Bump vue-dompurify-html from 3.1.2 to 4.1.4 #55

2023-05-25T01:08:07Z

dependabot[bot] commented

2023-05-25 01:08:07 +00:00

(Migrated from github.com)

Bumps vue-dompurify-html from 3.1.2 to 4.1.4.

Release notes

Sourced from vue-dompurify-html's releases.

4.1.4

No production code change

Build and publish with Node 20 (#2577)

4.1.3

No production code change

Make sure all dependencies involved in the release process are pinned

4.1.2

No production code change

Fix mistake in publish pipeline (again 😢 ) (#2575)

4.1.1

No production code change

Fix mistake in publish pipeline (#2574)

4.1.0

Export type definition explicitly so it can work with TypeScript 5.0 --moduleResolution bundler (#2548)

Package is now published with provenance information

4.0.0

No code changes.

vue-dompurify-html now requires DOMPurify ^3.0.0. MSIE support is dropped.

vue-dompurify-html will drop support of Vue 2 in December 2023.

Commits

2c712d9 Build and publish with Node 20
e0a135e Pin all deps including during release process
443824a Create .npmrc file for authentication
23c6e37 Disable pnpm git checks in pipeline
8fbf8cf Prepare v4.1.0
720471a Add directory info to the repository section of the package.json
af011ec chore(deps): update dependency vite to v4.3.8
afb517e chore(deps): update dependency vite to v4.3.7
762abda chore(deps): update dependency vite to v4.3.6
24fa08e fix: export type definition explicitly
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [vue-dompurify-html](https://github.com/LeSuisse/vue-dompurify-html/tree/HEAD/packages/vue-dompurify-html) from 3.1.2 to 4.1.4. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/LeSuisse/vue-dompurify-html/releases">vue-dompurify-html's releases</a>.</em></p> <blockquote> <h2>4.1.4</h2> <ul> <li>No production code change</li> <li>Build and publish with Node 20 (<a href="https://github.com/LeSuisse/vue-dompurify-html/tree/HEAD/packages/vue-dompurify-html/issues/2577">#2577</a>)</li> </ul> <h2>4.1.3</h2> <ul> <li>No production code change</li> <li>Make sure all dependencies involved in the release process are pinned</li> </ul> <h2>4.1.2</h2> <ul> <li>No production code change</li> <li>Fix mistake in publish pipeline (again :cry: ) (<a href="https://github.com/LeSuisse/vue-dompurify-html/tree/HEAD/packages/vue-dompurify-html/issues/2575">#2575</a>)</li> </ul> <h2>4.1.1</h2> <ul> <li>No production code change</li> <li>Fix mistake in publish pipeline (<a href="https://github.com/LeSuisse/vue-dompurify-html/tree/HEAD/packages/vue-dompurify-html/issues/2574">#2574</a>)</li> </ul> <h2>4.1.0</h2> <ul> <li>Export type definition explicitly so it can work with TypeScript 5.0 <code>--moduleResolution bundler</code> (<a href="https://github.com/LeSuisse/vue-dompurify-html/tree/HEAD/packages/vue-dompurify-html/issues/2548">#2548</a>)</li> <li>Package is now published with <a href="https://github.blog/2023-04-19-introducing-npm-package-provenance/">provenance information</a></li> </ul> <h2>4.0.0</h2> <ul> <li>No code changes.</li> <li><code>vue-dompurify-html</code> now requires <a href="https://github.com/cure53/DOMPurify/releases/tag/3.0.0">DOMPurify ^3.0.0</a>. MSIE support is dropped.</li> </ul> <p><code>vue-dompurify-html</code> will drop support of Vue 2 in December 2023.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/LeSuisse/vue-dompurify-html/commit/2c712d9ccc6ee6b8f7c2cd71ba829e8b88f65c8c"><code>2c712d9</code></a> Build and publish with Node 20</li> <li><a href="https://github.com/LeSuisse/vue-dompurify-html/commit/e0a135eaf1df573e154e8fa61bab300e10b0201a"><code>e0a135e</code></a> Pin all deps including during release process</li> <li><a href="https://github.com/LeSuisse/vue-dompurify-html/commit/443824a568b8f3dd45947be7968c01cc6cb26487"><code>443824a</code></a> Create .npmrc file for authentication</li> <li><a href="https://github.com/LeSuisse/vue-dompurify-html/commit/23c6e377a623b45ed3b96e327e91e31e31132c6c"><code>23c6e37</code></a> Disable pnpm git checks in pipeline</li> <li><a href="https://github.com/LeSuisse/vue-dompurify-html/commit/8fbf8cfb8a2f8a06bac52eeff45fb3faab1569e2"><code>8fbf8cf</code></a> Prepare v4.1.0</li> <li><a href="https://github.com/LeSuisse/vue-dompurify-html/commit/720471ae2b99443f8a7b4fef6892478384eb866c"><code>720471a</code></a> Add <code>directory</code> info to the <code>repository</code> section of the <code>package.json</code></li> <li><a href="https://github.com/LeSuisse/vue-dompurify-html/commit/af011ec4738e1eb3b41af761fb8d2f671c923268"><code>af011ec</code></a> chore(deps): update dependency vite to v4.3.8</li> <li><a href="https://github.com/LeSuisse/vue-dompurify-html/commit/afb517e397cbe02768f8ea5c14af858cecb6dfd9"><code>afb517e</code></a> chore(deps): update dependency vite to v4.3.7</li> <li><a href="https://github.com/LeSuisse/vue-dompurify-html/commit/762abdad0ee05595fcb1ddebd36e7ca83f136452"><code>762abda</code></a> chore(deps): update dependency vite to v4.3.6</li> <li><a href="https://github.com/LeSuisse/vue-dompurify-html/commit/24fa08e507d98ca4474adf5d62d0eb25da2d0362"><code>24fa08e</code></a> fix: export type definition explicitly</li> <li>Additional commits viewable in <a href="https://github.com/LeSuisse/vue-dompurify-html/commits/v4.1.4/packages/vue-dompurify-html">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=vue-dompurify-html&package-manager=npm_and_yarn&previous-version=3.1.2&new-version=4.1.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: STEMMechanics/Website#55