Bump the npm_and_yarn group with 2 updates #84

dependabot · 2024-10-12T19:55:46Z

Bumps the npm_and_yarn group with 2 updates: cookie and astro.

Updates cookie from 0.6.0 to 0.7.2

Release notes

v0.7.2

Fixed

Fix object assignment of hasOwnProperty (#177) bc38ffd

jshttp/cookie@v0.7.1...v0.7.2

0.7.1

Fixed

Allow leading dot for domain (#174)

Although not permitted in the spec, some users expect this to work and user agents ignore the leading dot according to spec

Add fast path for serialize without options, use obj.hasOwnProperty when parsing (#172)

jshttp/cookie@v0.7.0...v0.7.1

0.7.0

perf: parse cookies ~10% faster (#144 by @kurtextrem and #170)

fix: narrow the validation of cookies to match RFC6265 (#167 by @bewinsnw)

fix: add main to package.json for rspack (#166 by @proudparrot2)

jshttp/cookie@v0.6.0...v0.7.0

Commits

d19eaa1 0.7.2
bc38ffd Fix object assignment of hasOwnProperty (#177)
cf4658f 0.7.1
6a8b8f5 Allow leading dot for domain (#174)
58015c0 Remove more code and perf wins (#172)
ab057d6 0.7.0
5f02ca8 Migrate history to GitHub releases
a5d591c Migrate history to GitHub releases
51968f9 Skip isNaN
9e7ca51 perf(parse): cache length, return early (#144)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by blakeembrey, a new releaser for cookie since your current version.

Updates astro from 4.15.9 to 4.16.2

Release notes

Sourced from astro's releases.

[email protected]

Patch Changes

#12206 12b0022 Thanks @bluwy! - Reverts withastro/astro#12173 which caused Can't modify immutable headers warnings and 500 errors on Cloudflare Pages

[email protected]

Patch Changes

#12177 a4ffbfa Thanks @matthewp! - Ensure we target scripts for execution in the router

Using document.scripts is unsafe because if the application has a name="scripts" this will shadow the built-in document.scripts. Fix is to use getElementsByTagName to ensure we're only grabbing real scripts.
#12173 2d10de5 Thanks @ematipico! - Fixes a bug where Astro Actions couldn't redirect to the correct pathname when there was a rewrite involved.

[email protected]

Minor Changes

#12039 710a1a1 Thanks @ematipico! - Adds a markdown.shikiConfig.langAlias option that allows aliasing a non-supported code language to a known language. This is useful when the language of your code samples is not a built-in Shiki language, but you want your Markdown source to contain an accurate language while also displaying syntax highlighting.

The following example configures Shiki to highlight cjs code blocks using the javascript syntax highlighter:

import { defineConfig } from 'astro/config';
export default defineConfig({
markdown: {
shikiConfig: {
langAlias: {
cjs: 'javascript',
},
},
},
});

