Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): bump dustjs-linkedin from 2.7.5 to 3.0.0 #99

Closed

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Dec 22, 2022

Bumps dustjs-linkedin from 2.7.5 to 3.0.0.

Release notes

Sourced from dustjs-linkedin's releases.

v3.0.0

What's Changed

New Contributors

Full Changelog: linkedin/dustjs@v2.7.2...v3.0.0

Changelog

Sourced from dustjs-linkedin's changelog.

v3.0.0 (2021/10/20 22:56 +00:00)

list (2016/12/08 20:15 +00:00)

v2.7.4 (2016/09/13 02:52 +00:00)

  • #744 Don't use instanceof to determine if a Context is a Context. Instead use a flag on the instance itself so it can survive object merges. (@​sethkinast)

v2.6.3 (2016/07/26 18:03 +00:00)

v2.7.2 (2015/06/08 20:41 +00:00)

  • #673 Pass the current context to filters (@​sethkinast)
  • #676 If a Promise is resolved with an array, iterate over it instead of rendering the whole array at once.

Closes #674 (@​sethkinast)

  • #647 Allow helpers to return primitives

Previously returning a primitive would crash rendering with no way to recover. You can still return a Chunk and do more complex work if you need to.

Helpers act like references or sections depending on if they have a body. When they have no body, they act like a reference and look in params.filters for filters to use. When they have a body, they act like a section. You can return thenables and streams normally.

{@​return value="" filters="|s" /} {@​return value=""}{.} World{/return}

Closes #645 (@​sethkinast)

  • #664 Be slightly pickier about what Dust thinks a Stream is.

Closes #663 (@​sethkinast)

Closes #649 Closes #602 Closes #642 (@​sethkinast)

  • #660 Grammar: s/char/character/ to avoid using a reserved name

Closes #659 (@​sethkinast)

v2.7.1 (2015/04/30 20:32 +00:00)

  • #655 Update CommonJS example to make use of new onLoad behavior (@​sethkinast)
  • #653 Fix array iteration when context is undefined (@​sethkinast)
  • #641 Add a cb(null, compiledTemplate) signature to dust.onLoad

Calling the onLoad callback with a compiled template function will use this template to satisfy the load request. The template is not automatically registered under any name when passed to the callback, so the onLoad function should handle registration as it needs.

dust.cache behavior has been changed slightly. Before, setting it to false would blow away the entire cache on every render. Now, setting it to false just prevents new templates from being added and cached templates from being used, but if it's set to true again previously-cached templates will be ready to use. (@​sethkinast)

v2.7.0 (2015/04/17 23:23 +00:00)

  • dust.render and dust.stream now accept a compiled template function in addition to a template name.
  • dust.compile no longer requires a template name, and will compile an anonymous template without one (so --name is no longer required for dustc either)
  • dust.load is removed from the public API
  • dust.renderSource is moved to the compiler, so it's only included in dust-full now (Fixes #412)
  • dust.compileFn is moved to the compiler, so it's only included in dust-full now
  • add dust.isTemplateFn
  • add dust.config.cache = true, set to false to disable caching and load templates again every time (Fixes #451)
  • add dust.config.cjs = false, set to true to compile templates as CommonJS modules
  • add --cjs flag to dustc
  • Move a bunch of exposed compiler stuff under dust.compiler (but leave it exposed until 2.8) (@​sethkinast)

... (truncated)

Commits
  • 2e8795c Release v3.0.0
  • 6f98371 merge from 2.7
  • db6d8b9 Merge pull request #805 from sumeetkakkar/fix/proto-pollution
  • ddb6523 fix for prototype pollution vulnerability
  • e0e25f7 Merge pull request #756 from danactive/master
  • eeb1c17 Decrease security vulnerabilities by upgrading cli dependency (#754 #748)
  • d485a72 {?exists} and {^exists} resolve Promises and check if the result exists (#753)
  • 43c0831 place location provided by peg 0.9 onto the AST
  • 07b73b3 Merge pull request #744 from sethkinast/is-context
  • ae69314 Don't use instanceof to determine if a Context is a Context
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by krakenjs, a new releaser for dustjs-linkedin since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Dec 22, 2022
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/dustjs-linkedin-3.0.0 branch from 10bfe62 to b92ab5a Compare February 6, 2023 01:43
@mikaello
Copy link
Owner

mikaello commented Feb 6, 2023

Duplicate of #100

This cannot be merged because of:

This update seems to work after manual testing, but it does break the peer requirement from dustjs-helper: warning " > [email protected]" has incorrect peer dependency "[email protected] - 2.8".

See also issue LinkedInAttic/dustjs-helpers#148

Ref #35 (comment)

Bumps [dustjs-linkedin](https://github.com/linkedin/dustjs) from 2.7.5 to 3.0.0.
- [Release notes](https://github.com/linkedin/dustjs/releases)
- [Changelog](https://github.com/linkedin/dustjs/blob/master/CHANGELOG.md)
- [Commits](linkedin/dustjs@v2.7.5...v3.0.0)

---
updated-dependencies:
- dependency-name: dustjs-linkedin
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/dustjs-linkedin-3.0.0 branch from b92ab5a to dd7a754 Compare March 6, 2023 02:27
@mikaello
Copy link
Owner

mikaello commented Mar 6, 2023

This cannot be merged because of:

This update seems to work after manual testing, but it does break the peer requirement from dustjs-helper: warning " > [email protected]" has incorrect peer dependency "[email protected] - 2.8".

See also issue LinkedInAttic/dustjs-helpers#148

See MR #100

@dependabot ignore this major version

@dependabot dependabot bot closed this Mar 6, 2023
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Mar 6, 2023

OK, I won't notify you about version 3.x.x again, unless you re-open this PR. 😢

@dependabot dependabot bot deleted the dependabot/npm_and_yarn/dustjs-linkedin-3.0.0 branch March 6, 2023 07:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant