Bump glob-parent, nuxt and webpack #316

dependabot · 2023-02-14T14:38:50Z

Bumps glob-parent to 5.1.2 and updates ancestor dependencies glob-parent, nuxt and webpack. These dependencies need to be updated together.

Updates glob-parent from 3.1.0 to 5.1.2

Release notes

Sourced from glob-parent's releases.

v5.1.2

Bug Fixes

eliminate ReDoS (#36) (f923116)

v5.1.1

Bug Fixes

unescape exclamation mark (#26) (a98874f)

v5.1.0

Features

add flipBackslashes option to disable auto conversion of slashes (closes #24) (#25) (eecf91d)

v5.0.0

⚠ BREAKING CHANGES

Drop support for node <6 & bump dependencies

Miscellaneous Chores

Drop support for node <6 & bump dependencies (896c0c0)

v4.0.0

⚠ BREAKING CHANGES

question marks are valid path characters on Windows so avoid flagging as a glob when alone

Update is-glob dependency

Features

hoist regexps and strings for performance gains (4a80667)

question marks are valid path characters on Windows so avoid flagging as a glob when alone (2a551dd)

Update is-glob dependency (e41fcd8)

Changelog

Sourced from glob-parent's changelog.

5.1.2 (2021-03-06)

Bug Fixes

eliminate ReDoS (#36) (f923116)

6.0.2 (2021-09-29)

Bug Fixes

Improve performance (#53) (843f8de)

6.0.1 (2021-07-20)

Bug Fixes

Resolve ReDoS vulnerability from CVE-2021-35065 (#49) (3e9f04a)

6.0.0 (2021-05-03)

⚠ BREAKING CHANGES

Correct mishandled escaped path separators (#34)

upgrade scaffold, dropping node <10 support

Bug Fixes

Correct mishandled escaped path separators (#34) (32f6d52), closes #32

Miscellaneous Chores

upgrade scaffold, dropping node <10 support (e83d0c5)

5.1.1 (2021-01-27)

Bug Fixes

unescape exclamation mark (#26) (a98874f)

5.1.0 (2021-01-27)

Features

add flipBackslashes option to disable auto conversion of slashes (closes #24) (#25) (eecf91d)

5.0.0 (2021-01-27)

⚠ BREAKING CHANGES

Drop support for node <6 & bump dependencies

... (truncated)

Commits

eb2c439 chore: update changelog
12bcb6c chore: release 5.1.2
f923116 fix: eliminate ReDoS (#36)
0b014a7 chore: add JSDoc returns information (#33)
2b24ebd chore: generate initial changelog
9b6e874 chore: release 5.1.1
749c35e ci: try wrapping the JOB_ID in a string
5d39def ci: attempt to switch to published coveralls
0b5b37f ci: put the npm step back in for only Windows
473f5d8 ci: update azure build images
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by phated, a new releaser for glob-parent since your current version.

Updates nuxt from 2.15.8 to 3.2.0

Release notes

Sourced from nuxt's releases.

v3.2.0

3.2.0 is the first minor release since we've started our new release schedule. We've brought it forward by a couple of weeks to include some goodies we want you to be able to play with soon.

👀 Highlights
⚡️ Nuxt DevTools
You can opt-in to Nuxt DevTools per-project by going to the project root and running:
npx nuxi@latest devtools enable
Restart your Nuxt server and open your app in browser. Click the Nuxt icon on the bottom (or press Alt+D) to toggle the DevTools.
More information in the docs!
✨ Better DX for overriding runtimeConfig, including inline type helpers

🪄 Automatically inferred return type for useFetch and $fetch based on method.

It'll be a type error to use the wrong method when hitting an endpoint.

Plus, if you have multiple methods served by a single endpoint (like ~/server/api/test.get.ts and ~/server/api/test.post.ts then the response type will match the kind of response you make.

🍪 useFetch is now integrated with event.$fetch, meaning cookies and context are now passed to api requests automagically within internal requests.
🔥 We now treeshake client-only components out of the server build more effectively using the experimental treeshakeClientOnly feature
This is turned on by default but if you experience any issues, you can turn this off via:
export default defineNuxtConfig({
  experimental: {
    treeshakeClientOnly: false
  }
})
🛠️ New addRouteMiddleware kit utility for module authors

💪 Nitropack v2.2 has been released

Lots of features, including runtime proxy support using route rules, nested fetch calls, binary and raw storage operations, exposed event.context.cf (cloudflare) and built-in session support.

For full details see release notes
Changelog

compare changes

🚀 Enhancements

kit: Add addRouteMiddleware method (#18553)

cli: Warn when prerendering routes with ssr: false (#18783)

schema: Add type hints for runtime config (#18652)

... (truncated)

Commits

5855c1e v3.2.0 (#18843)
5426e56 test: decrease vite logging during tests
71d67ad chore: combine import statements
a89e2fa chore(deps): update all non-major dependencies (main) (#18890)
9a035a1 refactor(nuxt): within nuxt app, import directly from source file (#18902)
0b2bce4 docs: add explanation with augmented meta for new routes (#18901)
9845467 feat(nuxt): upgrade to nitropack 2.2 (#18889)
2e62246 fix: reorder the types field in package.json (#18880)
9f3b38c chore(deps): update dependency esbuild-loader to v3 (main) (#18883)
c936bc7 feat(nuxi): add initial support for enabling/disabling devtools (#18864)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by danielroe, a new releaser for nuxt since your current version.

Updates webpack from 4.46.0 to 5.75.0

Release notes

Sourced from webpack's releases.

v5.75.0

Bugfixes

experiments.* normalize to false when opt-out

avoid NaN%

show the correct error when using a conflicting chunk name in code

HMR code tests existance of window before trying to access it

fix eval-nosources-* actually exclude sources

fix race condition where no module is returned from processing module

fix position of standalong semicolon in runtime code

Features

add support for @import to extenal CSS when using experimental CSS in node

add i64 support to the deprecated WASM implementation

Developer Experience

expose EnableWasmLoadingPlugin

add more typings

generate getters instead of readonly properties in typings to allow overriding them

v5.74.0

Features

add resolve.extensionAlias option which allows to alias extensions

This is useful when you are forced to add the .js extension to imports when the file really has a .ts extension (typescript + "type": "module")

add support for ES2022 features like static blocks

add Tree Shaking support for ProvidePlugin

Bugfixes

fix persistent cache when some build dependencies are on a different windows drive

make order of evaluation of side-effect-free modules deterministic between concatenated and non-concatenated modules

remove left-over from debugging in TLA/async modules runtime code

remove unneeded extra 1s timestamp offset during watching when files are actually untouched

This sometimes caused an additional second build which are not really needed

fix shareScope option for ModuleFederationPlugin

set "use-credentials" also for same origin scripts

Performance

Improve memory usage and performance of aggregating needed files/directories for watching

This affects rebuild performance

Extensibility

export HarmonyImportDependency for plugins

v5.73.0

... (truncated)

Commits

8241da7 5.75.0
a91d923 Merge pull request #16458 from webpack/bugfix/semi
4608b11 Merge pull request #16457 from webpack/tooling/update
dfdd0b0 Merge pull request #16122 from AnmolBansalDEV/bug/compilationCallback
23b9a1c Merge pull request #16167 from exposir/fixts
6f2c5e8 Merge pull request #16257 from alexzhang1030/calc_deterministic_verbose
f7f36ad Merge pull request #16339 from Liamolucko/wasm-i64
761a542 fix semicolon position
2403a36 Merge pull request #16345 from ahabhgk/fix-eval-nosources
c18203c update tooling
Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
@dependabot use these labels will set the current labels as the default for future PRs for this repo and language
@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

> **Note** > Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps [glob-parent](https://github.com/gulpjs/glob-parent) to 5.1.2 and updates ancestor dependencies [glob-parent](https://github.com/gulpjs/glob-parent), [nuxt](https://github.com/nuxt/nuxt) and [webpack](https://github.com/webpack/webpack). These dependencies need to be updated together. Updates `glob-parent` from 3.1.0 to 5.1.2 - [Release notes](https://github.com/gulpjs/glob-parent/releases) - [Changelog](https://github.com/gulpjs/glob-parent/blob/main/CHANGELOG.md) - [Commits](gulpjs/glob-parent@v3.1.0...v5.1.2) Updates `nuxt` from 2.15.8 to 3.2.0 - [Release notes](https://github.com/nuxt/nuxt/releases) - [Commits](nuxt/nuxt@v2.15.8...v3.2.0) Updates `webpack` from 4.46.0 to 5.75.0 - [Release notes](https://github.com/webpack/webpack/releases) - [Commits](webpack/webpack@v4.46.0...v5.75.0) --- updated-dependencies: - dependency-name: glob-parent dependency-type: indirect - dependency-name: nuxt dependency-type: direct:production - dependency-name: webpack dependency-type: indirect ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added the dependencies Pull requests that update a dependency file label Feb 14, 2023

dependabot bot force-pushed the dependabot/npm_and_yarn/glob-parent-and-nuxt-and-webpack-5.1.2 branch 18 times, most recently from d9ce585 to b195e1a Compare February 16, 2023 17:44

dependabot bot force-pushed the dependabot/npm_and_yarn/glob-parent-and-nuxt-and-webpack-5.1.2 branch from b195e1a to e371f1b Compare March 26, 2023 12:08

dependabot bot force-pushed the dependabot/npm_and_yarn/glob-parent-and-nuxt-and-webpack-5.1.2 branch from e371f1b to 771a9b0 Compare March 28, 2023 17:11

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump glob-parent, nuxt and webpack #316

Bump glob-parent, nuxt and webpack #316

dependabot bot commented on behalf of github Feb 14, 2023 •

edited

Loading

Bump glob-parent, nuxt and webpack #316

Are you sure you want to change the base?

Bump glob-parent, nuxt and webpack #316

Conversation

dependabot bot commented on behalf of github Feb 14, 2023 • edited Loading

v5.1.2

Bug Fixes

v5.1.1

Bug Fixes

v5.1.0

Features

v5.0.0

⚠ BREAKING CHANGES

Miscellaneous Chores

v4.0.0

⚠ BREAKING CHANGES

Features

5.1.2 (2021-03-06)

Bug Fixes

6.0.2 (2021-09-29)

Bug Fixes

6.0.1 (2021-07-20)

Bug Fixes

6.0.0 (2021-05-03)

⚠ BREAKING CHANGES

Bug Fixes

Miscellaneous Chores

5.1.1 (2021-01-27)

Bug Fixes

5.1.0 (2021-01-27)

Features

5.0.0 (2021-01-27)

⚠ BREAKING CHANGES

v3.2.0

👀 Highlights

Changelog

🚀 Enhancements

v5.75.0

Bugfixes

Features

Developer Experience

v5.74.0

Features

Bugfixes

Performance

Extensibility

v5.73.0

dependabot bot commented on behalf of github Feb 14, 2023 •

edited

Loading