Then in your Markdown, you can use the alias as the language for a code block for syntax highlighting:

```cjs
'use strict';
function commonJs() {
return 'I am a commonjs file';
}
</code></pre>
</li>
<li>
<p><a href="https://redirect.github.com/withastro/astro/pull/11984">#11984</a> <a href="https:/withastro/astro/commit/3ac2263ff6070136bec9cffb863c38bcc31ccdfe"><code>3ac2263</code></a> Thanks <a href="https:/chaegumi"><code>@chaegumi</code></a>! - Adds a new <code>build.concurreny</code> configuration option to specify the number of pages to build in parallel</p>
<p><strong>In most cases, you should not change the default value of <code>1</code>.</strong></p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https:/withastro/astro/blob/main/packages/astro/CHANGELOG.md&quot;&gt;astro's changelog</a>.</em></p>
<blockquote>
<h2>4.16.2</h2>
<h3>Patch Changes</h3>
<ul>
<li><a href="https://redirect.github.com/withastro/astro/pull/12206&quot;&gt;#12206&lt;/a> <a href="https:/withastro/astro/commit/12b00225067445629e5ae451d763d03f70065f88&quot;&gt;&lt;code&gt;12b0022&lt;/code&gt;&lt;/a> Thanks <a href="https:/bluwy&quot;&gt;&lt;code&gt;@bluwy&lt;/code&gt;&lt;/a>! - Reverts <a href="https://redirect.github.com/withastro/astro/pull/12173&quot;&gt;withastro/astro#12173&lt;/a> which caused <code>Can't modify immutable headers</code> warnings and 500 errors on Cloudflare Pages</li>
</ul>
<h2>4.16.1</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p><a href="https://redirect.github.com/withastro/astro/pull/12177&quot;&gt;#12177&lt;/a> <a href="https://github.com/withastro/astro/commit/a4ffbfaa5cb460c12bd486fd75e36147f51d3e5e&quot;&gt;&lt;code&gt;a4ffbfa&lt;/code&gt;&lt;/a> Thanks <a href="https:/matthewp&quot;&gt;&lt;code&gt;@matthewp&lt;/code&gt;&lt;/a>! - Ensure we target scripts for execution in the router</p>
<p>Using <code>document.scripts</code> is unsafe because if the application has a <code>name=&quot;scripts&quot;</code> this will shadow the built-in <code>document.scripts</code>. Fix is to use <code>getElementsByTagName</code> to ensure we're only grabbing real scripts.</p>
</li>
<li>
<p><a href="https://redirect.github.com/withastro/astro/pull/12173&quot;&gt;#12173&lt;/a> <a href="https:/withastro/astro/commit/2d10de5f212323e6e19c7ea379826dcc18fe739c&quot;&gt;&lt;code&gt;2d10de5&lt;/code&gt;&lt;/a> Thanks <a href="https:/ematipico&quot;&gt;&lt;code&gt;@ematipico&lt;/code&gt;&lt;/a>! - Fixes a bug where Astro Actions couldn't redirect to the correct pathname when there was a rewrite involved.</p>
</li>
</ul>
<h2>4.16.0</h2>
<h3>Minor Changes</h3>
<ul>
<li>
<p><a href="https://redirect.github.com/withastro/astro/pull/12039&quot;&gt;#12039&lt;/a> <a href="https://github.com/withastro/astro/commit/710a1a11f488ff6ed3da6d3e0723b2322ccfe27b&quot;&gt;&lt;code&gt;710a1a1&lt;/code&gt;&lt;/a> Thanks <a href="https:/ematipico&quot;&gt;&lt;code&gt;@ematipico&lt;/code&gt;&lt;/a>! - Adds a <code>markdown.shikiConfig.langAlias</code> option that allows <a href="https://shiki.style/guide/load-lang#custom-language-aliases&quot;&gt;aliasing a non-supported code language to a known language</a>. This is useful when the language of your code samples is not <a href="https://shiki.style/languages&quot;&gt;a built-in Shiki language</a>, but you want your Markdown source to contain an accurate language while also displaying syntax highlighting.</p>
<p>The following example configures Shiki to highlight <code>cjs</code> code blocks using the <code>javascript</code> syntax highlighter:</p>
<pre lang="js"><code>import { defineConfig } from 'astro/config';
export default defineConfig({
markdown: {
shikiConfig: {
langAlias: {
cjs: 'javascript',
},
},
},
});
</code></pre>
<p>Then in your Markdown, you can use the alias as the language for a code block for syntax highlighting:</p>
<pre lang="md"><code>```cjs
'use strict';
function commonJs() {
return 'I am a commonjs file';
}

... (truncated)

Commits

bbc72a1 [ci] release (#12207)
12b0022 Revert #12173 (#12206)
c73d65d [ci] release (#12178)
650dd22 Fix VT video test fail in firefox (#12188)
58e22bd [ci] format
2d10de5 fix(routing): actions should redirect the original pathname (#12173)
a4ffbfa Ensure router only targets scripts for execution (#12177)
2f5b28e Use p-queue instead of fastq (#12189)
1f93fca Fix biome lint warning (#12187)
582f12e [ci] release (#12148)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the npm_and_yarn group with 2 updates: [cookie](https:/jshttp/cookie) and [astro](https:/withastro/astro/tree/HEAD/packages/astro). Updates `cookie` from 0.6.0 to 0.7.2 - [Release notes](https:/jshttp/cookie/releases) - [Commits](jshttp/cookie@v0.6.0...v0.7.2) Updates `astro` from 4.15.9 to 4.16.2 - [Release notes](https:/withastro/astro/releases) - [Changelog](https:/withastro/astro/blob/main/packages/astro/CHANGELOG.md) - [Commits](https:/withastro/astro/commits/[email protected]/packages/astro) --- updated-dependencies: - dependency-name: cookie dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: astro dependency-type: direct:production dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]>

vercel · 2024-10-12T19:55:48Z

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
vipyrsec-site	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	Oct 12, 2024 7:56pm

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 12, 2024

vercel bot deployed to Preview October 12, 2024 19:56 View deployment

import-pandas-as-numpy approved these changes Oct 12, 2024

View reviewed changes

import-pandas-as-numpy merged commit 4be3eb5 into main Oct 12, 2024
7 checks passed

import-pandas-as-numpy deleted the dependabot/npm_and_yarn/npm_and_yarn-d57ee3990e branch October 12, 2024 19:58

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the npm_and_yarn group with 2 updates #84

Bump the npm_and_yarn group with 2 updates #84

dependabot bot commented on behalf of github Oct 12, 2024

vercel bot commented Oct 12, 2024 •

edited

Loading

Bump the npm_and_yarn group with 2 updates #84

Bump the npm_and_yarn group with 2 updates #84

Conversation

dependabot bot commented on behalf of github Oct 12, 2024

v0.7.2

0.7.1

0.7.0

[email protected]

Patch Changes

[email protected]

Patch Changes

[email protected]

Minor Changes

vercel bot commented Oct 12, 2024 • edited Loading

vercel bot commented Oct 12, 2024 •

edited

Loading