Skip to content

Comments

Bump string-strip-html from 7.0.3 to 11.0.1#146

Closed
dependabot[bot] wants to merge 1 commit into3.18.5-pdisfrom
dependabot/npm_and_yarn/string-strip-html-11.0.1
Closed

Bump string-strip-html from 7.0.3 to 11.0.1#146
dependabot[bot] wants to merge 1 commit into3.18.5-pdisfrom
dependabot/npm_and_yarn/string-strip-html-11.0.1

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Aug 1, 2022

Bumps string-strip-html from 7.0.3 to 11.0.1.

Changelog

Sourced from string-strip-html's changelog.

11.0.1 (2022-07-26)

Bug Fixes

  • add more precautions when assuming string methods will exist (00804b6)
  • align edge whitespace processing on cb and not on cb (43ee6d5)
  • fix stripRecognisedHTMLOnly enabled to strip single letter tags (1b7ff49)

11.0.0 (2022-07-16)

Features

  • add inline tag recognition - x<b>y</b>z strips to xyz because b is inline element — but — x<div>y</div>z strips to x y z because div is not inline element (cbac254), closes #49

BREAKING CHANGES

  • Bumping major just formally, there are no API changes. The inline tags now have the correct surrounding whitespace.

10.1.0 (2022-07-13)

Features

  • improve whitespace control around punctuation (d8318a7), closes #49

10.0.0 (2022-07-06)

Features

  • Efficiency improvements — any tags within <script> are now skipped. But this comes at expense of tackling the weird case when two paired tags are overlapping, <script>a<style>b</script>c</style>. That's a strange broken code case, but it still warrants a major semver bump. Our perf measurement doesn't cover the particular branch of the algorithm, so there is no perf difference in the records.

Bug Fixes

  • Correct DOCTYPE attribute values pinged to the callback (all-name, no value)
  • Fixes a rare case when the program could enter the infinite loop condition when it encounters Nunjucks-Jinja-like (but different) templating literals. We added a hard check to prevent the backwards index offset.

BREAKING CHANGES

  • Bumping major just because formally, DOCTYPE tag attributes are now pinged to the callback differently than before (it's done correctly now, but differently nonetheless).

9.1.7 (2022-03-21)

Bug Fixes

9.1.0 (2021-11-22)

Features

  • opts.ignoreTagsWithTheirContents (39dad96)

... (truncated)

Commits
  • e3eb24d chore: release [skip ci]
  • 00804b6 fix: add more precautions when assuming string methods will exist
  • 1b7ff49 fix: fix stripRecognisedHTMLOnly enabled to strip single letter tags
  • 43ee6d5 fix: align edge whitespace processing on cb and not on cb
  • 4d322ad chore: update all istanbul comments to c8
  • 36a504f docs: tweak the changelog
  • 9766ce3 chore: automated build tasks [skip ci]
  • 5cdf826 chore: release [skip ci]
  • cbac254 feat: recognise inline tags and adjust whitespace accordingly
  • f3b2289 chore: automated build tasks [skip ci]
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [string-strip-html](https://github.com/codsen/codsen/tree/HEAD/packages/string-strip-html) from 7.0.3 to 11.0.1.
- [Release notes](https://github.com/codsen/codsen/releases)
- [Changelog](https://github.com/codsen/codsen/blob/main/packages/string-strip-html/CHANGELOG.md)
- [Commits](https://github.com/codsen/codsen/commits/string-strip-html@11.0.1/packages/string-strip-html)

---
updated-dependencies:
- dependency-name: string-strip-html
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Aug 1, 2022
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Aug 2, 2022

Superseded by #147.

@dependabot dependabot bot closed this Aug 2, 2022
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/string-strip-html-11.0.1 branch August 2, 2022 11:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants