Repository navigation
refactor: Bump browserslist from 4.16.6 to 4.29.4 - #228
Conversation
|
🚀 Thanks for opening this pull request! We appreciate your effort in improving the project. Please let us know once your pull request is ready for review. Tip
Note Please respond to review comments from AI agents just like you would to comments from a human reviewer. Let the reviewer resolve their own comments, unless they have reviewed and accepted your commit, or agreed with your explanation for why the feedback was incorrect. Caution Pull requests must be written using an AI agent with human supervision. Pull requests written entirely by a human will likely be rejected, because of lower code quality, higher review effort and the higher risk of introducing bugs. Please note that AI review comments on this pull request alone do not satisfy this requirement. Our CI and AI review are safeguards, not development tools. If many issues are flagged, rethink your development approach. Invest more effort in planning and design rather than using review cycles to fix low-quality code. |
|
Warning Review limit reachedThe included review limit has been reached and this organization has disabled usage-based review continuation. Wait for reviews to reset or ask a billing admin to change After included review limits.
Reviews can continue after your included limit without a manual trigger. An admin must approve usage-based billing. Next included review available in 1 minute. View limit details
Comment |
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## master #228 +/- ##
=======================================
Coverage 95.87% 95.87%
=======================================
Files 23 23
Lines 849 849
=======================================
Hits 814 814
Misses 35 35 ☔ View full report in Codecov by Harness. 🚀 New features to boost your workflow:
|
Closes #221
Bot PR #221 targeted browserslist 4.28.8. browserslist 4.28.9 and 4.29.0 to 4.29.4 were released after that PR was opened, and
npm update browserslistnow resolves to 4.29.4, so this PR upgrades to 4.29.4. This stays within browserslist major version 4, and the parent's^4.14.5range allows it.Security
browserslist is a transitive, development-only dependency (
nyc→istanbul-lib-instrument→@babel/core→@babel/helper-compilation-targets→browserslist).<= 4.28.6, fixed in 4.28.7<= 4.28.6, fixed in 4.28.7Lock File Changes
Only
package-lock.jsonchanges, limited to browserslist and its own dependencies:^2.0.59; declaresengines>=18, compatible with this repository's Node 20, 22 and 24)^3.1.1). In 4.29.4 it comes in through update-browserslist-db, which requires^3.2.0.^3.1.1ranges still accept 3.2.0.nodenextresolution support, and 3.2.0 ships separate ESM and CommonJS TypeScript definitions. Neither release changes runtime behavior.browserslist --update-db; not run by this repository)engines>=6.0.0; not affected by GHSA-w5vr-8v7q-w6rv, which is fixed in 2.11.0)Changes
browserslist 4.16.6 → 4.29.4
caniuse-litewarning text; docs fixes--update-db--update-dbpicocolorsfor color output in--update-db--update-dbfor some pnpm cases--ignore-unknown-versionsCLI optioncoverqueries, and fixed thesince 1970query fornullrelease datesthrowOnMissingoption, fixed ignoringnulldata in< 50% in CN, fixed data parsing inin my stats, fixedyarn.locksupport withintegrity, and fixed the Yarn Berry error message in--update-dbthrowOnMissingtypes--helpoutputlast 2 node versionsandlast 2 node major versionsqueriespackage.funding; docs fixespackage.fundingURL formatdeadbrowsersmobileToDesktopdeadand removed it fromdefaults, addedbrowserslist.parse()to get the config AST, moved the--update-dbscript to theupdate-browserslist-dbtool, and fixed Unicode BOM support inpackage.jsonsincequerymobileToDesktop; docs fixeslastqueries for Androidsupportsquery withmobileToDesktop--update-dbto move to the new CLI; docs fixesfully supportsquery and apartially supportsalias for thesupportsquerymobileToDesktopsupportsquery, and fixed shared configs like@company/package/browserslist-configBROWSERSLIST_ROOT_PATHenvironment variablemobileToDesktopwhen caniuse data lags>=query foriosbrowserslist.findConfigFile()helpercaniuse-liteupdate to the outdated data warningcaniuse-litewarning textcover 95% in browserslist-config-mycompany statsquery support--permissionsupportbaseline-browser-mappingdependencybaseline-browser-mappingversion requirementthrowOnMissingwith theextendsqueryBROWSERSLIST_TRACE_WARNINGenvironment variablefirefox >= esrquery support; docs fixes (listed as "4.48.0" in the upstream changelog)baseline-browser-mappinghas its own warningSyntaxErrorregression of 4.28.3>and>=queries (fix: exclude joined range when querying above its upper bound browserslist/browserslist#937)including kaiosin baseline queries (fix: support "including kaios" without downstream browserslist/browserslist#939)orparsing performancenot/and notlogic; implementandas opposite ofnotbrowserslist/browserslist#951)nullusage incover X in Yqueries (Do not add versions without usage data to cover queries browserslist/browserslist#952)The query result changes in this range (IE 11 moved to
deadin 4.21.0, Baidu moved todeadin 4.20.3, and the Firefox ESR data updates) do not affect this repository. The only consumer is@babel/helper-compilation-targets7.13.8, which Babel calls duringnyccoverage instrumentation. It callsbrowserslist.loadConfig({ config, path, env })and thenbrowserslist(queries, { mobileToDesktop: true }).istanbul-lib-instrument4.0.3 runs Babel withconfigFile: falseandbabelrc: falseand sets no targets, and this repository has no browserslist config. SoloadConfigreturnsundefined, and Babel resolves an empty query list with no browser targets. Both APIs keep their signatures from 4.16.6 to 4.29.4. With caniuse-lite 1.0.30001819, the "Browserslist: caniuse-lite is outdated" warning thatnpm run coverageprinted with the 2021 data goes away.Breaking Changes
None
Code Changes Required
None — the upgrade is a drop-in replacement.