Matt Godbolt
69cd083301
Minor package updates ( #8157 )
...
- fixes static asset handler cast
- adds now required lessThan to graph layout (cc @jeremy-rifkin I think)
2025-10-02 13:35:25 -05:00
Ofek
5eb5262c64
Various type improvements, mostly in tests ( #8144 )
2025-09-27 10:17:55 +03:00
Matt Godbolt
8f65000db8
Major package updates ( #8100 )
...
* Update sentry from 9.x to 10.x
* Upgrade Cypress
* Update marked to latest; was a node version drop only
Sentry: Nothing breaking in the limited functionality we use. Mostly an
OpenTelemetry upgrade. See
https://docs.sentry.io/platforms/javascript/migration/v9-to-v10/
Cypress: 14->15; nothing big that affects us:
https://docs.cypress.io/app/references/migration-guide
Marked: was a node version drop only
2025-09-12 15:13:16 -05:00
Matt Godbolt
f824efe73e
Library updates and lint fixes ( #8099 )
...
* Minor updates only
* Added explicit radix parameter (10) to all Number.parseInt() calls throughout the codebase (new lint rule)
* Updated several @ts-ignore comments to @ts-expect-error for better TypeScript practices (new lint rule)
* Removed unnecessary @ts-ignore comments in some mode files (ditto)
* Used "none return" based arrow functions for some map stuff
* Replaced a `map()` call that didn't return anything to a for() loop
* Fixed up some cypress stuff, noting work for the future
2025-09-12 14:23:49 -05:00
Matt Godbolt
c29ad46f3a
[Not Live; disabled by default] Add Claude Explain feature for AI-powered assembly explanations ( #7749 )
...
Add Claude Explain feature for AI-powered code explanations
This PR introduces Claude Explain, a new feature that provides AI-powered explanations of compiler output directly within Compiler Explorer.
Key features:
Claude Explain functionality:
- New explain view pane
- Explains compiler output with full context of source code and compilation output
- Configurable audience level and explanation type
- Response caching to improve performance and reduce API calls
- Usage statistics display showing requests used and token counts
User experience:
- Consent flow on first use explaining data handling and privacy
- AI disclaimer banner warning about potential LLM inaccuracies
- Respects "no-ai" directive in source code for users who don't want AI processing
Privacy and security:
- Data sent to Anthropic's Claude API as documented in privacy policy
- No data used for model training
- Clear consent required before first use
- Support for opting out via "no-ai" directive
The feature is marked as beta and can be enabled via configuration.
Co-authored-by: Claude <noreply@anthropic.com >
2025-08-05 09:31:48 -05:00
Matt Godbolt
f6ca992da0
Upgrade to FA 7 ( #7958 )
...
Carefully read the upgrade guide and nothing affects us. Also ran and
looked at all the icons I could thing of, in panes and dropdowns. All
looks good.
2025-07-28 11:02:21 -05:00
Matt Godbolt
8734c3e492
Update biome ( #7956 )
...
- latest biome, and fix its configuration
- fixes "static" content to be globally configured too (instead of
per-line)
- fixes issues:
- imports fixed up
- `Date.now()` vs `+new Date()`
- some unused things `_` prefixed
After discussion with the team, turned off the unused parameter warning.
2025-07-28 10:34:46 -05:00
Matt Godbolt
ba77b3ea97
Bump all the minor packages ( #7955 )
...
Picks up fix sinonjs/samsam#253 (yay)
2025-07-28 08:54:41 -05:00
dependabot[bot]
963bb8159a
Bump on-headers, compression, morgan and response-time ( #7924 )
...
Bumps [on-headers](https://github.com/jshttp/on-headers ) to 1.1.0 and
updates ancestor dependencies
[on-headers](https://github.com/jshttp/on-headers ),
[compression](https://github.com/expressjs/compression ),
[morgan](https://github.com/expressjs/morgan ) and
[response-time](https://github.com/expressjs/response-time ). These
dependencies need to be updated together.
Updates `on-headers` from 1.0.2 to 1.1.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/jshttp/on-headers/releases ">on-headers's
releases</a>.</em></p>
<blockquote>
<h2>1.1.0</h2>
<h2>Important</h2>
<ul>
<li>Fix <a
href="https://www.cve.org/CVERecord?id=CVE-2025-7339 ">CVE-2025-7339</a>
(<a
href="https://github.com/jshttp/on-headers/security/advisories/GHSA-76c9-3jph-rj3q ">GHSA-76c9-3jph-rj3q</a>)</li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>Migrate CI pipeline to GitHub actions by <a
href="https://github.com/carpasse "><code>@carpasse</code></a> in <a
href="https://redirect.github.com/jshttp/on-headers/pull/12 ">jshttp/on-headers#12</a></li>
<li>fix README.md badges by <a
href="https://github.com/carpasse "><code>@carpasse</code></a> in <a
href="https://redirect.github.com/jshttp/on-headers/pull/13 ">jshttp/on-headers#13</a></li>
<li>add OSSF scorecard action by <a
href="https://github.com/carpasse "><code>@carpasse</code></a> in <a
href="https://redirect.github.com/jshttp/on-headers/pull/14 ">jshttp/on-headers#14</a></li>
<li>fix: use <code>ubuntu-latest</code> as ci runner by <a
href="https://github.com/UlisesGascon "><code>@UlisesGascon</code></a>
in <a
href="https://redirect.github.com/jshttp/on-headers/pull/19 ">jshttp/on-headers#19</a></li>
<li>ci: apply OSSF Scorecard security best practices by <a
href="https://github.com/UlisesGascon "><code>@UlisesGascon</code></a>
in <a
href="https://redirect.github.com/jshttp/on-headers/pull/20 ">jshttp/on-headers#20</a></li>
<li>👷 add upstream change detection by <a
href="https://github.com/ctcpip "><code>@ctcpip</code></a> in <a
href="https://redirect.github.com/jshttp/on-headers/pull/31 ">jshttp/on-headers#31</a></li>
<li>✨ add script to update known hashes by <a
href="https://github.com/ctcpip "><code>@ctcpip</code></a> in <a
href="https://redirect.github.com/jshttp/on-headers/pull/32 ">jshttp/on-headers#32</a></li>
<li>💚 update CI - add newer node versions by <a
href="https://github.com/ctcpip "><code>@ctcpip</code></a> in <a
href="https://redirect.github.com/jshttp/on-headers/pull/33 ">jshttp/on-headers#33</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/carpasse "><code>@carpasse</code></a>
made their first contribution in <a
href="https://redirect.github.com/jshttp/on-headers/pull/12 ">jshttp/on-headers#12</a></li>
<li><a
href="https://github.com/UlisesGascon "><code>@UlisesGascon</code></a>
made their first contribution in <a
href="https://redirect.github.com/jshttp/on-headers/pull/19 ">jshttp/on-headers#19</a></li>
<li><a href="https://github.com/ctcpip "><code>@ctcpip</code></a> made
their first contribution in <a
href="https://redirect.github.com/jshttp/on-headers/pull/31 ">jshttp/on-headers#31</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/jshttp/on-headers/compare/v1.0.2...v1.1.0 ">https://github.com/jshttp/on-headers/compare/v1.0.2...v1.1.0 </a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/jshttp/on-headers/blob/master/HISTORY.md ">on-headers's
changelog</a>.</em></p>
<blockquote>
<h1>1.1.0 / 2025-07-17</h1>
<ul>
<li>Fix <a
href="https://www.cve.org/CVERecord?id=CVE-2025-7339 ">CVE-2025-7339</a>
(<a
href="https://github.com/jshttp/on-headers/security/advisories/GHSA-76c9-3jph-rj3q ">GHSA-76c9-3jph-rj3q</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4b017af88f "><code>4b017af</code></a>
1.1.0</li>
<li><a
href="b636f2d08e "><code>b636f2d</code></a>
♻️ refactor header array code</li>
<li><a
href="3e2c2d46c3 "><code>3e2c2d4</code></a>
✨ ignore falsy header keys, matching node behavior</li>
<li><a
href="172eb41b99 "><code>172eb41</code></a>
✨ support duplicate headers</li>
<li><a
href="c6e384908c "><code>c6e3849</code></a>
🔒 ️ fix array handling</li>
<li><a
href="6893518341 "><code>6893518</code></a>
💚 update CI - add newer node versions</li>
<li><a
href="56a345d82b "><code>56a345d</code></a>
✨ add script to update known hashes</li>
<li><a
href="175ab21715 "><code>175ab21</code></a>
👷 add upstream change detection (<a
href="https://redirect.github.com/jshttp/on-headers/issues/31 ">#31</a>)</li>
<li><a
href="ce0b2c8fcd "><code>ce0b2c8</code></a>
ci: apply OSSF Scorecard security best practices (<a
href="https://redirect.github.com/jshttp/on-headers/issues/20 ">#20</a>)</li>
<li><a
href="1a38c543e7 "><code>1a38c54</code></a>
fix: use <code>ubuntu-latest</code> as ci runner (<a
href="https://redirect.github.com/jshttp/on-headers/issues/19 ">#19</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/jshttp/on-headers/compare/v1.0.2...v1.1.0 ">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~ulisesgascon ">ulisesgascon</a>, a new
releaser for on-headers since your current version.</p>
</details>
<br />
Updates `compression` from 1.8.0 to 1.8.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/expressjs/compression/releases ">compression's
releases</a>.</em></p>
<blockquote>
<h2>v1.8.1</h2>
<h2>What's Changed</h2>
<ul>
<li>fix(docs): update multiple links from http to https by <a
href="https://github.com/Phillip9587 "><code>@Phillip9587</code></a> in
<a
href="https://redirect.github.com/expressjs/compression/pull/222 ">expressjs/compression#222</a></li>
<li>ci: add dependabot for github actions by <a
href="https://github.com/bjohansebas "><code>@bjohansebas</code></a> in
<a
href="https://redirect.github.com/expressjs/compression/pull/207 ">expressjs/compression#207</a></li>
<li>build(deps): bump github/codeql-action from 2.23.2 to 3.28.15 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/compression/pull/228 ">expressjs/compression#228</a></li>
<li>build(deps): bump ossf/scorecard-action from 2.3.1 to 2.4.1 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/compression/pull/229 ">expressjs/compression#229</a></li>
<li>build(deps-dev): bump eslint-plugin-import from 2.26.0 to 2.31.0 by
<a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/compression/pull/230 ">expressjs/compression#230</a></li>
<li>build(deps-dev): bump supertest from 6.2.3 to 6.3.4 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/compression/pull/231 ">expressjs/compression#231</a></li>
<li>[StepSecurity] ci: Harden GitHub Actions by <a
href="https://github.com/step-security-bot "><code>@step-security-bot</code></a>
in <a
href="https://redirect.github.com/expressjs/compression/pull/235 ">expressjs/compression#235</a></li>
<li>build(deps): bump github/codeql-action from 3.28.15 to 3.29.2 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/compression/pull/243 ">expressjs/compression#243</a></li>
<li>build(deps): bump actions/upload-artifact from 4.3.1 to 4.6.2 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/compression/pull/239 ">expressjs/compression#239</a></li>
<li>build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/compression/pull/240 ">expressjs/compression#240</a></li>
<li>build(deps): bump actions/checkout from 4.1.1 to 4.2.2 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/compression/pull/241 ">expressjs/compression#241</a></li>
<li>build(deps-dev): bump eslint-plugin-import from 2.31.0 to 2.32.0 by
<a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/compression/pull/244 ">expressjs/compression#244</a></li>
<li>deps: on-headers@1.1.0 by <a
href="https://github.com/UlisesGascon "><code>@UlisesGascon</code></a>
in <a
href="https://redirect.github.com/expressjs/compression/pull/246 ">expressjs/compression#246</a></li>
<li>Release: 1.8.1 by <a
href="https://github.com/UlisesGascon "><code>@UlisesGascon</code></a>
in <a
href="https://redirect.github.com/expressjs/compression/pull/247 ">expressjs/compression#247</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
made their first contribution in <a
href="https://redirect.github.com/expressjs/compression/pull/228 ">expressjs/compression#228</a></li>
<li><a
href="https://github.com/step-security-bot "><code>@step-security-bot</code></a>
made their first contribution in <a
href="https://redirect.github.com/expressjs/compression/pull/235 ">expressjs/compression#235</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/expressjs/compression/compare/1.8.0...v1.8.1 ">https://github.com/expressjs/compression/compare/1.8.0...v1.8.1 </a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/expressjs/compression/blob/master/HISTORY.md ">compression's
changelog</a>.</em></p>
<blockquote>
<h1>1.8.1 / 2025-07-17</h1>
<ul>
<li>deps: on-headers@~1.1.0
<ul>
<li>Fix <a
href="https://www.cve.org/CVERecord?id=CVE-2025-7339 ">CVE-2025-7339</a>
(<a
href="https://github.com/expressjs/on-headers/security/advisories/GHSA-76c9-3jph-rj3q ">GHSA-76c9-3jph-rj3q</a>)</li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="83a0c45fe1 "><code>83a0c45</code></a>
1.8.1</li>
<li><a
href="ce62713129 "><code>ce62713</code></a>
deps: on-headers@1.1.0 (<a
href="https://redirect.github.com/expressjs/compression/issues/246 ">#246</a>)</li>
<li><a
href="f4acb23985 "><code>f4acb23</code></a>
build(deps-dev): bump eslint-plugin-import from 2.31.0 to 2.32.0 (<a
href="https://redirect.github.com/expressjs/compression/issues/244 ">#244</a>)</li>
<li><a
href="6eaebe63f2 "><code>6eaebe6</code></a>
build(deps): bump actions/checkout from 4.1.1 to 4.2.2 (<a
href="https://redirect.github.com/expressjs/compression/issues/241 ">#241</a>)</li>
<li><a
href="37e062312f "><code>37e0623</code></a>
build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 (<a
href="https://redirect.github.com/expressjs/compression/issues/240 ">#240</a>)</li>
<li><a
href="bc436b2628 "><code>bc436b2</code></a>
build(deps): bump actions/upload-artifact from 4.3.1 to 4.6.2 (<a
href="https://redirect.github.com/expressjs/compression/issues/239 ">#239</a>)</li>
<li><a
href="2f9f572675 "><code>2f9f572</code></a>
build(deps): bump github/codeql-action from 3.28.15 to 3.29.2 (<a
href="https://redirect.github.com/expressjs/compression/issues/243 ">#243</a>)</li>
<li><a
href="5f13b148d2 "><code>5f13b14</code></a>
[StepSecurity] ci: Harden GitHub Actions (<a
href="https://redirect.github.com/expressjs/compression/issues/235 ">#235</a>)</li>
<li><a
href="76e0945481 "><code>76e0945</code></a>
build(deps-dev): bump supertest from 6.2.3 to 6.3.4 (<a
href="https://redirect.github.com/expressjs/compression/issues/231 ">#231</a>)</li>
<li><a
href="ae6ee809dc "><code>ae6ee80</code></a>
build(deps-dev): bump eslint-plugin-import from 2.26.0 to 2.31.0 (<a
href="https://redirect.github.com/expressjs/compression/issues/230 ">#230</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/expressjs/compression/compare/1.8.0...v1.8.1 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `morgan` from 1.10.0 to 1.10.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/expressjs/morgan/releases ">morgan's
releases</a>.</em></p>
<blockquote>
<h2>1.10.1</h2>
<h2>What's Changed</h2>
<ul>
<li>renaming simple to sample in readme by <a
href="https://github.com/ryhinchey "><code>@ryhinchey</code></a> in <a
href="https://redirect.github.com/expressjs/morgan/pull/237 ">expressjs/morgan#237</a></li>
<li>adding installation instructions to readme by <a
href="https://github.com/ryhinchey "><code>@ryhinchey</code></a> in <a
href="https://redirect.github.com/expressjs/morgan/pull/233 ">expressjs/morgan#233</a></li>
<li>chore: add support for OSSF scorecard reporting by <a
href="https://github.com/inigomarquinez "><code>@inigomarquinez</code></a>
in <a
href="https://redirect.github.com/expressjs/morgan/pull/291 ">expressjs/morgan#291</a></li>
<li>ci: replace travis with github actions by <a
href="https://github.com/inigomarquinez "><code>@inigomarquinez</code></a>
in <a
href="https://redirect.github.com/expressjs/morgan/pull/290 ">expressjs/morgan#290</a></li>
<li>docs: add example output for log formats by <a
href="https://github.com/jonchurch "><code>@jonchurch</code></a> in <a
href="https://redirect.github.com/expressjs/morgan/pull/299 ">expressjs/morgan#299</a></li>
<li>ci: use ubuntu-latest by <a
href="https://github.com/bjohansebas "><code>@bjohansebas</code></a> in
<a
href="https://redirect.github.com/expressjs/morgan/pull/301 ">expressjs/morgan#301</a></li>
<li>ci: apply OSSF Scorecard security best practices by <a
href="https://github.com/UlisesGascon "><code>@UlisesGascon</code></a>
in <a
href="https://redirect.github.com/expressjs/morgan/pull/300 ">expressjs/morgan#300</a></li>
<li>remove --bail by <a
href="https://github.com/jonchurch "><code>@jonchurch</code></a> in <a
href="https://redirect.github.com/expressjs/morgan/pull/314 ">expressjs/morgan#314</a></li>
<li>⬆️ bump on-headers by <a
href="https://github.com/ctcpip "><code>@ctcpip</code></a> in <a
href="https://redirect.github.com/expressjs/morgan/pull/319 ">expressjs/morgan#319</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/inigomarquinez "><code>@inigomarquinez</code></a>
made their first contribution in <a
href="https://redirect.github.com/expressjs/morgan/pull/291 ">expressjs/morgan#291</a></li>
<li><a href="https://github.com/jonchurch "><code>@jonchurch</code></a>
made their first contribution in <a
href="https://redirect.github.com/expressjs/morgan/pull/299 ">expressjs/morgan#299</a></li>
<li><a
href="https://github.com/bjohansebas "><code>@bjohansebas</code></a>
made their first contribution in <a
href="https://redirect.github.com/expressjs/morgan/pull/301 ">expressjs/morgan#301</a></li>
<li><a
href="https://github.com/UlisesGascon "><code>@UlisesGascon</code></a>
made their first contribution in <a
href="https://redirect.github.com/expressjs/morgan/pull/300 ">expressjs/morgan#300</a></li>
<li><a href="https://github.com/ctcpip "><code>@ctcpip</code></a> made
their first contribution in <a
href="https://redirect.github.com/expressjs/morgan/pull/319 ">expressjs/morgan#319</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/expressjs/morgan/compare/1.10.0...1.10.1 ">https://github.com/expressjs/morgan/compare/1.10.0...1.10.1 </a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/expressjs/morgan/blob/master/HISTORY.md ">morgan's
changelog</a>.</em></p>
<blockquote>
<h1>1.10.1 / 2025-07-17</h1>
<ul>
<li>deps: on-headers@~1.1.0
<ul>
<li>Fix <a
href="https://www.cve.org/CVERecord?id=CVE-2025-7339 ">CVE-2025-7339</a>
(<a
href="https://github.com/expressjs/on-headers/security/advisories/GHSA-76c9-3jph-rj3q ">GHSA-76c9-3jph-rj3q</a>)</li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="c1c7f107d2 "><code>c1c7f10</code></a>
🔖 1.10.1</li>
<li><a
href="eb896c2421 "><code>eb896c2</code></a>
⬆️ bump on-headers</li>
<li><a
href="1c3eec6ca5 "><code>1c3eec6</code></a>
remove --bail (<a
href="https://redirect.github.com/expressjs/morgan/issues/314 ">#314</a>)</li>
<li><a
href="b144728e07 "><code>b144728</code></a>
ci: apply OSSF Scorecard security best practices (<a
href="https://redirect.github.com/expressjs/morgan/issues/300 ">#300</a>)</li>
<li><a
href="68c2d2140d "><code>68c2d21</code></a>
ci: use ubuntu-latest (<a
href="https://redirect.github.com/expressjs/morgan/issues/301 ">#301</a>)</li>
<li><a
href="8740a194bf "><code>8740a19</code></a>
docs: add example output for log formats (<a
href="https://redirect.github.com/expressjs/morgan/issues/299 ">#299</a>)</li>
<li><a
href="efd6bff1ad "><code>efd6bff</code></a>
ci: migra to GitHub actions (<a
href="https://redirect.github.com/expressjs/morgan/issues/290 ">#290</a>)</li>
<li><a
href="3b89789447 "><code>3b89789</code></a>
ci: add support for OSSF scorecard reporting (<a
href="https://redirect.github.com/expressjs/morgan/issues/291 ">#291</a>)</li>
<li><a
href="19a6aa5369 "><code>19a6aa5</code></a>
docs: add installation section</li>
<li><a
href="b94f3ffe5c "><code>b94f3ff</code></a>
docs: change simple to sample in example descriptions</li>
<li>Additional commits viewable in <a
href="https://github.com/expressjs/morgan/compare/1.10.0...1.10.1 ">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~ulisesgascon ">ulisesgascon</a>, a new
releaser for morgan since your current version.</p>
</details>
<br />
Updates `response-time` from 2.3.3 to 2.3.4
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/expressjs/response-time/releases ">response-time's
releases</a>.</em></p>
<blockquote>
<h2>v2.3.4</h2>
<h2>What's Changed</h2>
<ul>
<li>ci: add CodeQL (SAST) by <a
href="https://github.com/bjohansebas "><code>@bjohansebas</code></a> in
<a
href="https://redirect.github.com/expressjs/response-time/pull/34 ">expressjs/response-time#34</a></li>
<li>ci: limit the scope to main branch by <a
href="https://github.com/UlisesGascon "><code>@UlisesGascon</code></a>
in <a
href="https://redirect.github.com/expressjs/response-time/pull/33 ">expressjs/response-time#33</a></li>
<li>[StepSecurity] Apply security best practices by <a
href="https://github.com/step-security-bot "><code>@step-security-bot</code></a>
in <a
href="https://redirect.github.com/expressjs/response-time/pull/37 ">expressjs/response-time#37</a></li>
<li>build(deps): bump coverallsapp/github-action from 1.2.5 to 2.3.6 by
<a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/response-time/pull/38 ">expressjs/response-time#38</a></li>
<li>build(deps-dev): bump eslint-plugin-import from 2.10.0 to 2.31.0 by
<a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/response-time/pull/40 ">expressjs/response-time#40</a></li>
<li>build(deps-dev): bump eslint-plugin-standard from 3.0.1 to 3.1.0 by
<a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/response-time/pull/41 ">expressjs/response-time#41</a></li>
<li>build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.2 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/response-time/pull/42 ">expressjs/response-time#42</a></li>
<li>build(deps): bump github/codeql-action from 3.27.0 to 3.28.18 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/response-time/pull/43 ">expressjs/response-time#43</a></li>
<li>build(deps-dev): bump eslint-plugin-promise from 3.7.0 to 3.8.0 by
<a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/response-time/pull/46 ">expressjs/response-time#46</a></li>
<li>build(deps-dev): bump eslint-plugin-markdown from 1.0.0-beta.6 to
1.0.2 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/response-time/pull/44 ">expressjs/response-time#44</a></li>
<li>build(deps-dev): bump mocha from 6.1.4 to 6.2.3 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/response-time/pull/45 ">expressjs/response-time#45</a></li>
<li>build(deps-dev): bump eslint-plugin-import from 2.31.0 to 2.32.0 by
<a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/response-time/pull/47 ">expressjs/response-time#47</a></li>
<li>build(deps): bump github/codeql-action from 3.28.18 to 3.29.2 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/response-time/pull/48 ">expressjs/response-time#48</a></li>
<li>deps: on-headers@1.1.0 by <a
href="https://github.com/UlisesGascon "><code>@UlisesGascon</code></a>
in <a
href="https://redirect.github.com/expressjs/response-time/pull/49 ">expressjs/response-time#49</a></li>
<li>🔖 v2.3.4 by <a
href="https://github.com/ctcpip "><code>@ctcpip</code></a> in <a
href="https://redirect.github.com/expressjs/response-time/pull/50 ">expressjs/response-time#50</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/bjohansebas "><code>@bjohansebas</code></a>
made their first contribution in <a
href="https://redirect.github.com/expressjs/response-time/pull/34 ">expressjs/response-time#34</a></li>
<li><a
href="https://github.com/step-security-bot "><code>@step-security-bot</code></a>
made their first contribution in <a
href="https://redirect.github.com/expressjs/response-time/pull/37 ">expressjs/response-time#37</a></li>
<li><a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
made their first contribution in <a
href="https://redirect.github.com/expressjs/response-time/pull/38 ">expressjs/response-time#38</a></li>
<li><a href="https://github.com/ctcpip "><code>@ctcpip</code></a> made
their first contribution in <a
href="https://redirect.github.com/expressjs/response-time/pull/50 ">expressjs/response-time#50</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/expressjs/response-time/compare/2.3.3...v2.3.4 ">https://github.com/expressjs/response-time/compare/2.3.3...v2.3.4 </a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/expressjs/response-time/blob/master/HISTORY.md ">response-time's
changelog</a>.</em></p>
<blockquote>
<h1>2.3.4 / 2025-07-17</h1>
<ul>
<li>deps: on-headers@~1.1.0
<ul>
<li>Fix <a
href="https://www.cve.org/CVERecord?id=CVE-2025-7339 ">CVE-2025-7339</a>
(<a
href="https://github.com/expressjs/on-headers/security/advisories/GHSA-76c9-3jph-rj3q ">GHSA-76c9-3jph-rj3q</a>)</li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="81090b8293 "><code>81090b8</code></a>
🔖 v2.3.4 (<a
href="https://redirect.github.com/expressjs/response-time/issues/50 ">#50</a>)</li>
<li><a
href="c9c8566dd0 "><code>c9c8566</code></a>
deps: on-headers@1.1.0 (<a
href="https://redirect.github.com/expressjs/response-time/issues/49 ">#49</a>)</li>
<li><a
href="fabc31f897 "><code>fabc31f</code></a>
build(deps): bump github/codeql-action from 3.28.18 to 3.29.2 (<a
href="https://redirect.github.com/expressjs/response-time/issues/48 ">#48</a>)</li>
<li><a
href="f53fa10286 "><code>f53fa10</code></a>
build(deps-dev): bump eslint-plugin-import from 2.31.0 to 2.32.0 (<a
href="https://redirect.github.com/expressjs/response-time/issues/47 ">#47</a>)</li>
<li><a
href="97138acd8e "><code>97138ac</code></a>
build(deps-dev): bump mocha from 6.1.4 to 6.2.3 (<a
href="https://redirect.github.com/expressjs/response-time/issues/45 ">#45</a>)</li>
<li><a
href="77d4e1d2a4 "><code>77d4e1d</code></a>
build(deps-dev): bump eslint-plugin-markdown from 1.0.0-beta.6 to 1.0.2
(<a
href="https://redirect.github.com/expressjs/response-time/issues/44 ">#44</a>)</li>
<li><a
href="6679ce0300 "><code>6679ce0</code></a>
build(deps-dev): bump eslint-plugin-promise from 3.7.0 to 3.8.0 (<a
href="https://redirect.github.com/expressjs/response-time/issues/46 ">#46</a>)</li>
<li><a
href="8af656205d "><code>8af6562</code></a>
build(deps): bump github/codeql-action from 3.27.0 to 3.28.18 (<a
href="https://redirect.github.com/expressjs/response-time/issues/43 ">#43</a>)</li>
<li><a
href="e648da6442 "><code>e648da6</code></a>
build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.2 (<a
href="https://redirect.github.com/expressjs/response-time/issues/42 ">#42</a>)</li>
<li><a
href="4f8b029be6 "><code>4f8b029</code></a>
build(deps-dev): bump eslint-plugin-standard from 3.0.1 to 3.1.0 (<a
href="https://redirect.github.com/expressjs/response-time/issues/41 ">#41</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/expressjs/response-time/compare/2.3.3...v2.3.4 ">compare
view</a></li>
</ul>
</details>
<br />
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/compiler-explorer/compiler-explorer/network/alerts ).
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-07-23 00:51:26 +02:00
Mats Jun Larsen
d147341663
Serve all static asset files over the CDN ( #7795 )
2025-06-28 14:01:36 +02:00
Matt Godbolt
577094cf11
Add vitest related to pre-commit with expensive test skipping ( #7854 )
...
## Summary
This PR improves the pre-commit hook performance by:
- Using `vitest related` to run only tests affected by changed files
- Adding ability to skip expensive tests (filter tests) during
pre-commit
- Providing a consistent mechanism for skipping expensive tests
## Changes
- Modified `lint-staged.config.mjs` to run `vitest related` with
`SKIP_EXPENSIVE_TESTS=true`
- Updated `test/filter-tests.ts` to use idiomatic `describe.skipIf()`
for conditional test execution
- Changed `test-min` script to use `SKIP_EXPENSIVE_TESTS` environment
variable instead of `--exclude`
- Updated `CLAUDE.md` with documentation about the new test workflow
## Impact
- Pre-commit hooks are now much faster as they:
- Only run tests related to changed files
- Skip 688 expensive filter tests
- Use the same skipping mechanism as `npm run test-min`
## Testing
- ✅ Verified `vitest related` correctly identifies and runs related
tests
- ✅ Confirmed filter tests are skipped when `SKIP_EXPENSIVE_TESTS=true`
- ✅ Tested that full test suite still runs all tests when env var is not
set
- ✅ Pre-commit hooks work correctly with the new setup
🤖 Generated with [Claude Code](https://claude.ai/code )
---------
Co-authored-by: Claude <noreply@anthropic.com >
2025-06-22 14:34:16 -05:00
Matt Godbolt
23fad10939
Unit testing the frontend ( #7829 )
...
This adds some unit tests for the front end.
- configures "frontend tests" as a unit tests in `static/tests`,
removing the old cypress-requiring "unit" tests
- hack enough of a DOM to get things working
- port motd and id tests
- *adds* a golden layout checks (see #7807 )
- Updates READMEs etc
---------
Co-authored-by: Claude <noreply@anthropic.com >
2025-06-19 08:46:57 -05:00
Matt Godbolt
9e9e035b28
Rephrase frontend imports ( #7824 )
...
- Removes `rootDirs` so all imports will be relative in the frontend
- Updates (and unifies) imports to be `../types/...` etc instead of
relying on "types" being in the rootDir for the frontend.
- Fixes one type that was being picked up from `lib` in the frontend.
- Adds a precommit hook to check in future
Paves the way to writing _unit_ tests for the frontend for the subset of
the frontend code we can import from `node` (which might be a lot of
it!)
2025-06-18 09:04:23 -05:00
Matt Godbolt
e2a834bcc8
Various package updates ( #7799 )
...
Updated all packages with npm update -S. Removed deprecated
@types/url-join
Fixed TypeScript error caused by package updates:
- The `at()` method is ES2022, but frontend code targets ES5 for
compatibility
- Changed `this.compilerPickers.at(-1)` to
`this.compilerPickers[this.compilerPickers.length - 1]`
Co-authored-by: Claude <noreply@anthropic.com >
2025-06-12 09:17:14 -05:00
Matt Godbolt
917c7f9dca
Monthly upgrade of all the things ( #7758 )
...
Tested with a local run and a poke in the UI
2025-06-04 09:01:27 -05:00
Matt Godbolt
74e5f237eb
Update all the things ( #7699 )
...
All minor updates, commander was one major update but only to support
node 20 (which we're already past).
Tests pass, everything loaded up locally.
2025-05-19 06:51:21 -05:00
Matt Godbolt
ad8b991a0c
Fix npm run check (not that I think anyone uses it?)
2025-05-13 11:41:48 -05:00
Matt Godbolt
54c942ba76
Replace nopt with commander.js for argument parsing ( #7673 )
...
- Replace nopt with commander.js for better command-line argument parsing
- Add automatic help generation with detailed descriptions
- Maintain backward compatibility with existing arguments
- Remove unused nopt dependency from package.json
🤖 Generated with [Claude Code](https://claude.ai/code )
---------
Co-authored-by: Claude <noreply@anthropic.com >
2025-05-12 12:49:28 -05:00
Matt Godbolt
04bcf21900
Bump to latest sentry; preload etc ( #7617 )
...
New node sentry prefers some node.js "preload" nonsense. I use this
"hack" to avoid having to make a lock-step change to the runner: tested
locally and then deployed to staging and tested there with both
server-side and client-side errors.
2025-04-26 13:36:11 -05:00
Matt Godbolt
cf7ef2aa3b
Minor updates 20240424 ( #7609 )
2025-04-25 21:33:49 -05:00
Detjon Mataj
c79e41f77a
Remove dependency on request and replace it with node's builtin fetch ( #6800 )
...
resolves #5289
2025-04-25 21:24:07 -05:00
Matt Godbolt
637564f389
Migrate to Bootstrap 5 ( #7582 )
...
This PR completes the migration from Bootstrap 4 to Bootstrap 5.3.5
following the plan outlined in
[docs/Bootstrap5Migration.md](https://github.com/compiler-explorer/compiler-explorer/blob/mg/bootstrap5/docs/Bootstrap5Migration.md ).
## Migration Process
We followed a phased approach as documented in the migration plan:
1. **Phase 1: Dependency Updates and Basic Setup**
- Updated Bootstrap from 4.6.2 to 5.3.5
- Added @popperjs/core dependency (replacing Popper.js)
- Updated Tom Select theme from bootstrap4 to bootstrap5
2. **Phase 2: Global CSS Class Migration**
- Updated directional utility classes (ml/mr → ms/me)
- Updated floating utility classes (float-left/right → float-start/end)
- Updated text alignment classes (text-left/right → text-start/end)
3. **Phase 3: HTML Attribute Updates**
- Updated data attributes to use Bootstrap 5 prefixes (data-bs-toggle,
data-bs-target, etc.)
- Fixed tab navigation issues
4. **Phase 4: JavaScript API Compatibility Layer**
- Created bootstrap-utils.ts compatibility layer
- Updated component initialization for modals, dropdowns, popovers, etc.
5. **Phase 5: Component Migration**
- Updated and tested specific components (modals, dropdowns, toasts,
etc.)
- Fixed styling issues in cards and button groups
6. **Phase 6: Form System Updates**
- Updated form control classes to Bootstrap 5 standards
- Updated checkbox/radio markup patterns
- Simplified input groups
7. **Phase 7: Navbar Structure Updates**
- Updated navbar structure with container-fluid
- Fixed responsive behavior
8. **Phase 8: SCSS Variables and Theming**
- Added custom CSS fixes for navbar alignment
- Verified theme compatibility
9. **Phase 9: Accessibility Improvements**
- Updated sr-only to visually-hidden
- Added proper ARIA attributes
- Enhanced screen reader support
## Key Changes
- No more jQuery dependency in Bootstrap 5
- New prefix for data attributes (data-bs-*)
- Improved accessibility with ARIA attributes
- Updated positioning classes (start/end instead of left/right)
- Simplified input group structure
## Test Plan
1. **Navigation Testing**
- Verify all dropdown menus open and close properly
- Test mobile menu responsiveness
- Check tab navigation in settings dialog
2. **Component Testing**
- Verify all modals open and close correctly (settings, share,
load/save)
- Test tooltips and popovers
- Check form controls in different dialogs
3. **Layout Testing**
- Test responsiveness on different screen sizes
- Verify proper alignment of elements
- Check dark mode compatibility
4. **Specific Features to Test**
- Compiler selection and options
- Share dialog functionality
- Settings dialog
- Tree view (IDE mode)
- Font selection dropdown
5. **Browser Testing**
- Test in Chrome, Firefox, Safari
- Test in mobile browsers
## Note on Further Improvements
After this migration is stable, we could consider Phase 12: removing
jQuery dependency entirely, as Bootstrap 5 no longer requires it. This
would be a separate effort.
---------
Co-authored-by: Claude <noreply@anthropic.com >
2025-04-24 12:10:37 -05:00
Matt Godbolt
20048616da
Migrate to express 5 ( #7572 )
...
Main changes:
- type checker cares about the return value (`void`) of handlers, so no
more `return res.send("...")` as that returns `express` type.
- regexes on slugs no longer supported, but we weren't really using them
in any meaningful way. The two places that had to be updated:
- `/clientstate/:clientstate64` - now uses a regex directly and tests added (thanks @partouf for spotting #4844 )
- `/bits/:bits.html` - was some `\w+` but I believe that's unnecessary
for the same reasons
- actually call the Sentry handler. I don't know if this actually worked
before but the API checks suggest not.
2025-04-19 14:34:41 -05:00
Matt Godbolt
3b7599d817
Update chart and copy webpack ( #7570 )
...
Very uncontentious bumps...
2025-04-15 13:27:05 -05:00
Mats Jun Larsen
5e2937fdf9
Configure packageManager field to enable corepack compatability ( #7534 )
2025-04-15 04:10:18 +00:00
Matt Godbolt
6801d7b9a9
Update latest everything (minor only) ( #7564 )
2025-04-14 16:01:11 -05:00
Matt Godbolt
a4995a9c1c
Move to using async file reads ( #7433 )
...
Remove most, if not all, of the synchronous file reads. Hopefully this
will help a little with performance and "event loop lag". Mostly, it's
"try not to use third party packages when builtins now do the work".
Local testing seems OK - but needs a good poke around on staging to
exercise all the paths.
2025-02-26 11:11:12 -06:00
Matt Godbolt
619e4bd2e4
New temp directory tracker ( #7452 )
...
Replaces aging `temp` with a simple, bespoke solution. Reduces the
number of deprecated/out-of-date dependencies we pick up.
Closes #7445 .
2025-02-26 10:56:26 -06:00
Matt Godbolt
669abcb70d
February major updates ( #7443 )
...
- vitest and all test types etc (test pass). Needed a few minor changes
to match new behaviour of `expect().toMatchSnapshot` (trailing
whitespace is now important)
- `which` - read the changes and spot-checked it. They dropped <v18
- `webpack-cli` - changes don't affect our usage. Checked with a local
`webpack` build and a "prod" run (`make` no dev)
- `enhanced-ms` - checked and updated to use new functionality
- `typescript` - all tests pass, no warnings.
Tested the site locally too.
2025-02-25 13:05:50 -06:00
Matt Godbolt
349a1631db
Minor package updates ( #7442 )
2025-02-25 10:56:56 -06:00
Matt Godbolt
7d4f77d84a
Misc fixes for unbuffering ( #7404 )
...
- Wrap the executable in `stdbuf` higher up than in `executeDirect`
which means we run `stdbuf` _inside_ the jail instead of outside it when
running. This fixes jail/stdbuf interactions.
- Install `which` types to avoid a `no-ts`
- Ensure `stdbuf` et al is mapped in compilers-and-tools
- As a fly-by also unify the configuration of NVidia devices between
execution and compilation.
2025-02-18 15:17:15 -06:00
Matt Godbolt
cfcbcd7423
Minor bump all packages (npm update -S) ( #7401 )
2025-02-18 13:27:36 -06:00
Matt Godbolt
3aeed42066
Upgrade to node 20 minimum, target node 22 ( #7343 )
...
Co-authored-by: Mats Jun Larsen <mats@jun.codes >
2025-02-18 12:43:21 -06:00
dependabot[bot]
086443d67e
Bump vitest and @vitest/coverage-v8 ( #7393 )
...
Bumps
[vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest )
and
[@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8 ).
These dependencies needed to be updated together.
Updates `vitest` from 2.1.4 to 2.1.9
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitest-dev/vitest/releases ">vitest's
releases</a>.</em></p>
<blockquote>
<h2>v2.1.9</h2>
<p>This release includes security patches for:</p>
<ul>
<li><a
href="https://github.com/vitest-dev/vitest/security/advisories/GHSA-8gvc-j273-4wm5 ">Browser
mode serves arbitrary files | CVE-2025-24963</a></li>
<li><a
href="https://github.com/vitest-dev/vitest/security/advisories/GHSA-9crc-q9x8-hgqq ">Remote
Code Execution when accessing a malicious website while Vitest API
server is listening | CVE-2025-24964</a></li>
</ul>
<h3> 🐞 Bug Fixes</h3>
<ul>
<li>backport <a
href="https://redirect.github.com/vitest-dev/vitest/issues/7317 ">vitest-dev/vitest#7317</a>
to v2 - by <a
href="https://github.com/hi-ogawa "><code>@hi-ogawa</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/pull/7318 ">vitest-dev/vitest#7318</a></li>
<li>(backport <a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/7340 ">#7340</a>
to v2) restrict served files from <code>/__screenshot-error</code> - by
<a href="https://github.com/hi-ogawa "><code>@hi-ogawa</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/pull/7343 ">vitest-dev/vitest#7343</a></li>
</ul>
<h5> <a
href="https://github.com/vitest-dev/vitest/compare/v2.1.8...v2.1.9 ">View
changes on GitHub</a></h5>
<h2>v2.1.8</h2>
<h3> 🐞 Bug Fixes</h3>
<ul>
<li>Support Node 21 - by <a
href="https://github.com/sheremet-va "><code>@sheremet-va</code></a> <a
href="https://github.com/vitest-dev/vitest/commit/92f7a2ad "><!-- raw
HTML omitted -->(92f7a)<!-- raw HTML omitted --></a></li>
</ul>
<h5> <a
href="https://github.com/vitest-dev/vitest/compare/v2.1.7...v2.1.8 ">View
changes on GitHub</a></h5>
<h2>v2.1.7</h2>
<h3> 🐞 Bug Fixes</h3>
<ul>
<li>Revert support for Vite 6 - by <a
href="https://github.com/sheremet-va "><code>@sheremet-va</code></a> <a
href="https://github.com/vitest-dev/vitest/commit/fbe5c39d "><!-- raw
HTML omitted -->(fbe5c)<!-- raw HTML omitted --></a>
<ul>
<li>This introduced some breaking changes (<a
href="https://redirect.github.com/vitest-dev/vitest/issues/6992 ">vitest-dev/vitest#6992</a>).
We will enable support for it later. In the meantime, you can still use
<code>pnpm.overrides</code> or yarn resolutions to override the
<code>vite</code> version in the <code>vitest</code> package - the APIs
are compatible.</li>
</ul>
</li>
</ul>
<h5> <a
href="https://github.com/vitest-dev/vitest/compare/v2.1.6...v2.1.7 ">View
changes on GitHub</a></h5>
<h2>v2.1.6</h2>
<h2>🚀 Features</h2>
<ul>
<li>Support Vite 6</li>
</ul>
<h5> <a
href="https://github.com/vitest-dev/vitest/compare/v2.1.5...v2.1.6 ">View
changes on GitHub</a></h5>
<h2>v2.1.5</h2>
<h3> 🐞 Bug Fixes</h3>
<ul>
<li><code>dangerouslyIgnoreUnhandledErrors</code> without base reporter
- by <a
href="https://github.com/AriPerkkio "><code>@AriPerkkio</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/6808 ">vitest-dev/vitest#6808</a>
<a href="https://github.com/vitest-dev/vitest/commit/0bf0ab00 "><!-- raw
HTML omitted -->(0bf0a)<!-- raw HTML omitted --></a></li>
<li>Capture <code>unhandledRejection</code> even when base reporter is
not used - by <a
href="https://github.com/AriPerkkio "><code>@AriPerkkio</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/6812 ">vitest-dev/vitest#6812</a>
<a href="https://github.com/vitest-dev/vitest/commit/8878b04d "><!-- raw
HTML omitted -->(8878b)<!-- raw HTML omitted --></a></li>
<li>Don't change the working directory when loading workspace projects
- by <a
href="https://github.com/sheremet-va "><code>@sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/6811 ">vitest-dev/vitest#6811</a>
<a href="https://github.com/vitest-dev/vitest/commit/f0aeaca8 "><!-- raw
HTML omitted -->(f0aea)<!-- raw HTML omitted --></a></li>
<li>Remove <code>sequence.concurrent</code> from the
<code>RuntimeConfig</code> type - by <a
href="https://github.com/sheremet-va "><code>@sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/6880 ">vitest-dev/vitest#6880</a>
<a href="https://github.com/vitest-dev/vitest/commit/6af73d93 "><!-- raw
HTML omitted -->(6af73)<!-- raw HTML omitted --></a></li>
<li>Stop the runner before restarting, restart on workspace config
change - by <a
href="https://github.com/sheremet-va "><code>@sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/6859 ">vitest-dev/vitest#6859</a>
<a href="https://github.com/vitest-dev/vitest/commit/b01df47d "><!-- raw
HTML omitted -->(b01df)<!-- raw HTML omitted --></a></li>
<li>Don't rerun on Esc or Ctrl-C during watch filter - by <a
href="https://github.com/hi-ogawa "><code>@hi-ogawa</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/6895 ">vitest-dev/vitest#6895</a>
<a href="https://github.com/vitest-dev/vitest/commit/98f76ea7 "><!-- raw
HTML omitted -->(98f76)<!-- raw HTML omitted --></a></li>
<li>Print ssrTransform error - by <a
href="https://github.com/hi-ogawa "><code>@hi-ogawa</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/6885 ">vitest-dev/vitest#6885</a>
<a href="https://github.com/vitest-dev/vitest/commit/4c96cce7 "><!-- raw
HTML omitted -->(4c96c)<!-- raw HTML omitted --></a></li>
<li>Throw an error and a warning if <code>.poll</code>,
<code>.element</code>, <code>.rejects</code>/<code>.resolves</code>, and
<code>locator.*</code> weren't awaited - by <a
href="https://github.com/sheremet-va "><code>@sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/6877 ">vitest-dev/vitest#6877</a>
<a href="https://github.com/vitest-dev/vitest/commit/93b67c24 "><!-- raw
HTML omitted -->(93b67)<!-- raw HTML omitted --></a></li>
<li><strong>browser</strong>:
<ul>
<li>Don't process the default css styles - by <a
href="https://github.com/sheremet-va "><code>@sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/6861 ">vitest-dev/vitest#6861</a>
<a href="https://github.com/vitest-dev/vitest/commit/0d67f04b "><!-- raw
HTML omitted -->(0d67f)<!-- raw HTML omitted --></a></li>
<li>Support non US key input - by <a
href="https://github.com/hi-ogawa "><code>@hi-ogawa</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/6873 ">vitest-dev/vitest#6873</a>
<a href="https://github.com/vitest-dev/vitest/commit/5969d8da "><!-- raw
HTML omitted -->(5969d)<!-- raw HTML omitted --></a></li>
</ul>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="c9e59a089d "><code>c9e59a0</code></a>
chore: release v2.1.9</li>
<li><a
href="e0fe1d81e2 "><code>e0fe1d8</code></a>
fix: backport <a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/7317 ">#7317</a>
to v2 (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/7318 ">#7318</a>)</li>
<li><a
href="d69cc75698 "><code>d69cc75</code></a>
bump: 2.1.8</li>
<li><a
href="92f7a2ad18 "><code>92f7a2a</code></a>
fix: support Node 21</li>
<li><a
href="81ed45b3a4 "><code>81ed45b</code></a>
chore: release v2.1.7</li>
<li><a
href="fbe5c39d88 "><code>fbe5c39</code></a>
fix: revert support for Vite 6</li>
<li><a
href="b936702deb "><code>b936702</code></a>
bump: 2.1.6</li>
<li><a
href="32f23b98b4 "><code>32f23b9</code></a>
chore: release v2.1.5</li>
<li><a
href="417bdb423d "><code>417bdb4</code></a>
fix(browser): init browsers eagerly when tests are running (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/6876 ">#6876</a>)</li>
<li><a
href="93b67c24b1 "><code>93b67c2</code></a>
fix: throw an error and a warning if <code>.poll</code>,
<code>.element</code>, <code>.rejects</code>/`.resolv...</li>
<li>Additional commits viewable in <a
href="https://github.com/vitest-dev/vitest/commits/v2.1.9/packages/vitest ">compare
view</a></li>
</ul>
</details>
<br />
Updates `@vitest/coverage-v8` from 2.1.4 to 2.1.9
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitest-dev/vitest/releases "><code>@vitest/coverage-v8</code>'s
releases</a>.</em></p>
<blockquote>
<h2>v2.1.9</h2>
<p>This release includes security patches for:</p>
<ul>
<li><a
href="https://github.com/vitest-dev/vitest/security/advisories/GHSA-8gvc-j273-4wm5 ">Browser
mode serves arbitrary files | CVE-2025-24963</a></li>
<li><a
href="https://github.com/vitest-dev/vitest/security/advisories/GHSA-9crc-q9x8-hgqq ">Remote
Code Execution when accessing a malicious website while Vitest API
server is listening | CVE-2025-24964</a></li>
</ul>
<h3> 🐞 Bug Fixes</h3>
<ul>
<li>backport <a
href="https://redirect.github.com/vitest-dev/vitest/issues/7317 ">vitest-dev/vitest#7317</a>
to v2 - by <a
href="https://github.com/hi-ogawa "><code>@hi-ogawa</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/pull/7318 ">vitest-dev/vitest#7318</a></li>
<li>(backport <a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8/issues/7340 ">#7340</a>
to v2) restrict served files from <code>/__screenshot-error</code> - by
<a href="https://github.com/hi-ogawa "><code>@hi-ogawa</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/pull/7343 ">vitest-dev/vitest#7343</a></li>
</ul>
<h5> <a
href="https://github.com/vitest-dev/vitest/compare/v2.1.8...v2.1.9 ">View
changes on GitHub</a></h5>
<h2>v2.1.8</h2>
<h3> 🐞 Bug Fixes</h3>
<ul>
<li>Support Node 21 - by <a
href="https://github.com/sheremet-va "><code>@sheremet-va</code></a> <a
href="https://github.com/vitest-dev/vitest/commit/92f7a2ad "><!-- raw
HTML omitted -->(92f7a)<!-- raw HTML omitted --></a></li>
</ul>
<h5> <a
href="https://github.com/vitest-dev/vitest/compare/v2.1.7...v2.1.8 ">View
changes on GitHub</a></h5>
<h2>v2.1.7</h2>
<h3> 🐞 Bug Fixes</h3>
<ul>
<li>Revert support for Vite 6 - by <a
href="https://github.com/sheremet-va "><code>@sheremet-va</code></a> <a
href="https://github.com/vitest-dev/vitest/commit/fbe5c39d "><!-- raw
HTML omitted -->(fbe5c)<!-- raw HTML omitted --></a>
<ul>
<li>This introduced some breaking changes (<a
href="https://redirect.github.com/vitest-dev/vitest/issues/6992 ">vitest-dev/vitest#6992</a>).
We will enable support for it later. In the meantime, you can still use
<code>pnpm.overrides</code> or yarn resolutions to override the
<code>vite</code> version in the <code>vitest</code> package - the APIs
are compatible.</li>
</ul>
</li>
</ul>
<h5> <a
href="https://github.com/vitest-dev/vitest/compare/v2.1.6...v2.1.7 ">View
changes on GitHub</a></h5>
<h2>v2.1.6</h2>
<h2>🚀 Features</h2>
<ul>
<li>Support Vite 6</li>
</ul>
<h5> <a
href="https://github.com/vitest-dev/vitest/compare/v2.1.5...v2.1.6 ">View
changes on GitHub</a></h5>
<h2>v2.1.5</h2>
<h3> 🐞 Bug Fixes</h3>
<ul>
<li><code>dangerouslyIgnoreUnhandledErrors</code> without base reporter
- by <a
href="https://github.com/AriPerkkio "><code>@AriPerkkio</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/6808 ">vitest-dev/vitest#6808</a>
<a href="https://github.com/vitest-dev/vitest/commit/0bf0ab00 "><!-- raw
HTML omitted -->(0bf0a)<!-- raw HTML omitted --></a></li>
<li>Capture <code>unhandledRejection</code> even when base reporter is
not used - by <a
href="https://github.com/AriPerkkio "><code>@AriPerkkio</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/6812 ">vitest-dev/vitest#6812</a>
<a href="https://github.com/vitest-dev/vitest/commit/8878b04d "><!-- raw
HTML omitted -->(8878b)<!-- raw HTML omitted --></a></li>
<li>Don't change the working directory when loading workspace projects
- by <a
href="https://github.com/sheremet-va "><code>@sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/6811 ">vitest-dev/vitest#6811</a>
<a href="https://github.com/vitest-dev/vitest/commit/f0aeaca8 "><!-- raw
HTML omitted -->(f0aea)<!-- raw HTML omitted --></a></li>
<li>Remove <code>sequence.concurrent</code> from the
<code>RuntimeConfig</code> type - by <a
href="https://github.com/sheremet-va "><code>@sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/6880 ">vitest-dev/vitest#6880</a>
<a href="https://github.com/vitest-dev/vitest/commit/6af73d93 "><!-- raw
HTML omitted -->(6af73)<!-- raw HTML omitted --></a></li>
<li>Stop the runner before restarting, restart on workspace config
change - by <a
href="https://github.com/sheremet-va "><code>@sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/6859 ">vitest-dev/vitest#6859</a>
<a href="https://github.com/vitest-dev/vitest/commit/b01df47d "><!-- raw
HTML omitted -->(b01df)<!-- raw HTML omitted --></a></li>
<li>Don't rerun on Esc or Ctrl-C during watch filter - by <a
href="https://github.com/hi-ogawa "><code>@hi-ogawa</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/6895 ">vitest-dev/vitest#6895</a>
<a href="https://github.com/vitest-dev/vitest/commit/98f76ea7 "><!-- raw
HTML omitted -->(98f76)<!-- raw HTML omitted --></a></li>
<li>Print ssrTransform error - by <a
href="https://github.com/hi-ogawa "><code>@hi-ogawa</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/6885 ">vitest-dev/vitest#6885</a>
<a href="https://github.com/vitest-dev/vitest/commit/4c96cce7 "><!-- raw
HTML omitted -->(4c96c)<!-- raw HTML omitted --></a></li>
<li>Throw an error and a warning if <code>.poll</code>,
<code>.element</code>, <code>.rejects</code>/<code>.resolves</code>, and
<code>locator.*</code> weren't awaited - by <a
href="https://github.com/sheremet-va "><code>@sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/6877 ">vitest-dev/vitest#6877</a>
<a href="https://github.com/vitest-dev/vitest/commit/93b67c24 "><!-- raw
HTML omitted -->(93b67)<!-- raw HTML omitted --></a></li>
<li><strong>browser</strong>:
<ul>
<li>Don't process the default css styles - by <a
href="https://github.com/sheremet-va "><code>@sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/6861 ">vitest-dev/vitest#6861</a>
<a href="https://github.com/vitest-dev/vitest/commit/0d67f04b "><!-- raw
HTML omitted -->(0d67f)<!-- raw HTML omitted --></a></li>
<li>Support non US key input - by <a
href="https://github.com/hi-ogawa "><code>@hi-ogawa</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/6873 ">vitest-dev/vitest#6873</a>
<a href="https://github.com/vitest-dev/vitest/commit/5969d8da "><!-- raw
HTML omitted -->(5969d)<!-- raw HTML omitted --></a></li>
</ul>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="c9e59a089d "><code>c9e59a0</code></a>
chore: release v2.1.9</li>
<li><a
href="d69cc75698 "><code>d69cc75</code></a>
bump: 2.1.8</li>
<li><a
href="81ed45b3a4 "><code>81ed45b</code></a>
chore: release v2.1.7</li>
<li><a
href="b936702deb "><code>b936702</code></a>
bump: 2.1.6</li>
<li><a
href="32f23b98b4 "><code>32f23b9</code></a>
chore: release v2.1.5</li>
<li><a
href="0ad2cdcaae "><code>0ad2cdc</code></a>
chore(deps): update all non-major dependencies (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8/issues/6890 ">#6890</a>)</li>
<li>See full diff in <a
href="https://github.com/vitest-dev/vitest/commits/v2.1.9/packages/coverage-v8 ">compare
view</a></li>
</ul>
</details>
<br />
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/compiler-explorer/compiler-explorer/network/alerts ).
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-02-18 10:34:39 -06:00
Mats Jun Larsen
7a78ecaeaa
Remove dependency on prettier ( #7390 )
...
I must've missed this in the biome PR somehow :)
2025-02-14 09:38:17 +09:00
Mats Jun Larsen
dc5f3cf43b
Deduplicate npm scripts used for CI ( #7356 )
...
There's nothing special with these anymore. They are the same both
locally and in CI now, because our Vitest and Biome setups don't behave
differently there
2025-02-04 03:28:21 +09:00
Mats Jun Larsen
5eea63328f
Migrate to Biome for linting and formatting ( #7033 )
2025-02-02 17:54:31 +00:00
Mats Jun Larsen
fb7b592025
Replace supervisor with tsx --watch ( #7212 )
...
Works just like before with reloading of properties. See demo GIF

2024-12-12 08:40:19 +09:00
Mats Jun Larsen
d9093faf18
Replace ts-node with tsx ( #7205 )
...
Migrates tooling to TSX (as advised by nodejs) until we are on Node 22
where we can `--watch --experimental-strip-types`
2024-12-10 00:18:46 +09:00
Matt Godbolt
63c2ce7808
Reimplement shell splitting ( #7202 )
...
Takes the bones of shell-split and makes it handle lots of situations
without throwing exceptions, and using modern-ish typescript/javascript
stuff.
Adds lots more tests too.
Removes unneeded package dependencies.
Changes from before: escaping a pipe character `moo \\# hello` would
drop the `# hello` part (?) that is, I updated the test that did:
```ts
expect(splitArguments('hello \\#veryfancy etc')).toEqual(['hello', '\\']);
```
to be the more sane expectation of `['hello', '\\#veryfancy']`.
Everything else I could think of (unterminated strings, escapes etc) I
kept the same. And added tests for.
Hopefully addresses #7201 without breaking any reasonable use of the
code (though @partouf raises fair concerns about this.)
2024-12-09 04:20:38 -06:00
Mats Jun Larsen
7ae92831d2
Bump path-to-regexp and express ( #7191 )
...
Manual application of #7187 in order to get secrets or something? deploy
failed anyways
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-12-07 01:59:08 +09:00
Mats Larsen
0d7d5dfc43
Remove unused body-parser dependency
2024-12-07 01:50:28 +09:00
Matt Godbolt
e2957912a6
Minor package bumps ( #7065 )
2024-11-05 07:46:34 -06:00
Mats Jun
9e1a42288b
Remove legacy test dependencies ( #7034 )
...
Replaces sinon mocks with cy and removes deep-equal-in-any-order
Removes any old chai imports
2024-10-28 18:12:58 +09:00
Ofek
63dd5e35a5
Various tsifications ( #7025 )
2024-10-27 15:28:38 +02:00
Ofek
3fc9fcabd2
Add types to remote-execution files ( #7024 )
2024-10-26 18:26:56 +02:00
Patrick Quist
4fe8397fac
Remote execution ( #6700 )
2024-10-26 17:42:22 +02:00
Ofek
c1985d64a1
Tsification binge #7 ( #6974 )
2024-10-25 12:19:04 +03:00
Mats Jun
97ba49ee2e
Move tooling dependencies from runtime to dev ( #7004 )
...
_No functional change intended_
Moved husky and some eslint plugins from `dependencies` to
`devDependencies` which should slim down the runtime dependencies
significantly since eslint is pretty heavy
2024-10-24 15:50:10 +09:00
Mats Jun
33b2d50b00
Remove c8 coverage reporter ( #7006 )
2024-10-23 19:01:33 +02:00