13.json (7653B)
1 { 2 "number": 13, 3 "title": "Bump gulp-uglify from 2.0.0 to 3.0.2", 4 "state": "merged", 5 "diff_file": "13.diff", 6 "author": "dependabot[bot]", 7 "created_at": "2022-07-20T09:30:01Z", 8 "closed_at": "2022-07-21T08:07:17Z", 9 "merged_at": "2022-07-21T08:07:17Z", 10 "base_ref": "master", 11 "head_ref": "dependabot/npm_and_yarn/gulp-uglify-3.0.2", 12 "labels": [ 13 "dependencies" 14 ], 15 "assignees": [], 16 "requested_reviewers": [], 17 "body": "Bumps [gulp-uglify](https://github.com/terinjokes/gulp-uglify) from 2.0.0 to 3.0.2.\n<details>\n<summary>Release notes</summary>\n<p><em>Sourced from <a href=\"https://github.com/terinjokes/gulp-uglify/releases\">gulp-uglify's releases</a>.</em></p>\n<blockquote>\n<h2>v3.0.2</h2>\n<p>A relatively small maintenance release adjusting dependencies.</p>\n<h3>Features</h3>\n<ul>\n<li>Lodash is removed in favor of lighter dependencies specifically for the features used. <code>intelli-espower-loader</code> was also removed, as it's no longer compatible with the full suite of Node.js releases tested.</li>\n</ul>\n<h2>v3.0.1</h2>\n<p>A relatively small maintenance release.</p>\n<h3>Fixes</h3>\n<ul>\n<li>If the error from UglifyJS contains column information, append this to the error message (alongside the line number).</li>\n<li>Buffers are now allocated with <code>Buffer.from</code>, ensuring Buffers never have any private information.</li>\n<li>The Streams callback is only called once, even if a downstream exits in error.</li>\n</ul>\n<h2>v3.0.0</h2>\n<p>We're now targeting UglifyJS3, if you need to continue to use UglifyJS2, you should stay on v2.1.2.</p>\n<h3>Breaking Changes</h3>\n<ul>\n<li>\n<p>The custom option "preserveComments" was removed.</p>\n<p>As a replacement, set the <code>options.output.comments</code> option directly, UglifyJS3 understands the following options:</p>\n<ul>\n<li>"all", to attempt to keep all comments.</li>\n<li>"some", to keep comments containing some license text.</li>\n<li>a RegExp</li>\n<li>a function that should return true or false.</li>\n</ul>\n<p>While the "some" option works for many cases, it doesn't fully match the behavior of the "license" option. Fortunately, you can pass the exported function from <code>uglify-save-license</code> as the comment option.</p>\n</li>\n<li>\n<p>The "minifier" API, which you could use to provide your own UglifyJS instance has been removed. It has been replaced with the "composer" API.</p>\n</li>\n</ul>\n<h2>v2.1.2</h2>\n<h3>Bug Fixes</h3>\n<ul>\n<li><strong>package:</strong> In the previous release devDependencies were incorrectly added as dependencies. This moves them to the correct location. (<a href=\"https://github.com/terinjokes/gulp-uglify/commit/ba83a45c32a4e39288723da4b350a1ff9198406a\">ba83a45c</a>)</li>\n</ul>\n<h2>v2.1.1</h2>\n<h3>Bug Fixes</h3>\n<ul>\n<li><strong>errors:</strong> restore filenames and line information to <code>GulpUglifyError</code>'s <code>toString</code> method. (<a href=\"https://github.com/terinjokes/gulp-uglify/commit/c722ab9c768af64b3528a8fc780fad3ababd402d\">c722ab9c</a>)</li>\n</ul>\n<h2>v2.1.0</h2>\n<h3>Minor Fixes</h3>\n<ul>\n<li>Updates UglifyJS to 2.8.10, and loosens version pinning to minor versions. See <a href=\"https://github.com/mishoo/UglifyJS2/compare/v2.7.5...v2.8.10\">https://github.com/mishoo/UglifyJS2/compare/v2.7.5...v2.8.10</a> for details of changes.</li>\n</ul>\n<h2>v2.0.1</h2>\n<h3>Minor Fixes</h3>\n<ul>\n<li>Updates UglifyJS to 2.7.5. See <a href=\"https://github.com/mishoo/UglifyJS2/compare/v2.7.0...v2.7.5\">https://github.com/mishoo/UglifyJS2/compare/v2.7.0...v2.7.5</a> for details of changes.</li>\n</ul>\n</blockquote>\n</details>\n<details>\n<summary>Commits</summary>\n<ul>\n<li><a href=\"https://github.com/terinjokes/gulp-uglify/commit/7b9a7adc6f097a26a984c6598f93e15e286b18e3\"><code>7b9a7ad</code></a> 3.0.2</li>\n<li><a href=\"https://github.com/terinjokes/gulp-uglify/commit/a56d1c7e04bc25ae5356a42316d1dfca930be7f8\"><code>a56d1c7</code></a> feat: remove lodash dependency</li>\n<li><a href=\"https://github.com/terinjokes/gulp-uglify/commit/bcdda44a79a1577d8c74a1b3839090c67b0d6242\"><code>bcdda44</code></a> docs: replace <code>pump</code> with <code>pipeline</code></li>\n<li><a href=\"https://github.com/terinjokes/gulp-uglify/commit/c92197dacf937c97e3e993dab53f9a95fed5434f\"><code>c92197d</code></a> 3.0.1</li>\n<li><a href=\"https://github.com/terinjokes/gulp-uglify/commit/27b26d4f8f337386ac7cce6bc4e09effb066e1a4\"><code>27b26d4</code></a> fix(composer): invoke callback only once</li>\n<li><a href=\"https://github.com/terinjokes/gulp-uglify/commit/2c7f6568a0b93e206d789d175dd262135ab3c1f3\"><code>2c7f656</code></a> tests: import tape-catch to catch thrown errors</li>\n<li><a href=\"https://github.com/terinjokes/gulp-uglify/commit/b2492c4a15ffcbd24c1a2c2328e143f17dbfc258\"><code>b2492c4</code></a> fix: create safe-buffers</li>\n<li><a href=\"https://github.com/terinjokes/gulp-uglify/commit/a751c5afe602e3a8d54cb7214f43c0541769d7cd\"><code>a751c5a</code></a> tests: convert tests to to tape harness</li>\n<li><a href=\"https://github.com/terinjokes/gulp-uglify/commit/95f17a5a7824f72bf326ebead6f0522337b84fd9\"><code>95f17a5</code></a> feat(error): add column to error string</li>\n<li><a href=\"https://github.com/terinjokes/gulp-uglify/commit/e2462fa5fedf933db4d75183d1c693ed5c0c42c0\"><code>e2462fa</code></a> chore(travis): update test matrix</li>\n<li>Additional commits viewable in <a href=\"https://github.com/terinjokes/gulp-uglify/compare/v2.0.0...v3.0.2\">compare view</a></li>\n</ul>\n</details>\n<br />\n\n\n[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n<details>\n<summary>Dependabot commands and options</summary>\n<br />\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n</details>", 18 "comments": [ 19 { 20 "author": "MTRNord", 21 "created_at": "2022-07-21T08:03:48Z", 22 "body": "@dependabot rebase" 23 } 24 ], 25 "review_comments": [] 26 }