVG

Eleventy Image v3.1.1: sharp upgrade

Full Changelog: 11ty/eleventy-img@v3.1.0...v3.1.1 Milestone: https://github.com/11ty/eleventy-img/milestone/19?closed=1

🚨 Important if you’re using this package with untrusted images. Upgrades sharp version for libwebp vulnerability fix, see lovell/sharp#3798

Read way more detail on the WebP 0-day.

Eleventy Image v3.1.0: WebC component, sharp upgrade

Full Changelog: 11ty/eleventy-img@v3.0.0...v3.1.0 Milestone: https://github.com/11ty/eleventy-img/milestone/18?closed=1

Release Notes

Adds <eleventy-image> WebC component, now on the docs: https://www.11ty.dev/docs/plugins/image/#webc

... (truncated)

Commits

d9723c5 CI
3443ed6 Upgrade eslint
0dcdc9f Eslint fixes
ee44866 v4.0.2
3327556 Explicit require target
4c62cfc Small refactor
d29b521 v4.0.1
9ed57b7 Fix issue with default attributes removed after use. #208
e89e0c1 Breaking: bump Node minimum to 18. Fixes #209
4b1f4b0 Revert "Downgrade ava to 5.x temporarily so we don’t have to change the Node ...
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase wil...

Description has been truncated

Bumps the npm_and_yarn group group with 9 updates: | Package | From | To | | --- | --- | --- | | [postcss](https://github.com/postcss/postcss) | `8.4.8` | `8.4.31` | | [semver](https://github.com/npm/node-semver) | `5.7.1` | `5.7.2` | | [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.18.13` | `7.24.0` | | [axios](https://github.com/axios/axios) | `0.21.4` | `` | | [@11ty/eleventy](https://github.com/11ty/eleventy) | `1.0.2` | `2.0.1` | | [liquidjs](https://github.com/harttle/liquidjs) | `9.43.0` | `10.10.1` | | [nunjucks](https://github.com/mozilla/nunjucks) | `3.2.3` | `3.2.4` | | [sharp](https://github.com/lovell/sharp) | `0.30.6` | `0.33.2` | | [@11ty/eleventy-img](https://github.com/11ty/eleventy-img) | `1.1.0` | `4.0.2` | Updates `postcss` from 8.4.8 to 8.4.31 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.4.8...8.4.31) Updates `semver` from 5.7.1 to 5.7.2 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/v5.7.2/CHANGELOG.md) - [Commits](npm/node-semver@v5.7.1...v5.7.2) Updates `@babel/traverse` from 7.18.13 to 7.24.0 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.24.0/packages/babel-traverse) Removes `axios` Updates `@11ty/eleventy` from 1.0.2 to 2.0.1 - [Release notes](https://github.com/11ty/eleventy/releases) - [Changelog](https://github.com/11ty/eleventy/blob/main/docs/release-instructions.md) - [Commits](11ty/eleventy@v1.0.2...v2.0.1) Updates `liquidjs` from 9.43.0 to 10.10.1 - [Release notes](https://github.com/harttle/liquidjs/releases) - [Changelog](https://github.com/harttle/liquidjs/blob/master/CHANGELOG.md) - [Commits](harttle/liquidjs@v9.43.0...v10.10.1) Updates `nunjucks` from 3.2.3 to 3.2.4 - [Release notes](https://github.com/mozilla/nunjucks/releases) - [Changelog](https://github.com/mozilla/nunjucks/blob/master/CHANGELOG.md) - [Commits](mozilla/nunjucks@v3.2.3...v3.2.4) Updates `sharp` from 0.30.6 to 0.33.2 - [Release notes](https://github.com/lovell/sharp/releases) - [Changelog](https://github.com/lovell/sharp/blob/main/docs/changelog.md) - [Commits](lovell/sharp@v0.30.6...v0.33.2) Updates `@11ty/eleventy-img` from 1.1.0 to 4.0.2 - [Release notes](https://github.com/11ty/eleventy-img/releases) - [Commits](11ty/eleventy-img@v1.1.0...v4.0.2) --- updated-dependencies: - dependency-name: postcss dependency-type: direct:development dependency-group: npm_and_yarn-security-group - dependency-name: semver dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: "@babel/traverse" dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: axios dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: "@11ty/eleventy" dependency-type: direct:development dependency-group: npm_and_yarn-security-group - dependency-name: liquidjs dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: nunjucks dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: sharp dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: "@11ty/eleventy-img" dependency-type: direct:development dependency-group: npm_and_yarn-security-group ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot · 2024-05-02T06:04:05Z

Superseded by #51.

dependabot bot added the dependencies Pull requests that update a dependency file label Feb 29, 2024

dependabot bot closed this May 2, 2024

dependabot bot deleted the dependabot/npm_and_yarn/npm_and_yarn-security-group-fff0a608b7 branch May 2, 2024 06:04

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the npm_and_yarn group group with 9 updates #46

Bump the npm_and_yarn group group with 9 updates #46

dependabot bot commented on behalf of github Feb 29, 2024

dependabot bot commented on behalf of github May 2, 2024

Bump the npm_and_yarn group group with 9 updates #46

Bump the npm_and_yarn group group with 9 updates #46

Conversation

dependabot bot commented on behalf of github Feb 29, 2024

8.4.31

8.4.30

8.4.29

8.4.28

8.4.27

8.4.26

8.4.25

8.4.24

8.4.23

8.4.22

8.4.21

8.4.20

8.4.19

8.4.18

8.4.17

8.4.16

8.4.31

8.4.30

8.4.29

8.4.28

8.4.27

8.4.26

8.4.25

8.4.24

8.4.23

8.4.22

8.4.21

8.4.20

8.4.19

8.4.18

8.4.17

8.4.16

v5.7.2

5.7.2 (2023-07-10)

Bug Fixes

5.7.2 (2023-07-10)

Bug Fixes

5.7

5.6

5.5

5.4

5.3

5.2

5.1

5.0

v7.24.0 (2024-02-28)

🚀 New Feature

🐛 Bug Fix

💅 Polish

🏠 Internal

v7.24.0 (2024-02-28)

🚀 New Feature

🐛 Bug Fix

💅 Polish

🏠 Internal

🔬 Output optimization

Eleventy v2.0.1: a Bug Fix Release

New to Eleventy?

Features and Fixes

Housekeeping

Thank You Notes

Open Collective Supporters

v10.10.1

10.10.1 (2024-02-18)

Bug Fixes

v10.10.0

10.10.0 (2023-12-19)

Features

v10.9.4

10.9.4 (2023-11-04)

Bug Fixes

v10.9.3

10.9.3 (2023-10-15)

Bug Fixes

v10.9.2

10.9.2 (2023-08-28)

Eleventy Image v3.1.8: `svgShortCircuit: "size"`

Eleventy Image v3.1.1: `sharp` upgrade

Eleventy Image v3.1.0: WebC component, `sharp` upgrade