Skip to content

Bump workbox-google-analytics from 6.1.5 to 6.4.1#50

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/workbox-google-analytics-6.4.1
Closed

Bump workbox-google-analytics from 6.1.5 to 6.4.1#50
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/workbox-google-analytics-6.4.1

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Nov 16, 2021

Bumps workbox-google-analytics from 6.1.5 to 6.4.1.

Release notes

Sourced from workbox-google-analytics's releases.

Workbox v6.4.0 includes:

🎉 What's New?

  • We upgraded to TypeScript 4.4.3. This required us to declare inline some types that are now longer part of the TypeScript standard; see #2946 for more context. #2950

worbox-background-sync

  • You can check the number of requests in the sync queue with the new method size(). #2941

🐛 What's Fixed?

  • We upgraded @​surma/rollup-plugin-off-main to patch a vulnerability from the dependency. #2962
  • A missing sourcemap is no longer a fatal error when running injectManifest. It returns now returns a warning and continues with execution. #2959

🎁 Thank you

To our new contributors in this version: @​StephanBijzitter and @​fuzail-ahmed!

Workbox v6.3.0 includes a couple of bug fixes and several new features.

🎉 What's New?

Allow precaching "repair" when using subresource integrity

Although unexpected, there are edge cases where the precache might not be in an inconsistent state, most likely due to a developer manually deleting something in DevTools.

When this happens, workbox-precaching defaults to falling-back to using a network response (assuming the device is online) when there's a precaching miss. Up until now, workbox-precaching hasn't attempting to use this network response to repopulate the precache, because there are no guarantees that the network response corresponds to the version of the asset specified in the precache manifest.

However, if the precache entry includes an integrity property, then subresource integrity guarantees that the response does correspond to the same version of the asset in the manifest. So it should be safe to "repair" the cache with that response. #2921

IDB writes use relaxed durability

This small change to the way Workbox writes to IndexedDB should lead to slightly better performance, without any appreciable downsides. #2934

notifyAllClients option in BroadcastCacheUpdate

BroadcastCacheUpdate uses postMessage() to notify all open tabs controlled by the current service worker about a cache update. This default behavior is not changing.

Setting notifyAllClients: false when configuring BroadcastCacheUpdate and the associated plugin will result in postMessage() only communicating the update to the specific window client that triggered the fetch request which resulted in the cache update. #2920

All WorkboxEvents TypeScript types are now exported

This enhancement makes it easier to use TypeScript to write workbox-window event handlers. #2919

Debug logging when caching responses with Vary: headers

The presence of Vary: headers on a cached Response can make it difficult to properly match and delete cache entries. To make it clearer to developers when this is happening, the development builds of Workbox will now log a message to the console when a Response that's being cached includes a Vary: header. #2916

🐛 What's Fixed?

workbox-cli

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [workbox-google-analytics](https://github.com/googlechrome/workbox) from 6.1.5 to 6.4.1.
- [Release notes](https://github.com/googlechrome/workbox/releases)
- [Commits](GoogleChrome/workbox@v6.1.5...v6.4.1)

---
updated-dependencies:
- dependency-name: workbox-google-analytics
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Nov 16, 2021
@dependabot @github
Copy link
Copy Markdown
Author

dependabot Bot commented on behalf of github Nov 16, 2021

Dependabot tried to add @dunky11 as a reviewer to this PR, but received the following error from GitHub:

POST https://api.github.com/repos/CodeStudio-Inc/qraftstore-admin/pulls/50/requested_reviewers: 422 - Reviews may only be requested from collaborators. One or more of the users or teams you specified is not a collaborator of the CodeStudio-Inc/qraftstore-admin repository. // See: https://docs.github.com/rest/reference/pulls#request-reviewers-for-a-pull-request

@dependabot @github
Copy link
Copy Markdown
Author

dependabot Bot commented on behalf of github Dec 3, 2021

Superseded by #53.

@dependabot dependabot Bot closed this Dec 3, 2021
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/workbox-google-analytics-6.4.1 branch December 3, 2021 04:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants