Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump tough-cookie, @wordpress/scripts and node-sass #9

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Aug 1, 2024

Bumps tough-cookie to 4.1.4 and updates ancestor dependencies tough-cookie, @wordpress/scripts and node-sass. These dependencies need to be updated together.

Updates tough-cookie from 2.5.0 to 4.1.4

Release notes

Sourced from tough-cookie's releases.

v4.1.4

https://www.npmjs.com/package/tough-cookie/v/4.1.4

What's Changed

New Contributors

Full Changelog: salesforce/tough-cookie@v4.1.3...v4.1.4

4.1.3

Security fix for Prototype Pollution discovery in #282. This is a minor release, although output from the inspect utility is affected by this change, we felt this change was important enough to be pushed into the next patch.

4.1.2 -- Patch and Bugfix Release

What's Changed

Full Changelog: salesforce/tough-cookie@v4.1.1...v4.1.2

4.1.1

Patch Release

What's Changed

Full Changelog: salesforce/tough-cookie@v4.1.0...v4.1.1

4.1.0

v4.1.0

Minor release, focused mainly on resolving reported issues and some minor feature work.

What's Changed

... (truncated)

Commits
  • cacbc37 Bump version to 4.1.4
  • a48fb3a Add tests for url validation
  • 50e69bf Merge pull request #261 from postmanlabs/fix/url-string-validation
  • 1253d58 Merge pull request #409 from corvidism/validators-to-string
  • 238367e Add local alias for toString
  • 4ff4d29 4.1.3 release preparation, update the package and lib/version to 4.1.3. (#284)
  • 12d4747 Prevent prototype pollution in cookie memstore (#283)
  • f06b72d Fix documentation for store.findCookies, missing allowSpecialUseDomain proper...
  • cf6debd Fix incorrect string validation for URL
  • b1a8898 fix: allow set cookies with localhost (#253)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by ccasey, a new releaser for tough-cookie since your current version.


Updates @wordpress/scripts from 16.1.5 to 28.4.0

Release notes

Sourced from @​wordpress/scripts's releases.

18.9.0

Changelog

Enhancements

Block Library

  • Add Clear button for Overlay color option in Cover Block. (63580)
  • Embeds: Add 'Embed' to title for clarity. (63371)
  • Columns block: Fix block preview. (63609)
  • Gallery: Add border block support. (63428)
  • Image block: Show placeholder when uploading HEIC files. (63643)
  • Latest comments: Add color block support. (63419)
  • Media Text: Add border support. (63542)
  • Polish create template part modal. (63617)
  • Post Author blocks: Add example and preview. (62978)
  • Post date block: Add a block example. (63368)
  • Post featured image: Add example of the block. (63011)
  • Post terms block: Add an example. (63369)
  • Query Loop Block: Remove Posts List variation. (63404)
  • Query Loop block: Convert the post content type setting to a ToggleGroupControl if there are few items. (63375)
  • Query Loop: Change default query loop variations. (63353)
  • Set query loop to have the inherit value by default. (63362)
  • Social Links: Add border block support. (63629)
  • Social Links: Updated soundcloud icon for social link block. (63504)
  • Social Links: Update Facebook's color to match brand guidelines. (60424)
  • Term Description: Add border block support. (63630)

Design Tools

  • Background Image: Make panel appear in a consistent location. (63551)
  • Buttons: Add border, color, and padding block supports. (63538)
  • Heading: Add border support. (63539)
  • Image: Adopt margin block support. (63546)
  • Paragraph: Add border support. (63543)
  • Quote: Add border support. (63544)
  • Quote: Add spacing supports. (63545)
  • Search: Add margin support. (63547)

Data Views

  • DataViews: Allow column re-ordering. (63416)
  • DataViews: Update pagination icons. (63594)
  • DataViews: Rename the header property of fields to label. (63843)
  • DataViews: Support combined fields. (63236)
  • Dataviews List: Update item layout. (63299)
  • Increase column-gap between fields in List layout. (63603)
  • Update 'Front page' badge. (63752)
  • Update: Pages: Trash view should default to table layout try 2. (63652)
  • Update: Grid layout: Allow users to adjust grid density. (63367)
  • Update: Include avatars on list view. (63309)
  • Update: List / Table layout – selected item stroke should be tinted blue. (63312)
  • Update: Make changing order an action on the ellipsis menu. (62189)

... (truncated)

Changelog

Sourced from @​wordpress/scripts's changelog.

28.4.0 (2024-07-24)

New Features

  • Update webpack configuration for the build and start commands to automatically copy PHP files listed in the variations field of block.json files from the source to the build folder (#63098).

28.3.0 (2024-07-10)

28.2.0 (2024-06-26)

28.1.0 (2024-06-15)

28.0.0 (2024-05-31)

Breaking Changes

Note If you're using @​wordpress/scripts for building JS scripts to target WordPress 6.5 or earlier, you should not upgrade to this version and continue using @​wordpress/scripts@​27.

  • Use React's automatic runtime to transform JSX (#61692).
  • Variables like process.env.IS_GUTENBERG_PLUGIN have been replaced by globalThis.IS_GUTENBERG_PLUGIN. Build systems using process.env should be updated (#61486).
  • Increase the minimum required Node.js version to v18.12.0 matching long-term support releases (#31270). Learn more about Node.js releases.

27.9.0 (2024-05-16)

New Features

  • Add RTL support when building CSS styles with build and start scripts (#61540).

27.8.0 (2024-05-02)

27.7.0 (2024-04-19)

27.6.0 (2024-04-03)

27.5.0 (2024-03-21)

27.4.0 (2024-03-06)

27.3.0 (2024-02-21)

27.2.0 (2024-02-09)

New Features

  • Add experimental support for viewScriptModule field in block.json for build and start scripts (#57437).

Enhancements

  • Ensure that watched module builds detect block.json changes (#57927).

... (truncated)

Commits
  • 363edb3 chore(release): publish
  • 4985329 Update changelog files
  • 876a4ef Merge changes published in the Gutenberg plugin "release/18.9" branch
  • 122867d chore(release): publish
  • cd8a365 Update changelog files
  • aa5b14b chore(release): publish
  • 1f9356a Update changelog files
  • b3faeb5 Merge changes published in the Gutenberg plugin "release/18.7" branch
  • 66d3bf1 chore(release): publish
  • 3be40c3 Update changelog files
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by gutenbergplugin, a new releaser for @​wordpress/scripts since your current version.


Updates node-sass from 7.0.1 to 9.0.0

Release notes

Sourced from node-sass's releases.

v9.0.0

What's Changed

Breaking changes

Supported Environments

OS Architecture Node
Windows x86 & x64 16, 18, 19, 20
OSX x64 16, 18, 19, 20
Linux* x64 16, 18, 19, 20
Alpine Linux x64 16, 18, 19, 20

*Linux support refers to major distributions like Ubuntu, and Debian

v8.0.0

What's Changed

Breaking changes

Features

Dependencies

Misc

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [tough-cookie](https://github.com/salesforce/tough-cookie) to 4.1.4 and updates ancestor dependencies [tough-cookie](https://github.com/salesforce/tough-cookie), [@wordpress/scripts](https://github.com/WordPress/gutenberg/tree/HEAD/packages/scripts) and [node-sass](https://github.com/sass/node-sass). These dependencies need to be updated together.


Updates `tough-cookie` from 2.5.0 to 4.1.4
- [Release notes](https://github.com/salesforce/tough-cookie/releases)
- [Changelog](https://github.com/salesforce/tough-cookie/blob/master/CHANGELOG.md)
- [Commits](salesforce/tough-cookie@v2.5.0...v4.1.4)

Updates `@wordpress/scripts` from 16.1.5 to 28.4.0
- [Release notes](https://github.com/WordPress/gutenberg/releases)
- [Changelog](https://github.com/WordPress/gutenberg/blob/trunk/packages/scripts/CHANGELOG.md)
- [Commits](https://github.com/WordPress/gutenberg/commits/@wordpress/[email protected]/packages/scripts)

Updates `node-sass` from 7.0.1 to 9.0.0
- [Release notes](https://github.com/sass/node-sass/releases)
- [Changelog](https://github.com/sass/node-sass/blob/master/CHANGELOG.md)
- [Commits](sass/node-sass@v7.0.1...v9.0.0)

---
updated-dependencies:
- dependency-name: tough-cookie
  dependency-type: indirect
- dependency-name: "@wordpress/scripts"
  dependency-type: direct:development
- dependency-name: node-sass
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Aug 1, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants