Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update npm dependencies update to latest (major) #2318

Closed
wants to merge 4 commits into from
Closed

Update npm dependencies update to latest (major) #2318

wants to merge 4 commits into from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Aug 1, 2024 •
edited
Loading

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
@rollup/plugin-commonjs (source) ^25.0.7 -> ^26.0.0 age adoption passing confidence
@types/node (source) 18.19.42 -> 20.14.14 age adoption passing confidence
glob ^10.3.10 -> ^11.0.0 age adoption passing confidence
rimraf ^5.0.5 -> ^6.0.0 age adoption passing confidence
rollup (source) 2.79.1 -> 4.19.2 age adoption passing confidence

Release Notes

rollup/plugins (@​rollup/plugin-commonjs)

v26.0.1

2024-06-05

Bugfixes
  • fix: correct import of glob (04a15b5)

v26.0.0

2024-06-05

Breaking Changes
  • chore!: bump glob's version (#​1695)
isaacs/node-glob (glob)

v11.0.0

Compare Source

isaacs/rimraf (rimraf)

v6.0.1

Compare Source

v6.0.0

Compare Source

v5.0.10

Compare Source

v5.0.9

Compare Source

v5.0.8

Compare Source

v5.0.7

Compare Source

v5.0.6

Compare Source

v5.0.5

Compare Source

v5.0.4

Compare Source

v5.0.3

Compare Source

v5.0.2

Compare Source

v5.0.1

Compare Source

v5.0.0

Compare Source

v4.4.1

Compare Source

v4.4.0

Compare Source

v4.3.1

Compare Source

v4.3.0

Compare Source

v4.2.0

Compare Source

v4.1.4

Compare Source

v4.1.3

Compare Source

v4.1.2

Compare Source

v4.1.1

Compare Source

v4.1.0

Compare Source

v4.0.7

Compare Source

v4.0.6

Compare Source

v4.0.5

Compare Source

v4.0.4

Compare Source

v4.0.3

Compare Source

v4.0.2

Compare Source

v4.0.1

Compare Source

v4.0.0

Compare Source

v3.0.2

Compare Source

v3.0.1

Compare Source

v3.0.0

Compare Source

rollup/rollup (rollup)

v4.19.2

Compare Source

2024-08-01

Bug Fixes
  • Avoid "cannot get value of null" error when using optional chaining with namespaces (#​5597)
Pull Requests

v4.19.1

Compare Source

2024-07-27

Bug Fixes
  • Do not remove parantheses when tree-shaking logical expressions (#​5584)
  • Do not ignore side effects in calls left of an optional chaining operator (#​5589)
Pull Requests

v4.19.0

Compare Source

2024-07-20

Features
  • Implement support for decorators (#​5562)
Bug Fixes
  • Improve soucemap generation when tree-shaking logical expressions (#​5581)
Pull Requests

v4.18.1

Compare Source

2024-07-08

Bug Fixes
  • Prevent "%" in generated file names to ensure imports resolve (#​5535)
Pull Requests

v4.18.0

Compare Source

2024-05-22

Features
  • Resolve import.meta.filename and .dirname in transpiled plugins (#​5520)
Pull Requests

v4.17.2

Compare Source

2024-04-30

Bug Fixes
  • Fix tree-shaking problems when using spread arguments (#​5503)
Pull Requests

v4.17.1

Compare Source

2024-04-29

Bug Fixes
  • Prevent infinite recursions for certain constructor invocations (#​5500)
Pull Requests

v4.17.0

Compare Source

2024-04-27

Features
  • Track function call arguments to optimize functions only called once or with the same literal values (re-release from 4.16.0) (#​5483)
Bug Fixes
  • Reduce browser WASM size to a fraction by changing optimization settings (#​5494)
Pull Requests

v4.16.4

Compare Source

2024-04-23

Bug Fixes
  • Revert function parameter tracking logic introduced in 4.16.0 to work on some remaining issues (#​5487)
Pull Requests

v4.16.3

Compare Source

2024-04-23

Bug Fixes
  • Do not optimize IIFEs that have a name and are again referenced inside their definition (#​5486)
Pull Requests

v4.16.2

Compare Source

2024-04-22

Bug Fixes
  • Resolve a situation condition where reassignments of function parameters were not tracked properly (#​5482)
  • Make sure that for armv7 packages, only one package is downloaded for the user (musl or gnu) (#​5479)
Pull Requests

v4.16.1

Compare Source

2024-04-21

Bug Fixes
  • Fix crash when rendering logical or conditional expressions (#​5481)
Pull Requests

v4.16.0

Compare Source

2024-04-21

Features
  • Track function call arguments to optimize functions only called once or with the same literal values (#​5443)
Pull Requests

v4.15.0

Compare Source

2024-04-20

Features
  • Add output.importAttributesKey option to select whether to use "with" or "assert" for import attributes (#​5474)
Pull Requests

v4.14.3

Compare Source

2024-04-15

Bug Fixes
  • Support Alpine Linux and other MUSL builds on ARM (#​5471)
Pull Requests

v4.14.2

Compare Source

2024-04-12

Bug Fixes
  • Do not create invalid code when reexporting both a namespace and the default export from that namespace (#​5466)
  • Ensure ppc64 platform is properly detected (#​5460)
Pull Requests

v4.14.1

Compare Source

2024-04-07

Bug Fixes
  • Show better error when running on musl Linux where the musl build is not supported (#​5454)
Pull Requests

v4.14.0

Compare Source

2024-04-03

Features
  • Display error causes in Rollup CLI (#​5422)
  • Add basic support for explicit resource management via "using" and "await using" (#​5423)
Pull Requests

v4.13.2

Compare Source

2024-03-28

Bug Fixes
  • Ensure accessing module info is cached after the build phase for improved performance (#​5438)
  • Support powerpc64le CPUs (#​5350)
Pull Requests

v4.13.1

Compare Source

2024-03-27

Bug Fixes
  • Add new linux-s390x-gnu native binary package (#​5346)
Pull Requests

v4.13.0

Compare Source

2024-03-12

Features
  • Ensure that the location of parse errors and other logs is encoded in the error message as well (#​5424)
Pull Requests

v4.12.1

Compare Source

2024-03-06

Bug Fixes
  • Escape special characters in file references (#​5404)
Pull Requests

v4.12.0

Compare Source

2024-02-16

Features
  • Improve raw bundling performance by 10-15% when not using the cache or plugins that return an AST (#​5391)
Pull Requests

v4.11.0

Compare Source

2024-02-15

Features
  • Add output.reexportProtoFromExternal option to disable special code for handling __proto__ reexports (#​5380)
Bug Fixes
  • Ensure namespace reexport code can be parsed by cjs-module-lexer (#​5380)
  • Throw when trying to reassing const variables (#​5388)
Pull Requests

v4.10.0

Compare Source

2024-02-10

Features
  • Support base-36 and base-16 hashes again via new output.hashCharacters option (#​5371)
Bug Fixes
  • Do not crash process for panics in native code but throw them as JavaScript errors (#​5383)
Pull Requests

v4.9.6

Compare Source

2024-01-21

Bug Fixes
  • Detect side effects when an element that was pushed into an array is modified via the array (#​5352)
Pull Requests

v4.9.5

Compare Source

2024-01-12

Bug Fixes
  • Fix issue where on Windows, Rollup would not load due to problems with the MSVC executable (#​5335)
Pull Requests

v4.9.4

Compare Source

2024-01-06

Bug Fixes
  • Use quotes for keys in namespaces that are only numbers but are not valid integers (#​5328)
  • Allow to have comments between pure annotations and the annoted node (#​5332)
Pull Requests

v4.9.3

Compare Source

2024-01-05

Bug Fixes
  • Support __proto__ as export/import name (#​5313)
  • Use ESTree AST type over custom type in user-facing types (#​5323)
Pull Requests

v4.9.2

Compare Source

2023-12-30

Bug Fixes
  • Extend support for arbitrary namespace identifiers in SystemJS (#​5321)
  • Do not wrongly flag functions without side effects as side effects if moduleSideEffects is false (#​5322)
Pull Requests

v4.9.1

Compare Source

2023-12-17

Bug Fixes
  • Fix an issue where break statements could include the wrong label (#​5297)
Pull Requests

v4.9.0

Compare Source

2023-12-13

Features
  • Fully support arbitrary strings as import and export identifiers (#​5298)
Pull Requests

v4.8.0

Compare Source

2023-12-11

Features
  • Improve experimentalMinChunkSize to take already loaded modules from dynamic imports into account (#​5294)
Pull Requests

v4.7.0

Compare Source

2023-12-08

Features
  • Add build for Linux riscv64 architecture (#​5288)
Bug Fixes
  • Improve error message when native Windows build does not start (#​5284)
Pull Requests

v4.6.1

Compare Source

2023-11-30

Bug Fixes
  • Resolve a situation where declaring the same var several times was considered a conflict (#​5276)
Pull Requests

v4.6.0

Compare Source

2023-11-26

Features
  • Allow this.addWatchFile in all plugin hooks (#​5270)
Bug Fixes
  • Show helpful error when native binaries are not installed due to an npm issue (#​5267)
  • Do not access this context in this.addWatchFile so it does not need to be bound when passed around (#​5270)
Pull Requests

v4.5.2

Compare Source

2023-11-24

Bug Fixes
  • Handle files with UTF-8 BOM when using the commonjs plugin (#​5268)
Pull Requests

v4.5.1

Compare Source

2023-11-21

Bug Fixes
  • Do not error when a function expression uses the same name for a parameter and its id (#​5262)
Pull Requests

v4.5.0

Compare Source

2023-11-18

Bug Fixes
  • Show a proper error when using native Rollup on armv7 musl Linux (#​5255)
Pull Requests

v4.4.1

Compare Source

2023-11-14

Bug Fixes
  • Do not flag duplicate function declarations in function scopes as syntax errors (#​5248)
Pull Requests

v4.4.0

Compare Source

2023-11-12

Features
  • Replace SWC linting with faster internal linting to error on duplicate declarations etc. (#​5207)
Bug Fixes
  • Show proper error when an entry exports non-existing bindings (#​5207)
Pull Requests

v4.3.1

Compare Source

2023-11-11

Bug Fixes
  • Fix rename error when handling errors in watch mode (#​5240)
  • Prevent warni

Configuration

📅 Schedule: Branch creation - "monthly" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot force-pushed the renovate/major-npm-dependencies-update-to-latest branch from 0464a4e to 7e85dca Compare August 1, 2024 08:51
@jattasNI jattasNI mentioned this pull request Aug 1, 2024
Merged
1 task
rajsite pushed a commit that referenced this pull request Aug 1, 2024
@jattasNI
Exclude Apache Arrow and eslint from Renovate major updates (#2321)
186667b 
# Pull Request

## 🤨 Rationale

This Renovate PR #2318 is failing builds because it tries to update
eslint to 9.x but javascript-styleguide is only compatible with 8.x.

We also don't want Renovate to do major updates of apache arrow in
either npm or nuget because it's pinned and needs to stay in sync
between npm and nuget so should probably be manually handled.

## 👩‍💻 Implementation

Update Renovate config to exclude those dependencies. I got the names of
the dependencies from `packages.json` for npm and `packages.lock.json`
for nuget.

## 🧪 Testing

After this goes in we can retrigger the Renovate algorithm and see if
the major bump excludes these.

## ✅ Checklist

<!--- Review the list and put an x in the boxes that apply or ~~strike
through~~ around items that don't (along with an explanation). -->

- [x] I have updated the project documentation to reflect my changes or
determined no changes are needed.
@renovate renovate bot force-pushed the renovate/major-npm-dependencies-update-to-latest branch from 7e85dca to a17d8b0 Compare August 1, 2024 20:48
rajsite
rajsite reviewed Aug 1, 2024
View reviewed changes
packages/blazor-workspace/NimbleBlazor/package.json
@@ -26,6 +26,6 @@
],
"peerDependencies": {
"cross-env": "^7.0.3",
"rimraf": "^5.0.5"
Copy link
Member

@rajsite rajsite Aug 1, 2024 •
edited
Loading

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The PR description says rollup should update but the resolved rollup didn't actually change.

Turns out the rollup-plugin-sourcemaps package we depend on hasn't been updated in years and has a transitive peerdep on rollup 2 so we are stuck on that for the root package resolution. Looks like it's unmaintained: maxdavidson/rollup-plugin-sourcemaps#130

And should maybe switch to https://github.com/2wce/rollup-plugin-sourcemaps2

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actually this package doesn't seem to be used.. https://www.npmjs.com/package/rollup-plugin-sourcemaps2
This isn't causing an actual issue as far as I can tell so just gonna ignore for now

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It also failed the build because the package is missing files the script tried to import.

@renovate renovate bot force-pushed the renovate/major-npm-dependencies-update-to-latest branch from a17d8b0 to 5ad6b7f Compare August 2, 2024 10:34
@rajsite rajsite mentioned this pull request Aug 2, 2024
Open
@renovate renovate bot force-pushed the renovate/major-npm-dependencies-update-to-latest branch from 5ad6b7f to b3c763e Compare August 2, 2024 17:54
@rajsite rajsite enabled auto-merge (squash) August 2, 2024 18:03
@rajsite rajsite disabled auto-merge August 2, 2024 18:24
@rajsite rajsite force-pushed the renovate/major-npm-dependencies-update-to-latest branch from b3c763e to 51693c5 Compare August 2, 2024 18:29
@renovate Renovate
Copy link
Contributor Author

renovate bot commented Aug 2, 2024

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@rajsite rajsite enabled auto-merge (squash) August 2, 2024 18:29
@rajsite rajsite disabled auto-merge August 2, 2024 18:30
rajsite
rajsite reviewed Aug 2, 2024
View reviewed changes
packages/nimble-components/package.json
@@ -88,7 +88,7 @@
"@types/d3-scale": "^4.0.2",
"@types/d3-selection": "^3.0.0",
"@types/d3-zoom": "^3.0.0",
"@types/markdown-it": "^13.0.8",
"@types/markdown-it": "^14.0.0",
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Don't understand why this is updated again, gonna close the PR and retrigger renovate

@rajsite rajsite closed this Aug 2, 2024
@rajsite rajsite deleted the renovate/major-npm-dependencies-update-to-latest branch August 2, 2024 18:32
@rajsite rajsite mentioned this pull request Sep 3, 2024
Closed
1 task
@rajsite rajsite mentioned this pull request Sep 25, 2024
Merged
1 task
rajsite added a commit that referenced this pull request Sep 26, 2024
@rajsite
Dependency update September 2024 (#2413)
c17dc0b 
# Pull Request

## 🤨 Rationale

A follow-up for #2410 and
#2408 which were getting in weird
states due to dependency updates around rollup.

## 👩‍💻 Implementation

Previously had found that the rollup-plugin-sourcemaps was [causing
issues](#2318 (comment))
because it had not been updated in a long time and resulted in a
transitive dependency on an old rollup version. This seems to mess with
rennovate updates.

- Updated to
[rollup-plugin-sourcemaps2](https://github.com/2wce/rollup-plugin-sourcemaps2)
which now seems to be [used in at least a few
projects](https://www.npmjs.com/package/rollup-plugin-sourcemaps2)
- Updated other dependencies that were pending
- Leveraged a new flag added to concurrently that causes the build logs
to align nicer by making prefixes the same width. Also has a bug fix
that handles stray new lines once in a while.
- Rebuilt the lockfile

## 🧪 Testing

- Verified manually that the bundled minified builds have working source
maps
- Rely on CI for rest of the updates
- Trigger full storybook build

## ✅ Checklist

- [x] I have updated the project documentation to reflect my changes or
determined no changes are needed.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@jattasNI jattasNI jattasNI left review comments

@rajsite rajsite rajsite left review comments

@atmgrifter00 atmgrifter00 Awaiting requested review from atmgrifter00 atmgrifter00 is a code owner

@msmithNI msmithNI Awaiting requested review from msmithNI msmithNI is a code owner

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@rajsite @jattasNI