Skip to content

Conversation

renovate-bot
Copy link
Collaborator

@renovate-bot renovate-bot commented Apr 21, 2024

Mend Renovate

This PR contains the following updates:

Package Type Update Change Age Adoption Passing Confidence
lockFileMaintenance All locks refreshed
@github/relative-time-element dependencies minor 4.3.1 -> 4.4.0 age adoption passing confidence
css-loader devDependencies minor 6.10.0 -> 6.11.0 age adoption passing confidence
mini-css-extract-plugin devDependencies minor 2.8.0 -> 2.9.0 age adoption passing confidence
sass devDependencies minor 1.71.1 -> 1.75.0 age adoption passing confidence
webpack devDependencies minor 5.90.3 -> 5.91.0 age adoption passing confidence
webpack-bundle-analyzer devDependencies patch 4.10.1 -> 4.10.2 age adoption passing confidence
webpack-dev-server devDependencies patch 4.15.1 -> 4.15.2 age adoption passing confidence

🔧 This Pull Request updates lock files to use the latest dependency versions.


Release Notes

github/relative-time-element (@​github/relative-time-element)

v4.4.0

Compare Source

What's Changed

New Contributors

Full Changelog: github/relative-time-element@v4.3.1...v4.4.0

webpack-contrib/css-loader (css-loader)

v6.11.0

Compare Source

Features
Bug Fixes
webpack-contrib/mini-css-extract-plugin (mini-css-extract-plugin)

v2.9.0

Compare Source

Features
  • add support for link preload/prefetch (#​1043) (ee25e51)
  • added the defaultExport option to generate default and named export together (#​1084) (74ae781)
Bug Fixes
2.8.1 (2024-02-27)
Bug Fixes
  • add nonce if __webpack_nonce__ has been defined (c7f0aee)

v2.8.1

Compare Source

sass/dart-sass (sass)

v1.75.0

Compare Source

  • Fix a bug in which stylesheet canonicalization could be cached incorrectly
    when custom importers or the Node.js package importer made decisions based on
    the URL of the containing stylesheet.
JS API
  • Allow importer to be passed without url in StringOptionsWithImporter.

v1.74.1

Compare Source

  • No user-visible changes.

v1.72.0

Compare Source

  • Support adjacent /s without whitespace in between when parsing plain CSS
    expressions.

  • Allow the Node.js pkg: importer to load Sass stylesheets for package.json
    exports field entries without extensions.

  • When printing suggestions for variables, use underscores in variable names
    when the original usage used underscores.

JavaScript API
  • Properly resolve pkg: imports with the Node.js package importer when
    arguments are passed to the JavaScript process.
webpack/webpack (webpack)

v5.91.0

Compare Source

Bug Fixes

  • Deserializer for ignored modules doesn't crash
  • Allow the unsafeCache option to be a proxy object
  • Normalize the snapshot.unmanagedPaths option
  • Fixed fs types
  • Fixed resolve's plugins types
  • Fixed wrongly calculate postOrderIndex
  • Fixed watching types
  • Output import attrbiutes/import assertions for external JS imports
  • Throw an error when DllPlugin needs to generate multiple manifest files, but the path is the same
  • [CSS] Output layer/supports/media for external CSS imports

New Features

  • Allow to customize the stage of BannerPlugin
  • [CSS] Support CSS exports convention
  • [CSS] support CSS local ident name
  • [CSS] Support __webpack_nonce__ for CSS chunks
  • [CSS] Support fetchPriority for CSS chunks
  • [CSS] Allow to use LZW to compress css head meta (enabled in the production mode by default)
  • [CSS] Support prefetch/preload for CSS chunks
webpack-contrib/webpack-bundle-analyzer (webpack-bundle-analyzer)

v4.10.2

Compare Source

webpack/webpack-dev-server (webpack-dev-server)

v4.15.2

Compare Source

4.15.2 (2024-03-20)
Bug Fixes
  • security: bump webpack-dev-middleware (4116209)

Configuration

📅 Schedule: Branch creation - "before 4am on monday" in timezone Australia/Sydney, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@forking-renovate forking-renovate bot added the dependencies Pull requests that update a dependency file label Apr 21, 2024
@renovate-bot renovate-bot force-pushed the renovate/appengine-frontend branch 2 times, most recently from 90efbd4 to 57a668c Compare April 24, 2024 03:04
@renovate-bot renovate-bot force-pushed the renovate/appengine-frontend branch from 57a668c to e5eed9e Compare April 24, 2024 03:59
@andrewpollock andrewpollock merged commit aad1acb into google:master Apr 24, 2024
CharlyReux pushed a commit to CharlyReux/osv.dev that referenced this pull request May 1, 2024
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change | Age | Adoption | Passing |
Confidence |
|---|---|---|---|---|---|---|---|
|  |  | lockFileMaintenance | All locks refreshed |  |  |  |  |
|
[@github/relative-time-element](https://togithub.com/github/relative-time-element)
| dependencies | minor | [`4.3.1` ->
`4.4.0`](https://renovatebot.com/diffs/npm/@github%2frelative-time-element/4.3.1/4.4.0)
|
[![age](https://developer.mend.io/api/mc/badges/age/npm/@github%2frelative-time-element/4.4.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/@github%2frelative-time-element/4.4.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/@github%2frelative-time-element/4.3.1/4.4.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@github%2frelative-time-element/4.3.1/4.4.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| [css-loader](https://togithub.com/webpack-contrib/css-loader) |
devDependencies | minor | [`6.10.0` ->
`6.11.0`](https://renovatebot.com/diffs/npm/css-loader/6.10.0/6.11.0) |
[![age](https://developer.mend.io/api/mc/badges/age/npm/css-loader/6.11.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/css-loader/6.11.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/css-loader/6.10.0/6.11.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/css-loader/6.10.0/6.11.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
|
[mini-css-extract-plugin](https://togithub.com/webpack-contrib/mini-css-extract-plugin)
| devDependencies | minor | [`2.8.0` ->
`2.9.0`](https://renovatebot.com/diffs/npm/mini-css-extract-plugin/2.8.0/2.9.0)
|
[![age](https://developer.mend.io/api/mc/badges/age/npm/mini-css-extract-plugin/2.9.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/mini-css-extract-plugin/2.9.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/mini-css-extract-plugin/2.8.0/2.9.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/mini-css-extract-plugin/2.8.0/2.9.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| [sass](https://togithub.com/sass/dart-sass) | devDependencies | minor
| [`1.71.1` ->
`1.75.0`](https://renovatebot.com/diffs/npm/sass/1.71.1/1.75.0) |
[![age](https://developer.mend.io/api/mc/badges/age/npm/sass/1.75.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/sass/1.75.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/sass/1.71.1/1.75.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/sass/1.71.1/1.75.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| [webpack](https://togithub.com/webpack/webpack) | devDependencies |
minor | [`5.90.3` ->
`5.91.0`](https://renovatebot.com/diffs/npm/webpack/5.90.3/5.91.0) |
[![age](https://developer.mend.io/api/mc/badges/age/npm/webpack/5.91.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/webpack/5.91.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/webpack/5.90.3/5.91.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/webpack/5.90.3/5.91.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
|
[webpack-bundle-analyzer](https://togithub.com/webpack-contrib/webpack-bundle-analyzer)
| devDependencies | patch | [`4.10.1` ->
`4.10.2`](https://renovatebot.com/diffs/npm/webpack-bundle-analyzer/4.10.1/4.10.2)
|
[![age](https://developer.mend.io/api/mc/badges/age/npm/webpack-bundle-analyzer/4.10.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/webpack-bundle-analyzer/4.10.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/webpack-bundle-analyzer/4.10.1/4.10.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/webpack-bundle-analyzer/4.10.1/4.10.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| [webpack-dev-server](https://togithub.com/webpack/webpack-dev-server)
| devDependencies | patch | [`4.15.1` ->
`4.15.2`](https://renovatebot.com/diffs/npm/webpack-dev-server/4.15.1/4.15.2)
|
[![age](https://developer.mend.io/api/mc/badges/age/npm/webpack-dev-server/4.15.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/webpack-dev-server/4.15.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/webpack-dev-server/4.15.1/4.15.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/webpack-dev-server/4.15.1/4.15.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

🔧 This Pull Request updates lock files to use the latest dependency
versions.

---

### Release Notes

<details>
<summary>github/relative-time-element
(@&#8203;github/relative-time-element)</summary>

###
[`v4.4.0`](https://togithub.com/github/relative-time-element/releases/tag/v4.4.0)

[Compare
Source](https://togithub.com/github/relative-time-element/compare/v4.3.1...v4.4.0)

#### What's Changed

- Bump ip from 1.1.8 to 1.1.9 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/github/relative-time-element/pull/274](https://togithub.com/github/relative-time-element/pull/274)
- update lockfile to v3 by
[@&#8203;keithamus](https://togithub.com/keithamus) in
[https://github.com/github/relative-time-element/pull/278](https://togithub.com/github/relative-time-element/pull/278)
- Express "0 precision-units away" appropriately for the precision. by
[@&#8203;jyasskin](https://togithub.com/jyasskin) in
[https://github.com/github/relative-time-element/pull/280](https://togithub.com/github/relative-time-element/pull/280)

#### New Contributors

- [@&#8203;jyasskin](https://togithub.com/jyasskin) made their first
contribution in
[https://github.com/github/relative-time-element/pull/280](https://togithub.com/github/relative-time-element/pull/280)

**Full Changelog**:
github/relative-time-element@v4.3.1...v4.4.0

</details>

<details>
<summary>webpack-contrib/css-loader (css-loader)</summary>

###
[`v6.11.0`](https://togithub.com/webpack-contrib/css-loader/blob/HEAD/CHANGELOG.md#6110-2024-04-03)

[Compare
Source](https://togithub.com/webpack-contrib/css-loader/compare/v6.10.0...v6.11.0)

##### Features

- supports multiple composes
([#&#8203;1582](https://togithub.com/webpack-contrib/css-loader/issues/1582))
([bbca614](https://togithub.com/webpack-contrib/css-loader/commit/bbca61411dc5f82964653a6d1aa27854519b743d))

##### Bug Fixes

- do not break `@scope` at-rule without params
([#&#8203;1581](https://togithub.com/webpack-contrib/css-loader/issues/1581))
([e022e3b](https://togithub.com/webpack-contrib/css-loader/commit/e022e3bb405472ac7d51ff1114783fc2811dfe04))

</details>

<details>
<summary>webpack-contrib/mini-css-extract-plugin
(mini-css-extract-plugin)</summary>

###
[`v2.9.0`](https://togithub.com/webpack-contrib/mini-css-extract-plugin/blob/HEAD/CHANGELOG.md#290-2024-04-16)

[Compare
Source](https://togithub.com/webpack-contrib/mini-css-extract-plugin/compare/v2.8.1...v2.9.0)

##### Features

- add support for link preload/prefetch
([#&#8203;1043](https://togithub.com/webpack-contrib/mini-css-extract-plugin/issues/1043))
([ee25e51](https://togithub.com/webpack-contrib/mini-css-extract-plugin/commit/ee25e51a8d06292dd8643f5bf1d6c4faa51c4f4c))
- added the `defaultExport` option to generate default and named export
together
([#&#8203;1084](https://togithub.com/webpack-contrib/mini-css-extract-plugin/issues/1084))
([74ae781](https://togithub.com/webpack-contrib/mini-css-extract-plugin/commit/74ae78184fb5bfeec23b9d254ff8304c6fc854d6))

##### Bug Fixes

- avoid reloading all csses when hot load
([#&#8203;1090](https://togithub.com/webpack-contrib/mini-css-extract-plugin/issues/1090))
([1a56673](https://togithub.com/webpack-contrib/mini-css-extract-plugin/commit/1a56673d01c441967134beb5d9500a7d6d62e4de))

#####
[2.8.1](https://togithub.com/webpack-contrib/mini-css-extract-plugin/compare/v2.8.0...v2.8.1)
(2024-02-27)

##### Bug Fixes

- add `nonce` if `__webpack_nonce__` has been defined
([c7f0aee](https://togithub.com/webpack-contrib/mini-css-extract-plugin/commit/c7f0aee5feaa1b8d047f575e94a91662eb8c314c))

###
[`v2.8.1`](https://togithub.com/webpack-contrib/mini-css-extract-plugin/blob/HEAD/CHANGELOG.md#281-2024-02-27)

[Compare
Source](https://togithub.com/webpack-contrib/mini-css-extract-plugin/compare/v2.8.0...v2.8.1)

</details>

<details>
<summary>sass/dart-sass (sass)</summary>

###
[`v1.75.0`](https://togithub.com/sass/dart-sass/blob/HEAD/CHANGELOG.md#1750)

[Compare
Source](https://togithub.com/sass/dart-sass/compare/1.74.1...1.75.0)

- Fix a bug in which stylesheet canonicalization could be cached
incorrectly
when custom importers or the Node.js package importer made decisions
based on
    the URL of the containing stylesheet.

##### JS API

- Allow `importer` to be passed without `url` in
`StringOptionsWithImporter`.

###
[`v1.74.1`](https://togithub.com/sass/dart-sass/blob/HEAD/CHANGELOG.md#1741)

[Compare
Source](https://togithub.com/sass/dart-sass/compare/1.72.0...1.74.1)

-   No user-visible changes.

###
[`v1.72.0`](https://togithub.com/sass/dart-sass/blob/HEAD/CHANGELOG.md#1720)

[Compare
Source](https://togithub.com/sass/dart-sass/compare/1.71.1...1.72.0)

- Support adjacent `/`s without whitespace in between when parsing plain
CSS
    expressions.

- Allow the Node.js `pkg:` importer to load Sass stylesheets for
`package.json`
    `exports` field entries without extensions.

- When printing suggestions for variables, use underscores in variable
names
    when the original usage used underscores.

##### JavaScript API

- Properly resolve `pkg:` imports with the Node.js package importer when
    arguments are passed to the JavaScript process.

</details>

<details>
<summary>webpack/webpack (webpack)</summary>

###
[`v5.91.0`](https://togithub.com/webpack/webpack/releases/tag/v5.91.0)

[Compare
Source](https://togithub.com/webpack/webpack/compare/v5.90.3...v5.91.0)

#### Bug Fixes

-   Deserializer for ignored modules doesn't crash
-   Allow the `unsafeCache` option to be a proxy object
-   Normalize the `snapshot.unmanagedPaths` option
-   Fixed `fs` types
-   Fixed resolve's plugins types
-   Fixed wrongly calculate postOrderIndex
-   Fixed watching types
-   Output import attrbiutes/import assertions for external JS imports
- Throw an error when DllPlugin needs to generate multiple manifest
files, but the path is the same
-   \[CSS] Output `layer`/`supports`/`media` for external CSS imports

#### New Features

-   Allow to customize the stage of BannerPlugin
-   \[CSS] Support CSS exports convention
-   \[CSS] support CSS local ident name
-   \[CSS] Support `__webpack_nonce__` for CSS chunks
-   \[CSS] Support `fetchPriority` for CSS chunks
- \[CSS] Allow to use LZW to compress css head meta (enabled in the
`production` mode by default)
-   \[CSS] Support prefetch/preload for CSS chunks

</details>

<details>
<summary>webpack-contrib/webpack-bundle-analyzer
(webpack-bundle-analyzer)</summary>

###
[`v4.10.2`](https://togithub.com/webpack-contrib/webpack-bundle-analyzer/blob/HEAD/CHANGELOG.md#4102)

[Compare
Source](https://togithub.com/webpack-contrib/webpack-bundle-analyzer/compare/v4.10.1...v4.10.2)

-   **Bug Fix**
- fix `.cjs` files not being handled
([#&#8203;512](https://togithub.com/webpack-contrib/webpack-bundle-analyzer/pull/512)
by [@&#8203;Rush](https://togithub.com/Rush))

-   **Internal**
- Remove `is-plain-object`
([#&#8203;627](https://togithub.com/webpack-contrib/webpack-bundle-analyzer/pull/627)
by [@&#8203;SukkaW](https://togithub.com/SukkaW))

</details>

<details>
<summary>webpack/webpack-dev-server (webpack-dev-server)</summary>

###
[`v4.15.2`](https://togithub.com/webpack/webpack-dev-server/releases/tag/v4.15.2)

[Compare
Source](https://togithub.com/webpack/webpack-dev-server/compare/v4.15.1...v4.15.2)

#####
[4.15.2](https://togithub.com/webpack/webpack-dev-server/compare/v4.15.1...v4.15.2)
(2024-03-20)

##### Bug Fixes

- **security:** bump webpack-dev-middleware
([4116209](https://togithub.com/webpack/webpack-dev-server/commit/411620997594d24cd1f788e8533a5c6fa2736143))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 4am on monday" in timezone
Australia/Sydney, Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://togithub.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/google/osv.dev).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4zMTMuMSIsInVwZGF0ZWRJblZlciI6IjM3LjMxMy4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyJdfQ==-->
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants