squirrelly

squirrelly copied to clipboard

Bumps [terser](https://github.com/terser/terser) from 4.6.7 to 4.8.1. Changelog Sourced from terser's changelog. v4.8.1 (backport) Security fix for RegExps that should not be evaluated (regexp DDOS) v4.8.0 Support for numeric separators (million...

dependabot[bot]

Bumps [jsdom](https://github.com/jsdom/jsdom) from 16.4.0 to 16.7.0. Release notes Sourced from jsdom's releases. Version 16.7.0 Added AbortSignal.abort(). (ninevra) Added dummy x and y properties to the return value of getBoundingClientRect(). (eiko)...

dependabot[bot]

high severity vulnerrability

4

**Describe the bug** there is high severity vulnerability in latest npm package, see https://github.com/advisories/GHSA-q8j6-pwqx-pm96 **To Reproduce** Steps to reproduce the behavior: npm audit **Expected behavior** A clear and concise description...

jianyexi

Bumps [ajv](https://github.com/ajv-validator/ajv) from 6.12.0 to 6.12.6. Release notes Sourced from ajv's releases. v6.12.6 Fix performance issue of "url" format. v6.12.5 Fix uri scheme validation (@​ChALkeR). Fix boolean schemas with strictKeywords...

dependabot[bot]

Bumps [trim-off-newlines](https://github.com/stevemao/trim-off-newlines) from 1.0.1 to 1.0.3. Commits c3b28d3 1.0.3 6226c95 Merge pull request #4 from Trott/fix-it-again c77691d fix: remediate ReDOS further 76ca93c chore: pin mocha to version that works with...

dependabot[bot]

7flash

Uncaught ReferenceError: require is not defined in ViteJS

3

**Describe the bug** The package includes `require` that causes an exception in a browser bundle built by ViteJS. It happens because of these lines: https://github.com/squirrellyjs/squirrelly/blob/master/src/file-utils.ts#L1-L2 That file should be imported...

Kukunin

Bumps [shelljs](https://github.com/shelljs/shelljs) from 0.8.4 to 0.8.5. Release notes Sourced from shelljs's releases. v0.8.5 This was a small security fix for #1058. Commits 70668a4 0.8.5 d919d22 fix(exec): lockdown file permissions (#1060)...

dependabot[bot]

template variable at end of line consumes newline ### template ``` These fruits are amazing: {{@each(it.fruits) => fruit}} fruit = {{fruit}} fruit = {{fruit}} {{/each}} ``` ### actual result ```...

milahu

Gitbook website comes up when searching for debugging info. Examples seem to use incorrect (outdated?) syntax eg https://github.com/nebrelbug/squirrelly.js.org/pull/7

kumavis