chore(deps): update devdependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
cypress	~9.5.1 -> ~9.5.2
esbuild	~0.14.25 -> ~0.14.27
eslint-plugin-jsdoc	~38.0.2 -> ~38.0.4

---

Release Notes

cypress-io/cypress

v9.5.2

Compare Source

Released 3/14/2022

Bugfixes:

• Fixed an issue with .type() where click events could be fired on the
  incorrect target element because the target focus changed within a key-down
  event handler callback. Fixed in
  #​20525.
• Fixed a regression in 9.5.0 where ANSI
  colors were not removed from the FireFox warning message about the
  chromeWebSecurity configuration option having no effect on the Firefox
  browser. Fixes #​20496.
• Updates were made to the pre-release build setup such that Cypress will use a
  unique cache folder for each
  pre-release installation
  on a machine. This removes the need to run cypress clear cache before
  installing a new pre-release version of Cypress or before installing a new
  released version of Cypress after a pre-release version had been installed.
  Addressed in #​20296.

Misc:

• Updates were made to explicitly disable the Origin-Agent-Cluster header for
  proxied responses to ensure document.domain can continue to be set with
  Chrome v106+. This was necessary because Chrome is planning to make
  document.domain immutable
  in v106+ to relax the same-origin policy by interpreting the
  Origin-Agent-Cluster as true, whereas it is currently interpreted as
  false. Addresses
  #​20147.

Dependency Updates:

• Upgraded url-parse dependency from 1.5.6 to 1.5.9 to address these NVD
  security vulnerabilities,
  CVE-2022-0639,
  CVE-2022-0686 and
  CVE-2022-0691. Addressed in
  #​20386 and
  #​20439.

evanw/esbuild

v0.14.27

Compare Source

• Avoid generating an enumerable default import for CommonJS files in Babel mode (#​2097)

  Importing a CommonJS module into an ES module can be done in two different ways. In node mode the default import is always set to module.exports, while in Babel mode the default import passes through to module.exports.default instead. Node mode is triggered when the importing file ends in .mjs, has type: "module" in its package.json file, or the imported module does not have a __esModule marker.

  Previously esbuild always created the forwarding default import in Babel mode, even if module.exports had no property called default. This was problematic because the getter named default still showed up as a property on the imported namespace object, and could potentially interfere with code that iterated over the properties of the imported namespace object. With this release the getter named default will now only be added in Babel mode if the default property exists at the time of the import.

• Fix a circular import edge case regarding ESM-to-CommonJS conversion (#​1894, #​2059)

  This fixes a regression that was introduced in version 0.14.5 of esbuild. Ever since that version, esbuild now creates two separate export objects when you convert an ES module file into a CommonJS module: one for ES modules and one for CommonJS modules. The one for CommonJS modules is written to module.exports and exported from the file, and the one for ES modules is internal and can be accessed by bundling code that imports the entry point (for example, the entry point might import itself to be able to inspect its own exports).

  The reason for these two separate export objects is that CommonJS modules are supposed to see a special export called __esModule which indicates that the module used to be an ES module, while ES modules are not supposed to see any automatically-added export named __esModule. This matters for real-world code both because people sometimes iterate over the properties of ES module export namespace objects and because some people write ES module code containing their own exports named __esModule that they expect other ES module code to be able to read.

  However, this change to split exports into two separate objects broke ES module re-exports in the edge case where the imported module is involved in an import cycle. This happened because the CommonJS module.exports object was no longer mutated as exports were added. Instead it was being initialized at the end of the generated file after the import statements to other modules (which are converted into require() calls). This release changes module.exports initialization to happen earlier in the file and then double-writes further exports to both the ES module and CommonJS module export objects.

  This fix was contributed by @​indutny.

v0.14.26

Compare Source

• Fix a tree shaking regression regarding var declarations (#​2080, #​2085, #​2098, #​2099)

  Version 0.14.8 of esbuild enabled removal of duplicate function declarations when minification is enabled (see #​610):

  // Original code
  function x() { return 1 }
  console.log(x())
  function x() { return 2 }
  
  // Output (with --minify-syntax)
  console.log(x());
  function x() {
    return 2;
  }

  This transformation is safe because function declarations are "hoisted" in JavaScript, which means they are all done first before any other code is evaluted. This means the last function declaration will overwrite all previous function declarations with the same name.

  However, this introduced an unintentional regression for var declarations in which all but the last declaration was dropped if tree-shaking was enabled. This only happens for top-level var declarations that re-declare the same variable multiple times. This regression has now been fixed:

  // Original code
  var x = 1
  console.log(x)
  var x = 2
  
  // Old output (with --tree-shaking=true)
  console.log(x);
  var x = 2;
  
  // New output (with --tree-shaking=true)
  var x = 1;
  console.log(x);
  var x = 2;

  This case now has test coverage.

• Add support for parsing "instantiation expressions" from TypeScript 4.7 (#​2038)

  The upcoming version of TypeScript now lets you specify <...> type parameters on a JavaScript identifier without using a call expression:

  const ErrorMap = Map<string, Error>;  // new () => Map<string, Error>
  const errorMap = new ErrorMap();  // Map<string, Error>

  With this release, esbuild can now parse these new type annotations. This feature was contributed by @​g-plane.

• Avoid new Function in esbuild's library code (#​2081)

  Some JavaScript environments such as Cloudflare Workers or Deno Deploy don't allow new Function because they disallow dynamic JavaScript evaluation. Previously esbuild's WebAssembly-based library used this to construct the WebAssembly worker function. With this release, the code is now inlined without using new Function so it will be able to run even when this restriction is in place.

• Drop superfluous __name() calls (#​2062)

  When the --keep-names option is specified, esbuild inserts calls to a __name helper function to ensure that the .name property on function and class objects remains consistent even if the function or class name is renamed to avoid a name collision or because name minification is enabled. With this release, esbuild will now try to omit these calls to the __name helper function when the name of the function or class object was not renamed during the linking process after all:

  // Original code
  import { foo as foo1 } from 'data:text/javascript,export function foo() { return "foo1" }'
  import { foo as foo2 } from 'data:text/javascript,export function foo() { return "foo2" }'
  console.log(foo1.name, foo2.name)
  
  // Old output (with --bundle --keep-names)
  (() => {
    var __defProp = Object.defineProperty;
    var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
    function foo() {
      return "foo1";
    }
    __name(foo, "foo");
    function foo2() {
      return "foo2";
    }
    __name(foo2, "foo");
    console.log(foo.name, foo2.name);
  })();
  
  // New output (with --bundle --keep-names)
  (() => {
    var __defProp = Object.defineProperty;
    var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
    function foo() {
      return "foo1";
    }
    function foo2() {
      return "foo2";
    }
    __name(foo2, "foo");
    console.log(foo.name, foo2.name);
  })();

  Notice how one of the calls to __name is now no longer printed. This change was contributed by @​indutny.

gajus/eslint-plugin-jsdoc

v38.0.4

Compare Source

Bug Fixes

• require-jsdoc: allow TSTypeLiteral and TSTypeAliasDeclaration to have TSPropertySignature checks pass through them toward public export for publicOnly checks; fixes #​852 (19e4f6f)

v38.0.3

Compare Source

Bug Fixes

• valid-types: update es-joy/jsdoccomment (5e8e0c7)

---

Configuration

📅 Schedule: "before 2am" (UTC).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, click this checkbox.

---

This PR has been generated by WhiteSource Renovate. View repository job log here.

[codecov]

Codecov Report

Merging #618 (dc3eef8) into main (f0d3e96) will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff           @@
##             main     #618   +/-   ##
=======================================
  Coverage   99.33%   99.33%           
=======================================
  Files        1920     1920           
  Lines      176444   176444           
  Branches      898      898           
=======================================
  Hits       175265   175265           
  Misses       1123     1123           
  Partials       56       56