Re: [PR] build: configure versions plugin [myfaces-tobago]
henningn closed pull request #5011: build: configure versions plugin URL: https://github.com/apache/myfaces-tobago/pull/5011 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
Re: [PR] build(deps): bump org.owasp:dependency-check-maven from 9.0.10 to 9.1.0 [myfaces-tobago]
henningn merged PR #4999: URL: https://github.com/apache/myfaces-tobago/pull/4999 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
Re: [PR] build(deps): bump org.owasp:dependency-check-maven from 9.0.10 to 9.1.0 [myfaces-tobago]
henningn merged PR #5008: URL: https://github.com/apache/myfaces-tobago/pull/5008 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
Re: [PR] build(deps): bump commons-io:commons-io from 2.15.1 to 2.16.0 [myfaces-tobago]
henningn merged PR #4990: URL: https://github.com/apache/myfaces-tobago/pull/4990 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
Re: [PR] build(deps-dev): bump org.seleniumhq.selenium:selenium-java from 4.18.1 to 4.19.1 [myfaces-tobago]
henningn merged PR #4989: URL: https://github.com/apache/myfaces-tobago/pull/4989 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
Re: [PR] build(deps): bump org.apache.maven:maven-archiver from 3.6.1 to 3.6.2 [myfaces-tobago]
henningn merged PR #4988: URL: https://github.com/apache/myfaces-tobago/pull/4988 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
Re: [PR] build(deps): bump org.apache.maven.plugins:maven-assembly-plugin from 3.6.0 to 3.7.1 [myfaces-tobago]
henningn merged PR #4970: URL: https://github.com/apache/myfaces-tobago/pull/4970 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
Re: [PR] build(deps): bump org.apache.maven.plugins:maven-assembly-plugin from 3.7.0 to 3.7.1 [myfaces-tobago]
henningn merged PR #4969: URL: https://github.com/apache/myfaces-tobago/pull/4969 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
Re: [PR] build(deps): bump org.apache.maven.plugins:maven-compiler-plugin from 3.12.1 to 3.13.0 [myfaces-tobago]
henningn merged PR #4971: URL: https://github.com/apache/myfaces-tobago/pull/4971 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
Re: [PR] build(deps): bump org.apache.maven.plugins:maven-compiler-plugin from 3.12.1 to 3.13.0 [myfaces-tobago]
henningn merged PR #4968: URL: https://github.com/apache/myfaces-tobago/pull/4968 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
Re: [PR] build(deps): bump com.google.javascript:closure-compiler from v20190415 to v20240317 [myfaces-tobago]
henningn commented on PR #4987: URL: https://github.com/apache/myfaces-tobago/pull/4987#issuecomment-2033744759 @dependabot rebase -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
Re: [PR] build(deps): bump com.google.javascript:closure-compiler from v20190415 to v20240317 [myfaces-tobago]
henningn commented on PR #4985: URL: https://github.com/apache/myfaces-tobago/pull/4985#issuecomment-2033745228 @dependabot rebase -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
Re: [PR] build(deps): bump commons-logging:commons-logging from 1.3.0 to 1.3.1 [myfaces-tobago]
henningn commented on PR #4978: URL: https://github.com/apache/myfaces-tobago/pull/4978#issuecomment-2033745386 @dependabot rebase -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
Re: [PR] build(deps): bump commons-logging:commons-logging from 1.3.0 to 1.3.1 [myfaces-tobago]
henningn commented on PR #4977: URL: https://github.com/apache/myfaces-tobago/pull/4977#issuecomment-2033745527 @dependabot rebase -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
[PR] ci(dependabot): ignore closure-compiler [myfaces-tobago]
henningn opened a new pull request, #5012: URL: https://github.com/apache/myfaces-tobago/pull/5012 (no comment) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
Re: [PR] ci(dependabot): ignore closure-compiler [myfaces-tobago]
henningn merged PR #5012: URL: https://github.com/apache/myfaces-tobago/pull/5012 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
Re: [PR] build(deps): bump com.google.javascript:closure-compiler from v20190415 to v20240317 [myfaces-tobago]
dependabot[bot] commented on PR #4985: URL: https://github.com/apache/myfaces-tobago/pull/4985#issuecomment-2033822133 Looks like com.google.javascript:closure-compiler is no longer being updated by Dependabot, so this is no longer needed. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
Re: [PR] build(deps): bump com.google.javascript:closure-compiler from v20190415 to v20240317 [myfaces-tobago]
dependabot[bot] closed pull request #4985: build(deps): bump com.google.javascript:closure-compiler from v20190415 to v20240317 URL: https://github.com/apache/myfaces-tobago/pull/4985 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
Re: [PR] build(deps): bump com.google.javascript:closure-compiler from v20190415 to v20240317 [myfaces-tobago]
dependabot[bot] closed pull request #4987: build(deps): bump com.google.javascript:closure-compiler from v20190415 to v20240317 URL: https://github.com/apache/myfaces-tobago/pull/4987 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
Re: [PR] build(deps): bump com.google.javascript:closure-compiler from v20190415 to v20240317 [myfaces-tobago]
dependabot[bot] commented on PR #4987: URL: https://github.com/apache/myfaces-tobago/pull/4987#issuecomment-2033822174 Looks like com.google.javascript:closure-compiler is no longer being updated by Dependabot, so this is no longer needed. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
Re: [PR] build(deps): bump commons-logging:commons-logging from 1.3.0 to 1.3.1 [myfaces-tobago]
henningn merged PR #4978: URL: https://github.com/apache/myfaces-tobago/pull/4978 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
Re: [PR] build(deps): bump commons-logging:commons-logging from 1.3.0 to 1.3.1 [myfaces-tobago]
henningn merged PR #4977: URL: https://github.com/apache/myfaces-tobago/pull/4977 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
[PR] build(deps): bump @trevoreyre/autocomplete-js from 2.4.1 to 3.0.1 in /tobago-theme [myfaces-tobago]
dependabot[bot] opened a new pull request, #5013: URL: https://github.com/apache/myfaces-tobago/pull/5013 Bumps [@trevoreyre/autocomplete-js](https://github.com/trevoreyre/autocomplete) from 2.4.1 to 3.0.1. Release notes Sourced from https://github.com/trevoreyre/autocomplete/releases";>@trevoreyre/autocomplete-js's releases. v3.0.1 (April 02, 2024) Fixed github release action v3.0.0 (April 02, 2024) Updated storybook to v8.0. Updated stories to new format. Updated dev dependencies BREAKING: Updated node.js version to 18 (newer versions untested) autocomplete-vue BREAKING: Updated vue component for Vue.js 3.x Changelog Sourced from https://github.com/trevoreyre/autocomplete/blob/master/CHANGELOG.md";>@trevoreyre/autocomplete-js's changelog. v3.0.1 (April 02, 2024) Fixed github release action v3.0.0 (April 02, 2024) Updated storybook to v8.0. Updated stories to new format. Updated dev dependencies BREAKING: Updated node.js version to 18 (newer versions untested) autocomplete-vue BREAKING: Updated vue component for Vue.js 3.x Commits https://github.com/trevoreyre/autocomplete/commit/9ec694823ca03a859cdc513751059c0969b48e8b";>9ec6948 v3.0.1 https://github.com/trevoreyre/autocomplete/commit/a75902feffe683293d419a83ff643438dd880e56";>a75902f Update github release workflow https://github.com/trevoreyre/autocomplete/commit/e28b59bc40f1576fbcf6b8004725fa6631220469";>e28b59b v3.0.0 https://github.com/trevoreyre/autocomplete/commit/3bc4f5c1948ae4abb9a357c83ab47e887c70603e";>3bc4f5c Merge pull request https://redirect.github.com/trevoreyre/autocomplete/issues/172";>#172 from sebbayer/update-vue-3 https://github.com/trevoreyre/autocomplete/commit/6597d2dcfe01abcab31a40c0e3f1ce699bf88df2";>6597d2d Add .nvmrc for netlify deployment https://github.com/trevoreyre/autocomplete/commit/e388080827fdd783e5f3eee15f2515f9b326b863";>e388080 Add minimum node version 18 https://github.com/trevoreyre/autocomplete/commit/8159f170cd07de1a7a9b72ba83a4d52899e5fe49";>8159f17 Add vite peer dependency https://github.com/trevoreyre/autocomplete/commit/26fb16a6925b9c9e454a5f346b6ae9fbc139e9bb";>26fb16a Update yarn lock file https://github.com/trevoreyre/autocomplete/commit/e0041074a8659dd5f2a9d4f2b5f483fd1e9d2462";>e004107 Remove optional dependency in package-lock.json https://github.com/trevoreyre/autocomplete/commit/ba1a5930f653adea45d4898835287a1a04a031e0";>ba1a593 Update CHANGELOG for 3.0.0 Additional commits viewable in https://github.com/trevoreyre/autocomplete/compare/v2.4.1...v3.0.1";>compare view [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@trevoreyre/autocomplete-js&package-manager=npm_and_yarn&previous-version=2.4.1&new-version=3.0.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org For queries about this service
[PR] build(deps-dev): bump rollup from 4.13.2 to 4.14.0 in /tobago-example/tobago-example-demo [myfaces-tobago]
dependabot[bot] opened a new pull request, #5018: URL: https://github.com/apache/myfaces-tobago/pull/5018 Bumps [rollup](https://github.com/rollup/rollup) from 4.13.2 to 4.14.0. Release notes Sourced from https://github.com/rollup/rollup/releases";>rollup's releases. v4.14.0 4.14.0 2024-04-03 Features Display error causes in Rollup CLI (https://redirect.github.com/rollup/rollup/issues/5422";>#5422) Add basic support for explicit resource management via "using" and "await using" (https://redirect.github.com/rollup/rollup/issues/5423";>#5423) Pull Requests https://redirect.github.com/rollup/rollup/pull/5422";>#5422: feat: show all cause in Error (https://github.com/devohda";>@devohda, https://github.com/lukastaegert";>@lukastaegert) https://redirect.github.com/rollup/rollup/pull/5444";>#5444: feat: support explicit-resource-management (https://github.com/TrickyPi";>@TrickyPi) https://redirect.github.com/rollup/rollup/pull/5445";>#5445: docs: add @shikiji/vitepress-twoslash (https://github.com/sapphi-red";>@sapphi-red) https://redirect.github.com/rollup/rollup/pull/5447";>#5447: chore(deps): lock file maintenance minor/patch updates ( https://github.com/renovate";>@renovate[bot]) https://redirect.github.com/rollup/rollup/pull/5448";>#5448: chore(deps): lock file maintenance (https://github.com/renovate";>@renovate[bot]) Changelog Sourced from https://github.com/rollup/rollup/blob/master/CHANGELOG.md";>rollup's changelog. 4.14.0 2024-04-03 Features Display error causes in Rollup CLI (https://redirect.github.com/rollup/rollup/issues/5422";>#5422) Add basic support for explicit resource management via "using" and "await using" (https://redirect.github.com/rollup/rollup/issues/5423";>#5423) Pull Requests https://redirect.github.com/rollup/rollup/pull/5422";>#5422: feat: show all cause in Error (https://github.com/devohda";>@devohda, https://github.com/lukastaegert";>@lukastaegert) https://redirect.github.com/rollup/rollup/pull/5444";>#5444: feat: support explicit-resource-management (https://github.com/TrickyPi";>@TrickyPi) https://redirect.github.com/rollup/rollup/pull/5445";>#5445: docs: add @shikiji/vitepress-twoslash (https://github.com/sapphi-red";>@sapphi-red) https://redirect.github.com/rollup/rollup/pull/5447";>#5447: chore(deps): lock file maintenance minor/patch updates ( https://github.com/renovate";>@renovate[bot]) https://redirect.github.com/rollup/rollup/pull/5448";>#5448: chore(deps): lock file maintenance (https://github.com/renovate";>@renovate[bot]) Commits https://github.com/rollup/rollup/commit/5abe71bd5bae3423b4e2ee80207c871efde20253";>5abe71b 4.14.0 https://github.com/rollup/rollup/commit/5301dec8d5319e31e19b7ef14cff7161170be06b";>5301dec feat: show all cause in Error (https://redirect.github.com/rollup/rollup/issues/5422";>#5422) https://github.com/rollup/rollup/commit/8521d29c3ab86b99e6f0d32820e6d786d251834b";>8521d29 feat: support explicit-resource-management (https://redirect.github.com/rollup/rollup/issues/5444";>#5444) https://github.com/rollup/rollup/commit/c87901dd730fbd4cf56f4c742b407730e45d6707";>c87901d docs: add @shikiji/vitepress-twoslash (https://redirect.github.com/rollup/rollup/issues/5445";>#5445) https://github.com/rollup/rollup/commit/1dd3c028e149cca8207d5f2c513bf776db272af4";>1dd3c02 chore(deps): lock file maintenance (https://redirect.github.com/rollup/rollup/issues/5448";>#5448) https://github.com/rollup/rollup/commit/a8e39eb1200689bbfa39e56d5beeadb0c6f6600d";>a8e39eb chore(deps): lock file maintenance minor/patch updates (https://redirect.github.com/rollup/rollup/issues/5447";>#5447) See full diff in https://github.com/rollup/rollup/compare/v4.13.2...v4.14.0";>compare view [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=rollup&package-manager=npm_and_yarn&previous-version=4.13.2&new-version=4.14.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously re
[PR] build(deps-dev): bump rollup from 4.13.2 to 4.14.0 in /tobago-theme [myfaces-tobago]
dependabot[bot] opened a new pull request, #5014: URL: https://github.com/apache/myfaces-tobago/pull/5014 Bumps [rollup](https://github.com/rollup/rollup) from 4.13.2 to 4.14.0. Release notes Sourced from https://github.com/rollup/rollup/releases";>rollup's releases. v4.14.0 4.14.0 2024-04-03 Features Display error causes in Rollup CLI (https://redirect.github.com/rollup/rollup/issues/5422";>#5422) Add basic support for explicit resource management via "using" and "await using" (https://redirect.github.com/rollup/rollup/issues/5423";>#5423) Pull Requests https://redirect.github.com/rollup/rollup/pull/5422";>#5422: feat: show all cause in Error (https://github.com/devohda";>@devohda, https://github.com/lukastaegert";>@lukastaegert) https://redirect.github.com/rollup/rollup/pull/5444";>#5444: feat: support explicit-resource-management (https://github.com/TrickyPi";>@TrickyPi) https://redirect.github.com/rollup/rollup/pull/5445";>#5445: docs: add @shikiji/vitepress-twoslash (https://github.com/sapphi-red";>@sapphi-red) https://redirect.github.com/rollup/rollup/pull/5447";>#5447: chore(deps): lock file maintenance minor/patch updates ( https://github.com/renovate";>@renovate[bot]) https://redirect.github.com/rollup/rollup/pull/5448";>#5448: chore(deps): lock file maintenance (https://github.com/renovate";>@renovate[bot]) Changelog Sourced from https://github.com/rollup/rollup/blob/master/CHANGELOG.md";>rollup's changelog. 4.14.0 2024-04-03 Features Display error causes in Rollup CLI (https://redirect.github.com/rollup/rollup/issues/5422";>#5422) Add basic support for explicit resource management via "using" and "await using" (https://redirect.github.com/rollup/rollup/issues/5423";>#5423) Pull Requests https://redirect.github.com/rollup/rollup/pull/5422";>#5422: feat: show all cause in Error (https://github.com/devohda";>@devohda, https://github.com/lukastaegert";>@lukastaegert) https://redirect.github.com/rollup/rollup/pull/5444";>#5444: feat: support explicit-resource-management (https://github.com/TrickyPi";>@TrickyPi) https://redirect.github.com/rollup/rollup/pull/5445";>#5445: docs: add @shikiji/vitepress-twoslash (https://github.com/sapphi-red";>@sapphi-red) https://redirect.github.com/rollup/rollup/pull/5447";>#5447: chore(deps): lock file maintenance minor/patch updates ( https://github.com/renovate";>@renovate[bot]) https://redirect.github.com/rollup/rollup/pull/5448";>#5448: chore(deps): lock file maintenance (https://github.com/renovate";>@renovate[bot]) Commits https://github.com/rollup/rollup/commit/5abe71bd5bae3423b4e2ee80207c871efde20253";>5abe71b 4.14.0 https://github.com/rollup/rollup/commit/5301dec8d5319e31e19b7ef14cff7161170be06b";>5301dec feat: show all cause in Error (https://redirect.github.com/rollup/rollup/issues/5422";>#5422) https://github.com/rollup/rollup/commit/8521d29c3ab86b99e6f0d32820e6d786d251834b";>8521d29 feat: support explicit-resource-management (https://redirect.github.com/rollup/rollup/issues/5444";>#5444) https://github.com/rollup/rollup/commit/c87901dd730fbd4cf56f4c742b407730e45d6707";>c87901d docs: add @shikiji/vitepress-twoslash (https://redirect.github.com/rollup/rollup/issues/5445";>#5445) https://github.com/rollup/rollup/commit/1dd3c028e149cca8207d5f2c513bf776db272af4";>1dd3c02 chore(deps): lock file maintenance (https://redirect.github.com/rollup/rollup/issues/5448";>#5448) https://github.com/rollup/rollup/commit/a8e39eb1200689bbfa39e56d5beeadb0c6f6600d";>a8e39eb chore(deps): lock file maintenance minor/patch updates (https://redirect.github.com/rollup/rollup/issues/5447";>#5447) See full diff in https://github.com/rollup/rollup/compare/v4.13.2...v4.14.0";>compare view [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=rollup&package-manager=npm_and_yarn&previous-version=4.13.2&new-version=4.14.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously re
[PR] build(deps-dev): bump rollup from 4.13.2 to 4.14.0 in /tobago-theme [myfaces-tobago]
dependabot[bot] opened a new pull request, #5015: URL: https://github.com/apache/myfaces-tobago/pull/5015 Bumps [rollup](https://github.com/rollup/rollup) from 4.13.2 to 4.14.0. Release notes Sourced from https://github.com/rollup/rollup/releases";>rollup's releases. v4.14.0 4.14.0 2024-04-03 Features Display error causes in Rollup CLI (https://redirect.github.com/rollup/rollup/issues/5422";>#5422) Add basic support for explicit resource management via "using" and "await using" (https://redirect.github.com/rollup/rollup/issues/5423";>#5423) Pull Requests https://redirect.github.com/rollup/rollup/pull/5422";>#5422: feat: show all cause in Error (https://github.com/devohda";>@devohda, https://github.com/lukastaegert";>@lukastaegert) https://redirect.github.com/rollup/rollup/pull/5444";>#5444: feat: support explicit-resource-management (https://github.com/TrickyPi";>@TrickyPi) https://redirect.github.com/rollup/rollup/pull/5445";>#5445: docs: add @shikiji/vitepress-twoslash (https://github.com/sapphi-red";>@sapphi-red) https://redirect.github.com/rollup/rollup/pull/5447";>#5447: chore(deps): lock file maintenance minor/patch updates ( https://github.com/renovate";>@renovate[bot]) https://redirect.github.com/rollup/rollup/pull/5448";>#5448: chore(deps): lock file maintenance (https://github.com/renovate";>@renovate[bot]) Changelog Sourced from https://github.com/rollup/rollup/blob/master/CHANGELOG.md";>rollup's changelog. 4.14.0 2024-04-03 Features Display error causes in Rollup CLI (https://redirect.github.com/rollup/rollup/issues/5422";>#5422) Add basic support for explicit resource management via "using" and "await using" (https://redirect.github.com/rollup/rollup/issues/5423";>#5423) Pull Requests https://redirect.github.com/rollup/rollup/pull/5422";>#5422: feat: show all cause in Error (https://github.com/devohda";>@devohda, https://github.com/lukastaegert";>@lukastaegert) https://redirect.github.com/rollup/rollup/pull/5444";>#5444: feat: support explicit-resource-management (https://github.com/TrickyPi";>@TrickyPi) https://redirect.github.com/rollup/rollup/pull/5445";>#5445: docs: add @shikiji/vitepress-twoslash (https://github.com/sapphi-red";>@sapphi-red) https://redirect.github.com/rollup/rollup/pull/5447";>#5447: chore(deps): lock file maintenance minor/patch updates ( https://github.com/renovate";>@renovate[bot]) https://redirect.github.com/rollup/rollup/pull/5448";>#5448: chore(deps): lock file maintenance (https://github.com/renovate";>@renovate[bot]) Commits https://github.com/rollup/rollup/commit/5abe71bd5bae3423b4e2ee80207c871efde20253";>5abe71b 4.14.0 https://github.com/rollup/rollup/commit/5301dec8d5319e31e19b7ef14cff7161170be06b";>5301dec feat: show all cause in Error (https://redirect.github.com/rollup/rollup/issues/5422";>#5422) https://github.com/rollup/rollup/commit/8521d29c3ab86b99e6f0d32820e6d786d251834b";>8521d29 feat: support explicit-resource-management (https://redirect.github.com/rollup/rollup/issues/5444";>#5444) https://github.com/rollup/rollup/commit/c87901dd730fbd4cf56f4c742b407730e45d6707";>c87901d docs: add @shikiji/vitepress-twoslash (https://redirect.github.com/rollup/rollup/issues/5445";>#5445) https://github.com/rollup/rollup/commit/1dd3c028e149cca8207d5f2c513bf776db272af4";>1dd3c02 chore(deps): lock file maintenance (https://redirect.github.com/rollup/rollup/issues/5448";>#5448) https://github.com/rollup/rollup/commit/a8e39eb1200689bbfa39e56d5beeadb0c6f6600d";>a8e39eb chore(deps): lock file maintenance minor/patch updates (https://redirect.github.com/rollup/rollup/issues/5447";>#5447) See full diff in https://github.com/rollup/rollup/compare/v4.13.2...v4.14.0";>compare view [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=rollup&package-manager=npm_and_yarn&previous-version=4.13.2&new-version=4.14.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously re
[PR] build(deps): bump @trevoreyre/autocomplete-js from 2.4.1 to 3.0.1 in /tobago-theme [myfaces-tobago]
dependabot[bot] opened a new pull request, #5016: URL: https://github.com/apache/myfaces-tobago/pull/5016 Bumps [@trevoreyre/autocomplete-js](https://github.com/trevoreyre/autocomplete) from 2.4.1 to 3.0.1. Release notes Sourced from https://github.com/trevoreyre/autocomplete/releases";>@trevoreyre/autocomplete-js's releases. v3.0.1 (April 02, 2024) Fixed github release action v3.0.0 (April 02, 2024) Updated storybook to v8.0. Updated stories to new format. Updated dev dependencies BREAKING: Updated node.js version to 18 (newer versions untested) autocomplete-vue BREAKING: Updated vue component for Vue.js 3.x Changelog Sourced from https://github.com/trevoreyre/autocomplete/blob/master/CHANGELOG.md";>@trevoreyre/autocomplete-js's changelog. v3.0.1 (April 02, 2024) Fixed github release action v3.0.0 (April 02, 2024) Updated storybook to v8.0. Updated stories to new format. Updated dev dependencies BREAKING: Updated node.js version to 18 (newer versions untested) autocomplete-vue BREAKING: Updated vue component for Vue.js 3.x Commits https://github.com/trevoreyre/autocomplete/commit/9ec694823ca03a859cdc513751059c0969b48e8b";>9ec6948 v3.0.1 https://github.com/trevoreyre/autocomplete/commit/a75902feffe683293d419a83ff643438dd880e56";>a75902f Update github release workflow https://github.com/trevoreyre/autocomplete/commit/e28b59bc40f1576fbcf6b8004725fa6631220469";>e28b59b v3.0.0 https://github.com/trevoreyre/autocomplete/commit/3bc4f5c1948ae4abb9a357c83ab47e887c70603e";>3bc4f5c Merge pull request https://redirect.github.com/trevoreyre/autocomplete/issues/172";>#172 from sebbayer/update-vue-3 https://github.com/trevoreyre/autocomplete/commit/6597d2dcfe01abcab31a40c0e3f1ce699bf88df2";>6597d2d Add .nvmrc for netlify deployment https://github.com/trevoreyre/autocomplete/commit/e388080827fdd783e5f3eee15f2515f9b326b863";>e388080 Add minimum node version 18 https://github.com/trevoreyre/autocomplete/commit/8159f170cd07de1a7a9b72ba83a4d52899e5fe49";>8159f17 Add vite peer dependency https://github.com/trevoreyre/autocomplete/commit/26fb16a6925b9c9e454a5f346b6ae9fbc139e9bb";>26fb16a Update yarn lock file https://github.com/trevoreyre/autocomplete/commit/e0041074a8659dd5f2a9d4f2b5f483fd1e9d2462";>e004107 Remove optional dependency in package-lock.json https://github.com/trevoreyre/autocomplete/commit/ba1a5930f653adea45d4898835287a1a04a031e0";>ba1a593 Update CHANGELOG for 3.0.0 Additional commits viewable in https://github.com/trevoreyre/autocomplete/compare/v2.4.1...v3.0.1";>compare view [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@trevoreyre/autocomplete-js&package-manager=npm_and_yarn&previous-version=2.4.1&new-version=3.0.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org For queries about this service
[PR] build(deps): bump com.google.javascript:closure-compiler from v20190415 to v20220502 [myfaces-tobago]
dependabot[bot] opened a new pull request, #5017: URL: https://github.com/apache/myfaces-tobago/pull/5017 Bumps com.google.javascript:closure-compiler from v20190415 to v20220502. [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.google.javascript:closure-compiler&package-manager=maven&previous-version=v20190415&new-version=v20220502)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
[PR] build(deps): bump org.owasp:dependency-check-maven from 9.0.10 to 9.1.0 [myfaces-tobago]
dependabot[bot] opened a new pull request, #5019: URL: https://github.com/apache/myfaces-tobago/pull/5019 Bumps [org.owasp:dependency-check-maven](https://github.com/jeremylong/DependencyCheck) from 9.0.10 to 9.1.0. Release notes Sourced from https://github.com/jeremylong/DependencyCheck/releases";>org.owasp:dependency-check-maven's releases. Version 9.1.0 Refer to the https://github.com/jeremylong/DependencyCheck/blob/main/CHANGELOG.md#change-log";>CHANGELOG.md for information about improvements and upgrade notes. Changelog Sourced from https://github.com/jeremylong/DependencyCheck/blob/main/CHANGELOG.md";>org.owasp:dependency-check-maven's changelog. https://github.com/jeremylong/DependencyCheck/releases/tag/v9.1.0";>Version 9.1.0 (2024-03-31) feat: Add v2 support for maven_install.json (https://redirect.github.com/jeremylong/DependencyCheck/issues/6528";>#6528) build(deps): bump open-vulnerability-client (https://redirect.github.com/jeremylong/DependencyCheck/issues/6554";>#6554) resolves update issues due to CVSS Metrics 4.0 build(deps): bump jackson.version from 2.16.0 to 2.16.1 (https://redirect.github.com/jeremylong/DependencyCheck/issues/6353";>#6353) build(deps): bump org.jsoup:jsoup from 1.16.2 to 1.17.2 (https://redirect.github.com/jeremylong/DependencyCheck/issues/6362";>#6362) build(deps): bump golang from 1.21.5-alpine to 1.22.1-alpine (https://redirect.github.com/jeremylong/DependencyCheck/issues/6506";>#6506) See the full listing of https://github.com/jeremylong/DependencyCheck/milestone/81?closed=1";>changes. Commits https://github.com/jeremylong/DependencyCheck/commit/e0b9397ed392ebcf39f10b4d1c94cac475367824";>e0b9397 build: prepare release v9.1.0 https://github.com/jeremylong/DependencyCheck/commit/3f1b558dd3e3e5e296b26e7bad010564ff90fe7e";>3f1b558 docs: prepare release 9.1.0 https://github.com/jeremylong/DependencyCheck/commit/c3642696b1bdb2bab12ae3f4f2943723de3b1032";>c364269 build(deps): bump jackson.version from 2.16.0 to 2.16.1 (https://redirect.github.com/jeremylong/DependencyCheck/issues/6353";>#6353) https://github.com/jeremylong/DependencyCheck/commit/d2c04b555e092064d684ad77821e4a0801b45af7";>d2c04b5 build(deps): bump org.jsoup:jsoup from 1.16.2 to 1.17.2 (https://redirect.github.com/jeremylong/DependencyCheck/issues/6362";>#6362) https://github.com/jeremylong/DependencyCheck/commit/e8c4ca3f4d3e7062f56206e521b3f74e78ca39b9";>e8c4ca3 build(deps): bump open-vulnerability-client (https://redirect.github.com/jeremylong/DependencyCheck/issues/6554";>#6554) https://github.com/jeremylong/DependencyCheck/commit/2e6a2318df0df0e63ef6cca8696b9d09446fdee0";>2e6a231 build(deps): bump golang from 1.21.5-alpine to 1.22.1-alpine (https://redirect.github.com/jeremylong/DependencyCheck/issues/6506";>#6506) https://github.com/jeremylong/DependencyCheck/commit/0e183dad9bc1bdabd24f24ba6837d07ff3c42741";>0e183da build(deps): bump actions/setup-java from 3 to 4 (https://redirect.github.com/jeremylong/DependencyCheck/issues/6172";>#6172) https://github.com/jeremylong/DependencyCheck/commit/42adde4b37f4b2dd5ef63501f696bc452f4adb65";>42adde4 fix: typo (https://redirect.github.com/jeremylong/DependencyCheck/issues/6526";>#6526) https://github.com/jeremylong/DependencyCheck/commit/f60c8678c3a7163f66ee520045819422f0e04a7f";>f60c867 feat: Add v2 support for maven_install.json (https://redirect.github.com/jeremylong/DependencyCheck/issues/6528";>#6528) https://github.com/jeremylong/DependencyCheck/commit/a6a8f217f867be2e731bd36cf144676981e45bba";>a6a8f21 Merge pull request https://redirect.github.com/jeremylong/DependencyCheck/issues/1";>#1 from nutshelllabs/ef/add-maven-install-v2-support Additional commits viewable in https://github.com/jeremylong/DependencyCheck/compare/v9.0.10...v9.1.0";>compare view [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.owasp:dependency-check-maven&package-manager=maven&previous-version=9.0.10&new-version=9.1.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
[PR] build(deps): bump com.google.javascript:closure-compiler from v20190415 to v20220502 [myfaces-tobago]
dependabot[bot] opened a new pull request, #5020: URL: https://github.com/apache/myfaces-tobago/pull/5020 Bumps com.google.javascript:closure-compiler from v20190415 to v20220502. [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.google.javascript:closure-compiler&package-manager=maven&previous-version=v20190415&new-version=v20220502)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
[PR] build(deps): bump commons-io:commons-io from 2.15.1 to 2.16.0 [myfaces-tobago]
dependabot[bot] opened a new pull request, #5021: URL: https://github.com/apache/myfaces-tobago/pull/5021 Bumps commons-io:commons-io from 2.15.1 to 2.16.0. [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=commons-io:commons-io&package-manager=maven&previous-version=2.15.1&new-version=2.16.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
[PR] build(deps): bump org.owasp:dependency-check-maven from 9.0.10 to 9.1.0 [myfaces-tobago]
dependabot[bot] opened a new pull request, #5022: URL: https://github.com/apache/myfaces-tobago/pull/5022 Bumps [org.owasp:dependency-check-maven](https://github.com/jeremylong/DependencyCheck) from 9.0.10 to 9.1.0. Release notes Sourced from https://github.com/jeremylong/DependencyCheck/releases";>org.owasp:dependency-check-maven's releases. Version 9.1.0 Refer to the https://github.com/jeremylong/DependencyCheck/blob/main/CHANGELOG.md#change-log";>CHANGELOG.md for information about improvements and upgrade notes. Changelog Sourced from https://github.com/jeremylong/DependencyCheck/blob/main/CHANGELOG.md";>org.owasp:dependency-check-maven's changelog. https://github.com/jeremylong/DependencyCheck/releases/tag/v9.1.0";>Version 9.1.0 (2024-03-31) feat: Add v2 support for maven_install.json (https://redirect.github.com/jeremylong/DependencyCheck/issues/6528";>#6528) build(deps): bump open-vulnerability-client (https://redirect.github.com/jeremylong/DependencyCheck/issues/6554";>#6554) resolves update issues due to CVSS Metrics 4.0 build(deps): bump jackson.version from 2.16.0 to 2.16.1 (https://redirect.github.com/jeremylong/DependencyCheck/issues/6353";>#6353) build(deps): bump org.jsoup:jsoup from 1.16.2 to 1.17.2 (https://redirect.github.com/jeremylong/DependencyCheck/issues/6362";>#6362) build(deps): bump golang from 1.21.5-alpine to 1.22.1-alpine (https://redirect.github.com/jeremylong/DependencyCheck/issues/6506";>#6506) See the full listing of https://github.com/jeremylong/DependencyCheck/milestone/81?closed=1";>changes. Commits https://github.com/jeremylong/DependencyCheck/commit/e0b9397ed392ebcf39f10b4d1c94cac475367824";>e0b9397 build: prepare release v9.1.0 https://github.com/jeremylong/DependencyCheck/commit/3f1b558dd3e3e5e296b26e7bad010564ff90fe7e";>3f1b558 docs: prepare release 9.1.0 https://github.com/jeremylong/DependencyCheck/commit/c3642696b1bdb2bab12ae3f4f2943723de3b1032";>c364269 build(deps): bump jackson.version from 2.16.0 to 2.16.1 (https://redirect.github.com/jeremylong/DependencyCheck/issues/6353";>#6353) https://github.com/jeremylong/DependencyCheck/commit/d2c04b555e092064d684ad77821e4a0801b45af7";>d2c04b5 build(deps): bump org.jsoup:jsoup from 1.16.2 to 1.17.2 (https://redirect.github.com/jeremylong/DependencyCheck/issues/6362";>#6362) https://github.com/jeremylong/DependencyCheck/commit/e8c4ca3f4d3e7062f56206e521b3f74e78ca39b9";>e8c4ca3 build(deps): bump open-vulnerability-client (https://redirect.github.com/jeremylong/DependencyCheck/issues/6554";>#6554) https://github.com/jeremylong/DependencyCheck/commit/2e6a2318df0df0e63ef6cca8696b9d09446fdee0";>2e6a231 build(deps): bump golang from 1.21.5-alpine to 1.22.1-alpine (https://redirect.github.com/jeremylong/DependencyCheck/issues/6506";>#6506) https://github.com/jeremylong/DependencyCheck/commit/0e183dad9bc1bdabd24f24ba6837d07ff3c42741";>0e183da build(deps): bump actions/setup-java from 3 to 4 (https://redirect.github.com/jeremylong/DependencyCheck/issues/6172";>#6172) https://github.com/jeremylong/DependencyCheck/commit/42adde4b37f4b2dd5ef63501f696bc452f4adb65";>42adde4 fix: typo (https://redirect.github.com/jeremylong/DependencyCheck/issues/6526";>#6526) https://github.com/jeremylong/DependencyCheck/commit/f60c8678c3a7163f66ee520045819422f0e04a7f";>f60c867 feat: Add v2 support for maven_install.json (https://redirect.github.com/jeremylong/DependencyCheck/issues/6528";>#6528) https://github.com/jeremylong/DependencyCheck/commit/a6a8f217f867be2e731bd36cf144676981e45bba";>a6a8f21 Merge pull request https://redirect.github.com/jeremylong/DependencyCheck/issues/1";>#1 from nutshelllabs/ef/add-maven-install-v2-support Additional commits viewable in https://github.com/jeremylong/DependencyCheck/compare/v9.0.10...v9.1.0";>compare view [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.owasp:dependency-check-maven&package-manager=maven&previous-version=9.0.10&new-version=9.1.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
[PR] build(deps-dev): bump rollup from 4.13.2 to 4.14.0 in /tobago-example/tobago-example-demo [myfaces-tobago]
dependabot[bot] opened a new pull request, #5023: URL: https://github.com/apache/myfaces-tobago/pull/5023 Bumps [rollup](https://github.com/rollup/rollup) from 4.13.2 to 4.14.0. Release notes Sourced from https://github.com/rollup/rollup/releases";>rollup's releases. v4.14.0 4.14.0 2024-04-03 Features Display error causes in Rollup CLI (https://redirect.github.com/rollup/rollup/issues/5422";>#5422) Add basic support for explicit resource management via "using" and "await using" (https://redirect.github.com/rollup/rollup/issues/5423";>#5423) Pull Requests https://redirect.github.com/rollup/rollup/pull/5422";>#5422: feat: show all cause in Error (https://github.com/devohda";>@devohda, https://github.com/lukastaegert";>@lukastaegert) https://redirect.github.com/rollup/rollup/pull/5444";>#5444: feat: support explicit-resource-management (https://github.com/TrickyPi";>@TrickyPi) https://redirect.github.com/rollup/rollup/pull/5445";>#5445: docs: add @shikiji/vitepress-twoslash (https://github.com/sapphi-red";>@sapphi-red) https://redirect.github.com/rollup/rollup/pull/5447";>#5447: chore(deps): lock file maintenance minor/patch updates ( https://github.com/renovate";>@renovate[bot]) https://redirect.github.com/rollup/rollup/pull/5448";>#5448: chore(deps): lock file maintenance (https://github.com/renovate";>@renovate[bot]) Changelog Sourced from https://github.com/rollup/rollup/blob/master/CHANGELOG.md";>rollup's changelog. 4.14.0 2024-04-03 Features Display error causes in Rollup CLI (https://redirect.github.com/rollup/rollup/issues/5422";>#5422) Add basic support for explicit resource management via "using" and "await using" (https://redirect.github.com/rollup/rollup/issues/5423";>#5423) Pull Requests https://redirect.github.com/rollup/rollup/pull/5422";>#5422: feat: show all cause in Error (https://github.com/devohda";>@devohda, https://github.com/lukastaegert";>@lukastaegert) https://redirect.github.com/rollup/rollup/pull/5444";>#5444: feat: support explicit-resource-management (https://github.com/TrickyPi";>@TrickyPi) https://redirect.github.com/rollup/rollup/pull/5445";>#5445: docs: add @shikiji/vitepress-twoslash (https://github.com/sapphi-red";>@sapphi-red) https://redirect.github.com/rollup/rollup/pull/5447";>#5447: chore(deps): lock file maintenance minor/patch updates ( https://github.com/renovate";>@renovate[bot]) https://redirect.github.com/rollup/rollup/pull/5448";>#5448: chore(deps): lock file maintenance (https://github.com/renovate";>@renovate[bot]) Commits https://github.com/rollup/rollup/commit/5abe71bd5bae3423b4e2ee80207c871efde20253";>5abe71b 4.14.0 https://github.com/rollup/rollup/commit/5301dec8d5319e31e19b7ef14cff7161170be06b";>5301dec feat: show all cause in Error (https://redirect.github.com/rollup/rollup/issues/5422";>#5422) https://github.com/rollup/rollup/commit/8521d29c3ab86b99e6f0d32820e6d786d251834b";>8521d29 feat: support explicit-resource-management (https://redirect.github.com/rollup/rollup/issues/5444";>#5444) https://github.com/rollup/rollup/commit/c87901dd730fbd4cf56f4c742b407730e45d6707";>c87901d docs: add @shikiji/vitepress-twoslash (https://redirect.github.com/rollup/rollup/issues/5445";>#5445) https://github.com/rollup/rollup/commit/1dd3c028e149cca8207d5f2c513bf776db272af4";>1dd3c02 chore(deps): lock file maintenance (https://redirect.github.com/rollup/rollup/issues/5448";>#5448) https://github.com/rollup/rollup/commit/a8e39eb1200689bbfa39e56d5beeadb0c6f6600d";>a8e39eb chore(deps): lock file maintenance minor/patch updates (https://redirect.github.com/rollup/rollup/issues/5447";>#5447) See full diff in https://github.com/rollup/rollup/compare/v4.13.2...v4.14.0";>compare view [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=rollup&package-manager=npm_and_yarn&previous-version=4.13.2&new-version=4.14.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously re
Re: [PR] build(deps): bump org.owasp:dependency-check-maven from 9.0.10 to 9.1.0 [myfaces-tobago]
henningn merged PR #5022: URL: https://github.com/apache/myfaces-tobago/pull/5022 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
Re: [PR] build(deps): bump commons-io:commons-io from 2.15.1 to 2.16.0 [myfaces-tobago]
henningn merged PR #5021: URL: https://github.com/apache/myfaces-tobago/pull/5021 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
Re: [PR] build(deps): bump com.google.javascript:closure-compiler from v20190415 to v20220502 [myfaces-tobago]
henningn merged PR #5020: URL: https://github.com/apache/myfaces-tobago/pull/5020 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
Re: [PR] build(deps): bump org.owasp:dependency-check-maven from 9.0.10 to 9.1.0 [myfaces-tobago]
henningn merged PR #5019: URL: https://github.com/apache/myfaces-tobago/pull/5019 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
Re: [PR] build(deps): bump com.google.javascript:closure-compiler from v20190415 to v20220502 [myfaces-tobago]
henningn merged PR #5017: URL: https://github.com/apache/myfaces-tobago/pull/5017 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
[PR] build(deps): npm [myfaces-tobago]
henningn opened a new pull request, #5024: URL: https://github.com/apache/myfaces-tobago/pull/5024 (no comment) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
[PR] build(deps): npm [myfaces-tobago]
henningn opened a new pull request, #5025: URL: https://github.com/apache/myfaces-tobago/pull/5025 (no comment) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
Re: [PR] build(deps): npm [myfaces-tobago]
henningn merged PR #5024: URL: https://github.com/apache/myfaces-tobago/pull/5024 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
Re: [PR] build(deps): npm [myfaces-tobago]
henningn merged PR #5025: URL: https://github.com/apache/myfaces-tobago/pull/5025 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
Re: [PR] build(deps-dev): bump rollup from 4.13.2 to 4.14.0 in /tobago-example/tobago-example-demo [myfaces-tobago]
dependabot[bot] commented on PR #5018: URL: https://github.com/apache/myfaces-tobago/pull/5018#issuecomment-2033940729 Looks like rollup is up-to-date now, so this is no longer needed. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
Re: [PR] build(deps-dev): bump rollup from 4.13.2 to 4.14.0 in /tobago-example/tobago-example-demo [myfaces-tobago]
dependabot[bot] closed pull request #5018: build(deps-dev): bump rollup from 4.13.2 to 4.14.0 in /tobago-example/tobago-example-demo URL: https://github.com/apache/myfaces-tobago/pull/5018 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
Re: [PR] build(deps): bump @trevoreyre/autocomplete-js from 2.4.1 to 3.0.1 in /tobago-theme [myfaces-tobago]
dependabot[bot] commented on PR #5013: URL: https://github.com/apache/myfaces-tobago/pull/5013#issuecomment-2033941068 Looks like @trevoreyre/autocomplete-js is up-to-date now, so this is no longer needed. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
Re: [PR] build(deps): bump @trevoreyre/autocomplete-js from 2.4.1 to 3.0.1 in /tobago-theme [myfaces-tobago]
dependabot[bot] closed pull request #5013: build(deps): bump @trevoreyre/autocomplete-js from 2.4.1 to 3.0.1 in /tobago-theme URL: https://github.com/apache/myfaces-tobago/pull/5013 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
Re: [PR] build(deps-dev): bump rollup from 4.13.2 to 4.14.0 in /tobago-example/tobago-example-demo [myfaces-tobago]
dependabot[bot] commented on PR #5023: URL: https://github.com/apache/myfaces-tobago/pull/5023#issuecomment-2033941214 Looks like rollup is up-to-date now, so this is no longer needed. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
Re: [PR] build(deps): bump @trevoreyre/autocomplete-js from 2.4.1 to 3.0.1 in /tobago-theme [myfaces-tobago]
dependabot[bot] commented on PR #5016: URL: https://github.com/apache/myfaces-tobago/pull/5016#issuecomment-2033941249 Looks like @trevoreyre/autocomplete-js is up-to-date now, so this is no longer needed. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
Re: [PR] build(deps-dev): bump rollup from 4.13.2 to 4.14.0 in /tobago-example/tobago-example-demo [myfaces-tobago]
dependabot[bot] closed pull request #5023: build(deps-dev): bump rollup from 4.13.2 to 4.14.0 in /tobago-example/tobago-example-demo URL: https://github.com/apache/myfaces-tobago/pull/5023 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
Re: [PR] build(deps-dev): bump rollup from 4.13.2 to 4.14.0 in /tobago-theme [myfaces-tobago]
dependabot[bot] commented on PR #5015: URL: https://github.com/apache/myfaces-tobago/pull/5015#issuecomment-2033941263 Looks like rollup is up-to-date now, so this is no longer needed. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
Re: [PR] build(deps): bump @trevoreyre/autocomplete-js from 2.4.1 to 3.0.1 in /tobago-theme [myfaces-tobago]
dependabot[bot] closed pull request #5016: build(deps): bump @trevoreyre/autocomplete-js from 2.4.1 to 3.0.1 in /tobago-theme URL: https://github.com/apache/myfaces-tobago/pull/5016 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
Re: [PR] build(deps-dev): bump rollup from 4.13.2 to 4.14.0 in /tobago-theme [myfaces-tobago]
dependabot[bot] closed pull request #5015: build(deps-dev): bump rollup from 4.13.2 to 4.14.0 in /tobago-theme URL: https://github.com/apache/myfaces-tobago/pull/5015 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
Re: [PR] build(deps-dev): bump rollup from 4.13.2 to 4.14.0 in /tobago-theme [myfaces-tobago]
dependabot[bot] commented on PR #5014: URL: https://github.com/apache/myfaces-tobago/pull/5014#issuecomment-2033941802 Looks like rollup is up-to-date now, so this is no longer needed. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
Re: [PR] build(deps-dev): bump rollup from 4.13.2 to 4.14.0 in /tobago-theme [myfaces-tobago]
dependabot[bot] closed pull request #5014: build(deps-dev): bump rollup from 4.13.2 to 4.14.0 in /tobago-theme URL: https://github.com/apache/myfaces-tobago/pull/5014 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
Participate in the ASF 25th Anniversary Campaign
Hi everyone, As part of The ASF’s 25th anniversary campaign[1], we will be celebrating projects and communities in multiple ways. We invite all projects and contributors to participate in the following ways: * Individuals - submit your first contribution: https://news.apache.org/foundation/entry/the-asf-launches-firstasfcontribution-campaign * Projects - share your public good story: https://docs.google.com/forms/d/1vuN-tUnBwpTgOE5xj3Z5AG1hsOoDNLBmGIqQHwQT6k8/viewform?edit_requested=true * Projects - submit a project spotlight for the blog: https://cwiki.apache.org/confluence/pages/viewpage.action?pageId=278466116 * Projects - contact the Voice of Apache podcast (formerly Feathercast) to be featured: https://feathercast.apache.org/help/ * Projects - use the 25th anniversary template and the #ASF25Years hashtag on social media: https://docs.google.com/presentation/d/1oDbMol3F_XQuCmttPYxBIOIjRuRBksUjDApjd8Ve3L8/edit#slide=id.g26b0919956e_0_13 If you have questions, email the Marketing & Publicity team at mark...@apache.org. Peace, BKP [1] https://apache.org/asf25years/ [NOTE: You are receiving this message because you are a contributor to an Apache Software Foundation project. The ASF will very occasionally send out messages relating to the Foundation to contributors and members, such as this one.] Brian Proffitt VP, Marketing & Publicity VP, Conferences
Community over Code EU 2024: Start planning your trip!
[Note: You're receiving this email because you are subscribed to one or more project dev@ mailing lists at the Apache Software Foundation.] Dear community, We hope you are doing great, are you ready for Community Over Code EU? Check out the featured sessions, get your tickets with special discounts and start planning your trip. Save your spot! Take a look at our lineup of sessions, panelists and featured speakers and make your final choice: * EU policies and regulations affecting open source specialists working in OSPOs The panel will discuss how EU legislation affects the daily work of open source operations. Panelists will cover some recent policy updates, the challenges of staying compliant when managing open source contribution and usage within organizations, and their personal experiences in adapting to the changing European regulatory environment. * Doing for sustainability, what open source did for software In this keynote Asim Hussain will explain the history of Impact Framework, a coalition of hundreds of software practitioners with tangible solutions that directly foster meaningful change by measuring the environmental impacts of a piece of software. Don’t forget that we have special discounts for groups, students and Apache committers. Visit the website to discover more about these rates.[1] It's time for you to start planning your trip. Remember that we have prepared a “How to get there” guide that will be helpful to find out the best transportation, either train, bus, flight or boat to Bratislava from wherever you are coming from. Take a look at the different options and please reach out to us if you have any questions. We have available rooms -with a special rate- at the Radisson Blu Carlton Hotel, where the event will take place and at the Park Inn Hotel which is only 5 minutes walking from the venue. [2] However, you are free to choose any other accommodation options around the city. See you in Bratislava, Community Over Code EU Team [1]: https://eu.communityovercode.org/tickets/ "Register" [2]: https://eu.communityovercode.org/venue/ "Where to stay"
[jira] [Commented] (MYFACES-4658) faces.util.chain behavior changed
[ https://issues.apache.org/jira/browse/MYFACES-4658?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17833656#comment-17833656 ] Volodymyr Siedlecki commented on MYFACES-4658: -- [~werpu] I'm not sure what the correct logic is here, so I'll assign this to you. > faces.util.chain behavior changed > - > > Key: MYFACES-4658 > URL: https://issues.apache.org/jira/browse/MYFACES-4658 > Project: MyFaces Core > Issue Type: Bug >Affects Versions: 4.0.2 >Reporter: Volodymyr Siedlecki >Priority: Major > > Given the following generated HTML, an alert will occur. If you click OK, it > will perform an action on a backing bean. However, if you cancel, it should > not. > {code:java} > {code} > On Faces 3.0, if cancel is pressed, then the backing bean is not invoked. On > Faces 4.0, however, pressing cancel *does* invoke the bean. > Faces 3.0: > jsf.util.chain snippet: > {noformat} > if (FUNC == typeof arguments[cnt]) { > ret = arguments[cnt].call(source, event); > } else { > //either a function or a string can be passed in case of a > string we have to wrap it into another function > ret = new Function("event", arguments[cnt]).call(source, > event); > } > //now if one function returns false in between we stop the > execution of the cycle > //here, note we do a strong comparison here to avoid constructs > like 'false' or null triggering > if (ret === false /*undefined check implicitly done here by using > a strong compare*/) { > return false; > } > }{noformat} > Faces 4.0: > {noformat} > function chain(source, event, ...funcs) { > // we can use our lazy stream each functionality to run our chain > here. > // by passing a boolean as return value into the onElem call > // we can stop early at the first false, just like the spec requests > let ret; > funcs.every(func => { > let returnVal = resolveAndExecute(source, event, func); > if (returnVal !== false) { > ret = returnVal; > } > return returnVal !== false; > }); > return ret; > }{noformat} > It looks like conditions changed here? "ret === false" became "returnVal !== > false" ? If cancel is pressed, false is returned, which means the chain > function returns false in 3.0. In faces 4.0, ret is never set, so undefined > is returned. -- This message was sent by Atlassian Jira (v8.20.10#820010)
[jira] [Created] (MYFACES-4658) faces.util.chain behavior changed
Volodymyr Siedlecki created MYFACES-4658: Summary: faces.util.chain behavior changed Key: MYFACES-4658 URL: https://issues.apache.org/jira/browse/MYFACES-4658 Project: MyFaces Core Issue Type: Bug Affects Versions: 4.0.2 Reporter: Volodymyr Siedlecki Given the following generated HTML, an alert will occur. If you click OK, it will perform an action on a backing bean. However, if you cancel, it should not. {code:java} {code} On Faces 3.0, if cancel is pressed, then the backing bean is not invoked. On Faces 4.0, however, pressing cancel *does* invoke the bean. Faces 3.0: jsf.util.chain snippet: {noformat} if (FUNC == typeof arguments[cnt]) { ret = arguments[cnt].call(source, event); } else { //either a function or a string can be passed in case of a string we have to wrap it into another function ret = new Function("event", arguments[cnt]).call(source, event); } //now if one function returns false in between we stop the execution of the cycle //here, note we do a strong comparison here to avoid constructs like 'false' or null triggering if (ret === false /*undefined check implicitly done here by using a strong compare*/) { return false; } }{noformat} Faces 4.0: {noformat} function chain(source, event, ...funcs) { // we can use our lazy stream each functionality to run our chain here. // by passing a boolean as return value into the onElem call // we can stop early at the first false, just like the spec requests let ret; funcs.every(func => { let returnVal = resolveAndExecute(source, event, func); if (returnVal !== false) { ret = returnVal; } return returnVal !== false; }); return ret; }{noformat} It looks like conditions changed here? "ret === false" became "returnVal !== false" ? If cancel is pressed, false is returned, which means the chain function returns false in 3.0. In faces 4.0, ret is never set, so undefined is returned. -- This message was sent by Atlassian Jira (v8.20.10#820010)
[jira] [Commented] (MYFACES-4658) faces.util.chain behavior changed
[ https://issues.apache.org/jira/browse/MYFACES-4658?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17833668#comment-17833668 ] Werner Punz commented on MYFACES-4658: -- Yes I will take care of it. I need to compare this with the spec as well! Probably a slight deviation from the spec I have introduced here with my rewrite! Should be easy to fix! > faces.util.chain behavior changed > - > > Key: MYFACES-4658 > URL: https://issues.apache.org/jira/browse/MYFACES-4658 > Project: MyFaces Core > Issue Type: Bug >Affects Versions: 4.0.2 >Reporter: Volodymyr Siedlecki >Assignee: Werner Punz >Priority: Major > > Given the following generated HTML, an alert will occur. If you click OK, it > will perform an action on a backing bean. However, if you cancel, it should > not. > {code:java} > {code} > On Faces 3.0, if cancel is pressed, then the backing bean is not invoked. On > Faces 4.0, however, pressing cancel *does* invoke the bean. > Faces 3.0: > jsf.util.chain snippet: > {noformat} > if (FUNC == typeof arguments[cnt]) { > ret = arguments[cnt].call(source, event); > } else { > //either a function or a string can be passed in case of a > string we have to wrap it into another function > ret = new Function("event", arguments[cnt]).call(source, > event); > } > //now if one function returns false in between we stop the > execution of the cycle > //here, note we do a strong comparison here to avoid constructs > like 'false' or null triggering > if (ret === false /*undefined check implicitly done here by using > a strong compare*/) { > return false; > } > }{noformat} > Faces 4.0: > {noformat} > function chain(source, event, ...funcs) { > // we can use our lazy stream each functionality to run our chain > here. > // by passing a boolean as return value into the onElem call > // we can stop early at the first false, just like the spec requests > let ret; > funcs.every(func => { > let returnVal = resolveAndExecute(source, event, func); > if (returnVal !== false) { > ret = returnVal; > } > return returnVal !== false; > }); > return ret; > }{noformat} > It looks like conditions changed here? "ret === false" became "returnVal !== > false" ? If cancel is pressed, false is returned, which means the chain > function returns false in 3.0. In faces 4.0, ret is never set (due to the > new condition), so undefined (ret) is returned now instead. -- This message was sent by Atlassian Jira (v8.20.10#820010)
[jira] [Commented] (MYFACES-4658) faces.util.chain behavior changed
[ https://issues.apache.org/jira/browse/MYFACES-4658?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17833828#comment-17833828 ] Werner Punz commented on MYFACES-4658: -- Ok the discrepancy is indeed in the undefined handling, the spec states either Here is the spec on this issue: A varargs function that invokes an arbitrary number of scripts. If any script in the chain returns false, the chain is short-circuited and subsequent scripts are not invoked. Any number of scripts may specified after the {{event}} argument. So the old code is correct the new code is wrong here! I will make a fix for it including a test! > faces.util.chain behavior changed > - > > Key: MYFACES-4658 > URL: https://issues.apache.org/jira/browse/MYFACES-4658 > Project: MyFaces Core > Issue Type: Bug >Affects Versions: 4.0.2 >Reporter: Volodymyr Siedlecki >Assignee: Werner Punz >Priority: Major > > Given the following generated HTML, an alert will occur. If you click OK, it > will perform an action on a backing bean. However, if you cancel, it should > not. > {code:java} > {code} > On Faces 3.0, if cancel is pressed, then the backing bean is not invoked. On > Faces 4.0, however, pressing cancel *does* invoke the bean. > Faces 3.0: > jsf.util.chain snippet: > {noformat} > if (FUNC == typeof arguments[cnt]) { > ret = arguments[cnt].call(source, event); > } else { > //either a function or a string can be passed in case of a > string we have to wrap it into another function > ret = new Function("event", arguments[cnt]).call(source, > event); > } > //now if one function returns false in between we stop the > execution of the cycle > //here, note we do a strong comparison here to avoid constructs > like 'false' or null triggering > if (ret === false /*undefined check implicitly done here by using > a strong compare*/) { > return false; > } > }{noformat} > Faces 4.0: > {noformat} > function chain(source, event, ...funcs) { > // we can use our lazy stream each functionality to run our chain > here. > // by passing a boolean as return value into the onElem call > // we can stop early at the first false, just like the spec requests > let ret; > funcs.every(func => { > let returnVal = resolveAndExecute(source, event, func); > if (returnVal !== false) { > ret = returnVal; > } > return returnVal !== false; > }); > return ret; > }{noformat} > It looks like conditions changed here? "ret === false" became "returnVal !== > false" ? If cancel is pressed, false is returned, which means the chain > function returns false in 3.0. In faces 4.0, ret is never set (due to the > new condition), so undefined (ret) is returned now instead. -- This message was sent by Atlassian Jira (v8.20.10#820010)
[jira] [Comment Edited] (MYFACES-4658) faces.util.chain behavior changed
[ https://issues.apache.org/jira/browse/MYFACES-4658?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17833828#comment-17833828 ] Werner Punz edited comment on MYFACES-4658 at 4/4/24 6:08 AM: -- Ok the discrepancy is indeed in the undefined handling, the spec states either Here is the spec on this issue: A varargs function that invokes an arbitrary number of scripts. If any script in the chain returns false, the chain is short-circuited and subsequent scripts are not invoked. Any number of scripts may specified after the {{event}} argument. So the old code is correct the new code is wrong here! I will make a fix for it including a test! This test exposes the issue: {code:java} // code placeholder it("chain must handle the true false return values correctly", function () { let func1 = () => { return true; } let func2 = () => { return false; } let func3 = () => { return undefined; } let func4 = () => { return null; } let ret = faces.util.chain(this, {}, func1); expect(ret).to.be.true; ret = faces.util.chain(this, {}, func2); expect(ret).to.be.false; ret = faces.util.chain(this, {}, func3); expect(ret).to.be.true; ret = faces.util.chain(this, {}, func4); expect(ret).to.be.true; }) {code} was (Author: werpu): Ok the discrepancy is indeed in the undefined handling, the spec states either Here is the spec on this issue: A varargs function that invokes an arbitrary number of scripts. If any script in the chain returns false, the chain is short-circuited and subsequent scripts are not invoked. Any number of scripts may specified after the {{event}} argument. So the old code is correct the new code is wrong here! I will make a fix for it including a test! > faces.util.chain behavior changed > - > > Key: MYFACES-4658 > URL: https://issues.apache.org/jira/browse/MYFACES-4658 > Project: MyFaces Core > Issue Type: Bug >Affects Versions: 4.0.2 >Reporter: Volodymyr Siedlecki >Assignee: Werner Punz >Priority: Major > > Given the following generated HTML, an alert will occur. If you click OK, it > will perform an action on a backing bean. However, if you cancel, it should > not. > {code:java} > {code} > On Faces 3.0, if cancel is pressed, then the backing bean is not invoked. On > Faces 4.0, however, pressing cancel *does* invoke the bean. > Faces 3.0: > jsf.util.chain snippet: > {noformat} > if (FUNC == typeof arguments[cnt]) { > ret = arguments[cnt].call(source, event); > } else { > //either a function or a string can be passed in case of a > string we have to wrap it into another function > ret = new Function("event", arguments[cnt]).call(source, > event); > } > //now if one function returns false in between we stop the > execution of the cycle > //here, note we do a strong comparison here to avoid constructs > like 'false' or null triggering > if (ret === false /*undefined check implicitly done here by using > a strong compare*/) { > return false; > } > }{noformat} > Faces 4.0: > {noformat} > function chain(source, event, ...funcs) { > // we can use our lazy stream each functionality to run our chain > here. > // by passing a boolean as return value into the onElem call > // we can stop early at the first false, just like the spec requests > let ret; > funcs.every(func => { > let returnVal = resolveAndExecute(source, event, func); > if (returnVal !== false) { > ret = returnVal; > } > return returnVal !== false; > }); > return ret; > }{noformat} > It looks like conditions changed here? "ret === false" became "returnVal !== > false" ? If cancel is pressed, false is returned, which means the chain > function returns false in 3.0. In faces 4.0, ret is never set (due to the > new condition), so undefined (ret) is returned now instead. -- This message was sent by Atlassian Jira (v8.20.10#820010)
[jira] [Comment Edited] (MYFACES-4658) faces.util.chain behavior changed
[ https://issues.apache.org/jira/browse/MYFACES-4658?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17833828#comment-17833828 ] Werner Punz edited comment on MYFACES-4658 at 4/4/24 6:09 AM: -- Ok the discrepancy is indeed in the undefined handling, the spec states either Here is the spec on this issue: A varargs function that invokes an arbitrary number of scripts. If any script in the chain returns false, the chain is short-circuited and subsequent scripts are not invoked. Any number of scripts may specified after the {{event}} argument. boolean {{false}} if any scripts in the chain return {{{}false{}}}, otherwise returns {{true}} {{}} So the old code is correct the new code is wrong here! I will make a fix for it including a test! This test exposes the issue: {code:java} // code placeholder it("chain must handle the true false return values correctly", function () { let func1 = () => { return true; } let func2 = () => { return false; } let func3 = () => { return undefined; } let func4 = () => { return null; } let ret = faces.util.chain(this, {}, func1); expect(ret).to.be.true; ret = faces.util.chain(this, {}, func2); expect(ret).to.be.false; ret = faces.util.chain(this, {}, func3); expect(ret).to.be.true; ret = faces.util.chain(this, {}, func4); expect(ret).to.be.true; }) {code} was (Author: werpu): Ok the discrepancy is indeed in the undefined handling, the spec states either Here is the spec on this issue: A varargs function that invokes an arbitrary number of scripts. If any script in the chain returns false, the chain is short-circuited and subsequent scripts are not invoked. Any number of scripts may specified after the {{event}} argument. So the old code is correct the new code is wrong here! I will make a fix for it including a test! This test exposes the issue: {code:java} // code placeholder it("chain must handle the true false return values correctly", function () { let func1 = () => { return true; } let func2 = () => { return false; } let func3 = () => { return undefined; } let func4 = () => { return null; } let ret = faces.util.chain(this, {}, func1); expect(ret).to.be.true; ret = faces.util.chain(this, {}, func2); expect(ret).to.be.false; ret = faces.util.chain(this, {}, func3); expect(ret).to.be.true; ret = faces.util.chain(this, {}, func4); expect(ret).to.be.true; }) {code} > faces.util.chain behavior changed > - > > Key: MYFACES-4658 > URL: https://issues.apache.org/jira/browse/MYFACES-4658 > Project: MyFaces Core > Issue Type: Bug >Affects Versions: 4.0.2 >Reporter: Volodymyr Siedlecki >Assignee: Werner Punz >Priority: Major > > Given the following generated HTML, an alert will occur. If you click OK, it > will perform an action on a backing bean. However, if you cancel, it should > not. > {code:java} > {code} > On Faces 3.0, if cancel is pressed, then the backing bean is not invoked. On > Faces 4.0, however, pressing cancel *does* invoke the bean. > Faces 3.0: > jsf.util.chain snippet: > {noformat} > if (FUNC == typeof arguments[cnt]) { > ret = arguments[cnt].call(source, event); > } else { > //either a function or a string can be passed in case of a > string we have to wrap it into another function > ret = new Function("event", arguments[cnt]).call(source, > event); > } > //now if one function returns false in between we stop the > execution of the cycle > //here, note we do a strong comparison here to avoid constructs > like 'false' or null triggering > if (ret === false /*undefined check implicitly done here by using > a strong compare*/) { > return false; > } > }{noformat} > Faces 4.0: > {noformat} > function chain(source, event, ...funcs) { > // we can use our lazy stream each functionality to run our chain > here. > // by passing a boolean as return value into the onElem call > // we can stop early at the first false, just like the spec requests > let ret; > funcs.every(func => { > let returnVal = resolveAndExecute(source, event, func); > if (returnVal !== false) { > ret = returnVal; > } > return returnVal !== false; > }); > return ret; > }{noformat} > It looks like conditions changed here? "ret === false" became "returnVal !== > false" ? If cancel is pressed, false is returned, which means the chain > function returns
[jira] [Comment Edited] (MYFACES-4658) faces.util.chain behavior changed
[ https://issues.apache.org/jira/browse/MYFACES-4658?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17833828#comment-17833828 ] Werner Punz edited comment on MYFACES-4658 at 4/4/24 6:14 AM: -- Ok the discrepancy is indeed in the undefined handling, the spec states either Here is the spec on this issue: A varargs function that invokes an arbitrary number of scripts. If any script in the chain returns false, the chain is short-circuited and subsequent scripts are not invoked. Any number of scripts may specified after the {{event}} argument. boolean {{false}} if any scripts in the chain return {{{}false{}}}, otherwise returns {{true}} So the old code is correct the new code is wrong here! I will make a fix for it including a test! This test exposes the issue: {code:java} // code placeholder it("chain must handle the true false return values correctly", function () { let func1 = () => { return true; } let func2 = () => { return false; } let func3 = () => { return undefined; } let func4 = () => { return null; } let ret = faces.util.chain(this, {}, func1); expect(ret).to.be.true; ret = faces.util.chain(this, {}, func2); expect(ret).to.be.false; ret = faces.util.chain(this, {}, func3); expect(ret).to.be.true; ret = faces.util.chain(this, {}, func4); expect(ret).to.be.true; }) {code} was (Author: werpu): Ok the discrepancy is indeed in the undefined handling, the spec states either Here is the spec on this issue: A varargs function that invokes an arbitrary number of scripts. If any script in the chain returns false, the chain is short-circuited and subsequent scripts are not invoked. Any number of scripts may specified after the {{event}} argument. boolean {{false}} if any scripts in the chain return {{{}false{}}}, otherwise returns {{true}} {{}} So the old code is correct the new code is wrong here! I will make a fix for it including a test! This test exposes the issue: {code:java} // code placeholder it("chain must handle the true false return values correctly", function () { let func1 = () => { return true; } let func2 = () => { return false; } let func3 = () => { return undefined; } let func4 = () => { return null; } let ret = faces.util.chain(this, {}, func1); expect(ret).to.be.true; ret = faces.util.chain(this, {}, func2); expect(ret).to.be.false; ret = faces.util.chain(this, {}, func3); expect(ret).to.be.true; ret = faces.util.chain(this, {}, func4); expect(ret).to.be.true; }) {code} > faces.util.chain behavior changed > - > > Key: MYFACES-4658 > URL: https://issues.apache.org/jira/browse/MYFACES-4658 > Project: MyFaces Core > Issue Type: Bug >Affects Versions: 4.0.2 >Reporter: Volodymyr Siedlecki >Assignee: Werner Punz >Priority: Major > > Given the following generated HTML, an alert will occur. If you click OK, it > will perform an action on a backing bean. However, if you cancel, it should > not. > {code:java} > {code} > On Faces 3.0, if cancel is pressed, then the backing bean is not invoked. On > Faces 4.0, however, pressing cancel *does* invoke the bean. > Faces 3.0: > jsf.util.chain snippet: > {noformat} > if (FUNC == typeof arguments[cnt]) { > ret = arguments[cnt].call(source, event); > } else { > //either a function or a string can be passed in case of a > string we have to wrap it into another function > ret = new Function("event", arguments[cnt]).call(source, > event); > } > //now if one function returns false in between we stop the > execution of the cycle > //here, note we do a strong comparison here to avoid constructs > like 'false' or null triggering > if (ret === false /*undefined check implicitly done here by using > a strong compare*/) { > return false; > } > }{noformat} > Faces 4.0: > {noformat} > function chain(source, event, ...funcs) { > // we can use our lazy stream each functionality to run our chain > here. > // by passing a boolean as return value into the onElem call > // we can stop early at the first false, just like the spec requests > let ret; > funcs.every(func => { > let returnVal = resolveAndExecute(source, event, func); > if (returnVal !== false) { > ret = returnVal; > } > return returnVal !== false; > }); > return ret; > }{noformat} > It looks like conditions changed here? "ret === false" became "returnVal
[jira] [Comment Edited] (MYFACES-4658) faces.util.chain behavior changed
[ https://issues.apache.org/jira/browse/MYFACES-4658?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17833828#comment-17833828 ] Werner Punz edited comment on MYFACES-4658 at 4/4/24 6:15 AM: -- Ok the discrepancy is indeed in the undefined handling, the spec states either Here is the spec on this issue: A varargs function that invokes an arbitrary number of scripts. If any script in the chain returns false, the chain is short-circuited and subsequent scripts are not invoked. Any number of scripts may specified after the {{event}} argument. boolean {{false}} if any scripts in the chain return {{{}false{}}}, otherwise returns {{true}} So the old code is correct the new code is wrong here! I will make a fix for it including a test! This test exposes the issue: {code:java} // code placeholder it("chain must handle the true false return values correctly", function () { let func1 = () => { return true; } let func2 = () => { return false; } let func3 = () => { return undefined; } let func4 = () => { return null; } let ret = faces.util.chain(this, {}, func1); expect(ret).to.be.true; ret = faces.util.chain(this, {}, func2); expect(ret).to.be.false; ret = faces.util.chain(this, {}, func3); expect(ret).to.be.true; ret = faces.util.chain(this, {}, func4); expect(ret).to.be.true; }) {code} Should be an easy fix, expect it later today! was (Author: werpu): Ok the discrepancy is indeed in the undefined handling, the spec states either Here is the spec on this issue: A varargs function that invokes an arbitrary number of scripts. If any script in the chain returns false, the chain is short-circuited and subsequent scripts are not invoked. Any number of scripts may specified after the {{event}} argument. boolean {{false}} if any scripts in the chain return {{{}false{}}}, otherwise returns {{true}} So the old code is correct the new code is wrong here! I will make a fix for it including a test! This test exposes the issue: {code:java} // code placeholder it("chain must handle the true false return values correctly", function () { let func1 = () => { return true; } let func2 = () => { return false; } let func3 = () => { return undefined; } let func4 = () => { return null; } let ret = faces.util.chain(this, {}, func1); expect(ret).to.be.true; ret = faces.util.chain(this, {}, func2); expect(ret).to.be.false; ret = faces.util.chain(this, {}, func3); expect(ret).to.be.true; ret = faces.util.chain(this, {}, func4); expect(ret).to.be.true; }) {code} > faces.util.chain behavior changed > - > > Key: MYFACES-4658 > URL: https://issues.apache.org/jira/browse/MYFACES-4658 > Project: MyFaces Core > Issue Type: Bug >Affects Versions: 4.0.2 >Reporter: Volodymyr Siedlecki >Assignee: Werner Punz >Priority: Major > > Given the following generated HTML, an alert will occur. If you click OK, it > will perform an action on a backing bean. However, if you cancel, it should > not. > {code:java} > {code} > On Faces 3.0, if cancel is pressed, then the backing bean is not invoked. On > Faces 4.0, however, pressing cancel *does* invoke the bean. > Faces 3.0: > jsf.util.chain snippet: > {noformat} > if (FUNC == typeof arguments[cnt]) { > ret = arguments[cnt].call(source, event); > } else { > //either a function or a string can be passed in case of a > string we have to wrap it into another function > ret = new Function("event", arguments[cnt]).call(source, > event); > } > //now if one function returns false in between we stop the > execution of the cycle > //here, note we do a strong comparison here to avoid constructs > like 'false' or null triggering > if (ret === false /*undefined check implicitly done here by using > a strong compare*/) { > return false; > } > }{noformat} > Faces 4.0: > {noformat} > function chain(source, event, ...funcs) { > // we can use our lazy stream each functionality to run our chain > here. > // by passing a boolean as return value into the onElem call > // we can stop early at the first false, just like the spec requests > let ret; > funcs.every(func => { > let returnVal = resolveAndExecute(source, event, func); > if (returnVal !== false) { > ret = returnVal; > } > return returnVal !== false; > }); > return ret; > }{noformat} > It looks like conditions changed he