Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bump the updates group with 4 updates #11

Closed
wants to merge 1 commit into from
Closed

Bump the updates group with 4 updates #11

wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jun 1, 2024 •
edited
Loading

Bumps the updates group with 4 updates: github.com/evanw/esbuild, github.com/gabriel-vasile/mimetype, github.com/jackc/pgx/v5 and google.golang.org/api.

Updates github.com/evanw/esbuild from 0.21.1 to 0.21.4

Release notes

Sourced from github.com/evanw/esbuild's releases.

v0.21.4

  • Update support for import assertions and import attributes in node (#3778)

    Import assertions (the assert keyword) have been removed from node starting in v22.0.0. So esbuild will now strip them and generate a warning with --target=node22 or above:

    ▲ [WARNING] The "assert" keyword is not supported in the configured target environment ("node22") [assert-to-with]

    example.mjs:1:40:
  1 │ import json from "esbuild/package.json" assert { type: "json" }
    │                                         ~~~~~~
    ╵                                         with

    

    Did you mean to use "with" instead of "assert"?

    Import attributes (the with keyword) have been backported to node 18 starting in v18.20.0. So esbuild will no longer strip them with --target=node18.N if N is 20 or greater.

  • Fix for await transform when a label is present

    This release fixes a bug where the for await transform, which wraps the loop in a try statement, previously failed to also move the loop's label into the try statement. This bug only affects code that uses both of these features in combination. Here's an example of some affected code:

    // Original code
async function test() {
  outer: for await (const x of [Promise.resolve([0, 1])]) {
    for (const y of x) if (y) break outer
    throw 'fail'
  }
}
// Old output (with --target=es6)
function test() {
return __async(this, null, function* () {
outer: try {
for (var iter = __forAwait([Promise.resolve([0, 1])]), more, temp, error; more = !(temp = yield iter.next()).done; more = false) {
const x = temp.value;
for (const y of x) if (y) break outer;
throw "fail";
}
} catch (temp) {
error = [temp];
} finally {
try {
more && (temp = iter.return) && (yield temp.call(iter));
} finally {
if (error)
throw error[0];
}
}

... (truncated)

Changelog

Sourced from github.com/evanw/esbuild's changelog.

0.21.4

  • Update support for import assertions and import attributes in node (#3778)

    Import assertions (the assert keyword) have been removed from node starting in v22.0.0. So esbuild will now strip them and generate a warning with --target=node22 or above:

    ▲ [WARNING] The "assert" keyword is not supported in the configured target environment ("node22") [assert-to-with]

    example.mjs:1:40:
  1 │ import json from "esbuild/package.json" assert { type: "json" }
    │                                         ~~~~~~
    ╵                                         with

    

    Did you mean to use "with" instead of "assert"?

    Import attributes (the with keyword) have been backported to node 18 starting in v18.20.0. So esbuild will no longer strip them with --target=node18.N if N is 20 or greater.

  • Fix for await transform when a label is present

    This release fixes a bug where the for await transform, which wraps the loop in a try statement, previously failed to also move the loop's label into the try statement. This bug only affects code that uses both of these features in combination. Here's an example of some affected code:

    // Original code
async function test() {
  outer: for await (const x of [Promise.resolve([0, 1])]) {
    for (const y of x) if (y) break outer
    throw 'fail'
  }
}
// Old output (with --target=es6)
function test() {
return __async(this, null, function* () {
outer: try {
for (var iter = __forAwait([Promise.resolve([0, 1])]), more, temp, error; more = !(temp = yield iter.next()).done; more = false) {
const x = temp.value;
for (const y of x) if (y) break outer;
throw "fail";
}
} catch (temp) {
error = [temp];
} finally {
try {
more && (temp = iter.return) && (yield temp.call(iter));
} finally {
if (error)
throw error[0];
}

... (truncated)

Commits

Updates github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4

Release notes

Sourced from github.com/gabriel-vasile/mimetype's releases.

v1.4.4

What's Changed

Security fixes:

Update golang.org/x/net to latest. Fixes: CVE-2023-45288

Performance improvements:

Benchmarks:

before:
BenchmarkText/application/x-ndjson-8              663314              2027 ns/op            4306 B/op          6 allocs/op
BenchmarkSliceRand-8                              688160              1690 ns/op             728 B/op         75 allocs/op
BenchmarkSrt-8                                    946042              1089 ns/op            4240 B/op          5 allocs/op
after:
BenchmarkText/application/x-ndjson-8             1930292               678.6 ns/op           160 B/op          4 allocs/op
BenchmarkSliceRand-8                             1232066              1173 ns/op             160 B/op          4 allocs/op
BenchmarkSrt-8                                   3235448               368.8 ns/op            64 B/op          2 allocs/op

New Contributors

Full Changelog: gabriel-vasile/mimetype@v1.4.3...v1.4.4

Commits
  • 43192c8 Bump the github-actions group across 1 directory with 3 updates (#534)
  • 07821d3 Using io.ReadAll instead of ioutil.ReadAll (#525)
  • 9bd6023 github actions & readme: remove codecov badge (#533)
  • ff4d3d0 improve performance for text detection (#532)
  • bc511b8 add defaultLimit and use it when resetting back (#531)
  • 341c422 Improve x-subrip detection performance (#524)
  • 043efb9 fix benchmark files order (#518)
  • fd7639e ftyp: exit asap to prevent mem allocs (#517)
  • 889166d Merge pull request #505 from gabriel-vasile/dependabot/github_actions/github-...
  • e938b0c Merge pull request #502 from gabriel-vasile/dependabot/go_modules/gomod-82d2d...
  • Additional commits viewable in compare view

Updates github.com/jackc/pgx/v5 from 5.5.5 to 5.6.0

Changelog

Sourced from github.com/jackc/pgx/v5's changelog.

5.6.0 (May 25, 2024)

  • Add StrictNamedArgs (Tomas Zahradnicek)
  • Add support for macaddr8 type (Carlos Pérez-Aradros Herce)
  • Add SeverityUnlocalized field to PgError / Notice
  • Performance optimization of RowToStructByPos/Name (Zach Olstein)
  • Allow customizing context canceled behavior for pgconn
  • Add ScanLocation to pgtype.Timestamp[tz]Codec
  • Add custom data to pgconn.PgConn
  • Fix ResultReader.Read() to handle nil values
  • Do not encode interval microseconds when they are 0 (Carlos Pérez-Aradros Herce)
  • pgconn.SafeToRetry checks for wrapped errors (tjasko)
  • Failed connection attempts include all errors
  • Optimize LargeObject.Read (Mitar)
  • Add tracing for connection acquire and release from pool (ngavinsir)
  • Fix encode driver.Valuer not called when nil
  • Add support for custom JSON marshal and unmarshal (Mitar)
  • Use Go default keepalive for TCP connections (Hans-Joachim Kliemeck)
Commits
  • 572d7ff Release v5.6.0
  • b4911f1 Merge pull request #2019 from jackc/fix-encode-driver-valuer-on-pointer
  • 24c0a5e remove keepalive and rely on GOLANG default (since go 1.13 default is 15s)
  • 9ca9203 Move typed nil handling to Map.Encode from anynil
  • 79cab46 Only use anynil inside of pgtype
  • 6ea2d24 Remove anynil.NormalizeSlice
  • c1075bf Remove some special casing for QueryExecModeExec
  • cf6074f Remove unused anynil.Normalize
  • 13beb38 Fix encode driver.Valuer on nil-able non-pointers
  • fec45c8 Refactor appendParamsForQueryExecModeExec
  • Additional commits viewable in compare view

Updates google.golang.org/api from 0.181.0 to 0.182.0

Release notes

Sourced from google.golang.org/api's releases.

v0.182.0

0.182.0 (2024-05-28)

Features

Changelog

Sourced from google.golang.org/api's changelog.

0.182.0 (2024-05-28)

Features

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the updates group with 4 updates
967618c 
Bumps the updates group with 4 updates: [github.com/evanw/esbuild](https://github.com/evanw/esbuild), [github.com/gabriel-vasile/mimetype](https://github.com/gabriel-vasile/mimetype), [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) and [google.golang.org/api](https://github.com/googleapis/google-api-go-client).


Updates `github.com/evanw/esbuild` from 0.21.1 to 0.21.4
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](evanw/esbuild@v0.21.1...v0.21.4)

Updates `github.com/gabriel-vasile/mimetype` from 1.4.3 to 1.4.4
- [Release notes](https://github.com/gabriel-vasile/mimetype/releases)
- [Commits](gabriel-vasile/mimetype@v1.4.3...v1.4.4)

Updates `github.com/jackc/pgx/v5` from 5.5.5 to 5.6.0
- [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md)
- [Commits](jackc/pgx@v5.5.5...v5.6.0)

Updates `google.golang.org/api` from 0.181.0 to 0.182.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.181.0...v0.182.0)

---
updated-dependencies:
- dependency-name: github.com/evanw/esbuild
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: updates
- dependency-name: github.com/gabriel-vasile/mimetype
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: updates
- dependency-name: github.com/jackc/pgx/v5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: updates
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: updates
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jun 1, 2024
@dependabot Dependabot
Copy link
Contributor Author

dependabot bot commented on behalf of github Jun 11, 2024

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Jun 11, 2024
@dependabot dependabot bot deleted the dependabot/go_modules/updates-185eed2da3 branch June 11, 2024 21:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants