Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update typedoc requirement from ^0.27.4 to ^0.27.5 in /website in the ecosystem group #1437

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 16, 2024

Updates the requirements on typedoc to permit the latest version.
Updates typedoc to 0.27.5

Release notes

Sourced from typedoc's releases.

v0.27.5

Bug Fixes

  • Possibly Breaking: TypeDoc will no longer render anchors within the page for deeply nested properties. This only affects links to properties of properties of types, which did not have a clickable link exposed so are unlikely to have been linked to. Furthermore, these links were not always created by TypeDoc, only being created if all parent properties contained comments, #2808.
  • TypeDoc will now warn if a property which does not have a URL within the rendered document and the parent property/page will be linked to instead, #2808. These warnings can be disabled with the validation.rewrittenLink option.
  • Fix restoration of groups/categories including documents, #2801.
  • Fixed missed relative paths within markdown link references in documents.
  • Improved handling of incomplete inline code blocks within markdown.
  • Direct https:// links under the hostedBaseUrl option's URL will no longer be treated as external, #2809.

Thanks!

Changelog

Sourced from typedoc's changelog.

v0.27.5 (2024-12-14)

Bug Fixes

  • Possibly Breaking: TypeDoc will no longer render anchors within the page for deeply nested properties. This only affects links to properties of properties of types, which did not have a clickable link exposed so are unlikely to have been linked to. Furthermore, these links were not always created by TypeDoc, only being created if all parent properties contained comments, #2808.
  • TypeDoc will now warn if a property which does not have a URL within the rendered document and the parent property/page will be linked to instead, #2808. These warnings can be disabled with the validation.rewrittenLink option.
  • Fix restoration of groups/categories including documents, #2801.
  • Fixed missed relative paths within markdown link references in documents.
  • Improved handling of incomplete inline code blocks within markdown.
  • Direct https:// links under the hostedBaseUrl option's URL will no longer be treated as external, #2809.

Thanks!

v0.27.4 (2024-12-09)

Features

  • API: Introduced new Converter.EVENT_CREATE_PROJECT event which fires when a project is created by the converter, #2800.

Bug Fixes

  • Switch from gzip to deflate for compressing assets to make output consistent across different operating systems, #2796.
  • @include and @includeCode now work for comments on the entry point for projects with a single entry point, #2800.
  • Cascaded modifier tags will no longer be copied into type literals, #2802.
  • @summary now works to describe functions within modules, #2803.
  • Corrected navigation showing module link as current when not on module page, #2805.

v0.27.3 (2024-12-04)

Features

  • Added support for PNG favicons, #2790.
  • Improved support for hosting TypeDoc with strict Content Security Policy rules, #2794.

Bug Fixes

  • Add special handling for import types with type errors discarded with ts-expect-error, #2792.
  • Fixed low contrast in default colors for properties/accessors in light mode, #2795.
  • The highlightLanguages option now permits Shiki aliases to be specified rather than just the language ID, #2798.

... (truncated)

Commits
  • 80e23a8 Update changelog for release
  • 9ffaf1d Bump version to 0.27.5
  • d9ec2dd Treat links under hostedBaseUrl as internal
  • 8acc237 Correct mismatched check between renderingIsUseful and applyAnchorUrl
  • 9eb1e05 Produce warnings if links cannot be resolved
  • e4f991d Update bug report template to ask reporters to disable plugins
  • b45d5ea Fix multiple issues with markdown parsing
  • ddc64e5 Update docs, changelog
  • 9d8737e Update JSX extension docs
  • 993c0f5 expose html global jsx attributes to enable extending them for custom element...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Dec 16, 2024
Copy link

socket-security bot commented Dec 16, 2024

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/@emotion/[email protected] Transitive: environment, filesystem, unsafe +56 12.4 MB
npm/@emotion/[email protected] Transitive: environment, filesystem, unsafe +52 12.3 MB
npm/@monaco-editor/[email protected] None +2 275 kB surenat
npm/@mui/[email protected] None +2 19 MB diegoandai
npm/@mui/[email protected] Transitive: environment +25 19.4 MB aarongarciah, atomiks, brijeshb42, ...8 more
npm/@rollup/[email protected] eval, network +1 5.71 MB lukastaegert
npm/@rspack/[email protected] environment, eval Transitive: filesystem, network, unsafe +102 6.31 MB hardfist
npm/@rspack/[email protected] environment, eval, filesystem, network, shell, unsafe +17 495 MB hardfist
npm/@types/[email protected] None 0 1.72 kB types
npm/@types/[email protected] None +2 1.69 MB types
npm/[email protected] filesystem, shell Transitive: environment +35 1.54 MB tschaub
npm/[email protected] None 0 176 kB pieroxy
npm/[email protected] environment, network 0 99 MB vscode-bot
npm/[email protected] Transitive: environment, filesystem +19 890 kB iamvishnusankar
npm/[email protected] Transitive: environment, eval, filesystem, shell +45 1.46 GB vercel-release-bot
npm/[email protected] Transitive: environment, eval +20 5.64 MB quietshu
npm/[email protected] Transitive: environment, eval, filesystem, network, shell, unsafe +346 245 MB quietshu
npm/[email protected] environment 0 18.9 kB jinder
npm/[email protected] None 0 15.3 kB cwmma
npm/[email protected] environment +3 4.63 MB react-bot
npm/[email protected] environment +2 339 kB react-bot

🚮 Removed packages: npm/@fastify/[email protected], npm/@rollup/[email protected], npm/@rollup/[email protected], npm/@rollup/[email protected], npm/@sinclair/[email protected], npm/@trivago/[email protected], npm/@typegoose/[email protected], npm/@types/[email protected], npm/@types/[email protected], npm/@types/[email protected], npm/@types/[email protected], npm/@types/[email protected], npm/@typescript-eslint/[email protected], npm/@typescript-eslint/[email protected], npm/@typescript-eslint/[email protected], npm/@typescript-eslint/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected]

View full report↗︎

Copy link
Owner

@samchon samchon left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@dependabot me4ge

@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/website/ecosystem-2c3deb0ef5 branch from 95a1c49 to 929db9f Compare December 17, 2024 05:51
Copy link

socket-security bot commented Dec 17, 2024

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Alert Package NoteSourceCI
Possible typosquat attack npm/[email protected] ⚠︎

View full report↗︎

Next steps

What is a typosquat?

Package name is similar to other popular packages and may not be the package you want.

Use care when consuming similarly named packages and ensure that you did not intend to consume a different package. Malicious packages often publish using similar names as existing popular packages.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/[email protected] or ignore all packages with @SocketSecurity ignore-all

Updates the requirements on [typedoc](https://github.com/TypeStrong/TypeDoc) to permit the latest version.

Updates `typedoc` to 0.27.5
- [Release notes](https://github.com/TypeStrong/TypeDoc/releases)
- [Changelog](https://github.com/TypeStrong/typedoc/blob/master/CHANGELOG.md)
- [Commits](TypeStrong/typedoc@v0.27.4...v0.27.5)

---
updated-dependencies:
- dependency-name: typedoc
  dependency-type: direct:development
  dependency-group: ecosystem
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/website/ecosystem-2c3deb0ef5 branch from 929db9f to 1d4c7e0 Compare December 18, 2024 05:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant