github/jquery
1
1
Fork 0
mirror of https://github.com/jquery/jquery.git synced 2026-01-09 14:18:03 -05:00
Code Issues Packages Projects Releases Wiki Activity
6,780 Commits 6 Branches 162 Tags
02cf4ee090debded3da4b0e3f59bd33f516125ea
Commit Graph

6780 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Ulises Gascón
02cf4ee090 docs: updated the vulnerability reporting process and added escalation steps 
Ref: https://github.com/openjs-foundation/cross-project-council/pull/1588

Closes gh-5701
 2025-09-09 10:30:02 -04:00
dependabot[bot]
607b25eb08 Build: Bump the github-actions group with 3 updates 
Bumps the github-actions group with 3 updates: [actions/checkout](https://github.com/actions/checkout), [actions/cache](https://github.com/actions/cache) and [github/codeql-action](https://github.com/github/codeql-action).

Closes gh-5698

Updates `actions/checkout` from 4.2.2 to 5.0.0
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](11bd71901b...08c6903cd8)

Updates `actions/cache` from 4.2.3 to 4.2.4
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](5a3ec84eff...0400d5f644)

Updates `github/codeql-action` from 3.29.2 to 3.29.11
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](181d5eefc2...3c3833e0f8)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/cache
  dependency-version: 4.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: github/codeql-action
  dependency-version: 3.29.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-09-03 00:50:00 +02:00
studystill
e4d4dd81bf Docs: Fix some minor issues in comments 
Changes:
1. Eliminate mentions of Karma.
2. Replace `"root granchild"` with `"root grandchild"`.
3. Collapse duplicate "the the" & "with with" into single words.

Closes gh-5662

Signed-off-by: studystill <chenghuiyue@outlook.com>
Co-authored-by: Michał Gołębiowski-Owczarek <m.goleb@gmail.com>
 2025-08-18 22:26:53 +02:00
dependabot[bot]
9c84195b94 Build: Bump tmp and @inquirer/editor 
Bumps [tmp](https://github.com/raszi/node-tmp) and [@inquirer/editor](https://github.com/SBoudrias/Inquirer.js). These dependencies needed to be updated together.

Updates `tmp` from 0.2.3 to 0.2.5
- [Changelog](https://github.com/raszi/node-tmp/blob/master/CHANGELOG.md)
- [Commits](https://github.com/raszi/node-tmp/compare/v0.2.3...v0.2.5)

Updates `@inquirer/editor` from 4.2.11 to 4.2.16
- [Release notes](https://github.com/SBoudrias/Inquirer.js/releases)
- [Commits](https://github.com/SBoudrias/Inquirer.js/compare/@inquirer/editor@4.2.11...@inquirer/editor@4.2.16)

Closes gh-5694

---
updated-dependencies:
- dependency-name: tmp
  dependency-version: 0.2.5
  dependency-type: indirect
- dependency-name: "@inquirer/editor"
  dependency-version: 4.2.16
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-08-12 22:04:38 +02:00
Timmy Willison
093e63f92a Docs: update herodevs link in README 
Fixes gh-5695
Closes gh-5696
 2025-08-12 12:06:44 -04:00
Michał Gołębiowski-Owczarek
9d06c6dd6f Release: remove dist files from main branch 2025-08-11 19:16:41 +02:00
Michał Gołębiowski-Owczarek
586182f35e Release: 4.0.0-rc.1 4.0.0-rc.1 2025-08-11 18:52:15 +02:00
Michał Gołębiowski-Owczarek
ff1f0eaafd Release: Run npm publish in the post-release phase 
PR gh-5681 specified the `tmp/release/dist` folder as `publishPath` so that
`npm publish` is done from the dist repo, not the source one. However,
`npm publish` is invoked by release-it before the post-release phase, at which
stage the dist repo is not updated with the new release yet.

Instead, do the `npm publish` manually in the post-release stage, just after
the dist repo is updated & changes are pushed.

Closes gh-5690
 2025-08-11 18:40:09 +02:00
Michał Gołębiowski-Owczarek
fb5ab0f546 Release: Only run browserless tests during the release 
`npm test` is susceptible to any flakiness in tests, making releases less
predictable. Our process requires us to check CI before releases or run
`npm test` manually if there are issues with that, we don't need to repeat it
all during the release process.

In addition to that, currently the whole pre-release part is silent and the full
`npm test` takes a long time to finish while no feedback is presented to the
person running the release. It will be more bearable with just browserless
tests.

Closes gh-5689
 2025-08-11 17:47:14 +02:00
Michał Gołębiowski-Owczarek
f21a6ea6b5 Tests: Use releases.jquery.com as external host for AJAX testing 
Previously, we used example.com. However, that one is rate-limited, causing us
frequent unit test failures.

Closes gh-5688
 2025-08-11 17:43:01 +02:00
Michał Gołębiowski-Owczarek
a848611f9a Build: Make the sed usage portable across Linux & macOS 
On macOS (which uses the BSD-variant of sed), the `-i` flag requires its
“backup extension” to come immediately after the i (with a space), even if
it’s empty; this made the release `sed` commands fail on macOS. The GNU sed
doesn’t require an extension but it allows it.

To make the commands work both on macOS & Linux, make the following changes:
1. Always specify the backup extension.
2. Explicitly specify the script part by using the `-e` flag.
3. To simplify the patterns, use `|` as a separator instead of `/`; then
   slashes don't need to be escaped in the script parts.
 2025-08-06 15:08:32 +02:00
Michał Gołębiowski-Owczarek
3f79644b72 Release: Temporarily disable running tests on release 
Unit tests are currently flaky in Chrome, especially its headless version. We'll
address it separately; let's not block the release over it.
 2025-08-06 14:42:33 +02:00
dependabot[bot]
70ee64fc95 Build: Bump form-data from 4.0.2 to 4.0.4 
Bumps [form-data](https://github.com/form-data/form-data) from 4.0.2 to 4.0.4.
- [Release notes](https://github.com/form-data/form-data/releases)
- [Changelog](https://github.com/form-data/form-data/blob/master/CHANGELOG.md)
- [Commits](https://github.com/form-data/form-data/compare/v4.0.2...v4.0.4)

Closes gh-5677

---
updated-dependencies:
- dependency-name: form-data
  dependency-version: 4.0.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-08-06 12:55:25 +02:00
Michał Gołębiowski-Owczarek
958369f088 Build: Test on Safari 18 & 17 instead of "latest-1" 
JTR doesn't take into account the jump from Safari 18 to 26,
so we need to specify versions explicitly. Also, while BrowserStack
already added macOS Tahoe with Safari 26, it's not a stable release
yet, so we need to test on Safari 17 as well.

Closes gh-5687
Ref jquery/jquery-test-runner#17
 2025-08-06 11:18:00 +02:00
dependabot[bot]
19621e9944 Build: Bump github/codeql-action in the github-actions group 
Bumps the github-actions group with 1 update: [github/codeql-action](https://github.com/github/codeql-action).

Closes gh-5673

Updates `github/codeql-action` from 3.28.18 to 3.29.2
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](ff0a06e83c...181d5eefc2)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 3.29.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-08-06 10:31:26 +02:00
Timmy Willison
a865212dea Release: publish tmp/release/dist folder when releasing 
Also update AUTHORS.txt in preparation for rc.1.

Fixes gh-5658
Closes gh-5681
 2025-08-06 00:44:02 +02:00
Michał Gołębiowski-Owczarek
ec9a387ee0 Build: Update the jQuery license link in comment headers 
Switch https://jquery.org/license to https://jquery.com/license/, note the
trailing slash. Leave the trailing slash from the minified version to save size.

Closes gh-5685
Ref gh-5686
 2025-08-06 00:21:57 +02:00
Michał Gołębiowski-Owczarek
dc5d1f7c61 Build: Try to unpack Firefox ESR via xz, fall back to bzip2 
The `-j` switch passed to `tar` indicates the archive is compressed using the
bzip2 format (`bz2` extension). That was how Firefox used to be compressed until
recently, but the new ESR release now uses xz. Ubuntu `tar` doesn't auto-guess
the encryption algorithm, so to support both, first try with xz and fall back
to bzip2 if that fails.

Note: this will download the old Firefox ESR twice, but it will still work
when the current ESR version starts to use xz with no changes to the code.

Closes gh-5682
Ref gh-5684
 2025-08-04 23:48:05 +02:00
dependabot[bot]
0ef6020295 Build: Bump github/codeql-action in the github-actions group 
Bumps the github-actions group with 1 update: [github/codeql-action](https://github.com/github/codeql-action).

Closes gh-5665

Updates `github/codeql-action` from 3.28.16 to 3.28.18
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](28deaeda66...ff0a06e83c)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 3.28.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-06-02 22:21:29 +02:00
dependabot[bot]
b668be0fdc Build: Bump undici and release-it 
Bumps [undici](https://github.com/nodejs/undici) to 6.21.2 and updates ancestor dependency [release-it](https://github.com/release-it/release-it). These dependencies need to be updated together.

Closes gh-5661

Updates `undici` from 6.21.1 to 6.21.2
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](https://github.com/nodejs/undici/compare/v6.21.1...v6.21.2)

Updates `release-it` from 18.1.2 to 19.0.2
- [Release notes](https://github.com/release-it/release-it/releases)
- [Changelog](https://github.com/release-it/release-it/blob/main/CHANGELOG.md)
- [Commits](https://github.com/release-it/release-it/compare/18.1.2...19.0.2)

---
updated-dependencies:
- dependency-name: undici
  dependency-version: 6.21.2
  dependency-type: indirect
- dependency-name: release-it
  dependency-version: 19.0.2
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-05-15 18:03:46 +02:00
Michał Gołębiowski-Owczarek
05325801b9 Tests: Fix tests for jQuery.get( String, null-ish, null-ish, String ) 
The original test's `text` variant just repeated the previous test with 3
parameters; the goal was to use 4 ones. This fixes it.

Closes gh-5646
Ref gh-5640
Ref gh-5645
 2025-05-12 17:50:52 +02:00
dependabot[bot]
bd6b453b7e Build: Bump the github-actions group with 2 updates 
Bumps the github-actions group with 2 updates: [actions/setup-node](https://github.com/actions/setup-node) and [github/codeql-action](https://github.com/github/codeql-action).

Closes gh-5657

Updates `actions/setup-node` from 4.3.0 to 4.4.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](cdca7365b2...49933ea528)

Updates `github/codeql-action` from 3.28.13 to 3.28.16
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](1b549b9259...28deaeda66)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: github/codeql-action
  dependency-version: 3.28.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-05-04 13:08:56 +02:00
dependabot[bot]
de2ecfc092 Build: Bump the github-actions group with 3 updates 
Bumps the github-actions group with 3 updates: [actions/setup-node](https://github.com/actions/setup-node), [actions/cache](https://github.com/actions/cache) and [github/codeql-action](https://github.com/github/codeql-action).

Closes gh-5647

Updates `actions/setup-node` from 4.2.0 to 4.3.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](1d0ff469b7...cdca7365b2)

Updates `actions/cache` from 4.2.2 to 4.2.3
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](d4323d4df1...5a3ec84eff)

Updates `github/codeql-action` from 3.28.10 to 3.28.13
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](b56ba49b26...1b549b9259)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: 4.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: actions/cache
  dependency-version: 4.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: github/codeql-action
  dependency-version: 3.28.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-04-01 11:13:27 +02:00
Michał Gołębiowski-Owczarek
76687566f0 Tests: Add tests for jQuery.get( String, null-ish, null-ish, String ) 
Also, fix `mock.php` formatting to not fail the
`jQuery.get( String, null, String )` test in PHP mode.

Closes gh-5640
Ref gh-4989
Ref jquery/api.jquery.com#1208
 2025-03-31 18:09:35 +02:00
Michał Gołębiowski-Owczarek
50ca957192 Build: ESLint: Remove the outerIIFEBody exception to indent 
It used to be necessary when we still had the `selector` outer IIFE, but that
got simplified.

Closes gh-5641
 2025-03-31 18:04:51 +02:00
dependabot[bot]
447432f4a3 Build: Bump the github-actions group with 2 updates 
Bumps the github-actions group with 2 updates: [actions/cache](https://github.com/actions/cache) and [github/codeql-action](https://github.com/github/codeql-action).

Closes gh-5636

Updates `actions/cache` from 4.2.0 to 4.2.2
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](1bd1e32a3b...d4323d4df1)

Updates `github/codeql-action` from 3.28.8 to 3.28.10
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](dd746615b3...b56ba49b26)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-03-02 13:25:28 +01:00
Michał Gołębiowski-Owczarek
3a31866b80 Tests: Backport the hidden="until-found" attr tests from 3.x-stable 
The `hidden` attribute used to be a boolean one but it gained a new
`until-found` eventually. This led us to change the way we handle boolean
attributes in jQuery 4.0 in gh-5452 to avoid these issues in the future.

We haven't added an explicit test for the `"until-found"` value of the
`hidden` attribute which triggered this decision so far, though.
Backport the test from gh-5607 which landed on `3.x-stable` so that we
do test it.

Closes gh-5619
Ref gh-5452
Ref gh-5607

(cherry picked from commit 85290c5972)
 2025-02-24 23:56:11 +01:00
Michał Gołębiowski-Owczarek
eca2a56457 CSS: Fix dimensions of table <col> elements 
Changes:
1. Fix measurements of `<col span="2">` elements in Firefox.
2. Fix measurements of all implicitly sized `<col>` elements in Safari.

Firefox always reports computed width as if `span` was 1. In Safari, computed
width for columns is always 0. Work around both issues by using `offsetWidth`.

In IE/Edge, `<col>` computed width is `"auto"` unless `width` is set explicitly
via CSS so measurements there remain incorrect. Because of the lack of a proper
workaround, we accept this limitation.

Fixes gh-5628
Closes gh-5630
Ref gh-5634
 2025-02-24 18:43:56 +01:00
Michał Gołębiowski-Owczarek
e2fe97b7f1 Core: Remove obsolete workarounds, update support comments 
Closes gh-5625
 2025-02-24 18:27:30 +01:00
Michał Gołębiowski-Owczarek
7c123dec4b Event: Use .preventDefault() in beforeunload 
So far, a result of an event handler has been assigned to the `returnValue`
of the original event by jQuery. Initially, one could pass a message the browser
will then display to the user. Since that got abused a lot, every browser
stopped using the provided string and they all now provide a generic message.
From the browsers supported in v4, only IE 11 would still display the message.

Incidentally, IE 11 is the only browser from our supported ones which respects
the value returned from a beforeunload handler attached by `addEventListener`;
other browsers do so only for inline handlers, so not setting the value directly
shouldn't reduce any functionality.

This looks like a good moment to stop passing the message through and just call
`event.preventDefault()` without extra checks which is shorter. This used to
not work in Chrome but it got implemented in Chrome 119.

Unfortunately, it's hard to test this event in unit tests since it blocks page
dismissal.

Closes gh-5626
 2025-02-18 20:54:09 +01:00
Timmy Willison
047f8683cb Build: upgrade dependencies, including jtr@0.2.5 
Closes gh-5631
 2025-02-18 13:02:11 -05:00
dependabot[bot]
667321eb2d Build: Bump the github-actions group with 2 updates 
Bumps the github-actions group with 2 updates: [actions/setup-node](https://github.com/actions/setup-node) and [github/codeql-action](https://github.com/github/codeql-action).

Closes gh-5621

Updates `actions/setup-node` from 4.1.0 to 4.2.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](39370e3970...1d0ff469b7)

Updates `github/codeql-action` from 3.28.1 to 3.28.8
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](b6a472f63d...dd746615b3)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-02-02 13:25:54 +01:00
dependabot[bot]
098591e6fd Build: Bump the github-actions group across 1 directory with 2 updates 
Bumps the github-actions group with 2 updates in the / directory: [actions/cache](https://github.com/actions/cache) and [github/codeql-action](https://github.com/github/codeql-action).

Closes gh-5608

Updates `actions/cache` from 4.1.2 to 4.2.0
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](6849a64899...1bd1e32a3b)

Updates `github/codeql-action` from 3.27.5 to 3.28.1
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](f09c1c0a94...b6a472f63d)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-01-14 11:29:12 +01:00
Timmy Willison
733e62d203 Tests: migrate test runner to jquery-test-runner 
Closes gh-5604
 2025-01-13 22:36:10 -05:00
Michał Gołębiowski-Owczarek
4466770992 Tests: Add custom attribute getter tests to the selector module 
Sizzle & the `3.x-stable` branch have tests adding a custom attribute getter
to `attrHandle` and checking if selection takes it into account. `attrHandle`
was removed from the `4.x` line so the tests were not ported to the `main`
branch, but the `4.x` line takes standard jQuery attribute getters into account
instead and we should test for that.

Backport the `3.x-stable` selector tests for custom attribute getters, changing
`jQuery.expr.attrHandle` to `jQuery.attrHooks`.

Closes gh-5568
 2024-12-16 19:00:50 +01:00
Michał Gołębiowski-Owczarek
0e123509d5 Core: Switch $.parseHTML from document.implementation to DOMParser 
Using a document created via:
```js
document.implementation.createHTMLDocument( "" )
```
was needed in IE 9 which doesn't support `DOMParser#parseFromString` for
`text/html`. We can switch to:
```js
( new window.DOMParser() ) .parseFromString( "", "text/html" )
```
now, saving some bytes.

Closes gh-5572
 2024-12-11 00:38:27 +01:00
Michał Gołębiowski-Owczarek
75b48e6a2b Build: Test on iOS 18, no longer test on iOS 15 
Closes gh-5553
 2024-12-09 00:33:15 +01:00
dependabot[bot]
03e183c4cc Build: Bump github/codeql-action from 3.27.0 to 3.27.5 in the github-actions group 
Bumps the github-actions group with 1 update: [github/codeql-action](https://github.com/github/codeql-action).


Updates `github/codeql-action` from 3.27.0 to 3.27.5
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](662472033e...f09c1c0a94)

Closes gh-5587

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-12-01 02:03:39 +01:00
Michał Gołębiowski-Owczarek
640d5825df CSS: Drop the cache in finalPropName 
The `finalPropName` util caches properties detected to require a vendor
prefix. This used to cache unprefixed properties as well, but it was
reported that this logic broke accidentally during a refactor. Since
fewer & fewer properties require a vendor prefix and caching a few
basic checks likely has negligible perf benefits, opt to saving a few
bytes and remove the cache.

Closes gh-5583
Ref gh-5582
 2024-11-26 00:23:19 +01:00
Michał Gołębiowski-Owczarek
e4b5e62277 Build: Report Brotli sizes in compareSize 
So far, we were mostly optimizing gzipped sizes. However, using Brotli is more
and more popular as all modern browsers support it and compression is much
better. It makes sense to also pay attention to these numbers.

The `comparseSize` version stays at `2` as this only introduces a new field
without affecting existing ones. The only drawback is comparisons with branches
that didnt have Brotli computed before will return `NaN`. This can be easily
fixed locally by checking out the branch and running the build, but at least
we don't lose gzipped sizes in the meantime.

Closes gh-5586
 2024-11-25 23:21:37 +01:00
Timmy Willison
041f6e347b Build: Fix pre release matching in compare size regex 
Closes gh-5584
 2024-11-21 11:21:42 +01:00
Michał Gołębiowski-Owczarek
d5ebb464de Build: Make middleware-mockserver not crash on reading nonexistent files 
`fs.readFileSync` crashes when a non-existing file is passed to it. Some APIs
of `middleware-mockserver` read a file the path of which depends on query
parameters, making it possible to crash it by providing such a parameter. The
old PHP server doesn't have these issues.

To fix this, wrap all `fs.readFileSync` occurrences with a function that falls
back to the string `"ERROR"`.

Closes gh-5579
 2024-11-05 22:54:34 +01:00
Michał Gołębiowski-Owczarek
329661fd53 Selector: Properly deprecate jQuery.expr[ ":" ]/jQuery.expr.filters 
Those APIs have formally been deprecated since `3.0.0`, but they never made its
way into the deprecated module.

`jQuery.expr[ ":" ]` has been removed when Sizzle got inlined into Core in
gh-4395; this change restores it.

Closes gh-5580
Ref gh-5570
Ref gh-4395
 2024-11-04 23:59:30 +01:00
dependabot[bot]
07c9f02bd6 Build: Bump the github-actions group with 4 updates 
Bumps the github-actions group with 4 updates: [actions/checkout](https://github.com/actions/checkout), [actions/setup-node](https://github.com/actions/setup-node), [actions/cache](https://github.com/actions/cache) and [github/codeql-action](https://github.com/github/codeql-action).


Updates `actions/checkout` from 4.2.0 to 4.2.2
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](d632683dd7...11bd71901b)

Updates `actions/setup-node` from 4.0.4 to 4.1.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](0a44ba7841...39370e3970)

Updates `actions/cache` from 4.0.2 to 4.1.2
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](0c45773b62...6849a64899)

Updates `github/codeql-action` from 3.26.10 to 3.27.0
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](e2b3eafc8d...662472033e)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: actions/setup-node
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Closes gh-5577
 2024-11-01 10:07:39 -04:00
Michał Gołębiowski-Owczarek
1971625487 Build: Run tests on Node 22 & 23 
Closes gh-5560
 2024-10-21 19:04:55 +02:00
Michał Gołębiowski-Owczarek
d92810614b Docs: Align CONTRIBUTING.md with 3.x-stable 
Closes gh-5567
Ref gh-5564
 2024-10-14 19:04:41 +02:00
Michał Gołębiowski-Owczarek
4ef25b0de4 Docs: Update CONTRIBUTING.md 
Changes:
1. Update the link to "help wanted" or "patch welcome" issues to only include
   open ones.
2. Replace info about the jQuery Forum & IRC with Matrix & Stack Overflow.
3. Update the test reduction WebKit blog post link.
4. Update the Git clone instructions to not rely on the legacy `git://`
   protocol.
5. Fix a few typos.

Closes gh-5564
 2024-10-14 18:40:11 +02:00
Timmy Willison
cbc2bc1fd3 Docs: add version support section to README 
- also switch header format to be more consistent with our
  other markdown files

Closes gh-5565
 2024-10-13 15:30:15 -04:00
neogy-akash
d74fc265de Build: Enforce ECMAScript 5 in tests via ESLint 
Fixes gh-5542
Closes gh-5563
 2024-10-09 18:27:23 +02:00
dependabot[bot]
3ebe89f6be Build: Bump the github-actions group with 3 updates 
Bumps the github-actions group with 3 updates: [actions/checkout](https://github.com/actions/checkout), [actions/setup-node](https://github.com/actions/setup-node) and [github/codeql-action](https://github.com/github/codeql-action).


Updates `actions/checkout` from 4.1.7 to 4.2.0
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](692973e3d9...d632683dd7)

Updates `actions/setup-node` from 4.0.3 to 4.0.4
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](1e60f620b9...0a44ba7841)

Updates `github/codeql-action` from 3.26.6 to 3.26.10
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](4dd16135b6...e2b3eafc8d)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: actions/setup-node
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Closes gh-5562
 2024-09-30 20:23:58 -04:00