Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Feb 14, 2023

Bumps liquidjs from 9.22.1 to 10.5.0.

Release notes

Sourced from liquidjs's releases.

v10.5.0

10.5.0 (2023-02-14)

Bug Fixes

  • "ownPropertyOnly" not respected when passed via "renderOptions" (d489916)

Features

  • Adds support for options to CLI and improves usability (#586) (24c8a1e)

v10.4.0

10.4.0 (2023-01-02)

Features

v10.3.3

10.3.3 (2022-12-18)

Bug Fixes

  • type compatible with v9 tag definition, support Context as scope in various render APIs, #570 (fb6a9f8)

v10.3.2

10.3.2 (2022-12-13)

Bug Fixes

v10.3.1

10.3.1 (2022-12-12)

Bug Fixes

  • support Context as evalValue parameter, #568 (0f4916b)

v10.3.0

10.3.0 (2022-12-11)

... (truncated)

Changelog

Sourced from liquidjs's changelog.

10.5.0 (2023-02-14)

Bug Fixes

  • "ownPropertyOnly" not respected when passed via "renderOptions" (d489916)

Features

  • Adds support for options to CLI and improves usability (#586) (24c8a1e)

10.4.0 (2023-01-02)

Features

10.3.3 (2022-12-18)

Bug Fixes

  • type compatible with v9 tag definition, support Context as scope in various render APIs, #570 (fb6a9f8)

10.3.2 (2022-12-13)

Bug Fixes

10.3.1 (2022-12-12)

Bug Fixes

  • support Context as evalValue parameter, #568 (0f4916b)

10.3.0 (2022-12-11)

Features

  • support disable outputEscape for specific filters, #565 (e6db371)

10.2.0 (2022-12-02)

... (truncated)

Commits
  • d9cac4e chore(release): 10.5.0 [skip ci]
  • 8ef9209 docs: add slavivanov and DaRosenberg into contributor list
  • d489916 fix: "ownPropertyOnly" not respected when passed via "renderOptions"
  • 24c8a1e feat: Adds support for options to CLI and improves usability (#586)
  • a661853 docs: update .all-contributorsrc [skip ci]
  • c0c3c07 docs: update README.md [skip ci]
  • a55f44f Added documentation for date ordinals support in date filter via %q (#581)
  • 7f76e13 docs: list sponsors & backers separately on liquidjs.com
  • 3120003 chore(release): 10.4.0 [skip ci]
  • 3f21382 feat: support not operator, #575
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [liquidjs](https://github.com/harttle/liquidjs) from 9.22.1 to 10.5.0.
- [Release notes](https://github.com/harttle/liquidjs/releases)
- [Changelog](https://github.com/harttle/liquidjs/blob/master/CHANGELOG.md)
- [Commits](harttle/liquidjs@v9.22.1...v10.5.0)

---
updated-dependencies:
- dependency-name: liquidjs
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Feb 14, 2023
@guardrails
Copy link

guardrails bot commented Feb 14, 2023

⚠️ We detected 24 security issues in this pull request:

Vulnerable Libraries (24)
Severity Details
Medium pkg:npm/styled-components@5.3.5@5.3.5 (t) - no patch available
High pkg:npm/prismjs@1.27.0@1.27.0 (t) - no patch available
Low pkg:npm/node-fetch@2.6.7@2.6.7 (t) - no patch available
High pkg:npm/flat@5.0.2@5.0.2 (t) - no patch available
High pkg:npm/json5@1.0.1@1.0.1 (t) upgrade to: 2.2.2
High pkg:npm/fb-watchman@2.0.1@2.0.1 (t) - no patch available
Medium pkg:npm/browserslist@3.2.8@3.2.8 (t) - no patch available
High pkg:npm/accept-language-parser@1.5.0@1.5.0 (t) - no patch available
Medium pkg:npm/msgpack5@3.6.1@3.6.1 (t) - no patch available
High pkg:npm/cacheable-request@7.0.2@7.0.2 (t) upgrade to: 10.2.7
Medium pkg:npm/got@10.7.0@10.7.0 (t) - no patch available
High pkg:npm/http-cache-semantics@4.1.0@4.1.0 (t) upgrade to: 4.1.1,4.1.1
Medium pkg:npm/core-js@2.6.12@2.6.12 (t) - no patch available
N/A pkg:npm/debug@2.6.9@2.6.9 (t) upgrade to: 3.1.0
Medium pkg:npm/history@5.0.0@5.0.0 (t) - no patch available
Critical pkg:npm/nodemon@2.0.19@2.0.19 (t) - no patch available
High pkg:npm/revalidator@0.3.1@0.3.1 (t) - no patch available
Medium pkg:npm/react@17.0.2@17.0.2 (t) - no patch available
High pkg:npm/shelljs@0.8.5@0.8.5 (t) - no patch available
High pkg:npm/loader-utils@2.0.4@2.0.4 (t) - no patch available
Medium pkg:npm/@sideway/formula@3.0.0@3.0.0 (t) upgrade to: 3.0.1
Medium pkg:npm/express@4.18.1@4.18.1 (t) - no patch available
High pkg:npm/minimatch@3.0.4@3.0.4 (t) upgrade to: 3.0.5
High pkg:npm/json5@2.2.1@2.2.1 (t) upgrade to: 2.2.2

More info on how to fix Vulnerable Libraries in JavaScript.


👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.

@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Feb 28, 2023

Superseded by #79.

@dependabot dependabot bot closed this Feb 28, 2023
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/liquidjs-10.5.0 branch February 28, 2023 22:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant