Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Bump serialize-javascript, @storybook/addon-essentials, webpack and @storybook/svelte #48

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Feb 11, 2025

Bumps serialize-javascript to 6.0.2 and updates ancestor dependencies serialize-javascript, @storybook/addon-essentials, webpack and @storybook/svelte. These dependencies need to be updated together.

Updates serialize-javascript from 4.0.0 to 6.0.2

Release notes

Sourced from serialize-javascript's releases.

v6.0.2

  • fix: serialize URL string contents to prevent XSS (#173) f27d65d
  • Bump @​babel/traverse from 7.10.1 to 7.23.7 (#171) 02499c0
  • docs: update readme with URL support (#146) 0d88527
  • chore: update node version and lock file e2a3a91
  • fix typo (#164) 5a1fa64

yahoo/serialize-javascript@v6.0.1...v6.0.2

v6.0.1

What's Changed

New Contributors

Full Changelog: yahoo/serialize-javascript@v6.0.0...v6.0.1

v6.0.0

Changelog

  • Add support for URL's (#123)
  • Bump mocha from 9.0.0 to 9.0.1 (#124)
  • Bump mocha from 8.4.0 to 9.0.0 (#121)
  • Update Node.js CI matrix (#122)
  • Bump mocha from 8.3.2 to 8.4.0 (#120)
  • Bump lodash from 4.17.19 to 4.17.21 (#119)
  • Bump y18n from 4.0.0 to 4.0.1 (#116)
  • Bump chai from 4.3.3 to 4.3.4 (#115)

... (truncated)

Commits

Updates @storybook/addon-essentials from 6.3.8 to 6.5.16

Changelog

Sourced from @​storybook/addon-essentials's changelog.

  • MDX: Upgrade csf-mdx libraries (#18300)
  • security: update x-default-browser (#18157)

6.5.0-rc.1 (May 18, 2022)

Bug Fixes

  • CLI: Improve webpack version and add detection of nextjs (#18220)
  • ArgsTable: Gracefully handle conditional args failures (#18248)
  • Controls: Fix reset button broken for !undefined URL values (#18231)
  • Vue3: Add support for TSX in single file components (#18038)

6.5.0-rc.0 (May 17, 2022)

Features

  • Addon-a11y: Show % of users in toolbar menu (#18003)

Bug Fixes

  • Web-components: Clean Lit Expression comments in story source (#18108)
  • Vue: Map args correctly in CSF3 implicit render function (#18209)
  • Vue3: Fix CSF3 implicit render function when storyStoreV7 is enabled (#18208

Maintenance

  • CLI: Don't throw is Ctrl + C was pressed when selecting a package in the build command (#18195)
  • Build: Cleanup noise from unit tests (#18196)

Dependency Upgrades

  • Fixed PnP compatibility for bundled components package (#18015)

6.5.0-beta.8 (May 11, 2022)

Bug Fixes

  • Composition: Fix metadata.json incorrectly overriding main.js refs versions (#18185)

Maintenance

  • Examples: Set channelOptions to disallow function serialization (#18071)

Dependency Upgrades

  • Upgrade to telejson 6 (#18164)

6.5.0-beta.7 (May 9, 2022)

Features

... (truncated)

Commits

Updates webpack from 4.46.0 to 5.97.1

Release notes

Sourced from webpack's releases.

v5.97.1

Bug Fixes

  • Performance regression
  • Sub define key should't be renamed when it's a defined variable

v5.97.0

Bug Fixes

  • Don't crash with filesystem cache and unknown scheme
  • Generate a valid code when output.iife is true and output.library.type is umd
  • Fixed conflict variable name with concatenate modules and runtime code
  • Merge duplicate chunks before
  • Collisions in ESM library
  • Use recursive search for versions of shared dependencies
  • [WASM] Don't crash WebAssembly with Reference Types (sync and async)
  • [WASM] Fixed wasm loading for sync and async webassembly
  • [CSS] Don't add [uniqueName] to localIdentName when it is empty
  • [CSS] Parsing strings on Windows
  • [CSS] Fixed CSS local escaping

New Features

  • Added support for injecting debug IDs
  • Export the MergeDuplicateChunks plugin
  • Added universal loading for JS chunks and JS worker chunks (only ES modules)
  • [WASM] Added universal loading for WebAssembly chunks (only for async WebAssembly)
  • [CSS] Allow initial CSS chunks to be placed anywhere - the output.cssHeadDataCompression option was deleted
  • [CSS] Added universal loading for CSS chunks
  • [CSS] Parse ICSS @value at-rules in CSS modules
  • [CSS] Parse ICSS :import rules in CSS modules
  • [CSS] Added the url and import options for CSS
  • [CSS] Allow to import custom properties in CSS modules

Performance

  • Faster Queue implementation, also fixed queue iterator state in dequeue method to ensure correct behavior after item removal

v5.96.1

Bug Fixes

  • [Types] Add @types/eslint-scope to dependencieS
  • [Types] Fixed regression in validate

v5.96.0

Bug Fixes

  • Fixed Module Federation should track all referenced chunks
  • Handle Data URI without base64 word
  • HotUpdateChunk have correct runtime when modified with new runtime

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by evilebottnawi, a new releaser for webpack since your current version.


Updates @storybook/svelte from 6.3.8 to 8.5.4

Release notes

Sourced from @​storybook/svelte's releases.

v8.5.4

8.5.4

v8.5.3

8.5.3

v8.5.2

8.5.2

v8.5.1

8.5.1

v8.5.0

8.5.0

Storybook 8.5 is packed with powerful features to enhance your development workflow. This release makes it easier than ever to build accessible, well-tested UIs. Here’s what’s new:

  • 🦾 Realtime accessibility tests to help build UIs for everybody
  • 🛡️ Project code coverage to measure the completeness of your tests
  • 🎯 Focused tests for faster test feedback
  • ⚛️ React Native Web Vite framework (experimental) for testing mobile UI
  • ⚛️ React 19 support
  • 🎁 Storybook test early access program to level up your testing game
  • 💯 Hundreds more improvements

... (truncated)

Changelog

Sourced from @​storybook/svelte's changelog.

8.5.4

8.5.3

8.5.2

8.5.1

8.5.0

Storybook 8.5 is packed with powerful features to enhance your development workflow. This release makes it easier than ever to build accessible, well-tested UIs. Here’s what’s new:

  • 🦾 Realtime accessibility tests to help build UIs for everybody
  • 🛡️ Project code coverage to measure the completeness of your tests
  • 🎯 Focused tests for faster test feedback
  • ⚛️ React Native Web Vite framework (experimental) for testing mobile UI⚛️
  • 🎁 Storybook test early access program to level up your testing game
  • 💯 Hundreds more improvements

... (truncated)

Commits
  • 0956d5f Bump version from "8.5.3" to "8.5.4" [skip ci]
  • 81d183f Bump version from "8.5.2" to "8.5.3" [skip ci]
  • 7dac855 Bump version from "8.5.1" to "8.5.2" [skip ci]
  • 600af05 Bump version from "8.5.0" to "8.5.1" [skip ci]
  • 032a765 Merge pull request #30333 from storybookjs/interactions-to-component-2
  • 9277067 Bump version from "8.5.0-beta.11" to "8.5.0" [skip ci]
  • d8fe93a Bump version from "8.5.0-beta.10" to "8.5.0-beta.11" [skip ci]
  • 426586d Bump version from "8.5.0-beta.9" to "8.5.0-beta.10" [skip ci]
  • b607dbe Bump version from "8.5.0-beta.8" to "8.5.0-beta.9" [skip ci]
  • 3b979ee Bump version from "8.5.0-beta.7" to "8.5.0-beta.8" [skip ci]
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by storybook-bot, a new releaser for @​storybook/svelte since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

…storybook/svelte

Bumps [serialize-javascript](https://github.com/yahoo/serialize-javascript) to 6.0.2 and updates ancestor dependencies [serialize-javascript](https://github.com/yahoo/serialize-javascript), [@storybook/addon-essentials](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/essentials), [webpack](https://github.com/webpack/webpack) and [@storybook/svelte](https://github.com/storybookjs/storybook/tree/HEAD/code/renderers/svelte). These dependencies need to be updated together.


Updates `serialize-javascript` from 4.0.0 to 6.0.2
- [Release notes](https://github.com/yahoo/serialize-javascript/releases)
- [Commits](yahoo/serialize-javascript@v4.0.0...v6.0.2)

Updates `@storybook/addon-essentials` from 6.3.8 to 6.5.16
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.v6.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v6.5.16/code/addons/essentials)

Updates `webpack` from 4.46.0 to 5.97.1
- [Release notes](https://github.com/webpack/webpack/releases)
- [Commits](webpack/webpack@v4.46.0...v5.97.1)

Updates `@storybook/svelte` from 6.3.8 to 8.5.4
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v8.5.4/code/renderers/svelte)

---
updated-dependencies:
- dependency-name: serialize-javascript
  dependency-type: indirect
- dependency-name: "@storybook/addon-essentials"
  dependency-type: direct:development
- dependency-name: webpack
  dependency-type: indirect
- dependency-name: "@storybook/svelte"
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Feb 11, 2025
Copy link

vercel bot commented Feb 11, 2025

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
sveltekit-blog ❌ Failed (Inspect) Feb 11, 2025 3:20pm

Copy link

Stale pull request message

# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
dependencies Pull requests that update a dependency file no-pr-activity
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants