You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@myfaces.apache.org by GitBox <gi...@apache.org> on 2021/02/11 13:38:44 UTC
[GitHub] [myfaces-tobago] dependabot[bot] opened a new pull request #383: chore(deps-dev): bump ajv and ajv-keywords in /tobago-theme/tobago-theme-scarborough/npm
dependabot[bot] opened a new pull request #383:
URL: https://github.com/apache/myfaces-tobago/pull/383
Bumps [ajv](https://github.com/ajv-validator/ajv) and [ajv-keywords](https://github.com/epoberezkin/ajv-keywords). These dependencies needed to be updated together.
Updates `ajv` from 6.12.6 to 7.1.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/ajv-validator/ajv/releases">ajv's releases</a>.</em></p>
<blockquote>
<h2>v7.1.0</h2>
<p>Support for JSON Type Definition RFC 8927 - a simple schema language provided as an alternative to JSON Schema.</p>
<p>See these docs:</p>
<ul>
<li>an <a href="https://github.com/ajv-validator/ajv/blob/master/docs/json-type-definition.md">informal document</a> in Ajv repo</li>
<li><a href="https://datatracker.ietf.org/doc/rfc8927/">RFC8927</a></li>
<li><a href="https://github.com/ajv-validator/ajv#choosing-schema-language">choosing schema language</a> - comparison with JSON Schema</li>
</ul>
<p>Allow ":" in keyword names (<a href="https://github-redirect.dependabot.com/ajv-validator/ajv/issues/1421">#1421</a>, <a href="https://github.com/teq0"><code>@teq0</code></a>)</p>
<h2>v7.0.4</h2>
<p>Fix: duplicate functions in standalone validation code with mutually recursive schemas (<a href="https://github-redirect.dependabot.com/ajv-validator/ajv/issues/1361">#1361</a>)
Fix: reference resolution when base URI change was not applied (<a href="https://github-redirect.dependabot.com/ajv-validator/ajv/issues/1414">#1414</a>)</p>
<h2>v7.0.3</h2>
<p>Fixes:</p>
<ul>
<li>oneOf error type (<a href="https://github-redirect.dependabot.com/ajv-validator/ajv/issues/1368">#1368</a>, <a href="https://github.com/G-Rath"><code>@G-Rath</code></a>)</li>
<li>remove multiple imports (rollup/plugins#745)</li>
</ul>
<p>Docs:</p>
<ul>
<li>Using in ES5 (<a href="https://github-redirect.dependabot.com/ajv-validator/ajv/issues/1364">#1364</a>, <a href="https://github.com/aladdin-add"><code>@aladdin-add</code></a>)</li>
<li>Option strictTypes: false has to be used with json-schema-secure schema (<a href="https://github-redirect.dependabot.com/ajv-validator/ajv/issues/1373">#1373</a>)</li>
</ul>
<h2>v7.0.2</h2>
<p>Remove duplicate functions from standalone validation code (<a href="https://github-redirect.dependabot.com/ajv-validator/ajv/issues/1361">#1361</a>)</p>
<h2>v7.0.1</h2>
<p>Update error message for <code>maxLength</code>/<code>minLength</code> keywords</p>
<h2>v7.0.0</h2>
<p>Please note: this document covers the changes from v6.12.6.</p>
<h1>The main changes</h1>
<ul>
<li>support of JSON Schema draft-2019-09 features: <a href="https://github.com/ajv-validator/ajv/blob/master/docs/json-schema.md#unevaluatedproperties"><code>unevaluatedProperties</code></a> and <a href="https://github.com/ajv-validator/ajv/blob/master/docs/json-schema.md#unevaluateditems"><code>unevaluatedItems</code></a>, <a href="https://github.com/ajv-validator/ajv/blob/master/docs/validation.md#extending-recursive-schemas">dynamic recursive references</a> and other <a href="https://github.com/ajv-validator/ajv/blob/master/docs/json-schema.md#json-schema-draft-2019-09">additional keywords</a>.</li>
<li>comprehensive support for <a href="https://github.com/ajv-validator/ajv/blob/master/docs/standalone.md">standalone validation code</a> - compiling one or multiple schemas to standalone modules with one or multiple exports.</li>
<li>to reduce the mistakes in JSON schemas and unexpected validation results, <a href="https://github.com/ajv-validator/ajv/blob/master/docs/strict-mode.md">strict mode</a> is added - it prohibits ignored or ambiguous JSON Schema elements. See <a href="https://github.com/ajv-validator/ajv/blob/master/docs/strict-mode.md">Strict mode</a> and <a href="https://github.com/ajv-validator/ajv/blob/master/docs/api.md">Options</a> for more details</li>
<li>to make code injection from untrusted schemas impossible, <a href="https://github.com/ajv-validator/ajv/blob/master/docs/codegen.md">code generation</a> is fully re-written to be type-level safe against code injection.</li>
<li>to simplify Ajv extensions, the new keyword API that is used by pre-defined keywords is available to user-defined keywords - it is much easier to define any keywords now, especially with subschemas.</li>
<li>schemas are compiled to ES6 code (ES5 code generation is supported with an option).</li>
<li>to improve reliability and maintainability the code is migrated to TypeScript.</li>
<li>separate Ajv classes from draft-07 and draft-2019-09 support with different default imports (see <a href="https://github.com/ajv-validator/ajv#usage">Getting started</a> or <a href="https://github.com/ajv-validator/ajv/releases/tag/v7.0.0-beta.5">v7.0.0-beta.5</a> for the details).</li>
</ul>
<p><strong>Please note</strong>:</p>
<ul>
<li>the support for JSON-Schema draft-04 is removed - if you have schemas using "id" attributes you have to replace them with "$id" (or continue using version 6 that will be supported until 02/28/2021).</li>
<li>all formats are separated to <a href="https://github.com/ajv-validator/ajv-formats">ajv-formats</a> package - they have to be explicitly added if you use them.</li>
<li>Ajv instance can only be created with <code>new</code> keyword, as Ajv is now ES6 class.</li>
<li>browser bundles are automatically published to ajv-dist package (but still available on cdnjs.com).</li>
<li>order of schema keyword validation changed - keywords that apply to all types (allOf etc.) are now validated first, before the keywords that apply to specific data types. You can still define custom keywords that apply to all types AND are validated after type-specific keywords using option <code>post: true</code> in keyword definition.</li>
<li>regular expressions in keywords "pattern" and "patternProperties" are now used as if they had unicode "u" flag, as required by JSON Schema specification - it means that some regular expressions that were valid with Ajv v6 are now invalid (and vice versa).</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/ajv-validator/ajv/commit/8ec80c48384abcf8c46617be27201307a2d7c402"><code>8ec80c4</code></a> 7.1.0</li>
<li><a href="https://github.com/ajv-validator/ajv/commit/60dd7ae36c66058e96a37f05eed342c259de1396"><code>60dd7ae</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/ajv-validator/ajv/issues/1438">#1438</a> from ajv-validator/dependabot/npm_and_yarn/husky-5.0.9</li>
<li><a href="https://github.com/ajv-validator/ajv/commit/9af75b5ff3da1c35a3f9df1c86fce2285d307c63"><code>9af75b5</code></a> build(deps-dev): bump husky from 4.3.8 to 5.0.9</li>
<li><a href="https://github.com/ajv-validator/ajv/commit/1996f6b4d41294b5c8af098f63ef1f57f3ba6d0f"><code>1996f6b</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/ajv-validator/ajv/issues/1428">#1428</a> from ajv-validator/jtd</li>
<li><a href="https://github.com/ajv-validator/ajv/commit/078d6a8a9ad3dfcd5ef840d25a051b8b3ecd43be"><code>078d6a8</code></a> note on JTD error objects</li>
<li><a href="https://github.com/ajv-validator/ajv/commit/9e5f2470e5c81a4de4bd2c6eb885eaac93914fba"><code>9e5f247</code></a> JTD: improve error reporting, remove extra error for properties</li>
<li><a href="https://github.com/ajv-validator/ajv/commit/d6acee4bac033b3389393b71785afbce275fd632"><code>d6acee4</code></a> add optional instancePath property to error object</li>
<li><a href="https://github.com/ajv-validator/ajv/commit/7e1711e33996484f134ce32d5ec4c8c7c46e508f"><code>7e1711e</code></a> JTD options, support inlineRefs option, fix removeAdditional option</li>
<li><a href="https://github.com/ajv-validator/ajv/commit/4a9084a2c312d20435f4f4215b8b0c9889b6b708"><code>4a9084a</code></a> jtd error format</li>
<li><a href="https://github.com/ajv-validator/ajv/commit/5ddef2e4c20da50e3a5aaea15987be5dc0d374bb"><code>5ddef2e</code></a> JTD docs</li>
<li>Additional commits viewable in <a href="https://github.com/ajv-validator/ajv/compare/v6.12.6...v7.1.0">compare view</a></li>
</ul>
</details>
<br />
Updates `ajv-keywords` from 3.5.2 to 4.0.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/epoberezkin/ajv-keywords/releases">ajv-keywords's releases</a>.</em></p>
<blockquote>
<h2>v4.0.0</h2>
<p>All keywords support Ajv v7.
Keywords <code>formatMinimum</code>/<code>formatMaximum</code> and <code>formatExclusiveMinimum</code>/<code>formatExclusiveMaximum</code> moved to ajv-formats, the latter two were changed to be used independently for exclusive boundaries, not as modifiers.
Keyword <code>exclusiveRange</code> was changed to be used separately, not as a modifier.
Keywords <code>select</code>/<code>selectCases</code>/<code>selectDefault</code> are re-implemented using new Acv v7 api for keywords - they now support relative references in subschemas.
Support for <code>unevaluatedProperties</code>/<code>unevaluatedItems</code> with <code>select</code> keyword
Use "latest" metaschema URI <code>"http://json-schema.org/schema"</code> for compatibility with Ajv export for JSON Schema draft-2019-09.
New implementation for "transform" keyword.
Supports <a href="https://github.com/ajv-validator/ajv/blob/master/docs/standalone.md">standalone validation code</a>
Keyword error type to extend tagged union DefinedError supplied by Ajv</p>
<h2>v4.0.0-rc.0</h2>
<p>Define keyword error types, to simplify extending type DefineError in ajv</p>
<h2>v4.0.0-beta.3</h2>
<p>Improve support for standalone validation code</p>
<h2>v4.0.0-beta.2</h2>
<p>Use "latest" metaschema URI <code>"http://json-schema.org/schema"</code> for compatibility with Ajv export for JSON Schema draft-2019-09.
New implementation for "transform" keyword.</p>
<h2>v4.0.0-beta.1</h2>
<p>Support unevaluatedProperties/unevaluatedItems with select</p>
<h2>v4.0.0-beta.0</h2>
<p>All keywords support Ajv v7 (beta).
Keywords <code>formatMinimum</code>/<code>formatMaximum</code> and <code>formatExclusiveMinimum</code>/<code>formatExclusiveMaximum</code> moved to ajv-formats, the latter two were changed to be used independently for exclusive boundaries, not as modifiers.
Keyword <code>exclusiveRange</code> was changed to be used separately, not as a modifier.
Keywords <code>select</code>/<code>selectCases</code>/<code>selectDefault</code> are re-implemented using new Acv v7 api for keywords - they now support relative references in subschemas.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/ajv-validator/ajv-keywords/commit/6a6b8edfebc361355382a7b8c7102e69ce345028"><code>6a6b8ed</code></a> 4.0.0</li>
<li><a href="https://github.com/ajv-validator/ajv-keywords/commit/205c15cf75e439da3a7a15633997f323ea8df963"><code>205c15c</code></a> docs: update for v4 release</li>
<li><a href="https://github.com/ajv-validator/ajv-keywords/commit/7661bfce31c11a7507f73a2402cf34db04fe5541"><code>7661bfc</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/epoberezkin/ajv-keywords/issues/148">#148</a> from ajv-validator/dependabot/npm_and_yarn/ajv-format...</li>
<li><a href="https://github.com/ajv-validator/ajv-keywords/commit/7555788af01c2be8655ccc812f958cd88e4dc8c7"><code>7555788</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/epoberezkin/ajv-keywords/issues/145">#145</a> from ajv-validator/dependabot/npm_and_yarn/eslint-con...</li>
<li><a href="https://github.com/ajv-validator/ajv-keywords/commit/eb1a884438308f1e46bc0ceb7f18fc4118183d03"><code>eb1a884</code></a> chore(deps-dev): bump ajv-formats from 0.3.4 to 1.5.1</li>
<li><a href="https://github.com/ajv-validator/ajv-keywords/commit/9be023a908f16d60a23e0a83992c7eb78f5419e7"><code>9be023a</code></a> chore(deps-dev): bump eslint-config-prettier from 6.15.0 to 7.0.0</li>
<li><a href="https://github.com/ajv-validator/ajv-keywords/commit/24212a205b777f147f08ae11e66a69b832ea4fa4"><code>24212a2</code></a> ci: npm publish main version</li>
<li><a href="https://github.com/ajv-validator/ajv-keywords/commit/db4d00524566985ee0b69dc4a52d209e86eb26f9"><code>db4d005</code></a> test: add allowUnionTypes</li>
<li><a href="https://github.com/ajv-validator/ajv-keywords/commit/0abec68642db52faaaf74e8bbf928083649b8f53"><code>0abec68</code></a> upgrade ajv@7.0.0; import -> import type</li>
<li><a href="https://github.com/ajv-validator/ajv-keywords/commit/7a05a1a05da729743c6a049a267fe615d84806c6"><code>7a05a1a</code></a> 4.0.0-rc.0</li>
<li>Additional commits viewable in <a href="https://github.com/epoberezkin/ajv-keywords/compare/v3.5.2...v4.0.0">compare view</a></li>
</ul>
</details>
<br />
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [myfaces-tobago] henningn merged pull request #383: chore(deps-dev): bump ajv and ajv-keywords in /tobago-theme/tobago-theme-scarborough/npm
Posted by GitBox <gi...@apache.org>.
henningn merged pull request #383:
URL: https://github.com/apache/myfaces-tobago/pull/383
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org