v1.5.0
版本发布时间: 2023-03-28 20:57:44
nytimes/library最新发布版本:v1.5.1(2023-03-30 05:42:07)
This minor release includes a number of security improvements, adds support for arbitrary path prefixes, and deprecates support for versions of Node older than v14.
Breaking Changes ⚠️
- Library no longer supports versions of node older than v14. The default development target and all distributed builds now use Node v18.
Updates
- Update to only support LTS node versions by @afischer in https://github.com/nytimes/library/pull/356
- Support arbitrary path prefix by @SMores in https://github.com/nytimes/library/pull/358
This update also includes all security updates made in v1.4.3, which is the last version of Library to support Node <v14.
Changes from v1.4.3
- Bump qs from 6.5.2 to 6.5.3 by @dependabot in https://github.com/nytimes/library/pull/332
- Bump express from 4.17.1 to 4.17.3 by @dependabot in https://github.com/nytimes/library/pull/333
- Bump ejs from 3.1.5 to 3.1.7 by @dependabot in https://github.com/nytimes/library/pull/337
- Bump pathval from 1.1.0 to 1.1.1 by @dependabot in https://github.com/nytimes/library/pull/309
- Bump minimist from 1.2.5 to 1.2.7 by @dependabot in https://github.com/nytimes/library/pull/341
- Set up github actions by @afischer in https://github.com/nytimes/library/pull/345
- Bump http-cache-semantics from 4.1.0 to 4.1.1 by @dependabot in https://github.com/nytimes/library/pull/344
- Bump json-schema and jsprim by @dependabot in https://github.com/nytimes/library/pull/339
- Bump decode-uri-component from 0.2.0 to 0.2.2 by @dependabot in https://github.com/nytimes/library/pull/331
- Bump json5 from 1.0.1 to 1.0.2 by @dependabot in https://github.com/nytimes/library/pull/335
- Bump cookiejar from 2.1.2 to 2.1.4 by @dependabot in https://github.com/nytimes/library/pull/336
- Bump ajv from 6.12.2 to 6.12.6 by @dependabot in https://github.com/nytimes/library/pull/310
- Bump node-fetch from 2.6.1 to 2.6.9 by @dependabot in https://github.com/nytimes/library/pull/347
- Bump jsdom from 16.4.0 to 16.7.0 by @dependabot in https://github.com/nytimes/library/pull/321
- Bump minimatch from 3.0.4 to 3.0.8 by @dependabot in https://github.com/nytimes/library/pull/342
- Bump moment from 2.27.0 to 2.29.4 by @dependabot in https://github.com/nytimes/library/pull/323
- Bump node-sass from 6.0.1 to 7.0.3 by @afischer in https://github.com/nytimes/library/pull/353
- Bump ansi-regex from 4.1.0 to 4.1.1 by @dependabot in https://github.com/nytimes/library/pull/354
- Bump got and nodemon by @dependabot in https://github.com/nytimes/library/pull/352
Full Changelog: https://github.com/nytimes/library/compare/v1.4.3...v1.5.0