Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): bump ember-intl from 5.7.2 to 6.1.1 #244

Merged
merged 1 commit into from
Oct 26, 2023

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 22, 2023

Bumps ember-intl from 5.7.2 to 6.1.1.

Release notes

Sourced from ember-intl's releases.

Failed attempt to address a vulnerability

[!NOTE] Update:

I tried installing [email protected] and realized there's no change to fast-glob. Will need to investigate other possible solutions again.

[!IMPORTANT] [email protected] should resolve a high-severity report from Dependabot. A regression is possible, because the patch for broccoli-merge-files involved a major-version update of fast-glob.

Title: glob-parent before 5.1.2 vulnerable to Regular Expression Denial of Service in enclosure regex

Description: This affects the package glob-parent before 5.1.2. The enclosure regex used to check for strings ending in enclosure containing path separator.

Beginning of the 6.x series

Almost 2 years passed since 5.7.2 had been released. Many thanks to those who have continued to use ember-intl and even tried out 6.0.0-beta.x.

[!IMPORTANT] As you may know, 6.0.0 had been released by accident and isn't a stable version. So 6.1.0 marks the beginning of the 6.x series.

Going forward, I think that we'll do a better job with documenting code changes and will continue to improve DX (e.g. simplify API, provide types that work with @tsconfig/ember and Glint).

If you run into a breaking change that hasn't been documented, please let us know by opening an issue and/or creating a pull request.

https://ember-intl.github.io/ember-intl/docs/guide/migration-5-0-to-6-1

Dropped support for Ember 3.24 and Node 14

After setting the minimum supported Node version to 16, I updated some of the dependencies for ember-intl to their latest version.

Since the Ember and Node tests continued to pass, I'm hoping that there were no bugs and regressions since v6.0.0-beta.5. However, if you notice an issue with v6.0.0-beta.6, please let us know.

The docs-app now runs on [email protected].

Added Glint support and fixed bugs

⚠️ This beta will be the last version that supports Ember 3.24 and Node 14.

⚠️ There is a known bug for the Glint support: ember-intl/ember-intl#1764

For Glint users, how to add the Registry from ember-intl:

import '@glint/environment-ember-loose';
import type EmberIntlRegistry from 'ember-intl/template-registry';
declare module '@​glint/environment-ember-loose/registry' {
export default interface Registry extends EmberIntlRegistry, /* other addon registries */ {
</tr></table>

... (truncated)

Changelog

Sourced from ember-intl's changelog.

6.1.1 (2023-09-20)

Internal

  • #1786 Remove unused and unnecessary development dependencies (@​ijlee2)
  • #1785 [Security] Patched broccoli-merge-files so that the latest version of fast-glob may be installed (@​ijlee2)

Committers: 1

6.1.0 (2023-09-19)

Note, 6.0.0 had been released by accident and isn't a stable version. Version 6.1.0 marks the beginning of the 6.x series.

The lists below show the known changes between 6.0.0-beta.2 and 6.1.0.

Breaking Change

Bug Fix

Enhancement

6.0.0-beta.7 (2023-08-30)

Breaking Change

Enhancement

Internal

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by ijlee2, a new releaser for ember-intl since your current version.


Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 22, 2023
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/ember-intl-6.1.1 branch from f0c7287 to 3a69459 Compare October 20, 2023 10:37
@Yelinz
Copy link
Member

Yelinz commented Oct 26, 2023

@dependabot rebase

Bumps [ember-intl](https://github.com/ember-intl/ember-intl) from 5.7.2 to 6.1.1.
- [Release notes](https://github.com/ember-intl/ember-intl/releases)
- [Changelog](https://github.com/ember-intl/ember-intl/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ember-intl/ember-intl/commits/v6.1.1)

---
updated-dependencies:
- dependency-name: ember-intl
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/ember-intl-6.1.1 branch from 3a69459 to 94abd6e Compare October 26, 2023 11:56
@Yelinz Yelinz merged commit 33353d3 into main Oct 26, 2023
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/ember-intl-6.1.1 branch October 26, 2023 12:02
@anehx
Copy link
Contributor

anehx commented Dec 5, 2023

🎉 This PR is included in version 3.2.1 🎉

The release is available on:

Your semantic-release bot 📦🚀

@anehx anehx added the released label Dec 5, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code released
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants