Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade esbuild from 0.21.2 to 0.21.3 #105

Merged
merged 1 commit into from
Jun 11, 2024

Conversation

RosaleeKnight
Copy link
Owner

This PR was automatically created by Snyk using the credentials of a real user.


![snyk-top-banner](https://github.com/andygongea/OWASP-Benchmark/assets/818805/c518c423-16fe-447e-b67f-ad5a49b5d123)

Snyk has created this PR to upgrade esbuild from 0.21.2 to 0.21.3.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 1 version ahead of your current version.

  • The recommended version was released on 21 days ago.

Release notes
Package name: esbuild
  • 0.21.3 - 2024-05-15
    • Implement the decorator metadata proposal (#3760)

      This release implements the decorator metadata proposal, which is a sub-proposal of the decorators proposal. Microsoft shipped the decorators proposal in TypeScript 5.0 and the decorator metadata proposal in TypeScript 5.2, so it's important that esbuild also supports both of these features. Here's a quick example:

      // Shim the "Symbol.metadata" symbol
      Symbol.metadata ??= Symbol('Symbol.metadata')

      const track = (_, context) => {
      (context.metadata.names ||= []).push(context.name)
      }

      class Foo {
      @track foo = 1
      @track bar = 2
      }

      // Prints ["foo", "bar"]
      console.log(Foo[Symbol.metadata].names)

      ⚠️ WARNING ⚠️

      This proposal has been marked as "stage 3" which means "recommended for implementation". However, it's still a work in progress and isn't a part of JavaScript yet, so keep in mind that any code that uses JavaScript decorator metadata may need to be updated as the feature continues to evolve. If/when that happens, I will update esbuild's implementation to match the specification. I will not be supporting old versions of the specification.

    • Fix bundled decorators in derived classes (#3768)

      In certain cases, bundling code that uses decorators in a derived class with a class body that references its own class name could previously generate code that crashes at run-time due to an incorrect variable name. This problem has been fixed. Here is an example of code that was compiled incorrectly before this fix:

      class Foo extends Object {
        @(x => x) foo() {
          return Foo
        }
      }
      console.log(new Foo().foo())
    • Fix tsconfig.json files inside symlinked directories (#3767)

      This release fixes an issue with a scenario involving a tsconfig.json file that extends another file from within a symlinked directory that uses the paths feature. In that case, the implicit baseURL value should be based on the real path (i.e. after expanding all symbolic links) instead of the original path. This was already done for other files that esbuild resolves but was not yet done for tsconfig.json because it's special-cased (the regular path resolver can't be used because the information inside tsconfig.json is involved in path resolution). Note that this fix no longer applies if the --preserve-symlinks setting is enabled.

  • 0.21.2 - 2024-05-12
    • Correct this in field and accessor decorators (#3761)

      This release changes the value of this in initializers for class field and accessor decorators from the module-level this value to the appropriate this value for the decorated element (either the class or the instance). It was previously incorrect due to lack of test coverage. Here's an example of a decorator that doesn't work without this change:

      const dec = () => function() { this.bar = true }
      class Foo { @dec static foo }
      console.log(Foo.bar) // Should be "true"
    • Allow es2023 as a target environment (#3762)

      TypeScript recently added es2023 as a compilation target, so esbuild now supports this too. There is no difference between a target of es2022 and es2023 as far as esbuild is concerned since the 2023 edition of JavaScript doesn't introduce any new syntax features.

from esbuild GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Snyk has created this PR to upgrade esbuild from 0.21.2 to 0.21.3.

See this package in npm:
esbuild

See this project in Snyk:
https://app.snyk.io/org/rosaleeknight/project/ac5eb869-f7ff-4600-9341-d2326bdc670a?utm_source=github&utm_medium=referral&page=upgrade-pr
@RosaleeKnight RosaleeKnight merged commit 46d5038 into main Jun 11, 2024
1 check passed
@RosaleeKnight RosaleeKnight deleted the snyk-upgrade-372f0faef9bb744d7e6c9df1c7c2cd21 branch June 11, 2024 12:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants