Update @vue/cli-plugin-vuex: 4.5.6 → 4.5.14 (patch)

[depfu]

Here is everything you need to know about this update. Please take a good look at what changed and the test results before merging this pull request.

What changed?

✳️ @​vue/cli-plugin-vuex (4.5.6 → 4.5.14) · Repo · Changelog

Release Notes

4.5.14

Security Fixes

This version fixed a CORS vulnerability and an XSS vulnerability in Vue CLI UI.
We recommend all users of vue ui to upgrade to this version as soon as possible.

Credits:

Ngo Wei Lin (@Creastery) of STAR Labs (@starlabs_sg)

4.5.13

🐛 Bug Fix

• @vue/babel-preset-app
  • #6459 fix: fix modern mode optional chaining syntax tranpilation (@sodatea)
• @vue/cli-plugin-unit-mocha
  • #6400 fix(mocha): workaround the SVGElement issue in Vue 3 (@fangbinwei)
• @vue/cli-service
  • #6455 fix: get rid of ssri vulnerability warnings (@sodatea)

Others

• #6300 chore: remove the word "Preview" from vue 3 preset (@sodatea)

Committers: 3

• Binwei Fang (@fangbinwei)
• Haoqun Jiang (@sodatea)
• Tony Trinh (@tony19)

4.5.12

• bump vue-codemod to work around an NPM hoisting bug
• bump minimum required JSX preset / plugin versions, fixes vuejs/jsx#183
• bump default typescript version to 4.1 and prettier version to 2.x for new projects, fixes #6299

4.5.11

🐛 Bug Fix

• @vue/cli
  • #6207 fix: support basic auth for npm registry access (@bodograumann)
• @vue/cli-ui
  • 5ce117b chore: bump node-notifier (@sodatea)

Committers: 1

• Bodo Graumann (@bodograumann)
• Haoqun Jiang (@sodatea)

4.5.10

🐛 Bug Fix

• @vue/cli-plugin-unit-mocha
  • #6186 fix(mocha): workaround the ShadowRoot issue in Vue 3.0.5 (@sodatea)
• @vue/cli-plugin-unit-mocha, @vue/cli-service
  • #6097 fix(mocha): disable SSR optimization for Vue 3 testing (@sodatea)
• @vue/cli-ui
  • #6000 fix: prevent snoretoast shortcut, set notif title (#2720) (@tony19)
• @vue/cli-service-global, @vue/cli-service
  • #5992 fix: using lang attribute with empty string in html template (@fangbinwei)

Committers: 3

• Binwei Fang (@fangbinwei)
• Haoqun Jiang (@sodatea)
• Tony Trinh (@tony19)

4.5.9

This version updates the Cypress plugin, allows users to update to a new version of Cypress on their own.
Due to backward compatibility concerns, @vue/cli-plugin-e2e-cypress 4.x always comes with a Cypress 3 dependency, and won't be updated until CLI v5 releases.
But now that Cypress has shipped several new major versions in the past year, bringing many interesting new features such as cross-browser testing, you may want to try out a new version. As of this release, there now are 2 ways to update the Cypress dependency in the project:

1. (Yarn users only) Add a resolutions field in the package.json:

{
  "resolutions": {
    "cypress": "^5.6.0"
  }
}

Then run yarn again to install the new dependencies. This will keep exactly one Cypress copy in the project so it's the recommended approach.

2. Ensure you are on @vue/cli-plugin-e2e-cypress 4.5.9, then run npm install -D cypress or yarn add -D cypress in the project.
   This will install the latest Cypress version to your project root, and the Vue CLI plugin will refer to it when executing the test:e2e task.
   A drawback of this approach is that cypress@3 will still be downloaded during the dependency installation process, even it's useless now. Though, it is only a temporary problem as we are trying to keep the plugin's backward compatibility, and will be soon fixed with an upcoming v5 release.

---

🚀 New Features

• @vue/cli-plugin-e2e-cypress
  • #6062 fix(cypress): allow users to update cypress (@elevatebart)

Committers: 1

• Barthélémy Ledoux (@elevatebart)

4.5.8

This version has updated the TypeScript shim for Vue 3.
If you encounter any typing issue when using vue v3.0.1 and @vue/test-utils, please update your src/shims-vue.d.ts file according to https://github.com/vuejs/vue-cli/pull/5975/files

🐛 Bug Fix

• @vue/cli-plugin-typescript
  • #5975 fix: update vue-shims for Vue v3.0.1 (@cexbrayat)
• @vue/cli
  • #5961 fix: npm 7 compat by turning on legacy-peer-deps flag (@sodatea)
• @vue/cli-plugin-eslint
  • #5962 fix: narrow the eslint peer dep version range, avoiding npm 7 error (@sodatea)

Committers: 2

• Cédric Exbrayat (@cexbrayat)
• Haoqun Jiang (@sodatea)

4.5.7

🐛 Bug Fix

• @vue/cli-plugin-babel, @vue/cli-plugin-typescript, @vue/cli-service
  • #5903 fix: update the .vue file shim for Vue 3 (@sodatea)
• @vue/cli
  • #5871 fix: more accurate warning message for missing global peer dependencies (@sodatea)
  • #5902 fix: incorrectly read Taobao binary mirror configuration. (@godky)
  • #5892 fix: respect scope when resolving package metadata (@bodograumann)
• @vue/cli-plugin-pwa, @vue/cli-service
  • #5899 fix: shouldn't remove attribute quotes in HTML (@sodatea)

📝 Documentation

• #5835 Update Vercel deployment instructions (@timothyis)

Committers: 4

• Bodo Graumann (@bodograumann)
• Haoqun Jiang (@sodatea)
• Timothy (@timothyis)
• kzhang (@godky)

Does any of this look wrong? Please let us know.

Commits

See the full diff on Github. The new version differs by 51 commits:

• v4.5.14
• fix: do not output user-input url params directly to the response html
• fix(ws): stricter check on web socket origins
• v4.5.13
• fix(v4): fix modern mode optional chaining syntax tranpilation (#6459)
• fix(mocha): workaround the SVGElement issue in Vue (#6400)
• chore: remove the word "Preview" from vue 3 preset (#6310)
• chore: remove the word "Preview" from vue 3 preset (#6300)
• fix(v4): get rid of ssri vulnerability warnings (#6455)
• v4.5.12
• feat: bump default prettier version to 2.x
• fix: revert to ts 4.2.3 to fix failing ci tests
• feat: use TS 4.2+ in newly created projects
• chore: bump minimum required jsx preset / plugin versions
• chore: bump vue-codemod to work around a npm hoisting bug
• chore: vue-cli-plugin-apollo can be listed as a dev dep
• v4.5.11
• chore: pre release sync
• chore: bump node-notifier
• chore: add __testfixtures__ to npmignore
• fix: support basic auth for npm registry access (#6207)
• v4.5.10
• chore: lockfile maintenance
• chore: update vue-property-decorator version in template
• fix: disable eslint for Vue 3 type shim (for now)
• fix(mocha): workaround the ShadowRoot issue in Vue 3.0.5 (#6186)
• fix(mocha): disable SSR optimization for Vue 3 testing (#6097)
• fix: prevent snoretoast shortcut, set notif title (#2720) (#6000)
• fix: using `lang` attribute with empty string in html template (#5992)
• v4.5.9
• fix(cypress): allow users to update cypress (#6062)
• v4.5.8
• fix: also update the migrator for vue 3 typescript shim
• fix: update vue-shims for Vue v3.0.1 (#5975)
• fix: npm 7 compat by turning on `legacy-peer-deps` flag (#5961)
• fix: narrow the eslint peer dep version range, avoiding npm 7 error (#5962)
• v4.5.7
• chore: merge branch 'master' into dev
• Update Vercel deployment instructions (#5835)
• fix: update the `.vue` file shim for Vue 3 (#5903)
• chore: show error message that the `wc` target with Vue 3 isn't supported yet (#5906)
• fix: more accurate warning message for missing global peer dependencies (#5871)
• docs: add notes on the `vue inspect` command (#3797) [skip ci]
• docs: update netlify docs for vue/cli-plugin-pwa (#5847) [skip ci]
• fix: incorrectly read Taobao binary mirror configuration. (#5902)
• docs: add solution for `yarn link` error (#5884) [skip ci]
• fix: shouldn't remove attribute quotes in HTML (#5899)
• docs(zh): in build-targets.md add "using vuex" (#5883) [skip ci]
• docs: remove mention of Node.js v8 npm workaround, as it's been fixed [skip ci]
• fix: respect scope when resolving package metadata (#5892)
• docs: fix typo in en.json (#5885) [ci skip]

---

Depfu will automatically keep this PR conflict-free, as long as you don't add any commits to this branch yourself. You can also trigger a rebase manually by commenting with @depfu rebase.

All Depfu comment commands

@​depfu rebase

Rebases against your default branch and redoes this update

@​depfu recreate

Recreates this PR, overwriting any edits that you've made to it

@​depfu merge

Merges this PR once your tests are passing and conflicts are resolved

@​depfu close

Closes this PR and deletes the branch

@​depfu reopen

Restores the branch and reopens this PR (if it's closed)

@​depfu pause

Ignores all future updates for this dependency and closes this PR

@​depfu pause [minor|major]

Ignores all future minor/major updates for this dependency and closes this PR

@​depfu resume

Future versions of this dependency will create PRs again (leaves this PR as is)

[depfu]

Closed in favor of #130.