Skip to content

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Jul 5, 2024

Bumps the npm_and_yarn group with 6 updates in the / directory:

Package From To
@grpc/grpc-js 1.7.3 1.8.22
marked 12.0.2 13.0.0
postcss 8.4.38 8.4.39
semver 7.5.2 7.5.3
yaml 2.4.2 2.4.3
braces 3.0.2 3.0.3

Updates @grpc/grpc-js from 1.7.3 to 1.8.22

Release notes

Sourced from @​grpc/grpc-js's releases.

@​grpc/grpc-js 1.8.22

  • Avoid buffering significantly more than grpc.max_receive_message_size per received message.

@​grpc/grpc-js@​1.8.21

  • Fix propagation of UNIMPLEMENTED error messages (#2528)

@​grpc/grpc-js 1.8.20

  • Fix a crash when the channel option grpc.keepalive_permit_without_calls is set (#2519)

@​grpc/grpc-js 1.8.19

  • Update keepalive behavior to more correctly handle short calls and long periods of inactivity (#2513)

@​grpc/grpc-js 1.8.18

  • Fix reporting of call stacks in unary request errors (#2503)
  • Fix reporting of proxy info in channelz socket responses (#2503)

@​grpc/grpc-js 1.8.17

  • Disallow pick_first LB policy as the direct child of an outlier_detection LB policy (#2476)

@​grpc/grpc-js 1.8.16

  • Fix missing transport trace logs (#2470)

@​grpc/grpc-js 1.8.15

  • Fix a memory leak that could result from a specific pattern of recursive function calls (#2456)
  • Ensure status and error events are consistently emitted asynchronously (#2456)

@​grpc/grpc-js 1.8.14

  • Fix sequencing of some events related to connectivity state changes (#2421)

@​grpc/grpc-js 1.8.13

  • Fix memory leak in channelz socket tracking (#2394)

@​grpc/grpc-js@​1.8.12

  • Fix an occasional type error when receiving DNS updates (#2380)
  • Fix ordering of events when handing requests on the server (#2376 contributed by @​phoenix741)

@​grpc/grpc-js 1.8.11

  • Avoid accumulating placeholder objects when sending many messages on a long-running stream (#2372)

@​grpc/grpc-js 1.8.10

  • Fix bugs in "pick first" load balancing policy that caused incorrect reconnection behavior (#2369)

@​grpc/grpc-js 1.8.9

  • Fix a bug where clients would continue to send pings at the original configured rate after receiving a backoff request from the server (#2363)

@​grpc/grpc-js 1.8.8

  • Remove progress field in returned status object (#2350)
  • Export InterceptingListener and NextCall types (#2351)
  • Fix a bug that could cause a crash when sending messages that exceed the outgoing message buffer size while a retry is in progress (#2349)

... (truncated)

Commits
  • a8a0203 Merge pull request from GHSA-7v5v-9h63-cj86
  • 3b110cd grpc-js: Bump to 1.8.22
  • 8e62222 grpc-js: Avoid buffering significantly more than max_receive_message_size per...
  • 9d83947 Merge pull request #2742 from sergiitk/backport-1.8-psm-interop-common-prod-t...
  • 00f348c Merge pull request #2729 from sergiitk/psm-interop-common-prod-tests
  • 36d105b Merge pull request #2737 from murgatroid99/backport-1.8-grpc-js_linkify-it_fix
  • 969e305 Merge pull request #2735 from murgatroid99/grpc-js_linkify-it_fix
  • d78216f Merge pull request #2715 from sergiitk/backport-1.8-psm-interop-pkg-dev
  • f38966a Merge pull request #2712 from sergiitk/psm-interop-pkg-dev
  • ffefff2 Merge pull request #2640 from XuanWang-Amos/backport-1.8-psm-interop-shared-b...
  • Additional commits viewable in compare view

Updates marked from 12.0.2 to 13.0.0

Release notes

Sourced from marked's releases.

v13.0.0

13.0.0 (2024-06-12)

Bug Fixes

  • Fix blockquote code continuation (#3264) (7ab8185)
  • Add parser as a property on the Renderer object (#3291)
  • Send block text tokens to the text renderer (#3291)

Features

  • Send token objects to renderers (#3291) (1ce59ea)
  • Add space renderer that returns empty string by default (#3291)
  • Add header and align properties to TableCell token (#3291)
  • Add TableRow token (#3291)
  • Add Checkbox token (#3291)

BREAKING CHANGES

  • Add space token after blockquote and hr if there are multiple newlines
  • Send token objects to renderers and move logic to parse tokens from the parser to the renderers.
    • Most extensions that update marked renderers should still work with this version but will break in a future major version.

    • Extensions that change marked renderers will need to be updated and use new option useNewRenderer and accept a token object instead of multiple parameters. See updated Renderer docs

      // v12 renderer extension
      const extension = {
      renderer: {
      heading(text, level) {
      // increase level by 1
      return <h${level + 1}>${text}</h${level + 1}>;
      }
      }
      };
      marked.use(extension);

      // v13 renderer extension
      const extension = {
      useNewRenderer: true,
      renderer: {
      heading(token) {
      // increase depth by 1

... (truncated)

Commits
  • f56ba32 chore(release): 13.0.0 [skip ci]
  • a317d96 chore(deps-dev): Bump braces from 3.0.2 to 3.0.3 (#3322)
  • 1ce59ea feat: Send token objects to renderers (#3291)
  • 7ab8185 fix: blockquote code continuation (#3264)
  • 0e40783 chore(deps-dev): Bump @​typescript-eslint/parser from 7.10.0 to 7.12.0 (#3319)
  • 359a680 chore(deps-dev): Bump @​semantic-release/github from 10.0.5 to 10.0.6 (#3321)
  • 47a492b chore(deps-dev): Bump @​typescript-eslint/eslint-plugin from 7.11.0 to 7.12.0 ...
  • 481ac3b Update Lexer section in USING_PRO.md (#3317)
  • 9056c47 chore(deps-dev): Bump @​semantic-release/release-notes-generator from 13.0.0 t...
  • 975f259 chore(deps-dev): Bump semantic-release from 23.1.1 to 24.0.0 (#3313)
  • Additional commits viewable in compare view

Updates postcss from 8.4.38 to 8.4.39

Release notes

Sourced from postcss's releases.

8.4.39

Changelog

Sourced from postcss's changelog.

8.4.39

Commits

Updates semver from 7.5.2 to 7.5.3

Release notes

Sourced from semver's releases.

v7.5.3

7.5.3 (2023-06-22)

Bug Fixes

Documentation

Changelog

Sourced from semver's changelog.

7.5.3 (2023-06-22)

Bug Fixes

Documentation

Commits

Updates yaml from 2.4.2 to 2.4.3

Release notes

Sourced from yaml's releases.

v2.4.3

  • Improve error when parsing a non-string value (#459)
  • Do not parse -.NaN or +.nan as NaN (#546)
  • Support # within %TAG prefixes with trailing #comments
  • Check for non-node complex keys when stringifying with simpleKeys (#541)
Commits
  • 208d98f 2.4.3
  • fad10b2 style: Apply updated Prettier style
  • b92b602 chore: Refresh lockfile
  • a1dc96f fix: Improve error when parsing a non-string value (fixes #459)
  • edc623d fix: Do not parse -.NaN or +.nan as NaN (#546)
  • 69f3517 fix: Support # within %TAG prefixes with trailing #comments
  • ba89ff2 fix: Check for non-node complex keys when stringifying with simpleKeys (#541)
  • See full diff in compare view

Updates braces from 3.0.2 to 3.0.3

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the npm_and_yarn group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@grpc/grpc-js](https://github.com/grpc/grpc-node) | `1.7.3` | `1.8.22` |
| [marked](https://github.com/markedjs/marked) | `12.0.2` | `13.0.0` |
| [postcss](https://github.com/postcss/postcss) | `8.4.38` | `8.4.39` |
| [semver](https://github.com/npm/node-semver) | `7.5.2` | `7.5.3` |
| [yaml](https://github.com/eemeli/yaml) | `2.4.2` | `2.4.3` |
| [braces](https://github.com/micromatch/braces) | `3.0.2` | `3.0.3` |



Updates `@grpc/grpc-js` from 1.7.3 to 1.8.22
- [Release notes](https://github.com/grpc/grpc-node/releases)
- [Commits](https://github.com/grpc/grpc-node/compare/@grpc/[email protected]...@grpc/[email protected])

Updates `marked` from 12.0.2 to 13.0.0
- [Release notes](https://github.com/markedjs/marked/releases)
- [Changelog](https://github.com/markedjs/marked/blob/master/.releaserc.json)
- [Commits](markedjs/marked@v12.0.2...v13.0.0)

Updates `postcss` from 8.4.38 to 8.4.39
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.4.38...8.4.39)

Updates `semver` from 7.5.2 to 7.5.3
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md)
- [Commits](npm/node-semver@v7.5.2...v7.5.3)

Updates `yaml` from 2.4.2 to 2.4.3
- [Release notes](https://github.com/eemeli/yaml/releases)
- [Commits](eemeli/yaml@v2.4.2...v2.4.3)

Updates `braces` from 3.0.2 to 3.0.3
- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md)
- [Commits](micromatch/braces@3.0.2...3.0.3)

---
updated-dependencies:
- dependency-name: "@grpc/grpc-js"
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: marked
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: postcss
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: semver
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: yaml
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: braces
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jul 5, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants