Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade svelte-spa-router from 2.1.0 to 2.2.0 #14

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

snyk-bot
Copy link

Snyk has created this PR to upgrade svelte-spa-router from 2.1.0 to 2.2.0.

merge advice

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 1 version ahead of your current version.
  • The recommended version was released 21 days ago, on 2020-05-30.
Release notes
Package name: svelte-spa-router
  • 2.2.0 - 2020-05-30

    This release contains a new feature and other small improvements.

    New features:

    • You can now pass a parameter to the use:link action (e.g. use:link={val}) which will take precedence over the tag's href value. You can use this to create links whose target changes reactively, for example. (Thanks to @cianx!)
    • Using the tick method from the Svelte runtime in place of running our own nextTickPromise. From now, the method remains an alias of Svelte's own tick, but will be deprecated in version 3 of the router. (Using the method directly will show a deprecation warning in the console)

    Fixes:

    • Fixed: passing more than one class to use:active using the className property (use:active={{className: 'something something-else'}}) was causing a runtime exception.
    • Setting the initial value for the loc readable store when the first object subscribes to it, rather than during initialization. This fixes issues when applications subscribe to the loc store later in their lifecycle (e.g. if the router is added after page navigations have happened already).

    Misc:

    • Updated devDependencies
  • 2.1.0 - 2020-03-21

    New features:

    • The custom event routeEvent now bubbles from a component inside the router to the router's parent; see docs
    • push, pop, and replace now return a Promise that is resolved when the route navigation succeeded (but not necessarily after the new route has been loaded)

    Fixes:

    • Showing a warning in the console when the replace method is used in an environment that doesn't support it, such as the Svelte REPL (see #93)

    Changes:

    • For security reasons, the non-dev dependency (regexparam) is added with the exact version now, rather than a caret
from svelte-spa-router GitHub release notes
Commit messages
Package name: svelte-spa-router
  • 82b5e73 nextTickPromise was exported and so should not be removed
  • a663a71 Fixed use:action with empty class names
  • 7f8ebfa Fixed linter
  • 1dc9002 Updated devDepdendencies
  • 3d12f0c Initial value for readable store should be set in the start callback
  • 1da07ba Actually, this should be 2.2.0
  • 7b38f43 Using tick from Svelte
  • 6956e73 Version 2.1.1
  • f3c5f75 Typo
  • ff2cc65 Allow multiple classes in use:active
  • decf39e Merge branch 'master' of github.com:ItalyPaleAle/svelte-spa-router
  • 7a6c7bd Added funding link
  • 0fe9cdd Allow use:link elements to be updated if the href changes. (#117)
  • a4d2b09 Explain that event.detail.name might be altered by minifiers

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant