Bumpsjson5 to 2.2.3 and updates ancestor dependenciesjson5,json5,@vue/cli-service,bili androllup-plugin-vue. These dependencies need to be updated together.
Updatesjson5 from 2.1.0 to 2.2.3
Release notes
Sourced fromjson5's releases.
v2.2.3
- Fix: json5@2.2.3 is now the 'latest' release according to npm instead of v1.0.2. (#299)
v2.2.2
- Fix: Properties with the name
__proto__ are added to objects and arrays.(#199) This also fixes a prototype pollution vulnerability reported byJonathan Gregson! (#295).
v2.2.1
v2.2.0
- New: Accurate and documented TypeScript declarations are now included. There is no need to install
@types/json5. (#236,#244)
- Fix: An out of memory bug when parsing numbers has been fixed. (#228,#229)
v2.1.2
- Fix: Bump
minimist tov1.2.5. (#222)
v2.1.1
- New:
package.json andpackage.json5 include amodule property sobundlers like webpack, rollup and parcel can take advantage of the ES Modulebuild. (#208) - Fix:
stringify outputs\0 as\\x00 when followed by a digit. (#210) - Fix: Spelling mistakes have been fixed. (#196)
Changelog
Sourced fromjson5's changelog.
- Fix: json5@2.2.3 is now the 'latest' release according to npm instead ofv1.0.2. (#299)
- Fix: Properties with the name
__proto__ are added to objects and arrays.(#199) This also fixes a prototype pollution vulnerability reported byJonathan Gregson! (#295).
- New: Accurate and documented TypeScript declarations are now included. Thereis no need to install
@types/json5. (#236,#244)
- Fix: An out of memory bug when parsing numbers has been fixed. (#228,#229)
- Fix: Bump
minimist tov1.2.5. (#222)
v2.1.1 [code, [diff][d2.1.1]]
... (truncated)
Commits
Updatesjson5 from 1.0.1 to 2.2.3
Release notes
Sourced fromjson5's releases.
v2.2.3
- Fix: json5@2.2.3 is now the 'latest' release according to npm instead of v1.0.2. (#299)
v2.2.2
- Fix: Properties with the name
__proto__ are added to objects and arrays.(#199) This also fixes a prototype pollution vulnerability reported byJonathan Gregson! (#295).
v2.2.1
v2.2.0
- New: Accurate and documented TypeScript declarations are now included. There is no need to install
@types/json5. (#236,#244)
- Fix: An out of memory bug when parsing numbers has been fixed. (#228,#229)
v2.1.2
- Fix: Bump
minimist tov1.2.5. (#222)
v2.1.1
- New:
package.json andpackage.json5 include amodule property sobundlers like webpack, rollup and parcel can take advantage of the ES Modulebuild. (#208) - Fix:
stringify outputs\0 as\\x00 when followed by a digit. (#210) - Fix: Spelling mistakes have been fixed. (#196)
Changelog
Sourced fromjson5's changelog.
- Fix: json5@2.2.3 is now the 'latest' release according to npm instead ofv1.0.2. (#299)
- Fix: Properties with the name
__proto__ are added to objects and arrays.(#199) This also fixes a prototype pollution vulnerability reported byJonathan Gregson! (#295).
- New: Accurate and documented TypeScript declarations are now included. Thereis no need to install
@types/json5. (#236,#244)
- Fix: An out of memory bug when parsing numbers has been fixed. (#228,#229)
- Fix: Bump
minimist tov1.2.5. (#222)
v2.1.1 [code, [diff][d2.1.1]]
... (truncated)
Commits
Updates@vue/cli-service from 3.2.3 to 5.0.8
Release notes
Sourced from@vue/cli-service's releases.
v5.0.8
🐛 Bug Fix
@vue/cli-service@vue/cli-ui
v5.0.7
@vue/cli-service@vue/cli-ui- #7210 chore: upgrade to apollo-server-express 3.x
Committers: 2
v5.0.6
Fix compatibility with the upcoming Vue 2.7 (currently in alpha) and Vue Loader 15.10 (currently in beta).
In Vue 2.7,vue-template-compiler is no longer a required peer dependency. Rather, there's a new export under the main package asvue/compiler-sfc.
v5.0.5
🐛 Bug Fix
@vue/cli- #7167 fix(upgrade): prevent changing the structure of package.json file during upgrade (
@blzsaa)
@vue/cli-service@vue/cli-plugin-e2e-cypress- [697bb44] fix: should correctly resolve cypress bin path for Cypress 10 (Note that the project is still created with Cypress 9 by default, but you can upgrade to Cypress 10 on your own now)
Committers: 3
v5.0.4
🐛 Bug Fix
@vue/cli-service@vue/cli-shared-utils,@vue/cli-ui- 75826d6 fix: replace
node-ipc with@achrinza/node-ipc to further secure the dependency chain
Committers: 1
v5.0.3
... (truncated)
Changelog
Sourced from@vue/cli-service's changelog.
5.0.7 (2022-07-05)
@vue/cli-service@vue/cli-ui- #7210 chore: upgrade to apollo-server-express 3.x
Committers: 2
5.0.6 (2022-06-16)
Fix compatibility with the upcoming Vue 2.7 (currently in alpha) and Vue Loader 15.10 (currently in beta).
In Vue 2.7,vue-template-compiler is no longer a required peer dependency. Rather, there's a new export under the main package asvue/compiler-sfc.
5.0.5 (2022-06-16)
🐛 Bug Fix
@vue/cli- #7167 feat(upgrade): prevent changing the structure of package.json file during upgrade (
@blzsaa)
@vue/cli-service
Committers: 3
5.0.4 (2022-03-22)
🐛 Bug Fix
@vue/cli-service@vue/cli-shared-utils,@vue/cli-ui- 75826d6 fix: replace
node-ipc with@achrinza/node-ipc to further secure the dependency chain
Committers: 1
... (truncated)
Commits
b154dbd v5.0.80260e4d fix: add devServer.server.type to useHttps judgement (#7222)4a0655f v5.0.7beffe8a fix: allow disabling progress plugin viadevServer.client.progress558dea2 fix: supportdevServer.server option, avoid deprecation warningbddd64d fix: optimize the judgment on whether HTTPS has been set in options (#7202)ef08a08 v5.0.6fcf27e3 fixup! fix: compatibility with Vue 2.7a648958 fix: compatibility with Vue 2.798c66c9 v5.0.5- Additional commits viewable incompare view
Updatesbili from 3.4.2 to 5.0.5
Release notes
Sourced frombili's releases.
v5.0.5
5.0.5 (2020-06-21)
Bug Fixes
v5.0.4
5.0.4 (2020-06-19)
Bug Fixes
v5.0.3
5.0.3 (2020-06-19)
Bug Fixes
v5.0.2
5.0.2 (2020-06-15)
Bug Fixes
- rollup: handle warning for deprecated api (e93f812)
v5.0.1
5.0.1 (2020-06-15)
Bug Fixes
- add cac and joycon to dependencies (696c162)
- never include pkg.dependencies in bundle (fc69352)
v5.0.0
5.0.0 (2020-06-15)
Features
... (truncated)
Commits
fe897b2 fix: ensure filename for esm format (#364)4aae8f0 fix(docs): configuration link (#356)9a5e211 fix: duplicated banner after minified (fix#346) (#359)e93f812 fix(rollup): handle warning for deprecated apifc69352 fix: never include pkg.dependencies in bundle696c162 fix: add cac and joycon to dependencies023f2c5 feat: Upgrade Rollup and Plugins (#357)a21420c fix(docs): configuration link (#355)6a58956 feat: babel support new syntax and fine tuning compile (#342)51cc78b docs: add hint for bug of rollup-plugin-vue (#343)- Additional commits viewable incompare view
Updatesrollup-plugin-vue from 4.3.2 to 6.0.0
Release notes
Sourced fromrollup-plugin-vue's releases.
Version 5.0.0
Chores
BREAKING CHANGES
@vue/component-compiler-utils@3.0.0 usessass instead ofnode-sass
Version 4.7.2
Bug Fixes
- Add needMap option to disable source maps (3f879f3)
Version 4.7.0
Bug Fixes
- Use isProduction when defined and fallback to NODE_ENV/BUILD (5fb30ce)
- Use template.isProduction option if set (#267) (911eabc)
Features
- Add data option to allow prepending style block content (a5711f6), closes#93
- Add exposeFilename to control __file property (5c1dffb)
- Combine customBlocks inclusion/exclusion option (8ae8568)
Changelog
Sourced fromrollup-plugin-vue's changelog.
6.0.0 (2020-11-25)
Features
Bug Fixes
- add language fallback for template code (#407) (e334e8c)
- avoid adding render function when no template in an SFC (#387) (6960203)
- avoid conflicting filename for sourcemaps (#375) (4ec1315)
- default render function name for ssr (#402) (714afd7)
- support options for template block preprocessor render (#377) (3222451)
Features
- add watchers to imports within vue files (#385) (cd41410)
Features
- distinguish options for different CSS preprocessing languages (#366) (860595e)
Bug Fixes
- backwards compat with older versions of compiler-sfc (7cb9fa4)
Features
... (truncated)
Commits
Maintainer changes
This version was pushed to npm byyyx990803, a new releaser for rollup-plugin-vue since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting@dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase will rebase this PR@dependabot recreate will recreate this PR, overwriting any edits that have been made to it@dependabot merge will merge this PR after your CI passes on it@dependabot squash and merge will squash and merge this PR after your CI passes on it@dependabot cancel merge will cancel a previously requested merge and block automerging@dependabot reopen will reopen this PR if it is closed@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)@dependabot use these labels will set the current labels as the default for future PRs for this repo and language@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from theSecurity Alerts page.
Bumpsjson5 to 2.2.3 and updates ancestor dependenciesjson5,json5,@vue/cli-service,bili androllup-plugin-vue. These dependencies need to be updated together.
Updates
json5from 2.1.0 to 2.2.3Release notes
Sourced fromjson5's releases.
Changelog
Sourced fromjson5's changelog.
... (truncated)
Commits
c3a75242.2.394fd06ddocs: update CHANGELOG for v2.2.33b8cebfdocs(security): use GitHub security advisoriesf0fd9e1docs: publish a security policy6a91a05docs(template): bug -> bug report14f8cb12.2.210cc7cadocs: update CHANGELOG for v2.2.27774c10fix: addproto to objects and arraysedde30aReadme: slight tweak to intro97286f8Improve example in readmeUpdates
json5from 1.0.1 to 2.2.3Release notes
Sourced fromjson5's releases.
Changelog
Sourced fromjson5's changelog.
... (truncated)
Commits
c3a75242.2.394fd06ddocs: update CHANGELOG for v2.2.33b8cebfdocs(security): use GitHub security advisoriesf0fd9e1docs: publish a security policy6a91a05docs(template): bug -> bug report14f8cb12.2.210cc7cadocs: update CHANGELOG for v2.2.27774c10fix: addproto to objects and arraysedde30aReadme: slight tweak to intro97286f8Improve example in readmeUpdates
@vue/cli-servicefrom 3.2.3 to 5.0.8Release notes
Sourced from
@vue/cli-service's releases.... (truncated)
Changelog
Sourced from
@vue/cli-service's changelog.... (truncated)
Commits
b154dbdv5.0.80260e4dfix: add devServer.server.type to useHttps judgement (#7222)4a0655fv5.0.7beffe8afix: allow disabling progress plugin viadevServer.client.progress558dea2fix: supportdevServer.serveroption, avoid deprecation warningbddd64dfix: optimize the judgment on whether HTTPS has been set in options (#7202)ef08a08v5.0.6fcf27e3fixup! fix: compatibility with Vue 2.7a648958fix: compatibility with Vue 2.798c66c9v5.0.5Updates
bilifrom 3.4.2 to 5.0.5Release notes
Sourced frombili's releases.
... (truncated)
Commits
fe897b2fix: ensure filename for esm format (#364)4aae8f0fix(docs): configuration link (#356)9a5e211fix: duplicated banner after minified (fix#346) (#359)e93f812fix(rollup): handle warning for deprecated apifc69352fix: never include pkg.dependencies in bundle696c162fix: add cac and joycon to dependencies023f2c5feat: Upgrade Rollup and Plugins (#357)a21420cfix(docs): configuration link (#355)6a58956feat: babel support new syntax and fine tuning compile (#342)51cc78bdocs: add hint for bug of rollup-plugin-vue (#343)Updates
rollup-plugin-vuefrom 4.3.2 to 6.0.0Release notes
Sourced fromrollup-plugin-vue's releases.
Changelog
Sourced fromrollup-plugin-vue's changelog.
... (truncated)
Commits
Maintainer changes
This version was pushed to npm byyyx990803, a new releaser for rollup-plugin-vue since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)@dependabot use these labelswill set the current labels as the default for future PRs for this repo and language@dependabot use these reviewerswill set the current reviewers as the default for future PRs for this repo and language@dependabot use these assigneeswill set the current assignees as the default for future PRs for this repo and language@dependabot use this milestonewill set the current milestone as the default for future PRs for this repo and languageYou can disable automated security fix PRs for this repo from theSecurity Alerts page.