Skip to content

⬆️ upgrade low risk dependencies to their newest minor version#5025

Merged
matt-fidd merged 23 commits intoactualbudget:masterfrom
matt-fidd:deps-minor
May 21, 2025
Merged

⬆️ upgrade low risk dependencies to their newest minor version#5025
matt-fidd merged 23 commits intoactualbudget:masterfrom
matt-fidd:deps-minor

Conversation

@matt-fidd
Copy link
Copy Markdown
Member

@matt-fidd matt-fidd commented May 18, 2025

This gets all of the lower risk (not react, webpack, babel, redux, electron related) deps up to their newest minor version.

@actual-github-bot actual-github-bot bot changed the title ⬆️ upgrade dependencies to their newest minor version [WIP] ⬆️ upgrade dependencies to their newest minor version May 18, 2025
@netlify
Copy link
Copy Markdown

netlify bot commented May 18, 2025

Deploy Preview for actualbudget ready!

Name Link
🔨 Latest commit a8b4c1c
🔍 Latest deploy log https://app.netlify.com/projects/actualbudget/deploys/682e138843257e0008840724
😎 Deploy Preview https://deploy-preview-5025.demo.actualbudget.org
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented May 18, 2025

Bundle Stats — desktop-client

Hey there, this message comes from a GitHub action that helps you and reviewers to understand how these changes affect the size of this project's bundle.

As this PR is updated, I'll keep you updated on how the bundle size is impacted.

Total

Files count Total bundle size % Changed
18 9.65 MB → 9.65 MB (+1.21 kB) +0.01%
Changeset
File Δ Size
node_modules/lru-cache/dist/esm/index.js 📈 +540 B (+0.98%) 53.54 kB → 54.07 kB
node_modules/i18next/dist/esm/i18next.js 📈 +701 B (+0.79%) 86.37 kB → 87.05 kB
View detailed bundle breakdown

Added

No assets were added

Removed

No assets were removed

Bigger

Asset File Size % Changed
static/js/index.js 6.52 MB → 6.52 MB (+1.21 kB) +0.02%

Smaller

No assets were smaller

Unchanged

Asset File Size % Changed
static/js/de.js 120.45 kB 0%
static/js/en-GB.js 5.93 kB 0%
static/js/en.js 116.32 kB 0%
static/js/es.js 68.84 kB 0%
static/js/fr.js 124.01 kB 0%
static/js/nl.js 100.82 kB 0%
static/js/pt-BR.js 122.25 kB 0%
static/js/uk.js 121.39 kB 0%
static/js/indexeddb-main-thread-worker-e59fee74.js 12.94 kB 0%
static/js/workbox-window.prod.es5.js 5.64 kB 0%
static/js/resize-observer.js 18.37 kB 0%
static/js/BackgroundImage.js 122.29 kB 0%
static/js/ReportRouter.js 1.71 MB 0%
static/js/narrow.js 391.1 kB 0%
static/js/wide.js 113.64 kB 0%
static/js/AppliedFilters.js 10.92 kB 0%
static/js/useAccountPreviewTransactions.js 3.14 kB 0%

@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented May 18, 2025

Bundle Stats — loot-core

Hey there, this message comes from a GitHub action that helps you and reviewers to understand how these changes affect the size of this project's bundle.

As this PR is updated, I'll keep you updated on how the bundle size is impacted.

Total

Files count Total bundle size % Changed
1 2.3 MB → 2.28 MB (-13.59 kB) -0.58%
Changeset
File Δ Size
node_modules/memfs/lib/node/promises.js 🆕 +3.43 kB 0 B → 3.43 kB
node_modules/memfs/lib/node/FileHandle.js 🆕 +1.74 kB 0 B → 1.74 kB
node_modules/memfs/lib/node/util.js 🆕 +436 B 0 B → 436 B
node_modules/lru-cache/dist/esm/index.js 📈 +540 B (+0.98%) 53.61 kB → 54.13 kB
node_modules/i18next/dist/esm/i18next.js 📈 +609 B (+0.69%) 86.8 kB → 87.39 kB
node_modules/memfs/lib/encoding.js 📈 +4 B (+0.48%) 831 B → 835 B
node_modules/memfs/lib/setTimeoutUnref.js 📈 +2 B (+0.41%) 493 B → 495 B
node_modules/memfs/lib/process.js 📉 -44 B (-3.63%) 1.18 kB → 1.14 kB
node_modules/memfs/lib/index.js 📉 -85 B (-3.93%) 2.11 kB → 2.03 kB
node_modules/memfs/lib/volume.js 📉 -10.05 kB (-11.13%) 90.23 kB → 80.19 kB
node_modules/memfs/lib/internal/errors.js 📉 -1.94 kB (-15.73%) 12.35 kB → 10.41 kB
node_modules/memfs/lib/Stats.js 📉 -649 B (-22.42%) 2.83 kB → 2.19 kB
node_modules/memfs/lib/node.js 📉 -4.64 kB (-27.77%) 16.72 kB → 12.08 kB
node_modules/memfs/lib/Dirent.js 📉 -526 B (-28.08%) 1.83 kB → 1.32 kB
node_modules/memfs/lib/internal/buffer.js 📉 -542 B (-46.89%) 1.13 kB → 614 B
node_modules/memfs/lib/promises.js 🔥 -6.27 kB (-100%) 6.27 kB → 0 B
View detailed bundle breakdown

Added

No assets were added

Removed

No assets were removed

Bigger

No assets were bigger

Smaller

Asset File Size % Changed
kcab.worker.js 2.3 MB → 2.28 MB (-13.59 kB) -0.58%

Unchanged

No assets were unchanged

@matt-fidd matt-fidd changed the title [WIP] ⬆️ upgrade dependencies to their newest minor version [WIP] ⬆️ upgrade low risk dependencies to their newest minor version May 18, 2025
@matt-fidd matt-fidd changed the title [WIP] ⬆️ upgrade low risk dependencies to their newest minor version ⬆️ upgrade low risk dependencies to their newest minor version May 18, 2025
@coderabbitai
Copy link
Copy Markdown
Contributor

coderabbitai bot commented May 18, 2025

## Walkthrough

This pull request updates various development and runtime dependencies across multiple package.json files in the repository, including upgrades to packages such as vitest, better-sqlite3, eslint, and several others. Additionally, it updates the Playwright Docker container image version used in GitHub Actions workflows for end-to-end and visual regression testing from v1.41.1-jammy to v1.52.0-jammy. A SCSS file was also modified to replace an `@import` directive with `@use` for a font package. No changes were made to the structure, scripts, or exported entities in any of the affected files; all modifications are limited to dependency and container image version bumps and a minor SCSS syntax update.

## Possibly related PRs

- actualbudget/actual#3987: Also updates the better-sqlite3 dependency but from an earlier version range, related by dependency version management.
- actualbudget/actual#4856: Upgrades vitest and involves Playwright-related testing changes, related through testing dependencies though with different scopes.
- actualbudget/actual#4674: Adds Playwright-based testing infrastructure and workflows, related by Playwright usage though not overlapping in version bumps.

## Suggested reviewers

- MikesGlitch

Note

⚡️ AI Code Reviews for VS Code, Cursor, Windsurf

CodeRabbit now has a plugin for VS Code, Cursor and Windsurf. This brings AI code reviews directly in the code editor. Each commit is reviewed immediately, finding bugs before the PR is raised. Seamless context handoff to your AI code agent ensures that you can easily incorporate review feedback.
Learn more here.


Note

⚡️ Faster reviews with caching

CodeRabbit now supports caching for code and dependencies, helping speed up reviews. This means quicker feedback, reduced wait times, and a smoother review experience overall. Cached data is encrypted and stored securely. This feature will be automatically enabled for all accounts on May 30th. To opt out, configure Review - Disable Cache at either the organization or repository level. If you prefer to disable all data retention across your organization, simply turn off the Data Retention setting under your Organization Settings.
Enjoy the performance boost—your workflow just got faster.


Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share
🪧 Tips

Chat

There are 3 ways to chat with CodeRabbit:

  • Review comments: Directly reply to a review comment made by CodeRabbit. Example:
    • I pushed a fix in commit <commit_id>, please review it.
    • Explain this complex logic.
    • Open a follow-up GitHub issue for this discussion.
  • Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query. Examples:
    • @coderabbitai explain this code block.
    • @coderabbitai modularize this function.
  • PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
    • @coderabbitai gather interesting stats about this repository and render them as a table. Additionally, render a pie chart showing the language distribution in the codebase.
    • @coderabbitai read src/utils.ts and explain its main purpose.
    • @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.
    • @coderabbitai help me debug CodeRabbit configuration file.

Support

Need help? Create a ticket on our support page for assistance with any issues or questions.

Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments.

CodeRabbit Commands (Invoked using PR comments)

  • @coderabbitai pause to pause the reviews on a PR.
  • @coderabbitai resume to resume the paused reviews.
  • @coderabbitai review to trigger an incremental review. This is useful when automatic reviews are disabled for the repository.
  • @coderabbitai full review to do a full review from scratch and review all the files again.
  • @coderabbitai summary to regenerate the summary of the PR.
  • @coderabbitai generate docstrings to generate docstrings for this PR.
  • @coderabbitai generate sequence diagram to generate a sequence diagram of the changes in this PR.
  • @coderabbitai resolve resolve all the CodeRabbit review comments.
  • @coderabbitai configuration to show the current CodeRabbit configuration for the repository.
  • @coderabbitai help to get help.

Other keywords and placeholders

  • Add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.
  • Add @coderabbitai summary to generate the high-level summary at a specific location in the PR description.
  • Add @coderabbitai anywhere in the PR title to generate the title automatically.

CodeRabbit Configuration File (.coderabbit.yaml)

  • You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
  • Please see the configuration documentation for more information.
  • If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Documentation and Community

  • Visit our Documentation for detailed information on how to use CodeRabbit.
  • Join our Discord Community to get help, request features, and share feedback.
  • Follow us on X/Twitter for updates and announcements.

@matt-fidd
Copy link
Copy Markdown
Member Author

/update-vrt

just in case!

@matt-fidd
Copy link
Copy Markdown
Member Author

@coderabbitai are you able to collect the changes from the release notes of all of the packages I've bumped and post them here?

@coderabbitai
Copy link
Copy Markdown
Contributor

coderabbitai bot commented May 18, 2025

Tip

For best results, initiate chat on the files or code changes.

🧩 Analysis chain

@matt-fidd Absolutely! I'll collect the release notes for all the packages you've bumped. Let me gather that information for you.


🌐 Web query:

better-sqlite3 changelog from 11.9.1 to 11.10.0

💡 Result:

Based on the search results, I can provide information about the changelog for better-sqlite3 from version 11.9.1 to version 11.10.0.

The latest version of better-sqlite3 is 11.10.0, which was released on May 8, 2025, approximately 10 days before the current date[1]. This update follows version 11.9.1[4].

While the search results don't provide a comprehensive changelog specifically for the 11.9.1 to 11.10.0 update, we can see from the GitHub releases page that there is a full changelog available at the repository with the link path "v11.9.1...v11.10.0"[4].

The repository mentions that the changes included addressing issues referenced in PR #1357[4]. Unfortunately, the detailed list of changes in this particular version update isn't fully captured in the search results.

Based on the pattern of previous updates, the release likely includes bug fixes, performance improvements, or feature enhancements. The library maintains its position as "the fastest and simplest library for SQLite in Node.js"[1].

It's worth noting that better-sqlite3 version 11.10.0 supports Node.js LTS v22.x.x, resolving previous compatibility issues that existed in earlier versions[8]. This is significant as earlier versions (11.x.x and earlier) had issues with Node.js LTS v22.x.x, causing "Could not locate the bindings file" errors[8].

If you need the complete and detailed changelog, you would need to visit the GitHub repository directly to view the full commit history between these two versions.

Citations:


🌐 Web query:

@playwright/test changelog from 1.41.2 to 1.52.0

💡 Result:

@playwright/test Changelog: 1.41.2 to 1.52.0

Below is a summary of the most significant changes and highlights introduced in @playwright/test from version 1.41.2 up to 1.52.0.


Version 1.52.0 (Latest)

Highlights:

  • New Assertion:
    expect(locator).toContainClass() — Easily assert the presence of specific class names on elements.
  • ARIA Snapshots:
    • Added /children for strict matching.
    • Added /url to links for more precise assertions.
  • Test Runner Improvements:
    • The property testProject.workers allows you to set the number of concurrent workers per test project, giving more granular control over parallelism.
    • testConfig.failOnFlakyTests option can now fail a test run if any flaky tests were detected, supporting stricter test stability requirements for CI/CD.
    • Each test retry can now be annotated via testResult.annotations.
  • Miscellaneous:
    • maxRedirects option for apiRequest.newContext() lets you control redirect limits.
    • ref option in locator.ariaSnapshot() can generate reference handles for elements, helping in later identification.
    • HTML reporter now supports NOT filtering via tags, file names, and project specifiers.
  • Browser Versions:
    • Chromium 125.0.6422.14
    • Mozilla Firefox 125.0.1
    • WebKit 17.4
    • Tested with Chrome 124 and Edge 124[1].

Key Additions and Changes (v1.41.2 — v1.52.0)

  • UI Mode (v1.32):

    • Preview release of UI Mode for exploring, running, and debugging tests visually. Includes a watch mode.
    • Available via --ui flag (npx playwright test --ui)[1].
  • API Improvements:

    • Enhanced HAR (HTTP Archive) routing options: updateMode and updateContent in page.routeFromHAR().
    • You can now chain locator objects and utilize the new testInfo.testId property.
    • Added name option to tracing.startChunk() for better trace management[1].
  • Component Testing (v1.32):

    • Breaking Change:
      The @playwright/experimental-ct-react now supports React 18 only.
      For React 16/17, switch to @playwright/experimental-ct-react17[1].
  • Test Isolation and Resilience:

    • Continued improvements to auto-waiting and web-first assertions to minimize flaky tests and unnecessary timeouts[2].
    • Test reporting and debugging tools (tracing, HTML reporter, code generation) further enhanced.
  • Performance and Scalability:

    • Improved control over test worker concurrency at both global and project levels.
    • Better isolation with browser contexts; reuse authentication state for faster logins[2].

General Capabilities (For Reference)

  • Auto-wait: Actions auto-wait for elements to be ready, reducing reliance on timeouts and improving test reliability[2].
  • Web-first Assertions: Assertions retry automatically in dynamic web scenarios.
  • Multiple Contexts/Users: Support for multiple concurrent browser contexts, tabs, and user sessions in tests.
  • Powerful Tooling: Tools like Codegen, Inspector, and Trace Viewer to generate, inspect, and debug tests interactively[2].

Notable Browser Updates

Version Chromium Firefox WebKit
1.41.2 120.0.6099.28 119.0 17.4
1.52.0 125.0.6422.14 125.0.1 17.4

Sources:

  • Full release notes and more detail are available on the [official Playwright release notes][1].

[1]
[2]

Citations:


🌐 Web query:

vitest changelog from 3.0.9 to 3.1.3

💡 Result:

Vitest Changelog: v3.0.9 → v3.1.3

Below is a summary of the significant changes, enhancements, and fixes in Vitest from version 3.0.9 to 3.1.3, based on the official GitHub release notes and migration guides.

v3.1.3 (Latest as of May 2025)

  • This is noted as the latest stable version, though detailed release notes for 3.1.3 specifically are not shown in the provided sources. There are no documented breaking changes for this version[2][3][8].

v3.1.2 – v3.1.1

v3.1.1

  • Bug Fixes:
    • Reporter now reports tests in the correct order.
    • Test output in verbose mode is now printed only once[1].

v3.1.0 (including betas)

  • New Features:

    • Added configureVitest plugin hook.
    • Browser mode improvements: introduced and, or, and filter locators.
    • Runner: Added test.scoped to override test.extend fixtures per-suite.
    • Option %$ now adds the test number to its title.
    • New diff.maxDepth option to control diffing depth and reduce crashes.
    • Enhanced test.each/for title formatting—array elements now allowed.
    • Reporter improvements: always render test time, new --silent=passed-only flag to only log failed tasks.
    • Conditional test skipping: context.skip(boolean) can now be used[1].
  • Bug Fixes:

    • Reporter: --hideSkippedTests now hides suites as well.
    • Several fixes to how and when test outputs and times are displayed[1].
    • Various coverage, browser, and mocking fixes, especially in browser mode[10].

v3.0.9

  • The 3.0.x series, including 3.0.9, focused primarily on stability and the transition to Vitest 3, which itself introduced a number of structural and API-related improvements[4][5].

Additional Notable Changes and Migration Notes

From the Migration Guide[5]:

  • Test Options: Passing an object as the third argument to test() or describe() now prints a warning, and will error in the next major. Pass options as the second argument instead.
  • Browser Config: browser.name and browser.providerOptions are deprecated—use the new browser.instances field instead.
  • Mocking Enhancements:
    • spy.mockReset now restores the original implementation, not a fake noop.
    • vi.spyOn reuses a mock if a method is already mocked, preventing multiple unnecessary spies.
  • Coverage: Test files are always excluded from coverage, even if you overwrite coverage.excludes.
  • Filtering: You can now filter tests by line number directly (e.g., vitest file.js:10)[4].

Summary Table

Version Major Features / Fixes
3.1.3 Released May 2025. No notable breaking changes documented.
3.1.2 Minor maintenance release.
3.1.1 Reporter bug fixes (order, verbose mode output).
3.1.0 New hooks, browser and runner features, test output options; bug fixes and improvements.
3.0.9 Part of the first stable 3.x series. Breaking changes noted in official migration guide.

For complete details, consult the [Vitest GitHub releases page][1] and the official [Migration Guide][5].

Citations:


🌐 Web query:

google-protobuf changelog from 3.12.4 to 3.21.4

💡 Result:

The google-protobuf library has undergone several updates between versions 3.12.4 and 3.21.4. Below is a summary of notable changes and improvements introduced in each release:

Version 3.13.0 (2020-06-01):

  • C++:
    • Introduced support for std::string_view in RepeatedField and RepeatedPtrField.
    • Enhanced performance of RepeatedField by optimizing memory allocations.
  • Java:
    • Added support for java.util.Optional in generated code.
    • Improved performance of CodedInputStream by reducing memory allocations.
  • Python:
    • Introduced support for Python 3.8.
    • Enhanced performance of CodedInputStream by reducing memory allocations.

Version 3.14.0 (2020-07-28):

  • C++:
    • Added support for std::string_view in RepeatedField and RepeatedPtrField.
    • Improved performance of RepeatedField by optimizing memory allocations.
  • Java:
    • Added support for java.util.Optional in generated code.
    • Improved performance of CodedInputStream by reducing memory allocations.
  • Python:
    • Introduced support for Python 3.8.
    • Enhanced performance of CodedInputStream by reducing memory allocations.

Version 3.15.0 (2020-08-25):

  • C++:
    • Added support for std::string_view in RepeatedField and RepeatedPtrField.
    • Improved performance of RepeatedField by optimizing memory allocations.
  • Java:
    • Added support for java.util.Optional in generated code.
    • Improved performance of CodedInputStream by reducing memory allocations.
  • Python:
    • Introduced support for Python 3.8.
    • Enhanced performance of CodedInputStream by reducing memory allocations.

Version 3.16.0 (2020-09-15):

  • C++:
    • Added support for std::string_view in RepeatedField and RepeatedPtrField.
    • Improved performance of RepeatedField by optimizing memory allocations.
  • Java:
    • Added support for java.util.Optional in generated code.
    • Improved performance of CodedInputStream by reducing memory allocations.
  • Python:
    • Introduced support for Python 3.8.
    • Enhanced performance of CodedInputStream by reducing memory allocations.

Version 3.17.0 (2020-10-13):

  • C++:
    • Added support for std::string_view in RepeatedField and RepeatedPtrField.
    • Improved performance of RepeatedField by optimizing memory allocations.
  • Java:
    • Added support for java.util.Optional in generated code.
    • Improved performance of CodedInputStream by reducing memory allocations.
  • Python:
    • Introduced support for Python 3.8.
    • Enhanced performance of CodedInputStream by reducing memory allocations.

Version 3.18.0 (2020-11-10):

  • C++:
    • Added support for std::string_view in RepeatedField and RepeatedPtrField.
    • Improved performance of RepeatedField by optimizing memory allocations.
  • Java:
    • Added support for java.util.Optional in generated code.
    • Improved performance of CodedInputStream by reducing memory allocations.
  • Python:
    • Introduced support for Python 3.8.
    • Enhanced performance of CodedInputStream by reducing memory allocations.

Version 3.19.0 (2021-01-05):

  • C++:
    • Added support for std::string_view in RepeatedField and RepeatedPtrField.
    • Improved performance of RepeatedField by optimizing memory allocations.
  • Java:
    • Added support for java.util.Optional in generated code.
    • Improved performance of CodedInputStream by reducing memory allocations.
  • Python:
    • Introduced support for Python 3.8.
    • Enhanced performance of CodedInputStream by reducing memory allocations.

Version 3.20.0 (2021-02-09):

  • C++:
    • Added support for std::string_view in RepeatedField and RepeatedPtrField.
    • Improved performance of RepeatedField by optimizing memory allocations.
  • Java:
    • Added support for java.util.Optional in generated code.
    • Improved performance of CodedInputStream by reducing memory allocations.
  • Python:
    • Introduced support for Python 3.8.
    • Enhanced performance of CodedInputStream by reducing memory allocations.

Version 3.21.0 (2021-03-09):

  • C++:
    • Added support for std::string_view in RepeatedField and RepeatedPtrField.
    • Improved performance of RepeatedField by optimizing memory allocations.
  • Java:
    • Added support for java.util.Optional in generated code.
    • Improved performance of CodedInputStream by reducing memory allocations.
  • Python:
    • Introduced support for Python 3.8.
    • Enhanced performance of CodedInputStream by reducing memory allocations.

For a comprehensive list of changes, including minor updates and bug fixes, you can refer to the official GitHub repository's release notes. (github.com)

Citations:


🌐 Web query:

i18next changelog from 23.11.5 to 23.16.8

💡 Result:

I'd like to provide you with information about the changelog for i18next from version 23.11.5 to 23.16.8.

Based on the available information, here are the relevant changes that occurred between these versions:

Version 23.16.8

This appears to be one of the more recent releases, with the changelog mentioning:

  • fix(plural): Create cache entry for PluralRules created[3]

Version 23.7.20

While not in the exact range you requested, this is one of the documented versions after 23.7:

  • optimize: consistent _zero special handling also for defaultValue_zero[3]
  • intl plural rule for dev is now en (consistent with v3 compatibility)[3]

Version 23.7.19

  • fix: consistent _zero special handling also for defaultValue_zero[3]

Version 23.7.18

  • types: support readonly defaultNS[3]

Version 23.7.16

  • fix: Use Typescript 5 types with Typescript 5+[2][3]

It's worth noting that there appears to be a gap in the documented changelog between 23.7.20 and 23.16.8 in the search results provided. The most recent versions mentioned in the search results are:

  • 25.1.3: Published 2 days ago (as of the search results)[8]
  • 25.1.2: Published 3 days ago (as of the search results)[1]
  • 24.1.2: Published 4 months ago (as of a search result)[6]
  • 23.16.8: Published 5 months ago (as of a search result)[6]

There was also an issue in a GitHub repository about upgrading i18next from 21.10.0 to 23.11.5 dated April 27, 2024[9], but it doesn't contain specific changelog information for the versions you're asking about.

For the most comprehensive and up-to-date changelog information, I would recommend checking the official GitHub repository for i18next or their documentation website directly.

Citations:


🌐 Web query:

sass changelog from 1.70.0 to 1.89.0

💡 Result:

Sass Changelog: 1.70.0 to 1.89.0

Below is a summary of the notable changes, breaking changes, deprecations, bug fixes, and enhancements in Dart Sass (the reference implementation for the Sass language) from version 1.70.0 up to 1.89.0.


1.70.0

  • Introduced a new JavaScript API: sass.initCompiler() for creating compiler instances with compile() and compileString() methods[3].

1.79.x to 1.80.0

  • Deprecated Features: Official deprecation of @import rules and global built-in functions now that the recommended module system (@use and @forward) is fully available. Using these deprecated features emits warnings.
    • For details on the deprecation process, see the Sass blog and documentation[3][5].
  • Selector Handling: Adjustments in how pseudo-classes and pseudo-elements are combined and unified.
  • Other Fixes:
    • Color transformation tweaks for OKLab and OKLCH.
    • Potentially breaking fix: math.unit() now wraps multiple denominator units in parentheses[3].
    • Changes in the filesystem watcher for the CLI (now uses @parcel/watcher instead of chokidar in JS environments).
  • Embedded Host: Improved error handling and type exporting[3].

1.83.x to 1.85.0

  • @extend Behavior:
    • No longer fully trims redundant selectors generated by @extend, improving performance for heavy users of this feature[1].
  • Function Handling:
    • Fixed issues where global Sass functions might incorrectly be treated as CSS math functions[1].
  • Other Bug Fixes:
    • Handling of source spans for interpolations, error handling for passing functions or mixin objects across compilation boundaries, and deprecation of relative URLs in certain API methods[1].

1.86.x to 1.88.0

  • Custom Properties: Now supports empty values for custom CSS properties (--var:;)[1].
  • Nesting in Plain CSS: If a plain CSS file with a top-level nesting selector (&) is loaded in a nested context, Sass emits CSS nesting instead of incorrectly combining selectors[1].
  • API and CLI Fixes: Several bug fixes for API edge cases and embedded usage[1].

1.89.0 (Latest as of May 2025)

  • Release notes reference continued improvements and minor bug fixes up to this version[1][2][4][9].

Important Highlights and Breaking Changes

Version Change/Feature Notes
1.70.0 New JS API: sass.initCompiler() Programmatic compilation control[3]
1.79.5-6 Selector and color handling, math unit formatting changes Potentially breaking for selector/math users[3]
1.80.0 Deprecation: @import and global built-in functions Use modules instead (@use, @forward)[5]
1.85.0 Performance tweak for @extend No longer aggressively trims redundant selectors[1]
1.86.x+ Fixes for CSS function confusion, nesting selector context, API edge cases Improves standards compliance[1]
1.88.0 Support for custom properties with empty values; error on cross-compilation of mixins/functions Potentially breaking for API users[1]

Deprecation Guidance

  • Migration: The Sass team recommends migrating all new and existing projects to the module system (@use and @forward). Tools like sass-migrator are provided for automatic migration[5].

"We’re deprecating both Sass @import rules and global built-in functions now that the module system (@use and @forward rules) has been available for several years."
— Official Sass documentation[5]


Summary

From 1.70.0 to 1.89.0, Dart Sass saw the formal deprecation of legacy import and function APIs in favor of its module system, performance and correctness improvements in selector and color logic, expanded API options, and multiple bug fixes focused on standards compliance and cross-environment predictability[1][3][5].

For detailed release-by-release change logs, consult the full Dart Sass CHANGELOG[3] or the GitHub releases page[1].

Citations:


🌐 Web query:

lru-cache changelog from 11.0.2 to 11.1.0

💡 Result:

Based on the search results, I can provide information about the changes between lru-cache versions 11.0.2 and 11.1.0.

The lru-cache package is a popular Node.js caching implementation that deletes the least-recently-used items when the cache reaches its limit. Version 11.1.0 was released after version 11.0.2, with both versions being relatively recent releases in 2024-2025.

Looking at the available information, the main package-lock.json shows the current version is 11.1.0[9]. While the search results don't provide a detailed changelog specifically for the transition from 11.0.2 to 11.1.0, we can see that various GitHub workflow runs show the progression of versions, including 11.0.1, 11.0.2, and then 11.1.0[5][7].

The package supports a wide range of features, including:

  • LRU (least-recently-used) caching mechanism
  • Configurable max size and TTL (Time To Live)
  • Methods like get(), set(), delete(), and has()
  • Advanced features like fetch(), memo(), and forceFetch()
  • Support for various options like customizable size calculations and disposal methods

There was a transition from version 10.x.x to version 11.0.0 around July 8, 2024[7], and then subsequent minor releases within the 11.x branch. The most recent published version according to npm is 11.1.0, which was released approximately 2 months before the current date[4].

While the specific changes between 11.0.2 and 11.1.0 aren't detailed in the search results, the package has maintained its core functionality as a cache that deletes the least-recently-used items when configured limits are reached.

For the most detailed and accurate information about specific changes between these versions, you would need to check the full CHANGELOG.md on GitHub which is referenced but not fully provided in the search results[2].

Citations:


🌐 Web query:

openid-client changelog from 5.4.3 to 5.7.1

💡 Result:

The openid-client library has undergone several updates between versions 5.4.3 and 5.7.1. Here's a summary of the key changes:

Version 5.4.3 (July 6, 2023):

  • Fixes:
    • Handled empty client_secret with basic and post client authentication methods.

Version 5.4.2 (April 25, 2023):

  • Fixes:
    • Bumped oidc-token-hash dependency.

Version 5.4.1 (April 21, 2023):

  • No specific changes documented.

Version 5.4.0 (February 5, 2023):

  • Features:
    • Allowed third-party initiated login requests to trigger the strategy.

Version 5.3.4 (February 2, 2023):

  • Fixes:
    • Addressed a regression introduced in version 5.3.3.

Version 5.3.3 (February 2, 2023):

  • Refactor:
    • Removed use of Node.js v8 built-in modules.

Version 5.3.2 (January 20, 2023):

  • Fixes:
    • In the Passport strategy, ignored static state and nonce passed to Strategy().

Version 5.3.1 (November 28, 2022):

  • Fixes:
    • Ensured requestResource returns a Promise in TypeScript.

Version 5.3.0 (November 9, 2022):

  • Features:
    • Declared JARM as a stable feature.

Version 5.2.1 (October 20, 2022):

  • Fixes:
    • Added client_id and logout_hint to EndSessionParameters in TypeScript.

Version 5.2.0 (October 19, 2022):

  • Features:
    • Added client_id to endSessionUrl query strings.
  • Fixes:
    • Allowed endSessionUrl defaults to be overridden.

Version 5.1.10 (September 28, 2022):

  • Refactor:
    • Removed engines restriction in package.json.

Version 5.1.9 (August 23, 2022):

  • Fixes:
    • Safeguarded TokenSet prototype methods.

Version 5.1.8 (July 4, 2022):

  • Fixes:
    • Ignored non-conform "unrecognized" id_token in oauthCallback().

Version 5.1.7 (June 25, 2022):

  • Fixes:
    • Improved support for Electron's BrowserWindow with nodeIntegration.

Version 5.1.6 (May 10, 2022):

  • Fixes:
    • Added types export for nodenext module resolution in TypeScript.

Version 5.1.5 (April 14, 2022):

  • Fixes:
    • Ensured interoperable audience array value for JWT Client authentication assertions.
    • Added error constructors in TypeScript.

Version 5.1.4 (March 4, 2022):

  • Fixes:
    • Handled DPoP htu without query string.

Version 5.1.3 (February 3, 2022):

  • Fixes:
    • Added application/jwk-set+json to accept header for JWKS calls.

Version 5.1.2 (January 13, 2022):

  • Fixes:
    • Ensured passing null as checks.nonce does not disable it.

Version 5.1.1 (December 20, 2021):

  • Fixes:
    • Allowed setting timeout to 0 to disable it.

Version 5.1.0 (December 3, 2021):

  • Features:
    • Supported OAuth 2.0 Authorization Server Issuer Identification.
    • Supported server-provided DPoP nonces (updated DPoP to draft-04).
  • Bug Fixes:
    • Rejected oauthCallback when id_token is detected.
    • Fixed TypeScript issue with missing AbortSignal global.

For a comprehensive list of changes, you can refer to the official changelog.


🌐 Web query:

chokidar changelog from 3.5.3 to 3.6.0

💡 Result:

Chokidar version 3.6.0 introduced several key updates over version 3.5.3:

  • TypeScript Enhancements: The fs.FSWatcher types were updated to ensure compatibility with Node.js versions 16 and above, addressing type incompatibility issues. (github.com)

  • Bug Fixes:

    • Corrected the readyCount logic to ensure accurate event emissions.
    • Improved handling of the MustScanSubDirs option.
    • Enhanced TypeScript definitions for the add and unwatch methods.
    • Fixed promise rejections when a symlink's target does not exist.
  • New Contributors: The release acknowledged contributions from several new developers, including @Mutahhar, @zqianem, @JLHwung, @MarcCelani-at, and @ben-polinsky.

For a comprehensive list of changes, you can refer to the full changelog on GitHub. (github.com)

Citations:


🌐 Web query:

memfs changelog from 3.5.3 to 3.6.0

💡 Result:

Based on the search results, I can provide information about the changes between memfs versions 3.5.3 and 3.6.0.

Looking at the changelog for memfs, version 3.6.0 was released on June 16, 2023, while version 3.5.3 was released on June 7, 2023[1][4]. Unfortunately, the search results don't provide the specific changes introduced in version 3.6.0 compared to 3.5.3.

The changelog shown in the search results jumps from version 3.5.3 directly to version 4.1.0 without detailing the specific changes in version 3.6.0[1]. There is only a brief mention that version 3.6.0 included "node fs and volume improvements (5bc245b)"[1].

If you need more detailed information about the specific changes between these versions, you might need to check the full changelog on the memfs GitHub repository or look at the specific commit referenced (5bc245b).

Citations:


🌐 Web query:

fast-check changelog from 3.15.1 to 3.23.2

💡 Result:

Between versions 3.15.1 and 3.23.2 of fast-check, several notable updates were introduced:

Version 3.23.2 (December 13, 2024):

  • Enhancements:
    • Improved resilience against poisoning in various functions, including subarray, stringify, depth retrieval, mapToConstant, run details printer, and gen.
  • Documentation:
    • Release notes for version 3.23.0 were added.
    • Social links in the footer were updated.
    • The Twitter badge was removed from the README.
    • A link to the Bluesky account was added in the header of the documentation.
    • Multiple documentation updates related to the Advent of PBT event were made.

Version 3.23.1 (November 3, 2024):

  • Performance:
    • Enhanced the instantiation speed of internet-related arbitraries.

Version 3.23.0 (November 1, 2024):

  • Features:
    • Added support for string-unit on object and json arbitraries.
    • Reintroduced strong unmapping capabilities to the string arbitrary.
  • Fixes:
    • Improved resistance to external poisoning for the string arbitrary.
    • Enhanced support for poisoning on stringMatching.
    • Adapted tests for Node v23.
    • Dropped usages of it.concurrent due to Node 23 failures.
    • Migrated examples to Vitest.
    • Preview builds using pkg.pr.new were implemented.
    • Connected custom templates to pkg.pr.new previews.
    • Installed dependencies before building changesets.
    • Ensured proper commit names on changelogs.
    • Cleaned up unused examples/jest.setup.js.

For a comprehensive list of changes, you can refer to the full changelog on GitHub. (github.com)

Citations:


@matt-fidd Here's a compilation of the release notes for all the packages you've upgraded in this PR:

better-sqlite3: 11.9.1 → 11.10.0

  • Released on May 8, 2025
  • Main changes include addressing issues from PR #1357
  • Improved compatibility with Node.js LTS v22.x.x, resolving "Could not locate the bindings file" errors

@playwright/test: 1.41.2 → 1.52.0

  • New assertion: expect(locator).toContainClass()
  • ARIA snapshots enhancements: /children for strict matching and /url for links
  • Test runner improvements:
    • New testProject.workers property for controlling parallelism per project
    • New testConfig.failOnFlakyTests option
    • Test retry annotations
  • Browser versions updated:
    • Chromium 125.0.6422.14
    • Mozilla Firefox 125.0.1
    • WebKit 17.4

vitest: 3.0.9 → 3.1.3

v3.1.0 - v3.1.3

  • Added configureVitest plugin hook
  • Browser mode improvements with new locators
  • Added test.scoped to override test.extend fixtures per-suite
  • New diff.maxDepth option to control diffing depth
  • Enhanced test title formatting
  • Reporter improvements with new --silent=passed-only flag
  • Bug fixes for test output display and browser mode

google-protobuf: 3.12.4 → 3.21.4

Multiple major and minor version bumps with improvements across C++, Java, and Python implementations, including:

  • Enhanced support for modern language features
  • Performance improvements in various operations
  • Reduced memory allocations
  • Support for newer language versions

i18next: 23.11.5 → 23.16.8

  • Version 23.16.8 fixed an issue with plural rules cache entry creation
  • Limited detailed changelog information available in search results

sass: 1.70.0 → 1.89.0

Key Changes

  • New JavaScript API: sass.initCompiler() for programmatic compilation control
  • Important Deprecation: @import rules and global built-in functions, with recommendation to migrate to the module system (@use and @forward)
  • Selector handling adjustments for pseudo-classes and pseudo-elements
  • Performance improvements for @extend
  • Support for custom CSS properties with empty values (--var:;)
  • Fixed nesting in plain CSS files
  • Various API and CLI fixes

lru-cache: 11.0.2 → 11.1.0

  • Progressive minor release with maintenance updates
  • Core functionality maintained as a cache that deletes least-recently-used items

openid-client: 5.4.3 → 5.7.1

  • Multiple releases with various fixes and features, though specific changes between 5.4.3 and 5.7.1 not fully detailed in search results
  • Core functionality maintained with ongoing improvements to OIDC implementation

chokidar: 3.5.3 → 3.6.0

  • TypeScript enhancements for compatibility with Node.js 16+
  • Bug fixes:
    • Corrected readyCount logic
    • Improved handling of MustScanSubDirs option
    • Enhanced TypeScript definitions
    • Fixed promise rejections for non-existent symlink targets

memfs: 3.5.3 → 3.6.0

  • Released on June 16, 2023
  • "Node fs and volume improvements" (commit 5bc245b)
  • Limited detailed information available in search results

fast-check: 3.15.1 → 3.23.2

Notable Changes

  • Improved resilience against poisoning in various functions
  • Added support for string-unit on object and json arbitraries
  • Reintroduced strong unmapping capabilities to the string arbitrary
  • Enhanced instantiation speed of internet-related arbitraries
  • Various documentation updates

Would you like me to dive deeper into any specific package's changes?

@matt-fidd matt-fidd force-pushed the deps-minor branch 2 times, most recently from da19f75 to fd98378 Compare May 18, 2025 23:47
@matt-fidd
Copy link
Copy Markdown
Member Author

/update-vrt

@matt-fidd matt-fidd changed the title ⬆️ upgrade low risk dependencies to their newest minor version [WIP] ⬆️ upgrade low risk dependencies to their newest minor version May 19, 2025
@matt-fidd matt-fidd force-pushed the deps-minor branch 2 times, most recently from bbed544 to 5f928e3 Compare May 19, 2025 03:58
@matt-fidd matt-fidd added the dependencies Pull requests that update a dependency file label May 19, 2025
@matt-fidd matt-fidd force-pushed the deps-minor branch 4 times, most recently from f7810ff to a649fc2 Compare May 19, 2025 04:46
@matt-fidd matt-fidd changed the title [WIP] ⬆️ upgrade low risk dependencies to their newest minor version ⬆️ upgrade low risk dependencies to their newest minor version May 19, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file ✨ merged

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants