Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump debug and aframe #473

Merged
merged 1 commit into from
Jul 25, 2024
Merged

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 25, 2024

Bumps debug and aframe. These dependencies needed to be updated together.
Updates debug from 2.2.0 to 4.3.4

Release notes

Sourced from debug's releases.

4.3.4

What's Changed

New Contributors

Full Changelog: debug-js/debug@4.3.3...4.3.4

4.3.3

Patch Release 4.3.3

This is a documentation-only release. Further, the repository was transferred. Please see notes below.

Thank you to @​taylor1791 and @​kristofkalocsai for their contributions.


Repository Migration Information

I've formatted this as a FAQ, please feel free to open an issue for any additional question and I'll add the response here.

Q: What impact will this have on me?

In most cases, you shouldn't notice any change.

The only exception I can think of is if you pull code directly from https://github.com/visionmedia/debug, e.g. via a "debug": "visionmedia/debug"-type version entry in your package.json - in which case, you should still be fine due to the automatic redirection Github sets up, but you should also update any references as soon as possible.

Q: What are the security implications of this change?

If you pull code directly from the old URL, you should update the URL to https://github.com/debug-js/debug as soon as possible. The old organization has many approved owners and thus a new repository could (in theory) be created at the old URL, circumventing Github's automatic redirect that is in place now and serving malicious code. I (@​qix-) also wouldn't have access to that repository, so while I don't think it would happen, it's still something to consider.

Even in such a case, however, the officially released package on npm (debug) would not be affected. That package is still very much under control (even more than it used to be).

Q: What should I do if I encounter an issue related to the migration?

Search the issues first to see if someone has already reported it, and then open a new issue if someone has not.

Q: Why was this done as a 'patch' release? Isn't this breaking?

No, it shouldn't be breaking. The package on npm shouldn't be affected (aside from this patch release) and any references to the old repository should automatically redirect.

Thus, according to all of the "APIs" (loosely put) involved, nothing should have broken.

... (truncated)

Commits
  • da66c86 4.3.4
  • 9b33412 replace deprecated String.prototype.substr() (#876)
  • c0805cc add section about configuring JS console to show debug messages (#866)
  • 043d3cd 4.3.3
  • 4079aae update license and more maintainership information
  • 19b36c0 update repository location + maintainership information
  • f851b00 adds README section regarding usage in child procs (#850)
  • d177f2b Remove accidental epizeuxis
  • e47f96d 4.3.2
  • 1e9d38c cache enabled status per-logger (#799)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by qix, a new releaser for debug since your current version.


Updates aframe from 1.5.0 to 1.6.0

Release notes

Sourced from aframe's releases.

v1.6.0

1.6.0 (May 23, 2024)

Tons of bug fixes. Memory management and performance improvements. API to control tick / tock execution order.

Bug fixes

  • Update wrist object position and rotation only when joint poses are available (#5438) (@​mrxz)
  • Fix issue when checking schema properties when a schema changes (#5426) (@​mrxz)
  • Set correct default value for scene.background when the background component is removed (#5417) (@​mrxz)
  • Fix fog removal from scene (#5418) (@​mrxz)
  • Fix Chrome non-passive violation warnings for touchmove and touchstart event handlers (#5511) (@​mrxz, @​mitchallen)
  • Fix bug when loading models on child entities of controllers (#5415) (@​mrxz)
  • Fix bug in handling processSound callback when sound hadn't loaded yet (#5414) (@​mrxz)
  • Fix misspelled variable names after using a spell checker (#5462) (@​mrxz)
  • Fix problem when a shader that declares itself as glsl3 has its version ignored (bbe74f52) (@​dmarcos)
  • Fix problem when checking for duplicate names of property types (#5475) (@​mrxz)
  • Fix problem when adding children entities to a hand-tracking-controls entity before the hand model has loaded (12d550c6) (@​dmarcos)
  • Hide hand-tracking-controls entity when there's no hand tracking available (dbdb9dac) (@​dmarcos)
  • Fix issues when applying mixins to primitives (#5483) (@​mrxz)
  • Fix issue when a component is not removed from the DOM via mixin removal / update (#5492) (@​mrxz)
  • Fix timing issue when initializing XR Layers (#5489) (@​zjm-meta)
  • Fix problem where scene doesn't wait / timeout on a-asset-items (#5491) (@​mrxz)
  • Fix bug when using setAttribute on a-scene if a system has not yet initialized (#5482) (@​mrxz)
  • Fix broken parser cache of getComponentPropertyPath (#5467) (@​mrxz)
  • Fix issue when shadowMaps are always enabled. Make sure it's only enabled when there's a shadow component present (#5399) (@​mrxz)
  • Fix issue when children of an entity with hand-tracking-controls don't follow the hand (874fced2) (@​dmarcos)
  • Fix ES modules support on node (#5522) (@​vincentfretin)
  • Make rotation axis order is consistent when using setAttribute and modifying object3D directly (#5513) (@​mrxz)
  • Fix issue when calculating the size of the bounding box of an obb-collider (5da7166e) (@​dmarcos)
  • Fix issue when the el.hasLoaded flag can be true but not all components have initialized (924dc00e) (@​dmarcos)
  • Fix issue when trying to remove a mesh before model was loaded in obj-model component (#5499) (@​Elettrotecnica)
  • Use renderer.useLegacyLights instead of the deprecated renderer.physicallyCorrectLights in THREE (#5389) (@​vincentfretin)
  • Set correct default value for glslVersion for non-raw shaders (#5388) (@​mrxz)
  • Remove "skinning: true" option when instanciating a THREE.MeshStandardMaterial object. Property deprecated in THREE (#5386) (@​avdynut)
  • Fix issue when tracking an unexisting AR Hitest anchor (@​hi-liang, @​dmarcos) (bcc4bc2cae2b3) (fix #5314)
  • Fix issue when layers are not initialized in AR mode (bb1e7a4e) (@​dmarcos)
  • Fix issue when removing unexisting light probe after exiting vr mode (#5429) (fix #5384) (@​Elettrotecnica)
  • Fix issue when removing an obb-collider (957237d) (fix #5385)
  • Fix typo when requesting layers on the WebXR requiredFeatures list (f7e56a8f) (@​dmarcos)
  • Fix issue when trying to animate a non existing button on the controller (da8dc146) (@​dmarcos)

Performance

  • Improve unit tests execution time (#5477) (@​mrxz)
  • Recycle nextData and previousOldData objects when a component is destroyed preventing memory leaks (#5458) (@​mrxz)
  • Improve pooling and recycling of internal component objects. Better memory management (#5459) (@​mrxz)
  • Reduce memory allocations on component update logic (#5474) (@​mrxz)
  • Improve throttleLeadingAndTrailing implementation to prevent unnecessary allocations (#5476) (@​mrxz)

... (truncated)

Changelog

Sourced from aframe's changelog.

1.6.0 (May 23, 2024)

Tons of bug fixes. Memory management and performance improvements. API to control tick / tock execution order.

Bug fixes

  • Update wrist object position and rotation only when joint poses are available (#5438) (@​mrxz)
  • Fix issue when checking schema properties when a schema changes (#5426) (@​mrxz)
  • Set correct default value for scene.background when the background component is removed (#5417) (@​mrxz)
  • Fix fog removal from scene (#5418) (@​mrxz)
  • Fix Chrome non-passive violation warnings for touchmove and touchstart event handlers (#5511) (@​mrxz, @​mitchallen)
  • Fix bug when loading models on child entities of controllers (#5415) (@​mrxz)
  • Fix bug in handling processSound callback when sound hadn't loaded yet (#5414) (@​mrxz)
  • Fix misspelled variable names after using a spell checker (#5462) (@​mrxz)
  • Fix problem when a shader that declares itself as glsl3 has its version ignored (bbe74f52) (@​dmarcos)
  • Fix problem when checking for duplicate names of property types (#5475) (@​mrxz)
  • Fix problem when adding children entities to a hand-tracking-controls entity before the hand model has loaded (12d550c6) (@​dmarcos)
  • Hide hand-tracking-controls entity when there's no hand tracking available (dbdb9dac) (@​dmarcos)
  • Fix issues when applying mixins to primitives (#5483) (@​mrxz)
  • Fix issue when a component is not removed from the DOM via mixin removal / update (#5492) (@​mrxz)
  • Fix timing issue when initializing XR Layers (#5489) (@​zjm-meta)
  • Fix problem where scene doesn't wait / timeout on a-asset-items (#5491) (@​mrxz)
  • Fix bug when using setAttribute on a-scene if a system has not yet initialized (#5482) (@​mrxz)
  • Fix broken parser cache of getComponentPropertyPath (#5467) (@​mrxz)
  • Fix issue when shadowMaps are always enabled. Make sure it's only enabled when there's a shadow component present (#5399) (@​mrxz)
  • Fix issue when children of an entity with hand-tracking-controls don't follow the hand (874fced2) (@​dmarcos)
  • Fix ES modules support on node (#5522) (@​vincentfretin)
  • Make rotation axis order is consistent when using setAttribute and modifying object3D directly (#5513) (@​mrxz)
  • Fix issue when calculating the size of the bounding box of an obb-collider (5da7166e) (@​dmarcos)
  • Fix issue when the el.hasLoaded flag can be true but not all components have initialized (924dc00e) (@​dmarcos)
  • Fix issue when trying to remove a mesh before model was loaded in obj-model component (#5499) (@​Elettrotecnica)
  • Use renderer.useLegacyLights instead of the deprecated renderer.physicallyCorrectLights in THREE (#5389) (@​vincentfretin)
  • Set correct default value for glslVersion for non-raw shaders (#5388) (@​mrxz)
  • Remove "skinning: true" option when instanciating a THREE.MeshStandardMaterial object. Property deprecated in THREE (#5386) (@​avdynut)
  • Fix issue when tracking an unexisting AR Hitest anchor (@​hi-liang, @​dmarcos) (bcc4bc2cae2b3) (fix #5314)
  • Fix issue when layers are not initialized in AR mode (bb1e7a4e) (@​dmarcos)
  • Fix issue when removing unexisting light probe after exiting vr mode (#5429) (fix #5384) (@​Elettrotecnica)
  • Fix issue when removing an obb-collider (957237d) (fix #5385)
  • Fix typo when requesting layers on the WebXR requiredFeatures list (f7e56a8f) (@​dmarcos)
  • Fix issue when trying to animate a non existing button on the controller (da8dc146) (@​dmarcos)

Performance

  • Improve unit tests execution time (#5477) (@​mrxz)
  • Recycle nextData and previousOldData objects when a component is destroyed preventing memory leaks (#5458) (@​mrxz)
  • Improve pooling and recycling of internal component objects. Better memory management (#5459) (@​mrxz)
  • Reduce memory allocations on component update logic (#5474) (@​mrxz)
  • Improve throttleLeadingAndTrailing implementation to prevent unnecessary allocations (#5476) (@​mrxz)

Enhancements

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [debug](https://github.com/debug-js/debug) and [aframe](https://github.com/aframevr/aframe). These dependencies needed to be updated together.

Updates `debug` from 2.2.0 to 4.3.4
- [Release notes](https://github.com/debug-js/debug/releases)
- [Commits](debug-js/debug@2.2.0...4.3.4)

Updates `aframe` from 1.5.0 to 1.6.0
- [Release notes](https://github.com/aframevr/aframe/releases)
- [Changelog](https://github.com/aframevr/aframe/blob/master/CHANGELOG.md)
- [Commits](aframevr/aframe@v1.5.0...v1.6.0)

---
updated-dependencies:
- dependency-name: debug
  dependency-type: indirect
- dependency-name: aframe
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 25, 2024
@mboudet mboudet merged commit 57b91e2 into dev Jul 25, 2024
8 checks passed
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/multi-9bba607d9a branch July 25, 2024 14:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant