Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependencies #3929

Merged
merged 2 commits into from
Dec 13, 2023
Merged

Update dependencies #3929

merged 2 commits into from
Dec 13, 2023

Conversation

kikuomax
Copy link
Collaborator

@kikuomax kikuomax commented Dec 12, 2023

As dependencies are so outdated, we want to bump them to versions as latest as possible. However, we do not want to introduce any changes that require changes on

  • Source code of the library, docs, and tests
  • Build configuration: Webpack, Rollup, ESLint, CI/CD, etc.

So we cannot inconsiderately accept dependabot suggestions.

Proposed Changes

  • Update dependencies (see below for more details)
  • Update lint-stage rule in package.json
  • Refresh snapshots affected by the dependency updates

Progress

  • "@applitools/eyes-cypress": "3.7.5" → 3.40.2 (not tested)
  • "@babel/core": "7.3.4" → 7.23.5
  • "@babel/plugin-syntax-dynamic-import": "7.2.0" seems unnecessary
  • "@babel/preset-env": "7.3.4" → 7.23.5
  • "@fortawesome/fontawesome-free": "5.3.1" → 6.5.1
  • "@mdi/font": "4.8.95" → 4.9.95 (5.x or later renamed GitHub icon)
  • "@vue/test-utils": "1.0.0-beta.29" unchanged (1.0.0-beta.30 or later did not work)
  • "all-contributors-cli": "6.14.0" → 6.26.1 (not tested)
  • "autoprefixer": "7.1.1" seems unnecessary
  • "axios": "0.21.1" → 1.6.0 (1.6.1 or later did not work)
  • "babel-core": "6.25.0" → 6.26.3
  • "babel-eslint": "7.1.1" seems unnecessary
  • "babel-jest": "22.1.0" → 23.6.0
  • "babel-loader": "7.1.2" → 7.1.5 (8.x or later won't work with Webpack 3.x. This imposes Babel v6.x on us)
  • "babel-plugin-transform-runtime": "6.22.0" → 6.23.0
  • "babel-preset-env": "1.3.2" → 1.7.0
  • "babel-preset-stage-2": "6.22.0" → 6.24.1
  • "babel-register": "6.22.0" → 6.26.0
  • "bulma-css-vars": "^0.8.0" → 0.8.0
  • "chalk": "4.1.0" → 4.1.2 (5.x won't work because it became an ESM package)
  • "clean-css-cli": "4.3.0" → 5.6.3
  • "cleave.js": "1.0.1" → 1.6.0
  • "clipboard": "1.7.1" unchanged
  • "codecov": "3.7.1" this version no longer works, however, we cannot upgrade this without changing the CI/CD configuration
  • "connect-history-api-fallback": "1.3.0" → 2.0.0
  • "copy-webpack-plugin": "4.3.1" → 4.6.0
  • "copyfiles": "2.2.0" → 2.4.1
  • "cross-env": "4.0.0" seems unnecessary
  • "cross-spawn": "5.0.1" seems unnecessary
  • "css-loader": "0.28.0" → 0.28.11
  • "cypress": "13.6.1" unchanged (upgraded by dependabot. not tested)
  • "eslint": "4.18.2" → 4.19.1 (eslint-config-buefy requires 4.x)
  • "eslint-config-buefy": "0.0.3",
  • "esm": "3.2.25" unchanged
  • "eventsource-polyfill": "0.9.6" unchanged
  • "express": "4.15.0" → 4.18.2
  • "extract-text-webpack-plugin": "3.0.2" unchanged
  • "file-loader": "0.11.1" → 2.0.0
  • "font-awesome": "4.7.0" unchanged
  • "friendly-errors-webpack-plugin": "1.6.1" → 1.7.0
  • "handlebars": "4.7.7" seems unnecessary
  • "highlight.js": "10.4.1" → 10.7.3 (11.x requires new configuration syntax. deprecation warnings started to appear since 10.7.0)
  • "html-webpack-plugin": "2.30.1" → 3.2.0
  • "http-proxy-middleware": "0.17.3" → 2.0.6
  • "jest": "23.5.0" → 23.6.0
  • "jest-serializer-vue": "0.3.0" → 3.1.0
  • "lint-staged": "6.1.1" → 15.2.0 (package.json has to be updated)
  • "open": "7.1.0" → 8.4.2 (9.x becomes an ESM package)
  • "optimize-css-assets-webpack-plugin": "3.2.0" → 3.2.1
  • "optimize-js-plugin": "0.0.4" unchanged
  • "pre-commit": "1.2.2" unchanged
  • "prerender-spa-plugin": "3.4.0" unchanged
  • "raw-loader": "0.5.1" unchanged
  • "rimraf": "2.6.0" → 3.0.2 (4.x let the API return a Promise. it breaks build/build.js)
  • "rollup": "1.17.0" → 2.79.1 (rollup-plugin-babel requires Rollup < v3)
  • "rollup-copy-plugin": "0.1.0" unchanged
  • "rollup-plugin-babel": "4.3.2" → 4.4.0
  • "rollup-plugin-commonjs": "9.2.1" → 10.1.0
  • "rollup-plugin-node-resolve": "4.0.1" → 5.2.0
  • "rollup-plugin-replace": "2.1.0" → 2.2.0
  • "rollup-plugin-terser": "4.0.4" → 7.0.2
  • "rollup-plugin-vue": "5.0.0" → 5.1.9
  • "sass": "1.26.10" → 1.69.5 (started producing warnings)
  • "sass-loader": "7.3.1" unchanged
  • "scrollreveal": "3.3.6" → 3.4.0 (4.x changed the license MIT → GPL)
  • "semver": "5.3.0" → 7.5.4
  • "shelljs": "0.8.4" → 0.8.5
  • "sinon": "7.5.0" → 17.0.1
  • "sortablejs": "1.7.0" → 1.15.1
  • "uglifyjs-webpack-plugin": "1.2.5" → 1.3.0
  • "url-loader": "0.5.8" → 1.1.2
  • "vee-validate": "2.1.0-beta.9" seems unnecessary
  • "vue": "2.6.11" → 2.7.15
  • "vue-analytics": "4.1.3" → 5.22.1
  • "vue-breakpoint-mixin": "^1.2.2" → 1.5.0
  • "vue-jest": "2.5.0" → 3.0.7
  • "vue-loader": "15.9.3" → 15.11.1
  • "vue-progressbar": "0.7.2" → 0.7.5
  • "vue-router": "3.1.6" → 3.6.5
  • "vue-style-loader": "3.0.1" → 4.1.3
  • "vue-template-compiler": "2.6.11" → 2.7.15
  • "webpack": "3.10.0" → 3.12.0
  • "webpack-bundle-analyzer": "2.9.2" → 4.10.1
  • "webpack-dev-server": "2.11.1" → 2.11.5
  • "webpack-hot-middleware": "2.21.0" → 2.25.4
  • "webpack-merge": "4.1.2" → 4.2.2 (5.x did not work)

Copy link

netlify bot commented Dec 12, 2023

Deploy Preview for buefy-org ready!

Name Link
🔨 Latest commit e54a87a
🔍 Latest deploy log https://app.netlify.com/sites/buefy-org/deploys/65795ec18c35900008e049e7
😎 Deploy Preview https://deploy-preview-3929--buefy-org.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site configuration.

- Bumps dependencies to versions as latest as possible without changing:
    - Source code of the library, docs, and tests
    - Build configuration: Webpack, Rollup, ESLint, etc.
        → We stick to Webpack v3.x

  `babel-loader` is up to v7.1.5. This imposes Babel v6.x on us. `jest`
  is also constrained by this, because `babel-jest` is up to v23.6.0.

  `Rollup` is up to v2.79.1 because `rollup-babel-plugin` requires
  `Rollup` < v3.

  `lint-staged` stopped working even if I did not change the version.
  There might be a magical configuration, but I decided to bump it to
  the latest version v15.2.0 and rewrite `package.json`. Fortunately, it
  is a Git hook that runs when changes are going to be commited, so it
  won't matter to build artifacts.

  Please refer to PR #3929 for more details.
- Refreshes snapshots affected by the last updates of dependencies.
@kikuomax kikuomax marked this pull request as ready for review December 13, 2023 07:40
@kikuomax kikuomax changed the title WIP: update dependencies Update dependencies Dec 13, 2023
Copy link
Member

@wesdevpro wesdevpro left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM🎉

@wesdevpro wesdevpro merged commit 1758e63 into dev Dec 13, 2023
5 checks passed
@kikuomax kikuomax deleted the bump-em-all branch December 13, 2023 14:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants