fix(deps): update all non-major dependencies (minor)

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@opentelemetry/instrumentation-generic-pool (source)	^0.37.0 -> ^0.43.0
@opentelemetry/instrumentation-http (source)	^0.52.0 -> ^0.57.0
@opentelemetry/instrumentation-net (source)	^0.37.0 -> ^0.43.0
@reach/dialog (source)	0.15.3 -> 0.18.0
lit (source)	2.6.1 -> 2.8.0
publicodes (source)	1.0.0-beta.60 -> 1.6.1

---

Release Notes

open-telemetry/opentelemetry-js-contrib (@​opentelemetry/instrumentation-generic-pool)

v0.43.0

Compare Source

v0.42.0

Compare Source

v0.41.0

Compare Source

v0.40.0

Compare Source

v0.39.0

Compare Source

v0.38.1

Compare Source

v0.38.0

Compare Source

open-telemetry/opentelemetry-js (@​opentelemetry/instrumentation-http)

v0.57.0

Compare Source

v0.56.0

Compare Source

v0.55.0

Compare Source

v0.54.2

Compare Source

v0.54.1

Compare Source

v0.54.0

Compare Source

v0.53.0

Compare Source

reach/reach-ui (@​reach/dialog)

v0.18.0

Compare Source

BREAKING Changes

• All default exports have been removed. Replace all default imports with the appropriate documented named export.
• The output directory structure has changed slightly. Module files are now named reach-<pkg>.mjs instead of reach-<pkg>.esm.js.

Minor Changes

• We have simplified our build setup to remove a boatload of dependencies. Build output for all packages may look slightly different, though functionally packages that don't have explicit changes marked in the release notes have not changed.

  This may affect you if you use patch-package to modify output code. If you need support for legacy browsers, the new bundle may not transpile the same ECMA features as before. In that case you may want to transpile Reach packages directly.

• We no longer check that our internal styles are included by looking for a defined CSS custom property. You can still include our base styles as before, but this removes the need to define --reach-<pkg> in your own stylesheets to silence dev warnings.

Patch Changes

• Updated dependencies:
  • @reach/[email protected]
  • @reach/[email protected]
  • @reach/[email protected]

v0.17.0

Compare Source

💔 Breaking Changes

• disclosure
  • In uncontrolled disclosures, previously we would render the disclosure as open on the first render, regardless of the defaultOpen prop's value. This was done as a progressive enhancement to ensure content was visible to users without JavaScript, but in most cases it just meant that the user might see a flash before the state would change, causing unwanted layout shift.
  • We simplified this by simply respecting the defaultOpen prop's value on the initial render. If you want the old behavior, control the state of your disclosures and ensure that the initial open state is always set to true, then set the desired state for the following render in useEffect.
• tabs
  • Removed the isSelected from from the Tab component. This prop was useful before we had hooks, but we can now get the selected tab from context without using render props. (2dd0aec)

🐛 Bugfixes

• auto-id
  • Use the user-provided ID beyond the first render for deterministic behavior (b2f3bc0)
• tabs
  • Stop managing focus on mouse clicks to fix :focus-visible
• listbox
  • Update submit button querySelector specificity to fix incorrect button clicks (#​903)
• menu-button, combobox, listbox
  • Skip rendering of portaled popovers before hydration. This prevents unwanted layout shift when the server-rendered popover mounts to a temporary DOM node (a8f38a4).

🤜🤛 8 Committers

• Ashlee M Boyer (@​ashleemboyer)
• Jeff Grannes (@​jeffgrannes)
• Jonathan (@​jhogervorst)
• Kendall Strautman (@​kendallstrautman)
• Kent C. Dodds (@​kentcdodds)
• Vlad Yanchevsky (@​chevsky)
• Zach Gotsch (@​zgotsch)
• @​rainmodred

v0.16.2

Compare Source

✨ Enhancements

• combobox
  • #​783 Stop binding value changes from undesirely expanding combobox (@​dlacaille)
• portal
  • #​756 Add optional node container target to Portal (@​Warsaken)
• disclosure
  • Make Disclosure accessible when Javascript is disabled (@​schwartzadev)

🤜🤛 5 Committers

• Adam Rackis (@​arackaf)
• Andrew Schwartz (@​schwartzadev)
• Austin Wood (@​indiesquidge)
• Dominic Lacaille (@​dlacaille)
• @​Warsaken

v0.16.0

Compare Source

BREAKING: This release fixes a rendering bug in the descendants, but the bug in some cases may have coincidentally allowed descendants to be re-indexed in dynamically sorted lists. While this is probably a nice feature, it didn't work consistently and created problems with nested collections.

We do not directly support dynamic sorting of lists, so if you relied on this "feature" you'll need to provide indices to the descendant item directly via props. If you're rendering dynamic lists you are probably iterating an array anyway, so you shouldn't have any issues.

This applies to all collection-based compound components:

• Tabs
• Accordion
• MenuButton
• Listbox
• Combobox

🐛 Bugfixes

• menu-button
  • Reference root's ownerDocument instead of global, better support in iframes

✨ Enhancements

• menu-button
  • Better handling of mouse-move that caused problems with long lists on small screens
• dialog
  • Update dependencies to fix small bugs in focus-lock
• rect
  • Only log warning if observe is true

🤜🤛 3 Committers

• Chance Strickland (@​chaance)
• Aliaksei Kirylchyk (@​akirilchik)
• Rauno (@​raunofreiberg)

lit/lit (lit)

v2.8.0

Compare Source

Minor Changes

• #​3993 e2c50569 - Fix return type of isTemplateResult helper to include the CompiledTemplateResult and fix the cache directive to work correctly with CompiledTemplateResults. Also add an explicit isCompiledTemplateResult helper.

Patch Changes

• #​4031 8057c78d - Rename ReactiveElement._initialize to __initialize, make it private, and remove the @​internal annotation. This will help prevent collisions with subclasses that implement their own _initialize method, while using development builds.

• Updated dependencies [e2c50569]:

  • [email protected]

v2.7.6

Compare Source

Patch Changes

• #​3968 5bb40831 - Allow undefined to be passed to the ref() directive

• #​3969 7d8d4a15 - Make RefOrCallback generic like Ref

• #​3987 bb2560f1 - Change the h field of CompiledTemplates to a TemplateStringsArray preventing the spoofing of CompiledTemplates by JSON injection attacks. This should not be a breaking change for most users unless you're using CompiledTemplates. This is a necessary security fix, similar to #​2307.

v2.7.5

Compare Source

Patch Changes

• #​3917 f6387e35 - Allow decorators to accept ReactiveElement class from a different source.

v2.7.4

Compare Source

Patch Changes

• #​3871 308280eb - remove test directory from npm publication

v2.7.3

Compare Source

Patch Changes

• #​3825 343187b1 - static-html no longer adds an item to TemplateResult's value array for the last consumed static value. This fixes an error with server-side rendering of static html.

• #​3766 4431cbb8 - Fix styleMap initial render of mixed-case custom props

v2.7.2

Compare Source

Patch Changes

• #​3788 88fe0390 - Allow numbers to be used as values in styleMap()

v2.7.1

Compare Source

Patch Changes

• #​3768 7c1191da - Fix styleMap's handling of important flags

• #​3720 575fb578 - lit-html/experimental-hydrate.js and lit-element/experimental-hydrate-support.js have been moved to @lit-labs/ssr-client.

  The modules in the original location have been marked deprecated and will be removed in a future version.

v2.7.0

Compare Source

Minor Changes

• #​3677 b95c86e5 - [SSR only] Reflect ARIA attributes onto server rendered Lit elements with attached internals during SSR and remove them upon hydration.

• #​3667 e00f6f52 - [SSR only] Improved how nodes with attribute/property/event/element bindings are rendered in SSR, to avoid adding comments inside of "raw text elements" like <textarea>. Fixes #​3663.

  Note: @lit-labs/ssr and lit-html must be updated together.

Patch Changes

• #​3583 88a40177 - [SSR only] Add more detail to some hydration errors

• Updated dependencies [4d698430, b95c86e5, e00f6f52, 88a40177]:

  • [email protected]
  • [email protected]

publicodes/publicodes (publicodes)

v1.6.1

Compare Source

Patch Changes

• #​602 db92224 Thanks @​johangirod! - Fix missingVariables in text mecanism

• #​600 cb4d878 Thanks @​johangirod! - Fix a bug with setSituation and keepPreviousSituation

v1.6.0

Compare Source

Minor Changes

• #​585 ed32af2 Thanks @​totakoko! - Ajoute le mécanisme division entière via la syntaxe //

Patch Changes

• 27a7f75 Thanks @​johangirod! - Use external dependencies for moo and nearley.
  (instead of devDependencies, which means that the packages were bundled with publicodes even with esm)

v1.5.4

Compare Source

Patch Changes

• #​584 da688c7 Thanks @​johangirod! - Fix bug with contexte

  v1.3.2 introduced a bug when using contexte :

  • If a contexte was evaluated before and after setSituation with keepPreviousSituation on, the returned value would be the one of the first evaluation (before setSituation)
  • If a contexte was used within a inversion numérique, the returned value would be undefined

  This fixes it.

• #​570 8688aba Thanks @​johangirod! - Improve type inference

v1.5.1

Compare Source

Patch Changes

• 78bc846 Thanks @​johangirod! - Fix arrondi mecanism error

  For certain case, the value returned by the arrondi mecanism was not correct. For instance :

  arrondi:
    valeur: 4.55
    arrondi: 1 décimales

  The value returned was 4.5 instead of 4.6. This is now fixed.

v1.5.0

Compare Source

v1.4.0

Compare Source

v1.3.3

Compare Source

v1.3.2

Compare Source

v1.3.1

Compare Source

v1.3.0

Compare Source

v1.2.0

Compare Source

v1.1.1

Compare Source

v1.1.0

Compare Source

v1.0.5

Compare Source

v1.0.4

Compare Source

v1.0.3

Compare Source

v1.0.2

Compare Source

v1.0.1

Compare Source

v1.0.0-rfc.2

Compare Source

v1.0.0-rfc.1

Compare Source

v1.0.0-rc.7

Compare Source

v1.0.0-rc.6

Compare Source

v1.0.0-rc.5

Compare Source

v1.0.0-rc.4

Compare Source

v1.0.0-rc.3

Compare Source

v1.0.0-beta.77

Compare Source

v1.0.0-beta.76

Compare Source

v1.0.0-beta.75

Compare Source

v1.0.0-beta.74

Compare Source

v1.0.0-beta.73

Compare Source

v1.0.0-beta.72

Compare Source

v1.0.0-beta.71

Compare Source

v1.0.0-beta.70

Compare Source

v1.0.0-beta.69

Compare Source

v1.0.0-beta.68

Compare Source

v1.0.0-beta.67

Compare Source

v1.0.0-beta.66

Compare Source

v1.0.0-beta.65

Compare Source

v1.0.0-beta.64

Compare Source

v1.0.0-beta.63

Compare Source

v1.0.0-beta.62

Compare Source

v1.0.0-beta.61

Compare Source

---

Configuration

📅 Schedule: Branch creation - "* 0-3 1 * *" in timezone Europe/Paris, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[socket-security]

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/@octokit/[email protected]	None	0	43.7 kB	octokitbot
npm/@octokit/[email protected]	None	+1	425 kB	octokitbot
npm/@octokit/[email protected]	None	0	11.6 kB	gr2m
npm/@octokit/[email protected]	None	0	1.55 MB	octokitbot
npm/[email protected]	None	0	5.51 kB	wilsonjackson
npm/[email protected]	None	0	4.76 kB	stevemao
npm/[email protected]	filesystem	0	31.5 kB	oss-bot
npm/[email protected]	None	0	30.1 kB	oss-bot
npm/[email protected]	None	0	15 kB	doowb
npm/[email protected]	None	0	17.1 kB	oss-bot
npm/[email protected]	shell	0	7.41 kB	oss-bot
npm/[email protected]	None	0	2.77 kB	sindresorhus
npm/[email protected]	shell	0	6.61 kB	oss-bot
npm/[email protected]	None	0	22.8 kB	doowb
npm/[email protected]	None	0	4.33 kB	sindresorhus
npm/[email protected]	None	0	9.45 kB	jonschlinkert
npm/[email protected]	None	0	84.9 kB	typescript-bot
npm/[email protected]	None	0	14.2 kB	timoxley

View full report↗︎

[socket-security]

👍 Dependency issues cleared. Learn more about Socket for GitHub ↗︎

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report↗︎