Native Angular components & directives for Lightning Design System

Last update: Dec 8, 2022

Overview

ng-lightning

This library contains native Angular components and directives written from scratch in TypeScript using the Lightning Design System CSS framework.

We are looking for community help to find and fix bugs, improve demo site and create new components.

Installation

Install through npm:

npm install --save ng-lightning

Dependencies

This library depends on Salesforce's LDS markup and CSS (tested with 2.9). We don't ship any CSS file, but you have to take care of including LDS CSS rules in your page. There are various ways to achieve this, for example compiling through their source files (@salesforce-ux/design-system) or by adding this into your :

<link rel="stylesheet" href="https://unpkg.com/@salesforce-ux/design-system/assets/styles/salesforce-lightning-design-system.min.css">

SVG Icons

Because of various cross-domain issues, if you want to use SLDS icons, you must provide a copy of the various sprite files (ie @salesforce-ux/design-system/assets/icons/action-sprite/svg/symbols.svg), served locally through your server.

IE11 support

Unfortunately, IE11 does not support two important features.

SVG External Content, used to load SVG icons from a spritemap. In order to support this, you will need to use a small script called svg4everybody.
Available on npm cdn here.
Element.classList on SVG elements, used by Angular's renderer.setElementClass. See here for more information. Use classList.js shim, available on npm cdn here.

Typically, these shims should be placed within the element.

Usage & Demo

http://ng-lightning.github.io/ng-lightning/

Contributing

We are always looking for high quality contributions! Please check the CONTRIBUTING.md doc for guidelines.

Need help?

For questions on how to use ng-lightning or how to contribute, please post questions to using the ng-lightning tag. If you find a bug in the source code or a mistake in the documentation, you can help us by submitting an issue to our GitHub Repository.

Companies using ng-lightning

Browsers

We support the same browsers and versions supported by both Angular and Salesforce's Lightning Design System.
Cross browser/environment testing is performed through Saucelabs.

Comments

Angular 12 migration

This PR replace yarn with npm and update the project to angular 12. The changes in src/lib are just the minimum to fix TS compilation errors.

In the new version of angular we cannot use angular decorators inside a class that it is not decorated so I made the class abstract and I add @Directive(). I don't like it but It is the lightest workaround I could find.

opened by jesusbarcenilla 12
Cannot find type definition file for 'core-js'
[email protected] [email protected] build with webpack; typing with npm like @types/node webpack compile error;

xxx/node_modules/ng-lightning/config/config.d.ts:1:1 Cannot find type definition file for 'core-js'
opened by cottom 10
Fix filter bug, fix problems when filter input is '' and fix type attribute in icons

I rebased the three patches and made the test cases.

Regarding the problem when the filter input is '', I could not reproduce it again. However, I added a test case in order to check that the whole information is displayed when the component is initialised and no filter is entered.

opened by clozanosanchez 10

Angular 7 support

I am trying to use this in my new angular 7 project and it loos like this does not support angular 6 onwards. Is there any plan to upgrade to use this with angular 7 or atleast 6 above with rxJs 6

Below is the error if try to use with angular 7

  ERROR in ./node_modules/ng-lightning/lookups/lookup.js
  Module not found: Error: Can't resolve 'rxjs/BehaviorSubject' in '/spmepath/node_modules/ng-lightning/lookups'
    ERROR in ./node_modules/ng-lightning/pick/pick.js
  Module not found: Error: Can't resolve 'rxjs/BehaviorSubject' in '/spmepath/node_modules/ng-lightning/pick'
    ERROR in ./node_modules/ng-lightning/lookups/lookup.js
  Module not found: Error: Can't resolve 'rxjs/Observable' in '/spmepath/node_modules/ng-lightning/lookups'
    ERROR in ./node_modules/ng-lightning/lookups/lookup.js
  Module not found: Error: Can't resolve 'rxjs/add/observable/of' in '/spmepath/node_modules/ng-lightning/lookups'
    ERROR in ./node_modules/ng-lightning/lookups/lookup.js
  Module not found: Error: Can't resolve 'rxjs/add/operator/debounceTime' in '/spmepath/node_modules/ng-lightning/lookups'
    ERROR in ./node_modules/ng-lightning/lookups/lookup.js
  Module not found: Error: Can't resolve 'rxjs/add/operator/distinctUntilChanged' in '/spmepath/node_modules/ng-lightning/lookups'
    ERROR in ./node_modules/ng-lightning/lookups/lookup.js
  Module not found: Error: Can't resolve 'rxjs/add/operator/do' in '/spmepath/node_modules/ng-lightning/lookups'
    ERROR in ./node_modules/ng-lightning/picklist/picklist.js
  Module not found: Error: Can't resolve 'rxjs/add/operator/filter' in '/spmepath/node_modules/ng-lightning/picklist'
    ERROR in ./node_modules/ng-lightning/lookups/lookup.js
  Module not found: Error: Can't resolve 'rxjs/add/operator/publish' in '/spmepath/node_modules/ng-lightning/lookups'
    ERROR in ./node_modules/ng-lightning/lookups/lookup.js
  Module not found: Error: Can't resolve 'rxjs/add/operator/skip' in '/spmepath/node_modules/ng-lightning/lookups'
    ERROR in ./node_modules/ng-lightning/lookups/lookup.js
  Module not found: Error: Can't resolve 'rxjs/add/operator/switchMap' in '/spmepath/node_modules/ng-lightning/lookups'
    ERROR in ./node_modules/ng-lightning/popovers/trigger.js
  Module not found: Error: Can't resolve 'rxjs/add/operator/take' in '/spmepath/node_modules/ng-lightning/popovers'

opened by aniruddhadas9 9

Installation error caused by typings

I'm trying to install ng-lightning to an ASP.MVC 5 project using Visual Studio.NET 2015 and packages.config and I'm getting this error on installation:

====Executing command 'npm install'====

npm http GET https://registry.npmjs.org/ng-lightning
npm http 304 https://registry.npmjs.org/ng-lightning
> [email protected] postinstall D:\Projects\xxx\Source\Management\Management.Web.UI\node_modules\ng-lightning
> typings install
typings ERR! message Unable to resolve Typings dependencies
npm ERR! [email protected] postinstall: `typings install`
npm ERR! Exit status 1
npm ERR! 
npm ERR! Failed at the [email protected] postinstall script.
npm ERR! This is most likely a problem with the ng-lightning package,
npm ERR! not with npm itself.
npm ERR! Tell the author that this fails on your system:
npm ERR!     typings install
npm ERR! You can get their info via:
npm ERR!     npm owner ls ng-lightning
npm ERR! There is likely additional logging output above.
npm ERR! System Windows_NT 6.2.9200
npm ERR! command "C:\\Program Files (x86)\\Microsoft Visual Studio 14.0\\Common7\\IDE\\Extensions\\Microsoft\\Web Tools\\External\\\\node\\node" "C:\\Program Files (x86)\\Microsoft Visual Studio 14.0\\Common7\\IDE\\Extensions\\Microsoft\\Web Tools\\External\\npm\\node_modules\\npm\\bin\\npm-cli.js" "install"
npm ERR! cwd D:\Projects\xxx\Source\Management\Management.Web.UI
npm ERR! node -v v0.10.31
npm ERR! npm -v 1.4.9
npm ERR! code ELIFECYCLE
npm

====npm command completed with exit code 1====

My packages.config file:

{
    "version": "1.0.0",
    "name": "ASP.NET",
    "private": true,
    "dependencies": {
        "angular2": "2.0.0-beta.15",
        "systemjs": "0.19.26",
        "es6-promise": "^3.1.2",
        "es6-shim": "^0.35.0",
        "reflect-metadata": "0.1.2",
        "rxjs": "5.0.0-beta.2",
        "zone.js": "0.6.10",
        "bootstrap": "^3.3.6",
        "jquery": "^2.2.3",
        "underscore": "1.8.3",
        "fontawesome": "4.5.0",
        "bootstrap-material-design": "^0.5.9",
        "typings": "0.8.1",
        "ng-lightning": "0.7.0"
    },
    "devDependencies": {
        "gulp": "3.9.1",
        "gulp-clean": "0.3.2",
        "gulp-concat": "2.6.0",
        "gulp-continuous-concat": "0.1.1",
        "gulp-watch": "4.3.5"
    }
}

Any ideas?

opened by deastr 9

Uncaught SyntaxError: Unexpected token import

I am really eager to use your library for implementation in my project. I followed the Getting started line by line. My build runs fine (with webpack), but when I launch my app, nothing is rendered and the following error shows: Any idea where this may come from? Thanks!

opened by wgerven 8
ctorParameters.map is not a function

Uncaught TypeError: ctorParameters.map is not a function at ReflectionCapabilities.parameters (http://localhost:3001/vendor.js:39305:45) at Reflector.parameters (http://localhost:3001/vendor.js:39439:44) at CompileMetadataResolver.getDependenciesMetadata (http://localhost:3001/vendor.js:22157:54) at CompileMetadataResolver.getTypeMetadata (http://localhost:3001/vendor.js:22122:26) at http://localhost:3001/vendor.js:22265:41 at Array.forEach (native) at CompileMetadataResolver.getProvidersMetadata (http://localhost:3001/vendor.js:22245:19) at http://localhost:3001/vendor.js:21943:71 at Array.forEach (native) at CompileMetadataResolver.getNgModuleMetadata (http://localhost:3001/vendor.js:21934:44) at RuntimeCompiler._compileComponents (http://localhost:3001/vendor.js:33933:47) at RuntimeCompiler.compileModuleAndComponents (http://localhost:3001/vendor.js:33871:37) at RuntimeCompiler.compileModuleAsync (http://localhost:3001/vendor.js:33862:21) at PlatformRef.bootstrapModuleWithZone (http://localhost:3001/vendor.js:24116:25) at PlatformRef.bootstrapModule (http://localhost:3001/vendor.js:24098:21) at Object. (http://localhost:3001/main.js:34495:6) at webpack_require (http://localhost:3001/polyfills.js:53:30) at Object. (http://localhost:3001/main.js:54223:18) at webpack_require (http://localhost:3001/polyfills.js:53:30) at webpackJsonpCallback (http://localhost:3001/polyfills.js:24:23) at http://localhost:3001/main.js:1:1

this is my package json

"dependencies": { "@angular/common": "~2.1.2", "@angular/compiler": "~2.1.2", "@angular/core": "~2.1.2", "@angular/forms": "~2.1.2", "@angular/http": "~2.1.2", "@angular/platform-browser": "~2.1.2", "@angular/platform-browser-dynamic": "~2.1.2", "@angular/router": "~3.1.2", "core-js": "^2.4.1", "lodash": "^4.16.4", "md5-hex": "^1.1.0", "moment": "^2.12.0", "ng-lightning": "^1.2.0", "ng2-bootstrap": "^1.1.16", "pluralize": "~3.0.0", "rxjs": "5.0.0-beta.12", "time-ago": "^0.1.0", "toastr": "^2.1.2", "zone.js": "~0.6.17" }, "devDependencies": { "@types/jasmine": "^2.5.35", "@types/lodash": "^4.14.37", "@types/node": "^6.0.45", "@types/pluralize": "0.0.27", "@types/source-map": "^0.1.28", "@types/toastr": "^2.1.27", "@types/webpack": "^1.12.35", "angular2-template-loader": "^0.5.0", "angular2-router-loader": "^0.3.4", "awesome-typescript-loader": "^2.2.4", "codelyzer": "~1.0.0-beta.0", "css-loader": "^0.25.0", "exports-loader": "^0.6.3", "expose-loader": "^0.7.1", "extract-text-webpack-plugin": "~2.0.0-beta.4", "file-loader": "^0.9.0", "html-minify-loader": "^1.1.0", "html-webpack-plugin": "ampedandwired/html-webpack-plugin", "imports-loader": "^0.6.5", "jquery": "^3.1.1", "raw-loader": "^0.5.1", "resolve-url-loader": "~1.6.0", "rimraf": "2.5.4", "source-map-loader": "^0.1.5", "style-loader": "^0.13.0", "ts-helpers": "^1.1.1", "tslint": "^3.15.1", "tslint-loader": "^2.1.3", "typescript": "^2.0.3", "url-loader": "^0.5.7", "webpack": "2.1.0-beta.22", "webpack-dev-server": "^2.1.0-beta.7", "webpack-manifest-plugin": "^1.0.0", "webpack-merge": "~0.14.1" } }

this is my appModule

@NgModule({ bootstrap: [AppComponent], declarations: [ AppComponent, NoContentComponent, Navbar, AddressMenu, Index ], imports: [ BrowserModule, RouterModule.forRoot(ROUTES), Ng2BootstrapModule, NglModule.forRoot(), HttpModule ], providers: [ ENV_PROVIDERS,MyHttp ] }) export class AppModule { }

someone can help me ?

opened by Jarvens 7
IE11 support

Hi all -- did some digging into IE 11 support. Turns out that binding via [ngClass] for SVG class names is the roadblock for IE11 support.

Once I added the two above polyfills, I can run the example project via enableProdMode() with no appreciable slowdown.

opened by dballance 7
Internet Explorer

Hey there,

Really nice work going on here!

I had a question about the support for Internet Explorer. I see only Edge is supported, but is there any reason to why IE 10 or 11 isn't supported?

Is there any potential for a possible fix?
help wanted

opened by michaelpwilson 7
nglPopoverDelay="[1000, 2000]" behaves like nglPopoverDelay="0"
In the docs it is stated

nglPopoverDelay?: number | number[]: Delay in milliseconds until it opens/closes.

If you wish to specify different delays for opening and closing, you may provide an array of two different values.

If I provide this array, say [1000, 2000], then the net effect is that there is no delay at all. This behaviour is also reproduced in the relevant plunker. Simply providing a number does behaves as expected.

Do I miss anything?

P.s. I'm at salesforce-ux/design-system 2.4.3 and ng-lightning 2.0.1.
opened by wgerven 6
Picklist inside Modals body

I have a picklist inside of a modal: http://prntscr.com/ddjyw9. The scrolling in the picklist doesnt work. Instead, it scrolls the page in background. Also, when I remove the custom height for the body (http://prntscr.com/ddjzc5), the picklist dropdown is almost impossible to see with the default overflow-y: auto settings, but when setting it to visible, the dropdown is shown but I cannot scroll it. Any solution for this ? This is how it looks in bootstrap (http://prntscr.com/ddk0ad) and I want to recreate the same functionality with ng-lightning

opened by denkomanceski 6

chore(deps): bump json5 and @angular-devkit/build-angular

Bumps json5 to 2.2.2 and updates ancestor dependency @angular-devkit/build-angular. These dependencies need to be updated together.

Updates json5 from 2.2.0 to 2.2.2

Release notes

Sourced from json5's releases.

v2.2.2

Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

v2.2.1

Fix: Removed dependence on minimist to patch CVE-2021-44906. (#266)

Changelog

Sourced from json5's changelog.

v2.2.2 [code, diff]

Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

v2.2.1 [code, diff]

Fix: Removed dependence on minimist to patch CVE-2021-44906. (#266)

Commits

14f8cb1 2.2.2
10cc7ca docs: update CHANGELOG for v2.2.2
7774c10 fix: add proto to objects and arrays
edde30a Readme: slight tweak to intro
97286f8 Improve example in readme
d720b4f Improve readme (e.g. explain JSON5 better!) (#291)
910ce25 docs: fix spelling of Aseem
2aab4dd test: require tap as t in cli tests
6d42686 test: remove mocha syntax from tests
4798b9d docs: update installation and usage for modules
Additional commits viewable in compare view

Updates @angular-devkit/build-angular from 12.0.1 to 15.0.4

Release notes

Sourced from @angular-devkit/build-angular's releases.

v15.0.4

15.0.4 (2022-12-14)

@angular-devkit/build-angular

Commit Description

display actionable error when a style does not exist in Karma builder

downlevel class private methods when targeting Safari <=v15

include sources in generated Sass source maps

only set ngDevMode when script optimizations are enabled

update css-loader to 6.7.3

update locale setting snippet to use globalThis.

Special Thanks

Alan Agius and Charles Lyding

v15.0.3

15.0.3 (2022-12-07)

@angular-devkit/build-angular

Commit Description

default preserve symlinks to Node.js value for esbuild

downlevel class fields with Safari <= v15 for esbuild

downlevel class properties when targeting Safari <=v15

prevent optimization adding unsupported ECMASCript features

Special Thanks

Charles Lyding, Dominic Elm and Paul Gschwendtner

v15.0.2

15.0.2 (2022-11-30)

@angular-devkit/build-angular

Commit Description

correctly set Sass quietDeps and verbose options

@ngtools/webpack

Commit Description

elide unused type references

Special Thanks

Alan Agius and Juuso Valkeejärvi

v15.0.1

15.0.1 (2022-11-23)

@schematics/angular

Commit Description

show warning when a TS Config is not found during migrations

@angular/cli

Commit	Description
	display actionable error when a style does not exist in Karma builder
	downlevel class private methods when targeting Safari <=v15
	include sources in generated Sass source maps
	only set ngDevMode when script optimizations are enabled
	update `css-loader` to `6.7.3`
	update locale setting snippet to use `globalThis`.

Commit	Description
	default preserve symlinks to Node.js value for esbuild
	downlevel class fields with Safari <= v15 for esbuild
	downlevel class properties when targeting Safari <=v15
	prevent optimization adding unsupported ECMASCript features

Commit	Description
	correctly set Sass quietDeps and verbose options

Commit	Description
	elide unused type references

Commit	Description
	show warning when a TS Config is not found during migrations

... (truncated)

Changelog

Sourced from @angular-devkit/build-angular's changelog.

15.0.4 (2022-12-14)

@angular-devkit/build-angular

Commit Type Description

ccc8e0350 fix display actionable error when a style does not exist in Karma builder

507f756c3 fix downlevel class private methods when targeting Safari <=v15

a0da91dba fix include sources in generated

9fd356234 fix only set ngDevMode when script optimizations are enabled

8e85f4728 fix update css-loader to 6.7.3

b2d4415ca fix update locale setting snippet to use globalThis.

Special Thanks

Alan Agius and Charles Lyding

15.1.0-next.2 (2022-12-08)

@schematics/angular

Commit Type Description

5b18ce154 feat add guardType as an alias of implements in guard schematic

49b313f27 fix add missing import for functional interceptor spec

2f92fe7e5 fix add missing semicolon in functional guard/resolver/interceptor

@angular-devkit/build-angular

Commit Type Description

97716969c fix default preserve symlinks to Node.js value for esbuild

cf2f30afc fix downlevel class fields with Safari <= v15 for esbuild

25eaaa24b fix downlevel class properties when targeting Safari <=v15

7a063238b fix explicitly send options to JS transformer workers

ef99a68b4 fix prevent optimization adding unsupported ECMASCript features

Special Thanks

Alan Agius, Charles Lyding, Cédric Exbrayat, Dominic Elm, Doug Parker and Paul Gschwendtner

15.0.3 (2022-12-07)

Commit	Type	Description
ccc8e0350	fix	display actionable error when a style does not exist in Karma builder
507f756c3	fix	downlevel class private methods when targeting Safari <=v15
a0da91dba	fix	include sources in generated
9fd356234	fix	only set ngDevMode when script optimizations are enabled
8e85f4728	fix	update `css-loader` to `6.7.3`
b2d4415ca	fix	update locale setting snippet to use `globalThis`.

Commit	Type	Description
5b18ce154	feat	add `guardType` as an alias of `implements` in guard schematic
49b313f27	fix	add missing import for functional interceptor spec
2f92fe7e5	fix	add missing semicolon in functional guard/resolver/interceptor

Commit	Type	Description
97716969c	fix	default preserve symlinks to Node.js value for esbuild
cf2f30afc	fix	downlevel class fields with Safari <= v15 for esbuild
25eaaa24b	fix	downlevel class properties when targeting Safari <=v15
7a063238b	fix	explicitly send options to JS transformer workers
ef99a68b4	fix	prevent optimization adding unsupported ECMASCript features

... (truncated)

Commits

8771258 release: cut the v15.0.4 release
8e85f47 fix(@angular-devkit/build-angular): update css-loader to 6.7.3
9fd3562 fix(@angular-devkit/build-angular): only set ngDevMode when script optimizati...
ccc8e03 fix(@angular-devkit/build-angular): display actionable error when a style doe...
507f756 fix(@angular-devkit/build-angular): downlevel class private methods when targ...
b2d4415 fix(@angular-devkit/build-angular): update locale setting snippet to use `glo...
a0da91d fix(@angular-devkit/build-angular): include sources in generated
eb2a73a release: cut the v15.0.3 release
3d9971e fix(@angular-devkit/build-angular): default preserve symlinks to Node.js valu...
24f4b51 fix(@angular-devkit/build-angular): downlevel class fields with Safari <= v15...
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
@dependabot use these labels will set the current labels as the default for future PRs for this repo and language
@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies

opened by dependabot[bot] 0

chore(deps-dev): bump simple-git from 1.132.0 to 3.15.0
Bumps simple-git from 1.132.0 to 3.15.0.

Release notes

Sourced from simple-git's releases.

[email protected]

Minor Changes

7746480: Disables the use of inline configuration arguments to prevent unitentionally allowing non-standard remote protocols without explicitly opting in to this practice with the new allowUnsafeProtocolOverride property having been enabled.

Patch Changes

7746480: - Upgrade repo dependencies - lerna and jest

Include node@19 in the test matrix

[email protected]

Patch Changes

5a2e7e4: Add version parsing support for non-numeric patches (including "built from source" style 1.11.GIT)

[email protected]

Minor Changes

19029fc: Create the abort plugin to allow cancelling all pending and future tasks.

4259b26: Add .version to return git version information, including whether the git binary is installed.

[email protected]

Minor Changes

87b0d75: Increase the level of deprecation notices for use of simple-git/promise, which will be fully removed in the next major

d0dceda: Allow supplying just one of to/from in the options supplied to git.log

Patch Changes

6b3e05c: Use shared test utilities bundle in simple-git tests, to enable consistent testing across packages in the future

[email protected]

Minor Changes

bfd652b: Add a new configuration option to enable trimming white-space from the response to git.raw

[email protected]

Minor Changes

80d54bd: Added fields updated + deleted branch info to fetch response, closes #823

Patch Changes

75dfcb4: Add prettier configuration and apply formatting throughout.

[email protected]

Minor Changes

2f021e7: Support for importing as an ES module with TypeScript moduleResolution node16 or newer by adding simpleGit as a named export.

... (truncated)

Changelog

Sourced from simple-git's changelog.

3.15.0

Minor Changes

7746480: Disables the use of inline configuration arguments to prevent unitentionally allowing non-standard remote protocols without explicitly opting in to this practice with the new allowUnsafeProtocolOverride property having been enabled.

Patch Changes

7746480: - Upgrade repo dependencies - lerna and jest

Include node@19 in the test matrix

3.14.1

Patch Changes

5a2e7e4: Add version parsing support for non-numeric patches (including "built from source" style 1.11.GIT)

3.14.0

Minor Changes

19029fc: Create the abort plugin to allow cancelling all pending and future tasks.

4259b26: Add .version to return git version information, including whether the git binary is installed.

3.13.0

Minor Changes

87b0d75: Increase the level of deprecation notices for use of simple-git/promise, which will be fully removed in the next major

d0dceda: Allow supplying just one of to/from in the options supplied to git.log

Patch Changes

6b3e05c: Use shared test utilities bundle in simple-git tests, to enable consistent testing across packages in the future

3.12.0

Minor Changes

bfd652b: Add a new configuration option to enable trimming white-space from the response to git.raw

3.11.0

Minor Changes

80d54bd: Added fields updated + deleted branch info to fetch response, closes #823

Patch Changes

75dfcb4: Add prettier configuration and apply formatting throughout.

... (truncated)

Commits

d4764bf Version Packages

7746480 Chore: bump lerna, jest and create prettier workflow (#862)

6b3c631 Create the unsafe plugin to configure how simple-git treats known potenti...

e459622 Version Packages

5a2e7e4 Add version parsing support for non-numeric patches (to include built… (#853)

6460a1f Version Packages

4259b26 Create interface for retrieving git version information (#850)

19029fc Abort plugin (#848)

ee801ae Version Packages

d0dceda Allow using just one of from and to in the git.log options. (#846)

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
chore(deps): bump qs from 6.5.2 to 6.5.3
Bumps qs from 6.5.2 to 6.5.3.

Changelog

Sourced from qs's changelog.

6.5.3

[Fix] parse: ignore __proto__ keys (#428)

[Fix] utils.merge`: avoid a crash with a null target and a truthy non-array source

[Fix] correctly parse nested arrays

[Fix] stringify: fix a crash with strictNullHandling and a custom filter/serializeDate (#279)

[Fix] utils: merge: fix crash when source is a truthy primitive & no options are provided

[Fix] when parseArrays is false, properly handle keys ending in []

[Fix] fix for an impossible situation: when the formatter is called with a non-string value

[Fix] utils.merge: avoid a crash with a null target and an array source

[Refactor] utils: reduce observable [[Get]]s

[Refactor] use cached Array.isArray

[Refactor] stringify: Avoid arr = arr.concat(...), push to the existing instance (#269)

[Refactor] parse: only need to reassign the var once

[Robustness] stringify: avoid relying on a global undefined (#427)

[readme] remove travis badge; add github actions/codecov badges; update URLs

[Docs] Clean up license text so it’s properly detected as BSD-3-Clause

[Docs] Clarify the need for "arrayLimit" option

[meta] fix README.md (#399)

[meta] add FUNDING.yml

[actions] backport actions from main

[Tests] always use String(x) over x.toString()

[Tests] remove nonexistent tape option

[Dev Deps] backport from main

Commits

298bfa5 v6.5.3

ed0f5dc [Fix] parse: ignore __proto__ keys (#428)

691e739 [Robustness] stringify: avoid relying on a global undefined (#427)

1072d57 [readme] remove travis badge; add github actions/codecov badges; update URLs

12ac1c4 [meta] fix README.md (#399)

0338716 [actions] backport actions from main

5639c20 Clean up license text so it’s properly detected as BSD-3-Clause

51b8a0b add FUNDING.yml

45f6759 [Fix] fix for an impossible situation: when the formatter is called with a no...

f814a7f [Dev Deps] backport from main

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
chore(deps): bump decode-uri-component from 0.2.0 to 0.2.2
Bumps decode-uri-component from 0.2.0 to 0.2.2.

Release notes

Sourced from decode-uri-component's releases.

v0.2.2

Prevent overwriting previously decoded tokens 980e0bf

https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.1...v0.2.2

v0.2.1

Switch to GitHub workflows 76abc93

Fix issue where decode throws - fixes #6 746ca5d

Update license (#1) 486d7e2

Tidelift tasks a650457

Meta tweaks 66e1c28

https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.0...v0.2.1

Commits

a0eea46 0.2.2

980e0bf Prevent overwriting previously decoded tokens

3c8a373 0.2.1

76abc93 Switch to GitHub workflows

746ca5d Fix issue where decode throws - fixes #6

486d7e2 Update license (#1)

a650457 Tidelift tasks

66e1c28 Meta tweaks

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
chore(deps): bump engine.io and socket.io
Bumps engine.io and socket.io. These dependencies needed to be updated together. Updates engine.io from 3.5.0 to 3.6.1

Release notes

Sourced from engine.io's releases.

3.6.1

:warning: This release contains an important security fix :warning:

A malicious client could send a specially crafted HTTP request, triggering an uncaught exception and killing the Node.js process:

Error: read ECONNRESET at TCP.onStreamRead (internal/stream_base_commons.js:209:20) Emitted 'error' event on Socket instance at: at emitErrorNT (internal/streams/destroy.js:106:8) at emitErrorCloseNT (internal/streams/destroy.js:74:3) at processTicksAndRejections (internal/process/task_queues.js:80:21) { errno: -104, code: 'ECONNRESET', syscall: 'read' }

Please upgrade as soon as possible.

Bug Fixes

catch errors when destroying invalid upgrades (83c4071)

3.6.0

Bug Fixes

add extension in the package.json main entry (#608) (3ad0567)

do not reset the ping timer after upgrade (1f5d469)

Features

decrease the default value of maxHttpBufferSize (58e274c)

This change reduces the default value from 100 mb to a more sane 1 mb.

This helps protect the server against denial of service attacks by malicious clients sending huge amounts of data.

See also: https://github.com/advisories/GHSA-j4f2-536g-r55m

increase the default value of pingTimeout (f55a79a)

Links

Diff: https://github.com/socketio/engine.io/compare/3.5.0...3.6.0

Client release: -

... (truncated)

Changelog

Sourced from engine.io's changelog.

3.6.1 (2022-11-20)

:warning: This release contains an important security fix :warning:

A malicious client could send a specially crafted HTTP request, triggering an uncaught exception and killing the Node.js process:

Error: read ECONNRESET at TCP.onStreamRead (internal/stream_base_commons.js:209:20) Emitted 'error' event on Socket instance at: at emitErrorNT (internal/streams/destroy.js:106:8) at emitErrorCloseNT (internal/streams/destroy.js:74:3) at processTicksAndRejections (internal/process/task_queues.js:80:21) { errno: -104, code: 'ECONNRESET', syscall: 'read' }

Please upgrade as soon as possible.

Bug Fixes

catch errors when destroying invalid upgrades (83c4071)

6.2.1 (2022-11-20)

:warning: This release contains an important security fix :warning:

A malicious client could send a specially crafted HTTP request, triggering an uncaught exception and killing the Node.js process:

Error: read ECONNRESET at TCP.onStreamRead (internal/stream_base_commons.js:209:20) Emitted 'error' event on Socket instance at: at emitErrorNT (internal/streams/destroy.js:106:8) at emitErrorCloseNT (internal/streams/destroy.js:74:3) at processTicksAndRejections (internal/process/task_queues.js:80:21) { errno: -104, code: 'ECONNRESET', syscall: 'read' }

Please upgrade as soon as possible.

Bug Fixes

... (truncated)

Commits

67a3a87 chore(release): 3.6.1

83c4071 fix: catch errors when destroying invalid upgrades

f62f265 chore(release): 3.6.0

f55a79a feat: increase the default value of pingTimeout

1f5d469 fix: do not reset the ping timer after upgrade

3ad0567 fix: add extension in the package.json main entry (#608)

58e274c feat: decrease the default value of maxHttpBufferSize

See full diff in compare view

Updates socket.io from 2.4.1 to 2.5.0

Release notes

Sourced from socket.io's releases.

2.5.0

:warning: WARNING :warning:

The default value of the maxHttpBufferSize option has been decreased from 100 MB to 1 MB, in order to prevent attacks by denial of service.

Security advisory: https://github.com/advisories/GHSA-j4f2-536g-r55m

Bug Fixes

fix race condition in dynamic namespaces (05e1278)

ignore packet received after disconnection (22d4bdf)

only set 'connected' to true after middleware execution (226cc16)

prevent the socket from joining a room after disconnection (f223178)

Links:

Diff: https://github.com/socketio/socket.io/compare/2.4.1...2.5.0

Client release: 2.5.0

engine.io version: ~3.6.0 (diff)

ws version: ~7.4.2

Changelog

Sourced from socket.io's changelog.

2.5.0 (2022-06-26)

Bug Fixes

fix race condition in dynamic namespaces (05e1278)

ignore packet received after disconnection (22d4bdf)

only set 'connected' to true after middleware execution (226cc16)

prevent the socket from joining a room after disconnection (f223178)

4.5.1 (2022-05-17)

Bug Fixes

forward the local flag to the adapter when using fetchSockets() (30430f0)

typings: add HTTPS server to accepted types (#4351) (9b43c91)

4.5.0 (2022-04-23)

Bug Fixes

typings: ensure compatibility with TypeScript 3.x (#4259) (02c87a8)

Features

add support for catch-all listeners for outgoing packets (531104d)

This is similar to onAny(), but for outgoing packets.

Syntax:

socket.onAnyOutgoing((event, ...args) => { console.log(event); });

broadcast and expect multiple acks (8b20457)

Syntax:

io.timeout(1000).emit("some-event", (err, responses) => { </tr></table>

... (truncated)

Commits

baa6804 chore(release): 2.5.0

f223178 fix: prevent the socket from joining a room after disconnection

226cc16 fix: only set 'connected' to true after middleware execution

05e1278 fix: fix race condition in dynamic namespaces

22d4bdf fix: ignore packet received after disconnection

dfded53 chore: update engine.io version to 3.6.0

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
chore(deps): bump socket.io-parser from 3.3.2 to 3.3.3
Bumps socket.io-parser from 3.3.2 to 3.3.3.

Changelog

Sourced from socket.io-parser's changelog.

3.3.3 (2022-11-09)

Bug Fixes

check the format of the index of each attachment (fb21e42)

3.4.2 (2022-11-09)

Bug Fixes

check the format of the index of each attachment (04d23ce)

4.2.1 (2022-06-27)

Bug Fixes

check the format of the index of each attachment (b5d0cb7)

4.0.5 (2022-06-27)

Bug Fixes

check the format of the index of each attachment (b559f05)

4.2.0 (2022-04-17)

Features

allow the usage of custom replacer and reviver (#112) (b08bc1a)

4.1.2 (2022-02-17)

Bug Fixes

... (truncated)

Commits

cd11e38 chore(release): 3.3.3

fb21e42 fix: check the format of the index of each attachment

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0