From 1f8e53a37ff8dba1d8001709e9ac809dca07f73a Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 9 Jan 2023 08:35:13 -0800 Subject: [PATCH 01/63] Bump json5 from 1.0.1 to 1.0.2 (#8175) Bumps [json5](https://github.com/json5/json5) from 1.0.1 to 1.0.2. - [Release notes](https://github.com/json5/json5/releases) - [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md) - [Commits](https://github.com/json5/json5/compare/v1.0.1...v1.0.2) --- updated-dependencies: - dependency-name: json5 dependency-type: indirect ... Signed-off-by: dependabot[bot] Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- package-lock.json | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/package-lock.json b/package-lock.json index eeef42a72c..70fac43f0e 100644 --- a/package-lock.json +++ b/package-lock.json @@ -3410,9 +3410,9 @@ "dev": true }, "node_modules/json5": { - "version": "1.0.1", - "resolved": "https://registry.npmjs.org/json5/-/json5-1.0.1.tgz", - "integrity": "sha512-aKS4WQjPenRxiQsC93MNfjx+nbF4PAdYzmd/1JIj8HYzqfbu86beTuNgXDzPknWk0n0uARlyewZo4s++ES36Ow==", + "version": "1.0.2", + "resolved": "https://registry.npmjs.org/json5/-/json5-1.0.2.tgz", + "integrity": "sha512-g1MWMLBiz8FKi1e4w0UyVL3w+iJceWAFBAaBnnGKOpNa5f8TLktkbre1+s6oICydWAm+HRUGTmI+//xv2hvXYA==", "dev": true, "dependencies": { "minimist": "^1.2.0" @@ -7854,9 +7854,9 @@ "dev": true }, "json5": { - "version": "1.0.1", - "resolved": "https://registry.npmjs.org/json5/-/json5-1.0.1.tgz", - "integrity": "sha512-aKS4WQjPenRxiQsC93MNfjx+nbF4PAdYzmd/1JIj8HYzqfbu86beTuNgXDzPknWk0n0uARlyewZo4s++ES36Ow==", + "version": "1.0.2", + "resolved": "https://registry.npmjs.org/json5/-/json5-1.0.2.tgz", + "integrity": "sha512-g1MWMLBiz8FKi1e4w0UyVL3w+iJceWAFBAaBnnGKOpNa5f8TLktkbre1+s6oICydWAm+HRUGTmI+//xv2hvXYA==", "dev": true, "requires": { "minimist": "^1.2.0" From f0dcf1416ccf3dbc53d0684df16ed4f79917b103 Mon Sep 17 00:00:00 2001 From: cunzaizhuyi <877824709@qq.com> Date: Tue, 10 Jan 2023 00:37:28 +0800 Subject: [PATCH 02/63] [chore] shorten import statement (#8178) --- src/compiler/compile/render_dom/wrappers/RawMustacheTag.ts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/compiler/compile/render_dom/wrappers/RawMustacheTag.ts b/src/compiler/compile/render_dom/wrappers/RawMustacheTag.ts index 8dc8460e1d..6cd8820b87 100644 --- a/src/compiler/compile/render_dom/wrappers/RawMustacheTag.ts +++ b/src/compiler/compile/render_dom/wrappers/RawMustacheTag.ts @@ -1,4 +1,4 @@ -import { namespaces } from './../../../utils/namespaces'; +import { namespaces } from '../../../utils/namespaces'; import { b, x } from 'code-red'; import Renderer from '../Renderer'; import Block from '../Block'; From 7e6acbece31fbd68e2c07e37f3c849c405eb6983 Mon Sep 17 00:00:00 2001 From: Chris Reade Date: Tue, 10 Jan 2023 00:36:51 -0800 Subject: [PATCH 03/63] [fix] Adding part HTML attribute to typings (#8182) fixes #8181 --- elements/index.d.ts | 1 + 1 file changed, 1 insertion(+) diff --git a/elements/index.d.ts b/elements/index.d.ts index 4668d190f9..d57d97ad28 100644 --- a/elements/index.d.ts +++ b/elements/index.d.ts @@ -478,6 +478,7 @@ export interface HTMLAttributes extends AriaAttributes, D hidden?: boolean | undefined | null; id?: string | undefined | null; lang?: string | undefined | null; + part?: string | undefined | null; placeholder?: string | undefined | null; slot?: string | undefined | null; spellcheck?: Booleanish | undefined | null; From be38cec3c10b83f76450c9125fa778c8af6453f7 Mon Sep 17 00:00:00 2001 From: Simon H <5968653+dummdidumm@users.noreply.github.com> Date: Tue, 10 Jan 2023 09:38:16 +0100 Subject: [PATCH 04/63] update changelog --- CHANGELOG.md | 1 + 1 file changed, 1 insertion(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 2c071d874f..4432fe446e 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -3,6 +3,7 @@ ## Unreleased * Add missing `submitter` property to `on:submit` event type +* Add missing typing for global `part` attribute ([#8181](https://github.com/sveltejs/svelte/issues/8181)) * Fix static `` optimization in production mode ([#7938](https://github.com/sveltejs/svelte/pull/7938)) * Fix `draw` transition with delay showing a dot at the beginning of transition ([#6816](https://github.com/sveltejs/svelte/issues/6816)) * Fix `svelte-ignore` comment breaks named slot ([#8075](https://github.com/sveltejs/svelte/issues/8075)) From aa98397440baa06743cead6a2955e98b75ee4515 Mon Sep 17 00:00:00 2001 From: Josh <44098505+josh-fnbtech@users.noreply.github.com> Date: Tue, 10 Jan 2023 02:38:47 -0600 Subject: [PATCH 05/63] [docs] fix typo (#8180) --- .../02-reactivity/04-updating-arrays-and-objects/text.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/site/content/tutorial/02-reactivity/04-updating-arrays-and-objects/text.md b/site/content/tutorial/02-reactivity/04-updating-arrays-and-objects/text.md index a298d1d1bb..bc8330206e 100644 --- a/site/content/tutorial/02-reactivity/04-updating-arrays-and-objects/text.md +++ b/site/content/tutorial/02-reactivity/04-updating-arrays-and-objects/text.md @@ -23,7 +23,7 @@ function addNumber() { } ``` -The same rule applies to array methods such as `pop`, `shift`, and `splice` and to objects methods such as `Map.set`, `Set.add`, etc. +The same rule applies to array methods such as `pop`, `shift`, and `splice` and to object methods such as `Map.set`, `Set.add`, etc. Assignments to *properties* of arrays and objects — e.g. `obj.foo += 1` or `array[i] = x` — work the same way as assignments to the values themselves. @@ -51,4 +51,4 @@ quox(obj); ...won't trigger reactivity on `obj.foo.bar`, unless you follow it up with `obj = obj`. -A simple rule of thumb: the updated variable must directly appear on the left hand side of the assignment. \ No newline at end of file +A simple rule of thumb: the updated variable must directly appear on the left hand side of the assignment. From b06e4356848ab3375797e634fd6c6114a9643252 Mon Sep 17 00:00:00 2001 From: Emil Tholin Date: Tue, 10 Jan 2023 09:39:50 +0100 Subject: [PATCH 06/63] [fix] Spread component props immutably during SSR (#8176) By passing an empty object literal as first argument to Object.assign we can avoid having objects spread as props on a component being mutated during SSR. Fixes #8171 --- .../render_ssr/handlers/InlineComponent.ts | 2 +- .../spread-component-immutable/Widget.svelte | 0 .../samples/spread-component-immutable/_config.js | 15 +++++++++++++++ .../spread-component-immutable/main.svelte | 7 +++++++ 4 files changed, 23 insertions(+), 1 deletion(-) create mode 100644 test/runtime/samples/spread-component-immutable/Widget.svelte create mode 100644 test/runtime/samples/spread-component-immutable/_config.js create mode 100644 test/runtime/samples/spread-component-immutable/main.svelte diff --git a/src/compiler/compile/render_ssr/handlers/InlineComponent.ts b/src/compiler/compile/render_ssr/handlers/InlineComponent.ts index 8287b46268..73d31940e2 100644 --- a/src/compiler/compile/render_ssr/handlers/InlineComponent.ts +++ b/src/compiler/compile/render_ssr/handlers/InlineComponent.ts @@ -36,7 +36,7 @@ export default function(node: InlineComponent, renderer: Renderer, options: Rend let props; if (uses_spread) { - props = x`@_Object.assign(${ + props = x`@_Object.assign({}, ${ node.attributes .map(attribute => { if (attribute.is_spread) { diff --git a/test/runtime/samples/spread-component-immutable/Widget.svelte b/test/runtime/samples/spread-component-immutable/Widget.svelte new file mode 100644 index 0000000000..e69de29bb2 diff --git a/test/runtime/samples/spread-component-immutable/_config.js b/test/runtime/samples/spread-component-immutable/_config.js new file mode 100644 index 0000000000..634fac24c1 --- /dev/null +++ b/test/runtime/samples/spread-component-immutable/_config.js @@ -0,0 +1,15 @@ +const obj = { + x: 1, + y: 2, + z: 3 +}; + +export default { + props: { + obj + }, + + test({ assert }) { + assert.deepEqual(obj, { x: 1, y: 2, z: 3 }); + } +}; diff --git a/test/runtime/samples/spread-component-immutable/main.svelte b/test/runtime/samples/spread-component-immutable/main.svelte new file mode 100644 index 0000000000..44e0954856 --- /dev/null +++ b/test/runtime/samples/spread-component-immutable/main.svelte @@ -0,0 +1,7 @@ + + + From 492d7d6f67ba3a065651f860fdcca477df0d1d04 Mon Sep 17 00:00:00 2001 From: Simon H <5968653+dummdidumm@users.noreply.github.com> Date: Tue, 10 Jan 2023 09:41:59 +0100 Subject: [PATCH 07/63] update changelog --- CHANGELOG.md | 1 + 1 file changed, 1 insertion(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 4432fe446e..136927af52 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -11,6 +11,7 @@ * Fix max call stack exceeded ([#7032](https://github.com/sveltejs/svelte/issues/7032)) * Revert to prevent running init binding unnecessarily ([#8103](https://github.com/sveltejs/svelte/issues/8103)) * Improve `is_promise` logic ([#8162](https://github.com/sveltejs/svelte/pull/8162)) +* Spread component props for immutably during SSR ([#8171](https://github.com/sveltejs/svelte/issues/8171)) ## 3.55.0 From 3b3e1c839c9991559547ca3e203d2282d4f90c36 Mon Sep 17 00:00:00 2001 From: Conduitry Date: Tue, 10 Jan 2023 12:17:09 -0500 Subject: [PATCH 08/63] -> v3.55.1 --- CHANGELOG.md | 22 +++++++++++----------- package-lock.json | 4 ++-- package.json | 2 +- 3 files changed, 14 insertions(+), 14 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 136927af52..ce1e2a2621 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,17 +1,17 @@ # Svelte changelog -## Unreleased - -* Add missing `submitter` property to `on:submit` event type +## 3.55.1 + +* Fix `draw` transition with delay showing a dot at the beginning of the path ([#6816](https://github.com/sveltejs/svelte/issues/6816)) +* Fix infinity runtime call stack when propagating bindings ([#7032](https://github.com/sveltejs/svelte/issues/7032)) +* Fix static `` optimization in production mode ([#7937](https://github.com/sveltejs/svelte/issues/7937)) +* Fix `svelte-ignore` comment breaking named slot ([#8075](https://github.com/sveltejs/svelte/issues/8075)) +* Revert change to prevent running init binding unnecessarily ([#8103](https://github.com/sveltejs/svelte/issues/8103)) +* Fix adding duplicate event listeners with `` ([#8129](https://github.com/sveltejs/svelte/issues/8129)) +* Improve detection of promises that are also functions ([#8162](https://github.com/sveltejs/svelte/pull/8162)) +* Avoid mutating spread component props during SSR ([#8171](https://github.com/sveltejs/svelte/issues/8171)) * Add missing typing for global `part` attribute ([#8181](https://github.com/sveltejs/svelte/issues/8181)) -* Fix static `` optimization in production mode ([#7938](https://github.com/sveltejs/svelte/pull/7938)) -* Fix `draw` transition with delay showing a dot at the beginning of transition ([#6816](https://github.com/sveltejs/svelte/issues/6816)) -* Fix `svelte-ignore` comment breaks named slot ([#8075](https://github.com/sveltejs/svelte/issues/8075)) -* Fix duplicate event listeners for `` ([#8129](https://github.com/sveltejs/svelte/issues/8129)) -* Fix max call stack exceeded ([#7032](https://github.com/sveltejs/svelte/issues/7032)) -* Revert to prevent running init binding unnecessarily ([#8103](https://github.com/sveltejs/svelte/issues/8103)) -* Improve `is_promise` logic ([#8162](https://github.com/sveltejs/svelte/pull/8162)) -* Spread component props for immutably during SSR ([#8171](https://github.com/sveltejs/svelte/issues/8171)) +* Add missing `submitter` property to `on:submit` event type ## 3.55.0 diff --git a/package-lock.json b/package-lock.json index 70fac43f0e..f993cad461 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1,12 +1,12 @@ { "name": "svelte", - "version": "3.55.0", + "version": "3.55.1", "lockfileVersion": 2, "requires": true, "packages": { "": { "name": "svelte", - "version": "3.55.0", + "version": "3.55.1", "license": "MIT", "devDependencies": { "@ampproject/remapping": "^0.3.0", diff --git a/package.json b/package.json index 8839b95c75..1efd4cb780 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "svelte", - "version": "3.55.0", + "version": "3.55.1", "description": "Cybernetically enhanced web apps", "module": "index.mjs", "main": "index", From 967e9f51ff649f776fa034db8aba23a5a1546294 Mon Sep 17 00:00:00 2001 From: Yuichiro Yamashita Date: Thu, 12 Jan 2023 11:11:14 +0900 Subject: [PATCH 09/63] chore: add Node18 for CI (#8078) --- .github/workflows/ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index e24f106477..1e0ce53864 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -46,7 +46,7 @@ jobs: timeout-minutes: 15 strategy: matrix: - node-version: [8, 10, 12, 14, 16] + node-version: [8, 10, 12, 14, 16, 18] os: [ubuntu-latest, windows-latest, macOS-latest] steps: - uses: actions/checkout@v3 From 79fa5b36a1b0d90407d1bf6b1d6b2504427f3f96 Mon Sep 17 00:00:00 2001 From: Gabriel Francisco Date: Fri, 27 Jan 2023 13:22:52 -0300 Subject: [PATCH 10/63] Update license year (#8227) --- LICENSE.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/LICENSE.md b/LICENSE.md index cd8f94f4ca..aa74406768 100644 --- a/LICENSE.md +++ b/LICENSE.md @@ -1,4 +1,4 @@ -Copyright (c) 2016-22 [these people](https://github.com/sveltejs/svelte/graphs/contributors) +Copyright (c) 2016-23 [these people](https://github.com/sveltejs/svelte/graphs/contributors) Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: From 4f42daeff78a98877d58dff49b6e05b3a4ae0f73 Mon Sep 17 00:00:00 2001 From: Jay Harris Date: Sat, 28 Jan 2023 13:25:04 +1300 Subject: [PATCH 11/63] feat: `trusted-types` CSP compatibility for Web Components (#8135) --- src/compiler/compile/render_dom/index.ts | 5 ++++- test/js/samples/css-shadow-dom-keyframes/expected.js | 4 +++- 2 files changed, 7 insertions(+), 2 deletions(-) diff --git a/src/compiler/compile/render_dom/index.ts b/src/compiler/compile/render_dom/index.ts index 44155f8464..58b7a8317b 100644 --- a/src/compiler/compile/render_dom/index.ts +++ b/src/compiler/compile/render_dom/index.ts @@ -531,7 +531,10 @@ export default function dom( constructor(options) { super(); - ${css.code && b`this.shadowRoot.innerHTML = \`\`;`} + ${css.code && b` + const style = document.createElement('style'); + style.textContent = \`${css.code.replace(regex_backslashes, '\\\\')}${css_sourcemap_enabled && options.dev ? `\n/*# sourceMappingURL=${css.map.toUrl()} */` : ''}\` + this.shadowRoot.appendChild(style)`} @init(this, { target: this.shadowRoot, props: ${init_props}, customElement: true }, ${definition}, ${has_create_fragment ? 'create_fragment' : 'null'}, ${not_equal}, ${prop_indexes}, null, ${dirty}); diff --git a/test/js/samples/css-shadow-dom-keyframes/expected.js b/test/js/samples/css-shadow-dom-keyframes/expected.js index 5d65949488..ba7ca9a667 100644 --- a/test/js/samples/css-shadow-dom-keyframes/expected.js +++ b/test/js/samples/css-shadow-dom-keyframes/expected.js @@ -34,7 +34,9 @@ function create_fragment(ctx) { class Component extends SvelteElement { constructor(options) { super(); - this.shadowRoot.innerHTML = ``; + const style = document.createElement('style'); + style.textContent = `div{animation:foo 1s}@keyframes foo{0%{opacity:0}100%{opacity:1}}`; + this.shadowRoot.appendChild(style); init( this, From eb90a15c2959d0d02ee27b4920dc1f197b77b70a Mon Sep 17 00:00:00 2001 From: Ben McCann <322311+benmccann@users.noreply.github.com> Date: Fri, 27 Jan 2023 16:27:19 -0800 Subject: [PATCH 12/63] update changelog --- CHANGELOG.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index ce1e2a2621..865ed07b53 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,9 @@ # Svelte changelog +## Unreleased + +* `trusted-types` CSP compatibility for Web Components ([#8134](https://github.com/sveltejs/svelte/issues/8134)) + ## 3.55.1 * Fix `draw` transition with delay showing a dot at the beginning of the path ([#6816](https://github.com/sveltejs/svelte/issues/6816)) From 34ae6aaf1f3279e2c0f0515f64db59d31ecb46f9 Mon Sep 17 00:00:00 2001 From: Ben McCann <322311+benmccann@users.noreply.github.com> Date: Sat, 28 Jan 2023 08:50:14 -0800 Subject: [PATCH 13/63] fix: make `noreferrer` warning less zealous (#8230) Co-authored-by: Yuichiro Yamashita --- src/compiler/compile/nodes/Element.ts | 17 +++++----- .../_config.js | 3 ++ .../input.svelte | 0 .../warnings.json | 0 .../input.svelte | 33 +++++++++++++++++++ .../warnings.json | 1 + 6 files changed, 46 insertions(+), 8 deletions(-) create mode 100644 test/validator/samples/security-anchor-rel-noreferer-legacy/_config.js rename test/validator/samples/{security-anchor-rel-noreferrer => security-anchor-rel-noreferer-legacy}/input.svelte (100%) rename test/validator/samples/{security-anchor-rel-noreferrer => security-anchor-rel-noreferer-legacy}/warnings.json (100%) create mode 100644 test/validator/samples/security-anchor-rel-noreferer/input.svelte create mode 100644 test/validator/samples/security-anchor-rel-noreferer/warnings.json diff --git a/src/compiler/compile/nodes/Element.ts b/src/compiler/compile/nodes/Element.ts index 06ef1ba9c1..0d3e8a01bd 100644 --- a/src/compiler/compile/nodes/Element.ts +++ b/src/compiler/compile/nodes/Element.ts @@ -621,22 +621,23 @@ export default class Element extends Node { const name_attribute = attribute_map.get('name'); const target_attribute = attribute_map.get('target'); - if (target_attribute && target_attribute.get_static_value() === '_blank' && href_attribute) { + // links with target="_blank" should have noopener or noreferrer: https://developer.chrome.com/docs/lighthouse/best-practices/external-anchors-use-rel-noopener/ + // modern browsers add noopener by default, so we only need to check legacy browsers + // legacy browsers don't support noopener so we only check for noreferrer there + if (component.compile_options.legacy && target_attribute && target_attribute.get_static_value() === '_blank' && href_attribute) { const href_static_value = href_attribute.get_static_value() ? href_attribute.get_static_value().toLowerCase() : null; if (href_static_value === null || href_static_value.match(/^(https?:)?\/\//i)) { const rel = attribute_map.get('rel'); if (rel == null || rel.is_static) { const rel_values = rel ? rel.get_static_value().split(regex_any_repeated_whitespaces) : []; - const expected_values = ['noreferrer']; - expected_values.forEach(expected_value => { - if (!rel || rel && rel_values.indexOf(expected_value) < 0) { + if (!rel || !rel_values.includes('noreferrer')) { component.warn(this, { - code: `security-anchor-rel-${expected_value}`, - message: `Security: Anchor with "target=_blank" should have rel attribute containing the value "${expected_value}"` + code: 'security-anchor-rel-noreferrer', + message: + 'Security: Anchor with "target=_blank" should have rel attribute containing the value "noreferrer"' }); - } - }); + } } } } diff --git a/test/validator/samples/security-anchor-rel-noreferer-legacy/_config.js b/test/validator/samples/security-anchor-rel-noreferer-legacy/_config.js new file mode 100644 index 0000000000..52f59c8767 --- /dev/null +++ b/test/validator/samples/security-anchor-rel-noreferer-legacy/_config.js @@ -0,0 +1,3 @@ +export default { + legacy: true +}; diff --git a/test/validator/samples/security-anchor-rel-noreferrer/input.svelte b/test/validator/samples/security-anchor-rel-noreferer-legacy/input.svelte similarity index 100% rename from test/validator/samples/security-anchor-rel-noreferrer/input.svelte rename to test/validator/samples/security-anchor-rel-noreferer-legacy/input.svelte diff --git a/test/validator/samples/security-anchor-rel-noreferrer/warnings.json b/test/validator/samples/security-anchor-rel-noreferer-legacy/warnings.json similarity index 100% rename from test/validator/samples/security-anchor-rel-noreferrer/warnings.json rename to test/validator/samples/security-anchor-rel-noreferer-legacy/warnings.json diff --git a/test/validator/samples/security-anchor-rel-noreferer/input.svelte b/test/validator/samples/security-anchor-rel-noreferer/input.svelte new file mode 100644 index 0000000000..f5361e5cfe --- /dev/null +++ b/test/validator/samples/security-anchor-rel-noreferer/input.svelte @@ -0,0 +1,33 @@ +svelte website (invalid) +svelte website (invalid) +svelte website (invalid) +svelte website (invalid) +svelte website (invalid) +svelte website (invalid) +svelte website (invalid) +svelte website (invalid) +svelte website (invalid) +svelte website (invalid) +svelte website (invalid) +svelte website (invalid) +svelte website (invalid) +svelte website (invalid) +svelte website (invalid) +svelte website (invalid) +svelte website (invalid) +svelte website (invalid) +Same host (valid) +Same host (valid) +Same host (valid) +svelte website (valid) +svelte website (valid) +svelte website (valid) +svelte website (valid) +svelte website (valid) +svelte website (valid) +svelte website (valid) +svelte website (valid) +svelte website (valid) +svelte website (valid) + +svelte website (valid) diff --git a/test/validator/samples/security-anchor-rel-noreferer/warnings.json b/test/validator/samples/security-anchor-rel-noreferer/warnings.json new file mode 100644 index 0000000000..fe51488c70 --- /dev/null +++ b/test/validator/samples/security-anchor-rel-noreferer/warnings.json @@ -0,0 +1 @@ +[] From e875a76ad1675c21aea0911a8b32c8ad3abc070b Mon Sep 17 00:00:00 2001 From: Ben McCann <322311+benmccann@users.noreply.github.com> Date: Sat, 28 Jan 2023 08:51:35 -0800 Subject: [PATCH 14/63] update changelog --- CHANGELOG.md | 1 + 1 file changed, 1 insertion(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 865ed07b53..fba777ad9c 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,6 +2,7 @@ ## Unreleased +* Make `noreferrer` warning less zealous ([#6289](https://github.com/sveltejs/svelte/issues/6289)) * `trusted-types` CSP compatibility for Web Components ([#8134](https://github.com/sveltejs/svelte/issues/8134)) ## 3.55.1 From cb972ecdba92326e67c6cc37f672c58b88fdc3a5 Mon Sep 17 00:00:00 2001 From: Tim McCabe Date: Sun, 5 Feb 2023 06:23:43 -0500 Subject: [PATCH 15/63] [chore] fix `a11y-no-nointeractive-tabindex` typo (#8252) --- .../input.svelte | 0 .../warnings.json | 0 2 files changed, 0 insertions(+), 0 deletions(-) rename test/validator/samples/{a11y-no-nointeractive-tabindex => a11y-no-noninteractive-tabindex}/input.svelte (100%) rename test/validator/samples/{a11y-no-nointeractive-tabindex => a11y-no-noninteractive-tabindex}/warnings.json (100%) diff --git a/test/validator/samples/a11y-no-nointeractive-tabindex/input.svelte b/test/validator/samples/a11y-no-noninteractive-tabindex/input.svelte similarity index 100% rename from test/validator/samples/a11y-no-nointeractive-tabindex/input.svelte rename to test/validator/samples/a11y-no-noninteractive-tabindex/input.svelte diff --git a/test/validator/samples/a11y-no-nointeractive-tabindex/warnings.json b/test/validator/samples/a11y-no-noninteractive-tabindex/warnings.json similarity index 100% rename from test/validator/samples/a11y-no-nointeractive-tabindex/warnings.json rename to test/validator/samples/a11y-no-noninteractive-tabindex/warnings.json From 6ac24f1d5c9174b161bb6e27743c84c0a117ea7f Mon Sep 17 00:00:00 2001 From: Satvik Date: Sun, 5 Feb 2023 07:00:54 -0500 Subject: [PATCH 16/63] [docs] add missing semicolon (#8190) --- site/content/docs/02-component-format.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/site/content/docs/02-component-format.md b/site/content/docs/02-component-format.md index 268444ab7d..d9f7a35662 100644 --- a/site/content/docs/02-component-format.md +++ b/site/content/docs/02-component-format.md @@ -147,7 +147,7 @@ Any top-level statement (i.e. not inside a block or a function) can be made reac ```sv From d9253963f79d2066edd164580a684cd066042638 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 14 Feb 2023 09:05:19 -0800 Subject: [PATCH 22/63] Bump qs from 6.5.2 to 6.5.3 (#8090) Bumps [qs](https://github.com/ljharb/qs) from 6.5.2 to 6.5.3. - [Release notes](https://github.com/ljharb/qs/releases) - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](https://github.com/ljharb/qs/compare/v6.5.2...v6.5.3) --- updated-dependencies: - dependency-name: qs dependency-type: indirect ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- package-lock.json | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/package-lock.json b/package-lock.json index f993cad461..5ab035cd2e 100644 --- a/package-lock.json +++ b/package-lock.json @@ -4138,9 +4138,9 @@ } }, "node_modules/qs": { - "version": "6.5.2", - "resolved": "https://registry.npmjs.org/qs/-/qs-6.5.2.tgz", - "integrity": "sha512-N5ZAX4/LxJmF+7wN74pUD6qAh9/wnvdQcjq9TZjevvXzSUo7bfmw91saqMjzGS2xq91/odN2dW/WOl7qQHNDGA==", + "version": "6.5.3", + "resolved": "https://registry.npmjs.org/qs/-/qs-6.5.3.tgz", + "integrity": "sha512-qxXIEh4pCGfHICj1mAJQ2/2XVZkjCDTcEgfoSQxc/fYivUZxTkk7L3bDBJSoNrEzXI17oUO5Dp07ktqE5KzczA==", "dev": true, "engines": { "node": ">=0.6" @@ -8432,9 +8432,9 @@ } }, "qs": { - "version": "6.5.2", - "resolved": "https://registry.npmjs.org/qs/-/qs-6.5.2.tgz", - "integrity": "sha512-N5ZAX4/LxJmF+7wN74pUD6qAh9/wnvdQcjq9TZjevvXzSUo7bfmw91saqMjzGS2xq91/odN2dW/WOl7qQHNDGA==", + "version": "6.5.3", + "resolved": "https://registry.npmjs.org/qs/-/qs-6.5.3.tgz", + "integrity": "sha512-qxXIEh4pCGfHICj1mAJQ2/2XVZkjCDTcEgfoSQxc/fYivUZxTkk7L3bDBJSoNrEzXI17oUO5Dp07ktqE5KzczA==", "dev": true }, "queue-microtask": { From acba4b72e23c90939ca8c39a22aca185d588aa1b Mon Sep 17 00:00:00 2001 From: James Scott-Brown Date: Tue, 14 Feb 2023 18:04:49 +0000 Subject: [PATCH 23/63] docs: clarify bindings for `` value binding corresponds to the `value` property on the selected ` --- -A `` element behaves similarly to a checkbox group. The bound variable is an array with an entry corresponding to the `value` property of each selected `