dependabot[bot]
faa65778b7
Bump browserify-sign from 4.0.4 to 4.2.2 in /fixtures/expiration ( #27600 )
2023-11-01 19:31:28 +00:00
dependabot[bot]
de49d83f30
Bump lodash from 4.17.4 to 4.17.21 in /fixtures/expiration ( #27591 )
...
Bumps [lodash](https://github.com/lodash/lodash ) from 4.17.4 to 4.17.21.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/lodash/lodash/commit/f299b52f39486275a9e6483b60a410e06520c538 "><code>f299b52</code></a>
Bump to v4.17.21</li>
<li><a
href="https://github.com/lodash/lodash/commit/c4847ebe7d14540bb28a8b932a9ce1b9ecbfee1a "><code>c4847eb</code></a>
Improve performance of <code>toNumber</code>, <code>trim</code> and
<code>trimEnd</code> on large input strings</li>
<li><a
href="https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c "><code>3469357</code></a>
Prevent command injection through <code>_.template</code>'s
<code>variable</code> option</li>
<li><a
href="https://github.com/lodash/lodash/commit/ded9bc66583ed0b4e3b7dc906206d40757b4a90a "><code>ded9bc6</code></a>
Bump to v4.17.20.</li>
<li><a
href="https://github.com/lodash/lodash/commit/63150ef7645ac07961b63a86490f419f356429aa "><code>63150ef</code></a>
Documentation fixes.</li>
<li><a
href="https://github.com/lodash/lodash/commit/00f0f62a979d2f5fa0287c06eae70cf9a62d8794 "><code>00f0f62</code></a>
test.js: Remove trailing comma.</li>
<li><a
href="https://github.com/lodash/lodash/commit/846e434c7a5b5692c55ebf5715ed677b70a32389 "><code>846e434</code></a>
Temporarily use a custom fork of <code>lodash-cli</code>.</li>
<li><a
href="https://github.com/lodash/lodash/commit/5d046f39cbd27f573914768e3b36eeefcc4f1229 "><code>5d046f3</code></a>
Re-enable Travis tests on <code>4.17</code> branch.</li>
<li><a
href="https://github.com/lodash/lodash/commit/aa816b36d402a1ad9385142ce7188f17dae514fd "><code>aa816b3</code></a>
Remove <code>/npm-package</code>.</li>
<li><a
href="https://github.com/lodash/lodash/commit/d7fbc52ee0466a6d248f047b5d5c3e6d1e099056 "><code>d7fbc52</code></a>
Bump to v4.17.19</li>
<li>Additional commits viewable in <a
href="https://github.com/lodash/lodash/compare/4.17.4...4.17.21 ">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~bnjmnt4n ">bnjmnt4n</a>, a new releaser for
lodash since your current version.</p>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/facebook/react/network/alerts ).
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-26 09:43:55 -04:00
Sebastian Markbåge and Sebastian Silbermann
c8d4eeda5f
Rename yarn start to yarn dev and yarn start:prod to yarn start ( #26209 )
...
The `start` convention is a CRA convention but nobody else of the modern
frameworks / tools use this convention for a file watcher and dev mode.
Instead the common convention is `dev`. Instead `start` is for running a
production build that's already been built.
---------
Co-authored-by: Sebastian Silbermann <silbermann.sebastian@gmail.com >
2023-02-21 14:18:21 -05:00
Sebastian Markbåge
db5e6250d4
Rename yarn build-combined to just yarn build ( #26192 )
...
It's confusing to new contributors, and me, that you're supposed to use
`yarn build-combined` for almost everything but not fixtures.
We should use only one build command for everything.
Updated fixtures to use the folder convention of build-combined.
2023-02-17 16:00:18 -05:00
dependabot[bot]
aea1e6fb37
Bump css-what from 2.1.0 to 2.1.3 in /fixtures/expiration ( #25431 )
...
Bumps [css-what](https://github.com/fb55/css-what ) from 2.1.0 to 2.1.3.
- [Release notes](https://github.com/fb55/css-what/releases )
- [Commits](https://github.com/fb55/css-what/compare/v2.1.0...v2.1.3 )
---
updated-dependencies:
- dependency-name: css-what
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 12:54:19 -04:00
dependabot[bot]
b4e2fac09d
Bump handlebars from 4.0.11 to 4.5.3 in /fixtures/expiration ( #17729 )
...
Bumps [handlebars](https://github.com/wycats/handlebars.js ) from 4.0.11 to 4.5.3.
- [Release notes](https://github.com/wycats/handlebars.js/releases )
- [Changelog](https://github.com/wycats/handlebars.js/blob/master/release-notes.md )
- [Commits](https://github.com/wycats/handlebars.js/compare/v4.0.11...v4.5.3 )
Signed-off-by: dependabot[bot] <support@github.com >
2019-12-30 08:57:08 -08:00
Brian Vaughn
686f1060ad
Publish a local release (canary or stable) to NPM ( #14260 )
...
New release scripts.
Learn more at https://github.com/facebook/react/blob/master/scripts/release/README.md
2018-11-23 12:37:18 -08:00
Md Zubair Ahmed
77f96ed9c3
changed {} in pck.json and split them with && in fixtures ( #11982 )
2018-01-09 11:15:09 +00:00
Andrew Clark
9b36df86c6
Use requestIdleCallback timeout to force expiration ( #11548 )
...
* Don't call idle callback unless there's time remaining
* Expiration fixture
Fixture that demonstrates how async work expires after a certain interval.
The fixture clogs the main thread with animation work, so it only works if the
`timeout` option is provided to `requestIdleCallback`.
* Pass timeout option to requestIdleCallback
Forces `requestIdleCallback` to fire if too much time has elapsed, even if the
main thread is busy. Required to make expiration times work properly. Otherwise,
async work can expire, but React never has a chance to flush it because the
browser never calls into React.
2017-11-15 13:46:17 -08:00
dependabot[bot]
Sebastian MarkbågeandSebastian Silbermann
Brian Vaughn
Md Zubair Ahmed
Andrew Clark