Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): bump @nextcloud/l10n from 2.2.0 to 3.1.0 #3920

Closed

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github May 11, 2024

Bumps @nextcloud/l10n from 2.2.0 to 3.1.0.

Release notes

Sourced from @​nextcloud/l10n's releases.

v3.1.0

3.1.0 - 2024-05-07

Added

 // Example
 t(
 	'my-app',
 	'{a}{userInput}{a_end}',
 	{
 		a: {
 			value: '<a>',
 			escape: false,
 		},
 		userInput: somePossiblyInsecureValue, // This will be escaped
 		a_end: {
 			value: '</a>',
 			escape: false,
 		}
 	},
 )

v3.0.1

What's Changed

  • Fixed type definitions.

v3.0.0

What's Changed

... (truncated)

Changelog

Sourced from @​nextcloud/l10n's changelog.

3.1.0 - 2024-05-07

Added

 // Example
 t(
 	'my-app',
 	'{a}{userInput}{a_end}',
 	{
 		a: {
 			value: '<a>',
 			escape: false,
 		},
 		userInput: somePossiblyInsecureValue, // This will be escaped
 		a_end: {
 			value: '</a>',
 			escape: false,
 		}
 	},
 )

3.0.1 - 2024-05-04

Fixed

  • Ensure that built type definitions are bundled with the release and located in the correct directory

3.0.0 - 2024-05-02

Full Changelog

Breaking changes

Instead of also sanitizing the replacing variables, now only the result is sanitized, see [pull request #648](nextcloud-libraries/nextcloud-l10n#648).

This will improve the performance if multiple placeholders are used and it allows this, while the string is still sanitized:

t(
	'See {linkstart}documentation{linkend}',
	{
		linkstart: '<a ...>',
		linkend: '</a>',
	},
	// No number
	undefined,
	{
		// Do not escape the result as we want the HTML anchor element
</tr></table> 

... (truncated)

Commits
  • e0b16b5 Merge pull request #758 from nextcloud-libraries/chore/3-1-0
  • a0e1f86 chore: Prepare 3.1.0 release
  • 558a387 Merge pull request #756 from nextcloud-libraries/feat/allow-per-replacement-e...
  • 5cf6b4b Merge pull request #757 from nextcloud-libraries/chore/workflows
  • 5e96b8f fix(ci): Update workflows from organization
  • 7775257 feat: Allow setting escape option per parameter replacing
  • 91214fa chore: Prepare release 3.0.1
  • 84894b8 fix: Ensure types are generated in the correct output directory
  • 2bf8d09 Merge pull request #755 from nextcloud-libraries/dependabot/npm_and_yarn/domp...
  • 610bb86 Merge pull request #754 from nextcloud-libraries/dependabot/npm_and_yarn/vite...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added 3. to review Waiting for reviews feature: dependencies Pull requests that update a dependency file labels May 11, 2024
Copy link

codecov bot commented May 11, 2024

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 2.41%. Comparing base (8c3a4f5) to head (5183c40).
Report is 75 commits behind head on main.

Current head 5183c40 differs from pull request most recent head 44a24b4

Please upload reports for the commit 44a24b4 to get more accurate results.

Additional details and impacted files
@@           Coverage Diff            @@
##            main   #3920      +/-   ##
========================================
- Coverage   2.44%   2.41%   -0.03%     
========================================
  Files         90      90              
  Lines       4541    4588      +47     
  Branches    1163    1166       +3     
========================================
  Hits         111     111              
- Misses      4310    4356      +46     
- Partials     120     121       +1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/nextcloud/l10n-3.1.0 branch from 5183c40 to a4176a8 Compare May 11, 2024 01:37
Bumps [@nextcloud/l10n](https://github.com/nextcloud-libraries/nextcloud-l10n) from 2.2.0 to 3.1.0.
- [Release notes](https://github.com/nextcloud-libraries/nextcloud-l10n/releases)
- [Changelog](https://github.com/nextcloud-libraries/nextcloud-l10n/blob/main/CHANGELOG.md)
- [Commits](nextcloud-libraries/nextcloud-l10n@v2.2.0...v3.1.0)

---
updated-dependencies:
- dependency-name: "@nextcloud/l10n"
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/nextcloud/l10n-3.1.0 branch from a4176a8 to 44a24b4 Compare May 18, 2024 03:09
@st3iny st3iny closed this May 29, 2024
Copy link
Contributor Author

dependabot bot commented on behalf of github May 29, 2024

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot bot deleted the dependabot/npm_and_yarn/nextcloud/l10n-3.1.0 branch May 29, 2024 07:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
3. to review Waiting for reviews feature: dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant