Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(bit): update deps that have vulnerabilities #8804

Draft
wants to merge 45 commits into
base: master
Choose a base branch
from

Commits on Apr 19, 2024

  1. fix vulnerabilities (1)

    luvkapur committed Apr 19, 2024
    Configuration menu
    Copy the full SHA
    7b5301a View commit details
    Browse the repository at this point in the history

Commits on Apr 30, 2024

  1. sync with origin/master

    luvkapur committed Apr 30, 2024
    Configuration menu
    Copy the full SHA
    154dbf9 View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    6795d1a View commit details
    Browse the repository at this point in the history
  3. bump react dev utils

    luvkapur committed Apr 30, 2024
    Configuration menu
    Copy the full SHA
    8bc5bb6 View commit details
    Browse the repository at this point in the history

Commits on May 3, 2024

  1. shorten the capsule dir (#8827)

    The capsule base-dir is normally a `sha1` of the workspace/scope dir,
    which is 40 chars long. Problem is that Windows is not happy with long
    paths.
    This PR uses a shorter hash. The number 9 is pretty random, it's what we
    use for short-hash of snaps.
    We're aware of an extremely low risk of collision. Keep in mind that in
    most cases you won't have more than 10 capsules in the machine, so it's
    fine.
    davidfirst authored and luvkapur committed May 3, 2024
    Configuration menu
    Copy the full SHA
    0a813cf View commit details
    Browse the repository at this point in the history
  2. improvement(sign), introduce a new flag --save-locally to make debugg…

    …ing easier (#8828)
    
    With this flag, no need to push to the remote in order to investigate
    the `Version` object changes.
    davidfirst authored and luvkapur committed May 3, 2024
    Configuration menu
    Copy the full SHA
    6880f74 View commit details
    Browse the repository at this point in the history
  3. fix(checkout-reset), reset component.json if exists locally (#8826)

    currently, if there are local changes in the component.json (generated
    by `bit config eject-conf`), then `bit checkout reset` doesn't reset
    them. It leaves the file as is.
    This PR refactors the way how this component.json file is saved to reuse
    the infrastructure we had for package.json (with indent and EOL taken
    into account). With this, it was easier to change the component-written
    command to make sure this file is written if it was there before.
    davidfirst authored and luvkapur committed May 3, 2024
    Configuration menu
    Copy the full SHA
    d4ecc8d View commit details
    Browse the repository at this point in the history
  4. sync with origin/master

    luvkapur committed May 3, 2024
    Configuration menu
    Copy the full SHA
    9d63c7b View commit details
    Browse the repository at this point in the history
  5. bump teambit version to 1.6.146 [skip ci]

    CircleCI authored and luvkapur committed May 3, 2024
    Configuration menu
    Copy the full SHA
    f09d698 View commit details
    Browse the repository at this point in the history
  6. remove envs from workspace.jsonc#generators.envs when they got remove…

    …d by "bit remove" (#8829)
    davidfirst authored and luvkapur committed May 3, 2024
    Configuration menu
    Copy the full SHA
    6fb1a3e View commit details
    Browse the repository at this point in the history
  7. fix(remove), block removal of new aspects that are used by other comp…

    …onents (#8830)
    
    Otherwise, the components that depend on these removed aspects are
    trying to load them, find out they don't exists, then trying to import
    them and throw an error "unable to import".
    Because these removed aspects are new, there is no easy way to fix this.
    It's impossible to install them as packages.
    This PR blocks it unless `--force` flag was used.
    davidfirst authored and luvkapur committed May 3, 2024
    Configuration menu
    Copy the full SHA
    7507bbf View commit details
    Browse the repository at this point in the history
  8. Configuration menu
    Copy the full SHA
    8fcc37a View commit details
    Browse the repository at this point in the history
  9. fix(create), block using component-name with the same name as the tem…

    …plate name (#8831)
    
    Otherwise, the code might have a class that extends itself. 
    For example, `bit create node-env node-env` produces `class NodeEnv
    extends NodeEnv`.
    Or `bit create react-env envs/react-env --aspect
    teambit.react/react-env` produces `class ReactEnv extends ReactEnv`.
    davidfirst authored and luvkapur committed May 3, 2024
    Configuration menu
    Copy the full SHA
    6fc6925 View commit details
    Browse the repository at this point in the history
  10. improve merge-error message (#8833)

    remove the duplicate "error".
    davidfirst authored and luvkapur committed May 3, 2024
    Configuration menu
    Copy the full SHA
    4ac59ff View commit details
    Browse the repository at this point in the history
  11. bump @teambit/legacy version to 1.0.690 [skip ci]

    CircleCI authored and luvkapur committed May 3, 2024
    Configuration menu
    Copy the full SHA
    09708ff View commit details
    Browse the repository at this point in the history
  12. bump teambit version to 1.6.147 [skip ci]

    CircleCI authored and luvkapur committed May 3, 2024
    Configuration menu
    Copy the full SHA
    ddd6fe7 View commit details
    Browse the repository at this point in the history
  13. feat(lanes), introduce a new sub-command "merge-move" (#8834)

    This command is useful when you got a messy merge state that from one
    hand you don't want to loose the changes, but on the other hand, you
    want to keep your lane without those changes.
    This command does the following:
    1. create a new lane with the current merge state. including all the
    filesystem changes. (in practice, it leaves the fs intact).
    2. reset the current lane to the state before the merge, so then once
    done with the new lane, you can switch to the current lane and it'll be
    clean.
    davidfirst authored and luvkapur committed May 3, 2024
    Configuration menu
    Copy the full SHA
    b4b9675 View commit details
    Browse the repository at this point in the history
  14. improvement(status), show all soft-tagged in a dedicated category (#8835

    )
    
    Also, when a component has issues, replace the " ... ok" with "...
    issues found".
    davidfirst authored and luvkapur committed May 3, 2024
    Configuration menu
    Copy the full SHA
    1c78c9c View commit details
    Browse the repository at this point in the history
  15. bump @teambit/legacy version to 1.0.691 [skip ci]

    CircleCI authored and luvkapur committed May 3, 2024
    Configuration menu
    Copy the full SHA
    b733dc7 View commit details
    Browse the repository at this point in the history
  16. bump teambit version to 1.6.148 [skip ci]

    CircleCI authored and luvkapur committed May 3, 2024
    Configuration menu
    Copy the full SHA
    b070de4 View commit details
    Browse the repository at this point in the history
  17. bump teambit version to 1.6.149 [skip ci]

    CircleCI authored and luvkapur committed May 3, 2024
    Configuration menu
    Copy the full SHA
    9c04295 View commit details
    Browse the repository at this point in the history
  18. bump teambit version to 1.6.150 [skip ci]

    CircleCI authored and luvkapur committed May 3, 2024
    Configuration menu
    Copy the full SHA
    7a577e8 View commit details
    Browse the repository at this point in the history
  19. improvement(import), allow importing main components with wildcard wh…

    …en on a lane (#8836)
    
    We used to throw an error suggesting the user to import the components
    individually. The reason was that when you're on a lane, you probably
    want to import components from the lane. not main. That's why when the
    wildcard matches both, lane and main, only the lane are imported.
    However, if only components from main are matched, it's not very clear
    whether you really want to import from lane, or your wildcard syntax
    didn't bring the results you thought it would.
    With this PR we assume that in this case you do want to import from main
    so we let you do that.
    davidfirst authored and luvkapur committed May 3, 2024
    Configuration menu
    Copy the full SHA
    cd92e69 View commit details
    Browse the repository at this point in the history
  20. preparation for performance improvement by asking server for existenc…

    …e of objects rather than trying to fetch them (#8839)
    
    This will be actually used once remotes are updated and support the new
    GraphQL query.
    davidfirst authored and luvkapur committed May 3, 2024
    Configuration menu
    Copy the full SHA
    131dfea View commit details
    Browse the repository at this point in the history
  21. add a graphql query to get bit version of the remote scope (#8840)

    Once deployed on the remote scopes, it can help a client in negotiating
    with the server and adjusting API compatibility.
    davidfirst authored and luvkapur committed May 3, 2024
    Configuration menu
    Copy the full SHA
    ac73a8c View commit details
    Browse the repository at this point in the history
  22. Configuration menu
    Copy the full SHA
    eddf1db View commit details
    Browse the repository at this point in the history
  23. bump @teambit/legacy version to 1.0.692 [skip ci]

    CircleCI authored and luvkapur committed May 3, 2024
    Configuration menu
    Copy the full SHA
    8da99ae View commit details
    Browse the repository at this point in the history
  24. Configuration menu
    Copy the full SHA
    d7b528a View commit details
    Browse the repository at this point in the history
  25. update lock file

    GiladShoham authored and luvkapur committed May 3, 2024
    Configuration menu
    Copy the full SHA
    1c5b245 View commit details
    Browse the repository at this point in the history
  26. fix(scope-rename), replace aspects properly in workspace.jsonc (#8842)

    When the `bit scope-rename` (or `bit rename`) suppose to change multiple
    values in the workspace.jsonc, it was changing only the first one.
    davidfirst authored and luvkapur committed May 3, 2024
    Configuration menu
    Copy the full SHA
    11e3de9 View commit details
    Browse the repository at this point in the history
  27. add a new component-issue "Import From Directory" suggesting to impor…

    …t from specific files (#8806)
    davidfirst authored and luvkapur committed May 3, 2024
    Configuration menu
    Copy the full SHA
    b0b04c8 View commit details
    Browse the repository at this point in the history
  28. feat(delete), introduce --range flag to delete tags of a specific ran…

    …ge (#8844)
    
    Similar to `bit deprecate --range`, this new flag allows deleting
    specific tags. For example `bit delete my-comp --range 0.0.1`. It marks
    0.0.1 only as deleted.
    This is supported in `bit log`. It's also shown in the `bit import` and `bit show` output. 
    For example, when running `bit show [email protected]` the "removed" is false. 
    However, `bit show [email protected]` shows it as true. It also shows the range.
    davidfirst authored and luvkapur committed May 3, 2024
    Configuration menu
    Copy the full SHA
    31f8ca7 View commit details
    Browse the repository at this point in the history
  29. bump @teambit/legacy version to 1.0.693 [skip ci]

    CircleCI authored and luvkapur committed May 3, 2024
    Configuration menu
    Copy the full SHA
    1497ac8 View commit details
    Browse the repository at this point in the history
  30. bump teambit version to 1.6.152 [skip ci]

    CircleCI authored and luvkapur committed May 3, 2024
    Configuration menu
    Copy the full SHA
    b1c037e View commit details
    Browse the repository at this point in the history
  31. feat, support using .gitignore file in the component root-dir (#8847)

    Until now, `.gitignore` files were always ignored by default and never
    tracked by Bit.
    
    ## Proposed Changes
    
    - track `.gitignore` files. This way, when multiple users import the
    same component and using different git repos, they could use the same
    .gitignore file.
    - in case `.gitignore` is found in the component root-dir, Bit reads it
    and uses it to untrack component files.
    - in case `.bitignore` is found in the component root-dir in addition to
    `.gitignore`, the `.bitignore` takes precedence and is used to untrack
    component files. (still, `.gitignore` itself is tracked). This way, it's
    possible to have different patterns/rules for bit and git.
    - until now, bit was searching for the `.gitignore` of the
    workspace-root, now only in the workspace-root, but also upwards until
    it finds it. This is unintuitive and can cause confusion. It was changed
    to use only the one in the workspace root.
    davidfirst authored and luvkapur committed May 3, 2024
    Configuration menu
    Copy the full SHA
    153019a View commit details
    Browse the repository at this point in the history
  32. refactor, remove tsconfig-writer (#8846)

    This is done via `bit ws-config` for awhile now
    davidfirst authored and luvkapur committed May 3, 2024
    Configuration menu
    Copy the full SHA
    84504f8 View commit details
    Browse the repository at this point in the history
  33. Configuration menu
    Copy the full SHA
    527ae75 View commit details
    Browse the repository at this point in the history
  34. Configuration menu
    Copy the full SHA
    23de2c3 View commit details
    Browse the repository at this point in the history
  35. bump @teambit/legacy version to 1.0.694 [skip ci]

    CircleCI authored and luvkapur committed May 3, 2024
    Configuration menu
    Copy the full SHA
    24478c3 View commit details
    Browse the repository at this point in the history
  36. bump teambit version to 1.6.153 [skip ci]

    CircleCI authored and luvkapur committed May 3, 2024
    Configuration menu
    Copy the full SHA
    9290f9f View commit details
    Browse the repository at this point in the history
  37. feat: unset-peer (#8843)

    zkochan authored and luvkapur committed May 3, 2024
    Configuration menu
    Copy the full SHA
    1faec8f View commit details
    Browse the repository at this point in the history
  38. Configuration menu
    Copy the full SHA
    2c95fc7 View commit details
    Browse the repository at this point in the history
  39. bump @teambit/legacy version to 1.0.695 [skip ci]

    CircleCI authored and luvkapur committed May 3, 2024
    Configuration menu
    Copy the full SHA
    16948a3 View commit details
    Browse the repository at this point in the history
  40. bump teambit version to 1.6.154 [skip ci]

    CircleCI authored and luvkapur committed May 3, 2024
    Configuration menu
    Copy the full SHA
    72ef871 View commit details
    Browse the repository at this point in the history
  41. sync with origin/master

    luvkapur committed May 3, 2024
    Configuration menu
    Copy the full SHA
    8933ca3 View commit details
    Browse the repository at this point in the history