Nacho Codoñer
b0ea679d0d
fix conflict
2024-06-11 17:00:26 +02:00
Nacho Codoñer
b73f8ef6c4
Security Updates RC.3 ( #13187 )
...
* Bump json5 from 2.2.0 to 2.2.3 in /npm-packages/meteor-babel
Bumps [json5](https://github.com/json5/json5 ) from 2.2.0 to 2.2.3.
- [Release notes](https://github.com/json5/json5/releases )
- [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md )
- [Commits](https://github.com/json5/json5/compare/v2.2.0...v2.2.3 )
---
updated-dependencies:
- dependency-name: json5
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
* Bump moment from 2.29.1 to 2.29.4 in /tools/tests/apps/dynamic-import
Bumps [moment](https://github.com/moment/moment ) from 2.29.1 to 2.29.4.
- [Changelog](https://github.com/moment/moment/blob/develop/CHANGELOG.md )
- [Commits](https://github.com/moment/moment/compare/2.29.1...2.29.4 )
---
updated-dependencies:
- dependency-name: moment
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
* Bump lodash-es from 4.17.15 to 4.17.21 in /tools/tests/apps/modules
Bumps [lodash-es](https://github.com/lodash/lodash ) from 4.17.15 to 4.17.21.
- [Release notes](https://github.com/lodash/lodash/releases )
- [Commits](https://github.com/lodash/lodash/compare/4.17.15...4.17.21 )
---
updated-dependencies:
- dependency-name: lodash-es
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
* Bump lodash from 4.17.15 to 4.17.21 in /tools/tests/apps/modules
Bumps [lodash](https://github.com/lodash/lodash ) from 4.17.15 to 4.17.21.
- [Release notes](https://github.com/lodash/lodash/releases )
- [Commits](https://github.com/lodash/lodash/compare/4.17.15...4.17.21 )
---
updated-dependencies:
- dependency-name: lodash
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
* Bump ua-parser-js from 0.7.28 to 0.7.38 in /tools/tests/apps/modules
Bumps [ua-parser-js](https://github.com/faisalman/ua-parser-js ) from 0.7.28 to 0.7.38.
- [Release notes](https://github.com/faisalman/ua-parser-js/releases )
- [Changelog](https://github.com/faisalman/ua-parser-js/blob/0.7.38/changelog.md )
- [Commits](https://github.com/faisalman/ua-parser-js/compare/0.7.28...0.7.38 )
---
updated-dependencies:
- dependency-name: ua-parser-js
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
* Bump minimatch in /tools/tests/apps/ecmascript-regression
Bumps [minimatch](https://github.com/isaacs/minimatch ) from 3.0.4 to 3.1.2.
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md )
- [Commits](https://github.com/isaacs/minimatch/compare/v3.0.4...v3.1.2 )
---
updated-dependencies:
- dependency-name: minimatch
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
* Bump ansi-regex in /npm-packages/cordova-plugin-meteor-webapp
Bumps [ansi-regex](https://github.com/chalk/ansi-regex ) from 3.0.0 to 3.0.1.
- [Release notes](https://github.com/chalk/ansi-regex/releases )
- [Commits](https://github.com/chalk/ansi-regex/compare/v3.0.0...v3.0.1 )
---
updated-dependencies:
- dependency-name: ansi-regex
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
* Bump qs and stripe in /tools/tests/apps/modules
Bumps [qs](https://github.com/ljharb/qs ) to 6.12.1 and updates ancestor dependency [stripe](https://github.com/stripe/stripe-node ). These dependencies need to be updated together.
Updates `qs` from 6.0.4 to 6.12.1
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md )
- [Commits](https://github.com/ljharb/qs/compare/v6.0.4...v6.12.1 )
Updates `stripe` from 4.25.0 to 15.10.0
- [Release notes](https://github.com/stripe/stripe-node/releases )
- [Changelog](https://github.com/stripe/stripe-node/blob/master/CHANGELOG.md )
- [Commits](https://github.com/stripe/stripe-node/compare/v4.25.0...v15.10.0 )
---
updated-dependencies:
- dependency-name: qs
dependency-type: indirect
- dependency-name: stripe
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
* upgrade meteor-ignore package.lock file
* update app deps to ensure dependabot can act on .lock files
* update package-lock.json
* Bump semver in /npm-packages/babel-preset-meteor/babel-presets-meteor
Bumps [semver](https://github.com/npm/node-semver ) from 6.3.0 to 6.3.1.
- [Release notes](https://github.com/npm/node-semver/releases )
- [Changelog](https://github.com/npm/node-semver/blob/v6.3.1/CHANGELOG.md )
- [Commits](https://github.com/npm/node-semver/compare/v6.3.0...v6.3.1 )
---
updated-dependencies:
- dependency-name: semver
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
* fix test
* Bump ua-parser-js from 0.7.28 to 0.7.38 in /tools/tests/apps/modules
Bumps [ua-parser-js](https://github.com/faisalman/ua-parser-js ) from 0.7.28 to 0.7.38.
- [Release notes](https://github.com/faisalman/ua-parser-js/releases )
- [Changelog](https://github.com/faisalman/ua-parser-js/blob/0.7.38/changelog.md )
- [Commits](https://github.com/faisalman/ua-parser-js/compare/0.7.28...0.7.38 )
---
updated-dependencies:
- dependency-name: ua-parser-js
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
* Bump qs and stripe in /tools/tests/apps/modules
Bumps [qs](https://github.com/ljharb/qs ) to 6.12.1 and updates ancestor dependency [stripe](https://github.com/stripe/stripe-node ). These dependencies need to be updated together.
Updates `qs` from 6.0.4 to 6.12.1
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md )
- [Commits](https://github.com/ljharb/qs/compare/v6.0.4...v6.12.1 )
Updates `stripe` from 4.25.0 to 15.10.0
- [Release notes](https://github.com/stripe/stripe-node/releases )
- [Changelog](https://github.com/stripe/stripe-node/blob/master/CHANGELOG.md )
- [Commits](https://github.com/stripe/stripe-node/compare/v4.25.0...v15.10.0 )
---
updated-dependencies:
- dependency-name: qs
dependency-type: indirect
- dependency-name: stripe
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
# Conflicts:
# tools/tests/apps/modules/package-lock.json
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-06-11 13:46:07 +02:00
dependabot[bot]
576ec91b4b
Bump minimist from 1.2.0 to 1.2.8 in /tools/tests/apps/modules
...
Bumps [minimist](https://github.com/minimistjs/minimist ) from 1.2.0 to 1.2.8.
- [Changelog](https://github.com/minimistjs/minimist/blob/main/CHANGELOG.md )
- [Commits](https://github.com/minimistjs/minimist/compare/v1.2.0...v1.2.8 )
---
updated-dependencies:
- dependency-name: minimist
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-05-09 14:43:49 +00:00
Jan Dvorak
da5bf91186
Update meteor-node-stubs in skeletons & tests
...
Also update jQuery and @babel packages to the latest version.
2023-11-30 13:30:21 +01:00
Jan Dvorak
117e5ba7b2
Update meteor-node-stubs usage across the board
2023-11-28 17:32:19 +01:00
Gabriel Grubba
b6af49e585
fix: revert on packages versions
2022-11-14 20:19:39 -03:00
Gabriel Grubba
31d3b2d5f4
Meteor version to 2.8.1-beta.1 ☄️
2022-11-04 12:04:40 -03:00
Jan Dvorak
0f338410e3
Update babel to 7.15.3 to potentially fix d3 array error #11525
2021-08-11 10:45:56 +02:00
Jan Dvorak
d5c79c10f9
Dev bundle 14.17.4.2
2021-08-02 14:50:41 +02:00
Jan Dvorak
4cf853cca2
Update babel to 7.14.9 per #11525
2021-08-02 14:36:01 +02:00
Jan Dvorak
8b7c7eb3f7
Update babel runtime and skelets
2021-06-28 17:32:00 +02:00
Jan Dvorak
66c14c40e7
Merge branch 'devel' into release-node-14
2021-05-10 12:31:24 +02:00
dependabot[bot]
18bca91a01
Bump ua-parser-js from 0.7.20 to 0.7.28 in /tools/tests/apps/modules
...
Bumps [ua-parser-js](https://github.com/faisalman/ua-parser-js ) from 0.7.20 to 0.7.28.
- [Release notes](https://github.com/faisalman/ua-parser-js/releases )
- [Commits](https://github.com/faisalman/ua-parser-js/compare/0.7.20...0.7.28 )
Signed-off-by: dependabot[bot] <support@github.com >
2021-05-08 11:53:48 +00:00
Jan Dvorak
a86910f000
Merge branch 'devel' into release-node-14
2020-12-19 19:16:05 +01:00
filipenevola
1d7601c70e
Updates jquery to 3.5.1 on test apps
2020-12-09 09:49:56 -04:00
filipenevola
123730bfa9
Updates puppeteer to 2.1.1 on test apps
2020-12-09 09:44:16 -04:00
filipenevola
d0591d8093
modules test app was using a fixed version of typescript for no reason
2020-10-28 18:08:23 -04:00
Jan Dvorak
0c26503e6b
Initial internal dependencies update
2020-10-01 12:01:05 +02:00
filipenevola
aae80530e0
Bump meteor-node-stubs package version to 1.0.1
2020-08-05 17:52:32 -04:00
Ben Newman
dab79ff4c6
Update modules test app to Meteor 1.10.1.
2020-03-31 12:06:58 -04:00
Ben Newman
f78afca824
Update linked copy of acorn source used by modules test app.
2020-03-31 12:06:58 -04:00
Ben Newman
fc2bdd6ddf
Attempt to fix @babel/runtime/helpers/esm/* import test.
...
CircleCI tests will fail for this commit, since these changes do not
address the problem that the module.useNode() stub imports the ESM code
using require. I will fix the tests properly in a later commit.
2020-02-19 13:13:32 -05:00
Ben Newman
b6320119d4
Update @babel/* dependencies of modules test app.
2020-02-19 11:07:29 -05:00
Ben Newman
33bcb04d68
Update modules test app to Meteor 1.9.
2020-01-08 22:35:53 -05:00
Ben Newman
6b646c6a8f
Merge branch 'release-1.8.3' into release-1.9
2019-12-18 16:23:31 -05:00
Ben Newman
5758aaa30d
Add jquery npm package to modules test app.
2019-12-18 14:53:16 -05:00
Seba Kerckhof
8b43e385e0
Add upgrader to add jquery dependency for blaze-users. ( #10801 )
2019-12-18 13:45:38 -05:00
Ben Newman
24e02b7411
Avoid bundling jquery twice ( #10498 )
...
Although the Meteor jquery package is no long a core package (and thus is
not tied to the Meteor release), it seems like a good idea to nudge folks
towards installing jquery from npm, instead of relying on the very old
version (1.12.1) residing in meteor/packages/non-core/jquery/jquery.js.
Closes #10289 .
2019-12-18 13:45:36 -05:00
Ben Newman
c90246d55b
Merge branch 'devel' into release-1.9
2019-11-26 15:46:38 -05:00
Ben Newman
0af5c64bd1
Update modules test app to Meteor 1.8.2.
2019-11-14 17:21:02 -05:00
Ben Newman
f8de4127da
Merge branch 'release-1.8.2' into release-1.9
2019-11-08 20:07:59 -05:00
Ben Newman
bd9043db20
Prefer "main" field of package.json over "module" in legacy bundle.
...
https://github.com/meteor/meteor/issues/10658#issuecomment-550456095
https://github.com/meteor/meteor/issues/10658#issuecomment-551870115
As usual, changes to module resolution logic need to happen in parallel in
tools/isobuild/resolver.ts and in packages/modules-runtime. However,
thanks to the modern/legacy system, it's easy to make the modules-runtime
package behave exactly the way(s) we want in the server, modern client,
and legacy client bundles.
2019-11-08 11:15:23 -05:00
Ben Newman
b32e44a5d5
Merge branch 'release-1.8.2' into release-1.9
2019-07-30 14:24:09 -04:00
Ben Newman
4e894663f5
Add basic test of TypeScript support to modules test app.
2019-07-07 19:29:34 -04:00
Ben Newman
df4e54a80d
Test that the ganalytics npm package is importable.
...
As reported by @arggh in this comment:
https://github.com/meteor/meteor/pull/10522#issuecomment-508908306
2019-07-06 12:38:04 -04:00
Ben Newman
53fd2a1f4a
Merge branch 'release-1.8.2' into release-1.9
2019-07-04 17:27:51 -04:00
Ben Newman
146e6ba1d4
Update @babel/{runtime,...} dependencies of modules test app.
2019-07-04 16:04:33 -04:00
Ben Newman
a68dc6d977
Merge branch 'release-1.8.2' into release-1.9
2019-07-03 13:30:44 -04:00
Ben Newman
e195440442
Fall back to package.json "main" field if "module" cannot be resolved.
...
The meteor/tools/isobuild/resolver.js changes are the static half of the
puzzle. The runtime half was implemented in install@0.13 .0 with this
commit: 233aa75ce3
2019-07-03 12:25:05 -04:00
Ben Newman
2fa761bbfc
Test that ESM modules can be imported from npm packages.
...
With appropriate meteor.nodeModules.recompile configuration, that is.
2019-07-02 11:50:51 -04:00
Ben Newman
108144c3d5
Update @babel/* dependencies of modules test app.
2019-07-02 11:41:39 -04:00
Ben Newman
2dae9be561
Regression test that the graphql package can be imported.
2019-06-25 14:25:23 -04:00
Ben Newman
2e309f5639
Merge branch 'release-1.8.2' into release-1.9
2019-06-24 15:48:15 -04:00
Ben Newman
88004d4649
Add a basic regression test of issue #10563 .
2019-06-20 12:11:29 -04:00
Ben Newman
9b68eb7af2
Merge branch 'release-1.8.2' into release-1.9
2019-05-06 12:27:44 -04:00
Ben Newman
5d0a1200c7
Allow .npm/package/node_modules to be compiled in Meteor packages.
...
When I implemented support for the "module" entry point in package.json
files for client code in #10541 , I modified PackageSource#_findSources to
include files found in node_modules that need to be compiled, but my
implementation considered only "local" node_modules directories, like the
one in the application root directory, while neglecting the private
.npm/package/node_modules directories that many Meteor packages have.
This commit includes .npm/**/node_modules when _findSources is scanning a
Meteor package, which should solve issues like #10544 , where a Meteor
package imports an npm package that was installed with Npm.depends, and
that npm package has a "module" field in its package.json file, pointing
to an ESM entry point module, but the ESM syntax was not appropriately
compiled, leading to parse errors like "Unexpected token export".
Before lazy compilation was introduced in Meteor 1.7 (#9983 ), including
the node_modules directories of Meteor packages would likely have been a
big problem for build performance, since there would be that many more
modules to compile. It's still worth making sure this change doesn't
regress build performance for other reasons, but I'm reasonably confident
lazy compilation will save us here, unless there are just too many npm
packages installed via Npm.depends that export ESM modules.
2019-05-04 18:08:49 -04:00
Ben Newman
9a4fa16db9
Merge branch 'devel' into release-1.8.2
2019-05-03 14:29:48 -04:00
Ben Newman
f166f226d8
Support the "module" field of package.json for client code. ( #10541 )
...
Supporting "module" in package.json for server code is not advisable
because Node.js will be adopting the "type":"module" convention instead,
and in the meantime we need to maintain consistency with Node's module
resolution rules, which only currently pay attention to "main":
https://medium.com/@nodejs/announcing-a-new-experimental-modules-1be8d2d6c2ff
2019-05-02 18:30:13 -04:00
Ben Newman
9171b568a4
Remove long-deprecated idle-gc dependency from modules test app.
...
https://circleci.com/gh/meteor/meteor/32476
2019-04-12 18:43:12 -04:00
Ben Newman
07815583f1
Update modules test app to Meteor 1.8.1 and meteor-node-stubs@1.0.0.
2019-04-10 19:18:36 -04:00