Bump rollup and vitepress
Bumps rollup to 4.22.4 and updates ancestor dependency vitepress. These dependencies need to be updated together.
Updates rollup from 2.77.0 to 4.22.4
Release notes
Sourced from rollup's releases.
v4.22.4
4.22.4
2024-09-21
Bug Fixes
- Fix a vulnerability in generated code that affects IIFE, UMD and CJS bundles when run in a browser context (#5671)
Pull Requests
- #5670: refactor: Use object.prototype to check for reserved properties (
@YuHyeonWook)- #5671: Fix DOM Clobbering CVE (
@lukastaegert)v4.22.3
4.22.3
2024-09-21
Bug Fixes
- Ensure that mutations in modules without side effects are observed while properly handling transitive dependencies (#5669)
Pull Requests
- #5669: Ensure impure dependencies of pure modules are added (
@lukastaegert)v4.22.2
4.22.2
2024-09-20
Bug Fixes
- Revert fix for side effect free modules until other issues are investigated (#5667)
Pull Requests
- #5667: Partially revert #5658 and re-apply #5644 (
@lukastaegert)v4.22.1
4.22.1
2024-09-20
Bug Fixes
- Revert #5644 "stable chunk hashes" while issues are being investigated
Pull Requests
... (truncated)
Changelog
Sourced from rollup's changelog.
4.22.4
2024-09-21
Bug Fixes
- Fix a vulnerability in generated code that affects IIFE, UMD and CJS bundles when run in a browser context (#5671)
Pull Requests
- #5670: refactor: Use object.prototype to check for reserved properties (
@YuHyeonWook)- #5671: Fix DOM Clobbering CVE (
@lukastaegert)4.22.3
2024-09-21
Bug Fixes
- Ensure that mutations in modules without side effects are observed while properly handling transitive dependencies (#5669)
Pull Requests
- #5669: Ensure impure dependencies of pure modules are added (
@lukastaegert)4.22.2
2024-09-20
Bug Fixes
- Revert fix for side effect free modules until other issues are investigated (#5667)
Pull Requests
- #5667: Partially revert #5658 and re-apply #5644 (
@lukastaegert)4.22.1
2024-09-20
Bug Fixes
- Revert #5644 "stable chunk hashes" while issues are being investigated
Pull Requests
- #5663: chore(deps): update dependency inquirer to v11 (
@renovate[bot],@lukastaegert)- #5664: chore(deps): lock file maintenance minor/patch updates (
@renovate[bot])- #5665: fix: type in CI file (
@YuHyeonWook)
... (truncated)
Commits
79c0aba4.22.4e2552c9Fix DOM Clobbering CVE (#5671)10ab90erefactor: Use object.prototype to check for reserved properties (#5670)e1cba8e4.22.359cec3eEnsure impure dependencies of pure modules are added (#5669)b86ffd74.22.2d5ff63dPartially revert #5658 and re-apply #5644 (#5667)0a821d9Create SECURITY.md76e962d4.22.168c23daPartially revert #5644- Additional commits viewable in compare view
Updates vitepress from 1.0.0-alpha.4 to 1.3.4
Release notes
Sourced from vitepress's releases.
v1.3.4
Please refer to CHANGELOG.md for details.
v1.3.3
Please refer to CHANGELOG.md for details.
v1.3.2
Please refer to CHANGELOG.md for details.
v1.3.1
Please refer to CHANGELOG.md for details.
v1.3.0
Please refer to CHANGELOG.md for details.
v1.2.3
Please refer to CHANGELOG.md for details.
v1.2.2
Please refer to CHANGELOG.md for details.
v1.2.0
Please refer to CHANGELOG.md for details.
v1.1.4
Please refer to CHANGELOG.md for details.
v1.1.3
Please refer to CHANGELOG.md for details.
v1.1.1
Please refer to CHANGELOG.md for details.
v1.1.0
Please refer to CHANGELOG.md for details.
v1.0.2
Please refer to CHANGELOG.md for details.
v1.0.1
Please refer to CHANGELOG.md for details.
v1.0.0
Please refer to CHANGELOG.md for details.
v1.0.0-rc.45
Please refer to CHANGELOG.md for details.
v1.0.0-rc.44
Please refer to CHANGELOG.md for details.
... (truncated)
Changelog
Sourced from vitepress's changelog.
1.3.4 (2024-08-24)
Bug Fixes
- check if
_importGlobMap(vite internal) exists before using it (612d66f)1.3.3 (2024-08-17)
Miscellaneous
- bump deps (a20db24)
1.3.2 (2024-08-05)
Bug Fixes
- multiple cache busting imports causing useData to fail (2b3e486), closes #3820, reverts #3398, reopens #3363
- theme: excerpt style in LocalSearchBox (#4050) (2bc0d39)
1.3.1 (2024-07-14)
Bug Fixes
- don't reopen browser on restart when
vite.server.openis specified (6263db1), closes #4040- theme/regression: typo in component props resulting in nested titles not showing in navbar (01d0d45), closes #4042
1.3.0 (2024-07-07)
Bug Fixes
- build: don't normalize links containing target or download property (e24899a), closes #3947
- build: respect frontmatter.lastUpdated for pageData.lastUpdated and sitemap generation (7fcf462), closes #3931
- build: sort pageToHashMap to ensure stable assets (e302328), closes #4016
- client: do nothing on anchor elements with empty href (6461f5d), closes #3950
- don't do git log on non-existent file (387acf7), closes #4008
- don't reopen browser on restart (d837e82), closes #4001
- properly handle svg anchor elements (b785bd6)
- theme: add styles for h4 too (b54d7b0)
- theme: deep watch sidebar groups and force render on match change (97f9469), closes #3613
- theme: dim color for all text like elements inside blockquotes (5d3ed87), closes #3929
- theme: force update title attribute on hydration (d348da7), closes #4004
- theme: show filled nav bar when nav screen is open (0fc70e2)
Features
- allow using components in navigation bar (#4000) (fa87d81)
- cli/init: allow passing target dir as command argument (#3948) (99053ba)
- markdown: support including specific regions from markdown files (#3978) (143b1e9)
- support
force-autoas an option for appearance (1e8bb48), closes #3946- theme: export VPHomeContent (#3960) (8aa6ccb), closes #3954
... (truncated)
Commits
8fc2e48release: v1.3.48286316chore: skip data loader hmr test612d66fchore: add tests for data loader hmrd062732ci: prevent multiple cr runsa532fd3ci: use gh cli instead of action-add-labelseed9a94release: v1.3.3a20db24chore: bump deps2bda116chore: include node types for client3c40e9ddocs(ko): re-translation of korean documents (reference/*) (#4120)df27e44docs: fix wrong link- Additional commits viewable in compare view
Maintainer changes
This version was pushed to npm by brc-dd, a new releaser for vitepress since your current version.
You can trigger a rebase of this PR by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
-
@dependabot rebasewill rebase this PR -
@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it -
@dependabot mergewill merge this PR after your CI passes on it -
@dependabot squash and mergewill squash and merge this PR after your CI passes on it -
@dependabot cancel mergewill cancel a previously requested merge and block automerging -
@dependabot reopenwill reopen this PR if it is closed -
@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually -
@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency -
@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) -
@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) -
@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the Security Alerts page.
Note Automatic rebases have been disabled on this pull request as it has been open for over 30 days.