You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
chore(deps): update dependency vue-i18n to v11.4.17 - #6034
install is synchronous: app.use(i18n) now throws the errors in install. They were unhandled rejections, which left the app half-installed (and ended Node.js processes without a handler for them), so if app.use(i18n) throws after you update, the install was failing before, too. i18n.install() returns undefined instead of a Promise that never settled in development without the devtools. (#2741)
Legacy API: A regular expression in silentTranslationWarn or silentFallbackWarn now suppresses the warnings for the keys that match it. As an option of createI18n, it suppressed all the warnings, and set to the property, it suppressed the warnings for the keys that did not match it. (#2744)
escapeParameter: The sanitizer now also disables javascript: URLs in xlink:href, and turns <base>, <animate> and <set> in translations into text. SVG animations with <animate> or <set> in HTML messages no longer run while escapeParameter (escapeParameterHtml in the Legacy API) is enabled. (#2756) See GHSA-473g-cvf6-mfxj.
What's Changed
🐛 Bug Fixes
fix: make install synchronous like other Vue plugins, so that app.use() throws its errors by @kazupon in #2741
fix: make a regular expression in silentTranslationWarn and silentFallbackWarn suppress the warnings for the keys that match it by @kazupon in #2744
🔒 Security Fixes
fix(shared): neutralize xlink:href, base and SVG animations in sanitizeTranslatedHtml by @kazupon in #2756
📝️ Documentations
docs: describe what missingWarn and fallbackWarn turn off, and how to warn only when no locale has the key by @kazupon in #2745
✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 46.87%. Comparing base (c101250) to head (2a99364).
✅ All tests successful. No failed tests found.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
dependenciesPull requests that update a dependency filejs
0 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
11.4.16→11.4.17Release Notes
intlify/vue-i18n (vue-i18n)
v11.4.17Compare Source
installis synchronous:app.use(i18n)now throws the errors ininstall. They were unhandled rejections, which left the app half-installed (and ended Node.js processes without a handler for them), so ifapp.use(i18n)throws after you update, the install was failing before, too.i18n.install()returnsundefinedinstead of aPromisethat never settled in development without the devtools. (#2741)Legacy API: A regular expression in
silentTranslationWarnorsilentFallbackWarnnow suppresses the warnings for the keys that match it. As an option ofcreateI18n, it suppressed all the warnings, and set to the property, it suppressed the warnings for the keys that did not match it. (#2744)escapeParameter: The sanitizer now also disablesjavascript:URLs inxlink:href, and turns<base>,<animate>and<set>in translations into text. SVG animations with<animate>or<set>in HTML messages no longer run whileescapeParameter(escapeParameterHtmlin the Legacy API) is enabled. (#2756) See GHSA-473g-cvf6-mfxj.What's Changed
🐛 Bug Fixes
🔒 Security Fixes
📝️ Documentations
Full Changelog: intlify/vue-i18n@v11.4.16...v11.4.17
Configuration
📅 Schedule: (in timezone America/New_York)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Never, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.