Update dependency bower to ~1.8.0 #2
Loading…
Reference in a new issue
No description provided.
Delete branch "renovate/bower-1.x"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
This PR contains the following updates:
~1.3.8→~1.8.0Release Notes
bower/bower (bower)
v1.8.14Compare Source
v1.8.13Compare Source
v1.8.12Compare Source
v1.8.11Compare Source
v1.8.10v1.8.8Compare Source
Fix security issue connected to extracting .tar.gz archives
This bug allows to write arbitrary file on filesystem when Bower extracts malicious package
Needlessly to say, please upgrade
v1.8.7Compare Source
Fixes side effect of fix from v1.8.6 that caused improper permissions for extracted folders
#2532
v1.8.6Compare Source
Fix Zip Slip Vulnerability of decompress-zip package: https://snyk.io/research/zip-slip-vulnerability
Note: v1.8.5 has been unpublished because of missing files
v1.8.4Compare Source
lib/node_modules)v1.8.3Compare Source
451c60eDo not store resolutions if --save is not used, fixes #2344 (#2508)50ee729Allow to disable shorthand resolver (#2507)bb17839Allow shallow cloning when source is a ssh protocol (#2506)5a6ae54Add support for Arrays in Environment Variable replacement (#2411)74af42cOnly replace last@after (if any) last/with#(#2395)v1.8.2Compare Source
Migrate registry url from http://bower.herokuapp.com to https://registry.bower.io
It is so we leverage CDN and offload Heroku instance reducing costs.
v1.8.0git://tohttps://owner/reponameshorthand for registering components (#2248)bower versionno longer honorversionin bower.json (#2232)postinstallhook (#2252)@instead of#forinstallandinfocommands (#2322)v1.7.9Compare Source
v1.7.8Compare Source
v1.7.7Compare Source
Revert locations of all files while still packaging
node_modules.It's because people are depending on internals of bower, like
bower/lib/renderers/StandardRenderer. We want to preserve thisimplicit contract, but we discourage it. The only official way
to use bower programmatically is through
require('bower').v1.7.6Compare Source
Note: Correctly, you should use an alias created in
npm bin --global.v1.7.5Compare Source
bower install --save(#2145)bower logincommand (#2133)v1.7.2Compare Source
v1.7.1Compare Source
bower update --savefunctionality", it causes issues and needs more testingbower search --json(#2066)bower infooutputde3e108)--saveandupdate --save-dev(612aaa8)v1.7.0Compare Source
bower update --savefunctionality (#2035)bower searchshows help message when no package name is specified (#2066)v1.6.9Compare Source
v1.6.8Compare Source
defaultsetting for config.cav1.6.7Compare Source
v1.6.6Compare Source
v1.6.5Compare Source
v1.6.4Compare Source
v1.6.3Compare Source
Fixes regression issues introduced with 1.6.2, specifically:
v1.6.2Compare Source
Fix dependency issues of 1.6.1. First published release of 1.6.x.
v1.5.4Compare Source
v1.5.3Compare Source
bower initto support private flag again (#1819)v1.5.2Compare Source
v1.5.1Compare Source
v1.5.0Compare Source
v1.4.2Compare Source
v1.4.1Compare Source
v1.4.0Compare Source
514eb8f)962a565,a464f5aIt also includes improved test coverage (~60% -> ~85%) and many refactors.
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate CLI.
View command line instructions
Checkout
From your project repository, check out a new branch and test the changes.Merge
Merge the changes and update on Forgejo.Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.