You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Fixes issue where cookies from the current origin was being forwarded to the target origin in fetch requests - By @capricorn86 in task #2117
A security advisory (GHSA-w4gp-fjgq-3q4g) was reported for this security vulnerability. Big thanks to @r74tech for reporting this!
v20.8.8
👷♂️ Patch fixes
Fixes issue where export names can be interpolated as executable code in ESM - By @capricorn86 in task #2113
A security advisory (GHSA-6q6h-j7hj-3r64) has been reported that shows a security vulnerability where it may be possible to escape the VM context and get access to process level functionality in unsafe environments using CommonJS. Big thanks to @tndud042713 for reporting this!
v20.8.7
👷♂️ Patch fixes
Replace implementing Node.js Console with common IConsole interface to support latest version of Bun - By @YevheniiKotyrlo in task #1845
v20.8.6
👷♂️ Patch fixes
Request.formData() should honor "Content-Type" header - By @brianhelba in task #2106
v20.8.5
👷♂️ Patch fixes
Fixes error thrown when modifying DOM structure in connectedCallback() - By @capricorn86 in task #2110
v20.8.4
👷♂️ Patch fixes
Replace ConsoleConstructor import with indexed access type - By @YevheniiKotyrlo in task #1845
v20.8.3
👷♂️ Patch fixes
Throw error if event is not of type Event in EventTarget.dispatchEvent() - By @capricorn86 in task #2054
v20.8.2
👷♂️ Patch fixes
Resets Event.cancelBubble and Event.defaultPrevented when calling Event.initEvent() - By @capricorn86 in task #2090
v20.8.1
👷♂️ Patch fixes
Make "inert" attribute block focus interactions - By @coffeeandwork in task #1422
v20.8.0
🎨 Features
Adds support for setPointerCapture, hasPointerCapture, and releasePointerCapture to Element - By @coffeeandwork in task #1733
v20.7.2
👷♂️ Patch fixes
Properly decode CSS escape sequences in attribute selector values - By @silverwind
v20.7.1
👷♂️ Patch fixes
Fixes issue related to parsing direct descendants (>) and universal (*) query selectors - By @Cherry in task #2078
... (truncated)
Commits
68324c2 fix: #2117 Fixes issue related to cookies from the current origin being for...
5437fdf fix: #2113 Fixes issue where export names can be interpolated as executable...
7e97acb fix: #1845 Replace implementing Node js Console with common IConsole interf...
3373929 fix: #2106Request.formData() should honor Content-Type header (#2107)
55c17ba fix: #2110 Fixes error thrown when modifying DOM structure in connectedCall...
82a0888 fix: #1845 Replace ConsoleConstructor import with indexed access type (#2095)
5998eea fix: #2054 Throw error if event is not of type Event in dispatchEvent (#2092)
7a11238 fix: #2090 Resets cancelBubble and defaultPrevented when calling initEvent ...
7d27984 fix: #1422 Make inert attribute block focus interactions (#2083)
53e4ec9 feat: #1733 Adds support for setPointerCapture, hasPointerCapture, and rele...
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.
Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.
This PR includes no changesets
When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types
✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 93.97%. Comparing base (edfff9c) to head (803a86e).
✅ All tests successful. No failed tests found.
📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
dependenciesPull requests that update a dependency filejavascriptPull requests that update javascript code
0 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
dependabot
Bot
added
dependencies
Bumps happy-dom from 20.0.10 to 20.8.9.
Release notes
Sourced from happy-dom's releases.
... (truncated)
Commits
68324c2fix: #2117 Fixes issue related to cookies from the current origin being for...5437fdffix: #2113 Fixes issue where export names can be interpolated as executable...7e97acbfix: #1845 Replace implementing Node js Console with common IConsole interf...3373929fix: #2106Request.formData()should honorContent-Typeheader (#2107)55c17bafix: #2110 Fixes error thrown when modifying DOM structure in connectedCall...82a0888fix: #1845 Replace ConsoleConstructor import with indexed access type (#2095)5998eeafix: #2054 Throw error if event is not of type Event in dispatchEvent (#2092)7a11238fix: #2090 Resets cancelBubble and defaultPrevented when calling initEvent ...7d27984fix: #1422 Make inert attribute block focus interactions (#2083)53e4ec9feat: #1733 Adds support for setPointerCapture, hasPointerCapture, and rele...Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.