This PR contains the following updates:

Release Notes

<details> <summary>vercel/next.js</summary>

v10.0.0

Compare Source

Core Changes

• Add handling for domain to locale mapping: #​17771
• Make sure locale detecting is case-insensitive: #​17757
• Fix a couple i18n cases: #​17805
• Font optimization for webpack 5: #​17450
• Allow pages to be async modules to enable top-level-await: #​17590
• Update redirect handling for locale domains: #​17856
• Image component foundation: #​17343
• chore(collect-plugins.ts): removes duplicated entries: #​17441
• Resolve to real path before checking for path inequality: #​17279
• Handle preferring default locale over accept-lang preferred locale: #​17883
• Add locale prop for transitioning locales client side: #​17898
• Make sure that params are properly passed to hybrid amp pages: #​17461
• Add i18n items to routes manifest: #​17893
• Add support for returning 404 from getStaticProps: #​17755
• Ensure i18n support with AMP: #​17923
• Call Web Vitals reporting at correct time: #​17933
• Fix initialRevalidateSeconds manifest field with i18n: #​17926
• Add support for Image Optimizer: #​17749
• Add missing next/image package file: #​17940
• Only load plugins with @​next prefix: #​17945
• Update default configuration to match image optimization: #​17943
• Fix width param name for Image Optimizer: #​17952
• Unify config.image.breakpoints to config.image.sizes: #​17953
• Improve types for Image Component: #​17954
• Add perf data experiment: #​17956
• Make sure w parameter is only included when a width is provided.: #​17971
• Image component lazy loading: #​17916
• Make sure animated assets aren't de-animated by optimizer: #​17974
• Fix types for lazy image component: #​17984
• Update to postcss-loader 4.0.2.: #​17458
• Update handling for relative files in image-optimizer: #​17998
• Ensure correct default locale is detected for domain locale: #​18046
• Remove multi-host support for image component and support quality pass-through: #​18038
• Add width and height props to Image component: #​18031
• Ensure root index GSP page's revalidate is recorded: #​18053
• Update resolve-url-loader to fix vulnerability: #​18064
• Pass locales to getStaticPaths for i18n: #​18077
• Add unsized property to Image component: #​18059
• Fix css dependency in /_error: #​17301
• Move sharp to optionalDependencies: #​18068
• Update to PostCSS 8.: #​17415
• Update peerdependency to account for React 17: #​18089
• Upgrade to Chokidar 3.: #​17558
• Upgrade @​ampproject/toolbox-optimizer: #​18087
• Fix precompiled code: #​18093
• Image Component: Support for Akamai image CDN: #​18100
• Fix Image component defaults & remove autoOptimize: #​18101
• Fix merge conflict: #​18106
• Update fallback 404 handling to prevent reload loop: #​18119
• Make lazy-loading the default for next/image: #​18123
• Add locale false handling: #​18115
• Bypass image optimization for vector images: #​18179
• Add support for string width/height on Image component: #​18178
• Fix flashing of no-src image when using next/image: #​18195
• Bump styled-jsx to 3.3.1: #​18200
• Ensure 404 with SSG is rendered correctly with notFound: #​18205
• Update use-subscription to account for React 17 peerDependency: #​18199
• Separate config into deviceSizes and iconSizes (#​18267)
• Add config limit checks for image optimizer (#​18217)
• Fix Image srcset to ensure the component's width is the largest possible image (#​18236)
• Add next/image default loader errors (#​18152)
• Image Optimization API should 404 when loader is not default (#​18211)
• Adjust configuration option placement: #​18279
• Remove unstable_ prefix from unstable_blocking: #​18276
• Fix browser back issue of redirects from getServerSideProps / getStaticProps: #​17741
• Add support for notFound in getServerSideProps: #​18241
• Improve type for GSP return type: #​18285
• Remove unstable_ prefix from unstable_redirect: #​18282
• Re-add domain locale redirect handling: #​18274
• Remove unstable_ prefix from unstable_notFound: #​18283
• Add fetching 404 SSG data on fallback notFound: #​18214
• Expose configured default locale in GS(S)P methods: #​18216
• Adjust default image quality to 75: #​18292
• Add support number quality on Image Component: #​18224
• Rename iconSizes to imageSizes, remove size limitation: #​18294
• Record leveraged configs: #​18175
• Fix trailing slash for default image loader: #​18298
• Ensure getStaticProps is called for SSG 404 in blocking mode: #​18300
• Enable feature flag: #​18303

Documentation Changes

• Fix grammatical typo in docs: #​17779
• Fix broken url caused in docs: #​17789
• Fix higherOrderComponent causing broken layout: #​17812
• docs: Clarify use of getStaticProps / getServerSideProps with app / document: #​17839
• Add use-npm CLI flag docs: #​17803
• (docs) Fixes for "Migrating from Gatsby" doc: #​17858
• Capitalize Data Fetching title in docs: #​18001
• Fix typo in headers docs example: #​18012
• Add initial i18n documentation: #​18067
• Add docs for Image Optimization: #​18107
• Fix image optimization docs (#​18254)
• Add i18n routing docs to manifest: #​18264
• Add absolute import example: #​17342
• Update example link text: #​18286
• update @​now/next to @​vercel/next: #​18246
• Update docs - add default config for images property: #​18296

Example Changes

• Improve with-tailwindcss example: #​17742
• feat(example): added missing prisma.io examples: #​17896
• Fixed link for expo: #​17908
• Fix with-mongodb hot-reload issue and race condition: #​17666
• Updated dependencies for example: with-react-native-web: #​17375
• Add with-facebook-pixel example: #​17667
• Update step 5 to Strapi example Readme: #​17985
• Use ya in case xa is false: #​18074
• Add initial example for i18n routing: #​18206

Misc Changes

• Stabilize i18n fallback test: #​17957

Credits

This release was brought to you by the contributions of: @​ijjk, @​adebiyial, @​elliottsj, @​saintmalik, @​HaNdTriX, @​prateekbh, @​amirsaeed671, @​paambaati, @​imagentleman, @​gregrickaby, @​Janpot, @​atcastle, @​Kirkhammetz, @​remorses, @​davidsonsns, @​kmkzt, @​slawekkolodziej, @​Timer, @​styfle, @​timneutkens, @​ykzts, @​ashconnell, @​orYoffe, @​lfades, @​justinwhall, @​fbaiodias, @​ludofischer, @​felipeguilhermefs, @​gr-qft, @​TasukuUno, @​YichiZ, @​weichienhung, @​seosmmbusiness, @​HsuTing, @​gsimone, @​peduarte, @​ztanner, @​neighborhood999, @​chibicode, @​merceyz, @​opudalo, @​lunchboxav, @​mohsen1, @​akd-io, @​justman00, @​helloworld, @​devknoll, @​borekb, @​ArthurMaverick, @​sakito21, @​TrySound, @​omBratteng, @​svenheden, @​hallaji, @​kettanaito, @​vvo, @​m-lautenbach, @​jensmeindertsma, @​Zeko369, @​longlho, @​stefanprobst, @​laugharn, @​sdornan, @​daneroo, @​mohd-akram, @​austingmhuang, @​sphilee, @​devinekadeni, @​Bacher, @​nghiepit, @​tomasdisk, @​leader22, @​paulogdm, @​284km, @​belgattitude, @​geritol, @​stigkj, @​sampoder, @​samrobbins85, @​Pitasi, @​digitalPlayer1125, @​timfee, @​plug-n-play, @​philihp, @​leerob, @​dylanjha, @​Kerumen, @​rdimaio, @​jorisw, @​zerbinidamata, @​jamesgeorge007, @​Jashnm, and @​futantan!

</details>

Renovate configuration

:date: Schedule: At any time (no schedule defined).

:vertical_traffic_light: Automerge: Disabled by config. Please merge this manually once you are satisfied.

:recycle: Rebasing: Renovate will not automatically rebase this PR, because other commits have been found.

:no_bell: Ignore: Close this PR and you won't be reminded about this update again.

• [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

This PR has been generated by WhiteSource Renovate. View repository job log here.

:rotating_light: The automated release from the master branch failed. :rotating_light:

I recommend you give this issue a high priority, so other packages depending on you could benefit from your bug fixes and new features.

You can find below the list of errors reported by semantic-release. Each one of them has to be resolved in order to automatically publish your package. I’m sure you can resolve this 💪.

Errors are usually caused by a misconfiguration or an authentication problem. With each error reported below you will find explanation and guidance to help you to resolve it.

Once all the errors are resolved, semantic-release will release your package the next time you push a commit to the master branch. You can also manually restart the failed CI job that runs semantic-release.

If you are not sure how to resolve this, here is some links that can help you:

• Usage documentation
• Frequently Asked Questions
• Support channels

If those don’t help, or if this issue is reporting something you think isn’t right, you can always ask the humans behind semantic-release.

Invalid npm token.

The npm token configured in the NPM_TOKEN environment variable must be a valid token allowing to publish to the registry https://registry.npmjs.org/.

If you are using Two-Factor Authentication, make configure the auth-only level is supported. semantic-release cannot publish with the default auth-and-writes level.

Please make sure to set the NPM_TOKEN environment variable in your CI with the exact value of the npm token.

Good luck with your project ✨

Your semantic-release bot :package::rocket:

<!-- semantic-release:github -->

May need to wait for RN itself to support React v17? They expect it in RN v0.65-ish.

This PR contains the following updates:

Release Notes

<details> <summary>facebook/react</summary>

v17.0.1

Compare Source

React DOM

• Fix a crash in IE11. (@​gaearon in #​20071)

v17.0.0

Compare Source

Today, we are releasing React 17!

Learn more about React 17 and how to update to it on the official React blog.

React

• Add react/jsx-runtime and react/jsx-dev-runtime for the new JSX transform. (@​lunaruan in #​18299)
• Build component stacks from native error frames. (@​sebmarkbage in #​18561)
• Allow to specify displayName on context for improved stacks. (@​eps1lon in #​18224)
• Prevent 'use strict' from leaking in the UMD bundles. (@​koba04 in #​19614)
• Stop using fb.me for redirects. (@​cylim in #​19598)

React DOM

• Delegate events to roots instead of document. (@​trueadm in #​18195 and others)
• Clean up all effects before running any next effects. (@​bvaughn in #​17947)
• Run useEffect cleanup functions asynchronously. (@​bvaughn in #​17925)
• Use browser focusin and focusout for onFocus and onBlur. (@​trueadm in #​19186)
• Make all Capture events use the browser capture phase. (@​trueadm in #​19221)
• Don't emulate bubbling of the onScroll event. (@​gaearon in #​19464)
• Throw if forwardRef or memo component returns undefined. (@​gaearon in #​19550)
• Remove event pooling. (@​trueadm in #​18969)
• Stop exposing internals that won’t be needed by React Native Web. (@​necolas in #​18483)
• Attach all known event listeners when the root mounts. (@​gaearon in #​19659)
• Disable console in the second render pass of DEV mode double render. (@​sebmarkbage in #​18547)
• Deprecate the undocumented and misleading ReactTestUtils.SimulateNative API. (@​gaearon in #​13407)
• Rename private field names used in the internals. (@​gaearon in #​18377)
• Don't call User Timing API in development. (@​gaearon in #​18417)
• Disable console during the repeated render in Strict Mode. (@​sebmarkbage in #​18547)
• In Strict Mode, double-render components without Hooks too. (@​eps1lon in #​18430)
• Allow calling ReactDOM.flushSync during lifecycle methods (but warn). (@​sebmarkbage in #​18759)
• Add the code property to the keyboard event objects. (@​bl00mber in #​18287)
• Add the disableRemotePlayback property for video elements. (@​tombrowndev in #​18619)
• Add the enterKeyHint property for input elements. (@​eps1lon in #​18634)
• Warn when no value is provided to <Context.Provider>. (@​charlie1404 in #​19054)
• Warn when memo or forwardRef components return undefined. (@​bvaughn in #​19550)
• Improve the error message for invalid updates. (@​JoviDeCroock in #​18316)
• Exclude forwardRef and memo from stack frames. (@​sebmarkbage in #​18559)
• Improve the error message when switching between controlled and uncontrolled inputs. (@​vcarl in #​17070)
• Keep onTouchStart, onTouchMove, and onWheel passive. (@​gaearon in #​19654)
• Fix setState hanging in development inside a closed iframe. (@​gaearon in #​19220)
• Fix rendering bailout for lazy components with defaultProps. (@​jddxf in #​18539)
• Fix a false positive warning when dangerouslySetInnerHTML is undefined. (@​eps1lon in #​18676)
• Fix Test Utils with non-standard require implementation. (@​just-boris in #​18632)
• Fix onBeforeInput reporting an incorrect event.type. (@​eps1lon in #​19561)
• Fix event.relatedTarget reported as undefined in Firefox. (@​claytercek in #​19607)
• Fix "unspecified error" in IE11. (@​hemakshis in #​19664)
• Fix rendering into a shadow root. (@​Jack-Works in #​15894)
• Fix movementX/Y polyfill with capture events. (@​gaearon in #​19672)
• Use delegation for onSubmit and onReset events. (@​gaearon in #​19333)
• Improve memory usage. (@​trueadm in #​18970)

React DOM Server

• Make useCallback behavior consistent with useMemo for the server renderer. (@​alexmckenley in #​18783)
• Fix state leaking when a function component throws. (@​pmaccart in #​19212)

React Test Renderer

• Improve findByType error message. (@​henryqdineen in #​17439)

Concurrent Mode (Experimental)

• Revamp the priority batching heuristics. (@​acdlite in #​18796)
• Add the unstable_ prefix before the experimental APIs. (@​acdlite in #​18825)
• Remove unstable_discreteUpdates and unstable_flushDiscreteUpdates. (@​trueadm in #​18825)
• Remove the timeoutMs argument. (@​acdlite in #​19703)
• Disable <div hidden /> prerendering in favor of a different future API. (@​acdlite in #​18917)
• Add unstable_expectedLoadTime to Suspense for CPU-bound trees. (@​acdlite in #​19936)
• Add an experimental unstable_useOpaqueIdentifier Hook. (@​lunaruan in #​17322)
• Add an experimental unstable_startTransition API. (@​rickhanlonii in #​19696)
• Using act in the test renderer no longer flushes Suspense fallbacks. (@​acdlite in #​18596)
• Use global render timeout for CPU Suspense. (@​sebmarkbage in #​19643)
• Clear the existing root content before mounting. (@​bvaughn in #​18730)
• Fix a bug with error boundaries. (@​acdlite in #​18265)
• Fix a bug causing dropped updates in a suspended tree. (@​acdlite in #​18384 and #​18457)
• Fix a bug causing dropped render phase updates. (@​acdlite in #​18537)
• Fix a bug in SuspenseList. (@​sebmarkbage in #​18412)
• Fix a bug causing Suspense fallback to show too early. (@​acdlite in #​18411)
• Fix a bug with class components inside SuspenseList. (@​sebmarkbage in #​18448)
• Fix a bug with inputs that may cause updates to be dropped. (@​jddxf in #​18515 and @​acdlite in #​18535)
• Fix a bug causing Suspense fallback to get stuck. (@​acdlite in #​18663)
• Don't cut off the tail of a SuspenseList if hydrating. (@​sebmarkbage in #​18854)
• Fix a bug in useMutableSource that may happen when getSnapshot changes. (@​bvaughn in #​18297)
• Fix a tearing bug in useMutableSource. (@​bvaughn in #​18912)
• Warn if calling setState outside of render but before commit. (@​sebmarkbage in #​18838)

</details>

Renovate configuration

:date: Schedule: At any time (no schedule defined).

:vertical_traffic_light: Automerge: Disabled by config. Please merge this manually once you are satisfied.

:recycle: Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

:no_bell: Ignore: Close this PR and you won't be reminded about these updates again.

• [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

This PR has been generated by WhiteSource Renovate. View repository job log here.

This PR contains the following updates:

Release Notes

<details> <summary>facebook/react</summary>

v17.0.1

Compare Source

React DOM

• Fix a crash in IE11. (@​gaearon in #​20071)

v17.0.0

Compare Source

Today, we are releasing React 17!

Learn more about React 17 and how to update to it on the official React blog.

React

• Add react/jsx-runtime and react/jsx-dev-runtime for the new JSX transform. (@​lunaruan in #​18299)
• Build component stacks from native error frames. (@​sebmarkbage in #​18561)
• Allow to specify displayName on context for improved stacks. (@​eps1lon in #​18224)
• Prevent 'use strict' from leaking in the UMD bundles. (@​koba04 in #​19614)
• Stop using fb.me for redirects. (@​cylim in #​19598)

React DOM

• Delegate events to roots instead of document. (@​trueadm in #​18195 and others)
• Clean up all effects before running any next effects. (@​bvaughn in #​17947)
• Run useEffect cleanup functions asynchronously. (@​bvaughn in #​17925)
• Use browser focusin and focusout for onFocus and onBlur. (@​trueadm in #​19186)
• Make all Capture events use the browser capture phase. (@​trueadm in #​19221)
• Don't emulate bubbling of the onScroll event. (@​gaearon in #​19464)
• Throw if forwardRef or memo component returns undefined. (@​gaearon in #​19550)
• Remove event pooling. (@​trueadm in #​18969)
• Stop exposing internals that won’t be needed by React Native Web. (@​necolas in #​18483)
• Attach all known event listeners when the root mounts. (@​gaearon in #​19659)
• Disable console in the second render pass of DEV mode double render. (@​sebmarkbage in #​18547)
• Deprecate the undocumented and misleading ReactTestUtils.SimulateNative API. (@​gaearon in #​13407)
• Rename private field names used in the internals. (@​gaearon in #​18377)
• Don't call User Timing API in development. (@​gaearon in #​18417)
• Disable console during the repeated render in Strict Mode. (@​sebmarkbage in #​18547)
• In Strict Mode, double-render components without Hooks too. (@​eps1lon in #​18430)
• Allow calling ReactDOM.flushSync during lifecycle methods (but warn). (@​sebmarkbage in #​18759)
• Add the code property to the keyboard event objects. (@​bl00mber in #​18287)
• Add the disableRemotePlayback property for video elements. (@​tombrowndev in #​18619)
• Add the enterKeyHint property for input elements. (@​eps1lon in #​18634)
• Warn when no value is provided to <Context.Provider>. (@​charlie1404 in #​19054)
• Warn when memo or forwardRef components return undefined. (@​bvaughn in #​19550)
• Improve the error message for invalid updates. (@​JoviDeCroock in #​18316)
• Exclude forwardRef and memo from stack frames. (@​sebmarkbage in #​18559)
• Improve the error message when switching between controlled and uncontrolled inputs. (@​vcarl in #​17070)
• Keep onTouchStart, onTouchMove, and onWheel passive. (@​gaearon in #​19654)
• Fix setState hanging in development inside a closed iframe. (@​gaearon in #​19220)
• Fix rendering bailout for lazy components with defaultProps. (@​jddxf in #​18539)
• Fix a false positive warning when dangerouslySetInnerHTML is undefined. (@​eps1lon in #​18676)
• Fix Test Utils with non-standard require implementation. (@​just-boris in #​18632)
• Fix onBeforeInput reporting an incorrect event.type. (@​eps1lon in #​19561)
• Fix event.relatedTarget reported as undefined in Firefox. (@​claytercek in #​19607)
• Fix "unspecified error" in IE11. (@​hemakshis in #​19664)
• Fix rendering into a shadow root. (@​Jack-Works in #​15894)
• Fix movementX/Y polyfill with capture events. (@​gaearon in #​19672)
• Use delegation for onSubmit and onReset events. (@​gaearon in #​19333)
• Improve memory usage. (@​trueadm in #​18970)

React DOM Server

• Make useCallback behavior consistent with useMemo for the server renderer. (@​alexmckenley in #​18783)
• Fix state leaking when a function component throws. (@​pmaccart in #​19212)

React Test Renderer

• Improve findByType error message. (@​henryqdineen in #​17439)

Concurrent Mode (Experimental)

• Revamp the priority batching heuristics. (@​acdlite in #​18796)
• Add the unstable_ prefix before the experimental APIs. (@​acdlite in #​18825)
• Remove unstable_discreteUpdates and unstable_flushDiscreteUpdates. (@​trueadm in #​18825)
• Remove the timeoutMs argument. (@​acdlite in #​19703)
• Disable <div hidden /> prerendering in favor of a different future API. (@​acdlite in #​18917)
• Add unstable_expectedLoadTime to Suspense for CPU-bound trees. (@​acdlite in #​19936)
• Add an experimental unstable_useOpaqueIdentifier Hook. (@​lunaruan in #​17322)
• Add an experimental unstable_startTransition API. (@​rickhanlonii in #​19696)
• Using act in the test renderer no longer flushes Suspense fallbacks. (@​acdlite in #​18596)
• Use global render timeout for CPU Suspense. (@​sebmarkbage in #​19643)
• Clear the existing root content before mounting. (@​bvaughn in #​18730)
• Fix a bug with error boundaries. (@​acdlite in #​18265)
• Fix a bug causing dropped updates in a suspended tree. (@​acdlite in #​18384 and #​18457)
• Fix a bug causing dropped render phase updates. (@​acdlite in #​18537)
• Fix a bug in SuspenseList. (@​sebmarkbage in #​18412)
• Fix a bug causing Suspense fallback to show too early. (@​acdlite in #​18411)
• Fix a bug with class components inside SuspenseList. (@​sebmarkbage in #​18448)
• Fix a bug with inputs that may cause updates to be dropped. (@​jddxf in #​18515 and @​acdlite in #​18535)
• Fix a bug causing Suspense fallback to get stuck. (@​acdlite in #​18663)
• Don't cut off the tail of a SuspenseList if hydrating. (@​sebmarkbage in #​18854)
• Fix a bug in useMutableSource that may happen when getSnapshot changes. (@​bvaughn in #​18297)
• Fix a tearing bug in useMutableSource. (@​bvaughn in #​18912)
• Warn if calling setState outside of render but before commit. (@​sebmarkbage in #​18838)

</details>

Renovate configuration

:date: Schedule: At any time (no schedule defined).

:vertical_traffic_light: Automerge: Disabled by config. Please merge this manually once you are satisfied.

:recycle: Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

:no_bell: Ignore: Close this PR and you won't be reminded about these updates again.

• [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

This PR has been generated by WhiteSource Renovate. View repository job log here.

This PR contains the following updates:

Release Notes

<details> <summary>facebook/react</summary>

v17.0.1

Compare Source

React DOM

• Fix a crash in IE11. (@​gaearon in #​20071)

v17.0.0

Compare Source

Today, we are releasing React 17!

Learn more about React 17 and how to update to it on the official React blog.

React

• Add react/jsx-runtime and react/jsx-dev-runtime for the new JSX transform. (@​lunaruan in #​18299)
• Build component stacks from native error frames. (@​sebmarkbage in #​18561)
• Allow to specify displayName on context for improved stacks. (@​eps1lon in #​18224)
• Prevent 'use strict' from leaking in the UMD bundles. (@​koba04 in #​19614)
• Stop using fb.me for redirects. (@​cylim in #​19598)

React DOM

• Delegate events to roots instead of document. (@​trueadm in #​18195 and others)
• Clean up all effects before running any next effects. (@​bvaughn in #​17947)
• Run useEffect cleanup functions asynchronously. (@​bvaughn in #​17925)
• Use browser focusin and focusout for onFocus and onBlur. (@​trueadm in #​19186)
• Make all Capture events use the browser capture phase. (@​trueadm in #​19221)
• Don't emulate bubbling of the onScroll event. (@​gaearon in #​19464)
• Throw if forwardRef or memo component returns undefined. (@​gaearon in #​19550)
• Remove event pooling. (@​trueadm in #​18969)
• Stop exposing internals that won’t be needed by React Native Web. (@​necolas in #​18483)
• Attach all known event listeners when the root mounts. (@​gaearon in #​19659)
• Disable console in the second render pass of DEV mode double render. (@​sebmarkbage in #​18547)
• Deprecate the undocumented and misleading ReactTestUtils.SimulateNative API. (@​gaearon in #​13407)
• Rename private field names used in the internals. (@​gaearon in #​18377)
• Don't call User Timing API in development. (@​gaearon in #​18417)
• Disable console during the repeated render in Strict Mode. (@​sebmarkbage in #​18547)
• In Strict Mode, double-render components without Hooks too. (@​eps1lon in #​18430)
• Allow calling ReactDOM.flushSync during lifecycle methods (but warn). (@​sebmarkbage in #​18759)
• Add the code property to the keyboard event objects. (@​bl00mber in #​18287)
• Add the disableRemotePlayback property for video elements. (@​tombrowndev in #​18619)
• Add the enterKeyHint property for input elements. (@​eps1lon in #​18634)
• Warn when no value is provided to <Context.Provider>. (@​charlie1404 in #​19054)
• Warn when memo or forwardRef components return undefined. (@​bvaughn in #​19550)
• Improve the error message for invalid updates. (@​JoviDeCroock in #​18316)
• Exclude forwardRef and memo from stack frames. (@​sebmarkbage in #​18559)
• Improve the error message when switching between controlled and uncontrolled inputs. (@​vcarl in #​17070)
• Keep onTouchStart, onTouchMove, and onWheel passive. (@​gaearon in #​19654)
• Fix setState hanging in development inside a closed iframe. (@​gaearon in #​19220)
• Fix rendering bailout for lazy components with defaultProps. (@​jddxf in #​18539)
• Fix a false positive warning when dangerouslySetInnerHTML is undefined. (@​eps1lon in #​18676)
• Fix Test Utils with non-standard require implementation. (@​just-boris in #​18632)
• Fix onBeforeInput reporting an incorrect event.type. (@​eps1lon in #​19561)
• Fix event.relatedTarget reported as undefined in Firefox. (@​claytercek in #​19607)
• Fix "unspecified error" in IE11. (@​hemakshis in #​19664)
• Fix rendering into a shadow root. (@​Jack-Works in #​15894)
• Fix movementX/Y polyfill with capture events. (@​gaearon in #​19672)
• Use delegation for onSubmit and onReset events. (@​gaearon in #​19333)
• Improve memory usage. (@​trueadm in #​18970)

React DOM Server

• Make useCallback behavior consistent with useMemo for the server renderer. (@​alexmckenley in #​18783)
• Fix state leaking when a function component throws. (@​pmaccart in #​19212)

React Test Renderer

• Improve findByType error message. (@​henryqdineen in #​17439)

Concurrent Mode (Experimental)

• Revamp the priority batching heuristics. (@​acdlite in #​18796)
• Add the unstable_ prefix before the experimental APIs. (@​acdlite in #​18825)
• Remove unstable_discreteUpdates and unstable_flushDiscreteUpdates. (@​trueadm in #​18825)
• Remove the timeoutMs argument. (@​acdlite in #​19703)
• Disable <div hidden /> prerendering in favor of a different future API. (@​acdlite in #​18917)
• Add unstable_expectedLoadTime to Suspense for CPU-bound trees. (@​acdlite in #​19936)
• Add an experimental unstable_useOpaqueIdentifier Hook. (@​lunaruan in #​17322)
• Add an experimental unstable_startTransition API. (@​rickhanlonii in #​19696)
• Using act in the test renderer no longer flushes Suspense fallbacks. (@​acdlite in #​18596)
• Use global render timeout for CPU Suspense. (@​sebmarkbage in #​19643)
• Clear the existing root content before mounting. (@​bvaughn in #​18730)
• Fix a bug with error boundaries. (@​acdlite in #​18265)
• Fix a bug causing dropped updates in a suspended tree. (@​acdlite in #​18384 and #​18457)
• Fix a bug causing dropped render phase updates. (@​acdlite in #​18537)
• Fix a bug in SuspenseList. (@​sebmarkbage in #​18412)
• Fix a bug causing Suspense fallback to show too early. (@​acdlite in #​18411)
• Fix a bug with class components inside SuspenseList. (@​sebmarkbage in #​18448)
• Fix a bug with inputs that may cause updates to be dropped. (@​jddxf in #​18515 and @​acdlite in #​18535)
• Fix a bug causing Suspense fallback to get stuck. (@​acdlite in #​18663)
• Don't cut off the tail of a SuspenseList if hydrating. (@​sebmarkbage in #​18854)
• Fix a bug in useMutableSource that may happen when getSnapshot changes. (@​bvaughn in #​18297)
• Fix a tearing bug in useMutableSource. (@​bvaughn in #​18912)
• Warn if calling setState outside of render but before commit. (@​sebmarkbage in #​18838)

</details>

Renovate configuration

:date: Schedule: At any time (no schedule defined).

:vertical_traffic_light: Automerge: Disabled by config. Please merge this manually once you are satisfied.

:recycle: Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

:no_bell: Ignore: Close this PR and you won't be reminded about these updates again.

• [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

This PR has been generated by WhiteSource Renovate. View repository job log here.

This PR contains the following updates:

Release Notes

<details> <summary>facebook/react</summary>

v17.0.1

Compare Source

React DOM

• Fix a crash in IE11. (@​gaearon in #​20071)

v17.0.0

Compare Source

Today, we are releasing React 17!

Learn more about React 17 and how to update to it on the official React blog.

React

• Add react/jsx-runtime and react/jsx-dev-runtime for the new JSX transform. (@​lunaruan in #​18299)
• Build component stacks from native error frames. (@​sebmarkbage in #​18561)
• Allow to specify displayName on context for improved stacks. (@​eps1lon in #​18224)
• Prevent 'use strict' from leaking in the UMD bundles. (@​koba04 in #​19614)
• Stop using fb.me for redirects. (@​cylim in #​19598)

React DOM

• Delegate events to roots instead of document. (@​trueadm in #​18195 and others)
• Clean up all effects before running any next effects. (@​bvaughn in #​17947)
• Run useEffect cleanup functions asynchronously. (@​bvaughn in #​17925)
• Use browser focusin and focusout for onFocus and onBlur. (@​trueadm in #​19186)
• Make all Capture events use the browser capture phase. (@​trueadm in #​19221)
• Don't emulate bubbling of the onScroll event. (@​gaearon in #​19464)
• Throw if forwardRef or memo component returns undefined. (@​gaearon in #​19550)
• Remove event pooling. (@​trueadm in #​18969)
• Stop exposing internals that won’t be needed by React Native Web. (@​necolas in #​18483)
• Attach all known event listeners when the root mounts. (@​gaearon in #​19659)
• Disable console in the second render pass of DEV mode double render. (@​sebmarkbage in #​18547)
• Deprecate the undocumented and misleading ReactTestUtils.SimulateNative API. (@​gaearon in #​13407)
• Rename private field names used in the internals. (@​gaearon in #​18377)
• Don't call User Timing API in development. (@​gaearon in #​18417)
• Disable console during the repeated render in Strict Mode. (@​sebmarkbage in #​18547)
• In Strict Mode, double-render components without Hooks too. (@​eps1lon in #​18430)
• Allow calling ReactDOM.flushSync during lifecycle methods (but warn). (@​sebmarkbage in #​18759)
• Add the code property to the keyboard event objects. (@​bl00mber in #​18287)
• Add the disableRemotePlayback property for video elements. (@​tombrowndev in #​18619)
• Add the enterKeyHint property for input elements. (@​eps1lon in #​18634)
• Warn when no value is provided to <Context.Provider>. (@​charlie1404 in #​19054)
• Warn when memo or forwardRef components return undefined. (@​bvaughn in #​19550)
• Improve the error message for invalid updates. (@​JoviDeCroock in #​18316)
• Exclude forwardRef and memo from stack frames. (@​sebmarkbage in #​18559)
• Improve the error message when switching between controlled and uncontrolled inputs. (@​vcarl in #​17070)
• Keep onTouchStart, onTouchMove, and onWheel passive. (@​gaearon in #​19654)
• Fix setState hanging in development inside a closed iframe. (@​gaearon in #​19220)
• Fix rendering bailout for lazy components with defaultProps. (@​jddxf in #​18539)
• Fix a false positive warning when dangerouslySetInnerHTML is undefined. (@​eps1lon in #​18676)
• Fix Test Utils with non-standard require implementation. (@​just-boris in #​18632)
• Fix onBeforeInput reporting an incorrect event.type. (@​eps1lon in #​19561)
• Fix event.relatedTarget reported as undefined in Firefox. (@​claytercek in #​19607)
• Fix "unspecified error" in IE11. (@​hemakshis in #​19664)
• Fix rendering into a shadow root. (@​Jack-Works in #​15894)
• Fix movementX/Y polyfill with capture events. (@​gaearon in #​19672)
• Use delegation for onSubmit and onReset events. (@​gaearon in #​19333)
• Improve memory usage. (@​trueadm in #​18970)

React DOM Server

• Make useCallback behavior consistent with useMemo for the server renderer. (@​alexmckenley in #​18783)
• Fix state leaking when a function component throws. (@​pmaccart in #​19212)

React Test Renderer

• Improve findByType error message. (@​henryqdineen in #​17439)

Concurrent Mode (Experimental)

• Revamp the priority batching heuristics. (@​acdlite in #​18796)
• Add the unstable_ prefix before the experimental APIs. (@​acdlite in #​18825)
• Remove unstable_discreteUpdates and unstable_flushDiscreteUpdates. (@​trueadm in #​18825)
• Remove the timeoutMs argument. (@​acdlite in #​19703)
• Disable <div hidden /> prerendering in favor of a different future API. (@​acdlite in #​18917)
• Add unstable_expectedLoadTime to Suspense for CPU-bound trees. (@​acdlite in #​19936)
• Add an experimental unstable_useOpaqueIdentifier Hook. (@​lunaruan in #​17322)
• Add an experimental unstable_startTransition API. (@​rickhanlonii in #​19696)
• Using act in the test renderer no longer flushes Suspense fallbacks. (@​acdlite in #​18596)
• Use global render timeout for CPU Suspense. (@​sebmarkbage in #​19643)
• Clear the existing root content before mounting. (@​bvaughn in #​18730)
• Fix a bug with error boundaries. (@​acdlite in #​18265)
• Fix a bug causing dropped updates in a suspended tree. (@​acdlite in #​18384 and #​18457)
• Fix a bug causing dropped render phase updates. (@​acdlite in #​18537)
• Fix a bug in SuspenseList. (@​sebmarkbage in #​18412)
• Fix a bug causing Suspense fallback to show too early. (@​acdlite in #​18411)
• Fix a bug with class components inside SuspenseList. (@​sebmarkbage in #​18448)
• Fix a bug with inputs that may cause updates to be dropped. (@​jddxf in #​18515 and @​acdlite in #​18535)
• Fix a bug causing Suspense fallback to get stuck. (@​acdlite in #​18663)
• Don't cut off the tail of a SuspenseList if hydrating. (@​sebmarkbage in #​18854)
• Fix a bug in useMutableSource that may happen when getSnapshot changes. (@​bvaughn in #​18297)
• Fix a tearing bug in useMutableSource. (@​bvaughn in #​18912)
• Warn if calling setState outside of render but before commit. (@​sebmarkbage in #​18838)

</details>

Renovate configuration

:date: Schedule: At any time (no schedule defined).

:vertical_traffic_light: Automerge: Disabled by config. Please merge this manually once you are satisfied.

:recycle: Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

:no_bell: Ignore: Close this PR and you won't be reminded about these updates again.

• [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

This PR has been generated by WhiteSource Renovate. View repository job log here.

This PR contains the following updates:

Release Notes

<details> <summary>facebook/react</summary>

v17.0.1

Compare Source

React DOM

• Fix a crash in IE11. (@​gaearon in #​20071)

v17.0.0

Compare Source

Today, we are releasing React 17!

Learn more about React 17 and how to update to it on the official React blog.

React

• Add react/jsx-runtime and react/jsx-dev-runtime for the new JSX transform. (@​lunaruan in #​18299)
• Build component stacks from native error frames. (@​sebmarkbage in #​18561)
• Allow to specify displayName on context for improved stacks. (@​eps1lon in #​18224)
• Prevent 'use strict' from leaking in the UMD bundles. (@​koba04 in #​19614)
• Stop using fb.me for redirects. (@​cylim in #​19598)

React DOM

• Delegate events to roots instead of document. (@​trueadm in #​18195 and others)
• Clean up all effects before running any next effects. (@​bvaughn in #​17947)
• Run useEffect cleanup functions asynchronously. (@​bvaughn in #​17925)
• Use browser focusin and focusout for onFocus and onBlur. (@​trueadm in #​19186)
• Make all Capture events use the browser capture phase. (@​trueadm in #​19221)
• Don't emulate bubbling of the onScroll event. (@​gaearon in #​19464)
• Throw if forwardRef or memo component returns undefined. (@​gaearon in #​19550)
• Remove event pooling. (@​trueadm in #​18969)
• Stop exposing internals that won’t be needed by React Native Web. (@​necolas in #​18483)
• Attach all known event listeners when the root mounts. (@​gaearon in #​19659)
• Disable console in the second render pass of DEV mode double render. (@​sebmarkbage in #​18547)
• Deprecate the undocumented and misleading ReactTestUtils.SimulateNative API. (@​gaearon in #​13407)
• Rename private field names used in the internals. (@​gaearon in #​18377)
• Don't call User Timing API in development. (@​gaearon in #​18417)
• Disable console during the repeated render in Strict Mode. (@​sebmarkbage in #​18547)
• In Strict Mode, double-render components without Hooks too. (@​eps1lon in #​18430)
• Allow calling ReactDOM.flushSync during lifecycle methods (but warn). (@​sebmarkbage in #​18759)
• Add the code property to the keyboard event objects. (@​bl00mber in #​18287)
• Add the disableRemotePlayback property for video elements. (@​tombrowndev in #​18619)
• Add the enterKeyHint property for input elements. (@​eps1lon in #​18634)
• Warn when no value is provided to <Context.Provider>. (@​charlie1404 in #​19054)
• Warn when memo or forwardRef components return undefined. (@​bvaughn in #​19550)
• Improve the error message for invalid updates. (@​JoviDeCroock in #​18316)
• Exclude forwardRef and memo from stack frames. (@​sebmarkbage in #​18559)
• Improve the error message when switching between controlled and uncontrolled inputs. (@​vcarl in #​17070)
• Keep onTouchStart, onTouchMove, and onWheel passive. (@​gaearon in #​19654)
• Fix setState hanging in development inside a closed iframe. (@​gaearon in #​19220)
• Fix rendering bailout for lazy components with defaultProps. (@​jddxf in #​18539)
• Fix a false positive warning when dangerouslySetInnerHTML is undefined. (@​eps1lon in #​18676)
• Fix Test Utils with non-standard require implementation. (@​just-boris in #​18632)
• Fix onBeforeInput reporting an incorrect event.type. (@​eps1lon in #​19561)
• Fix event.relatedTarget reported as undefined in Firefox. (@​claytercek in #​19607)
• Fix "unspecified error" in IE11. (@​hemakshis in #​19664)
• Fix rendering into a shadow root. (@​Jack-Works in #​15894)
• Fix movementX/Y polyfill with capture events. (@​gaearon in #​19672)
• Use delegation for onSubmit and onReset events. (@​gaearon in #​19333)
• Improve memory usage. (@​trueadm in #​18970)

React DOM Server

• Make useCallback behavior consistent with useMemo for the server renderer. (@​alexmckenley in #​18783)
• Fix state leaking when a function component throws. (@​pmaccart in #​19212)

React Test Renderer

• Improve findByType error message. (@​henryqdineen in #​17439)

Concurrent Mode (Experimental)

• Revamp the priority batching heuristics. (@​acdlite in #​18796)
• Add the unstable_ prefix before the experimental APIs. (@​acdlite in #​18825)
• Remove unstable_discreteUpdates and unstable_flushDiscreteUpdates. (@​trueadm in #​18825)
• Remove the timeoutMs argument. (@​acdlite in #​19703)
• Disable <div hidden /> prerendering in favor of a different future API. (@​acdlite in #​18917)
• Add unstable_expectedLoadTime to Suspense for CPU-bound trees. (@​acdlite in #​19936)
• Add an experimental unstable_useOpaqueIdentifier Hook. (@​lunaruan in #​17322)
• Add an experimental unstable_startTransition API. (@​rickhanlonii in #​19696)
• Using act in the test renderer no longer flushes Suspense fallbacks. (@​acdlite in #​18596)
• Use global render timeout for CPU Suspense. (@​sebmarkbage in #​19643)
• Clear the existing root content before mounting. (@​bvaughn in #​18730)
• Fix a bug with error boundaries. (@​acdlite in #​18265)
• Fix a bug causing dropped updates in a suspended tree. (@​acdlite in #​18384 and #​18457)
• Fix a bug causing dropped render phase updates. (@​acdlite in #​18537)
• Fix a bug in SuspenseList. (@​sebmarkbage in #​18412)
• Fix a bug causing Suspense fallback to show too early. (@​acdlite in #​18411)
• Fix a bug with class components inside SuspenseList. (@​sebmarkbage in #​18448)
• Fix a bug with inputs that may cause updates to be dropped. (@​jddxf in #​18515 and @​acdlite in #​18535)
• Fix a bug causing Suspense fallback to get stuck. (@​acdlite in #​18663)
• Don't cut off the tail of a SuspenseList if hydrating. (@​sebmarkbage in #​18854)
• Fix a bug in useMutableSource that may happen when getSnapshot changes. (@​bvaughn in #​18297)
• Fix a tearing bug in useMutableSource. (@​bvaughn in #​18912)
• Warn if calling setState outside of render but before commit. (@​sebmarkbage in #​18838)

</details>

Renovate configuration

:date: Schedule: At any time (no schedule defined).

:vertical_traffic_light: Automerge: Disabled by config. Please merge this manually once you are satisfied.

:recycle: Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

:no_bell: Ignore: Close this PR and you won't be reminded about these updates again.

• [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

This PR has been generated by WhiteSource Renovate. View repository job log here.

This PR contains the following updates:

Release Notes

<details> <summary>facebook/react</summary>

v17.0.1

Compare Source

React DOM

• Fix a crash in IE11. (@​gaearon in #​20071)

v17.0.0

Compare Source

Today, we are releasing React 17!

Learn more about React 17 and how to update to it on the official React blog.

React

• Add react/jsx-runtime and react/jsx-dev-runtime for the new JSX transform. (@​lunaruan in #​18299)
• Build component stacks from native error frames. (@​sebmarkbage in #​18561)
• Allow to specify displayName on context for improved stacks. (@​eps1lon in #​18224)
• Prevent 'use strict' from leaking in the UMD bundles. (@​koba04 in #​19614)
• Stop using fb.me for redirects. (@​cylim in #​19598)

React DOM

• Delegate events to roots instead of document. (@​trueadm in #​18195 and others)
• Clean up all effects before running any next effects. (@​bvaughn in #​17947)
• Run useEffect cleanup functions asynchronously. (@​bvaughn in #​17925)
• Use browser focusin and focusout for onFocus and onBlur. (@​trueadm in #​19186)
• Make all Capture events use the browser capture phase. (@​trueadm in #​19221)
• Don't emulate bubbling of the onScroll event. (@​gaearon in #​19464)
• Throw if forwardRef or memo component returns undefined. (@​gaearon in #​19550)
• Remove event pooling. (@​trueadm in #​18969)
• Stop exposing internals that won’t be needed by React Native Web. (@​necolas in #​18483)
• Attach all known event listeners when the root mounts. (@​gaearon in #​19659)
• Disable console in the second render pass of DEV mode double render. (@​sebmarkbage in #​18547)
• Deprecate the undocumented and misleading ReactTestUtils.SimulateNative API. (@​gaearon in #​13407)
• Rename private field names used in the internals. (@​gaearon in #​18377)
• Don't call User Timing API in development. (@​gaearon in #​18417)
• Disable console during the repeated render in Strict Mode. (@​sebmarkbage in #​18547)
• In Strict Mode, double-render components without Hooks too. (@​eps1lon in #​18430)
• Allow calling ReactDOM.flushSync during lifecycle methods (but warn). (@​sebmarkbage in #​18759)
• Add the code property to the keyboard event objects. (@​bl00mber in #​18287)
• Add the disableRemotePlayback property for video elements. (@​tombrowndev in #​18619)
• Add the enterKeyHint property for input elements. (@​eps1lon in #​18634)
• Warn when no value is provided to <Context.Provider>. (@​charlie1404 in #​19054)
• Warn when memo or forwardRef components return undefined. (@​bvaughn in #​19550)
• Improve the error message for invalid updates. (@​JoviDeCroock in #​18316)
• Exclude forwardRef and memo from stack frames. (@​sebmarkbage in #​18559)
• Improve the error message when switching between controlled and uncontrolled inputs. (@​vcarl in #​17070)
• Keep onTouchStart, onTouchMove, and onWheel passive. (@​gaearon in #​19654)
• Fix setState hanging in development inside a closed iframe. (@​gaearon in #​19220)
• Fix rendering bailout for lazy components with defaultProps. (@​jddxf in #​18539)
• Fix a false positive warning when dangerouslySetInnerHTML is undefined. (@​eps1lon in #​18676)
• Fix Test Utils with non-standard require implementation. (@​just-boris in #​18632)
• Fix onBeforeInput reporting an incorrect event.type. (@​eps1lon in #​19561)
• Fix event.relatedTarget reported as undefined in Firefox. (@​claytercek in #​19607)
• Fix "unspecified error" in IE11. (@​hemakshis in #​19664)
• Fix rendering into a shadow root. (@​Jack-Works in #​15894)
• Fix movementX/Y polyfill with capture events. (@​gaearon in #​19672)
• Use delegation for onSubmit and onReset events. (@​gaearon in #​19333)
• Improve memory usage. (@​trueadm in #​18970)

React DOM Server

• Make useCallback behavior consistent with useMemo for the server renderer. (@​alexmckenley in #​18783)
• Fix state leaking when a function component throws. (@​pmaccart in #​19212)

React Test Renderer

• Improve findByType error message. (@​henryqdineen in #​17439)

Concurrent Mode (Experimental)

• Revamp the priority batching heuristics. (@​acdlite in #​18796)
• Add the unstable_ prefix before the experimental APIs. (@​acdlite in #​18825)
• Remove unstable_discreteUpdates and unstable_flushDiscreteUpdates. (@​trueadm in #​18825)
• Remove the timeoutMs argument. (@​acdlite in #​19703)
• Disable <div hidden /> prerendering in favor of a different future API. (@​acdlite in #​18917)
• Add unstable_expectedLoadTime to Suspense for CPU-bound trees. (@​acdlite in #​19936)
• Add an experimental unstable_useOpaqueIdentifier Hook. (@​lunaruan in #​17322)
• Add an experimental unstable_startTransition API. (@​rickhanlonii in #​19696)
• Using act in the test renderer no longer flushes Suspense fallbacks. (@​acdlite in #​18596)
• Use global render timeout for CPU Suspense. (@​sebmarkbage in #​19643)
• Clear the existing root content before mounting. (@​bvaughn in #​18730)
• Fix a bug with error boundaries. (@​acdlite in #​18265)
• Fix a bug causing dropped updates in a suspended tree. (@​acdlite in #​18384 and #​18457)
• Fix a bug causing dropped render phase updates. (@​acdlite in #​18537)
• Fix a bug in SuspenseList. (@​sebmarkbage in #​18412)
• Fix a bug causing Suspense fallback to show too early. (@​acdlite in #​18411)
• Fix a bug with class components inside SuspenseList. (@​sebmarkbage in #​18448)
• Fix a bug with inputs that may cause updates to be dropped. (@​jddxf in #​18515 and @​acdlite in #​18535)
• Fix a bug causing Suspense fallback to get stuck. (@​acdlite in #​18663)
• Don't cut off the tail of a SuspenseList if hydrating. (@​sebmarkbage in #​18854)
• Fix a bug in useMutableSource that may happen when getSnapshot changes. (@​bvaughn in #​18297)
• Fix a tearing bug in useMutableSource. (@​bvaughn in #​18912)
• Warn if calling setState outside of render but before commit. (@​sebmarkbage in #​18838)

</details>

Renovate configuration

:date: Schedule: At any time (no schedule defined).

:vertical_traffic_light: Automerge: Disabled by config. Please merge this manually once you are satisfied.

:recycle: Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

:no_bell: Ignore: Close this PR and you won't be reminded about these updates again.

• [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

This PR has been generated by WhiteSource Renovate. View repository job log here.

This PR contains the following updates:

Release Notes

<details> <summary>facebook/react</summary>

v17.0.1

Compare Source

React DOM

• Fix a crash in IE11. (@​gaearon in #​20071)

v17.0.0

Compare Source

Today, we are releasing React 17!

Learn more about React 17 and how to update to it on the official React blog.

React

• Add react/jsx-runtime and react/jsx-dev-runtime for the new JSX transform. (@​lunaruan in #​18299)
• Build component stacks from native error frames. (@​sebmarkbage in #​18561)
• Allow to specify displayName on context for improved stacks. (@​eps1lon in #​18224)
• Prevent 'use strict' from leaking in the UMD bundles. (@​koba04 in #​19614)
• Stop using fb.me for redirects. (@​cylim in #​19598)

React DOM

• Delegate events to roots instead of document. (@​trueadm in #​18195 and others)
• Clean up all effects before running any next effects. (@​bvaughn in #​17947)
• Run useEffect cleanup functions asynchronously. (@​bvaughn in #​17925)
• Use browser focusin and focusout for onFocus and onBlur. (@​trueadm in #​19186)
• Make all Capture events use the browser capture phase. (@​trueadm in #​19221)
• Don't emulate bubbling of the onScroll event. (@​gaearon in #​19464)
• Throw if forwardRef or memo component returns undefined. (@​gaearon in #​19550)
• Remove event pooling. (@​trueadm in #​18969)
• Stop exposing internals that won’t be needed by React Native Web. (@​necolas in #​18483)
• Attach all known event listeners when the root mounts. (@​gaearon in #​19659)
• Disable console in the second render pass of DEV mode double render. (@​sebmarkbage in #​18547)
• Deprecate the undocumented and misleading ReactTestUtils.SimulateNative API. (@​gaearon in #​13407)
• Rename private field names used in the internals. (@​gaearon in #​18377)
• Don't call User Timing API in development. (@​gaearon in #​18417)
• Disable console during the repeated render in Strict Mode. (@​sebmarkbage in #​18547)
• In Strict Mode, double-render components without Hooks too. (@​eps1lon in #​18430)
• Allow calling ReactDOM.flushSync during lifecycle methods (but warn). (@​sebmarkbage in #​18759)
• Add the code property to the keyboard event objects. (@​bl00mber in #​18287)
• Add the disableRemotePlayback property for video elements. (@​tombrowndev in #​18619)
• Add the enterKeyHint property for input elements. (@​eps1lon in #​18634)
• Warn when no value is provided to <Context.Provider>. (@​charlie1404 in #​19054)
• Warn when memo or forwardRef components return undefined. (@​bvaughn in #​19550)
• Improve the error message for invalid updates. (@​JoviDeCroock in #​18316)
• Exclude forwardRef and memo from stack frames. (@​sebmarkbage in #​18559)
• Improve the error message when switching between controlled and uncontrolled inputs. (@​vcarl in #​17070)
• Keep onTouchStart, onTouchMove, and onWheel passive. (@​gaearon in #​19654)
• Fix setState hanging in development inside a closed iframe. (@​gaearon in #​19220)
• Fix rendering bailout for lazy components with defaultProps. (@​jddxf in #​18539)
• Fix a false positive warning when dangerouslySetInnerHTML is undefined. (@​eps1lon in #​18676)
• Fix Test Utils with non-standard require implementation. (@​just-boris in #​18632)
• Fix onBeforeInput reporting an incorrect event.type. (@​eps1lon in #​19561)
• Fix event.relatedTarget reported as undefined in Firefox. (@​claytercek in #​19607)
• Fix "unspecified error" in IE11. (@​hemakshis in #​19664)
• Fix rendering into a shadow root. (@​Jack-Works in #​15894)
• Fix movementX/Y polyfill with capture events. (@​gaearon in #​19672)
• Use delegation for onSubmit and onReset events. (@​gaearon in #​19333)
• Improve memory usage. (@​trueadm in #​18970)

React DOM Server

• Make useCallback behavior consistent with useMemo for the server renderer. (@​alexmckenley in #​18783)
• Fix state leaking when a function component throws. (@​pmaccart in #​19212)

React Test Renderer

• Improve findByType error message. (@​henryqdineen in #​17439)

Concurrent Mode (Experimental)

• Revamp the priority batching heuristics. (@​acdlite in #​18796)
• Add the unstable_ prefix before the experimental APIs. (@​acdlite in #​18825)
• Remove unstable_discreteUpdates and unstable_flushDiscreteUpdates. (@​trueadm in #​18825)
• Remove the timeoutMs argument. (@​acdlite in #​19703)
• Disable <div hidden /> prerendering in favor of a different future API. (@​acdlite in #​18917)
• Add unstable_expectedLoadTime to Suspense for CPU-bound trees. (@​acdlite in #​19936)
• Add an experimental unstable_useOpaqueIdentifier Hook. (@​lunaruan in #​17322)
• Add an experimental unstable_startTransition API. (@​rickhanlonii in #​19696)
• Using act in the test renderer no longer flushes Suspense fallbacks. (@​acdlite in #​18596)
• Use global render timeout for CPU Suspense. (@​sebmarkbage in #​19643)
• Clear the existing root content before mounting. (@​bvaughn in #​18730)
• Fix a bug with error boundaries. (@​acdlite in #​18265)
• Fix a bug causing dropped updates in a suspended tree. (@​acdlite in #​18384 and #​18457)
• Fix a bug causing dropped render phase updates. (@​acdlite in #​18537)
• Fix a bug in SuspenseList. (@​sebmarkbage in #​18412)
• Fix a bug causing Suspense fallback to show too early. (@​acdlite in #​18411)
• Fix a bug with class components inside SuspenseList. (@​sebmarkbage in #​18448)
• Fix a bug with inputs that may cause updates to be dropped. (@​jddxf in #​18515 and @​acdlite in #​18535)
• Fix a bug causing Suspense fallback to get stuck. (@​acdlite in #​18663)
• Don't cut off the tail of a SuspenseList if hydrating. (@​sebmarkbage in #​18854)
• Fix a bug in useMutableSource that may happen when getSnapshot changes. (@​bvaughn in #​18297)
• Fix a tearing bug in useMutableSource. (@​bvaughn in #​18912)
• Warn if calling setState outside of render but before commit. (@​sebmarkbage in #​18838)

</details>

Renovate configuration

:date: Schedule: At any time (no schedule defined).

:vertical_traffic_light: Automerge: Disabled by config. Please merge this manually once you are satisfied.

:recycle: Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

:no_bell: Ignore: Close this PR and you won't be reminded about these updates again.

• [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

This PR has been generated by WhiteSource Renovate. View repository job log here.

This PR contains the following updates:

Release Notes

<details> <summary>facebook/react</summary>

v17.0.1

Compare Source

React DOM

• Fix a crash in IE11. (@​gaearon in #​20071)

v17.0.0

Compare Source

Today, we are releasing React 17!

Learn more about React 17 and how to update to it on the official React blog.

React

• Add react/jsx-runtime and react/jsx-dev-runtime for the new JSX transform. (@​lunaruan in #​18299)
• Build component stacks from native error frames. (@​sebmarkbage in #​18561)
• Allow to specify displayName on context for improved stacks. (@​eps1lon in #​18224)
• Prevent 'use strict' from leaking in the UMD bundles. (@​koba04 in #​19614)
• Stop using fb.me for redirects. (@​cylim in #​19598)

React DOM

• Delegate events to roots instead of document. (@​trueadm in #​18195 and others)
• Clean up all effects before running any next effects. (@​bvaughn in #​17947)
• Run useEffect cleanup functions asynchronously. (@​bvaughn in #​17925)
• Use browser focusin and focusout for onFocus and onBlur. (@​trueadm in #​19186)
• Make all Capture events use the browser capture phase. (@​trueadm in #​19221)
• Don't emulate bubbling of the onScroll event. (@​gaearon in #​19464)
• Throw if forwardRef or memo component returns undefined. (@​gaearon in #​19550)
• Remove event pooling. (@​trueadm in #​18969)
• Stop exposing internals that won’t be needed by React Native Web. (@​necolas in #​18483)
• Attach all known event listeners when the root mounts. (@​gaearon in #​19659)
• Disable console in the second render pass of DEV mode double render. (@​sebmarkbage in #​18547)
• Deprecate the undocumented and misleading ReactTestUtils.SimulateNative API. (@​gaearon in #​13407)
• Rename private field names used in the internals. (@​gaearon in #​18377)
• Don't call User Timing API in development. (@​gaearon in #​18417)
• Disable console during the repeated render in Strict Mode. (@​sebmarkbage in #​18547)
• In Strict Mode, double-render components without Hooks too. (@​eps1lon in #​18430)
• Allow calling ReactDOM.flushSync during lifecycle methods (but warn). (@​sebmarkbage in #​18759)
• Add the code property to the keyboard event objects. (@​bl00mber in #​18287)
• Add the disableRemotePlayback property for video elements. (@​tombrowndev in #​18619)
• Add the enterKeyHint property for input elements. (@​eps1lon in #​18634)
• Warn when no value is provided to <Context.Provider>. (@​charlie1404 in #​19054)
• Warn when memo or forwardRef components return undefined. (@​bvaughn in #​19550)
• Improve the error message for invalid updates. (@​JoviDeCroock in #​18316)
• Exclude forwardRef and memo from stack frames. (@​sebmarkbage in #​18559)
• Improve the error message when switching between controlled and uncontrolled inputs. (@​vcarl in #​17070)
• Keep onTouchStart, onTouchMove, and onWheel passive. (@​gaearon in #​19654)
• Fix setState hanging in development inside a closed iframe. (@​gaearon in #​19220)
• Fix rendering bailout for lazy components with defaultProps. (@​jddxf in #​18539)
• Fix a false positive warning when dangerouslySetInnerHTML is undefined. (@​eps1lon in #​18676)
• Fix Test Utils with non-standard require implementation. (@​just-boris in #​18632)
• Fix onBeforeInput reporting an incorrect event.type. (@​eps1lon in #​19561)
• Fix event.relatedTarget reported as undefined in Firefox. (@​claytercek in #​19607)
• Fix "unspecified error" in IE11. (@​hemakshis in #​19664)
• Fix rendering into a shadow root. (@​Jack-Works in #​15894)
• Fix movementX/Y polyfill with capture events. (@​gaearon in #​19672)
• Use delegation for onSubmit and onReset events. (@​gaearon in #​19333)
• Improve memory usage. (@​trueadm in #​18970)

React DOM Server

• Make useCallback behavior consistent with useMemo for the server renderer. (@​alexmckenley in #​18783)
• Fix state leaking when a function component throws. (@​pmaccart in #​19212)

React Test Renderer

• Improve findByType error message. (@​henryqdineen in #​17439)

Concurrent Mode (Experimental)

• Revamp the priority batching heuristics. (@​acdlite in #​18796)
• Add the unstable_ prefix before the experimental APIs. (@​acdlite in #​18825)
• Remove unstable_discreteUpdates and unstable_flushDiscreteUpdates. (@​trueadm in #​18825)
• Remove the timeoutMs argument. (@​acdlite in #​19703)
• Disable <div hidden /> prerendering in favor of a different future API. (@​acdlite in #​18917)
• Add unstable_expectedLoadTime to Suspense for CPU-bound trees. (@​acdlite in #​19936)
• Add an experimental unstable_useOpaqueIdentifier Hook. (@​lunaruan in #​17322)
• Add an experimental unstable_startTransition API. (@​rickhanlonii in #​19696)
• Using act in the test renderer no longer flushes Suspense fallbacks. (@​acdlite in #​18596)
• Use global render timeout for CPU Suspense. (@​sebmarkbage in #​19643)
• Clear the existing root content before mounting. (@​bvaughn in #​18730)
• Fix a bug with error boundaries. (@​acdlite in #​18265)
• Fix a bug causing dropped updates in a suspended tree. (@​acdlite in #​18384 and #​18457)
• Fix a bug causing dropped render phase updates. (@​acdlite in #​18537)
• Fix a bug in SuspenseList. (@​sebmarkbage in #​18412)
• Fix a bug causing Suspense fallback to show too early. (@​acdlite in #​18411)
• Fix a bug with class components inside SuspenseList. (@​sebmarkbage in #​18448)
• Fix a bug with inputs that may cause updates to be dropped. (@​jddxf in #​18515 and @​acdlite in #​18535)
• Fix a bug causing Suspense fallback to get stuck. (@​acdlite in #​18663)
• Don't cut off the tail of a SuspenseList if hydrating. (@​sebmarkbage in #​18854)
• Fix a bug in useMutableSource that may happen when getSnapshot changes. (@​bvaughn in #​18297)
• Fix a tearing bug in useMutableSource. (@​bvaughn in #​18912)
• Warn if calling setState outside of render but before commit. (@​sebmarkbage in #​18838)

</details>

Renovate configuration

:date: Schedule: At any time (no schedule defined).

:vertical_traffic_light: Automerge: Disabled by config. Please merge this manually once you are satisfied.

:recycle: Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

:no_bell: Ignore: Close this PR and you won't be reminded about these updates again.

• [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

This PR has been generated by WhiteSource Renovate. View repository job log here.

This PR contains the following updates:

Release Notes

<details> <summary>facebook/create-react-app</summary>

v4.0.0

Compare Source

Inside any created project that has not been ejected, run:

npm install --save --save-exact [email protected]

or

yarn add --exact [email protected]

NOTE: You may need to delete your node_modules folder and reinstall your dependencies by running yarn (or npm install) if you encounter errors after upgrading.

If you previously ejected but now want to upgrade, one common solution is to find the commits where you ejected (and any subsequent commits changing the configuration), revert them, upgrade, and later optionally eject again. It’s also possible that the feature you ejected for is now supported out of the box.

Breaking Changes

Like any major release, [email protected] contains a number of breaking changes. We expect that they won't affect every user, but we recommend you look over this section to see if something is relevant to you. If we missed something, please file a new issue.

ESLint

We've upgraded to ESLint 7 and added many new rules including some for Jest and React Testing Library as well as the import/no-anonymous-default-export rule. We've also upgraded eslint-plugin-hooks to version 4.0.0 and removed the EXTEND_ESLINT flag as it is no longer required to customize the ESLint config.

Jest

We've upgraded to Jest 26 and now set resetMocks to true by default in the Jest config.

Service workers

We've switched to the Workbox InjectManifest plugin and moved the PWA templates into their own repository.

Removed typescript flag and NODE_PATH support

We've removed the deprecated typescript flag when creating a new app. Use --template typescript instead. We've also dropped deprecated NODE_PATH flag as this has been replaced by setting the base path in jsconfig.json.

Fix dotenv file loading order

We've changed the loading order of env files to match the dotenv specification. See #​9037 for more details.

Dropped Node 8 support

Node 8 reached End-of-Life at the end of 2019 and is no longer supported.

</details>

Renovate configuration

:date: Schedule: At any time (no schedule defined).

:vertical_traffic_light: Automerge: Disabled by config. Please merge this manually once you are satisfied.

:recycle: Rebasing: Renovate will not automatically rebase this PR, because other commits have been found.

:no_bell: Ignore: Close this PR and you won't be reminded about this update again.

• [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

This PR has been generated by WhiteSource Renovate. View repository job log here.

This PR contains the following updates:

Release Notes

<details> <summary>gatsbyjs/gatsby</summary>

v3.0.3

Compare Source

v3.0.2

Compare Source

v3.0.1

Compare Source

v3.0.0

Compare Source

</details>

Renovate configuration

:date: Schedule: At any time (no schedule defined).

:vertical_traffic_light: Automerge: Disabled by config. Please merge this manually once you are satisfied.

:recycle: Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

:no_bell: Ignore: Close this PR and you won't be reminded about this update again.

• [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

This PR has been generated by WhiteSource Renovate. View repository job log here.

Bumps object-path from 0.11.4 to 0.11.5. <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/mariocasciaro/object-path/commits">compare view</a></li> </ul> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

</details>

Bumps object-path from 0.11.4 to 0.11.5. <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/mariocasciaro/object-path/commits">compare view</a></li> </ul> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

</details>

Bumps object-path from 0.11.4 to 0.11.5. <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/mariocasciaro/object-path/commits">compare view</a></li> </ul> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

</details>

:rotating_light: The automated release from the master branch failed. :rotating_light:

I recommend you give this issue a high priority, so other packages depending on you could benefit from your bug fixes and new features.

You can find below the list of errors reported by semantic-release. Each one of them has to be resolved in order to automatically publish your package. I’m sure you can resolve this 💪.

Errors are usually caused by a misconfiguration or an authentication problem. With each error reported below you will find explanation and guidance to help you to resolve it.

Once all the errors are resolved, semantic-release will release your package the next time you push a commit to the master branch. You can also manually restart the failed CI job that runs semantic-release.

If you are not sure how to resolve this, here is some links that can help you:

• Usage documentation
• Frequently Asked Questions
• Support channels

If those don’t help, or if this issue is reporting something you think isn’t right, you can always ask the humans behind semantic-release.

Invalid npm token.

The npm token configured in the NPM_TOKEN environment variable must be a valid token allowing to publish to the registry https://registry.npmjs.org/.

If you are using Two-Factor Authentication, make configure the auth-only level is supported. semantic-release cannot publish with the default auth-and-writes level.

Please make sure to set the NPM_TOKEN environment variable in your CI with the exact value of the npm token.

Good luck with your project ✨

Your semantic-release bot :package::rocket:

:rotating_light: The automated release from the master branch failed. :rotating_light:

I recommend you give this issue a high priority, so other packages depending on you could benefit from your bug fixes and new features.

You can find below the list of errors reported by semantic-release. Each one of them has to be resolved in order to automatically publish your package. I’m sure you can resolve this 💪.

Errors are usually caused by a misconfiguration or an authentication problem. With each error reported below you will find explanation and guidance to help you to resolve it.

Once all the errors are resolved, semantic-release will release your package the next time you push a commit to the master branch. You can also manually restart the failed CI job that runs semantic-release.

If you are not sure how to resolve this, here is some links that can help you:

• Usage documentation
• Frequently Asked Questions
• Support channels

If those don’t help, or if this issue is reporting something you think isn’t right, you can always ask the humans behind semantic-release.

Invalid npm token.

The npm token configured in the NPM_TOKEN environment variable must be a valid token allowing to publish to the registry https://registry.npmjs.org/.

If you are using Two-Factor Authentication, make configure the auth-only level is supported. semantic-release cannot publish with the default auth-and-writes level.

Please make sure to set the NPM_TOKEN environment variable in your CI with the exact value of the npm token.

Good luck with your project ✨

Your semantic-release bot :package::rocket:

:rotating_light: The automated release from the master branch failed. :rotating_light:

I recommend you give this issue a high priority, so other packages depending on you could benefit from your bug fixes and new features.

You can find below the list of errors reported by semantic-release. Each one of them has to be resolved in order to automatically publish your package. I’m sure you can resolve this 💪.

Errors are usually caused by a misconfiguration or an authentication problem. With each error reported below you will find explanation and guidance to help you to resolve it.

Once all the errors are resolved, semantic-release will release your package the next time you push a commit to the master branch. You can also manually restart the failed CI job that runs semantic-release.

If you are not sure how to resolve this, here is some links that can help you:

• Usage documentation
• Frequently Asked Questions
• Support channels

If those don’t help, or if this issue is reporting something you think isn’t right, you can always ask the humans behind semantic-release.

Invalid npm token.

The npm token configured in the NPM_TOKEN environment variable must be a valid token allowing to publish to the registry https://registry.npmjs.org/.

If you are using Two-Factor Authentication, make configure the auth-only level is supported. semantic-release cannot publish with the default auth-and-writes level.

Please make sure to set the NPM_TOKEN environment variable in your CI with the exact value of the npm token.

Good luck with your project ✨

Your semantic-release bot :package::rocket:

<!-- semantic-release:github -->

Bumps npm-user-validate from 1.0.0 to 1.0.1. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/npm/npm-user-validate/commit/5c5471ceee0d9f5249157f5ae10d65a5b92605c9"><code>5c5471c</code></a> 1.0.1</li> <li><a href="https://github.com/npm/npm-user-validate/commit/c8a87dac1a4cc6988b5418f30411a8669bef204e"><code>c8a87da</code></a> fix: update email validation</li> <li><a href="https://github.com/npm/npm-user-validate/commit/cd7539362b08727f91c18a9dcd8a766bd13d997c"><code>cd75393</code></a> Publish only the minimum of files</li> <li>See full diff in <a href="https://github.com/npm/npm-user-validate/compare/v1.0.0...v1.0.1">compare view</a></li> </ul> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

</details>

Bumps npm-user-validate from 1.0.0 to 1.0.1. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/npm/npm-user-validate/commit/5c5471ceee0d9f5249157f5ae10d65a5b92605c9"><code>5c5471c</code></a> 1.0.1</li> <li><a href="https://github.com/npm/npm-user-validate/commit/c8a87dac1a4cc6988b5418f30411a8669bef204e"><code>c8a87da</code></a> fix: update email validation</li> <li><a href="https://github.com/npm/npm-user-validate/commit/cd7539362b08727f91c18a9dcd8a766bd13d997c"><code>cd75393</code></a> Publish only the minimum of files</li> <li>See full diff in <a href="https://github.com/npm/npm-user-validate/compare/v1.0.0...v1.0.1">compare view</a></li> </ul> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

</details>

Bumps npm-user-validate from 1.0.0 to 1.0.1. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/npm/npm-user-validate/commit/5c5471ceee0d9f5249157f5ae10d65a5b92605c9"><code>5c5471c</code></a> 1.0.1</li> <li><a href="https://github.com/npm/npm-user-validate/commit/c8a87dac1a4cc6988b5418f30411a8669bef204e"><code>c8a87da</code></a> fix: update email validation</li> <li><a href="https://github.com/npm/npm-user-validate/commit/cd7539362b08727f91c18a9dcd8a766bd13d997c"><code>cd75393</code></a> Publish only the minimum of files</li> <li>See full diff in <a href="https://github.com/npm/npm-user-validate/compare/v1.0.0...v1.0.1">compare view</a></li> </ul> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

</details>

Bumps npm-user-validate from 1.0.0 to 1.0.1. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/npm/npm-user-validate/commit/5c5471ceee0d9f5249157f5ae10d65a5b92605c9"><code>5c5471c</code></a> 1.0.1</li> <li><a href="https://github.com/npm/npm-user-validate/commit/c8a87dac1a4cc6988b5418f30411a8669bef204e"><code>c8a87da</code></a> fix: update email validation</li> <li><a href="https://github.com/npm/npm-user-validate/commit/cd7539362b08727f91c18a9dcd8a766bd13d997c"><code>cd75393</code></a> Publish only the minimum of files</li> <li>See full diff in <a href="https://github.com/npm/npm-user-validate/compare/v1.0.0...v1.0.1">compare view</a></li> </ul> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

</details>

Bumps npm-user-validate from 1.0.0 to 1.0.1. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/npm/npm-user-validate/commit/5c5471ceee0d9f5249157f5ae10d65a5b92605c9"><code>5c5471c</code></a> 1.0.1</li> <li><a href="https://github.com/npm/npm-user-validate/commit/c8a87dac1a4cc6988b5418f30411a8669bef204e"><code>c8a87da</code></a> fix: update email validation</li> <li><a href="https://github.com/npm/npm-user-validate/commit/cd7539362b08727f91c18a9dcd8a766bd13d997c"><code>cd75393</code></a> Publish only the minimum of files</li> <li>See full diff in <a href="https://github.com/npm/npm-user-validate/compare/v1.0.0...v1.0.1">compare view</a></li> </ul> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

</details>

Bumps npm-user-validate from 1.0.0 to 1.0.1. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/npm/npm-user-validate/commit/5c5471ceee0d9f5249157f5ae10d65a5b92605c9"><code>5c5471c</code></a> 1.0.1</li> <li><a href="https://github.com/npm/npm-user-validate/commit/c8a87dac1a4cc6988b5418f30411a8669bef204e"><code>c8a87da</code></a> fix: update email validation</li> <li><a href="https://github.com/npm/npm-user-validate/commit/cd7539362b08727f91c18a9dcd8a766bd13d997c"><code>cd75393</code></a> Publish only the minimum of files</li> <li>See full diff in <a href="https://github.com/npm/npm-user-validate/compare/v1.0.0...v1.0.1">compare view</a></li> </ul> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

</details>

Bumps npm-user-validate from 1.0.0 to 1.0.1. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/npm/npm-user-validate/commit/5c5471ceee0d9f5249157f5ae10d65a5b92605c9"><code>5c5471c</code></a> 1.0.1</li> <li><a href="https://github.com/npm/npm-user-validate/commit/c8a87dac1a4cc6988b5418f30411a8669bef204e"><code>c8a87da</code></a> fix: update email validation</li> <li><a href="https://github.com/npm/npm-user-validate/commit/cd7539362b08727f91c18a9dcd8a766bd13d997c"><code>cd75393</code></a> Publish only the minimum of files</li> <li>See full diff in <a href="https://github.com/npm/npm-user-validate/compare/v1.0.0...v1.0.1">compare view</a></li> </ul> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

</details>

Bumps npm-user-validate from 1.0.0 to 1.0.1. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/npm/npm-user-validate/commit/5c5471ceee0d9f5249157f5ae10d65a5b92605c9"><code>5c5471c</code></a> 1.0.1</li> <li><a href="https://github.com/npm/npm-user-validate/commit/c8a87dac1a4cc6988b5418f30411a8669bef204e"><code>c8a87da</code></a> fix: update email validation</li> <li><a href="https://github.com/npm/npm-user-validate/commit/cd7539362b08727f91c18a9dcd8a766bd13d997c"><code>cd75393</code></a> Publish only the minimum of files</li> <li>See full diff in <a href="https://github.com/npm/npm-user-validate/compare/v1.0.0...v1.0.1">compare view</a></li> </ul> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

</details>

Bumps npm-user-validate from 1.0.0 to 1.0.1. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/npm/npm-user-validate/commit/5c5471ceee0d9f5249157f5ae10d65a5b92605c9"><code>5c5471c</code></a> 1.0.1</li> <li><a href="https://github.com/npm/npm-user-validate/commit/c8a87dac1a4cc6988b5418f30411a8669bef204e"><code>c8a87da</code></a> fix: update email validation</li> <li><a href="https://github.com/npm/npm-user-validate/commit/cd7539362b08727f91c18a9dcd8a766bd13d997c"><code>cd75393</code></a> Publish only the minimum of files</li> <li>See full diff in <a href="https://github.com/npm/npm-user-validate/compare/v1.0.0...v1.0.1">compare view</a></li> </ul> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

</details>

Bumps npm-user-validate from 1.0.0 to 1.0.1. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/npm/npm-user-validate/commit/5c5471ceee0d9f5249157f5ae10d65a5b92605c9"><code>5c5471c</code></a> 1.0.1</li> <li><a href="https://github.com/npm/npm-user-validate/commit/c8a87dac1a4cc6988b5418f30411a8669bef204e"><code>c8a87da</code></a> fix: update email validation</li> <li><a href="https://github.com/npm/npm-user-validate/commit/cd7539362b08727f91c18a9dcd8a766bd13d997c"><code>cd75393</code></a> Publish only the minimum of files</li> <li>See full diff in <a href="https://github.com/npm/npm-user-validate/compare/v1.0.0...v1.0.1">compare view</a></li> </ul> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

</details>

Bumps npm-user-validate from 1.0.0 to 1.0.1. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/npm/npm-user-validate/commit/5c5471ceee0d9f5249157f5ae10d65a5b92605c9"><code>5c5471c</code></a> 1.0.1</li> <li><a href="https://github.com/npm/npm-user-validate/commit/c8a87dac1a4cc6988b5418f30411a8669bef204e"><code>c8a87da</code></a> fix: update email validation</li> <li><a href="https://github.com/npm/npm-user-validate/commit/cd7539362b08727f91c18a9dcd8a766bd13d997c"><code>cd75393</code></a> Publish only the minimum of files</li> <li>See full diff in <a href="https://github.com/npm/npm-user-validate/compare/v1.0.0...v1.0.1">compare view</a></li> </ul> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

</details>

Bumps npm-user-validate from 1.0.0 to 1.0.1. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/npm/npm-user-validate/commit/5c5471ceee0d9f5249157f5ae10d65a5b92605c9"><code>5c5471c</code></a> 1.0.1</li> <li><a href="https://github.com/npm/npm-user-validate/commit/c8a87dac1a4cc6988b5418f30411a8669bef204e"><code>c8a87da</code></a> fix: update email validation</li> <li><a href="https://github.com/npm/npm-user-validate/commit/cd7539362b08727f91c18a9dcd8a766bd13d997c"><code>cd75393</code></a> Publish only the minimum of files</li> <li>See full diff in <a href="https://github.com/npm/npm-user-validate/compare/v1.0.0...v1.0.1">compare view</a></li> </ul> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

</details>

Bumps npm-user-validate from 1.0.0 to 1.0.1. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/npm/npm-user-validate/commit/5c5471ceee0d9f5249157f5ae10d65a5b92605c9"><code>5c5471c</code></a> 1.0.1</li> <li><a href="https://github.com/npm/npm-user-validate/commit/c8a87dac1a4cc6988b5418f30411a8669bef204e"><code>c8a87da</code></a> fix: update email validation</li> <li><a href="https://github.com/npm/npm-user-validate/commit/cd7539362b08727f91c18a9dcd8a766bd13d997c"><code>cd75393</code></a> Publish only the minimum of files</li> <li>See full diff in <a href="https://github.com/npm/npm-user-validate/compare/v1.0.0...v1.0.1">compare view</a></li> </ul> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

</details>

Bumps npm-user-validate from 1.0.0 to 1.0.1. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/npm/npm-user-validate/commit/5c5471ceee0d9f5249157f5ae10d65a5b92605c9"><code>5c5471c</code></a> 1.0.1</li> <li><a href="https://github.com/npm/npm-user-validate/commit/c8a87dac1a4cc6988b5418f30411a8669bef204e"><code>c8a87da</code></a> fix: update email validation</li> <li><a href="https://github.com/npm/npm-user-validate/commit/cd7539362b08727f91c18a9dcd8a766bd13d997c"><code>cd75393</code></a> Publish only the minimum of files</li> <li>See full diff in <a href="https://github.com/npm/npm-user-validate/compare/v1.0.0...v1.0.1">compare view</a></li> </ul> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

</details>

Bumps npm-user-validate from 1.0.0 to 1.0.1. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/npm/npm-user-validate/commit/5c5471ceee0d9f5249157f5ae10d65a5b92605c9"><code>5c5471c</code></a> 1.0.1</li> <li><a href="https://github.com/npm/npm-user-validate/commit/c8a87dac1a4cc6988b5418f30411a8669bef204e"><code>c8a87da</code></a> fix: update email validation</li> <li><a href="https://github.com/npm/npm-user-validate/commit/cd7539362b08727f91c18a9dcd8a766bd13d997c"><code>cd75393</code></a> Publish only the minimum of files</li> <li>See full diff in <a href="https://github.com/npm/npm-user-validate/compare/v1.0.0...v1.0.1">compare view</a></li> </ul> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

</details>