Bump the dependencies group with 4 updates #77

dependabot · 2023-10-16T13:24:58Z

Bumps the dependencies group with 4 updates: @resvg/resvg-js, @tanem/svg-injector, focus-trap and electron.

Updates @resvg/resvg-js from 2.4.1 to 2.5.0

Release notes

Sourced from @resvg/resvg-js's releases.

v2.5.0

What's Changed

Added

Now we can finally loading custom fonts in Wasm, including the WOFF2 format (see playground), thanks to the high-performance woff2-rs.

In addition, we implemented smarter default font family fallback. the defaultFontFamily option can now be omitted. We'll read the font-family from the incoming fonts and set it to the default.
<script src="https://unpkg.com/@resvg/resvg-wasm"></script>
<script>
  (async function () {
    await resvg.initWasm(fetch('https://unpkg.com/@resvg/resvg-wasm/index_bg.wasm'))
const font = await fetch('./fonts/Pacifico-Regular.woff2')
if (!font.ok) return
const fontData = await font.arrayBuffer()
const buffer = new Uint8Array(fontData)
const opts = {
font: {
fontBuffers: [buffer], // New in 2.5.0, loading custom fonts.
// defaultFontFamily: 'Pacifico', // You can omit this.
},
}
const svg = '&lt;svg&gt; ... &lt;/svg&gt;' // Input SVG, String or Uint8Array
const resvgJS = new resvg.Resvg(svg, opts)
const pngData = resvgJS.render(svg, opts) // Output PNG data, Uint8Array
const pngBuffer = pngData.asPng()
const svgURL = URL.createObjectURL(new Blob([pngData], { type: 'image/png' }))
document.getElementById('output').src = svgURL

})()
</script>
feat: improve custom loaded fonts. Thanks to @yisibl #209

feat: support for loading custom fonts in Wasm, via the fontBuffers option. Thanks to @antmelnyk #217

feat: support loading WOFF2 font in Wasm. Thanks to @yisibl #220

chore: Wasm uses the same logic as Node.js to find the default font family.Thanks to @yisibl #252

We have improved the upstream svgtypes#14, allow parsing of float rgb()/rgba() values from CSS Color 4 draft like rgb(3.14, 110, 201).

fix(deps): update rust crate svgtypes to 0.12.0. Thanks to @yisibl #266

Changed

test: fix test image timeout. #262

... (truncated)

Changelog

Sourced from @resvg/resvg-js's changelog.

[2.5.0] - 2023-10-16

Added

Now we can finally loading custom fonts in Wasm, including the WOFF2 format (see playground), thanks to the high-performance woff2-rs.

In addition, we implemented smarter default font family fallback. the defaultFontFamily option can now be omitted. We'll read the font-family from the incoming fonts and set it to the default.
<script src="https://unpkg.com/@resvg/resvg-wasm"></script>
<script>
  (async function () {
    await resvg.initWasm(fetch('https://unpkg.com/@resvg/resvg-wasm/index_bg.wasm'))
const font = await fetch('./fonts/Pacifico-Regular.woff2')
if (!font.ok) return
const fontData = await font.arrayBuffer()
const buffer = new Uint8Array(fontData)
const opts = {
font: {
fontBuffers: [buffer], // New in 2.5.0, loading custom fonts.
// defaultFontFamily: 'Pacifico', // You can omit this.
},
}
const svg = '&lt;svg&gt; ... &lt;/svg&gt;' // Input SVG, String or Uint8Array
const resvgJS = new resvg.Resvg(svg, opts)
const pngData = resvgJS.render(svg, opts) // Output PNG data, Uint8Array
const pngBuffer = pngData.asPng()
const svgURL = URL.createObjectURL(new Blob([pngData], { type: 'image/png' }))
document.getElementById('output').src = svgURL

})()
</script>
feat: improve custom loaded fonts. Thanks to @yisibl #209

feat: support for loading custom fonts in Wasm, via the fontBuffers option. Thanks to @antmelnyk #217

feat: support loading WOFF2 font in Wasm. Thanks to @yisibl #220

chore: Wasm uses the same logic as Node.js to find the default font family.Thanks to @yisibl #252

We have improved the upstream svgtypes#14, allow parsing of float rgb()/rgba() values from CSS Color 4 draft like rgb(3.14, 110, 201).

fix(deps): update rust crate svgtypes to 0.12.0. Thanks to @yisibl #266

Changed

test: fix test image timeout. #262

Commits

b07a26f 2.5.0
4e68970 fix(deps): update rust crate svgtypes to 0.12.0
24b9f07 test: add load custom WOFF2 font test case
6fb4fdc feat: add font loading demo to playground
977e9ac feat: support loading woff2 font in Wasm
06f2d15 chore(deps): upgrade dependencies
c8425fd chore(deps): update dependency eslint-plugin-sonarjs to ^0.21.0
716e34e test: using simple SVG files to make testing faster
fd07ca5 test: fix test image timeout
2d1c468 chore(deps): update yarn to v3.6.3
Additional commits viewable in compare view

Updates @tanem/svg-injector from 10.1.65 to 10.1.67

Changelog

Sourced from @tanem/svg-injector's changelog.

v10.1.67 (2023-10-13)

Full Changelog

🏠 Internal

#1459 Update dependency @rollup/plugin-node-resolve to v15.2.3 (@renovate[bot])

#1458 Update dependency tanem-scripts to v7.0.21 (@renovate[bot])

#1457 Update dependency eslint to v8.51.0 (@renovate[bot])

#1456 Update dependency rollup to v4.0.2 (@renovate[bot])

#1455 Update dependency rollup to v4 (@renovate[bot])

#1454 Update dependency @rollup/plugin-terser to v0.4.4 (@renovate[bot])

#1453 Update dependency @rollup/plugin-replace to v5.0.3 (@renovate[bot])

#1452 Update dependency @rollup/plugin-node-resolve to v15.2.2 (@renovate[bot])

#1451 Update dependency @rollup/plugin-commonjs to v25.0.5 (@renovate[bot])

#1450 Update dependency @rollup/plugin-babel to v6.0.4 (@renovate[bot])

v10.1.66 (2023-10-07)

Full Changelog

🏠 Internal

#1449 Update styfle/cancel-workflow-action action to v0.12.0 (@renovate[bot])

#1448 Update typescript-eslint monorepo to v6.7.4 (@renovate[bot])

#1447 Update dependency tanem-scripts to v7.0.20 (@renovate[bot])

#1446 Update dependency chai to v4.3.10 (@renovate[bot])

#1445 Update dependency rollup to v3.29.4 (@renovate[bot])

#1444 Update dependency chai to v4.3.9 (@renovate[bot])

#1443 Update dependency tanem-scripts to v7.0.19 (@renovate[bot])

Commits

201ff8a Release v10.1.67
4d62249 Update dependency @rollup/plugin-node-resolve to v15.2.3
b77c1cb Update dependency tanem-scripts to v7.0.21
b7bf937 Update dependency eslint to v8.51.0
83c97f2 Update dependency rollup to v4.0.2
ac8df77 Update dependency rollup to v4
477ad19 Update dependency @rollup/plugin-terser to v0.4.4
baa9348 Update dependency @rollup/plugin-replace to v5.0.3
78b582b Update dependency @rollup/plugin-node-resolve to v15.2.2
7791414 Update dependency @rollup/plugin-commonjs to v25.0.5
Additional commits viewable in compare view

Updates focus-trap from 7.5.3 to 7.5.4

Release notes

Sourced from focus-trap's releases.

v7.5.4

Patch Changes

680f6e8: Fix issue with not being able to cycle back to the start from the last element if there is a focusable web component inside the focus-trap ((#1068)[https://redirect.github.com/Bug with selecting jumping to first tabbable from last if web component is involved. focus-trap/focus-trap#1068])

Changelog

Sourced from focus-trap's changelog.

7.5.4

Patch Changes

680f6e8: Fix issue with not being able to cycle back to the start from the last element if there is a focusable web component inside the focus-trap ((#1068)[https://redirect.github.com/Bug with selecting jumping to first tabbable from last if web component is involved. focus-trap/focus-trap#1068])

Commits

df98606 Version Packages (#1079)
680f6e8 fix focusable custom-element tabbing issue (#1072)
891019d [DEPENDABOT]: Bump @rollup/plugin-node-resolve from 15.2.1 to 15.2.3 (#1073)
0f8ede0 [DEPENDABOT]: Bump @rollup/plugin-commonjs from 25.0.4 to 25.0.5 (#1075)
4efba41 [DEPENDABOT]: Bump @types/jquery from 3.5.20 to 3.5.22 (#1074)
000e56f [DEPENDABOT]: Bump @rollup/plugin-terser from 0.4.3 to 0.4.4 (#1076)
4102828 [DEPENDABOT]: Bump eslint from 8.50.0 to 8.51.0 (#1077)
b6bf955 [DEPENDABOT]: Bump @rollup/plugin-babel from 6.0.3 to 6.0.4 (#1078)
79037b7 [DEPENDABOT]: Bump @types/jquery from 3.5.19 to 3.5.20 (#1069)
03cac86 [DEPENDABOT]: Bump cypress from 13.2.0 to 13.3.0 (#1070)
Additional commits viewable in compare view

Updates electron from 26.2.4 to 27.0.0

Release notes

Sourced from electron's releases.

