chore(deps): update all non-major dependencies #17
+245
−206
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
chenjiahan
approved these changes
Dec 1, 2024
renovate
bot
force-pushed
the
renovate/all-minor-patch
branch
7 times, most recently
from
c6d4620 to
751e6f1
Compare
renovate
bot
force-pushed
the
renovate/all-minor-patch
branch
4 times, most recently
from
5e3d79f to
8a9ab44
Compare
renovate
bot
force-pushed
the
renovate/all-minor-patch
branch
6 times, most recently
from
6f7a5d5 to
29c889b
Compare
renovate
bot
force-pushed
the
renovate/all-minor-patch
branch
from
29c889b to
d535439
Compare
renovate
bot
force-pushed
the
renovate/all-minor-patch
branch
from
d535439 to
e265127
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^1.5.2->^1.5.3^0.0.16->^0.2.21.0.14->1.1.81.0.14->1.1.80.5.13->0.5.15^5.0.0->^5.0.2^22.8.6->^22.10.29.5.1->9.5.29.12.3->9.15.1^10.24.3->^10.25.35.6.3->5.7.2Release Notes
preactjs/prefresh (@prefresh/core)
v1.5.3Compare Source
Patch Changes
06f97ac#559 Thanks @JoviDeCroock! - Avoid memory leak by not registering built-in typesweb-infra-dev/rslib (@rslib/core)
v0.2.2Compare Source
What's Changed
Other Changes
Full Changelog: web-infra-dev/rslib@v0.2.1...v0.2.2
v0.2.1Compare Source
What's Changed
Bug Fixes 🐞
Other Changes
Full Changelog: web-infra-dev/rslib@v0.2.0...v0.2.1
v0.2.0Compare Source
What's Changed
Highlights ✨
Comparing with 0.1.0, we have fixed many bugs and added numerous features for common scenarios, including but not limited to:
rslib.configto trigger rebuilds. (#489)Breaking changes 🚨
rslib mf devhas been changed torslib mf-devcommand in #590, checkout the documentation ofmf-devfor more details.New Features 🎉
--libparam ofmf-devcommand by @Timeless0911 in https://github.com/web-infra-dev/rslib/pull/590Bug Fixes 🐞
Document 📖
Other Changes
index, mainFiles can be not specified by @SoonIter in https://github.com/web-infra-dev/rslib/pull/587Full Changelog: web-infra-dev/rslib@v0.1.5...v0.2.0
v0.1.5Compare Source
What's Changed
New Features 🎉
Bug Fixes 🐞
Document 📖
Other Changes
Full Changelog: web-infra-dev/rslib@v0.1.4...v0.1.5
v0.1.4Compare Source
What's Changed
New Features 🎉
autoExternaldefault tofalsewhenformatisumdormfby @Timeless0911 in https://github.com/web-infra-dev/rslib/pull/531Bug Fixes 🐞
storybook-addon-rslibin pnpm by @Timeless0911 in https://github.com/web-infra-dev/rslib/pull/557Document 📖
Other Changes
Full Changelog: web-infra-dev/rslib@v0.1.3...v0.1.4
v0.1.3Compare Source
What's Changed
New Features 🎉
Bug Fixes 🐞
react-jsxby @chenjiahan in https://github.com/web-infra-dev/rslib/pull/516Document 📖
resolvefield of Rsbuild config by @Timeless0911 in https://github.com/web-infra-dev/rslib/pull/517Other Changes
Full Changelog: web-infra-dev/rslib@v0.1.2...v0.1.3
v0.1.2Compare Source
What's Changed
Performance 🚀
Bug Fixes 🐞
Document 📖
Other Changes
resolve.aliasinstead ofsource.aliasby @Timeless0911 in https://github.com/web-infra-dev/rslib/pull/507Full Changelog: web-infra-dev/rslib@v0.1.1...v0.1.2
v0.1.1Compare Source
What's Changed
New Features 🎉
rslib.configto rebuild by @9aoy in https://github.com/web-infra-dev/rslib/pull/489Bug Fixes 🐞
Document 📖
Other Changes
Full Changelog: web-infra-dev/rslib@v0.1.0...v0.1.1
v0.1.0Compare Source
What's Changed
New Features 🎉
--rootcli option and make basic js api work by @Timeless0911 in https://github.com/web-infra-dev/rslib/pull/453distinstead ofdist/static/cssby @chenjiahan in https://github.com/web-infra-dev/rslib/pull/460Bug Fixes 🐞
autoExtension: falsealong withoutput.filename.jsby @Timeless0911 in https://github.com/web-infra-dev/rslib/pull/455Document 📖
Other Changes
New Contributors
Full Changelog: web-infra-dev/rslib@v0.0.18...v0.1.0
v0.0.18Compare Source
What's Changed
Bug Fixes 🐞
Document 📖
Other Changes
Full Changelog: web-infra-dev/rslib@v0.0.17...v0.0.18
v0.0.17Compare Source
What's Changed
New Features 🎉
nodeby @Timeless0911 in https://github.com/web-infra-dev/rslib/pull/398Bug Fixes 🐞
Document 📖
Other Changes
New Contributors
Full Changelog: web-infra-dev/rslib@v0.0.16...v0.0.17
web-infra-dev/rspack (@rspack/core)
v1.1.8Security Vulnerability Report
Overview
This is a re-release version of v1.1.6
On 12/19/2024, 02:01 (UTC), we discovered that our npm packages
@rspack/coreand@rspack/cliwere maliciously attacked. The attacker releasedv1.1.7using a compromised npm token, which contained malicious code. We took immediate action upon discovering the issue.Impact
@rspack/coreand@rspack/cliv1.1.7package.jsonruns malicious code indist/util/support.js. See Malicious code analysis for more details.Actions Taken
Upon discovery, we immediately deprecated the affected
v1.1.7, redirected the npm latest tag tov1.1.6, and reset all related tokens.Subsequently, we released a secure new version
v1.1.8.Recommended Actions
If you installed
v1.1.7during the affected period, please:@rspack/coreand@rspack/clito>= 1.1.8Apology and Commitment
We deeply apologize for the risks caused by this incident. To prevent similar incidents from happening again, we will implement stricter token management protocols and enhance our security review processes.
If you have any questions or discover any suspicious activity, please create an issue or send an email to: [email protected]
We will continue to follow and respond to community feedback.
v1.1.6Compare Source
What's Changed
Highlights 💡
Reduced memory usage
Rspack's memory usage in large projects has been significantly reduced since v1.1.6:
Related PRs:
RuntimeModuleby @h-a-n-a in https://github.com/web-infra-dev/rspack/pull/8620Performance Improvements ⚡
RawSourcewith smallerRawStringSourceandRawBufferSourceby @h-a-n-a in https://github.com/web-infra-dev/rspack/pull/8629Exciting New Features 🎉
output.trustedTypes.onPolicyCreationFailureby @LingyuCoder in https://github.com/web-infra-dev/rspack/pull/8619getResolvein external function context by @fi3ework in https://github.com/web-infra-dev/rspack/pull/8577Bug Fixes 🐞
Configuration
📅 Schedule: Branch creation - "* 0-3 1 * *" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.