Bumps node-fetch from 2.6.0 to 2.6.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/bitinn/node-fetch/releases">node-fetch's releases</a>.</em></p> <blockquote> <h2>v2.6.1</h2> <p><strong>This is an important security release. It is strongly recommended to update as soon as possible.</strong></p> <p>See <a href="https://github.com/node-fetch/node-fetch/blob/master/docs/CHANGELOG.md#v261">CHANGELOG</a> for details.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/node-fetch/node-fetch/blob/master/docs/CHANGELOG.md">node-fetch's changelog</a>.</em></p> <blockquote> <h2>v2.6.1</h2> <p><strong>This is an important security release. It is strongly recommended to update as soon as possible.</strong></p> <ul> <li>Fix: honor the <code>size</code> option after following a redirect.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/node-fetch/node-fetch/commit/b5e2e41b2b50bf2997720d6125accaf0dd68c0ab"><code>b5e2e41</code></a> update version number</li> <li><a href="https://github.com/node-fetch/node-fetch/commit/2358a6c2563d1730a0cdaccc197c611949f6a334"><code>2358a6c</code></a> Honor the <code>size</code> option after following a redirect and revert data uri support</li> <li><a href="https://github.com/node-fetch/node-fetch/commit/8c197f8982a238b3c345c64b17bfa92e16b4f7c4"><code>8c197f8</code></a> docs: Fix typos and grammatical errors in README.md (<a href="https://github-redirect.dependabot.com/bitinn/node-fetch/issues/686">#686</a>)</li> <li><a href="https://github.com/node-fetch/node-fetch/commit/1e99050f944ac435fce26a9549eadcc2419a968a"><code>1e99050</code></a> fix: Change error message thrown with redirect mode set to error (<a href="https://github-redirect.dependabot.com/bitinn/node-fetch/issues/653">#653</a>)</li> <li><a href="https://github.com/node-fetch/node-fetch/commit/244e6f63d42025465796e3ca4ce813bf2c31fc5b"><code>244e6f6</code></a> docs: Show backers in README</li> <li><a href="https://github.com/node-fetch/node-fetch/commit/6a5d192034a0f438551dffb6d2d8df2c00921d16"><code>6a5d192</code></a> fix: Properly parse meta tag when parameters are reversed (<a href="https://github-redirect.dependabot.com/bitinn/node-fetch/issues/682">#682</a>)</li> <li><a href="https://github.com/node-fetch/node-fetch/commit/47a24a03eb49a49d81b768892aee10074ed54a91"><code>47a24a0</code></a> chore: Add opencollective badge</li> <li><a href="https://github.com/node-fetch/node-fetch/commit/7b136627c537cb24430b0310638c9177a85acee1"><code>7b13662</code></a> chore: Add funding link</li> <li><a href="https://github.com/node-fetch/node-fetch/commit/5535c2ed478d418969ecfd60c16453462de2a53f"><code>5535c2e</code></a> fix: Check for global.fetch before binding it (<a href="https://github-redirect.dependabot.com/bitinn/node-fetch/issues/674">#674</a>)</li> <li><a href="https://github.com/node-fetch/node-fetch/commit/1d5778ad0d910dbd1584fb407a186f5a0bc1ea22"><code>1d5778a</code></a> docs: Add Discord badge</li> <li>Additional commits viewable in <a href="https://github.com/bitinn/node-fetch/compare/v2.6.0...v2.6.1">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~akepinski">akepinski</a>, a new releaser for node-fetch since your current version.</p> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

</details>

Bumps gatsby-plugin-typescript from 2.1.26 to 2.4.19. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/gatsbyjs/gatsby/blob/master/packages/gatsby-plugin-typescript/CHANGELOG.md">gatsby-plugin-typescript's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/gatsbyjs/gatsby/compare/[email protected]@2.4.19">2.4.19</a> (2020-09-08)</h2> <p><strong>Note:</strong> Version bump only for package gatsby-plugin-typescript</p> <h2><a href="https://github.com/gatsbyjs/gatsby/compare/[email protected]@2.4.18">2.4.18</a> (2020-08-10)</h2> <p><strong>Note:</strong> Version bump only for package gatsby-plugin-typescript</p> <h2><a href="https://github.com/gatsbyjs/gatsby/compare/[email protected]@2.4.17">2.4.17</a> (2020-08-06)</h2> <p><strong>Note:</strong> Version bump only for package gatsby-plugin-typescript</p> <h2><a href="https://github.com/gatsbyjs/gatsby/compare/[email protected]@2.4.16">2.4.16</a> (2020-07-20)</h2> <p><strong>Note:</strong> Version bump only for package gatsby-plugin-typescript</p> <h2><a href="https://github.com/gatsbyjs/gatsby/compare/[email protected]@2.4.15">2.4.15</a> (2020-07-15)</h2> <p><strong>Note:</strong> Version bump only for package gatsby-plugin-typescript</p> <h2><a href="https://github.com/gatsbyjs/gatsby/compare/[email protected]@2.4.14">2.4.14</a> (2020-07-09)</h2> <p><strong>Note:</strong> Version bump only for package gatsby-plugin-typescript</p> <h2><a href="https://github.com/gatsbyjs/gatsby/compare/[email protected]@2.4.13">2.4.13</a> (2020-07-03)</h2> <p><strong>Note:</strong> Version bump only for package gatsby-plugin-typescript</p> <h2><a href="https://github.com/gatsbyjs/gatsby/compare/[email protected]@2.4.12">2.4.12</a> (2020-07-02)</h2> <p><strong>Note:</strong> Version bump only for package gatsby-plugin-typescript</p> <h2><a href="https://github.com/gatsbyjs/gatsby/compare/[email protected]@2.4.11">2.4.11</a> (2020-07-02)</h2> <p><strong>Note:</strong> Version bump only for package gatsby-plugin-typescript</p> <h2><a href="https://github.com/gatsbyjs/gatsby/compare/[email protected]@2.4.10">2.4.10</a> (2020-07-01)</h2> <p><strong>Note:</strong> Version bump only for package gatsby-plugin-typescript</p> <h2><a href="https://github.com/gatsbyjs/gatsby/compare/[email protected]@2.4.9">2.4.9</a> (2020-07-01)</h2> <p><strong>Note:</strong> Version bump only for package gatsby-plugin-typescript</p> <h2><a href="https://github.com/gatsbyjs/gatsby/compare/[email protected]@2.4.8">2.4.8</a> (2020-06-24)</h2> <p><strong>Note:</strong> Version bump only for package gatsby-plugin-typescript</p> <h2><a href="https://github.com/gatsbyjs/gatsby/compare/[email protected]@2.4.7">2.4.7</a> (2020-06-22)</h2> <!-- raw HTML omitted --> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/gatsbyjs/gatsby/commit/ef86336b2c7c08b3b7d3278fdd6cbe2334798ed6"><code>ef86336</code></a> chore(release): Publish</li> <li><a href="https://github.com/gatsbyjs/gatsby/commit/4765a4ed1685af60d057d293d20c042694135ab5"><code>4765a4e</code></a> chore(release): Publish</li> <li><a href="https://github.com/gatsbyjs/gatsby/commit/6cad2def00c0de5ee9d180f3db65431ea1b92b90"><code>6cad2de</code></a> chore(release): Publish</li> <li><a href="https://github.com/gatsbyjs/gatsby/commit/5f54f76318001c4011576cf8608a3244c0e1372e"><code>5f54f76</code></a> chore(release): Publish</li> <li><a href="https://github.com/gatsbyjs/gatsby/commit/0d236e382a5c7e1c0a583382cf2c82bd2ae23384"><code>0d236e3</code></a> chore(release): Publish</li> <li><a href="https://github.com/gatsbyjs/gatsby/commit/960d523861b855c1fea45ceefe9cd01db760995b"><code>960d523</code></a> chore(release): Publish</li> <li><a href="https://github.com/gatsbyjs/gatsby/commit/c9692abaa87d9279b31b74624623e0491991d80c"><code>c9692ab</code></a> chore(release): Publish</li> <li><a href="https://github.com/gatsbyjs/gatsby/commit/e623913b2cf9a6fc2894b2c3bf0ebe0f6d8ecb1a"><code>e623913</code></a> chore(release): Publish</li> <li><a href="https://github.com/gatsbyjs/gatsby/commit/fa41d8a5bce683cddb3d271a09baed9ee25fe6b5"><code>fa41d8a</code></a> chore(release): Publish</li> <li><a href="https://github.com/gatsbyjs/gatsby/commit/ed034d4e39e8990233ff6325db642f16aec65437"><code>ed034d4</code></a> chore(release): Publish</li> <li>Additional commits viewable in <a href="https://github.com/gatsbyjs/gatsby/commits/[email protected]/packages/gatsby-plugin-typescript">compare view</a></li> </ul> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

</details>

Bumps webpack-merge from 4.2.2 to 5.1.4. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/survivejs/webpack-merge/blob/master/CHANGELOG.md">webpack-merge's changelog</a>.</em></p> <blockquote> <h2>5.1.4 / 2020-09-09</h2> <ul> <li>Fix - Expose <code>CustomizeRule</code> for TypeScript users <a href="https://github-redirect.dependabot.com/survivejs/webpack-merge/issues/147">#147</a></li> </ul> <h2>5.1.3 / 2020-08-30</h2> <ul> <li>Fix - Allow merging a <code>RegExp</code> to itself <a href="https://github-redirect.dependabot.com/survivejs/webpack-merge/issues/145">#145</a></li> </ul> <h2>5.1.2 / 2020-08-18</h2> <ul> <li>Fix - Allow overriding an object field with <code>null</code> <a href="https://github-redirect.dependabot.com/survivejs/webpack-merge/issues/144">#144</a></li> </ul> <h2>5.1.1 / 2020-08-04</h2> <ul> <li>Fix - Drop <code><reference types="webpack-dev-server" /></code> from <strong>index.d.ts</strong> <a href="https://github-redirect.dependabot.com/survivejs/webpack-merge/issues/143">#143</a></li> </ul> <h2>5.1.0 / 2020-08-03</h2> <ul> <li>Feature - Expose <code>merge</code> as <code>default</code> for backwards-compatibility with TypeScript. Now <code>import merge from "webpack-merge";</code> works there. In CommonJS, the default alias is exposed through <code>default</code> property due to technical constraints.</li> </ul> <h2>5.0.9 / 2020-07-09</h2> <ul> <li>Fix - Don't crash on <code>merge()</code> and <code>merge([])</code>. Now <code>{}</code> is returned in these corner cases.</li> </ul> <h2>5.0.8 / 2020-07-07</h2> <ul> <li>Fix - Support Node 10 <a href="https://github-redirect.dependabot.com/survivejs/webpack-merge/issues/138">#138</a></li> </ul> <h2>5.0.7 / 2020-07-06</h2> <ul> <li>Fix - Drop tslib dependency by setting <code>"importHelpers": false,</code></li> </ul> <h2>5.0.6 / 2020-07-06</h2> <ul> <li>Fix - Add tslib to dependencies</li> </ul> <h2>5.0.5 / 2020-07-06</h2> <ul> <li>Tech - Optimize build size (UMD isn't needed)</li> </ul> <h2>5.0.4 / 2020-07-06</h2> <ul> <li>Documentation - Use CommonJS imports at the examples. <a href="https://github-redirect.dependabot.com/survivejs/webpack-merge/issues/137">#137</a></li> </ul> <h2>5.0.3 / 2020-07-06</h2> <ul> <li>Feature - Support TypeScript out of the box. <a href="https://github-redirect.dependabot.com/survivejs/webpack-merge/issues/84">#84</a> <a href="https://github-redirect.dependabot.com/survivejs/webpack-merge/issues/86">#86</a> <a href="https://github-redirect.dependabot.com/survivejs/webpack-merge/issues/95">#95</a> <a href="https://github-redirect.dependabot.com/survivejs/webpack-merge/issues/110">#110</a> <a href="https://github-redirect.dependabot.com/survivejs/webpack-merge/issues/112">#112</a></li> <li>Deprecation - <code>merge.smart</code> has been dropped as it's tricky to support all the corner cases. Instead, it's better to use the provided utilities to put together a <code>merge</code> that fits your case.</li> <li>Deprecation - <code>mergeStrategy</code> has been dropped in favor of using <code>mergeWithCustomize</code> with <code>customizeArray</code> and <code>customizeObject</code>.</li> <li>Deprecation - <code>merge.multiple</code> has been dropped as the functionality was too specific and it's better to implement in the user space if needed.</li> </ul> <!-- raw HTML omitted --> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/survivejs/webpack-merge/commit/4b917df7d191856ff24c1c337afb2ba44c2ccf38"><code>4b917df</code></a> 5.1.4</li> <li><a href="https://github.com/survivejs/webpack-merge/commit/c4e293b70389959edc10ea5baf8716b321f17950"><code>c4e293b</code></a> fix: Expose CustomizeRule for TypeScript users</li> <li><a href="https://github.com/survivejs/webpack-merge/commit/10cf6fff1df599a0fab564b3409c1e634a8b7a8b"><code>10cf6ff</code></a> chore: var -> let</li> <li><a href="https://github.com/survivejs/webpack-merge/commit/cf5b5fe61858fd75e657832817a44fd40f07e04c"><code>cf5b5fe</code></a> chore: Resolve tests to ts during development</li> <li><a href="https://github.com/survivejs/webpack-merge/commit/fcd51678b43d8a92957d1400b27a96beeb42d933"><code>fcd5167</code></a> 5.1.3</li> <li><a href="https://github.com/survivejs/webpack-merge/commit/fd8449bd840830f791e66f3b4873d1c268bbe98c"><code>fd8449b</code></a> fix: Allow merging a RegExp to itself</li> <li><a href="https://github.com/survivejs/webpack-merge/commit/17fb00fa22d5999682e473b9026c057b8b7888c9"><code>17fb00f</code></a> fix: Drop .only from test</li> <li><a href="https://github.com/survivejs/webpack-merge/commit/f65cc3dc50a5958774b4ca2e1e849c4513c6de95"><code>f65cc3d</code></a> 5.1.2</li> <li><a href="https://github.com/survivejs/webpack-merge/commit/4eb811cea573fc7cf600a750ae4aec32708864d0"><code>4eb811c</code></a> fix: Allow overriding an object field with null</li> <li><a href="https://github.com/survivejs/webpack-merge/commit/2e8780ead820b9b2eecb13f394613acf325c0d91"><code>2e8780e</code></a> 5.1.1</li> <li>Additional commits viewable in <a href="https://github.com/survivejs/webpack-merge/compare/v4.2.2...v5.1.4">compare view</a></li> </ul> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

</details>

Bumps rollup from 0.68.2 to 2.26.11. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/rollup/rollup/releases">rollup's releases</a>.</em></p> <blockquote> <h2>v2.26.11</h2> <p><em>2020-09-08</em></p> <h3>Bug Fixes</h3> <ul> <li>Do not fail for unknown nodes as if statement branches (<a href="https://github-redirect.dependabot.com/rollup/rollup/issues/3769">#3769</a>)</li> </ul> <h3>Pull Requests</h3> <ul> <li><a href="https://github-redirect.dependabot.com/rollup/rollup/pull/3769">#3769</a>: Handle debugger statements as if-statement branches (<a href="https://github.com/lukastaegert">@lukastaegert</a>)</li> </ul> <h2>v2.26.10</h2> <p><em>2020-09-04</em></p> <h3>Bug Fixes</h3> <ul> <li>Do not create invalid code when simplifying expressions in return statements that contain line comments (<a href="https://github-redirect.dependabot.com/rollup/rollup/issues/3762">#3762</a>)</li> </ul> <h3>Pull Requests</h3> <ul> <li><a href="https://github-redirect.dependabot.com/rollup/rollup/pull/3762">#3762</a>: Handle line-comments when removing line-breaks to prevent ASI (<a href="https://github.com/lukastaegert">@lukastaegert</a>)</li> </ul> <h2>v2.26.9</h2> <p><em>2020-09-01</em></p> <h3>Bug Fixes</h3> <ul> <li>Add regular expression support to watch include/exclude types (<a href="https://github-redirect.dependabot.com/rollup/rollup/issues/3754">#3754</a>)</li> </ul> <h3>Pull Requests</h3> <ul> <li><a href="https://github-redirect.dependabot.com/rollup/rollup/pull/3754">#3754</a>: Add RegExp to the include and exclude fields of the WatcherOptions type (<a href="https://github.com/dagda1">@dagda1</a>)</li> <li><a href="https://github-redirect.dependabot.com/rollup/rollup/pull/3756">#3756</a>: Update FAQ: I think it was meant "external" instead of "other-entry.js" (<a href="https://github.com/madacol">@madacol</a>)</li> </ul> <h2>v2.26.8</h2> <p><em>2020-08-29</em></p> <h3>Bug Fixes</h3> <ul> <li>Make sure that both unresolved and resolved ids are passed to the <code>external</code> option in all cases (<a href="https://github-redirect.dependabot.com/rollup/rollup/issues/3753">#3753</a>)</li> </ul> <h3>Pull Requests</h3> <ul> <li><a href="https://github-redirect.dependabot.com/rollup/rollup/pull/3753">#3753</a>: Also pass resolved ids to external if they use the object for (<a href="https://github.com/lukastaegert">@lukastaegert</a>)</li> </ul> <h2>v2.26.7</h2> <p><em>2020-08-28</em></p> <h3>Bug Fixes</h3> <ul> <li>Avoid invalid code when rendering hoisted variable declarations from dead branches (<a href="https://github-redirect.dependabot.com/rollup/rollup/issues/3752">#3752</a>)</li> <li>Mark the <code>options</code> parameter of <code>this.parse</code> as optional for TypeScript plugins (<a href="https://github-redirect.dependabot.com/rollup/rollup/issues/3750">#3750</a>)</li> </ul> <h3>Pull Requests</h3> <ul> <li><a href="https://github-redirect.dependabot.com/rollup/rollup/pull/3750">#3750</a>: Make <code>options</code> of <code>PluginContext#parse</code> optional (<a href="https://github.com/intrnl">@intrnl</a>)</li> <li><a href="https://github-redirect.dependabot.com/rollup/rollup/pull/3752">#3752</a>: Extract hoisted variables from dead branches (<a href="https://github.com/lukastaegert">@lukastaegert</a>)</li> </ul> <h2>v2.26.6</h2> <p><em>2020-08-27</em></p> <!-- raw HTML omitted --> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/rollup/rollup/blob/master/CHANGELOG.md">rollup's changelog</a>.</em></p> <blockquote> <h2>2.26.11</h2> <p><em>2020-09-08</em></p> <h3>Bug Fixes</h3> <ul> <li>Do not fail for unknown nodes as if statement branches (<a href="https://github-redirect.dependabot.com/rollup/rollup/issues/3769">#3769</a>)</li> </ul> <h3>Pull Requests</h3> <ul> <li><a href="https://github-redirect.dependabot.com/rollup/rollup/pull/3769">#3769</a>: Handle debugger statements as if-statement branches (<a href="https://github.com/lukastaegert">@lukastaegert</a>)</li> </ul> <h2>2.26.10</h2> <p><em>2020-09-04</em></p> <h3>Bug Fixes</h3> <ul> <li>Do not create invalid code when simplifying expressions in return statements that contain line comments (<a href="https://github-redirect.dependabot.com/rollup/rollup/issues/3762">#3762</a>)</li> </ul> <h3>Pull Requests</h3> <ul> <li><a href="https://github-redirect.dependabot.com/rollup/rollup/pull/3762">#3762</a>: Handle line-comments when removing line-breaks to prevent ASI (<a href="https://github.com/lukastaegert">@lukastaegert</a>)</li> </ul> <h2>2.26.9</h2> <p><em>2020-09-01</em></p> <h3>Bug Fixes</h3> <ul> <li>Add regular expression support to watch include/exclude types (<a href="https://github-redirect.dependabot.com/rollup/rollup/issues/3754">#3754</a>)</li> </ul> <h3>Pull Requests</h3> <ul> <li><a href="https://github-redirect.dependabot.com/rollup/rollup/pull/3754">#3754</a>: Add RegExp to the include and exclude fields of the WatcherOptions type (<a href="https://github.com/dagda1">@dagda1</a>)</li> <li><a href="https://github-redirect.dependabot.com/rollup/rollup/pull/3756">#3756</a>: Update FAQ: I think it was meant "external" instead of "other-entry.js" (<a href="https://github.com/madacol">@madacol</a>)</li> </ul> <h2>2.26.8</h2> <p><em>2020-08-29</em></p> <h3>Bug Fixes</h3> <ul> <li>Make sure that both unresolved and resolved ids are passed to the <code>external</code> option in all cases (<a href="https://github-redirect.dependabot.com/rollup/rollup/issues/3753">#3753</a>)</li> </ul> <h3>Pull Requests</h3> <ul> <li><a href="https://github-redirect.dependabot.com/rollup/rollup/pull/3753">#3753</a>: Also pass resolved ids to external if they use the object for (<a href="https://github.com/lukastaegert">@lukastaegert</a>)</li> </ul> <h2>2.26.7</h2> <p><em>2020-08-28</em></p> <h3>Bug Fixes</h3> <ul> <li>Avoid invalid code when rendering hoisted variable declarations from dead branches (<a href="https://github-redirect.dependabot.com/rollup/rollup/issues/3752">#3752</a>)</li> <li>Mark the <code>options</code> parameter of <code>this.parse</code> as optional for TypeScript plugins (<a href="https://github-redirect.dependabot.com/rollup/rollup/issues/3750">#3750</a>)</li> </ul> <h3>Pull Requests</h3> <ul> <li><a href="https://github-redirect.dependabot.com/rollup/rollup/pull/3750">#3750</a>: Make <code>options</code> of <code>PluginContext#parse</code> optional (<a href="https://github.com/intrnl">@intrnl</a>)</li> <li><a href="https://github-redirect.dependabot.com/rollup/rollup/pull/3752">#3752</a>: Extract hoisted variables from dead branches (<a href="https://github.com/lukastaegert">@lukastaegert</a>)</li> </ul> <h2>2.26.6</h2> <p><em>2020-08-27</em></p> <!-- raw HTML omitted --> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/rollup/rollup/commit/022770a8058cb3598ea8b0c5df12384bcf7bc7ff"><code>022770a</code></a> 2.26.11</li> <li><a href="https://github.com/rollup/rollup/commit/6697ee41df25cb8353a15dccb650d2708bdbf536"><code>6697ee4</code></a> Handle debugger statements as if-statement branches (<a href="https://github-redirect.dependabot.com/rollup/rollup/issues/3769">#3769</a>)</li> <li><a href="https://github.com/rollup/rollup/commit/fe0bdd6702056ef9c6c2f842af378cbc809dd113"><code>fe0bdd6</code></a> 2.26.10</li> <li><a href="https://github.com/rollup/rollup/commit/b681b7745c38b4b6b33deb2a321a38c541d78953"><code>b681b77</code></a> Update changelog</li> <li><a href="https://github.com/rollup/rollup/commit/4db9f89f036019ddfd98a3e5a9146b335a5828ec"><code>4db9f89</code></a> Handle line-comments when removing line-breaks to prevent ASI (<a href="https://github-redirect.dependabot.com/rollup/rollup/issues/3762">#3762</a>)</li> <li><a href="https://github.com/rollup/rollup/commit/581c1fcb0e9bbfba901af63e8c3c8c74bbd0dd6a"><code>581c1fc</code></a> Fix api docs loadconfigfile (<a href="https://github-redirect.dependabot.com/rollup/rollup/issues/3757">#3757</a>)</li> <li><a href="https://github.com/rollup/rollup/commit/266fd8811de005134966c4a1b05f79c924b4eee3"><code>266fd88</code></a> 2.26.9</li> <li><a href="https://github.com/rollup/rollup/commit/f0bf70703cb7c0fc51e16801aa68abe37a69bd51"><code>f0bf707</code></a> Update changelog</li> <li><a href="https://github.com/rollup/rollup/commit/35bdac700fd7aa556aa70121258404057a95a9e7"><code>35bdac7</code></a> add RegExp to the include and exclude fields of the WatcherOptions type (<a href="https://github-redirect.dependabot.com/rollup/rollup/issues/3754">#3754</a>)</li> <li><a href="https://github.com/rollup/rollup/commit/379f2d6d31fd122ae3f64b8a9dbe4edb75d2edbb"><code>379f2d6</code></a> Update changelog</li> <li>Additional commits viewable in <a href="https://github.com/rollup/rollup/compare/v0.68.2...v2.26.11">compare view</a></li> </ul> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

</details>

Bumps anser from 1.4.9 to 2.0.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/IonicaBizau/anser/releases">anser's releases</a>.</em></p> <blockquote> <h2>2.0.0</h2> <p><strong>Multiple decorations</strong> :art: Thanks <a href="https://github.com/ktunkiewicz">@ktunkiewicz</a>! :cake: For more details see <a href="https://github-redirect.dependabot.com/IonicaBizau/anser/issues/56">#56</a>.</p> <h2>1.4.10</h2> <p>Update docs and licence year. :rocket:</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/IonicaBizau/anser/commit/26d5cd3026cad686400a3de364b3ed53d2e3a33d"><code>26d5cd3</code></a> Updated docs</li> <li><a href="https://github.com/IonicaBizau/anser/commit/48c0cbeec3b1232324aceea1672cf1b418b6af98"><code>48c0cbe</code></a> Merge branch 'multiple_decorations' of <a href="https://github.com/ktunkiewicz/anser">https://github.com/ktunkiewicz/anser</a> i...</li> <li><a href="https://github.com/IonicaBizau/anser/commit/4b31a8aad6d2841a3d3f908e2cb340cd712c65ec"><code>4b31a8a</code></a> :arrow_up: 2.0.0 :tada:</li> <li><a href="https://github.com/IonicaBizau/anser/commit/b71f99ca54465b885159c1d78a8bcb0ae55c9cef"><code>b71f99c</code></a> adding support for reversing fb and bf colors</li> <li><a href="https://github.com/IonicaBizau/anser/commit/4df2eabcce696bac262cac64dc10c29bbfa85b62"><code>4df2eab</code></a> adding support for multiple decorations per chunk</li> <li><a href="https://github.com/IonicaBizau/anser/commit/b77b804053ab3549b31910d5e00586849c9d8eb0"><code>b77b804</code></a> Updated docs</li> <li><a href="https://github.com/IonicaBizau/anser/commit/a962348bf51aefb2412bf042adeb44210308112d"><code>a962348</code></a> :arrow_up: 1.4.10 :tada:</li> <li><a href="https://github.com/IonicaBizau/anser/commit/fdb895f973107599b4d5ef026c93d47649d368e3"><code>fdb895f</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/IonicaBizau/anser/issues/54">#54</a> from IonicaBizau/dependabot/npm_and_yarn/lodash-4.17.19</li> <li><a href="https://github.com/IonicaBizau/anser/commit/0593076229181f80f671bb8c0495ce5bdb0dcda4"><code>0593076</code></a> :arrow_up: Bump lodash from 4.17.15 to 4.17.19</li> <li><a href="https://github.com/IonicaBizau/anser/commit/8f2c5ce91dc348a4f09e6c7c9cefacae6ccb91ff"><code>8f2c5ce</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/IonicaBizau/anser/issues/51">#51</a> from IonicaBizau/dependabot/npm_and_yarn/lodash-4.17.15</li> <li>Additional commits viewable in <a href="https://github.com/IonicaBizau/anser/compare/1.4.9...2.0.0">compare view</a></li> </ul> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

</details>

Bumps http-proxy from 1.18.0 to 1.18.1. This update includes a security fix. <details> <summary>Vulnerabilities fixed</summary> <p><em>Sourced from <a href="https://github.com/advisories/GHSA-6x33-pw7p-hmpq">The GitHub Security Advisory Database</a>.</em></p> <blockquote> <p><strong>Denial of Service in http-proxy</strong> Versions of <code>http-proxy</code> prior to 1.18.1 are vulnerable to Denial of Service. An HTTP request with a long body triggers an <code>ERR_HTTP_HEADERS_SENT</code> unhandled exception that crashes the proxy server. This is only possible when the proxy server sets headers in the proxy request using the <code>proxyReq.setHeader</code> function.</p> <p>For a proxy server running on <code>http://localhost:3000</code>, the following curl request triggers the unhandled exception:<br /> <code>curl -XPOST http://localhost:3000 -d "$(python -c 'print("x"*1025)')"</code></p> <h2>Recommendation</h2> <p>Upgrade to version 1.18.1 or later</p> <p>Affected versions: < 1.18.1</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/http-party/node-http-proxy/blob/master/CHANGELOG.md">http-proxy's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/http-party/node-http-proxy/compare/1.18.0...v1.18.1">v1.18.1</a> - 2020-05-17</h2> <h3>Merged</h3> <ul> <li>Skip sending the proxyReq event when the expect header is present <a href="https://github-redirect.dependabot.com/http-party/node-http-proxy/pull/1447"><code>#1447</code></a></li> <li>Remove node6 support, add node12 to build <a href="https://github-redirect.dependabot.com/http-party/node-http-proxy/pull/1397"><code>#1397</code></a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/http-party/node-http-proxy/commit/9b96cd725127a024dabebec6c7ea8c807272223d"><code>9b96cd7</code></a> 1.18.1</li> <li><a href="https://github.com/http-party/node-http-proxy/commit/335aeeba2f0c286dc89c402eeb76af47834c89a3"><code>335aeeb</code></a> Skip sending the proxyReq event when the expect header is present (<a href="https://github-redirect.dependabot.com/http-party/node-http-proxy/issues/1447">#1447</a>)</li> <li><a href="https://github.com/http-party/node-http-proxy/commit/dba39668ba4c9ad461316e834b2d64b77e1ca88e"><code>dba3966</code></a> Remove node6 support, add node12 to build (<a href="https://github-redirect.dependabot.com/http-party/node-http-proxy/issues/1397">#1397</a>)</li> <li>See full diff in <a href="https://github.com/http-party/node-http-proxy/compare/1.18.0...1.18.1">compare view</a></li> </ul> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

</details>

Bumps @types/jest from 24.9.0 to 26.0.13. <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/jest">compare view</a></li> </ul> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

</details>

Bumps @hapi/hoek from 8.5.0 to 8.5.1. This update includes a security fix. <details> <summary>Vulnerabilities fixed</summary> <p><em>Sourced from <a href="https://github.com/advisories/GHSA-22h7-7wwg-qmgg">The GitHub Security Advisory Database</a>.</em></p> <blockquote> <p><strong>Prototype Pollution in @hapi/hoek</strong> Versions of <code>@hapi/hoek</code> prior to 8.5.1 and 9.0.3 are vulnerable to Prototype Pollution. The <code>clone</code> function fails to prevent the modification of the Object prototype when passed specially-crafted input. Attackers may use this to change existing properties that exist in all objects, which may lead to Denial of Service or Remote Code Execution in specific circumstances.<br /> This issue <strong>does not</strong> affect hapi applications since the framework protects against such malicious inputs. Applications that use <code>@hapi/hoek</code> outside of the hapi ecosystem may be vulnerable.</p> <h2>Recommendation</h2> <p>Update to version 8.5.1, 9.0.3 or later.</p> <p>Affected versions: >= 8.3.2 < 8.5.1</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/hapijs/hoek/commit/5bd73f642b0e21a92fc582ad2b489301753d1e01"><code>5bd73f6</code></a> 8.5.1</li> <li><a href="https://github.com/hapijs/hoek/commit/4d0804bc6135ad72afdc5e1ec002b935b2f5216a"><code>4d0804b</code></a> Backport <a href="https://github-redirect.dependabot.com/hapijs/hoek/issues/352">#352</a>. Closes <a href="https://github-redirect.dependabot.com/hapijs/hoek/issues/353">#353</a></li> <li>See full diff in <a href="https://github.com/hapijs/hoek/compare/v8.5.0...v8.5.1">compare view</a></li> </ul> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

</details>

Bumps bl from 3.0.0 to 3.0.1. This update includes a security fix. <details> <summary>Vulnerabilities fixed</summary> <p><em>Sourced from <a href="https://github.com/advisories/GHSA-pp7h-53gx-mx7r">The GitHub Security Advisory Database</a>.</em></p> <blockquote> <p><strong>Remote Memory Exposure in bl</strong> A buffer over-read vulnerability exists in bl <4.0.3, <3.0.1 and <2.2.1 which could allow an attacker to supply user input (even typed) that if it ends up in consume() argument and can become negative, the BufferList state can be corrupted, tricking it into exposing uninitialized memory via regular .slice() calls.</p> <p>Affected versions: = 3.0.0</p> </blockquote> </details> <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/rvagg/bl/releases">bl's releases</a>.</em></p> <blockquote> <h2>v3.0.1</h2> <p>Fix unintialized memory access</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/rvagg/bl/commit/84e1852465572927d9151e6484f351d712b94dea"><code>84e1852</code></a> Bumped v3.0.1</li> <li><a href="https://github.com/rvagg/bl/commit/8a8c13c880e2bef519133ea43e0e9b78b5d0c91e"><code>8a8c13c</code></a> Fix unintialized memory access</li> <li>See full diff in <a href="https://github.com/rvagg/bl/compare/v3.0.0...v3.0.1">compare view</a></li> </ul> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

</details>

Bumps rollup-plugin-postcss from 2.0.3 to 3.1.8. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/egoist/rollup-plugin-postcss/releases">rollup-plugin-postcss's releases</a>.</em></p> <blockquote> <h2>v3.1.8</h2> <h2><a href="https://github.com/egoist/rollup-plugin-postcss/compare/v3.1.7...v3.1.8">3.1.8</a> (2020-08-30)</h2> <h3>Bug Fixes</h3> <ul> <li>make sourceMaps relative to the CSS output file (<a href="https://github-redirect.dependabot.com/egoist/rollup-plugin-postcss/issues/274">#274</a>) (<a href="https://github.com/egoist/rollup-plugin-postcss/commit/3de028d0eb647f8871d04b5511bb60d6725edc6e">3de028d</a>)</li> </ul> <h2>v3.1.7</h2> <h2><a href="https://github.com/egoist/rollup-plugin-postcss/compare/v3.1.6...v3.1.7">3.1.7</a> (2020-08-30)</h2> <h3>Bug Fixes</h3> <ul> <li><strong>types:</strong> <code>options</code> is actually optional (<a href="https://github-redirect.dependabot.com/egoist/rollup-plugin-postcss/issues/311">#311</a>) (<a href="https://github.com/egoist/rollup-plugin-postcss/commit/a7299a471b415954f9445cf73c75a2025dd9efa4">a7299a4</a>)</li> </ul> <h2>v3.1.6</h2> <h2><a href="https://github.com/egoist/rollup-plugin-postcss/compare/v3.1.5...v3.1.6">3.1.6</a> (2020-08-24)</h2> <h3>Bug Fixes</h3> <ul> <li>extract css in same order as imports (<a href="https://github-redirect.dependabot.com/egoist/rollup-plugin-postcss/issues/295">#295</a>) (<a href="https://github.com/egoist/rollup-plugin-postcss/commit/2946eae7baf1f9fec267222d93130b1aba116f5b">2946eae</a>)</li> </ul> <h2>v3.1.5</h2> <h2><a href="https://github.com/egoist/rollup-plugin-postcss/compare/v3.1.4...v3.1.5">3.1.5</a> (2020-08-10)</h2> <h3>Bug Fixes</h3> <ul> <li>Typing of namedExports option (<a href="https://github.com/egoist/rollup-plugin-postcss/commit/c38f35643681f00ce54c2b70f4106652a09d68d2">c38f356</a>)</li> </ul> <h2>v3.1.4</h2> <h2><a href="https://github.com/egoist/rollup-plugin-postcss/compare/v3.1.3...v3.1.4">3.1.4</a> (2020-08-05)</h2> <h3>Bug Fixes</h3> <ul> <li>Add types file to package.json files (<a href="https://github-redirect.dependabot.com/egoist/rollup-plugin-postcss/issues/297">#297</a>) (<a href="https://github.com/egoist/rollup-plugin-postcss/commit/304538dc92e6688342d955bac2237591a2649306">304538d</a>)</li> </ul> <h2>v3.1.3</h2> <h2><a href="https://github.com/egoist/rollup-plugin-postcss/compare/v3.1.2...v3.1.3">3.1.3</a> (2020-07-14)</h2> <h3>Bug Fixes</h3> <ul> <li>allow module config while using autoModules (<a href="https://github-redirect.dependabot.com/egoist/rollup-plugin-postcss/issues/281">#281</a>) (<a href="https://github-redirect.dependabot.com/egoist/rollup-plugin-postcss/issues/292">#292</a>) (<a href="https://github.com/egoist/rollup-plugin-postcss/commit/f7f3fdb857c71f9b275be43960fc33eb1435d4b3">f7f3fdb</a>), closes <a href="https://github-redirect.dependabot.com/developit/microbundle/issues/653">developit/microbundle#653</a> <a href="https://github-redirect.dependabot.com/developit/microbundle/issues/617">developit/microbundle#617</a></li> </ul> <h2>v3.1.2</h2> <h2><a href="https://github.com/egoist/rollup-plugin-postcss/compare/v3.1.1...v3.1.2">3.1.2</a> (2020-06-04)</h2> <!-- raw HTML omitted --> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/egoist/rollup-plugin-postcss/commit/3de028d0eb647f8871d04b5511bb60d6725edc6e"><code>3de028d</code></a> fix: make sourceMaps relative to the CSS output file (<a href="https://github-redirect.dependabot.com/egoist/rollup-plugin-postcss/issues/274">#274</a>)</li> <li><a href="https://github.com/egoist/rollup-plugin-postcss/commit/a7299a471b415954f9445cf73c75a2025dd9efa4"><code>a7299a4</code></a> fix(types): <code>options</code> is actually optional (<a href="https://github-redirect.dependabot.com/egoist/rollup-plugin-postcss/issues/311">#311</a>)</li> <li><a href="https://github.com/egoist/rollup-plugin-postcss/commit/2946eae7baf1f9fec267222d93130b1aba116f5b"><code>2946eae</code></a> fix: extract css in same order as imports (<a href="https://github-redirect.dependabot.com/egoist/rollup-plugin-postcss/issues/295">#295</a>)</li> <li><a href="https://github.com/egoist/rollup-plugin-postcss/commit/c38f35643681f00ce54c2b70f4106652a09d68d2"><code>c38f356</code></a> fix: Typing of namedExports option</li> <li><a href="https://github.com/egoist/rollup-plugin-postcss/commit/a13a987d9bd76af667cb32250be5cd84426e5923"><code>a13a987</code></a> Fix typing of namedExports</li> <li><a href="https://github.com/egoist/rollup-plugin-postcss/commit/7ce64155ed0ff37151f6280c6740472d2571f193"><code>7ce6415</code></a> build(deps): bump lodash from 4.17.15 to 4.17.19 (<a href="https://github-redirect.dependabot.com/egoist/rollup-plugin-postcss/issues/294">#294</a>)</li> <li><a href="https://github.com/egoist/rollup-plugin-postcss/commit/304538dc92e6688342d955bac2237591a2649306"><code>304538d</code></a> fix: Add types file to package.json files (<a href="https://github-redirect.dependabot.com/egoist/rollup-plugin-postcss/issues/297">#297</a>)</li> <li><a href="https://github.com/egoist/rollup-plugin-postcss/commit/cbab326efd4d1d83f7c2cb7105528cd514c5b606"><code>cbab326</code></a> build(deps): bump elliptic from 6.5.2 to 6.5.3 (<a href="https://github-redirect.dependabot.com/egoist/rollup-plugin-postcss/issues/300">#300</a>)</li> <li><a href="https://github.com/egoist/rollup-plugin-postcss/commit/f7f3fdb857c71f9b275be43960fc33eb1435d4b3"><code>f7f3fdb</code></a> fix: allow module config while using autoModules (<a href="https://github-redirect.dependabot.com/egoist/rollup-plugin-postcss/issues/281">#281</a>) (<a href="https://github-redirect.dependabot.com/egoist/rollup-plugin-postcss/issues/292">#292</a>)</li> <li><a href="https://github.com/egoist/rollup-plugin-postcss/commit/9489ecaabbf9a4726f67deb0095914d624e9d462"><code>9489eca</code></a> build: tweak release action</li> <li>Additional commits viewable in <a href="https://github.com/egoist/rollup-plugin-postcss/compare/v2.0.3...v3.1.8">compare view</a></li> </ul> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

</details>

Bumps @types/react from 16.9.17 to 16.9.49. <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react">compare view</a></li> </ul> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

</details>

Bumps typescript from 3.7.5 to 4.0.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/Microsoft/TypeScript/releases">typescript's releases</a>.</em></p> <blockquote> <h2>TypeScript 4.0</h2> <p>For release notes, check out the <a href="https://devblogs.microsoft.com/typescript/announcing-typescript-4-0-rc/">release announcement</a>.</p> <p>For the complete list of fixed issues, check out the</p> <ul> <li><a href="https://github.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93&q=is%3Aissue+milestone%3A%22TypeScript+4.0.0%22+is%3Aclosed+">fixed issues query for Typescript v4.0.0 (Beta)</a>.</li> <li><a href="https://github.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93&q=is%3Aissue+milestone%3A%22TypeScript+4.0.1%22+is%3Aclosed+">fixed issues query for Typescript v4.0.1 (RC)</a>.</li> <li><a href="https://github.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93&q=is%3Aissue+milestone%3A%22TypeScript+4.0.2%22+is%3Aclosed+">fixed issues query for Typescript v4.0.2</a>.</li> </ul> <p>Downloads are available on:</p> <ul> <li><a href="https://www.npmjs.com/package/typescript">npm</a></li> <li><a href="https://marketplace.visualstudio.com/items?itemName=TypeScriptTeam.TypeScript-40">Visual Studio 2017/2019</a> (<a href="https://github.com/Microsoft/TypeScript/wiki/Updating-TypeScript-in-Visual-Studio-2017">Select new version in project options</a>)</li> <li><a href="https://www.nuget.org/packages/Microsoft.TypeScript.MSBuild">NuGet package</a></li> </ul> <h2>TypeScript 4.0 Beta</h2> <p>For release notes, check out the <a href="https://devblogs.microsoft.com/typescript/announcing-typescript-4-0-beta/">release announcement</a>.</p> <p>For the complete list of fixed issues, check out the</p> <ul> <li><a href="https://github.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93&q=is%3Aissue+milestone%3A%22TypeScript+4.0%22+is%3Aclosed+">fixed issues query for Typescript v4.0-beta</a>.</li> </ul> <p>Downloads are available on:</p> <ul> <li><a href="https://www.npmjs.com/package/typescript">npm</a></li> <li><a href="https://marketplace.visualstudio.com/items?itemName=TypeScriptTeam.TypeScript-40beta">Visual Studio 2017/2019</a> (<a href="https://github.com/Microsoft/TypeScript/wiki/Updating-TypeScript-in-Visual-Studio-2017">Select new version in project options</a>)</li> <li><a href="https://www.nuget.org/packages/Microsoft.TypeScript.MSBuild">NuGet package</a></li> </ul> <h2>TypeScript 3.9.7</h2> <p>For release notes, check out the <a href="https://devblogs.microsoft.com/typescript/announcing-typescript-3-9/">release announcement</a>.</p> <p>For the complete list of fixed issues, check out the</p> <ul> <li><a href="https://github.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93&q=is%3Aissue+milestone%3A%22TypeScript+3.9.0%22+is%3Aclosed+">fixed issues query for Typescript v3.9.0 (Beta)</a>.</li> <li><a href="https://github.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93&q=is%3Aissue+milestone%3A%22TypeScript+3.9.1%22+is%3Aclosed+">fixed issues query for Typescript v3.9.1 (RC)</a>.</li> <li><a href="https://github.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93&q=is%3Aissue+milestone%3A%22TypeScript+3.9.2%22+is%3Aclosed+">fixed issues query for Typescript v3.9.2 (Final)</a>.</li> <li><a href="https://github.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93&q=is%3Aissue+milestone%3A%22TypeScript+3.9.3%22+is%3Aclosed+">fixed issues query for Typescript v3.9.3 (patch release)</a>.</li> <li><a href="https://github.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93&q=is%3Aissue+milestone%3A%22TypeScript+3.9.5%22+is%3Aclosed+">fixed issues query for Typescript v3.9.5 (patch release)</a>.</li> <li><a href="https://github.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93&q=is%3Aissue+milestone%3A%22TypeScript+3.9.6%22+is%3Aclosed+">fixed issues query for Typescript v3.9.6 (patch release)</a>.</li> <li><a href="https://github.com/Microsoft/TypeScript/issues?q=milestone%3A%22TypeScript+3.9.7%22+is%3Aclosed+">fixed issues query for Typescript v3.9.7 (patch release)</a>.</li> </ul> <p>(note, 3.9.4 was intentionally skipped due to minor complications in publishing)</p> <p>Downloads are available on:</p> <ul> <li><a href="https://www.npmjs.com/package/typescript">npm</a></li> <li><a href="https://marketplace.visualstudio.com/items?itemName=TypeScriptTeam.TypeScript-397">Visual Studio 2017/2019</a> (<a href="https://github.com/Microsoft/TypeScript/wiki/Updating-TypeScript-in-Visual-Studio-2017">Select new version in project options</a>)</li> <li><a href="https://www.nuget.org/packages/Microsoft.TypeScript.MSBuild">NuGet package</a></li> </ul> <h2>TypeScript 3.9.6</h2> <p>For release notes, check out the <a href="https://devblogs.microsoft.com/typescript/announcing-typescript-3-9/">release announcement</a>.</p> <!-- raw HTML omitted --> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/microsoft/TypeScript/commit/912cbdfcb6b5ed1b0623390fc350c3c313fc8f1b"><code>912cbdf</code></a> Update LKG</li> <li><a href="https://github.com/microsoft/TypeScript/commit/076db46a3f6ed64f7286de1ab4a1767683d5d2cf"><code>076db46</code></a> Cherry-pick PR <a href="https://github-redirect.dependabot.com/Microsoft/TypeScript/issues/40072">#40072</a> into release-4.0 (<a href="https://github-redirect.dependabot.com/Microsoft/TypeScript/issues/40076">#40076</a>)</li> <li><a href="https://github.com/microsoft/TypeScript/commit/c9c6cd29b6f87d64a61234fcd53642160b252bf2"><code>c9c6cd2</code></a> Bump version to 4.0.2 and LKG</li> <li><a href="https://github.com/microsoft/TypeScript/commit/5f5dac0280d0b7f5296905a91e850617f2074871"><code>5f5dac0</code></a> Add '(approximate)' to the beginning of quick info requests in PartialSemanti...</li> <li><a href="https://github.com/microsoft/TypeScript/commit/10304555e79bf54dad62091156303e2b459cda72"><code>1030455</code></a> Ensure file, include and exclude specs used are strings (<a href="https://github-redirect.dependabot.com/Microsoft/TypeScript/issues/40041">#40041</a>)</li> <li><a href="https://github.com/microsoft/TypeScript/commit/edaa8aa9c0e3287457ddd3cc566f4156b3fb0bb1"><code>edaa8aa</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/Microsoft/TypeScript/issues/39989">#39989</a> from amcasey/pinned-release-4.0</li> <li><a href="https://github.com/microsoft/TypeScript/commit/f88f3065fa02a3bc51c2a18aae865655cd05eaa7"><code>f88f306</code></a> Update LKG</li> <li><a href="https://github.com/microsoft/TypeScript/commit/a1925515e28e919e16972b48f2cebb7b507581ba"><code>a192551</code></a> Cherry-pick PR <a href="https://github-redirect.dependabot.com/Microsoft/TypeScript/issues/40026">#40026</a> into release-4.0 (<a href="https://github-redirect.dependabot.com/Microsoft/TypeScript/issues/40028">#40028</a>)</li> <li><a href="https://github.com/microsoft/TypeScript/commit/6620b251ef0faf9cc6e269ea74fe205e76b9461a"><code>6620b25</code></a> 🤖 Pick PR <a href="https://github-redirect.dependabot.com/Microsoft/TypeScript/issues/40005">#40005</a> (feat(40004): Missing Compiler API p...) into release-4.0 (#...</li> <li><a href="https://github.com/microsoft/TypeScript/commit/7558de69b1b73fc9383754839014f6322562b634"><code>7558de6</code></a> Cherry-pick PR <a href="https://github-redirect.dependabot.com/Microsoft/TypeScript/issues/39702">#39702</a> into release-4.0 (<a href="https://github-redirect.dependabot.com/Microsoft/TypeScript/issues/39985">#39985</a>)</li> <li>Additional commits viewable in <a href="https://github.com/Microsoft/TypeScript/compare/v3.7.5...v4.0.2">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~typescript-bot">typescript-bot</a>, a new releaser for typescript since your current version.</p> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

</details>

Bumps gatsby-plugin-less from 3.0.18 to 4.0.3. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/gatsbyjs/gatsby/blob/master/packages/gatsby-plugin-less/CHANGELOG.md">gatsby-plugin-less's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/gatsbyjs/gatsby/compare/[email protected]@4.0.3">4.0.3</a> (2020-07-20)</h2> <h3>Bug Fixes</h3> <ul> <li><strong>readme:</strong> gatsby-plugin-less - variable in code fences (<a href="https://github-redirect.dependabot.com/gatsbyjs/gatsby/issues/25818">#25818</a>) (<a href="https://github.com/gatsbyjs/gatsby/commit/718d0fb">718d0fb</a>)</li> </ul> <h2><a href="https://github.com/gatsbyjs/gatsby/compare/[email protected]@4.0.2">4.0.2</a> (2020-07-09)</h2> <p><strong>Note:</strong> Version bump only for package gatsby-plugin-less</p> <h2><a href="https://github.com/gatsbyjs/gatsby/compare/[email protected]@4.0.1">4.0.1</a> (2020-07-09)</h2> <p><strong>Note:</strong> Version bump only for package gatsby-plugin-less</p> <h1><a href="https://github.com/gatsbyjs/gatsby/compare/[email protected]@4.0.0">4.0.0</a> (2020-07-03)</h1> <p><strong>Note:</strong> Version bump only for package gatsby-plugin-less</p> <h2><a href="https://github.com/gatsbyjs/gatsby/compare/[email protected]@3.2.9">3.2.9</a> (2020-07-02)</h2> <p><strong>Note:</strong> Version bump only for package gatsby-plugin-less</p> <h2><a href="https://github.com/gatsbyjs/gatsby/compare/[email protected]@3.2.8">3.2.8</a> (2020-07-01)</h2> <p><strong>Note:</strong> Version bump only for package gatsby-plugin-less</p> <h2><a href="https://github.com/gatsbyjs/gatsby/compare/[email protected]@3.2.7">3.2.7</a> (2020-07-01)</h2> <p><strong>Note:</strong> Version bump only for package gatsby-plugin-less</p> <h2><a href="https://github.com/gatsbyjs/gatsby/compare/[email protected]@3.2.6">3.2.6</a> (2020-06-24)</h2> <p><strong>Note:</strong> Version bump only for package gatsby-plugin-less</p> <h2><a href="https://github.com/gatsbyjs/gatsby/compare/[email protected]@3.2.5">3.2.5</a> (2020-06-22)</h2> <p><strong>Note:</strong> Version bump only for package gatsby-plugin-less</p> <h2><a href="https://github.com/gatsbyjs/gatsby/compare/[email protected]@3.2.4">3.2.4</a> (2020-06-09)</h2> <p><strong>Note:</strong> Version bump only for package gatsby-plugin-less</p> <h2><a href="https://github.com/gatsbyjs/gatsby/compare/[email protected]@3.2.3">3.2.3</a> (2020-06-02)</h2> <p><strong>Note:</strong> Version bump only for package gatsby-plugin-less</p> <h2><a href="https://github.com/gatsbyjs/gatsby/compare/[email protected]@3.2.2">3.2.2</a> (2020-05-20)</h2> <p><strong>Note:</strong> Version bump only for package gatsby-plugin-less</p> <!-- raw HTML omitted --> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/gatsbyjs/gatsby/commit/829098d3f7f9fc3506cc6cef9d089bbe413fd425"><code>829098d</code></a> chore(release): Publish</li> <li><a href="https://github.com/gatsbyjs/gatsby/commit/718d0fbc3ca809a30b468b8f3808fbc95fe08db5"><code>718d0fb</code></a> fix(readme): gatsby-plugin-less - variable in code fences (<a href="https://github.com/gatsbyjs/gatsby/tree/HEAD/packages/gatsby-plugin-less/issues/25818">#25818</a>)</li> <li><a href="https://github.com/gatsbyjs/gatsby/commit/960d523861b855c1fea45ceefe9cd01db760995b"><code>960d523</code></a> chore(release): Publish</li> <li><a href="https://github.com/gatsbyjs/gatsby/commit/80dab3f31d0e2929c719e496bf8b77665dca5c5c"><code>80dab3f</code></a> chore(release): Publish</li> <li><a href="https://github.com/gatsbyjs/gatsby/commit/538f4826442e7bbe05fdf2e2290931909d50c1fa"><code>538f482</code></a> migration docs to css loader v1 (<a href="https://github.com/gatsbyjs/gatsby/tree/HEAD/packages/gatsby-plugin-less/issues/25575">#25575</a>)</li> <li><a href="https://github.com/gatsbyjs/gatsby/commit/0049249e241597f60ccc05a2cb022103a850441a"><code>0049249</code></a> chore(release): Publish</li> <li><a href="https://github.com/gatsbyjs/gatsby/commit/bc4a39bec463a197612b0639fd5fee6b99612730"><code>bc4a39b</code></a> chore(gatsby-plugin-less): less-loader version 6.1.0 with tests and doc… (<a href="https://github.com/gatsbyjs/gatsby/tree/HEAD/packages/gatsby-plugin-less/issues/24">#24</a>...</li> <li><a href="https://github.com/gatsbyjs/gatsby/commit/e623913b2cf9a6fc2894b2c3bf0ebe0f6d8ecb1a"><code>e623913</code></a> chore(release): Publish</li> <li><a href="https://github.com/gatsbyjs/gatsby/commit/ed034d4e39e8990233ff6325db642f16aec65437"><code>ed034d4</code></a> chore(release): Publish</li> <li><a href="https://github.com/gatsbyjs/gatsby/commit/cc650272e78daa1d277e9164bcdecf4a229aee1d"><code>cc65027</code></a> chore(release): Publish</li> <li>Additional commits viewable in <a href="https://github.com/gatsbyjs/gatsby/commits/[email protected]/packages/gatsby-plugin-less">compare view</a></li> </ul> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

</details>

Bumps enzyme-adapter-react-16 from 1.15.2 to 1.15.4. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/enzymejs/enzyme/commit/679bf84dbb716b2e94df36d95fa4235cc374575e"><code>679bf84</code></a> [enzyme-adapter-react-16] v1.15.4</li> <li><a href="https://github.com/enzymejs/enzyme/commit/49fb2d31b20ed9c4942eb0a74271b5848dbf91d3"><code>49fb2d3</code></a> [] [dev deps] update <code>eslint</code>, <code>eslint-plugin-react</code>, eslint-plugin-react-h...</li> <li><a href="https://github.com/enzymejs/enzyme/commit/b1eb170bce08616fe5de97474605cc709e97043f"><code>b1eb170</code></a> [enzyme-adapter-react-16] [fix] <code>shallow</code>: missing instance when using Suspense</li> <li><a href="https://github.com/enzymejs/enzyme/commit/4a27b3de1d9150a393fce89022934ad97c72470f"><code>4a27b3d</code></a> [email protected]</li> <li><a href="https://github.com/enzymejs/enzyme/commit/d7ff89957de49eda7b095b369288869ee463ef69"><code>d7ff899</code></a> [enzyme-adapter-react-{13,14,15.4,15,16.1,16.2,16.3,16] [deps] updateenzyme...</li> <li><a href="https://github.com/enzymejs/enzyme/commit/e1551aacc4ea37129d5a867ced91d5f278958bf4"><code>e1551aa</code></a> [enzyme{,-adapter-react-16] [deps] update <code>enzyme-shallow-equal</code></li> <li><a href="https://github.com/enzymejs/enzyme/commit/7f4bdf1b917e206c14edbebf194d069e16efff58"><code>7f4bdf1</code></a> [] [meta] babel: set <code>transformRuntime</code> to false</li> <li><a href="https://github.com/enzymejs/enzyme/commit/de9c12d4c70377f02ee08553064f336da7ef3348"><code>de9c12d</code></a> [enzyme-adapter-react-16] [deps] update <code>enzyme-shallow-equal</code></li> <li><a href="https://github.com/enzymejs/enzyme/commit/2cf479bad936715822d708b1c47e9aa5648125ed"><code>2cf479b</code></a> [] [deps] update <code>react-is</code></li> <li><a href="https://github.com/enzymejs/enzyme/commit/54574c96a93de2d2826caa31683dde26978c35f2"><code>54574c9</code></a> [] [dev deps] update <code>eslint</code>, <code>eslint-config-airbnb</code>, `eslint-config-airbnb...</li> <li>Additional commits viewable in <a href="https://github.com/enzymejs/enzyme/commits/[email protected]/packages/enzyme-adapter-react-16">compare view</a></li> </ul> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

</details>

• [ ] I have searched the issues of this repository and believe that this is not a duplicate.

Reproduction link

https://ant.design/components/card-cn/#components-card-demo-flexible-content

Steps to reproduce

Card.cover 图片顶部有一像素白边

What is expected?

Card.cover 顶部没白边

What is actually happening?

Card.cover 图片顶部有一像素白边

<!-- generated by ant-design-issue-helper. DO NOT REMOVE -->

Bumps rollup from 0.68.2 to 2.26.8. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/rollup/rollup/releases">rollup's releases</a>.</em></p> <blockquote> <h2>v2.26.8</h2> <p><em>2020-08-29</em></p> <h3>Bug Fixes</h3> <ul> <li>Make sure that both unresolved and resolved ids are passed to the <code>external</code> option in all cases (<a href="https://github-redirect.dependabot.com/rollup/rollup/issues/3753">#3753</a>)</li> </ul> <h3>Pull Requests</h3> <ul> <li><a href="https://github-redirect.dependabot.com/rollup/rollup/pull/3753">#3753</a>: Also pass resolved ids to external if they use the object for (<a href="https://github.com/lukastaegert">@lukastaegert</a>)</li> </ul> <h2>v2.26.7</h2> <p><em>2020-08-28</em></p> <h3>Bug Fixes</h3> <ul> <li>Avoid invalid code when rendering hoisted variable declarations from dead branches (<a href="https://github-redirect.dependabot.com/rollup/rollup/issues/3752">#3752</a>)</li> <li>Mark the <code>options</code> parameter of <code>this.parse</code> as optional for TypeScript plugins (<a href="https://github-redirect.dependabot.com/rollup/rollup/issues/3750">#3750</a>)</li> </ul> <h3>Pull Requests</h3> <ul> <li><a href="https://github-redirect.dependabot.com/rollup/rollup/pull/3750">#3750</a>: Make <code>options</code> of <code>PluginContext#parse</code> optional (<a href="https://github.com/intrnl">@intrnl</a>)</li> <li><a href="https://github-redirect.dependabot.com/rollup/rollup/pull/3752">#3752</a>: Extract hoisted variables from dead branches (<a href="https://github.com/lukastaegert">@lukastaegert</a>)</li> </ul> <h2>v2.26.6</h2> <p><em>2020-08-27</em></p> <h3>Bug Fixes</h3> <ul> <li>Avoid conflicts between the namespace of synthetic named exports and local variables (<a href="https://github-redirect.dependabot.com/rollup/rollup/issues/3747">#3747</a>)</li> </ul> <h3>Pull Requests</h3> <ul> <li><a href="https://github-redirect.dependabot.com/rollup/rollup/pull/3747">#3747</a>: Properly deconflict synthetic named exports (<a href="https://github.com/lukastaegert">@lukastaegert</a>)</li> </ul> <h2>v2.26.5</h2> <p><em>2020-08-22</em></p> <h3>Bug Fixes</h3> <ul> <li>Use correctly deconflicted variable names for reexported namespaces in ES formats (<a href="https://github-redirect.dependabot.com/rollup/rollup/issues/3742">#3742</a>)</li> </ul> <h3>Pull Requests</h3> <ul> <li><a href="https://github-redirect.dependabot.com/rollup/rollup/pull/3742">#3742</a>: Avoid variable name conflict when reexporting several namespaces from a chunk (<a href="https://github.com/lukastaegert">@lukastaegert</a>)</li> </ul> <h2>v2.26.4</h2> <p><em>2020-08-19</em></p> <h3>Bug Fixes</h3> <ul> <li>Fix a situation where invalid code was rendered when dynamically importing a module with synthetic named exports when preserving modules (<a href="https://github-redirect.dependabot.com/rollup/rollup/issues/3738">#3738</a>)</li> <li>Create a proper namespace object when in a non-es format, a namespace is imported from a chunk with <code>default</code> export mode (<a href="https://github-redirect.dependabot.com/rollup/rollup/issues/3738">#3738</a>)</li> <li>Use the same variable when in a chunk, a namespace is both imported and reexported as a binding (<a href="https://github-redirect.dependabot.com/rollup/rollup/issues/3738">#3738</a>)</li> <li>Do not include the synthetic namespace in static entry points unless it is actually used (<a href="https://github-redirect.dependabot.com/rollup/rollup/issues/3738">#3738</a>)</li> <li>Make sure the chunking of one output does not interfere with the namespace objects of another output (<a href="https://github-redirect.dependabot.com/rollup/rollup/issues/3738">#3738</a>)</li> </ul> <h2>v2.26.3</h2> <p><em>2020-08-16</em></p> <!-- raw HTML omitted --> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/rollup/rollup/blob/master/CHANGELOG.md">rollup's changelog</a>.</em></p> <blockquote> <h2>2.26.8</h2> <p><em>2020-08-29</em></p> <h3>Bug Fixes</h3> <ul> <li>Make sure that both unresolved and resolved ids are passed to the <code>external</code> option in all cases (<a href="https://github-redirect.dependabot.com/rollup/rollup/issues/3753">#3753</a>)</li> </ul> <h3>Pull Requests</h3> <ul> <li><a href="https://github-redirect.dependabot.com/rollup/rollup/pull/3753">#3753</a>: Also pass resolved ids to external if they use the object for (<a href="https://github.com/lukastaegert">@lukastaegert</a>)</li> </ul> <h2>2.26.7</h2> <p><em>2020-08-28</em></p> <h3>Bug Fixes</h3> <ul> <li>Avoid invalid code when rendering hoisted variable declarations from dead branches (<a href="https://github-redirect.dependabot.com/rollup/rollup/issues/3752">#3752</a>)</li> <li>Mark the <code>options</code> parameter of <code>this.parse</code> as optional for TypeScript plugins (<a href="https://github-redirect.dependabot.com/rollup/rollup/issues/3750">#3750</a>)</li> </ul> <h3>Pull Requests</h3> <ul> <li><a href="https://github-redirect.dependabot.com/rollup/rollup/pull/3750">#3750</a>: Make <code>options</code> of <code>PluginContext#parse</code> optional (<a href="https://github.com/intrnl">@intrnl</a>)</li> <li><a href="https://github-redirect.dependabot.com/rollup/rollup/pull/3752">#3752</a>: Extract hoisted variables from dead branches (<a href="https://github.com/lukastaegert">@lukastaegert</a>)</li> </ul> <h2>2.26.6</h2> <p><em>2020-08-27</em></p> <h3>Bug Fixes</h3> <ul> <li>Avoid conflicts between the namespace of synthetic named exports and local variables (<a href="https://github-redirect.dependabot.com/rollup/rollup/issues/3747">#3747</a>)</li> </ul> <h3>Pull Requests</h3> <ul> <li><a href="https://github-redirect.dependabot.com/rollup/rollup/pull/3747">#3747</a>: Properly deconflict synthetic named exports (<a href="https://github.com/lukastaegert">@lukastaegert</a>)</li> </ul> <h2>2.26.5</h2> <p><em>2020-08-22</em></p> <h3>Bug Fixes</h3> <ul> <li>Use correctly deconflicted variable names for reexported namespaces in ES formats (<a href="https://github-redirect.dependabot.com/rollup/rollup/issues/3742">#3742</a>)</li> </ul> <h3>Pull Requests</h3> <ul> <li><a href="https://github-redirect.dependabot.com/rollup/rollup/pull/3742">#3742</a>: Avoid variable name conflict when reexporting several namespaces from a chunk (<a href="https://github.com/lukastaegert">@lukastaegert</a>)</li> </ul> <h2>2.26.4</h2> <p><em>2020-08-19</em></p> <h3>Bug Fixes</h3> <ul> <li>Fix a situation where invalid code was rendered when dynamically importing a module with synthetic named exports when preserving modules (<a href="https://github-redirect.dependabot.com/rollup/rollup/issues/3738">#3738</a>)</li> <li>Create a proper namespace object when in a non-es format, a namespace is imported from a chunk with <code>default</code> export mode (<a href="https://github-redirect.dependabot.com/rollup/rollup/issues/3738">#3738</a>)</li> <li>Use the same variable when in a chunk, a namespace is both imported and reexported as a binding (<a href="https://github-redirect.dependabot.com/rollup/rollup/issues/3738">#3738</a>)</li> <li>Do not include the synthetic namespace in static entry points unless it is actually used (<a href="https://github-redirect.dependabot.com/rollup/rollup/issues/3738">#3738</a>)</li> <li>Make sure the chunking of one output does not interfere with the namespace objects of another output (<a href="https://github-redirect.dependabot.com/rollup/rollup/issues/3738">#3738</a>)</li> </ul> <h3>Pull Requests</h3> <ul> <li><a href="https://github-redirect.dependabot.com/rollup/rollup/pull/3738">#3738</a>: Improve synthetic entry handling (<a href="https://github.com/lukastaegert">@lukastaegert</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/rollup/rollup/commit/8a5a6383780ce86f315c0b7eed5bb26294cc672e"><code>8a5a638</code></a> 2.26.8</li> <li><a href="https://github.com/rollup/rollup/commit/78b0dc7044de407e48efa29c21eda6af106ce1c0"><code>78b0dc7</code></a> Update changelog</li> <li><a href="https://github.com/rollup/rollup/commit/21fcec3b91c65738984fd0eb4bbdbb1ea2610a2c"><code>21fcec3</code></a> Also pass resolved ids to external if they use the object form (<a href="https://github-redirect.dependabot.com/rollup/rollup/issues/3753">#3753</a>)</li> <li><a href="https://github.com/rollup/rollup/commit/7e2cbc5d3766f831481183308926246143d517f5"><code>7e2cbc5</code></a> 2.26.7</li> <li><a href="https://github.com/rollup/rollup/commit/3b090c5e4403df14113a2368b3bb2b3c700f9928"><code>3b090c5</code></a> Update changelog</li> <li><a href="https://github.com/rollup/rollup/commit/ee3becc4f59abd975bdb76fb5a3bdcd983d11f7a"><code>ee3becc</code></a> Make <code>options</code> of <code>PluginContext#parse</code> optional (<a href="https://github-redirect.dependabot.com/rollup/rollup/issues/3750">#3750</a>)</li> <li><a href="https://github.com/rollup/rollup/commit/c6c939fb87f8bfdfad1cbea70cec4cfa9fbc66d5"><code>c6c939f</code></a> Extract hoisted variables from dead branches (<a href="https://github-redirect.dependabot.com/rollup/rollup/issues/3752">#3752</a>)</li> <li><a href="https://github.com/rollup/rollup/commit/7bc7c90ad3e0a680da0073bc4e43418b80dfe461"><code>7bc7c90</code></a> 2.26.6</li> <li><a href="https://github.com/rollup/rollup/commit/8694a54e9df8ea5f4cde4f81752fb8085005c917"><code>8694a54</code></a> Update changelog</li> <li><a href="https://github.com/rollup/rollup/commit/da9195d76fe83ba4107ff1becc7bf84c0ddb61be"><code>da9195d</code></a> Properly deconflict synthetic named exports (<a href="https://github-redirect.dependabot.com/rollup/rollup/issues/3747">#3747</a>)</li> <li>Additional commits viewable in <a href="https://github.com/rollup/rollup/compare/v0.68.2...v2.26.8">compare view</a></li> </ul> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

</details>

Bumps @types/react from 16.9.17 to 16.9.48. <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react">compare view</a></li> </ul> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

</details>

Bumps rollup-plugin-postcss from 2.0.3 to 3.1.6. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/egoist/rollup-plugin-postcss/releases">rollup-plugin-postcss's releases</a>.</em></p> <blockquote> <h2>v3.1.6</h2> <h2><a href="https://github.com/egoist/rollup-plugin-postcss/compare/v3.1.5...v3.1.6">3.1.6</a> (2020-08-24)</h2> <h3>Bug Fixes</h3> <ul> <li>extract css in same order as imports (<a href="https://github-redirect.dependabot.com/egoist/rollup-plugin-postcss/issues/295">#295</a>) (<a href="https://github.com/egoist/rollup-plugin-postcss/commit/2946eae7baf1f9fec267222d93130b1aba116f5b">2946eae</a>)</li> </ul> <h2>v3.1.5</h2> <h2><a href="https://github.com/egoist/rollup-plugin-postcss/compare/v3.1.4...v3.1.5">3.1.5</a> (2020-08-10)</h2> <h3>Bug Fixes</h3> <ul> <li>Typing of namedExports option (<a href="https://github.com/egoist/rollup-plugin-postcss/commit/c38f35643681f00ce54c2b70f4106652a09d68d2">c38f356</a>)</li> </ul> <h2>v3.1.4</h2> <h2><a href="https://github.com/egoist/rollup-plugin-postcss/compare/v3.1.3...v3.1.4">3.1.4</a> (2020-08-05)</h2> <h3>Bug Fixes</h3> <ul> <li>Add types file to package.json files (<a href="https://github-redirect.dependabot.com/egoist/rollup-plugin-postcss/issues/297">#297</a>) (<a href="https://github.com/egoist/rollup-plugin-postcss/commit/304538dc92e6688342d955bac2237591a2649306">304538d</a>)</li> </ul> <h2>v3.1.3</h2> <h2><a href="https://github.com/egoist/rollup-plugin-postcss/compare/v3.1.2...v3.1.3">3.1.3</a> (2020-07-14)</h2> <h3>Bug Fixes</h3> <ul> <li>allow module config while using autoModules (<a href="https://github-redirect.dependabot.com/egoist/rollup-plugin-postcss/issues/281">#281</a>) (<a href="https://github-redirect.dependabot.com/egoist/rollup-plugin-postcss/issues/292">#292</a>) (<a href="https://github.com/egoist/rollup-plugin-postcss/commit/f7f3fdb857c71f9b275be43960fc33eb1435d4b3">f7f3fdb</a>), closes <a href="https://github-redirect.dependabot.com/developit/microbundle/issues/653">developit/microbundle#653</a> <a href="https://github-redirect.dependabot.com/developit/microbundle/issues/617">developit/microbundle#617</a></li> </ul> <h2>v3.1.2</h2> <h2><a href="https://github.com/egoist/rollup-plugin-postcss/compare/v3.1.1...v3.1.2">3.1.2</a> (2020-06-04)</h2> <h3>Bug Fixes</h3> <ul> <li>replace const keyword with var keyword in output (<a href="https://github-redirect.dependabot.com/egoist/rollup-plugin-postcss/issues/283">#283</a>) (<a href="https://github.com/egoist/rollup-plugin-postcss/commit/a5fd035a161707e0e0ce583d827f619d6cf8e7bc">a5fd035</a>)</li> </ul> <h2>v3.1.1</h2> <h2><a href="https://github.com/egoist/rollup-plugin-postcss/compare/v3.1.0...v3.1.1">3.1.1</a> (2020-04-24)</h2> <h3>Bug Fixes</h3> <ul> <li>revert "feat: allow multiple entry files and outputs (<a href="https://github-redirect.dependabot.com/egoist/rollup-plugin-postcss/issues/264">#264</a>)" (<a href="https://github-redirect.dependabot.com/egoist/rollup-plugin-postcss/issues/272">#272</a>) (<a href="https://github.com/egoist/rollup-plugin-postcss/commit/b17c15d0942ba053f053d70c18529cb27c126e72">b17c15d</a>)</li> </ul> <h2>v3.1.0</h2> <h1><a href="https://github.com/egoist/rollup-plugin-postcss/compare/v3.0.0...v3.1.0">3.1.0</a> (2020-04-23)</h1> <!-- raw HTML omitted --> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/egoist/rollup-plugin-postcss/commit/2946eae7baf1f9fec267222d93130b1aba116f5b"><code>2946eae</code></a> fix: extract css in same order as imports (<a href="https://github-redirect.dependabot.com/egoist/rollup-plugin-postcss/issues/295">#295</a>)</li> <li><a href="https://github.com/egoist/rollup-plugin-postcss/commit/c38f35643681f00ce54c2b70f4106652a09d68d2"><code>c38f356</code></a> fix: Typing of namedExports option</li> <li><a href="https://github.com/egoist/rollup-plugin-postcss/commit/a13a987d9bd76af667cb32250be5cd84426e5923"><code>a13a987</code></a> Fix typing of namedExports</li> <li><a href="https://github.com/egoist/rollup-plugin-postcss/commit/7ce64155ed0ff37151f6280c6740472d2571f193"><code>7ce6415</code></a> build(deps): bump lodash from 4.17.15 to 4.17.19 (<a href="https://github-redirect.dependabot.com/egoist/rollup-plugin-postcss/issues/294">#294</a>)</li> <li><a href="https://github.com/egoist/rollup-plugin-postcss/commit/304538dc92e6688342d955bac2237591a2649306"><code>304538d</code></a> fix: Add types file to package.json files (<a href="https://github-redirect.dependabot.com/egoist/rollup-plugin-postcss/issues/297">#297</a>)</li> <li><a href="https://github.com/egoist/rollup-plugin-postcss/commit/cbab326efd4d1d83f7c2cb7105528cd514c5b606"><code>cbab326</code></a> build(deps): bump elliptic from 6.5.2 to 6.5.3 (<a href="https://github-redirect.dependabot.com/egoist/rollup-plugin-postcss/issues/300">#300</a>)</li> <li><a href="https://github.com/egoist/rollup-plugin-postcss/commit/f7f3fdb857c71f9b275be43960fc33eb1435d4b3"><code>f7f3fdb</code></a> fix: allow module config while using autoModules (<a href="https://github-redirect.dependabot.com/egoist/rollup-plugin-postcss/issues/281">#281</a>) (<a href="https://github-redirect.dependabot.com/egoist/rollup-plugin-postcss/issues/292">#292</a>)</li> <li><a href="https://github.com/egoist/rollup-plugin-postcss/commit/9489ecaabbf9a4726f67deb0095914d624e9d462"><code>9489eca</code></a> build: tweak release action</li> <li><a href="https://github.com/egoist/rollup-plugin-postcss/commit/a5fd035a161707e0e0ce583d827f619d6cf8e7bc"><code>a5fd035</code></a> fix: replace const keyword with var keyword in output (<a href="https://github-redirect.dependabot.com/egoist/rollup-plugin-postcss/issues/283">#283</a>)</li> <li><a href="https://github.com/egoist/rollup-plugin-postcss/commit/b17c15d0942ba053f053d70c18529cb27c126e72"><code>b17c15d</code></a> fix: revert "feat: allow multiple entry files and outputs (<a href="https://github-redirect.dependabot.com/egoist/rollup-plugin-postcss/issues/264">#264</a>)" (<a href="https://github-redirect.dependabot.com/egoist/rollup-plugin-postcss/issues/272">#272</a>)</li> <li>Additional commits viewable in <a href="https://github.com/egoist/rollup-plugin-postcss/compare/v2.0.3...v3.1.6">compare view</a></li> </ul> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

</details>

Bumps webpack-merge from 4.2.2 to 5.1.2. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/survivejs/webpack-merge/blob/master/CHANGELOG.md">webpack-merge's changelog</a>.</em></p> <blockquote> <h2>5.1.2 / 2020-08-18</h2> <ul> <li>Fix - Allow overriding an object field with <code>null</code> <a href="https://github-redirect.dependabot.com/survivejs/webpack-merge/issues/144">#144</a></li> </ul> <h2>5.1.1 / 2020-08-04</h2> <ul> <li>Fix - Drop <code><reference types="webpack-dev-server" /></code> from <strong>index.d.ts</strong> <a href="https://github-redirect.dependabot.com/survivejs/webpack-merge/issues/143">#143</a></li> </ul> <h2>5.1.0 / 2020-08-03</h2> <ul> <li>Feature - Expose <code>merge</code> as <code>default</code> for backwards-compatibility with TypeScript. Now <code>import merge from "webpack-merge";</code> works there. In CommonJS, the default alias is exposed through <code>default</code> property due to technical constraints.</li> </ul> <h2>5.0.9 / 2020-07-09</h2> <ul> <li>Fix - Don't crash on <code>merge()</code> and <code>merge([])</code>. Now <code>{}</code> is returned in these corner cases.</li> </ul> <h2>5.0.8 / 2020-07-07</h2> <ul> <li>Fix - Support Node 10 <a href="https://github-redirect.dependabot.com/survivejs/webpack-merge/issues/138">#138</a></li> </ul> <h2>5.0.7 / 2020-07-06</h2> <ul> <li>Fix - Drop tslib dependency by setting <code>"importHelpers": false,</code></li> </ul> <h2>5.0.6 / 2020-07-06</h2> <ul> <li>Fix - Add tslib to dependencies</li> </ul> <h2>5.0.5 / 2020-07-06</h2> <ul> <li>Tech - Optimize build size (UMD isn't needed)</li> </ul> <h2>5.0.4 / 2020-07-06</h2> <ul> <li>Documentation - Use CommonJS imports at the examples. <a href="https://github-redirect.dependabot.com/survivejs/webpack-merge/issues/137">#137</a></li> </ul> <h2>5.0.3 / 2020-07-06</h2> <ul> <li>Feature - Support TypeScript out of the box. <a href="https://github-redirect.dependabot.com/survivejs/webpack-merge/issues/84">#84</a> <a href="https://github-redirect.dependabot.com/survivejs/webpack-merge/issues/86">#86</a> <a href="https://github-redirect.dependabot.com/survivejs/webpack-merge/issues/95">#95</a> <a href="https://github-redirect.dependabot.com/survivejs/webpack-merge/issues/110">#110</a> <a href="https://github-redirect.dependabot.com/survivejs/webpack-merge/issues/112">#112</a></li> <li>Deprecation - <code>merge.smart</code> has been dropped as it's tricky to support all the corner cases. Instead, it's better to use the provided utilities to put together a <code>merge</code> that fits your case.</li> <li>Deprecation - <code>mergeStrategy</code> has been dropped in favor of using <code>mergeWithCustomize</code> with <code>customizeArray</code> and <code>customizeObject</code>.</li> <li>Deprecation - <code>merge.multiple</code> has been dropped as the functionality was too specific and it's better to implement in the user space if needed.</li> <li>Breaking - <code>merge</code> has been moved as a regular import (i.e. <code>import { merge } from 'webpack-merge'</code>).</li> <li>Breaking - Merge customization has been moved behind <code>mergeWithCustomize</code>.</li> <li>Breaking - Bump supported Node version to 12</li> <li>Feature - <code>customizeArray</code> supports wildcards now. Example: <code>'entry.*': 'prepend'</code>. <a href="https://github-redirect.dependabot.com/survivejs/webpack-merge/issues/45">#45</a> <a href="https://github-redirect.dependabot.com/survivejs/webpack-merge/issues/99">#99</a></li> <li>Feature - Throw an error in case a <code>Promise</code> is being merged. It's better to wrap configuration within a <code>Promise</code> and merge inside it. <a href="https://github-redirect.dependabot.com/survivejs/webpack-merge/issues/81">#81</a></li> <li>Fix - Drop lodash in favor of simpler dependencies. <a href="https://github-redirect.dependabot.com/survivejs/webpack-merge/issues/134">#134</a></li> <li>Fix - Make <code>unique</code> merge from right to left to match behavior elsewhere. <a href="https://github-redirect.dependabot.com/survivejs/webpack-merge/issues/119">#119</a></li> <li>Fix - Make sure <code>unique</code> doesn't lose non-unique items to merge. <a href="https://github-redirect.dependabot.com/survivejs/webpack-merge/issues/125">#125</a></li> </ul> <!-- raw HTML omitted --> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/survivejs/webpack-merge/commit/f65cc3dc50a5958774b4ca2e1e849c4513c6de95"><code>f65cc3d</code></a> 5.1.2</li> <li><a href="https://github.com/survivejs/webpack-merge/commit/4eb811cea573fc7cf600a750ae4aec32708864d0"><code>4eb811c</code></a> fix: Allow overriding an object field with null</li> <li><a href="https://github.com/survivejs/webpack-merge/commit/2e8780ead820b9b2eecb13f394613acf325c0d91"><code>2e8780e</code></a> 5.1.1</li> <li><a href="https://github.com/survivejs/webpack-merge/commit/b762ff4fcf0587c9c22d461ec24ea92facc42a72"><code>b762ff4</code></a> chore: Update changelog</li> <li><a href="https://github.com/survivejs/webpack-merge/commit/a68b069e7c1fd8c9719587fe7bd850a222778e8e"><code>a68b069</code></a> chore: Update dev dependencies</li> <li><a href="https://github.com/survivejs/webpack-merge/commit/455ca91caf9be2140e7243769ce652b3cfbc9818"><code>455ca91</code></a> 5.1.0</li> <li><a href="https://github.com/survivejs/webpack-merge/commit/a28224266dd22de4604eac8bd2f1d06a62bceb51"><code>a282242</code></a> feat: Expose merge through default for TypeScript</li> <li><a href="https://github.com/survivejs/webpack-merge/commit/162d1665b8dbccc5c15ce64b40c7acb36b0d0a26"><code>162d166</code></a> chore(deps): bump lodash from 4.17.15 to 4.17.19</li> <li><a href="https://github.com/survivejs/webpack-merge/commit/8bf5d21663416091a54f115c4174e8212737a017"><code>8bf5d21</code></a> 5.0.9</li> <li><a href="https://github.com/survivejs/webpack-merge/commit/9e7f6ddfb2edc918618312ced096c4c65ed2dd78"><code>9e7f6dd</code></a> fix: Don't crash on merge() or merge([])</li> <li>Additional commits viewable in <a href="https://github.com/survivejs/webpack-merge/compare/v4.2.2...v5.1.2">compare view</a></li> </ul> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

</details>

Bumps @types/jest from 24.9.0 to 26.0.10. <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/jest">compare view</a></li> </ul> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

</details>

Bumps dot-prop from 4.2.0 to 4.2.1. This update includes a security fix. <details> <summary>Vulnerabilities fixed</summary> <p><em>Sourced from <a href="https://github.com/advisories/GHSA-ff7x-qrg7-qggm">The GitHub Security Advisory Database</a>.</em></p> <blockquote> <p><strong>Prototype Pollution in dot-prop</strong> Prototype pollution vulnerability in dot-prop npm package before versions 4.2.1 and 5.1.1 allows an attacker to add arbitrary properties to JavaScript language constructs such as objects.</p> <p>Affected versions: < 4.2.1</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/sindresorhus/dot-prop/commits">compare view</a></li> </ul> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

</details>

Bumps lodash from 4.17.15 to 4.17.20. This update includes security fixes. <details> <summary>Vulnerabilities fixed</summary> <p><em>Sourced from <a href="https://github.com/nodejs/security-wg/blob/master/vuln/npm/516.json">The Node Security Working Group</a>.</em></p> <blockquote> <p><strong>Allocation of Resources Without Limits or Throttling</strong> Prototype pollution attack (lodash)</p> <p>Affected versions: >=4.17.15 <4.17.19</p> </blockquote> <p><em>Sourced from <a href="https://github.com/advisories/GHSA-p6mc-m468-83gw">The GitHub Security Advisory Database</a>.</em></p> <blockquote> <p><strong>Prototype Pollution in lodash</strong> Versions of lodash prior to 4.17.19 are vulnerable to Prototype Pollution. The function zipObjectDeep allows a malicious user to modify the prototype of Object if the property identifiers are user-supplied. Being affected by this issue requires zipping objects based on user-provided property arrays.</p> <p>This vulnerability causes the addition or modification of an existing property that will exist on all objects and may lead to Denial of Service or Code Execution under specific circumstances.</p> <p>Affected versions: < 4.17.19</p> </blockquote> <p><em>Sourced from <a href="https://github.com/advisories/GHSA-p6mc-m468-83gw">The GitHub Security Advisory Database</a>.</em></p> <blockquote> <p><strong>Prototype Pollution in lodash</strong> Versions of lodash prior to 4.17.19 are vulnerable to Prototype Pollution. The function zipObjectDeep allows a malicious user to modify the prototype of Object if the property identifiers are user-supplied. Being affected by this issue requires zipping objects based on user-provided property arrays.</p> <p>This vulnerability causes the addition or modification of an existing property that will exist on all objects and may lead to Denial of Service or Code Execution under specific circumstances.</p> <p>Affected versions: < 4.17.19</p> </blockquote> </details> <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/lodash/lodash/releases">lodash's releases</a>.</em></p> <blockquote> <h2>4.17.16</h2> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/lodash/lodash/commit/ded9bc66583ed0b4e3b7dc906206d40757b4a90a"><code>ded9bc6</code></a> Bump to v4.17.20.</li> <li><a href="https://github.com/lodash/lodash/commit/63150ef7645ac07961b63a86490f419f356429aa"><code>63150ef</code></a> Documentation fixes.</li> <li><a href="https://github.com/lodash/lodash/commit/00f0f62a979d2f5fa0287c06eae70cf9a62d8794"><code>00f0f62</code></a> test.js: Remove trailing comma.</li> <li><a href="https://github.com/lodash/lodash/commit/846e434c7a5b5692c55ebf5715ed677b70a32389"><code>846e434</code></a> Temporarily use a custom fork of <code>lodash-cli</code>.</li> <li><a href="https://github.com/lodash/lodash/commit/5d046f39cbd27f573914768e3b36eeefcc4f1229"><code>5d046f3</code></a> Re-enable Travis tests on <code>4.17</code> branch.</li> <li><a href="https://github.com/lodash/lodash/commit/aa816b36d402a1ad9385142ce7188f17dae514fd"><code>aa816b3</code></a> Remove <code>/npm-package</code>.</li> <li><a href="https://github.com/lodash/lodash/commit/d7fbc52ee0466a6d248f047b5d5c3e6d1e099056"><code>d7fbc52</code></a> Bump to v4.17.19</li> <li><a href="https://github.com/lodash/lodash/commit/2e1c0f22f425e9c013815b2cd7c2ebd51f49a8d6"><code>2e1c0f2</code></a> Add npm-package</li> <li><a href="https://github.com/lodash/lodash/commit/1b6c282299f4e0271f932b466c67f0f822aa308e"><code>1b6c282</code></a> Bump to v4.17.18</li> <li><a href="https://github.com/lodash/lodash/commit/a370ac81408de2da77a82b3c4b61a01a3b9c2fac"><code>a370ac8</code></a> Bump to v4.17.17</li> <li>Additional commits viewable in <a href="https://github.com/lodash/lodash/compare/4.17.15...4.17.20">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~bnjmnt4n">bnjmnt4n</a>, a new releaser for lodash since your current version.</p> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

</details>

Bumps elliptic from 6.5.2 to 6.5.3. This update includes a security fix. <details> <summary>Vulnerabilities fixed</summary> <p><em>Sourced from <a href="https://github.com/advisories/GHSA-vh7m-p724-62c2">The GitHub Security Advisory Database</a>.</em></p> <blockquote> <p><strong>Signature Malleabillity in elliptic</strong> The Elliptic package before version 6.5.3 for Node.js allows ECDSA signature malleability via variations in encoding, leading '\0' bytes, or integer overflows. This could conceivably have a security-relevant impact if an application relied on a single canonical signature.</p> <p>Affected versions: < 6.5.3</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/indutny/elliptic/commit/8647803dc3d90506aa03021737f7b061ba959ae1"><code>8647803</code></a> 6.5.3</li> <li><a href="https://github.com/indutny/elliptic/commit/856fe4d99fe7b6200556e6400b3bf585b1721bec"><code>856fe4d</code></a> signature: prevent malleability and overflows</li> <li>See full diff in <a href="https://github.com/indutny/elliptic/compare/v6.5.2...v6.5.3">compare view</a></li> </ul> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

</details>

Bumps rollup-plugin-peer-deps-external from 2.2.2 to 2.2.3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/pmowrer/rollup-plugin-peer-deps-external/releases">rollup-plugin-peer-deps-external's releases</a>.</em></p> <blockquote> <h2>v2.2.3</h2> <h2><a href="https://github.com/pmowrer/rollup-plugin-peer-deps-external/compare/v2.2.2...v2.2.3">2.2.3</a> (2020-07-01)</h2> <h3>Bug Fixes</h3> <ul> <li>allow external to be undefined (<a href="https://github.com/pmowrer/rollup-plugin-peer-deps-external/commit/efe68a8006b78ec50fb852413d28df07516ea8a8">efe68a8</a>)</li> <li>external also accepts string/regexp/array<!-- raw HTML omitted --> (<a href="https://github.com/pmowrer/rollup-plugin-peer-deps-external/commit/d7bc1a7fdc9386eb66b56d0ec4c9eb6f31aee4c8">d7bc1a7</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/pmowrer/rollup-plugin-peer-deps-external/commit/361a06b03e605d76a5f2ef71f8a546fbcbeaf565"><code>361a06b</code></a> Revert "chore: "dogfood" this library"</li> <li><a href="https://github.com/pmowrer/rollup-plugin-peer-deps-external/commit/720d0085ca3b04d4807ad848fb5e71e984950d0b"><code>720d008</code></a> chore: fix repositoryUrl reference.</li> <li><a href="https://github.com/pmowrer/rollup-plugin-peer-deps-external/commit/f37bc5a576d0c76d0b062290bc7b4cbef52dd4f3"><code>f37bc5a</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/pmowrer/rollup-plugin-peer-deps-external/issues/30">#30</a> from pmowrer/rollup-2.11-fix</li> <li><a href="https://github.com/pmowrer/rollup-plugin-peer-deps-external/commit/efe68a8006b78ec50fb852413d28df07516ea8a8"><code>efe68a8</code></a> fix: allow external to be undefined</li> <li><a href="https://github.com/pmowrer/rollup-plugin-peer-deps-external/commit/d7bc1a7fdc9386eb66b56d0ec4c9eb6f31aee4c8"><code>d7bc1a7</code></a> fix: external also accepts string/regexp/array<regexp></li> <li><a href="https://github.com/pmowrer/rollup-plugin-peer-deps-external/commit/1c47c96886b1fc721b5e18ea2afe729a7ababc13"><code>1c47c96</code></a> chore: format on lint (and format all)</li> <li><a href="https://github.com/pmowrer/rollup-plugin-peer-deps-external/commit/faf8e4dabfb0cee98be3eae05d682616e487df96"><code>faf8e4d</code></a> chore: "dogfood" this library</li> <li><a href="https://github.com/pmowrer/rollup-plugin-peer-deps-external/commit/e3caefcf792a14b335e462d2f3e41bf9329aed32"><code>e3caefc</code></a> chore: upgrade dependencies</li> <li><a href="https://github.com/pmowrer/rollup-plugin-peer-deps-external/commit/b3225a30b449024acc7bb3303b68c190af20367d"><code>b3225a3</code></a> docs: deprecate includeDependencies</li> <li><a href="https://github.com/pmowrer/rollup-plugin-peer-deps-external/commit/23b0f0eb7e74003ff54ec138ad5f48cd10e66a02"><code>23b0f0e</code></a> docs(README): actually fix travis build badge</li> <li>Additional commits viewable in <a href="https://github.com/pmowrer/rollup-plugin-peer-deps-external/compare/v2.2.2...v2.2.3">compare view</a></li> </ul> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

</details>

⚠️ Dependabot is rebasing this PR ⚠️

If you make any changes to it yourself then they will take precedence over the rebase.

Bumps less from 3.10.3 to 3.12.2. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/less/less.js/blob/master/CHANGELOG.md">less's changelog</a>.</em></p> <blockquote> <h2>Change Log</h2> <h3>upcoming (2020-07-16)</h3> <ul> <li><a href="https://github-redirect.dependabot.com/less/less.js/pull/3544">#3544</a> Fixes <a href="https://github-redirect.dependabot.com/less/less.js/issues/3533">#3533</a> (<a href="https://github-redirect.dependabot.com/less/less.js/issues/3544">#3544</a>) (<a href="https://github.com/matthew-dean">@matthew-dean</a>)</li> <li><a href="https://github-redirect.dependabot.com/less/less.js/pull/3543">#3543</a> Fixes <a href="https://github-redirect.dependabot.com/less/less.js/issues/3541">#3541</a> (<a href="https://github-redirect.dependabot.com/less/less.js/issues/3543">#3543</a>) (<a href="https://github.com/matthew-dean">@matthew-dean</a>)</li> </ul> <h3>v3.12.0 (2020-07-13)</h3> <ul> <li><a href="https://github-redirect.dependabot.com/less/less.js/pull/3540">#3540</a> v3.12.0-RC.2 (<a href="https://github-redirect.dependabot.com/less/less.js/issues/3540">#3540</a>) (<a href="https://github.com/matthew-dean">@matthew-dean</a>)</li> <li><a href="https://github-redirect.dependabot.com/less/less.js/pull/3532">#3532</a> Fixes <a href="https://github-redirect.dependabot.com/less/less.js/issues/3371">#3371</a> Allow conditional evaluation of function args (<a href="https://github-redirect.dependabot.com/less/less.js/issues/3532">#3532</a>) (<a href="https://github.com/matthew-dean">@matthew-dean</a>)</li> <li><a href="https://github-redirect.dependabot.com/less/less.js/pull/3531">#3531</a> Remove lib folder from git (<a href="https://github-redirect.dependabot.com/less/less.js/issues/3531">#3531</a>) (<a href="https://github.com/matthew-dean">@matthew-dean</a>)</li> <li><a href="https://github-redirect.dependabot.com/less/less.js/pull/3530">#3530</a> Move changelog to root (<a href="https://github-redirect.dependabot.com/less/less.js/issues/3530">#3530</a>) (<a href="https://github.com/matthew-dean">@matthew-dean</a>)</li> <li><a href="https://github-redirect.dependabot.com/less/less.js/pull/3529">#3529</a> Duplicate dist files in root for older links (<a href="https://github-redirect.dependabot.com/less/less.js/issues/3529">#3529</a>) (<a href="https://github.com/matthew-dean">@matthew-dean</a>)</li> <li><a href="https://github-redirect.dependabot.com/less/less.js/pull/3525">#3525</a> Test-data module (<a href="https://github-redirect.dependabot.com/less/less.js/issues/3525">#3525</a>) (<a href="https://github.com/matthew-dean">@matthew-dean</a>)</li> <li><a href="https://github-redirect.dependabot.com/less/less.js/pull/3523">#3523</a> Fixes <a href="https://github-redirect.dependabot.com/less/less.js/issues/3504">#3504</a> / organizes tests (<a href="https://github-redirect.dependabot.com/less/less.js/issues/3523">#3523</a>) (<a href="https://github.com/matthew-dean">@matthew-dean</a>)</li> <li><a href="https://github-redirect.dependabot.com/less/less.js/pull/3501">#3501</a> Restore nuked scripts (?), replace dependencies (<a href="https://github-redirect.dependabot.com/less/less.js/issues/3501">#3501</a>) (<a href="https://github-redirect.dependabot.com/less/less.js/issues/3522">#3522</a>) (<a href="https://github.com/matthew-dean">@matthew-dean</a>)</li> <li><a href="https://github-redirect.dependabot.com/less/less.js/pull/3521">#3521</a> Lerna refactor / TS compiling w/o bundling (<a href="https://github-redirect.dependabot.com/less/less.js/issues/3521">#3521</a>) (<a href="https://github.com/matthew-dean">@matthew-dean</a>)</li> <li><a href="https://github-redirect.dependabot.com/less/less.js/pull/3517">#3517</a> Resolve <a href="https://github-redirect.dependabot.com/less/less.js/issues/3398">#3398</a> Add flag to disable sourcemap url annotation (<a href="https://github-redirect.dependabot.com/less/less.js/issues/3517">#3517</a>) (<a href="https://github.com/hirosato">@hirosato</a>)</li> <li><a href="https://github-redirect.dependabot.com/less/less.js/pull/3294">#3294</a> fix(<a href="https://github-redirect.dependabot.com/less/less.js/issues/3294">#3294</a>): use loadFileSync when loading plugins with syncImport: true (<a href="https://github-redirect.dependabot.com/less/less.js/issues/3506">#3506</a>) (<a href="https://github.com/Justineo">@Justineo</a>)</li> </ul> <h3>v3.11.3 (2020-06-05)</h3> <ul> <li><a href="https://github-redirect.dependabot.com/less/less.js/pull/3509">#3509</a> Fixes <a href="https://github-redirect.dependabot.com/less/less.js/issues/3508">#3508</a> (<a href="https://github-redirect.dependabot.com/less/less.js/issues/3509">#3509</a>) (<a href="https://github.com/matthew-dean">@matthew-dean</a>)</li> </ul> <h3>v3.11.2 (2020-06-01)</h3> <ul> <li><a href="https://github-redirect.dependabot.com/less/less.js/pull/3498">#3498</a> Remove tree caching in import manager (<a href="https://github-redirect.dependabot.com/less/less.js/issues/3498">#3498</a>) (<a href="https://github.com/matthew-dean">@matthew-dean</a>)</li> <li><a href="https://github-redirect.dependabot.com/less/less.js/pull/3482">#3482</a> issue#3481 ignore missing debugInfo (<a href="https://github-redirect.dependabot.com/less/less.js/issues/3482">#3482</a>) (<a href="https://github.com/5UtJAjiRWj1q">@5UtJAjiRWj1q</a>)</li> <li><a href="https://github-redirect.dependabot.com/less/less.js/pull/3494">#3494</a> Additional check to avoid evaluating an expression if it is a comment (<a href="https://github-redirect.dependabot.com/less/less.js/issues/3494">#3494</a>) (<a href="https://github.com/rgroothuijsen">@rgroothuijsen</a>)</li> <li><a href="https://github-redirect.dependabot.com/less/less.js/pull/3490">#3490</a> fix: Use make-dir instead of mkdirp (<a href="https://github-redirect.dependabot.com/less/less.js/issues/3490">#3490</a>) (<a href="https://github.com/eps1lon">@eps1lon</a>)</li> <li><a href="https://github-redirect.dependabot.com/less/less.js/pull/3493">#3493</a> Properly exit calc mode after use (<a href="https://github-redirect.dependabot.com/less/less.js/issues/3493">#3493</a>) (<a href="https://github.com/rgroothuijsen">@rgroothuijsen</a>)</li> <li><a href="https://github-redirect.dependabot.com/less/less.js/pull/3477">#3477</a> Convert to auto-changelog (<a href="https://github-redirect.dependabot.com/less/less.js/issues/3477">#3477</a>) (<a href="https://github.com/matthew-dean">@matthew-dean</a>)</li> </ul> <h3>v3.11.1 (2020-02-11)</h3> <ul> <li><a href="https://github-redirect.dependabot.com/less/less.js/pull/3475">#3475</a> Fixes <a href="https://github-redirect.dependabot.com/less/less.js/issues/3469">#3469</a> - Include tslib dependency (<a href="https://github-redirect.dependabot.com/less/less.js/issues/3475">#3475</a>) (<a href="https://github.com/matthew-dean">@matthew-dean</a>)</li> </ul> <h3>v3.11.0 (2020-02-09)</h3> <ul> <li><a href="https://github-redirect.dependabot.com/less/less.js/pull/3468">#3468</a> 3.11.0 (<a href="https://github-redirect.dependabot.com/less/less.js/issues/3468">#3468</a>) (<a href="https://github.com/matthew-dean">@matthew-dean</a>)</li> <li><a href="https://github-redirect.dependabot.com/less/less.js/pull/3453">#3453</a> Import file with dots in file name (<a href="https://github-redirect.dependabot.com/less/less.js/issues/3453">#3453</a>) (<a href="https://github.com/life777">@life777</a>)</li> <li><a href="https://github-redirect.dependabot.com/less/less.js/pull/3460">#3460</a> - Fixed replacer when visitor returns array of nodes (<a href="https://github-redirect.dependabot.com/less/less.js/issues/3460">#3460</a>) (<a href="https://github.com/lmartorella">@lmartorella</a>)</li> <li><a href="https://github-redirect.dependabot.com/less/less.js/pull/3454">#3454</a> Added financial contributors to the README (<a href="https://github-redirect.dependabot.com/less/less.js/issues/3454">#3454</a>) (<a href="https://github.com/monkeywithacupcake">@monkeywithacupcake</a>)</li> <li><a href="https://github-redirect.dependabot.com/less/less.js/pull/3431">#3431</a> Fixes <a href="https://github-redirect.dependabot.com/less/less.js/issues/3430">#3430</a>: Removed unnecessary 'important' from NamespaceValue. (<a href="https://github-redirect.dependabot.com/less/less.js/issues/3431">#3431</a>) (<a href="https://github.com/batchunag">@batchunag</a>)</li> <li><a href="https://github-redirect.dependabot.com/less/less.js/pull/3426">#3426</a> Fixes <a href="https://github-redirect.dependabot.com/less/less.js/issues/3405">#3405</a> (<a href="https://github-redirect.dependabot.com/less/less.js/issues/3426">#3426</a>) (<a href="https://github.com/matthew-dean">@matthew-dean</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/less/less.js/commits">compare view</a></li> </ul> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

</details>

Bumps coveralls from 3.0.9 to 3.1.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/nickmerwin/node-coveralls/releases">coveralls's releases</a>.</em></p> <blockquote> <h2>Improved CircleCI / Travis parallelism support</h2> <ul> <li>Handle <code>service_job_number</code> for parallelism in Travis and CircleCI (<a href="https://github-redirect.dependabot.com/nickmerwin/node-coveralls/issues/290">#290</a>) 705c3b5</li> <li>Update sinon to v7.5.0. (<a href="https://github-redirect.dependabot.com/nickmerwin/node-coveralls/issues/288">#288</a>) eb6dc35</li> </ul> <p><a href="https://github.com/nickmerwin/node-coveralls/compare/v3.0.14...v3.1.0">https://github.com/nickmerwin/node-coveralls/compare/v3.0.14...v3.1.0</a></p> <hr /> <p>This is a <code>minor</code> release due to the change in behavior for CircleCI, which now uses the Workflow ID to merge parallel coverage jobs:</p> <pre lang="javascript"><code> options.service_number = process.env.CIRCLE_WORKFLOW_ID; options.service_job_number = process.env.CIRCLE_BUILD_NUM; </code></pre> <h2>Maintenance</h2> <ul> <li>Update safe dependencies and fix npm vulnerabilities (<a href="https://github-redirect.dependabot.com/nickmerwin/node-coveralls/issues/284">#284</a>) 59a57e2</li> <li>Move fixtures to test/fixtures. (<a href="https://github-redirect.dependabot.com/nickmerwin/node-coveralls/issues/286">#286</a>) a0c6941 <a href="https://github.com/XhmikosR">@XhmikosR</a></li> <li>GH Action workflow update (<a href="https://github-redirect.dependabot.com/nickmerwin/node-coveralls/issues/287">#287</a>) 1615297</li> <li>Minor lint tweaks (<a href="https://github-redirect.dependabot.com/nickmerwin/node-coveralls/issues/285">#285</a>) 3647673 <a href="https://github.com/XhmikosR">@XhmikosR</a></li> <li>remove redundant code (<a href="https://github-redirect.dependabot.com/nickmerwin/node-coveralls/issues/283">#283</a>) ff21930 <a href="https://github.com/lpinca">@lpinca</a></li> </ul> <h2>Maintenance release</h2> <p>No release notes provided.</p> <h2>COVERALLS_SERVICE_NUMBER environment variable support</h2> <h1>Improved:</h1> <ul> <li>If COVERALLS_SERVICE_NUMBER is set, set service_number from it. (<a href="https://github.com/midgleyc">@midgleyc</a>)</li> </ul> <h2>CodeFresh support, Maintenance</h2> <h1>Added:</h1> <ul> <li>CodeFresh support (<a href="https://github.com/suda">@suda</a>)</li> </ul> <h1>Improved:</h1> <ul> <li>Travis Pro repo token handling (<a href="https://github.com/benpetty">@benpetty</a> <a href="https://github.com/derekherman">@derekherman</a>)</li> <li>Readme Jest example re: posting on success only (<a href="https://github.com/AndreMiras">@AndreMiras</a>)</li> </ul> <h1>Updated:</h1> <ul> <li>minimist version (<a href="https://github.com/ashishkujoy">@ashishkujoy</a>)</li> <li>GitHub CI actions checkout v2 (<a href="https://github.com/XhmikosR">@XhmikosR</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/nickmerwin/node-coveralls/commit/2f95964f8a0b40f66d8376969b0b0eaa5d0d1ed1"><code>2f95964</code></a> 3.1.0</li> <li><a href="https://github.com/nickmerwin/node-coveralls/commit/705c3b5963e3cc76f8e70381dbae20979008c9b8"><code>705c3b5</code></a> Handle service_job_number for parallelism in Travis and CircleCI (<a href="https://github-redirect.dependabot.com/nickmerwin/node-coveralls/issues/290">#290</a>)</li> <li><a href="https://github.com/nickmerwin/node-coveralls/commit/eb6dc35294715ef07639eb93e6961861d05a1f67"><code>eb6dc35</code></a> Update sinon to v7.5.0. (<a href="https://github-redirect.dependabot.com/nickmerwin/node-coveralls/issues/288">#288</a>)</li> <li><a href="https://github.com/nickmerwin/node-coveralls/commit/844d7658677c1422e98648b8727cd421d1a83e02"><code>844d765</code></a> 3.0.14</li> <li><a href="https://github.com/nickmerwin/node-coveralls/commit/59a57e26339f1efbf77a3e5424b1d72156e0a338"><code>59a57e2</code></a> Update safe dependencies and fix npm vulnerabilities (<a href="https://github-redirect.dependabot.com/nickmerwin/node-coveralls/issues/284">#284</a>)</li> <li><a href="https://github.com/nickmerwin/node-coveralls/commit/a0c69414b7dbeef7aaefdb00ad78dff2a724b192"><code>a0c6941</code></a> Move fixtures to test/fixtures. (<a href="https://github-redirect.dependabot.com/nickmerwin/node-coveralls/issues/286">#286</a>)</li> <li><a href="https://github.com/nickmerwin/node-coveralls/commit/1615297a56f1eaa962ccf794c7b3596f8a146660"><code>1615297</code></a> GH Action workflow update (<a href="https://github-redirect.dependabot.com/nickmerwin/node-coveralls/issues/287">#287</a>)</li> <li><a href="https://github.com/nickmerwin/node-coveralls/commit/3647673f9e43ea973ebed65a891e897415cb2389"><code>3647673</code></a> Minor lint tweaks (<a href="https://github-redirect.dependabot.com/nickmerwin/node-coveralls/issues/285">#285</a>)</li> <li><a href="https://github.com/nickmerwin/node-coveralls/commit/ff21930515e15e367a3d033230d0c5def75fc206"><code>ff21930</code></a> remove redundant code (<a href="https://github-redirect.dependabot.com/nickmerwin/node-coveralls/issues/283">#283</a>)</li> <li><a href="https://github.com/nickmerwin/node-coveralls/commit/eaba7c60d3936ea0d73490486c36ed347149e8c0"><code>eaba7c6</code></a> 3.0.13</li> <li>Additional commits viewable in <a href="https://github.com/nickmerwin/node-coveralls/compare/3.0.9...v3.1.0">compare view</a></li> </ul> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

</details>

Bumps gh-pages from 2.2.0 to 3.1.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/tschaub/gh-pages/releases">gh-pages's releases</a>.</em></p> <blockquote> <h2>v3.0.0</h2> <p>Breaking changes:</p> <p>None really. But tests are no longer run on Node < 10. Development dependencies were updated to address security warnings, and this meant tests could no longer be run on Node 6 or 8. If you still use these Node versions, you may still be able to use this library, but be warned that tests are no longer run on these versions.</p> <p>All changes:</p> <ul> <li><a href="https://github-redirect.dependabot.com/tschaub/gh-pages/pull/357">#357</a> - Dev dependency updates (<a href="https://github.com/tschaub">@tschaub</a>)</li> <li><a href="https://github-redirect.dependabot.com/tschaub/gh-pages/pull/333">#333</a> - Update readme with command line options (<a href="https://github.com/Victoire44">@Victoire44</a>)</li> <li><a href="https://github-redirect.dependabot.com/tschaub/gh-pages/pull/356">#356</a> - Test as a GitHub action (<a href="https://github.com/tschaub">@tschaub</a>)</li> <li><a href="https://github-redirect.dependabot.com/tschaub/gh-pages/pull/355">#355</a> - feat(beforeAdd): allow custom script before git add (<a href="https://github.com/Xiphe">@Xiphe</a>)</li> <li><a href="https://github-redirect.dependabot.com/tschaub/gh-pages/pull/336">#336</a> - Fix remove not working properly (<a href="https://github.com/sunghwan2789">@sunghwan2789</a>)</li> <li><a href="https://github-redirect.dependabot.com/tschaub/gh-pages/pull/328">#328</a> - Update .travis.yml (<a href="https://github.com/XhmikosR">@XhmikosR</a>)</li> <li><a href="https://github-redirect.dependabot.com/tschaub/gh-pages/pull/327">#327</a> - Fix typo (<a href="https://github.com/d-tsuji">@d-tsuji</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/tschaub/gh-pages/blob/main/changelog.md">gh-pages's changelog</a>.</em></p> <blockquote> <h2>v3.1.0</h2> <p>The cache directory used by <code>gh-pages</code> is now <code>node_modules/.cache/gh-pages</code>. If you want to use a different location, set the <code>CACHE_DIR</code> environment variable.</p> <ul> <li><a href="https://github-redirect.dependabot.com/tschaub/gh-pages/pull/362">#362</a> - Move the cache directory (<a href="https://github.com/tschaub">@tschaub</a>)</li> <li><a href="https://github-redirect.dependabot.com/tschaub/gh-pages/pull/361">#361</a> - Update dev dependencies (<a href="https://github.com/tschaub">@tschaub</a>)</li> </ul> <h2>v3.0.0</h2> <p>Breaking changes:</p> <p>None really. But tests are no longer run on Node < 10. Development dependencies were updated to address security warnings, and this meant tests could no longer be run on Node 6 or 8. If you still use these Node versions, you may still be able to use this library, but be warned that tests are no longer run on these versions.</p> <p>All changes:</p> <ul> <li><a href="https://github-redirect.dependabot.com/tschaub/gh-pages/pull/357">#357</a> - Dev dependency updates (<a href="https://github.com/tschaub">@tschaub</a>)</li> <li><a href="https://github-redirect.dependabot.com/tschaub/gh-pages/pull/333">#333</a> - Update readme with command line options (<a href="https://github.com/Victoire44">@Victoire44</a>)</li> <li><a href="https://github-redirect.dependabot.com/tschaub/gh-pages/pull/356">#356</a> - Test as a GitHub action (<a href="https://github.com/tschaub">@tschaub</a>)</li> <li><a href="https://github-redirect.dependabot.com/tschaub/gh-pages/pull/355">#355</a> - feat(beforeAdd): allow custom script before git add (<a href="https://github.com/Xiphe">@Xiphe</a>)</li> <li><a href="https://github-redirect.dependabot.com/tschaub/gh-pages/pull/336">#336</a> - Fix remove not working properly (<a href="https://github.com/sunghwan2789">@sunghwan2789</a>)</li> <li><a href="https://github-redirect.dependabot.com/tschaub/gh-pages/pull/328">#328</a> - Update .travis.yml (<a href="https://github.com/XhmikosR">@XhmikosR</a>)</li> <li><a href="https://github-redirect.dependabot.com/tschaub/gh-pages/pull/327">#327</a> - Fix typo (<a href="https://github.com/d-tsuji">@d-tsuji</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/tschaub/gh-pages/commit/e363b144defe8e555f5a54251a6f7f1297c0e3f6"><code>e363b14</code></a> 3.1.0</li> <li><a href="https://github.com/tschaub/gh-pages/commit/a18a6b4ca33830722c1653e159cecee72af3cac1"><code>a18a6b4</code></a> Log changes</li> <li><a href="https://github.com/tschaub/gh-pages/commit/1517aef512eba8dc5d2985a747aba8d0f5e1fa79"><code>1517aef</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/tschaub/gh-pages/issues/362">#362</a> from tschaub/cache-dir</li> <li><a href="https://github.com/tschaub/gh-pages/commit/5d88feba081223c1fa32ceae3be780c318cee626"><code>5d88feb</code></a> Move the cache directory</li> <li><a href="https://github.com/tschaub/gh-pages/commit/1625ce9861f77ca88092d0c64f7634c33a32767c"><code>1625ce9</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/tschaub/gh-pages/issues/361">#361</a> from tschaub/updates</li> <li><a href="https://github.com/tschaub/gh-pages/commit/4663711edfb5308e24ba992cf9a91310df47d23b"><code>4663711</code></a> Update dev dependencies</li> <li><a href="https://github.com/tschaub/gh-pages/commit/be4cb1782d21235ae4611a096745197e9828d3ee"><code>be4cb17</code></a> Branch name</li> <li><a href="https://github.com/tschaub/gh-pages/commit/6290079fec548b069d0293c2ea7c8b1605b5ee75"><code>6290079</code></a> 3.0.0</li> <li><a href="https://github.com/tschaub/gh-pages/commit/98c2dd9e88a91c4b01c7ef9f2bd41f4c800c2e42"><code>98c2dd9</code></a> Package files</li> <li><a href="https://github.com/tschaub/gh-pages/commit/e61178c7e07237e818360f68304964941cde096e"><code>e61178c</code></a> Log changes</li> <li>Additional commits viewable in <a href="https://github.com/tschaub/gh-pages/compare/v2.2.0...v3.1.0">compare view</a></li> </ul> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

</details>

Bumps @svgr/rollup from 5.0.1 to 5.4.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/gregberge/svgr/releases">@svgr/rollup's releases</a>.</em></p> <blockquote> <h2>v5.4.0</h2> <h3>Bug Fixes</h3> <ul> <li>wrap svg component directly with memo/forwardRef (<a href="https://github-redirect.dependabot.com/gregberge/svgr/issues/440">#440</a>) (<a href="https://github-redirect.dependabot.com/gregberge/svgr/issues/441">#441</a>) (<a href="https://github.com/gregberge/svgr/commit/a6de2da">a6de2da</a>)</li> <li><strong>cli:</strong> fix index generation (<a href="https://github-redirect.dependabot.com/gregberge/svgr/issues/443">#443</a>) (<a href="https://github.com/gregberge/svgr/commit/7c46ad7">7c46ad7</a>), closes <a href="https://github-redirect.dependabot.com/gregberge/svgr/issues/433">#433</a></li> </ul> <h3>Features</h3> <ul> <li>add <code>ForeignObject</code> support for react native (<a href="https://github-redirect.dependabot.com/gregberge/svgr/issues/430">#430</a>) (<a href="https://github.com/gregberge/svgr/commit/1b56b85">1b56b85</a>)</li> <li><strong>cli:</strong> make all CLI options available in config (<a href="https://github.com/gregberge/svgr/commit/a23a186">a23a186</a>), closes <a href="https://github-redirect.dependabot.com/gregberge/svgr/issues/431">#431</a> <a href="https://github-redirect.dependabot.com/gregberge/svgr/issues/437">#437</a></li> </ul> <h2>v5.3.1</h2> <h3>Bug Fixes</h3> <ul> <li>fix typescript types (ref, title) (<a href="https://github-redirect.dependabot.com/gregberge/svgr/issues/419">#419</a>) (<a href="https://github.com/gregberge/svgr/commit/6e7e6b2">6e7e6b2</a>)</li> </ul> <h2>v5.3.0</h2> <h3>Bug Fixes</h3> <ul> <li><strong>cli:</strong> remove confusion between {keep,ignore}-existing (<a href="https://github-redirect.dependabot.com/gregberge/svgr/issues/413">#413</a>) (<a href="https://github.com/gregberge/svgr/commit/c5430f9">c5430f9</a>), closes <a href="https://github-redirect.dependabot.com/gregberge/svgr/issues/390">#390</a></li> <li><strong>parcel-plugin:</strong> support "parcel" and "parcel-bundler" (<a href="https://github.com/gregberge/svgr/commit/853db4e">853db4e</a>), closes <a href="https://github-redirect.dependabot.com/gregberge/svgr/issues/410">#410</a></li> <li><strong>svgo:</strong> support any SVGO config format (<a href="https://github-redirect.dependabot.com/gregberge/svgr/issues/412">#412</a>) (<a href="https://github.com/gregberge/svgr/commit/f2b2367">f2b2367</a>), closes <a href="https://github-redirect.dependabot.com/gregberge/svgr/issues/400">#400</a></li> </ul> <h3>Features</h3> <ul> <li>add typescript option (<a href="https://github.com/gregberge/svgr/commit/4596d7b">4596d7b</a>), closes <a href="https://github-redirect.dependabot.com/gregberge/svgr/issues/373">#373</a></li> </ul> <h2>v5.2.0</h2> <h3>Bug Fixes</h3> <ul> <li>verify that <code>svgoConfig.plugins</code> is an array (<a href="https://github-redirect.dependabot.com/smooth-code/svgr/issues/397">#397</a>) (<a href="https://github.com/smooth-code/svgr/commit/88110b6">88110b6</a>)</li> </ul> <h3>Features</h3> <ul> <li><strong>parcel-plugin:</strong> replace <code>parcel-bundler</code> with <code>parcel</code> (<a href="https://github-redirect.dependabot.com/smooth-code/svgr/issues/387">#387</a>) (<a href="https://github.com/smooth-code/svgr/commit/d09bcd5">d09bcd5</a>)</li> </ul> <h2>v5.1.0</h2> <!-- raw HTML omitted --> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/gregberge/svgr/blob/master/CHANGELOG.md">@svgr/rollup's changelog</a>.</em></p> <blockquote> <h1><a href="https://github.com/gregberge/svgr/compare/v5.3.1...v5.4.0">5.4.0</a> (2020-04-27)</h1> <h3>Bug Fixes</h3> <ul> <li>wrap svg component directly with memo/forwardRef (<a href="https://github-redirect.dependabot.com/gregberge/svgr/issues/440">#440</a>) (<a href="https://github-redirect.dependabot.com/gregberge/svgr/issues/441">#441</a>) (<a href="https://github.com/gregberge/svgr/commit/a6de2dacb63e36572a2167b928418bdc39f3a9c2">a6de2da</a>)</li> <li><strong>cli:</strong> fix index generation (<a href="https://github-redirect.dependabot.com/gregberge/svgr/issues/443">#443</a>) (<a href="https://github.com/gregberge/svgr/commit/7c46ad73695c42e6153761c931377d65b71835ea">7c46ad7</a>), closes <a href="https://github-redirect.dependabot.com/gregberge/svgr/issues/433">#433</a></li> </ul> <h3>Features</h3> <ul> <li>add <code>ForeignObject</code> support for react native (<a href="https://github-redirect.dependabot.com/gregberge/svgr/issues/430">#430</a>) (<a href="https://github.com/gregberge/svgr/commit/1b56b851478803d40105ce63c70e457bd3183da6">1b56b85</a>)</li> <li><strong>cli:</strong> make all CLI options available in config (<a href="https://github.com/gregberge/svgr/commit/a23a18675c0dd4a461d2fcbdc72a305cabd32a13">a23a186</a>), closes <a href="https://github-redirect.dependabot.com/gregberge/svgr/issues/431">#431</a> <a href="https://github-redirect.dependabot.com/gregberge/svgr/issues/437">#437</a></li> </ul> <h2><a href="https://github.com/gregberge/svgr/compare/v5.3.0...v5.3.1">5.3.1</a> (2020-04-05)</h2> <h3>Bug Fixes</h3> <ul> <li>fix typescript types (ref, title) (<a href="https://github-redirect.dependabot.com/gregberge/svgr/issues/419">#419</a>) (<a href="https://github.com/gregberge/svgr/commit/6e7e6b2e73d26d30f64604e0fc627f9ff94079c2">6e7e6b2</a>)</li> </ul> <h1><a href="https://github.com/gregberge/svgr/compare/v5.2.0...v5.3.0">5.3.0</a> (2020-03-22)</h1> <h3>Bug Fixes</h3> <ul> <li><strong>cli:</strong> remove confusion between {keep,ignore}-existing (<a href="https://github-redirect.dependabot.com/gregberge/svgr/issues/413">#413</a>) (<a href="https://github.com/gregberge/svgr/commit/c5430f97b053a7d2d85c85c56b87dfc8c9c1f09a">c5430f9</a>), closes <a href="https://github-redirect.dependabot.com/gregberge/svgr/issues/390">#390</a></li> <li><strong>parcel-plugin:</strong> support "parcel" and "parcel-bundler" (<a href="https://github.com/gregberge/svgr/commit/853db4ef0e9da4952e8189e3f86fb62e6c506693">853db4e</a>), closes <a href="https://github-redirect.dependabot.com/gregberge/svgr/issues/410">#410</a></li> <li><strong>svgo:</strong> support any SVGO config format (<a href="https://github-redirect.dependabot.com/gregberge/svgr/issues/412">#412</a>) (<a href="https://github.com/gregberge/svgr/commit/f2b2367389fda20baba6e0a5e884e7f7fe29a3ed">f2b2367</a>), closes <a href="https://github-redirect.dependabot.com/gregberge/svgr/issues/400">#400</a></li> </ul> <h3>Features</h3> <ul> <li>add typescript option (<a href="https://github.com/gregberge/svgr/commit/4596d7bb470babb5ec4b87f5281174fb182bd9c7">4596d7b</a>), closes <a href="https://github-redirect.dependabot.com/gregberge/svgr/issues/373">#373</a></li> </ul> <h1><a href="https://github.com/smooth-code/svgr/compare/v5.1.0...v5.2.0">5.2.0</a> (2020-02-23)</h1> <!-- raw HTML omitted --> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/gregberge/svgr/commit/e9c9d2fbfbce7a6879c90cd8522101caf2406d42"><code>e9c9d2f</code></a> v5.4.0</li> <li><a href="https://github.com/gregberge/svgr/commit/6179cd944d15351da0eb64eb3966e159fc4ff4ae"><code>6179cd9</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/gregberge/svgr/issues/445">#445</a> from gregberge/cli-options-in-config</li> <li><a href="https://github.com/gregberge/svgr/commit/8c6f7b560e9917cd69d081ddb24af6c3d86c9694"><code>8c6f7b5</code></a> style: prettier format</li> <li><a href="https://github.com/gregberge/svgr/commit/a23a18675c0dd4a461d2fcbdc72a305cabd32a13"><code>a23a186</code></a> feat(cli): make all CLI options available in config</li> <li><a href="https://github.com/gregberge/svgr/commit/d0b59cd94ea94705de39d997d1a17cf6b0978ed2"><code>d0b59cd</code></a> chore(deps): upgrade (<a href="https://github-redirect.dependabot.com/gregberge/svgr/issues/444">#444</a>)</li> <li><a href="https://github.com/gregberge/svgr/commit/1b56b851478803d40105ce63c70e457bd3183da6"><code>1b56b85</code></a> feat: add <code>ForeignObject</code> support for react native (<a href="https://github-redirect.dependabot.com/gregberge/svgr/issues/430">#430</a>)</li> <li><a href="https://github.com/gregberge/svgr/commit/7c46ad73695c42e6153761c931377d65b71835ea"><code>7c46ad7</code></a> fix(cli): fix index generation (<a href="https://github-redirect.dependabot.com/gregberge/svgr/issues/443">#443</a>)</li> <li><a href="https://github.com/gregberge/svgr/commit/706df219f39c9e2b97b5dba387cbf7710ebfad7e"><code>706df21</code></a> docs(readme): add link to VSCode extension (<a href="https://github-redirect.dependabot.com/gregberge/svgr/issues/434">#434</a>)</li> <li><a href="https://github.com/gregberge/svgr/commit/a6de2dacb63e36572a2167b928418bdc39f3a9c2"><code>a6de2da</code></a> fix: wrap svg component directly with memo/forwardRef (<a href="https://github-redirect.dependabot.com/gregberge/svgr/issues/440">#440</a>) (<a href="https://github-redirect.dependabot.com/gregberge/svgr/issues/441">#441</a>)</li> <li><a href="https://github.com/gregberge/svgr/commit/f30bb859254770c3507b55e53ed85607ed879ef6"><code>f30bb85</code></a> v5.3.1</li> <li>Additional commits viewable in <a href="https://github.com/gregberge/svgr/compare/v5.0.1...v5.4.0">compare view</a></li> </ul> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

</details>

• error detect supported

• error detect supported

没人用 grid 写一个么 :D

LGTM. 但是就“够用”来说 object 在大多数场景里肯定是够了。。

Ready to merge

Please fill in this template.

• [x] Use a meaningful title for the pull request. Include the name of the package modified.
• [x] Test the change in your own code. (Compile and run.)
• [x] Add or edit tests to reflect the change. (Run with npm test.)
• [x] Follow the advice from the readme.
• [x] Avoid common mistakes.
• [x] Run npm run lint package-name (or tsc if no tslint.json is present).

Select one of these and delete the others:

• [x] Provide a URL to documentation or source code which provides context for the suggested changes: <https://github.com/malte-wessel/react-custom-scrollbars/blob/master/src/Scrollbars/index.js#L509>
• [x] If this PR brings the type definitions up to date with a new version of the JS library, update the version number in the header.
• [x] Include tests for your changes
• [x] If you are making substantial changes, consider adding a tslint.json containing { "extends": "dtslint/dt.json" }. If for reason the any rule need to be disabled, disable it for that line using // tslint:disable-next-line [ruleName] and not for whole package so that the need for disabling can be reviewed.

Sorry, I didn't see, you've merge conflicts, resolve them please

Resolved.

ping @abhisheknaiidu