Release: [email protected] #5047
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
| Package | Version | Package | Version | | ------------------------- | ------- | ------------------------- | ------- | | @uppy/audio | 1.1.8 | @uppy/progress-bar | 3.1.1 | | @uppy/aws-s3-multipart | 3.11.0 | @uppy/provider-views | 3.11.0 | | @uppy/box | 2.3.0 | @uppy/react | 3.3.0 | | @uppy/companion | 4.13.0 | @uppy/remote-sources | 1.2.0 | | @uppy/companion-client | 3.8.0 | @uppy/screen-capture | 3.2.0 | | @uppy/compressor | 1.1.2 | @uppy/status-bar | 3.3.1 | | @uppy/core | 3.10.0 | @uppy/thumbnail-generator | 3.1.0 | | @uppy/dashboard | 3.8.0 | @uppy/transloadit | 3.6.0 | | @uppy/drag-drop | 3.1.0 | @uppy/tus | 3.5.4 | | @uppy/drop-target | 2.0.5 | @uppy/unsplash | 3.3.0 | | @uppy/dropbox | 3.3.0 | @uppy/url | 3.6.0 | | @uppy/facebook | 3.3.0 | @uppy/utils | 5.7.5 | | @uppy/golden-retriever | 3.2.0 | @uppy/webcam | 3.4.0 | | @uppy/google-drive | 3.5.0 | @uppy/zoom | 2.3.0 | | @uppy/instagram | 3.3.0 | uppy | 3.24.0 | | @uppy/onedrive | 3.3.0 | | | - @uppy/box,@uppy/companion-client,@uppy/provider-views,@uppy/status-bar: fix type imports (Antoine du Hamel / #5038) - @uppy/aws-s3-multipart: mark `opts` as optional (Antoine du Hamel / #5039) - e2e: bump Cypress version (Antoine du Hamel / #5034) - @uppy/react: refactor to TS (Antoine du Hamel / #5012) - @uppy/core: refine type of private variables (Antoine du Hamel / #5028) - @uppy/dashboard: refine type of private variables (Antoine du Hamel / #5027) - @uppy/drag-drop: refine type of private variables (Antoine du Hamel / #5026) - @uppy/status-bar: refine type of private variables (Antoine du Hamel / #5025) - @uppy/remote-sources: migrate to TS (Merlijn Vos / #5020) - @uppy/dashboard: refine option types (Antoine du Hamel / #5022) - @uppy/dashboard: add new `autoOpen` option (Chris Grigg / #5001) - @uppy/core: fix some type errors (Antoine du Hamel / #5015) - @uppy/audio,@uppy/dashboard,@uppy/drop-target,@uppy/webcam: add missing exports (Antoine du Hamel / #5014) - meta: Bump webpack-dev-middleware from 5.3.3 to 5.3.4 (dependabot[bot] / #5013) - @uppy/dashboard: refactor to TypeScript (Antoine du Hamel / #4984) - @uppy/companion: improve error msg (Mikael Finstad / #5010) - @uppy/aws-s3-multipart: refactor to TS (Antoine du Hamel / #4902) - @uppy/dashboard: refactor to stable lifecycle method (Antoine du Hamel / #4999) - @uppy/companion: crash if trying to set path to / (Mikael Finstad / #5003) - @uppy/provider-views: fix `super.toggleCheckbox` bug (Mikael Finstad / #5004) - @uppy/aws-s3-multipart: fix escaping issue with client signed request (Hiroki Shimizu / #5006) - @uppy/drag-drop,@uppy/progress-bar: add missing exports (Antoine du Hamel / #5009) - @uppy/transloadit: migrate to TS (Merlijn Vos / #4987) - @uppy/utils: fix `RateLimitedQueue#wrapPromiseFunction` types (Antoine du Hamel / #5007) - @uppy/golden-retriever: migrate to TS (Merlijn Vos / #4989) - meta: Bump follow-redirects from 1.15.4 to 1.15.6 (dependabot[bot] / #5002) - meta: fix `resize-observer-polyfill` types (Antoine du Hamel / #4994) - @uppy/core: various type fixes (Antoine du Hamel / #4995) - @uppy/utils: fix `findAllDOMElements` type (Antoine du Hamel / #4997) - @uppy/status-bar: fix `recoveredState` type (Antoine du Hamel / #4996) - @uppy/utils: fix `AbortablePromise` type (Antoine du Hamel / #4988) - @uppy/core,@uppy/provider-views: Fix breadcrumbs (Evgenia Karunus / #4986) - @uppy/drag-drop: refactor to TypeScript (Antoine du Hamel / #4983) - @uppy/webcam: refactor to TypeScript (Antoine du Hamel / #4870) - @uppy/url: migrate to TS (Merlijn Vos / #4980) - @uppy/zoom: refactor to TypeScript (Murderlon / #4979) - @uppy/unsplash: refactor to TypeScript (Murderlon / #4979) - @uppy/onedrive: refactor to TypeScript (Murderlon / #4979) - @uppy/instagram: refactor to TypeScript (Murderlon / #4979) - @uppy/google-drive: refactor to TypeScript (Murderlon / #4979) - @uppy/facebook: refactor to TypeScript (Murderlon / #4979) - @uppy/dropbox: refactor to TypeScript (Murderlon / #4979) - @uppy/box: refactor to TypeScript (Murderlon / #4979) - @uppy/utils: migrate RateLimitedQueue to TS (Merlijn Vos / #4981) - @uppy/thumbnail-generator: migrate to TS (Merlijn Vos / #4978) - @uppy/screen-capture: migrate to TS (Merlijn Vos / #4965) - @uppy/companion-client: Replace Provider.initPlugin with composition (Merlijn Vos / #4977)
Bumps [express](https://github.com/expressjs/express) from 4.18.1 to 4.19.2. - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@4.18.1...4.19.2) --- updated-dependencies: - dependency-name: express dependency-type: direct:production ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [express](https://github.com/expressjs/express) from 4.18.1 to 4.19.2. - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@4.18.1...4.19.2) --- updated-dependencies: - dependency-name: express dependency-type: direct:production ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
This is a release candidate for the following packages: - `@uppy/angular`: 0.6.1 -> 0.7.0-beta.1 - `@uppy/audio`: 1.1.8 -> 2.0.0-beta.1 - `@uppy/aws-s3`: 3.6.2 -> 4.0.0-beta.1 - `@uppy/aws-s3-multipart`: 3.11.0 -> 4.0.0-beta.1 - `@uppy/box`: 2.3.0 -> 3.0.0-beta.1 - `@uppy/companion`: 4.13.0 -> 5.0.0-beta.1 - `@uppy/companion-client`: 3.8.0 -> 4.0.0-beta.1 - `@uppy/compressor`: 1.1.2 -> 2.0.0-beta.1 - `@uppy/core`: 3.10.0 -> 4.0.0-beta.1 - `@uppy/dashboard`: 3.8.0 -> 4.0.0-beta.1 - `@uppy/drag-drop`: 3.1.0 -> 4.0.0-beta.1 - `@uppy/drop-target`: 2.0.5 -> 3.0.0-beta.1 - `@uppy/dropbox`: 3.3.0 -> 4.0.0-beta.1 - `@uppy/facebook`: 3.3.0 -> 4.0.0-beta.1 - `@uppy/file-input`: 3.1.0 -> 4.0.0-beta.1 - `@uppy/form`: 3.2.0 -> 4.0.0-beta.1 - `@uppy/golden-retriever`: 3.2.0 -> 4.0.0-beta.1 - `@uppy/google-drive`: 3.5.0 -> 4.0.0-beta.1 - `@uppy/image-editor`: 2.4.4 -> 3.0.0-beta.1 - `@uppy/informer`: 3.1.0 -> 4.0.0-beta.1 - `@uppy/instagram`: 3.3.0 -> 4.0.0-beta.1 - `@uppy/onedrive`: 3.3.0 -> 4.0.0-beta.1 - `@uppy/progress-bar`: 3.1.1 -> 4.0.0-beta.1 - `@uppy/provider-views`: 3.11.0 -> 4.0.0-beta.1 - `@uppy/react`: 3.3.0 -> 4.0.0-beta.1 - `@uppy/redux-dev-tools`: 3.0.3 -> 4.0.0-beta.1 - `@uppy/remote-sources`: 1.2.0 -> 2.0.0-beta.1 - `@uppy/screen-capture`: 3.2.0 -> 4.0.0-beta.1 - `@uppy/status-bar`: 3.3.1 -> 4.0.0-beta.1 - `@uppy/store-default`: 3.2.2 -> 4.0.0-beta.1 - `@uppy/store-redux`: 3.0.7 -> 4.0.0-beta.1 - `@uppy/svelte`: 3.1.3 -> 4.0.0-beta.1 - `@uppy/thumbnail-generator`: 3.1.0 -> 4.0.0-beta.1 - `@uppy/transloadit`: 3.6.0 -> 4.0.0-beta.1 - `@uppy/tus`: 3.5.4 -> 4.0.0-beta.1 - `@uppy/unsplash`: 3.3.0 -> 4.0.0-beta.1 - `@uppy/url`: 3.6.0 -> 4.0.0-beta.1 - `@uppy/utils`: 5.7.5 -> 6.0.0-beta.1 - `@uppy/vue`: 1.1.2 -> 2.0.0-beta.1 - `@uppy/webcam`: 3.4.0 -> 4.0.0-beta.1 - `@uppy/xhr-upload`: 3.6.4 -> 4.0.0-beta.1 - `@uppy/zoom`: 2.3.0 -> 3.0.0-beta.1 - `uppy`: 3.24.0 -> 4.0.0-beta.1
|
🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎ To accept the risk, merge this PR and you will not be notified again.
Next stepsWhat is an install script?Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts. Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead. Take a deeper look at the dependencyTake a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev. Remove the packageIf you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency. Mark a package as acceptable riskTo ignore an alert, reply with a comment starting with
|
aduh95
approved these changes
Mar 28, 2024
Murderlon
added a commit
that referenced
this pull request
Apr 2, 2024
* 4.x: (27 commits) Release: [email protected] (#5047) @uppy/vue: migrate to Composition API with TS & drop Vue 2 support (#5043) @uppy/angular,meta: upgrade to Angular 17.x and to TS 5.4 (#5008) @uppy/svelte: remove UMD output and make it use newer types (#5023) fix type imports (#5038) @uppy/aws-s3-multipart: mark `opts` as optional (#5039) e2e: bump Cypress version (#5034) @uppy/react: remove `prop-types` dependency (#5031) @uppy/progress-bar: remove default target (#4971) @uppy/status-bar: remove default target (#4970) @uppy/react: remove `Wrapper.ts` (#5032) @uppy/react: refactor to TS (#5012) @uppy/core: refine type of private variables (#5028) @uppy/dashboard: refine type of private variables (#5027) @uppy/drag-drop: refine type of private variables (#5026) @uppy/status-bar: refine type of private variables (#5025) @uppy/remote-sources: migrate to TS (#5020) @uppy/dashboard: refine option types (#5022) @uppy/dashboard: add new `autoOpen` option (#5001) Make `allowedMetaFields` consistent (#5011) ...
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
optsas optional (Antoine du Hamel / @uppy/aws-s3-multipart: markoptsas optional #5039)prop-typesdependency (Antoine du Hamel / @uppy/react: removeprop-typesdependency #5031)Wrapper.ts(Antoine du Hamel / @uppy/react: removeWrapper.ts#5032)autoOpenoption (Chris Grigg / @uppy/dashboard: add newautoOpenoption #5001)allowedMetaFieldsconsistent (Merlijn Vos / MakeallowedMetaFieldsconsistent #5011)super.toggleCheckboxbug (Mikael Finstad / fixsuper.toggleCheckboxbug #5004)RateLimitedQueue#wrapPromiseFunctiontypes (Antoine du Hamel / @uppy/utils: fixRateLimitedQueue#wrapPromiseFunctiontypes #5007)resize-observer-polyfilltypes (Antoine du Hamel / meta: fixresize-observer-polyfilltypes #4994)findAllDOMElementstype (Antoine du Hamel / @uppy/utils: fixfindAllDOMElementstype #4997)recoveredStatetype (Antoine du Hamel / @uppy/status-bar: fixrecoveredStatetype #4996)AbortablePromisetype (Antoine du Hamel / @uppy/utils: fixAbortablePromisetype #4988)4.xbranch (Antoine du Hamel)