Skip to content
This repository was archived by the owner on Nov 13, 2025. It is now read-only.

Conversation

@clintcs
Copy link
Collaborator

@clintcs clintcs commented Feb 19, 2025

🚀 Description

Check out our Dependabot alerts.

We'll remove the overrides when our dependencies that use the affected packages are patched. We're waiting on an Esbuild patch from Vite and Web Test Runner, and a Koa patch from Web Test Runner.

📋 Pre-review Checklist

🔬 Testing

Run pnpm why [email protected] and pnpm why [email protected] to make sure neither vulnerable package is in our dependency tree. Other than that, we're good if our tests pass.

📸 Images/Videos of Functionality

N/A

@changeset-bot
Copy link

changeset-bot bot commented Feb 19, 2025

⚠️ No Changeset found

Latest commit: bfff557

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@github-actions
Copy link
Contributor

@clintcs clintcs changed the title Override vulnerable dependencies Patch vulnerable dependencies Feb 19, 2025
@clintcs clintcs force-pushed the override-vulnerable-dependencies branch from e8178be to d5d2ca0 Compare February 19, 2025 15:23
@clintcs clintcs changed the title Patch vulnerable dependencies Patch and override vulnerable dependencies Feb 19, 2025
@clintcs clintcs changed the title Patch and override vulnerable dependencies Patch dependencies Feb 19, 2025
@clintcs clintcs force-pushed the override-vulnerable-dependencies branch from d5d2ca0 to bfff557 Compare February 19, 2025 15:48
html`<glide-core-input label="Label" clearable></glide-core-input>`,
html`<glide-core-input
label="Label"
value="value"
Copy link
Collaborator Author

@clintcs clintcs Feb 19, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Not sure how this test was passing before. The clearable button is hidden until Input has a value. It correctly started failing after I upgraded Playwright to 1.50.1.

@clintcs clintcs marked this pull request as ready for review February 19, 2025 15:52
@clintcs clintcs merged commit 2905693 into staging Feb 19, 2025
7 checks passed
@clintcs clintcs deleted the override-vulnerable-dependencies branch February 19, 2025 16:06
clintcs added a commit that referenced this pull request Feb 20, 2025
clintcs added a commit that referenced this pull request Feb 20, 2025
* Bump eslint-config-prettier from 9.1.0 to 10.0.1 (#639)

Bumps [eslint-config-prettier](https://github.com/prettier/eslint-config-prettier) from 9.1.0 to 10.0.1.
- [Release notes](https://github.com/prettier/eslint-config-prettier/releases)
- [Changelog](https://github.com/prettier/eslint-config-prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/eslint-config-prettier@v9.1.0...v10.0.1)

---
updated-dependencies:
- dependency-name: eslint-config-prettier
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump typescript from 5.7.2 to 5.7.3 (#640)

Bumps [typescript](https://github.com/microsoft/TypeScript) from 5.7.2 to 5.7.3.
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release.yml)
- [Commits](microsoft/TypeScript@v5.7.2...v5.7.3)

---
updated-dependencies:
- dependency-name: typescript
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump @storybook/theming from 8.5.1 to 8.5.2 (#641)

Bumps [@storybook/theming](https://github.com/storybookjs/storybook/tree/HEAD/code/lib/theming) from 8.5.1 to 8.5.2.
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Commits](https://github.com/storybookjs/storybook/commits/v8.5.2/code/lib/theming)

---
updated-dependencies:
- dependency-name: "@storybook/theming"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump vite from 6.0.9 to 6.0.11 (#643)

Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 6.0.9 to 6.0.11.
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v6.0.11/packages/vite)

---
updated-dependencies:
- dependency-name: vite
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Add Resize Observer directive (#642)

* Bump vitest from 2.1.8 to 3.0.4 (#644)

Bumps [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) from 2.1.8 to 3.0.4.
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v3.0.4/packages/vitest)

---
updated-dependencies:
- dependency-name: vitest
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Add `@required` decorator (#638)

* Add `@final` decorator (#645)

* Give Input a minimum width (#647)

* Use `@final` decorator everywhere (#648)

* Add Label `label` attribute (#646)

* Move test-only rules to their own block (#652)

* Prevent form control overflow (#650)

* Add logo `width` attribute

* Make Dropdown's `placeholder` attribute optional (#657)

* Added "add" Dropdown event documentation (#660)

* Drawer no longer closes on Escape press (#667)

* Drawer no longer closing on Esc

* Update .changeset/tiny-pens-drop.md

Co-authored-by: Dan Wenzel <[email protected]>

* Update .changeset/tiny-pens-drop.md

Co-authored-by: clintcs <[email protected]>

---------

Co-authored-by: Dan Wenzel <[email protected]>
Co-authored-by: clintcs <[email protected]>

* Add JSDoc comments for multi-word property names (#661)

* Upgrade Storybook (#669)

* Added severity icon support to Modal (#668)

* Added severity icon support to Modal

* Apply suggestions from code review

Co-authored-by: clintcs <[email protected]>

---------

Co-authored-by: clintcs <[email protected]>

* Bump lint-staged from 15.2.11 to 15.4.3 (#666)

Bumps [lint-staged](https://github.com/lint-staged/lint-staged) from 15.2.11 to 15.4.3.
- [Release notes](https://github.com/lint-staged/lint-staged/releases)
- [Changelog](https://github.com/lint-staged/lint-staged/blob/master/CHANGELOG.md)
- [Commits](lint-staged/lint-staged@v15.2.11...v15.4.3)

---
updated-dependencies:
- dependency-name: lint-staged
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump rimraf from 5.0.10 to 6.0.1 (#665)

Bumps [rimraf](https://github.com/isaacs/rimraf) from 5.0.10 to 6.0.1.
- [Changelog](https://github.com/isaacs/rimraf/blob/main/CHANGELOG.md)
- [Commits](isaacs/rimraf@v5.0.10...v6.0.1)

---
updated-dependencies:
- dependency-name: rimraf
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump chalk from 5.3.0 to 5.4.1 (#664)

Bumps [chalk](https://github.com/chalk/chalk) from 5.3.0 to 5.4.1.
- [Release notes](https://github.com/chalk/chalk/releases)
- [Commits](chalk/chalk@v5.3.0...v5.4.1)

---
updated-dependencies:
- dependency-name: chalk
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump postcss from 8.4.49 to 8.5.1 (#663)

Bumps [postcss](https://github.com/postcss/postcss) from 8.4.49 to 8.5.1.
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.4.49...8.5.1)

---
updated-dependencies:
- dependency-name: postcss
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump @typescript-eslint/rule-tester from 8.19.0 to 8.22.0 (#662)

* Bump @typescript-eslint/rule-tester from 8.19.0 to 8.22.0

Bumps [@typescript-eslint/rule-tester](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/rule-tester) from 8.19.0 to 8.22.0.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/rule-tester/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.22.0/packages/rule-tester)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/rule-tester"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* Bump @typescript-eslint and related packages

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: clintcs <[email protected]>

* Bump vitest from 3.0.4 to 3.0.5 (#676)

Bumps [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) from 3.0.4 to 3.0.5.
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v3.0.5/packages/vitest)

---
updated-dependencies:
- dependency-name: vitest
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Fix Popover `<label>` bug (#672)

* Radio Group bugfixes (#670)

* Fix Tooltip overflow bug (#673)

* Clean up tests

* Update README and CONTRIBUTING (#684)

* Update README and CONTRIBUTING

* Update CONTRIBUTING.md

Co-authored-by: clintcs <[email protected]>

* Update CONTRIBUTING.md

Co-authored-by: clintcs <[email protected]>

---------

Co-authored-by: clintcs <[email protected]>

* Bump esbuild from 0.24.2 to 0.25.0 (#687)

Bumps [esbuild](https://github.com/evanw/esbuild) from 0.24.2 to 0.25.0.
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG-2024.md)
- [Commits](evanw/esbuild@v0.24.2...v0.25.0)

---
updated-dependencies:
- dependency-name: esbuild
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Tree Item: Prevent prefix icon from shrinking (#686)

Wraps the prefix icon slot in a flex container, to prevent slotted SVGs from shrinking at narrow widths

* Make use of the new `@required` decorator (#685)

* Make use of the new required decorator

* Apply suggestions from code review

Co-authored-by: clintcs <[email protected]>

* Remove unnecessary this.selectedOptions.length > 0 checks

* Update CONTRIBUTING.md

Co-authored-by: Dan Wenzel <[email protected]>

---------

Co-authored-by: clintcs <[email protected]>
Co-authored-by: Dan Wenzel <[email protected]>

* Remove gap between Checkbox or Toggle and summary, if there is no summary (#688)

* Remove gap between Checkbox or Toggle and summary if there is no summary

* Update .changeset/cool-hornets-talk.md

Co-authored-by: clintcs <[email protected]>

---------

Co-authored-by: clintcs <[email protected]>

* Add `type="time"` support to Input (#690)

* Patch dependencies (#693)

* Prepare for the elements manifest (#691)

* Clear single-select Dropdown's input field when `value` is emptied (#694)

* Add elements manifest and JSDoc generation (#692)

* Add a minimum width to filterable Dropdown's input field (#696)

* Update Dropdown test

* Fix Modal test lint issue

* Bump component version in manifest and JSDoc comments

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Tony Ward <[email protected]>
Co-authored-by: Dan Wenzel <[email protected]>
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants