Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update dependency @vue/cli-service to v5 #46

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

mend-for-github-com[bot]
Copy link

@mend-for-github-com mend-for-github-com bot commented Apr 25, 2023

This PR contains the following updates:

Package Type Update Change
@vue/cli-service (source) devDependencies major ^3.0.4 -> ^5.0.0

By merging this PR, the below vulnerabilities will be automatically resolved:

Severity CVSS Score CVE
Critical Critical 9.8 CVE-2021-44906
Critical Critical 9.8 CVE-2022-0691
Critical Critical 9.8 CVE-2022-37601
Critical Critical 9.8 CVE-2023-42282
Critical Critical 9.3 CVE-2022-1650
Critical Critical 9.1 CVE-2022-0686
High High 7.5 CVE-2020-28469
High High 7.5 CVE-2021-23382
High High 7.5 CVE-2021-27290
High High 7.5 CVE-2021-3807
High High 7.5 CVE-2021-3807
High High 7.5 CVE-2022-24771
High High 7.5 CVE-2022-24772
High High 7.5 CVE-2022-25858
High High 7.5 CVE-2022-25883
High High 7.4 CVE-2024-29180

Release Notes

vuejs/vue-cli (@​vue/cli-service)

v5.0.1

Compare Source

Same as 5.0.0.

v4.5.19

Compare Source

IMPORTANT NOTE: IE 11 has reached End-of-Life. The default browserslist query no longer includes IE 11 as a target.
If your project still has to support IE 11, you MUST manually add IE 11 to the last line of the .browserslistrc file in the project (or browserslist field in package.json)

🐛 Bug Fix
  • @vue/babel-preset-app
    • [c7fa1cf] fix: always transpile syntaxes introduced in ES2020 or later, so that optional chaining and nullish coalescing syntaxes won't cause errors in webpack 4 and ESLint 6.
  • @vue/cli-plugin-typescript

v4.5.18

Compare Source

Fix compatibility with the upcoming Vue 2.7 (currently in alpha) and Vue Loader 15.10 (currently in beta).

In Vue 2.7, vue-template-compiler is no longer a required peer dependency. Rather, there's a new export under the main package as vue/compiler-sfc.

v4.5.17

Compare Source

🐛 Bug Fix
  • @vue/cli-shared-utils, @vue/cli-ui
    • d7a9881 fix: replace node-ipc with @achrinza/node-ipc to further secure the dependency chain
Committers: 1

v4.5.16

Compare Source

🐛 Bug Fix
  • @vue/cli-service
    • Fix demo-lib.html and demo-wc.html for Vue 2
  • @vue/cli-shared-utils, @vue/cli-ui
    • Lock node-ipc to v9.2.1

v4.5.15

Compare Source

Bug Fixes
  • fix: set .mjs file type to javascript/auto [15b1e1b]

This change allows an .mjs file to import named exports from .cjs and plain .js files.
Fixes compatibility with pinia.

v4.5.14

Compare Source

Security Fixes

This version fixed a CORS vulnerability and an XSS vulnerability in Vue CLI UI.
We recommend all users of vue ui to upgrade to this version as soon as possible.

Credits:

Ngo Wei Lin (@​Creastery) of STAR Labs (@​starlabs_sg)

v4.5.13

Compare Source

🐛 Bug Fix
Others
Committers: 3

v4.5.12

Compare Source

  • bump vue-codemod to work around an NPM hoisting bug
  • bump minimum required JSX preset / plugin versions, fixes https://github.com/vuejs/jsx/issues/183
  • bump default typescript version to 4.1 and prettier version to 2.x for new projects, fixes #​6299

v4.5.11

Compare Source

🐛 Bug Fix
Committers: 1

v4.5.10

Compare Source

🐛 Bug Fix
  • @vue/cli-plugin-unit-mocha
  • @vue/cli-plugin-unit-mocha, @vue/cli-service
  • @vue/cli-ui
  • @vue/cli-service-global, @vue/cli-service
Committers: 3

v4.5.9

Compare Source

🚀 New Features
Committers: 1

v4.5.8

Compare Source

🐛 Bug Fix
Committers: 2

v4.5.7

Compare Source

🐛 Bug Fix
  • @vue/cli-plugin-babel, @vue/cli-plugin-typescript, @vue/cli-service
  • @vue/cli
  • @vue/cli-plugin-pwa, @vue/cli-service
📝 Documentation
Committers: 4

v4.5.6

Compare Source

🐛 Bug Fix
Committers: 1

v4.5.5

Compare Source

🐛 Bug Fix
🏠 Internal
  • @vue/cli-ui
    • #​3687 perf(ui): improve get folder list to use Promises instead of sync (@​pikax)
🔨 Underlying Tools
  • @vue/babel-preset-app
Committers: 8

v4.5.4

Compare Source

🐛 Bug Fix
Committers: 3

v4.5.3

Compare Source

🐛 Bug Fix
  • @vue/cli-service
  • @vue/cli-plugin-e2e-webdriverio, @vue/cli-plugin-typescript
    • #​5769 fix: add missing mocha type if wdio is not installed along with any unit testing frameworks (@​sodatea)
  • @vue/cli-plugin-typescript
Committers: 1

v4.5.2

Compare Source

🐛 Bug Fix
  • @vue/cli-plugin-typescript
📝 Documentation
  • @vue/babel-preset-app, @vue/cli-plugin-e2e-nightwatch, @vue/cli-plugin-eslint, @vue/cli-plugin-typescript, @vue/cli-service, @vue/cli
🏠 Internal
  • @vue/babel-preset-app, @vue/cli-plugin-e2e-nightwatch, @vue/cli-plugin-eslint, @vue/cli-plugin-typescript, @vue/cli-service, @vue/cli
Committers: 3

v4.5.1

Compare Source

IMPORTANT NOTE: IE 11 has reached End-of-Life. The default browserslist query no longer includes IE 11 as a target.
If your project still has to support IE 11, you MUST manually add IE 11 to the last line of the .browserslistrc file in the project (or browserslist field in package.json)

🐛 Bug Fix
  • @vue/babel-preset-app
    • [c7fa1cf] fix: always transpile syntaxes introduced in ES2020 or later, so that optional chaining and nullish coalescing syntaxes won't cause errors in webpack 4 and ESLint 6.
  • @vue/cli-plugin-typescript

v4.5.0

Compare Source

🚀 New Features
  • @vue/babel-preset-app, @vue/cli-plugin-babel, @vue/cli-plugin-eslint, @vue/cli-plugin-router, @vue/cli-plugin-typescript, @vue/cli-plugin-unit-jest, @vue/cli-plugin-unit-mocha, @vue/cli-plugin-vuex, @vue/cli-service, @vue/cli-test-utils, @vue/cli-ui, @vue/cli
  • @vue/cli-plugin-typescript
  • @vue/cli-service, @vue/cli-test-utils, @vue/cli
  • @vue/cli-plugin-typescript, @vue/cli-service
  • @vue/cli-service, @vue/cli
🐛 Bug Fix
📝 Documentation
🏠 Internal
Committers: 7

v4.4.6

Compare Source

🐛 Bug Fix
📝 Documentation
Committers: 1

v4.4.5

Compare Source

🐛 Bug Fix
  • @vue/cli-service
    • #​5592 fix polyfill injection when building app on multiple threads (@​dtcz)
    • #​5598 fix: fix an edge case that VUE_CLI_SERVICE_CONFIG_PATH might be ignored (@​sodatea)
  • @vue/cli-plugin-e2e-cypress
  • @vue/cli
  • @vue/cli-plugin-e2e-nightwatch
    • #​5528 fix(nightwatch): should not install corresponding webdriver if the browser is unselected (@​sodatea)
🏠 Internal
  • @vue/cli-shared-utils
Committers: 5

v4.4.4

Compare Source

🐛 Bug Fix
  • @vue/cli-plugin-typescript
Committers: 1

v4.4.3

Compare Source

🐛 Bug Fix
🏠 Internal
Committers: 5

v4.4.2

Compare Source

📝 Documentation
  • @vue/cli-plugin-pwa
Committers: 1

v4.4.1

Compare Source

🐛 Bug Fix
📝 Documentation
🏠 Internal
  • @vue/babel-preset-app
Committers: 3

v4.4.0

Compare Source

🚀 New Features
  • @vue/cli
    • #​5498 feat(plugin-api): expose inquirer to prompts.js, allowing custom prompt types (@​sodatea)
  • @vue/cli-service
🐛 Bug Fix
  • @vue/cli-service, @vue/cli-shared-utils
  • @vue/cli-plugin-unit-jest
    • #​5499 fix(unit-jest): fix .vue coverage report when babel plugin is not enabled (@​sodatea)
  • @vue/cli
    • #​5497 fix: allow specifying plugin version when calling vue add (@​sodatea)
    • #​5493 fix(ui): the logs from creator should be displayed in the UI (@​sodatea)
    • #​5472 fix(creator): do not override the README.md generated by plugins (@​sodatea)
    • #​5395 Update ProjectPackageManager.js upgrade() method: manage multiple package names separated by spaces (@​motla)
    • #​5424 fix: normalize the file argument of transformScript, fix Windows compatibility (@​sodatea)
  • @vue/cli-plugin-unit-mocha
  • @vue/cli-service
  • @vue/cli-plugin-eslint
  • @vue/cli-shared-utils
  • @vue/cli-plugin-e2e-nightwatch
📝 Documentation
🏠 Internal
  • @vue/babel-preset-app, @vue/cli-plugin-babel, @vue/cli-plugin-e2e-nightwatch, @vue/cli-plugin-eslint, @vue/cli-plugin-typescript, @vue/cli-plugin-unit-jest, @vue/cli-plugin-unit-mocha, @vue/cli-plugin-vuex, @vue/cli-service, @vue/cli-ui-addon-webpack, @vue/cli-ui, @vue/cli
Committers: 14

v4.3.1

Compare Source

🐛 Bug Fix
  • @vue/cli-plugin-eslint
  • @vue/cli
    • #​5360 fix: run migrator in a separator process, fix require cache issues during upgrade (@​sodatea)
Committers: 1

v4.3.0

Compare Source

🚀 New Features
  • @vue/cli-plugin-unit-mocha
    • #​5294 feat(service): Allow mocha unit tests debugger to be bound to a specified IP and port (@​darrylkuhn)
  • @vue/babel-preset-app
  • @vue/cli-service
  • @vue/cli
  • @vue/cli-plugin-typescript
  • @vue/cli-plugin-eslint, @vue/cli-service-global, @vue/cli-ui-addon-widgets
  • @vue/cli-service, @vue/cli-ui-addon-webpack, @vue/cli-ui-addon-widgets, @vue/cli-ui
  • @vue/cli-plugin-router
🐛 Bug Fix
📝 Documentation
🏠 Internal
🔨 Underlying Tools
  • @vue/cli-plugin-eslint
    • #​5273 chore(eslint): bump minimum required eslint-loader version to support ESLint 6 (@​megos)
Committers: 15

v4.2.3

Compare Source

🐛 Bug Fix
  • @vue/cli
  • @vue/cli-service-global
📝 Documentation
🏠 Internal
Committers: 9

v4.2.2

Compare Source

🐛 Bug Fix

v4.2.1

Compare Source

🐛 Bug Fix
📝 Documentation
Committers: 8

v4.2.0

Compare Source

🚀 New Features
  • @vue/cli-plugin-babel, @vue/cli-plugin-eslint, @vue/cli-plugin-typescript, @vue/cli
  • @vue/cli-plugin-unit-jest, @vue/cli-plugin-unit-mocha
  • @vue/cli-ui, @vue/cli
  • @vue/cli-plugin-typescript, @vue/cli-ui
  • @vue/cli
  • @vue/cli-service
  • @vue/babel-preset-app, @vue/cli-plugin-e2e-nightwatch, @vue/cli-plugin-eslint, @vue/cli-plugin-pwa, @vue/cli-ui-addon-webpack, @vue/cli-ui-addon-widgets, @vue/cli-ui, @vue/cli
  • @vue/cli-service, @vue/cli-shared-utils, @vue/cli
  • @vue/babel-preset-app
  • @vue/cli-service-global
🐛 Bug Fix
  • @vue/cli-shared-utils, @vue/cli
    • #​5150 fix: should infer package manager from config if there's no lockfile in the project (@​sodatea)
    • #​5045 refactor: use a plain http request to get package metadata (@​sodatea)
  • @vue/cli
  • @vue/cli-ui, @vue/cli
  • @vue/cli-plugin-e2e-cypress
  • @vue/cli-service
  • @vue/cli-plugin-pwa
  • @vue/cli-plugin-unit-jest, @vue/cli-plugin-unit-mocha
  • @vue/cli-service, @vue/cli-test-utils
  • @vue/cli-plugin-e2e-nightwatch
📝 Documentation
🏠 Internal
  • @vue/babel-preset-app, @vue/cli-plugin-babel
    • #​5133 refactor: remove usage of deprecated babel functions, preparing for babel 8 (@​sodatea)
  • @vue/cli-service
    • #​5123 fix: vue-template-compiler can be optional if @vue/compiler-sfc presents (@​sodatea)
    • #​5060 refactor: use the title option in the html template, instead of hard-code the project name (@​sodatea)
  • @vue/cli
  • @vue/cli-shared-utils
  • @vue/cli-plugin-router, @vue/cli-plugin-typescript, @vue/cli-service
Committers: 17

v4.1.2

Compare Source

🐛 Bug Fix
  • @vue/cli-plugin-pwa
  • @vue/cli
  • @vue/cli-plugin-babel
    • [#&

@mend-for-github-com mend-for-github-com bot added the security fix Security fix generated by WhiteSource label Apr 25, 2023
@mend-for-github-com mend-for-github-com bot changed the title chore(deps): update dependency @vue/cli-service to v5 chore(deps): update dependency @vue/cli-service to v5 - autoclosed Jun 14, 2023
@mend-for-github-com mend-for-github-com bot deleted the whitesource-remediate/vue-cli-service-5.x branch June 14, 2023 21:10
@mend-for-github-com mend-for-github-com bot changed the title chore(deps): update dependency @vue/cli-service to v5 - autoclosed chore(deps): update dependency @vue/cli-service to v5 Jun 19, 2023
@mend-for-github-com mend-for-github-com bot restored the whitesource-remediate/vue-cli-service-5.x branch June 19, 2023 17:49
@mend-for-github-com mend-for-github-com bot reopened this Jun 19, 2023
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/vue-cli-service-5.x branch from a056f24 to 67c3002 Compare June 19, 2023 17:51
@mend-for-github-com mend-for-github-com bot changed the title chore(deps): update dependency @vue/cli-service to v5 chore(deps): update dependency @vue/cli-service to v5 - autoclosed Apr 3, 2024
@mend-for-github-com mend-for-github-com bot deleted the whitesource-remediate/vue-cli-service-5.x branch April 3, 2024 06:46
@mend-for-github-com mend-for-github-com bot changed the title chore(deps): update dependency @vue/cli-service to v5 - autoclosed chore(deps): update dependency @vue/cli-service to v5 Apr 4, 2024
@mend-for-github-com mend-for-github-com bot reopened this Apr 4, 2024
@mend-for-github-com mend-for-github-com bot restored the whitesource-remediate/vue-cli-service-5.x branch April 4, 2024 08:07
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/vue-cli-service-5.x branch from 67c3002 to 0fbd35a Compare April 4, 2024 08:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
security fix Security fix generated by WhiteSource
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants