Bump the dependencies group with 4 updates #83

dependabot · 2023-11-06T13:48:32Z

Bumps the dependencies group with 4 updates: @resvg/resvg-js, @tanem/svg-injector, focus-trap and electron.

Updates @resvg/resvg-js from 2.4.1 to 2.6.0

Release notes

Sourced from @resvg/resvg-js's releases.

v2.6.0

What's Changed

🚀 Up to 115x faster for very large SVG files

Now resvg has been upgraded from v0.29.0 to v0.34.0, bringing with it a host of new SVG features and performance improvements.

Support SVG2 mask-type property.

Allows quadratic Bézier curves: text might render slightly differently (better?). This is because TrueType fonts contain only quadratic curves and we were converting them to cubic before.

Clipping and masking is up to 20% faster.

Reduces the peak memory usage for SVGs with large paths (in terms of the number of segments).

A new rendering algorithm. When rendering isolated groups, aka layers, we have to know the layer bounding box beforehand, which is ridiculously hard in SVG. Previously, resvg would simply use the canvas size for all the layers. This means that to render a 10x10px layer on a 1000x1000px canvas, we would have to allocate and then blend a 1000x1000px layer, which is just a waste of CPU cycles. The new rendering algorithm is able to calculate layer bounding boxes, which dramatically improves performance when rendering a lot of tiny layers on a large canvas. Moreover, it makes performance more linear with a canvas size increase. The paris-30k.svg sample from google/forma is rendered 115 times faster on M1 Pro now. From ~33760ms down to ~290ms. 5269x3593px canvas. If we restrict the canvas to 1000x1000px, which would contain only the actual paris-30k.svg content, then we're 13 times faster. From ~3252ms down to ~253ms.

Added

feat: upgrade to usvg/resvg 0.34.0. #268 Thanks to @zimond

Full Changelog: yisibl/resvg-js@v2.5.0...v2.6.0

v2.5.0

What's Changed

Added

Now we can finally loading custom fonts in Wasm, including the WOFF2 format (see playground), thanks to the high-performance woff2-rs.

In addition, we implemented smarter default font family fallback. the defaultFontFamily option can now be omitted. We'll read the font-family from the incoming fonts and set it to the default.
<script src="https://unpkg.com/@resvg/resvg-wasm"></script>
<script>
  (async function () {
    await resvg.initWasm(fetch('https://unpkg.com/@resvg/resvg-wasm/index_bg.wasm'))
const font = await fetch('./fonts/Pacifico-Regular.woff2')

</tr></table>

... (truncated)

Changelog

Sourced from @resvg/resvg-js's changelog.

[2.6.0] - 2023-10-20

🚀 Up to 115x faster for very large SVG files

Now resvg has been upgraded from v0.29.0 to v0.34.0, bringing with it a host of new SVG features and performance improvements.

Support SVG2 mask-type property.

Allows quadratic Bézier curves: text might render slightly differently (better?). This is because TrueType fonts contain only quadratic curves and we were converting them to cubic before.

Clipping and masking is up to 20% faster.

Reduces the peak memory usages for SVGs with large paths (in terms of the number of segments).

A new rendering algorithm. When rendering isolated groups, aka layers, we have to know the layer bounding box beforehand, which is ridiculously hard in SVG. Previously, resvg would simply use the canvas size for all the layers. Meaning that to render a 10x10px layer on a 1000x1000px canvas, we would have to allocate and then blend a 1000x1000px layer, which is just a waste of CPU cycles. The new rendering algorithm is able to calculate layer bounding boxes, which dramatically improves performance when rendering a lot of tiny layers on a large canvas. Moreover, it makes performance more linear with a canvas size increase. The paris-30k.svg sample from google/forma is rendered 115 times faster on M1 Pro now. From ~33760ms down to ~290ms. 5269x3593px canvas. If we restrict the canvas to 1000x1000px, which would contain only the actual paris-30k.svg content, then we're 13 times faster. From ~3252ms down to ~253ms.

Added

feat: upgrade to usvg/resvg 0.34.0. #268 Thanks to @zimond

[2.5.0] - 2023-10-16

Added

Now we can finally loading custom fonts in Wasm, including the WOFF2 format (see playground), thanks to the high-performance woff2-rs.

In addition, we implemented smarter default font family fallback. the defaultFontFamily option can now be omitted. We'll read the font-family from the incoming fonts and set it to the default.
<script src="https://unpkg.com/@resvg/resvg-wasm"></script>
<script>
  ;(async function () {
    await resvg.initWasm(fetch('https://unpkg.com/@resvg/resvg-wasm/index_bg.wasm'))
const font = await fetch('./fonts/Pacifico-Regular.woff2')
if (!font.ok) return
const fontData = await font.arrayBuffer()
const buffer = new Uint8Array(fontData)

</tr></table>

... (truncated)

Commits

cfca7ad 2.6.0
065b7f4 chore(deps): update actions/checkout action to v4
ce9b094 chore(deps): update yarn to v3.6.4
6d3968a doc: updage Readme.md
0337aaa test: fix test and update the example results
c041dd5 feat: upgrade to a newer resvg fork
de8b059 test: fix fontBuffers test
88595e1 feat: upgrade to usvg/resvg 0.34
b07a26f 2.5.0
4e68970 fix(deps): update rust crate svgtypes to 0.12.0
Additional commits viewable in compare view

Updates @tanem/svg-injector from 10.1.65 to 10.1.67

Changelog

Sourced from @tanem/svg-injector's changelog.

v10.1.67 (2023-10-13)

Full Changelog

🏠 Internal

#1459 Update dependency @rollup/plugin-node-resolve to v15.2.3 (@renovate[bot])

#1458 Update dependency tanem-scripts to v7.0.21 (@renovate[bot])

#1457 Update dependency eslint to v8.51.0 (@renovate[bot])

#1456 Update dependency rollup to v4.0.2 (@renovate[bot])

#1455 Update dependency rollup to v4 (@renovate[bot])

#1454 Update dependency @rollup/plugin-terser to v0.4.4 (@renovate[bot])

#1453 Update dependency @rollup/plugin-replace to v5.0.3 (@renovate[bot])

#1452 Update dependency @rollup/plugin-node-resolve to v15.2.2 (@renovate[bot])

#1451 Update dependency @rollup/plugin-commonjs to v25.0.5 (@renovate[bot])

#1450 Update dependency @rollup/plugin-babel to v6.0.4 (@renovate[bot])

v10.1.66 (2023-10-07)

Full Changelog

🏠 Internal

#1449 Update styfle/cancel-workflow-action action to v0.12.0 (@renovate[bot])

#1448 Update typescript-eslint monorepo to v6.7.4 (@renovate[bot])

#1447 Update dependency tanem-scripts to v7.0.20 (@renovate[bot])

#1446 Update dependency chai to v4.3.10 (@renovate[bot])

#1445 Update dependency rollup to v3.29.4 (@renovate[bot])

#1444 Update dependency chai to v4.3.9 (@renovate[bot])

#1443 Update dependency tanem-scripts to v7.0.19 (@renovate[bot])

Commits

201ff8a Release v10.1.67
4d62249 Update dependency @rollup/plugin-node-resolve to v15.2.3
b77c1cb Update dependency tanem-scripts to v7.0.21
b7bf937 Update dependency eslint to v8.51.0
83c97f2 Update dependency rollup to v4.0.2
ac8df77 Update dependency rollup to v4
477ad19 Update dependency @rollup/plugin-terser to v0.4.4
baa9348 Update dependency @rollup/plugin-replace to v5.0.3
78b582b Update dependency @rollup/plugin-node-resolve to v15.2.2
7791414 Update dependency @rollup/plugin-commonjs to v25.0.5
Additional commits viewable in compare view

Updates focus-trap from 7.5.3 to 7.5.4

Release notes

Sourced from focus-trap's releases.

v7.5.4

Patch Changes

680f6e8: Fix issue with not being able to cycle back to the start from the last element if there is a focusable web component inside the focus-trap ((#1068)[https://redirect.github.com/Bug with selecting jumping to first tabbable from last if web component is involved. focus-trap/focus-trap#1068])

Changelog

Sourced from focus-trap's changelog.

7.5.4

Patch Changes

680f6e8: Fix issue with not being able to cycle back to the start from the last element if there is a focusable web component inside the focus-trap ((#1068)[https://redirect.github.com/Bug with selecting jumping to first tabbable from last if web component is involved. focus-trap/focus-trap#1068])

Commits

df98606 Version Packages (#1079)
680f6e8 fix focusable custom-element tabbing issue (#1072)
891019d [DEPENDABOT]: Bump @rollup/plugin-node-resolve from 15.2.1 to 15.2.3 (#1073)
0f8ede0 [DEPENDABOT]: Bump @rollup/plugin-commonjs from 25.0.4 to 25.0.5 (#1075)
4efba41 [DEPENDABOT]: Bump @types/jquery from 3.5.20 to 3.5.22 (#1074)
000e56f [DEPENDABOT]: Bump @rollup/plugin-terser from 0.4.3 to 0.4.4 (#1076)
4102828 [DEPENDABOT]: Bump eslint from 8.50.0 to 8.51.0 (#1077)
b6bf955 [DEPENDABOT]: Bump @rollup/plugin-babel from 6.0.3 to 6.0.4 (#1078)
79037b7 [DEPENDABOT]: Bump @types/jquery from 3.5.19 to 3.5.20 (#1069)
03cac86 [DEPENDABOT]: Bump cypress from 13.2.0 to 13.3.0 (#1070)
Additional commits viewable in compare view

Updates electron from 26.2.4 to 27.0.3

Release notes

Sourced from electron's releases.

electron v27.0.3

Release Notes for v27.0.3

Fixes

Fixed an error changing file format in dialog.showOpenDialog on macOS. #40347 (Also in 28)

Fixed an issue where navigator.keyboard.lock() did not work per latest expected behavior. #40388 (Also in 26, 28)

Other Changes

Updated Chromium to 118.0.5993.120. #40404

electron v27.0.2

Release Notes for v27.0.2

Fixes

Functions called over the contextBridge are now called with the expected receiver (this). #40262 (Also in 28)

Other Changes

Backported fix for 1473422. #40280

electron v27.0.1

Release Notes for v27.0.1

Fixes

Fixed an issue where Windows Toast notifications weren't properly dismissed from the Action Center on notification.close() if they'd previously been dismissed. #40244 (Also in 26, 28)

Fixed an issue where calling loadURL during some webContents url loading events could crash. #40162 (Also in 24, 25, 26)

Fixed an issue where fully occluded windows would return an empty image from webContents.capturePage() on Windows and Linux. #40188 (Also in 25, 26, 28)

Fixed an issue with webContents interaction with fullscreen and WCO on macOS. #40217 (Also in 25, 26, 28)

Fixed some redundant permission dialogs while screen sharing on Wayland. #40193 (Also in 26, 28)

Other Changes

Updated Chromium to 118.0.5993.89. #40240

electron v27.0.0

Release Notes for v27.0.0

Stack Upgrades

Chromium 118.0.5993.32

New in 117

New in 118

Node 18.17.1

Node 18.17.1 blog post

V8 11.8

Breaking Changes

macOS 10.13 and 10.14 support has been removed 38891

The ipcRenderer.sendTo() API has been deprecated in favor of sharing a MessageChannel between two renderers. #39091

... (truncated)

Commits

0beed97 chore: bump chromium to 118.0.5993.120 (27-x-y) (#40404)
a22f611 build: actually show github upload output if verbose is true. (#40399)
4487ff5 fix: navigator.keyboard.lock() fullscreen exit handling (#40388)
6b87170 chore: bump chromium to 118.0.5993.119 (27-x-y) (#40355)
1e24b13 build: fix ":electron_lib_arc" / "chromium_src:chrome_lib_arc" dependencies (...
ef2745f fix: prevent PopUpButtonHandler premature dealloc (#40347)
8f90a40 build: upload slow, more time good (#40337)
e43beae chore: bump chromium to 118.0.5993.117 (27-x-y) (#40326)
7ac2e49 test: add spec for app.getAppMetrics() for utility process (#40317)
301f3da test: add spec for child-process-gone event for utility process (#40305)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 4 updates: [@resvg/resvg-js](https://github.com/yisibl/resvg-js), [@tanem/svg-injector](https://github.com/tanem/svg-injector), [focus-trap](https://github.com/focus-trap/focus-trap) and [electron](https://github.com/electron/electron). Updates `@resvg/resvg-js` from 2.4.1 to 2.6.0 - [Release notes](https://github.com/yisibl/resvg-js/releases) - [Changelog](https://github.com/yisibl/resvg-js/blob/main/CHANGELOG.md) - [Commits](yisibl/resvg-js@v2.4.1...v2.6.0) Updates `@tanem/svg-injector` from 10.1.65 to 10.1.67 - [Changelog](https://github.com/tanem/svg-injector/blob/master/CHANGELOG.md) - [Commits](tanem/svg-injector@v10.1.65...v10.1.67) Updates `focus-trap` from 7.5.3 to 7.5.4 - [Release notes](https://github.com/focus-trap/focus-trap/releases) - [Changelog](https://github.com/focus-trap/focus-trap/blob/master/CHANGELOG.md) - [Commits](focus-trap/focus-trap@v7.5.3...v7.5.4) Updates `electron` from 26.2.4 to 27.0.3 - [Release notes](https://github.com/electron/electron/releases) - [Changelog](https://github.com/electron/electron/blob/main/docs/breaking-changes.md) - [Commits](electron/electron@v26.2.4...v27.0.3) --- updated-dependencies: - dependency-name: "@resvg/resvg-js" dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: "@tanem/svg-injector" dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: focus-trap dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: electron dependency-type: direct:development update-type: version-update:semver-major dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2023-11-13T13:38:05Z

Superseded by #85.

dependabot bot added the dependencies Pull requests that update a dependency file label Nov 6, 2023

dependabot bot mentioned this pull request Nov 6, 2023

Bump the dependencies group with 4 updates #80

Closed

dependabot bot closed this Nov 13, 2023

dependabot bot deleted the dependabot/npm_and_yarn/dependencies-c5489fca6c branch November 13, 2023 13:38

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the dependencies group with 4 updates #83

Bump the dependencies group with 4 updates #83

dependabot bot commented on behalf of github Nov 6, 2023 •

edited

dependabot bot commented on behalf of github Nov 13, 2023

Bump the dependencies group with 4 updates #83

Bump the dependencies group with 4 updates #83

Conversation

dependabot bot commented on behalf of github Nov 6, 2023 • edited

v2.6.0

What's Changed

Added

v2.5.0

What's Changed

Added

[2.6.0] - 2023-10-20

Added

[2.5.0] - 2023-10-16

Added

v10.1.67 (2023-10-13)

🏠 Internal

v10.1.66 (2023-10-07)

🏠 Internal

v7.5.4

Patch Changes

7.5.4

Patch Changes

electron v27.0.3

Release Notes for v27.0.3

Fixes

Other Changes

electron v27.0.2

Release Notes for v27.0.2

Fixes

Other Changes

electron v27.0.1

Release Notes for v27.0.1

Fixes

Other Changes

electron v27.0.0

Release Notes for v27.0.0

Stack Upgrades

Breaking Changes

dependabot bot commented on behalf of github Nov 13, 2023

dependabot bot commented on behalf of github Nov 6, 2023 •

edited