electron v27.0.0

Release Notes for v27.0.0

Stack Upgrades

Chromium 118.0.5993.32

New in 117

New in 118

Node 18.17.1

Node 18.17.1 blog post

V8 11.8

Breaking Changes

macOS 10.13 and 10.14 support has been removed 38891

The ipcRenderer.sendTo() API has been deprecated in favor of sharing a MessageChannel between two renderers. #39091

The senderId and senderIsMainFrame properties of IpcRendererEvent have been deprecated. #39381

The systemPreferences.getAppLevelAppearance and systemPreferences.setAppLevelAppearance APIs have been deprecated, as well as the alternate-selected-control-text value for systemPreferences.getColor. #39343 (Also in 26)

The systemPreferences.getAppLevelAppearance, systemPreferences.setAppLevelAppearance and systemPreferences.appLevelAppearance APIs have been removed, as well as the alternate-selected-control-text value for systemPreferences.getColor. #39804

The webContents.getPrinters API has been deprecated. #39356 (Also in 26)

The deprecated webContents.getPrinters() API has been removed. #39735

The deprecated color scheme changed events in systemPreferences have been removed. #39341

Features

Additions

Added safeStorage.setUsePlainTextEncryption and safeStorage.getSelectedStorageBackend api. #38873 (Also in 25, 26)

Added senderIsMainFrame to messages sent via ipcRenderer.sendTo(). #38868 (Also in 24, 25, 26)

Added a tabbingIdentifier property to BrowserWindow. #40082

Added a title parameter to webContents.openDevTools()to specify the DevTools window title. #39047

Added partial support for chrome.tabs.query. #39330 (Also in 25, 26)

Added support for --dns-result-order Node.js cli flag. #39376 (Also in 25, 26)

Added support for chrome.scripting extension APIs. #39675 (Also in 25, 26)

Added support for customization of the default math font along with other fonts. #38514

Added support for flagging a Menu as being keyboard initiated. #38903 (Also in 26)

Added support for several more Node.js cli flags in the main process. #39344 (Also in 24, 25, 26)

Added support for several more extensions manifest keys including host_permissions, author, and short_name. #39672 (Also in 26)

Added the ability to send HTTP headers with session.downloadURL(). #38785 (Also in 25, 26)

Added the ability to send HTTP headers with webContents.downloadURL(). #39560 (Also in 25, 26)

Added transparent color support for WCO on Windows. #38693 (Also in 25, 26)

BrowserWindow.getBrowserView() started to guarantee returning z-index sorted array. #38943

BrowserWindow.showAllTabs api added. #38965

Detect system dark theme preference via xdg settings portal on Linux. #40010 (Also in 25, 26)

Exposed an API to allow apps to determine whether to avoid using semitransparent backgrounds. #40074 (Also in 26)

Support Chrome Extensions minimum_chrome_version manifest key. #39256 (Also in 26)

node: prefixed requires are now supported in sandboxed renderer preloads for events, timers and url. #38567 (Also in 24, 25, 26)

Removed/Deprecated

The app.runningUnderRosettaTranslation property has been deprecated. #39984 (Also in 25, 26)

The enable_osr build flag has been removed. #38703

... (truncated)

Changelog

Sourced from electron's changelog.

Breaking Changes

Breaking changes will be documented here, and deprecation warnings added to JS code where possible, at least one major version before the change is made.

Types of Breaking Changes

This document uses the following convention to categorize breaking changes:

API Changed: An API was changed in such a way that code that has not been updated is guaranteed to throw an exception.

Behavior Changed: The behavior of Electron has changed, but not in such a way that an exception will necessarily be thrown.

Default Changed: Code depending on the old default may break, not necessarily throwing an exception. The old behavior can be restored by explicitly specifying the value.

Deprecated: An API was marked as deprecated. The API will continue to function, but will emit a deprecation warning, and will be removed in a future release.

Removed: An API or feature was removed, and is no longer supported by Electron.

Planned Breaking API Changes (28.0)

Behavior Changed: WebContents.backgroundThrottling set to false affects all WebContents in the host BrowserWindow

WebContents.backgroundThrottling set to false will disable frames throttling in the BrowserWindow for all WebContents displayed by it.

Removed: BrowserWindow.setTrafficLightPosition(position)

BrowserWindow.setTrafficLightPosition(position) has been removed, the BrowserWindow.setWindowButtonPosition(position) API should be used instead which accepts null instead of { x: 0, y: 0 } to reset the position to system default.
// Removed in Electron 28
win.setTrafficLightPosition({ x: 10, y: 10 })
win.setTrafficLightPosition({ x: 0, y: 0 })
// Replace with
win.setWindowButtonPosition({ x: 10, y: 10 })
win.setWindowButtonPosition(null)
Removed: BrowserWindow.getTrafficLightPosition()

BrowserWindow.getTrafficLightPosition() has been removed, the BrowserWindow.getWindowButtonPosition() API should be used instead which returns null instead of { x: 0, y: 0 } when there is no custom position.
// Removed in Electron 28
const pos = win.getTrafficLightPosition()
if (pos.x === 0 && pos.y === 0) {
  // No custom position.
</tr></table> 

... (truncated)

Commits

6de96fb ci: fixup diagnose_goma_log.py call (#40149)
cf0e974 fix: failing build with enable_electron_extensions=false (#40087)
7e20732 fix: crashed events deprecation (#40111)
8f370cd fix: fix vibrancy applying without transparency on MacOS (#40130)
82d4e94 test: fix "crashed event does not crash main process when destroying WebConte...
f0b742f test: add back smoke test for removed API (#40139)
2bc07b0 chore: cherry-pick c03569f from libuv (#40126)
d95f28c fix: toggling DevTools while minimized on Windows (#40116)
22ea111 fix: error using webcrypto.subtle.importKey() (#40100)
5b44e82 fix: all children showing when showing child window (#40105)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 4 updates: [@resvg/resvg-js](https://github.com/yisibl/resvg-js), [@tanem/svg-injector](https://github.com/tanem/svg-injector), [focus-trap](https://github.com/focus-trap/focus-trap) and [electron](https://github.com/electron/electron). Updates `@resvg/resvg-js` from 2.4.1 to 2.5.0 - [Release notes](https://github.com/yisibl/resvg-js/releases) - [Changelog](https://github.com/yisibl/resvg-js/blob/main/CHANGELOG.md) - [Commits](yisibl/resvg-js@v2.4.1...v2.5.0) Updates `@tanem/svg-injector` from 10.1.65 to 10.1.67 - [Changelog](https://github.com/tanem/svg-injector/blob/master/CHANGELOG.md) - [Commits](tanem/svg-injector@v10.1.65...v10.1.67) Updates `focus-trap` from 7.5.3 to 7.5.4 - [Release notes](https://github.com/focus-trap/focus-trap/releases) - [Changelog](https://github.com/focus-trap/focus-trap/blob/master/CHANGELOG.md) - [Commits](focus-trap/focus-trap@v7.5.3...v7.5.4) Updates `electron` from 26.2.4 to 27.0.0 - [Release notes](https://github.com/electron/electron/releases) - [Changelog](https://github.com/electron/electron/blob/main/docs/breaking-changes.md) - [Commits](electron/electron@v26.2.4...v27.0.0) --- updated-dependencies: - dependency-name: "@resvg/resvg-js" dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: "@tanem/svg-injector" dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: focus-trap dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: electron dependency-type: direct:development update-type: version-update:semver-major dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2023-10-23T13:38:09Z

Superseded by #80.

dependabot bot added the dependencies Pull requests that update a dependency file label Oct 16, 2023

This was referenced Oct 16, 2023

Bump @resvg/resvg-js from 2.4.1 to 2.5.0 #74

Closed

Bump focus-trap from 7.5.3 to 7.5.4 #75

Closed

dependabot bot closed this Oct 23, 2023

dependabot bot deleted the dependabot/npm_and_yarn/dependencies-d7ca844c78 branch October 23, 2023 13:38

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the dependencies group with 4 updates #77

Bump the dependencies group with 4 updates #77

dependabot bot commented on behalf of github Oct 16, 2023 •

edited

dependabot bot commented on behalf of github Oct 23, 2023

Bump the dependencies group with 4 updates #77

Bump the dependencies group with 4 updates #77

Conversation

dependabot bot commented on behalf of github Oct 16, 2023 • edited

v2.5.0

What's Changed

Added

Changed

[2.5.0] - 2023-10-16

Added

Changed

v10.1.67 (2023-10-13)

🏠 Internal

v10.1.66 (2023-10-07)

🏠 Internal

v7.5.4

Patch Changes

7.5.4

Patch Changes

electron v27.0.0

Release Notes for v27.0.0

Stack Upgrades

Breaking Changes

Features

Additions

Removed/Deprecated

Breaking Changes

Types of Breaking Changes

Planned Breaking API Changes (28.0)

Behavior Changed: WebContents.backgroundThrottling set to false affects all WebContents in the host BrowserWindow

Removed: BrowserWindow.setTrafficLightPosition(position)

Removed: BrowserWindow.getTrafficLightPosition()

dependabot bot commented on behalf of github Oct 23, 2023

dependabot bot commented on behalf of github Oct 16, 2023 •

edited

Behavior Changed: `WebContents.backgroundThrottling` set to false affects all `WebContents` in the host `BrowserWindow`

Removed: `BrowserWindow.setTrafficLightPosition(position)`

Removed: `BrowserWindow.getTrafficLightPosition()`