13.md (7281B)
1 # PR #13 Bump gulp-uglify from 2.0.0 to 3.0.2 2 3 - **Status:** merged 4 - **Author:** @dependabot[bot] 5 - **Created:** 2022-07-20T09:30:01Z 6 - **Branch:** dependabot/npm_and_yarn/gulp-uglify-3.0.2 → master 7 - **Merged:** 2022-07-21T08:07:17Z 8 - **Labels:** dependencies 9 - **Diff:** [13.diff](./13.diff) 10 11 --- 12 13 Bumps [gulp-uglify](https://github.com/terinjokes/gulp-uglify) from 2.0.0 to 3.0.2. 14 <details> 15 <summary>Release notes</summary> 16 <p><em>Sourced from <a href="https://github.com/terinjokes/gulp-uglify/releases">gulp-uglify's releases</a>.</em></p> 17 <blockquote> 18 <h2>v3.0.2</h2> 19 <p>A relatively small maintenance release adjusting dependencies.</p> 20 <h3>Features</h3> 21 <ul> 22 <li>Lodash is removed in favor of lighter dependencies specifically for the features used. <code>intelli-espower-loader</code> was also removed, as it's no longer compatible with the full suite of Node.js releases tested.</li> 23 </ul> 24 <h2>v3.0.1</h2> 25 <p>A relatively small maintenance release.</p> 26 <h3>Fixes</h3> 27 <ul> 28 <li>If the error from UglifyJS contains column information, append this to the error message (alongside the line number).</li> 29 <li>Buffers are now allocated with <code>Buffer.from</code>, ensuring Buffers never have any private information.</li> 30 <li>The Streams callback is only called once, even if a downstream exits in error.</li> 31 </ul> 32 <h2>v3.0.0</h2> 33 <p>We're now targeting UglifyJS3, if you need to continue to use UglifyJS2, you should stay on v2.1.2.</p> 34 <h3>Breaking Changes</h3> 35 <ul> 36 <li> 37 <p>The custom option "preserveComments" was removed.</p> 38 <p>As a replacement, set the <code>options.output.comments</code> option directly, UglifyJS3 understands the following options:</p> 39 <ul> 40 <li>"all", to attempt to keep all comments.</li> 41 <li>"some", to keep comments containing some license text.</li> 42 <li>a RegExp</li> 43 <li>a function that should return true or false.</li> 44 </ul> 45 <p>While the "some" option works for many cases, it doesn't fully match the behavior of the "license" option. Fortunately, you can pass the exported function from <code>uglify-save-license</code> as the comment option.</p> 46 </li> 47 <li> 48 <p>The "minifier" API, which you could use to provide your own UglifyJS instance has been removed. It has been replaced with the "composer" API.</p> 49 </li> 50 </ul> 51 <h2>v2.1.2</h2> 52 <h3>Bug Fixes</h3> 53 <ul> 54 <li><strong>package:</strong> In the previous release devDependencies were incorrectly added as dependencies. This moves them to the correct location. (<a href="https://github.com/terinjokes/gulp-uglify/commit/ba83a45c32a4e39288723da4b350a1ff9198406a">ba83a45c</a>)</li> 55 </ul> 56 <h2>v2.1.1</h2> 57 <h3>Bug Fixes</h3> 58 <ul> 59 <li><strong>errors:</strong> restore filenames and line information to <code>GulpUglifyError</code>'s <code>toString</code> method. (<a href="https://github.com/terinjokes/gulp-uglify/commit/c722ab9c768af64b3528a8fc780fad3ababd402d">c722ab9c</a>)</li> 60 </ul> 61 <h2>v2.1.0</h2> 62 <h3>Minor Fixes</h3> 63 <ul> 64 <li>Updates UglifyJS to 2.8.10, and loosens version pinning to minor versions. See <a href="https://github.com/mishoo/UglifyJS2/compare/v2.7.5...v2.8.10">https://github.com/mishoo/UglifyJS2/compare/v2.7.5...v2.8.10</a> for details of changes.</li> 65 </ul> 66 <h2>v2.0.1</h2> 67 <h3>Minor Fixes</h3> 68 <ul> 69 <li>Updates UglifyJS to 2.7.5. See <a href="https://github.com/mishoo/UglifyJS2/compare/v2.7.0...v2.7.5">https://github.com/mishoo/UglifyJS2/compare/v2.7.0...v2.7.5</a> for details of changes.</li> 70 </ul> 71 </blockquote> 72 </details> 73 <details> 74 <summary>Commits</summary> 75 <ul> 76 <li><a href="https://github.com/terinjokes/gulp-uglify/commit/7b9a7adc6f097a26a984c6598f93e15e286b18e3"><code>7b9a7ad</code></a> 3.0.2</li> 77 <li><a href="https://github.com/terinjokes/gulp-uglify/commit/a56d1c7e04bc25ae5356a42316d1dfca930be7f8"><code>a56d1c7</code></a> feat: remove lodash dependency</li> 78 <li><a href="https://github.com/terinjokes/gulp-uglify/commit/bcdda44a79a1577d8c74a1b3839090c67b0d6242"><code>bcdda44</code></a> docs: replace <code>pump</code> with <code>pipeline</code></li> 79 <li><a href="https://github.com/terinjokes/gulp-uglify/commit/c92197dacf937c97e3e993dab53f9a95fed5434f"><code>c92197d</code></a> 3.0.1</li> 80 <li><a href="https://github.com/terinjokes/gulp-uglify/commit/27b26d4f8f337386ac7cce6bc4e09effb066e1a4"><code>27b26d4</code></a> fix(composer): invoke callback only once</li> 81 <li><a href="https://github.com/terinjokes/gulp-uglify/commit/2c7f6568a0b93e206d789d175dd262135ab3c1f3"><code>2c7f656</code></a> tests: import tape-catch to catch thrown errors</li> 82 <li><a href="https://github.com/terinjokes/gulp-uglify/commit/b2492c4a15ffcbd24c1a2c2328e143f17dbfc258"><code>b2492c4</code></a> fix: create safe-buffers</li> 83 <li><a href="https://github.com/terinjokes/gulp-uglify/commit/a751c5afe602e3a8d54cb7214f43c0541769d7cd"><code>a751c5a</code></a> tests: convert tests to to tape harness</li> 84 <li><a href="https://github.com/terinjokes/gulp-uglify/commit/95f17a5a7824f72bf326ebead6f0522337b84fd9"><code>95f17a5</code></a> feat(error): add column to error string</li> 85 <li><a href="https://github.com/terinjokes/gulp-uglify/commit/e2462fa5fedf933db4d75183d1c693ed5c0c42c0"><code>e2462fa</code></a> chore(travis): update test matrix</li> 86 <li>Additional commits viewable in <a href="https://github.com/terinjokes/gulp-uglify/compare/v2.0.0...v3.0.2">compare view</a></li> 87 </ul> 88 </details> 89 <br /> 90 91 92 [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) 93 94 Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. 95 96 [//]: # (dependabot-automerge-start) 97 [//]: # (dependabot-automerge-end) 98 99 --- 100 101 <details> 102 <summary>Dependabot commands and options</summary> 103 <br /> 104 105 You can trigger Dependabot actions by commenting on this PR: 106 - `@dependabot rebase` will rebase this PR 107 - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it 108 - `@dependabot merge` will merge this PR after your CI passes on it 109 - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it 110 - `@dependabot cancel merge` will cancel a previously requested merge and block automerging 111 - `@dependabot reopen` will reopen this PR if it is closed 112 - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually 113 - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) 114 - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) 115 - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) 116 117 118 </details> 119 120 121 ## Comments 122 123 ### @MTRNord — 2022-07-21T08:03:48Z 124 125 @dependabot rebase 126